Huawei EC150 3G USB Modem Unlocking Complete Guide Trusted Method By makeiteasy

Disclaimer: This document is intend to show the way how to unlock a Huawei EC150 USB Modem / or a CDMA Mobile device. Methods presented here are tested on a specific models and wont work or no need to work on all models. Do the unlocking process at your own risk. I am not responsible for any damage cause to the device or loss. For unlocking Huawei EC150 youll need the following Tools & Softwares: 1. DFS 3.3.0.7 - CDMA Reprogram, flashing software.(www.cdmatool.com) 2. IDM UltraEdit v.17.0.XXX (www.ultraedit.com) 3. EC150Update_11.104.04.00.114.B416.exe Firmware Update (Incase you need to update the firmware, Not necessary if you dont want to update) 4. CDMA Workshop 2.7.rar Reprogram, Flashing (www.cdma-ware.com) (www.filecrop.com) 5. EC150 Drivers (to install the device without operators dashboard) 6. Mobile_Partner_11.302.09.01.539_Voice_USSD Dashboard for setting up the connection.

Preface: The Standard freeware and tools that available on the internet wont work on this
device because this device has no IMEI Number instead of that it has a MEID number. So you cannot calculate the unlock code based on an MEID. The Standard methods presented for Huawei USB Modems wont work on this device. You cannot able to update the firmware without SPC Code. So I hereby presented the other way used to read the code from the memory dump.

Finding out the SPC (Service Programming Code) of your device:

1. Plug in your Huawei EC150 device to the PC. 2. I assume that youve already installed the drivers, if youre not done already install the drivers with original software comes with the device. 3. After installing the device the system will auto detect and run the User Interface of your service provider. 4. Just Close the Application, Do not Shutdown the device. (See Fig 1.1)

Fig 1.1

Note: Normally EC150 will connect to the system by using the following 3 COM Ports. a. Modem Device b. Application Interface c. PC UI Interface (this one is used to run the operators application.) We are not going to use the PC UI Interface port here to unlock the device.

5. Install DFS 3.3.0.7 on your PC and disconnect your Internet connection. (If any)
Because the DFS 3.3.0.7 checks for an online account, there is no need to run the DFS online and the demo mode is enough for this process.

Fig 1.2 The DFS User Interface without connecting any device

1. DFS User Interface Explained:

1.1 On top of the Interface you will see a Ports Command button connected ports. to detect the

1.2. After that you see a connection icon to connect or disconnect a specific port. Mouse Roll or Double click on the port you want to connect. 1.3. Below that you see a button named SPC & send SPC codes to the device. used to type

1.4. On the right side of the SPC You see a PWD which is a standard PWD for all devices. Usually 16 digits of Hexadecimal value, you can change it into 00000000000000000 After that you see a CMD which is used to send AT COMMANDS to the device. You can find and use an ATsimulator.ini to know the AT COMMANDS of your device (search the directory where you installed the Service Providers Software.) Note: The AT Commands may vary for each model. Make a Google search for AT Commands.

1.5.

1.7. On the Right side of the application window you see Reset icon which is used to change the mode of the device. a. Offline D Device is offline Dead mode b. Offline A Device is offline Active Mode c. Reset Device will disconnect and will automatically connect again. d. FTM File Transfer Mode (for CDMA Mobile phones) e. Radio on Turn on Radio Frequency f. Radio off - Turn off Radio Frequency g. Power off Device will shutdown (Unplug the device and Plug it Again) h. Data Mode Device will go online. i. Rebuild Restore Device to Factory Settings. 1.8. You can see various Tabs that used to READ, WRITE and Reprogram the Device

1.9.

On below of the application you see a message box which shows you the response of the device & ports.

1.10. After Connecting a port the software will try to retrieve the device information and show it to you on the front panel.

6. Connect the Huawei Mobile Connect - Application Interface Port (See Fig 1.3) 7. Go to Memory Tab and change the Type to CEFS and press Read. The Software started
to read the memory 8. Send a false code (any six digits) to the Device by using the SPC Button.

9. The device will show you an error BAD SPC UNLOCK FAILED and the device will go to
offline for few seconds. During this period the software will read the SPC Code.

10. Immediately Press the Save Buffer Button. (Choose a path to save that memory dump
file)

11. Save that dump file to your hard disk. Most of the case the file size should be 228 KB 12. Open the file with data analyzer and press Analyze 13. Now the Data Analyzer will analyze the data and show you the Results in the result text
box. Youll see the contents in the Data monitoring page.

14. Click on SPC1 and press the memory address listed right to the SPC1.

Fig (1.3)

15. The first six digits is the SPC code of your USB Modem. Note down the ASCII Value.

16. Type it on the SPC and send it to the device (See fig 1.4)

Fig 1.4

17. Now you see the DEVICE UNLOCKED Message on the bottom of the message box.
Now youre Done Unlocking the device. Reprogram the device with other tabs presented on the software.

2. Another Method to Find SPC from Memory Dump Using UltraEdit:

1. Open the dump file with UltraEdit text editor. 2. Find the Hexadecimal string 00 00 00 38 35 6E FF 01 (it will work for other models also).
Other models youve to find out 85n on the ASCII section.

3. The six digit hexadecimal value next to this string is the SPC code. (See fig 2.1)

Fig 2.1 ENJOY SURFING!!!