The THC Hack/Phreak Archives: HOW2CELP.TXT (126 lines) Note: I did not write any of these textfiles. They are being posted from the archive as a public service only - any copyrights belong to the authors. See the footer for important information. ========================================================================== Panasonic EBKJ3500 S/N ---> ESN conversion: Serial # on Phone 1-210900 Delete '1-' 210900 Add 13600262144 13600473044 <-------ESN Built in Monitor (first must be enabled in programming - FCN 2 bit 6) Press F then Alph on KB - shows the following display: WS C P CH 13-0-00313 || | ||Channel Number (4 digits) || | |Xmtr Power attenuation in 4 db steps || | 0=0,1=-4,2=-8,3=-12,4=-16,etc || |Xmtr carrier on/off 1=on || ||SAT Frequency 0=5970,1=6000,2=6030,3=no lock |SAT word synch 1=sync, 0=no sync Programming Plug: Front (Kepad side) of phone _ _ _ O _ _ _ Connector on bottom of phone | | Ground this pin to put into Maint. mode Programming the Panasonic 3500 portable phone Insert Plug (Powers up) *0000# MAINT MODE ;ready to go Program NAM 1 first: *1 NAM1 MODE ;program main NVM 22 01 SIDH ;stores Metro 1's SID 2125551212 02 OWNDL ;phone's number 1 03 PRESYS ;Non-wireline preferred 333 04 IPCH ;Initial paging channel 01 05 ACCOL ;Access overload class 10 06 GIM ;Group Identification Mark 00 07 DLMT ;Dial Limit 10 08 SCM ;0.6 w 832 Channel portable 5165551212 09 SPDL ;Permanently stored (2-4 digits)10 LOCK ;Lock code 11011000 11 FCN 1 01010100 12 FCN 2 11110111 13 FCN 3 Function Bytes: Byte #1 (11 - FCN 1) Bit on off Description 7 1 Local Use 6 1 MIN Mark 5 0 Not used - always 0 4 1 End to end signalling 3 1 Silent incoming call 2 0 Not used - always 0 1 0 Not used - always 0 0 0 Not used - always 0 Byte #2 (12 - FCN 2) Bit on off Description 7 0 Not used - always 0 6 1 Built in Monitor 5 0 Automatic Lock 4 1 Full Lock 3 0 Not used - always 0 2 1 A/B system select* 1 0 Preferred system only* 0 0 Home system only* * choose only one! Byte #3 (13 - FCN 3) Bit on off Description 7 1 Received call indicator 6 1 DTMF Duration (0=95 mSec) 5 1 Send Lock 4 1 Dial Lock 3 0 Not used - always 0 2 1 Total timer #1 (cannot be reset!) 1 1 Total timer #2 (can be reset) 0 1 Individual call timer (Check Everything with n!) STO** Stores and returns to MAINT MODE Note: STO## erases scratch pad, returns to MAINT MODE Program NAM 2 next: *2 NAM2 MODE ;program #2 NVM 18 01 SIDH ;stores SID 3015551212 02 OWNDL ;phone's other number 0 03 PRESYS ;wireline preferred 334 04 IPCH ;Initial paging channel 00 05 ACCOL ;Access overload class 10 06 GIM ;Group Identification Mark (Check Everything with n!) STO** Stores and returns to MAINT MODE Note: STO## erases scratch pad, returns to MAINT MODE ;Exits maintenance mode