Unlocking the e398 2001–2004 Motorola Razr v3 user password from using x86 hardware, hacking, and hard-to-find software tools.

Masq31 - Benjamin Giordano
3 min readJan 11, 2024

--

I have worked with some vintage laptop technology over the holiday season as a fun self-driven hobby project. Notably I assembled components together to rebuild a 32 bit Pentium based Windows XP laptop. The device supports the old CardBus standard and required a CD for OS installation which required some waiting for the right parts. It was plenty capable of running Windows XP in its time and it still has these capabilities to this day. Driver support for the device was delegated to HP under the Compaq Evo N620c support page. I was able to get the drivers for my N610c working to my delight.

Since the system uses x86 or 32-bit architecture, I found another project to build into this. Older Motorola devices built off the e398 CPU schema are popular mods. The Motorola Razr v3 was one of the most popular and remains a good “dumbphone” choice for those who can live with 2g alone. However, many of these devices were thrown away or recycled as E-Waste. Fortunately, I managed to get a hold of one. Unfortunately, I found that this device had a passcode lock and a screen that said something like “Enter Unlock Password” asking for a 4 digit number.

Motorola has made drivers available for their newer phones to work on x64 based machines, but many of the toolsets available for these devices only work for 32-bit operating systems. With a Windows XP SP3 laptop and resources from places like e398mod.com, I was able to determine the next course of action. I found out that p2k standards had a number of community modding tools created for the phone in its hayday, and some of these still work as alternative drivers. I’ll leave the following links below for the tools used as well as details on where in the SEEM to look. If you know the device’s phone number, often the last 4 digits will be the pin number, which would avoid the painstaking work of figuring out the PIN from the chip memory.

Other resources for reference: Pelicanmaster’s howardforms post on p2k seem editing — https://www.howardforums.com/showthread.php/947130-Step-by-step-Idiots-Guide-to-SEEM-editing-the-Motorola-V3M

Tools used:

· Driver uninstall/reinstall tool — https://www.bvrp.com/Customers/Motorola/DriverTool.zip

· P2k commander — http://www.e398mod.com/content/view/60/28/

· Advanced p2k Seem viewer — https://mark.cdmaforums.com/Files/P2KSeem4V710.zip

· Micro USB cable

Instructions:

· Run the driver uninstall and reinstall tool and wait for the process to complete.

· Launch p2k commander, do not restart the program, wait for the drivers to install.

· Launch Advanced seem viewer.

· Connect the phone to the pc via the micro USB cable and turn the power on.

· The device should say ‘connected’ in the bottom left window indicator.

· In seem viewer, change the bytes section in the right middle window to 0.

· Change the seem to 2784 in the lower window and press enter.

· (If that doesn’t work try 0074–0076).

· You should be able to view the SEEM data and the pin for unlocking the device will be onscreen.

· Enter the pin into the phone.

If these steps fail, try again from the start. If you find that a security code prompt comes up asking for 6 digits, try “000000”.

If these tools are taken down I’ll try and provide a link for these rehosted someplace else.

That’s all for now. Thanks for reading. Stay Safe.

--

--