MW3027 locked - remember field 5709...

[Fred1234vF]

Hello,

I have an old SAGEM MW3027 that I want to unlock (OK, let's say very old, but at least you can figure out that I do not need this unlock for commercial purpose... ).

I have some difficulties to find a relevant calculator / unlocker because this phone is quite old and resources on the internet have gone, but reading on forum archive it seems it was done in the past by user on that forum ; so maybe some of you have kept the appropriate tools required to make the unlock calculation.
Hope you still have these tools, or may be can you please tell me which one I could use to use nowadays...

I have NO datacable and for the moment I do not intend to buy one.

I have access to the sevice menu.

Here are the FIELD info :

Hashtable : unknown

Sagem MW3027
monitormode : *22663262336
ver : DF4,51 - 260401 1553
0 : 083A23223185502039
5709 : 918D380C
253 : A972DF3EFBAE9FFD23B144D2
191 : E80A6CBA
251 : E80A6CBA
252 : E8724AF8F3720B9E6DA85BA8C6E617
5251 : 9B7261A610DF9C052D3F
16128 : 3200
5252 : A37235A06B9CCE6CB32A
16129 : 0A00

Can you please give me some support ?

I would be know wich calculator you use.

Thanks in advance !!

[abdoune]

If your hashtable is 21 then your codes are :
locklevel 0x00 code: 28504116-82
locklevel 0x40 code: 39207269-39
Salam

[Fred1234vF]

Hello Abdoune !
it works ! I entered LL00 and it works fine.
Thank you very much for your help !

I have 2 questions :
- what should I do with LL40 ?
- which calculator did you use to calculate the code.

Once again thank you for your help !!

[Fred1234vF]

Well in fact if you could explain me the difference betweenn LocLevel 00 and 40. I do not find information on this on the internet.
Thanks !

[abdoune]

our forum is big caverne of ali baba héhéhé
spend time and search all are explained search in archive ... there's big difference between things that you found by your self and things that it comes to you by help of others
anyway search for sagem Id calculator by chris922 read the help
Salam

[Fred1234vF]

With all the respect I have for you I have to tell I a quite desqpointed because this calculator is the one I used in the version 4.2.2.
It's maybe not the good version but was already quite difficult to find.
The information that was for me unknown was the hastable, because without it you can make 13 run per mode.
I get no result with any of the fast modes.
Based on your answer I now know that ashtable is 21, and using that ashtable I still get no results. "calculation failed, perhaps you entered wrong data...". Yes, perhaps...
still based on your answer (less than one hour after my post) I suppose you used one of the fast mode, so I won't try the 80hours mode...

Also regarding archive, It is not a hazard if I come to post in that forum.
I have already spend some times on it, but it is a very difficult task to find relevant information on what we can call old technologies. Internet does not have a so good memory... just try : look for "errorlevel +MW" on google : 100% of the page will be unlocking code request, and the few technical information is just diluted in these pages... one of the reason for that is :
- people how knows do not answer directly but prefer answer "just look for more information"
- most of the people who don't know comes on these forum at these time were in fact not interested by technologies but only by getting quickly an unlock code.
- the few people who don't know but wanted to know could look for ressources available at these time, ressources that have dissapeared today...
It's a pity because knowledge is not consolidated and finally lost.

But as written in the beginning of my post, all this is related to old technologies, so who cares about that nowadays...

OK so thanks you for the unlock code. I know that I had the right calculator but do not know why it didn't work. That's it !

Bonne chance pour la suite !
Salam

[abdoune]

You haven't read the archive anyway to get codes you need Id and to find Id you need calculator ,put the imei and corresponding field crypted and uncrypted field (see the help in sagem id cal by chris922) select the hashtable and appropriate calculation corresponding to your model and firmware example firme like xx4,5x the id is mostly between range 033170000000 and 033171ffffff anyway select the second calculation from 033160000000..033179ffffff to find for sure the Id
Salam

[Fred1234vF]

OK so I have a better understanding of why it doesn't work : the procedure described is exactly what I did since the beginning. The problem is probably that v4.2.2 is NOT able to calculate ID for mobile 4,5.
In the menu there is only reference to 3,5 models !
there must be another version but I didn't find it on the net. Alll version find are for 4,6 mobile and then need data cable to read ID

by the way :
- I am still interested to understand difference between errorlevel 0x00 and 0x40.
- I would like to know how you proceed to make a search in the archive.
only 4252 posts on Infineon C16X M51 & ARM7 M52 BASED [Archive] GSM-Forum...
The only posts I read in archive before I decided to post here have been find using google...

Hope you can give me a last chane and help me on these last 2 questions... ;-)

[abdoune]

Originally Posted by Fred1234vF

OK so I have a better understanding of why it doesn't work : the procedure described is exactly what I did since the beginning. The problem is probably that v4.2.2 is NOT able to calculate ID for mobile 4,5.
In the menu there is only reference to 3,5 models !
there must be another version but I didn't find it on the net. Alll version find are for 4,6 mobile and then need data cable to read ID

Originally Posted by abdoune

You haven't read the archive anyway to get codes you need Id and to find Id you need calculator ,put the imei and corresponding field crypted and uncrypted field (see the help in sagem id cal by chris922) select the hashtable and appropriate calculation corresponding to your model and firmware example firme like xx4,5x the id is mostly between range 033170000000 and 033171ffffff anyway select the second calculation from 033160000000..033179ffffff to find for sure the Id

man read archives thread by thread and take notes all are in archive
Salam

[Fred1234vF]

OK, thank you for having shared informations !

[vozice_09]

- I am still interested to understand difference between errorlevel 0x00 and 0x40.

- all sagem phones use two lock levels (but if I know - there can be more levels). Phones have lock level 01 and 41. If you try decrypt (you can use Sagem PHP encrypter or old Chris sagem utils) your field 191 (or 251) you get plain value 41. If you want unlock phone you have can encrypt value 40 and crypted value write into field 191 and 251 (or convert this code to decimal and insert into simlock menu). For lock level 00 - you can encrypt value 00 and put it to 191 and 251.

From encrypter.the.cz:
Phone Info
MODEL: MW 3027
IMEI: 33222135805029-3

Lock and unlock codes
Code for level 01: 28253404-77 (new field 191/251: a867463d)
Code for level 05: 28885005-53 (new field 191/251: ac2b0549)
Code for level 41: 38929973-06 (new field 191/251: e80a6cba)
Code for level 00: 28504116-82 (new field 191/251: a9e5d4a2) - unlock code
Code for level 40: 39207269-39 (new field 191/251: e9b18b9b) - unlock code

100% working unlock
All locks levels set to 00 or no restrictions
Field 191 and 251: A9E5D4A2 (00 + 3 bytes checksum)
Field 252: A972DF3EFBAE9EFD98C84CCA98B6AD (0000000000000000000000 + 4 bytes checksum)
Field 253: A972DF3EFBAE9EFD5A074BCA (0000000000000000 + 4 bytes checksum)
Field 5709: 700F4B25 (FF + 3 bytes checksum)

Most used values
All languages in menu:
Field 185: 000000000000
Checksum: A972DF3EFBAE25DA5A074BCA98B6

European languages in menu only:
Field 185: FFFFFFBC0040
Checksum: 568DC57E8324A06E3360A9F3689F

50 records in the phonebook:
Field 16128: 3200
Checksum: 9B7261A610DF9C052D3F

100 records in the phonebook:
Field 16128: 6400
Checksum: CD724285FC0537DF14AD

200 records in the phonebook:
Field 16128: c800
Checksum: 6172329C40C943F5751C

300 records in the phonebook:
Field 16128: 2c01
Checksum: 85731C4F7E065AE4C997

400 records in the phonebook:
Field 16128: 9001
Checksum: 3973F559EAE9E3370D68

10 positions for SMS in the phone:
Field 16129: 0a00
Checksum: A37235A06B9CCE6CB32A

20 positions for SMS in the phone:
Field 16129: 1400
Checksum: BD72A0269DB41002C282

50 positions for SMS in the phone:
Field 16129: 3200
Checksum: 9B7261A610DF9C052D3F

100 positions for SMS in the phone:
Field 16129: 6400
Checksum: CD724285FC0537DF14AD

144 positions for SMS in the phone:
Field 16129: 9000
Checksum: 397275433AFA87219690

Phone configuration (best variant for 30xx phones):
Field 16140: CF0C064F88510FDCFAE7EFFFFFFFFFFFFFFFFFFFFFFFFFFF00 00000000000000
Checksum: 667EA1001CFD9CB6E7D9F2FE91EAB482A5D06F557A7B259470 206B37D77C197989096D359739F4A7

If you want more info about unlock or eeprom... ask here :-)

[wahablepirate]

help unlock sagem my X3-2


Phone information: 504681117223 JA3,JB: 151203 1723
Field 0: 083A25680000651756
Field 5709:
Hashtable 22
Simlockdata for to:
Code for monitormode: *226632623X0 X is a number from 0-9

[abdoune]

Originally Posted by wahablepirate

help unlock sagem my X3-2


Phone information: 504681117223 JA3,JB: 151203 1723
Field 0: 083A25680000651756
Field 5709:
Hashtable 22
Simlockdata for to:
Code for monitormode: *226632623X0 X is a number from 0-9

Field 5709 is crypted can't use calc to find code,box like smti or sagem jtag can do.
Salam