I do not know how to get around activation if you are stuck there.

I just figured out the SPC (you do it like all the rest)...

Enable DEV mode:
upupdowndownleftrightleftrightbastart

After enabling DEV mode...
fire up Novaterm and mpt 0d

After connecting using the beez drivers found here @ cdmagurus
connect to the port created under ports in Device Manager...

I tried using CDMA Workshop 2.7 and it works sorta... It wont enter DM mode but it will go offline and allow you to load the PRL after getting the SPC from a memory scan...


I scanned for readable memory using unicdma:

2:17:39 PM : Scanning flash for readable data. Step - 65536 bytes
2:17:39 PM : Unreadable area at 0x00000000
2:17:56 PM : READABLE area at 0x06BA0000
2:17:56 PM : Unreadable area at 0x06BD0000
2:17:56 PM : READABLE area at 0x06BE0000
2:17:58 PM : Unreadable area at 0x07660000
2:21:11 PM : User break at address 0x4FB10000
2:21:11 PM : Scan completed

I then dumped 06BA but that was a bust...
I then dumped 06BE and after a long wait...
I winhexed the file and found the SPC @ 0x070A794A

Hope this helps out someone... Took me forever to scan...