GSM cell phone unlocking

To armmad8:

DIY = Do It Yourself

To McS2oo4:

You mean "... and now New Motorola phones ..."?

Originally Posted by McS2oo4

... and not New Motorola phones V series you can only unlock by codes sending IMEI number to unlock server ...

There are softwares you can download from www.motounlocknow.com, what
it does is to read some info via USB cable from the phone, send it to its
server, and paid users get the unlock code back from the server. No special
hardware or "clip" needed, so sounds like it's generating the unlock code
rather than patching the firmware.

It comes with drivers that the phone will show up in the Device Manager as
"Motorola USB Device" and "Motorola Flash Interface". My question is, is it
possible to read/write the phone's flash image through the driver just like
read/write normal software? (I know very little about embedded programming).
It looks reading is no problem, writing may be not. But still, if we can read
and dump the firmware, it should be possible to crack the unlocking algorithm
the same way as finding a license number. After all, this seems to be what
those "unlock servers" do. Then why hasn't someone done it and put it for
free on the web? Considering the HUGE number of free PC software cracks,
this is odd.

hi truth

a friend of mine did send me a motorola sw that unlock via cable last year i think it's for t191 v6.07... i did try to make a test...
i did try to monitor the port and saw that it's sending the same hex on 5 units of motorola... to unlock it..

regards

It is reading IMEI, PSN, TSP code with this info and algo you generate generates NCK unclock code. Algo is tooo complicated. I have old Sagems (this is actualy from original) algo and it is way way complex to solve by one man...

To "armmad8":
t191 is Motorola but ACER, probubly Motola ownes licence (like Siemens and Bosch, s series like s30 s40 are Bosch!) Unlock sequence is not 5 bytes, 5 bytes is signaling srting then comes responce from phone - eeprom read state OK ack arives sw sends eeprom unlocked state bin, then ack from phone, program then send reset command, phone restarts... unlocked. This is only for t191 and t190 (ACER inside!) Motorola not other model. Similar unlock swquence is for all C3x0 (also ACER inside).

To "truth":
I can send you Sagem algo if you are interested to see how it is done.
Best Regards

I dont think there is any free easy solution to unlock the Motorolla VXX series...I use the smartclip for that and it works fine ..you can check smart-clip.com for more info...

WBR

Surej

the smart-clip saved my phone, it got that the no boot sector error.
i was able to repair it with ease... aldo i got the error inserting a bad sim card from my brit'n.

but the only way to learn is to break some eggs.

anybody know the standard frequency for us sim cards?

[florin_m]

Regarding motorola (new models)
The Lock status is in seems 1c3 (451 decimal) and if is all 0-rd (00 8 times in the field) the simlock is removed. Now this field is write protected if the phone is simlock and can't be writen, but if you write your own bootloader to remove the write protection, you can unlock it.

In motorola is not a algo regarding simlock code and IMEI as you can set up your own simlock code (seems 15d and 15c). Don't forget to swap the nibles so if you wana setup 12345678 you need to write 21436587 in field 15d. In the new one the filed 15d will be encrypted so when u read again u'll noticed that is changed. If phone is locked active, then the 15d and 15c can't be read /write

[EDITJMI: When you have an additional thought, use the EDIT button, don't add another post.]

Regards i have this nokia and i can not find unlock codes, i am from Serbia and it is not suported by those calculators. Any help is wery welcome...