sagem mw3026 need eeprom - GSM-Forum

pmar_kpj · 01-11-2010, 13:19

Hi!
my sagem mw3026 is dead

Firmware: 310151922467
Type: DF4,5F: 1922
Date: 15-10-01

i need a backup eeprom for smgdoc !

Thank's

vozice_09 · 01-14-2010, 08:37

Quote:

Originally Posted by pmar_kpj

Hi!
my sagem mw3026 is dead

Firmware: 310151922467
Type: DF4,5F: 1922
Date: 15-10-01

i need a backup eeprom for smgdoc !

Thank's

It's a same firmware which you want...
(file df45f_neznama_mw3026.bin.txt rename to df45f_neznama_mw3026.bin (gsmforum not allow upload *.bin directly))

pmar_kpj · 01-15-2010, 19:45

Hi!
mw3026 my flashing when power is on and is imposible to connect with this phone. (is not posible to entry in hotline menu!)

I connected only with 30xx INFINEON and I read only this field:

Field 3 (1 bytes) 9B
Field 19 (1 bytes) 33
Field 140 (9 bytes) 08 29 62 01 41 01 24 91 14
Field 171 (1 bytes) 33
Field 196 (1 bytes) 00
Field 197 (1 bytes) 01
Field 201 (6 bytes) 28 00 00 00 28 00
Field 998 (2 bytes) FF 02
Field 4100 (10 bytes) 18 49 05 05 00 11 05 12 10 01
Field 16148 (4 bytes) 00 00 00 00
Field 16181 (16 bytes) 17 00 00 00 62 04 00 00 01 00 00 00 1E 15 00 00
Field 16185 (2 bytes) 35 3F
Field 16192 (1 bytes) 12
Field 16203 (2 bytes) 00 05

how reprogram the EEPROM?

thank's

vozice_09 · 01-15-2010, 19:49

use sagem doctor. But you must first set speed communications to fix speed. Use astu.exe and make log. it set speed to 19200. after it start sagem doctor, choose com, set speed to 19200 and try read any field

pmar_kpj · 01-15-2010, 20:03

sagem doctor and astu not connected with my phone!

phone show the sagem logo and after 3 s in restarted! led's not flashing!
only LCD!

only 30XX InfineonV2.exe connected!

another ideia ?

thank's

pmar_kpj · 01-17-2010, 16:32

I have a question:

for model DF4, 5F length of the field 5250 must have 32 or 28 byte?

now the phone has 32 byte in field 5250 !

I do not know how to check the protected fields?

5251 - 16128
5252 - 16129
5253 - 16140
5254 - 16141
5255 - 16178
5256 - 185
5257 - 227
5258 - 268
5259 - 5120
5260 - 995

or

5251 - 16128
5252 - 16129
5253 - 16140
5254 - 16141
5255 - 16177
5256 - 16178
5257 - 185
5258 - 227
5259 - 268
5260 - 5120
5261 - 5798
5262 - 995

PhoneID= 0331703D85EB
Phone information: 934561270121 DF4,5F: 151001 1922
Field 0: 083A23033425352214
Field 5709: AE7B402A
Hashtable 22
Provider: 208-01

Thank's for any ideia!

vozice_09 · 01-17-2010, 19:20

Length 5250 depend on list of protected fields.
if you want know protected fields post here field 5250.

pmar_kpj · 01-17-2010, 20:10

this is the original eeprom get_eeprom.txt

phone say 'sim missing' with sim.

with this value for eeprom get_eeprom_dupa_ce_a_mers_odata.txt the phone work on single time. after restart say 'sim missing'!

get_eeprom_17_01_2010.txt is currently eeprom value !

the infineon say now:

Checking the IMEI
...OK
Sorry, this does not work for this phone, perhapes theres an error in field 5250

thank's

vozice_09 · 01-18-2010, 07:29

Phone Info
MODEL: MW 3026
IMEI: 33230435253224-1

Lock and unlock codes
Code for level 01: 24965925-99 (new field 251: 94cefad7)
Code for level 05: 24174769-36 (new field 251: 9017c548)
Code for level 41: 35641207-54 (new field 251: d4702ab2)
Code for level 00: 25057196-81 (new field 251: 955a3f81) - unlock code
Code for level 40: 35742145-11 (new field 251: d50a2f6f) - unlock code

100% working unlock
All locks levels set to 00 or no restrictions
Field 191 and 251: 955A3F81 (00 + 3 bytes checksum)
Field 252: 95D5724D208F5F2E2E20597AD62221 (0000000000000000000000 + 4 bytes checksum)
Field 253: 95D5724D208F5F2EAE07747A (0000000000000000 + 4 bytes checksum)
Field 5709: 4FF897FE (FF + 3 bytes checksum)

vozice_09 · 01-18-2010, 07:29

List of protected fields
5251 - 16128
5252 - 16129
5253 - 16140
5254 - 16141
5255 - 16177
5256 - 16178
5257 - 185
5258 - 227
5259 - 268
5260 - 5120
5261 - 5375
5262 - 995
Checksumed fields list: 16128, 16129, 16140, 16141, 16177, 16178, 185, 227, 268, 5120, 5375, 995

vozice_09 · 01-18-2010, 07:43

Checksums are OK.

Try set field 268 to 0000 and 5259 to 95D53F815B671080AE07
(make changes at one time - not restart after change first field)

pmar_kpj · 01-23-2010, 20:17

I set field 268 to 0000 and 5259 to 95D53F815B671080AE07
but not work!

thank's!

**...:::::NP™:::::...** · 01-24-2010, 13:40

Quote:

Originally Posted by pmar_kpj

I set field 268 to 0000 and 5259 to 95D53F815B671080AE07
but not work!

thank's!

Yes Brother any way that It not work

vozice_09 · 01-24-2010, 17:01

Quote:

Originally Posted by pmar_kpj

I set field 268 to 0000 and 5259 to 95D53F815B671080AE07
but not work!

thank's!

Now you need set 5375 to zeroes and remove it from protected list... tomorrow I give you info

vozice_09 · 01-25-2010, 08:20

make new eeprom backup and after it make this:

set field 5250 to:
95EA73BB19FEA436E67A6A2817114E234B79CE5B835B436895 272E967DE4C9F3
-- it removes 5375 from protected list

set length of field 5261 to 10 bytes and set value
53 C5 48 15 4D 9B B3 9E F3 BE

set field 268 to 00 00

set 5259 to
95D53F815B671080AE07

restart phone... send me thank you :-)

01-11-2010, 13:19	#1 (permalink)
pmar_kpj Insane Poster Join Date: Sep 2005 Age: 50 Posts: 62 Member: 177221 Status: Offline Thanks Meter: 0	sagem mw3026 need eeprom Hi! my sagem mw3026 is dead Firmware: 310151922467 Type: DF4,5F: 1922 Date: 15-10-01 i need a backup eeprom for smgdoc ! Thank's

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Sagem MW3026 - how to read eeprom field 0?	panv	Infineon C16X M51 & ARM7 M52 BASED	9	07-19-2004 13:31
SAGEM MW3026 need help immeadiately	TheMagicMan	Infineon C16X M51 & ARM7 M52 BASED	3	09-23-2002 08:20
NEED UNLOCK KODE Sagem Mw3026	RUM	Phone Unlocking Codes & Maps	2	09-01-2002 13:36
Need Code For Sagem Mw3026	venciuzunov	Phone Unlocking Codes & Maps	0	09-01-2002 02:39
I need soft by Karlo for Sagem mw3026	Sedy	Infineon C16X M51 & ARM7 M52 BASED	3	01-23-2002 14:21

01-15-2010, 19:45	#3 (permalink)
pmar_kpj Insane Poster Join Date: Sep 2005 Age: 50 Posts: 62 Member: 177221 Status: Offline Thanks Meter: 0	Hi! mw3026 my flashing when power is on and is imposible to connect with this phone. (is not posible to entry in hotline menu!) I connected only with 30xx INFINEON and I read only this field: Field 3 (1 bytes) 9B Field 19 (1 bytes) 33 Field 140 (9 bytes) 08 29 62 01 41 01 24 91 14 Field 171 (1 bytes) 33 Field 196 (1 bytes) 00 Field 197 (1 bytes) 01 Field 201 (6 bytes) 28 00 00 00 28 00 Field 998 (2 bytes) FF 02 Field 4100 (10 bytes) 18 49 05 05 00 11 05 12 10 01 Field 16148 (4 bytes) 00 00 00 00 Field 16181 (16 bytes) 17 00 00 00 62 04 00 00 01 00 00 00 1E 15 00 00 Field 16185 (2 bytes) 35 3F Field 16192 (1 bytes) 12 Field 16203 (2 bytes) 00 05 how reprogram the EEPROM? thank's

01-15-2010, 19:49	#4 (permalink)
vozice_09 No Life Poster Join Date: Jul 2002 Location: Czech Republic Age: 45 Posts: 505 Member: 13439 Status: Offline Thanks Meter: 14	use sagem doctor. But you must first set speed communications to fix speed. Use astu.exe and make log. it set speed to 19200. after it start sagem doctor, choose com, set speed to 19200 and try read any field

01-15-2010, 20:03	#5 (permalink)
pmar_kpj Insane Poster Join Date: Sep 2005 Age: 50 Posts: 62 Member: 177221 Status: Offline Thanks Meter: 0	sagem doctor and astu not connected with my phone! phone show the sagem logo and after 3 s in restarted! led's not flashing! only LCD! only 30XX InfineonV2.exe connected! another ideia ? thank's

01-17-2010, 16:32	#6 (permalink)
pmar_kpj Insane Poster Join Date: Sep 2005 Age: 50 Posts: 62 Member: 177221 Status: Offline Thanks Meter: 0	I have a question: for model DF4, 5F length of the field 5250 must have 32 or 28 byte? now the phone has 32 byte in field 5250 ! I do not know how to check the protected fields? 5251 - 16128 5252 - 16129 5253 - 16140 5254 - 16141 5255 - 16178 5256 - 185 5257 - 227 5258 - 268 5259 - 5120 5260 - 995 or 5251 - 16128 5252 - 16129 5253 - 16140 5254 - 16141 5255 - 16177 5256 - 16178 5257 - 185 5258 - 227 5259 - 268 5260 - 5120 5261 - 5798 5262 - 995 PhoneID= 0331703D85EB Phone information: 934561270121 DF4,5F: 151001 1922 Field 0: 083A23033425352214 Field 5709: AE7B402A Hashtable 22 Provider: 208-01 Thank's for any ideia!

01-17-2010, 19:20	#7 (permalink)
vozice_09 No Life Poster Join Date: Jul 2002 Location: Czech Republic Age: 45 Posts: 505 Member: 13439 Status: Offline Thanks Meter: 14	Length 5250 depend on list of protected fields. if you want know protected fields post here field 5250.

01-18-2010, 07:29	#9 (permalink)
vozice_09 No Life Poster Join Date: Jul 2002 Location: Czech Republic Age: 45 Posts: 505 Member: 13439 Status: Offline Thanks Meter: 14	Phone Info MODEL: MW 3026 IMEI: 33230435253224-1 Lock and unlock codes Code for level 01: 24965925-99 (new field 251: 94cefad7) Code for level 05: 24174769-36 (new field 251: 9017c548) Code for level 41: 35641207-54 (new field 251: d4702ab2) Code for level 00: 25057196-81 (new field 251: 955a3f81) - unlock code Code for level 40: 35742145-11 (new field 251: d50a2f6f) - unlock code 100% working unlock All locks levels set to 00 or no restrictions Field 191 and 251: 955A3F81 (00 + 3 bytes checksum) Field 252: 95D5724D208F5F2E2E20597AD62221 (0000000000000000000000 + 4 bytes checksum) Field 253: 95D5724D208F5F2EAE07747A (0000000000000000 + 4 bytes checksum) Field 5709: 4FF897FE (FF + 3 bytes checksum)

01-18-2010, 07:29	#10 (permalink)
vozice_09 No Life Poster Join Date: Jul 2002 Location: Czech Republic Age: 45 Posts: 505 Member: 13439 Status: Offline Thanks Meter: 14	List of protected fields 5251 - 16128 5252 - 16129 5253 - 16140 5254 - 16141 5255 - 16177 5256 - 16178 5257 - 185 5258 - 227 5259 - 268 5260 - 5120 5261 - 5375 5262 - 995 Checksumed fields list: 16128, 16129, 16140, 16141, 16177, 16178, 185, 227, 268, 5120, 5375, 995

01-18-2010, 07:43	#11 (permalink)
vozice_09 No Life Poster Join Date: Jul 2002 Location: Czech Republic Age: 45 Posts: 505 Member: 13439 Status: Offline Thanks Meter: 14	Checksums are OK. Try set field 268 to 0000 and 5259 to 95D53F815B671080AE07 (make changes at one time - not restart after change first field)

01-23-2010, 20:17	#12 (permalink)
pmar_kpj Insane Poster Join Date: Sep 2005 Age: 50 Posts: 62 Member: 177221 Status: Offline Thanks Meter: 0	I set field 268 to 0000 and 5259 to 95D53F815B671080AE07 but not work! thank's!

01-25-2010, 08:20	#15 (permalink)
vozice_09 No Life Poster Join Date: Jul 2002 Location: Czech Republic Age: 45 Posts: 505 Member: 13439 Status: Offline Thanks Meter: 14	make new eeprom backup and after it make this: set field 5250 to: 95EA73BB19FEA436E67A6A2817114E234B79CE5B835B436895 272E967DE4C9F3 -- it removes 5375 from protected list set length of field 5261 to 10 bytes and set value 53 C5 48 15 4D 9B B3 9E F3 BE set field 268 to 00 00 set 5259 to 95D53F815B671080AE07 restart phone... send me thank you :-)