PDA

View Full Version : need help with a MW 3026 h28



rebel
19-12-2002, 10:26 PM
Can anyone help me with a MW 3026 hash table 28??
Thx

Stopper
21-12-2002, 02:01 PM
With the Ths9-Code you can reach Monitormode 3 at MW3026.
You can read the whole prom and reset unlock counter etc...

The Ths9-Code is

*226632623XY

X is firmware dependend, for DJ3,5C it is 5. For other firmwares you have to try it out...

Y is (the sum of the last 4 digits of the imei) modolo 10
If your IMEI is 35074735247892 - 1 then Y= (7+8+9+2)%10 = 6


Press down arrow then *. It will get you in hot - line menu, go to PROM, reading/writing and read any field you need
-----------------------------------------------------------------------------------------
Read fields: 191,251,252,0,94,231,5251,16128

-----------------------------------------------------------------------------------------
Use calc v3.3 or newer
----------------------------------
Start Chris' software. In the newer versions, there's also an english menu. Enter your field 0 bytewise, seperated by blanks. For example 08 3A 05 ... .
Then you have to enter the number of bytes being entered. Take 15. Then enter all bytes from field 252. Then you have to tell the software how many of these bytes are checksum bytes. Take 4 here. Then you have to enter the uncrypted content of field 252 which is always 41 00 00 00 00 00 00 00 00 00 00 .
Now you have to choose, which calculation you want to take. I'd recommend the 30 h calculation and, if no result was shown, the 120 h one. Good luck!

---------------------------------

If your phone is from D2/Vodafone/Germany, you can use the data as discribed by Daalber (Field 252 and "41 00 00 00 00 00 00 00 00 00 00 00 00 00 00").
If your Phone is from another provider, you have to use a field pair. Coose one of these :-)

16128 <-> 5251
16129 <-> 5252
16140 <-> 5253
16141 <-> 5254
16177 <-> 5255
16178 <-> 5256
185 <-> 5257
227 <-> 5258
268 <-> 5259
5120 <-> 5260
5374 <-> 5261
5375 <-> 5262
5376 <-> 5263
5798 <-> 5264
5908 <-> 5265
995 <-> 5266

So, if you don't know how your Phone is locked, use field 16128 and 5251.

Heres the data, you have to enter:
-Hashtable number
-Field 0
-Fieldlength of the crypted field. If you use field 16128<->5251, you have to enter the length of field 5251. This usually is "10"
-Checksum length of the crypted field. This is "8" for field 5251
-The correspondend uncrypted field (will ask for 10 - 8 = 2 bytes). Here you enter your field 16128. Usually this is "32 00". But look it up in your Phone.
-Then you have to choose the Option for calculation. For dj3,5D, choose the 30 h option. If it fails use 120 h.

Good luck,
Christian
------------------------------

- hash table for 3026 is 28
1.enter field 0
2.enter how many bytes to be read? :15
3.enter field 252 (15 bytes)
4.enter How many bytes are checksum: 4
5.enter 11 bytes: 41 00 00 00 00 00 00 00 00 00 00
and option 4 for calculating about 3 hours.
You receive ID.
------------------------------------------------------------------------------------------

use calc by Lord to generate unlock code and new field 251
------------------------------------------------------------------------------------------

rebel
22-12-2002, 08:47 PM
Thx very much!
I've found the code!!!

hrco
29-12-2002, 10:23 PM
Post here your ID!If you finde.......

unbwogable55
28-02-2003, 01:04 PM
Hi, Do you have any software that can calculate the phone id in the newer firmware of sagem Mw3020?. Pliz help me.

unbwogable55
28-02-2003, 01:09 PM
Hi, i have tried using Sagem id calculator by chris version 4.2. But how do i get uncrypted field and crypted field in my sagem Mw3020.

AmunRe
01-03-2003, 01:14 AM
Try lord calculator 4.9

unbwogable55
01-03-2003, 10:46 AM
hi i have tied using lord 4.90 but it does not support Mw series. It is slightly higher. But this software can get the phone id for all Mw and My phones. The problem is that it is protected by Amardilio software. Can u work around this..

AmunRe
01-03-2003, 11:20 AM
U have tried Lord 4.90 and it didn't work...??
Lord 4.90 is made for hash table 28 and 22 (MW 302X).
Maibe u got the wrong software..
Is the one with armadillo and key generator.
What hash table is u're phone??

unbwogable55
01-03-2003, 01:42 PM
I have the software which was posted here. It was protected by amardilio but there was a keygen posted. My sagem i think is hash table 21. Have you cracked the one i have posted..

AmunRe
01-03-2003, 08:07 PM
For cracking that I need a working key on someone computer and his h/f.
But still working on...
Tell me what software version is u're phone....

AmunRe
01-03-2003, 08:16 PM
try read u're phone with a logger. And see if it works...

unbwogable55
02-03-2003, 12:49 PM
This one just reads 3 dots and brings an error. my phone software version is 307831724506. Good luck man

AmunRe
02-03-2003, 06:45 PM
in that case use Sagem Server-Client([email protected])