GSM-Forum - View Single Post - MW3027 locked

vozice_09 · 02-02-2012, 07:42

- I am still interested to understand difference between errorlevel 0x00 and 0x40.

- all sagem phones use two lock levels (but if I know - there can be more levels). Phones have lock level 01 and 41. If you try decrypt (you can use Sagem PHP encrypter or old Chris sagem utils) your field 191 (or 251) you get plain value 41. If you want unlock phone you have can encrypt value 40 and crypted value write into field 191 and 251 (or convert this code to decimal and insert into simlock menu). For lock level 00 - you can encrypt value 00 and put it to 191 and 251.

From encrypter.the.cz:
Phone Info
MODEL: MW 3027
IMEI: 33222135805029-3

Lock and unlock codes
Code for level 01: 28253404-77 (new field 191/251: a867463d)
Code for level 05: 28885005-53 (new field 191/251: ac2b0549)
Code for level 41: 38929973-06 (new field 191/251: e80a6cba)
Code for level 00: 28504116-82 (new field 191/251: a9e5d4a2) - unlock code
Code for level 40: 39207269-39 (new field 191/251: e9b18b9b) - unlock code

100% working unlock
All locks levels set to 00 or no restrictions
Field 191 and 251: A9E5D4A2 (00 + 3 bytes checksum)
Field 252: A972DF3EFBAE9EFD98C84CCA98B6AD (0000000000000000000000 + 4 bytes checksum)
Field 253: A972DF3EFBAE9EFD5A074BCA (0000000000000000 + 4 bytes checksum)
Field 5709: 700F4B25 (FF + 3 bytes checksum)

Most used values
All languages in menu:
Field 185: 000000000000
Checksum: A972DF3EFBAE25DA5A074BCA98B6

European languages in menu only:
Field 185: FFFFFFBC0040
Checksum: 568DC57E8324A06E3360A9F3689F

50 records in the phonebook:
Field 16128: 3200
Checksum: 9B7261A610DF9C052D3F

100 records in the phonebook:
Field 16128: 6400
Checksum: CD724285FC0537DF14AD

200 records in the phonebook:
Field 16128: c800
Checksum: 6172329C40C943F5751C

300 records in the phonebook:
Field 16128: 2c01
Checksum: 85731C4F7E065AE4C997

400 records in the phonebook:
Field 16128: 9001
Checksum: 3973F559EAE9E3370D68

10 positions for SMS in the phone:
Field 16129: 0a00
Checksum: A37235A06B9CCE6CB32A

20 positions for SMS in the phone:
Field 16129: 1400
Checksum: BD72A0269DB41002C282

50 positions for SMS in the phone:
Field 16129: 3200
Checksum: 9B7261A610DF9C052D3F

100 positions for SMS in the phone:
Field 16129: 6400
Checksum: CD724285FC0537DF14AD

144 positions for SMS in the phone:
Field 16129: 9000
Checksum: 397275433AFA87219690

Phone configuration (best variant for 30xx phones):
Field 16140: CF0C064F88510FDCFAE7EFFFFFFFFFFFFFFFFFFFFFFFFFFF00 00000000000000
Checksum: 667EA1001CFD9CB6E7D9F2FE91EAB482A5D06F557A7B259470 206B37D77C197989096D359739F4A7

If you want more info about unlock or eeprom... ask here :-)

02-02-2012, 07:42	#11 (permalink)
vozice_09 Freak Poster Join Date: Jul 2002 Location: Czech Republic Age: 34 Posts: 499 Member: 13439 Status: Offline Thanks: 0 Thanked 13 Times in 10 Posts	- I am still interested to understand difference between errorlevel 0x00 and 0x40. - all sagem phones use two lock levels (but if I know - there can be more levels). Phones have lock level 01 and 41. If you try decrypt (you can use Sagem PHP encrypter or old Chris sagem utils) your field 191 (or 251) you get plain value 41. If you want unlock phone you have can encrypt value 40 and crypted value write into field 191 and 251 (or convert this code to decimal and insert into simlock menu). For lock level 00 - you can encrypt value 00 and put it to 191 and 251. From encrypter.the.cz: Phone Info MODEL: MW 3027 IMEI: 33222135805029-3 Lock and unlock codes Code for level 01: 28253404-77 (new field 191/251: a867463d) Code for level 05: 28885005-53 (new field 191/251: ac2b0549) Code for level 41: 38929973-06 (new field 191/251: e80a6cba) Code for level 00: 28504116-82 (new field 191/251: a9e5d4a2) - unlock code Code for level 40: 39207269-39 (new field 191/251: e9b18b9b) - unlock code 100% working unlock All locks levels set to 00 or no restrictions Field 191 and 251: A9E5D4A2 (00 + 3 bytes checksum) Field 252: A972DF3EFBAE9EFD98C84CCA98B6AD (0000000000000000000000 + 4 bytes checksum) Field 253: A972DF3EFBAE9EFD5A074BCA (0000000000000000 + 4 bytes checksum) Field 5709: 700F4B25 (FF + 3 bytes checksum) Most used values All languages in menu: Field 185: 000000000000 Checksum: A972DF3EFBAE25DA5A074BCA98B6 European languages in menu only: Field 185: FFFFFFBC0040 Checksum: 568DC57E8324A06E3360A9F3689F 50 records in the phonebook: Field 16128: 3200 Checksum: 9B7261A610DF9C052D3F 100 records in the phonebook: Field 16128: 6400 Checksum: CD724285FC0537DF14AD 200 records in the phonebook: Field 16128: c800 Checksum: 6172329C40C943F5751C 300 records in the phonebook: Field 16128: 2c01 Checksum: 85731C4F7E065AE4C997 400 records in the phonebook: Field 16128: 9001 Checksum: 3973F559EAE9E3370D68 10 positions for SMS in the phone: Field 16129: 0a00 Checksum: A37235A06B9CCE6CB32A 20 positions for SMS in the phone: Field 16129: 1400 Checksum: BD72A0269DB41002C282 50 positions for SMS in the phone: Field 16129: 3200 Checksum: 9B7261A610DF9C052D3F 100 positions for SMS in the phone: Field 16129: 6400 Checksum: CD724285FC0537DF14AD 144 positions for SMS in the phone: Field 16129: 9000 Checksum: 397275433AFA87219690 Phone configuration (best variant for 30xx phones): Field 16140: CF0C064F88510FDCFAE7EFFFFFFFFFFFFFFFFFFFFFFFFFFF00 00000000000000 Checksum: 667EA1001CFD9CB6E7D9F2FE91EAB482A5D06F557A7B259470 206B37D77C197989096D359739F4A7 If you want more info about unlock or eeprom... ask here :-)