Basic: Learn to make fls files...?

[GSMUnlockDK]

Were do I find links to sites where I can learn to progam (Change?)? The fls files for Nokia? Because I wan't the 3330 ver. 3.40...

/bm

[GSMUnlockDK]

Sorry 4.30... damn...

[Lead]

Look at this example (3310 3.24):

[code] <br />seg000:0027C926 loc_0_27C926 ; CODE XREF: seg000:0027C91Ej<br />seg000:0027C926 CMP R5, #1<br />seg000:0027C928 BNE loc_0_27CA28<br />seg000:0027C92A LDR R0, =0x117789<br />seg000:0027C92C LDRB R0, [R0]<br />seg000:0027C92E LDRB R1, [R6,#0xA]<br />seg000:0027C930 CMP R1, #0<br />seg000:0027C932 BEQ loc_0_27C94C<br />seg000:0027C934 SUB R1, #1<br />seg000:0027C936 CMP R1, #0<br />seg000:0027C938 BEQ loc_0_27C948<br />seg000:0027C93A SUB R1, #1<br />seg000:0027C93C CMP R1, #0<br />seg000:0027C93E BEQ loc_0_27C944<br />seg000:0027C940 MOV R5, #0<br />seg000:0027C942 B loc_0_27C960<br />seg000:0027C944 ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦<br />seg000:0027C944 <br />seg000:0027C944 loc_0_27C944 ; CODE XREF: seg000:0027C93Ej<br />seg000:0027C944 MOV R1, #0xB<br />seg000:0027C946 B loc_0_27C95E<br />seg000:0027C948 ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦<br />seg000:0027C948 <br />seg000:0027C948 loc_0_27C948 ; CODE XREF: seg000:0027C938j<br />seg000:0027C948 MOV R1, #3<br />seg000:0027C94A B loc_0_27C95E<br />seg000:0027C94C ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦<br />seg000:0027C94C <br />seg000:0027C94C loc_0_27C94C ; CODE XREF: seg000:0027C932j<br />seg000:0027C94C LDRB R1, [R4,#0xD]<br />seg000:0027C94E CMP R1, #0x81<br />seg000:0027C950 BNE loc_0_27C95C<br />seg000:0027C952 MOV R1, #7<br />seg000:0027C954 B loc_0_27C95E<br />seg000:0027C954 ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦<br />seg000:0027C956 DCB 0x46 ; F<br />seg000:0027C957 DCB 0xC0 ; L<br />seg000:0027C958 dword_0_27C958 DCD 0x1177(B8) ; DATA XREF: sub_0_27C656+2r<br />seg000:0027C958 ; &lt;-<br />seg000:0027C95C ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦<br />seg000:0027C95C <br />seg000:0027C95C loc_0_27C95C ; CODE XREF: seg000:0027C950j<br />seg000:0027C95C MOV R1, #5<br />seg000:0027C95E <br />seg000:0027C95E loc_0_27C95E ; CODE XREF: seg000:0027C946j<br />seg000:0027C95E ; seg000:0027C94Aj ...<br />seg000:0027C95E MOV R8, R1<br />seg000:0027C960 <br />seg000:0027C960 loc_0_27C960 ; CODE XREF: seg000:0027C942j<br />seg000:0027C960 CMP R0, #3<br />seg000:0027C962 BNE loc_0_27C96A<br />seg000:0027C964 MOV R0, SP<br />seg000:0027C966 LDR R1, =0xA5A5<br />seg000:0027C968 STRH R1, [R0,#8]<br /></pre><hr></blockquote>

and

[code] <br /> ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦<br />seg000:0027CD58 ADD R0, R4, #0<br />seg000:0027CD5A ADD R1, R5, #0<br />seg000:0027CD5C MOV R2, #1<br />seg000:0027CD5E BL sub_0_27CCA4<br />seg000:0027CD62 ADD R0, R4, #0<br />seg000:0027CD64 BL 0x283BF8<br />seg000:0027CD68 POP {R4,R5,PC}<br />seg000:0027CD68 ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦<br />seg000:0027CD6A DCB 0x46 ; F<br />seg000:0027CD6B DCB 0xC0 ; L<br />seg000:0027CD6C dword_0_27CD6C DCD 0x186A0 ; DATA XREF: seg000:0027C9FEr<br />seg000:0027CD70 dword_0_27CD70 DCD 0x11FBE0 ; DATA XREF: seg000:0027CA2Ar<br />seg000:0027CD74 dword_0_27CD74 DCD 0x1177(B8) ; DATA XREF: seg000:0027CA4Cr<br />seg000:0027CD78 dword_0_27CD78 DCD 0x117788 ; DATA XREF: seg000:0027CAFCr<br />seg000:0027CD78 ; seg000:0027CBD0r<br />seg000:0027CD7C dword_0_27CD7C DCD 0x117792 ; DATA XREF: seg000:0027CB76r<br />seg000:0027CD80 dword_0_27CD80 DCD 0x315A60 ; DATA XREF: sub_0_27CCA4+4Cr<br />seg000:0027CD84 ; ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦ ¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦¦<br />seg000:0027CD84 PUSH {R4,LR}<br />seg000:0027CD86 LDR R4, =0x118EB8<br />seg000:0027CD88 LDRB R0, [R4,#4]<br />seg000:0027CD8A CMP R0, #1<br />seg000:0027CD8C BNE loc_0_27CD9A<br />seg000:0027CD8E MOV R0, #0x37<br />seg000:0027CD90 MOV R1, #0<br />seg000:0027CD92 BL 0x24FCAA<br />seg000:0027CD96 MOV R0, #0<br />seg000:0027CD98 STRB R0, [R4,#4]<br /></pre><hr></blockquote>

The byte (B8) at 27C95B should be changed to DA and the byte (B8) at 27CD77 to the value 96.

[Lead]

To find the first byte to change, just search for the string E0 08 7B 61 29 81 D1 04 21 07 E0 03 46 C0. It is the fourth byte after this string.

To find the second byte to change, search for the string BD 30 46 C0 00 01 86 A0. It will be the eighth byte after this string.

Of course, this is valid only for some 3310's and 3330's.

[ 05 November 2001: Message edited by: Lead ]</p>

[masterID]

Hey man!

What kidda editing thet you talkig about?

Sorry but í'm not a hacker, but i interested.

Does have to modify flasher code to flashig that phones or you talking about the flashe file's code?

sorry for my stupidity... <img src="smile.gif" border="0">

[masterID]

Lead!

Can you disassembing flash code? It is great!!!

In this case, please sen me your IDA prog!

Thnx a lot!

[Lead]

Yes, I am able to disassemble the MAD2 code.<br />The IDA 4.04 is too large to be sent via e-mail, it has about 20MB in size.

[majid]

hi,

where to download full ida because the demo version supports only intel processors <img src="wink.gif" border="0">

3310/3330 are based on which processor ?

Best regards<br />MaGdi

[masterID]

Hey guys!!!

You have got the KEY to power over NOKIA's MAD2.

magDI: enough me the demo, I allways use INTEL CPU <img src="smile.gif" border="0"> <br />Where i can download it?

And should you search on the NET for Nokia+3310+inside. You must be found a descript and spartlist for Nokia 3310!!!! <img src="smile.gif" border="0"> ))

[masterID]

Ah, I sily man!

Intel CPU you said is refer to phone and not for the PC <img src="frown.gif" border="0"> <br />Yes I also use Texas MAD2 <img src="smile.gif" border="0">

[GSMUnlockDK]

All right, I was following you until the MAD2!? I get the idea to take a backup and change some digits to some thing else but what program should I use? And should I always change the digits to the same? <br />BTW I own a Flasher Cabel and no BOX...<br />But any help is wanted...

/bm

[majid]

to Lead:<br />where can i get a full version of IDA that supports MAD2 ?

to masterID<br />the demo: <a href="http://www.datarescue.com/idabase/" target="_blank">http://www.datarescue.com/idabase/</a>

Regards,<br />Magdi

[sivaprasad]

Hi ,<br /> What useful changes can we make in flash files either for hacking or other purpose.

--

[Quang Thao]

Hi All<br />Who know what program that Nokia Ltd use to programed they phone.<br />Best regards.

[Lead]

2 maGdi:

<a href="http://trialworld.myetang.com/demos/ida.html" target="_blank">IDA 4.04 Full</a>

Enjoy! <img src="wink.gif" border="0">