Flash & Uem Imei

[mobilemafia]

Originally Posted by zulea

he, he, you are far away back in time with your HDD contents buddy.
Never heard about Knok, Nutzo. It can modify any lock (MCC, MNC, GID1, GID2, MSIN) and have a MOOORE nice interface than win32/dos Dejan based tools. And what is more nice, Knok comes with sources too

Anyway, happy licking Dejan's A S S.

Best regards,
Zulea

history repets
at that time whats the price of your so call Nokey box
to unlock 3310 and new 5110...

people even dont know that your nokey box was doing also a partial flashing until he released nkflasher
say me who is the auther of cheap dct4 china flasher

sorry for bad english
but i am in this bussiness because of dejans dos flasher

so welcome back ***...

[gsminstructor]

For a long long long time ago was this job interested :

Why ?

Cause there was mysticum in this job like eweryone who want to flash a phone have know'n the flash adresses for a good job ( like in Dejan's flasher wich was my first flasher THX DEJAN ) ...

and now there are the programs with write flash and done ...
unlock and done ... one child with 13 can do ewerything when you are showing the procedure for a child he/she can make it alone ....

In this time we can leave from this business only when we are on the TOP when not we must fight with childs for the money ....

[eivoig]

hmmm. its better to have dejan if there is no dejan until now all phones is lock to network.thanks to dejan until now I used dejan flasher for dct 3 and dct 4 imei changer. Lets not think about business let us think about phone xperience.

Mabuhay Dejan.

[german gsm team]

Originally Posted by Dejan Kaljevic

I did not played with "NET MONITOR" on DCT4, but it is not a problem
to make solution.
In phones that do not have "Net Monitor", in flash are all messages,
so there is great probability that it is in PM flag for enabling-disabling "Net Monitor".
You can try to read with Phoenix all PM from phone that have "Net Monitor"
and to write to phone(with same SW version) that don't have "Net Monitor"

B.R.
Dejan

As far as I know reading Full PM from a Netmonitor enabled phone and writing back this Full PM to another phone does not activate netmonitor. This was tried by several people.

There is one exception: RH-13 6340i GAIT GSM/TDMA phone, where FTD can be enabled by PP bit setting and additional UI setting. (PP bit 2 set to 1 and UI setting 18 set to 03)

For RH-12 6230 and RM-1 6630 there is a PP bit for FTD, too. But I don't know if there is an additional UI setting, too. But activating by PP bit alone does not work for these phones, even if you set UI setting 18 to 03 in addition, FTD does not appear on 6230. For 6630 I didn't test it.

But I know that there is a special mcusw flash file that enables FTD in phone without any additional settings. Just flash and FTD will appear. But this flash files aren't publicly available and I don't have any of them.

I assume that there is a switch in mcu sw flash that is enabled or disabled before encrypting the flash file. So if we could decrypt flash file, then we could search for this switch, change it, encrypt flash file again and program it into phone.

[Murat Bekar]

yes can be erased and reprogrammed without opening but as I know there is no 3rd part tool that can do this job !!!
Only original nokia equipments do this.

[g3gg0]

@Luciano:
for which phone models do you have the netmon flashes?

[Dejan Kaljevic]

@gsminstructor

In 1998 there was few thousand people in GSM busines
Today only on this forum are 100.000 people.
There is no lake left, but only crocodiles


@Luciano

About what you are talking?
PC source for DCT-3 flasher was always for free on site:
http://users.net.yu/~dejan/flasher/flasher.html
http://users.net.yu/~dejan/download/src_104.zip

For ruining busines with DCT-3 flasher you have to thanks people
that hacked DCT-3 PIC.
(Look at archive messages of this forum)

This is a main reason why is ask-rpl solution not for sell now.
(Zulea promised to post part2 of Nokia Box)
B.R.


@german gsm team
One solution is to read whole FLASH from phone that have enabled FTD,
than write whole flash to other phone and to recalculate FAID & IMEI FLASH.

[Murat Bekar]

Dejan .
I always offered you to make some new programs to calculate imsi & ki on new cards. IF u have some theory's or solutions u can earn good money from the commercial solution.
Waiting for a reply from u
Best Regards
Murat Bekar

[german gsm team]

Originally Posted by Dejan Kaljevic

@german gsm team
One solution is to read whole FLASH from phone that have enabled FTD,
than write whole flash to other phone and to recalculate FAID & IMEI FLASH.

Is there a solution (hidden of course ) to allow read out of flash like you developed for DCT-3 ?

I thought until now, that this is prevented by phone hardware in DCT-4.

OK, desoldering uBGA is a solution or we could try to find some test-point on board. So my question is, is it possible to read out flash without opening phone?

Best regards.

[Dejan Kaljevic]

@Murat Bekar
There is no comercial solution for comp128-2.

@german gsm team
For DCT-4 FLASH can be read with same interface like for simple DCT-3
flasher and with patched u_2nd.fia

@g3gg0
On FLASH addr 24h deffine BOOT mode? Some of values ff,fe,fc,f8,f0,e0
On addr 2ch there is a block [size 8] that define scrambling of FLASH.

[ada0611]

Originally Posted by Dejan Kaljevic

@Murat Bekar
There is no comercial solution for comp128-2.

@german gsm team
For DCT-4 FLASH can be read with same interface like for simple DCT-3
flasher and with patched u_2nd.fia

Hm, it is very intresting... Can you write more about it?

[anupob]

WoWWoWWoW!!!!!!!!!!!!

[hakima]

Untill now,it's look like the King of Nokia just come back

WBR

[Bohosh]

@Dejan Kaljevic

What you thing about this :
http://forum.gsmhosting.com/vbb/showthread.php?t=110569

is it real or fake ????

[ficho]

How come a Insane Poster Dejan Kaljevic makes so much noice when he apears ?

Answer : Lot of dogs barking arround!
regards ficho