Solution for blocked sec. code on 6210 - read this

[Lord]

Problem with blocked security code (5x wrong code entered) on 6210
can't be solved like on 3310 (reset with Nokia Tool 034 or waiting
about 20 minuts with phone powered on and then enter code).

Solution is using Nokia Tool V1.2 by Viper but in this case you must
read and after write all flash (4MB). This is too slow and you can
have problems with writing big flash files. Dejan flasher frequently
have interrupt if write big files. In this case you must split big
flash file with Windows Commander on several smallest files.

---------------------------------------------------------------------
Fast solution is:

1. Read flash from 5D0000 to 5E0000 (64KB)
2. Open file in hex editor and look on:
0242D - if F4 - leave, if A4 - change to F4
02434 - must be 06 - change to 00
02439 - must be 06 - change to 00

After writing file you can enter code. Correct code you can reading
with Logomanager or Nokia Tool V3.12 by Koci.

Solution is tested on 6210 V3.01. Send results with other soft. variant
-----------------------------------------------------------------------

Regards,
Lord

[Brobble]

That´s not good solution, because, the Security Code Counter is´nt ever on same adress!!! But you are clever! You compared both flashfiles (before and after using NFree)! But the true routine is another one! :-)

Have fun!

Greetings MR...

[rothmanns]

agree with brobble...he gave us the solution before nfree1.2..... and it still works for me.... thanks brobble!!!

[CHATAR]

hi brobble
from me also thaaaaaaaaaaaannnnnnnnks
a Lot

[X-Shadow]

What solution was that brobble ?

[K-Dix]

Some counter that returns "nl" or undefined value can't be fixed by Nkfree but brute force solution by Brooble is still effective.

I wonder what that new solution is? Can you share it with us Brobble?

[Brobble]

Lord means the right solution, but his way is wrong, because the counter is not ever on same adress!
The phone uses "Searchindexes", so we tell them, to read or save datas into PMM! For example you are looking for Snake-Highscore on 6210, the phone search in PMM for F4770000 and will find it! After that come 55FF (always the same), than comes checksum, lenght, adress and then the snake-highscore! It´s cool for editing this highscor! That is the solution for the whole PPM.

If you start the phone, then it check: May I accept the right Security-Code or not? For that, it looks for the counter (It isnt a counter, but we told it so, because first we believed, it´s a counter!) It´s a status byte! "Searchindex" is F4480000!!! After that 55FF, Checksum, length, adress, and the byte self! If this byte is 06(hex), than the phone wont accept any Security Code! So change it to 00, dont forget the checksum of this byte, of course 00, too! An example:

F4 480000 55FF 0006 0001 7C05 06

So it looks, when it wont accept!

Change it to:

F4 480000 55FF 0000 0001 7C05 00

Now the counter is Zero! So it will accept 12345 or the saved Code under Serchindex F44A0000!

You must read out phone from 005A-0060 for 6210 and from 0059-0060 for 7110! Than just search or "F4480000" and you will find the counter.

Here are listed our found PMM-Indexes:

770000 Snake2-Highscore
770001 Pairs2-Highscore (Time)
770003 Pairs2-Highscore (Tries)
4A0000 Security Code
480000 Security Code counter

BTW: The highscores are not saved decimal, they are saved hexadecimal! Here the windows calculator is very helpfull! :-)

Have fun!

Greetings MR...

<FONT COLOR="#ffff00" SIZE="1">[ 03 July 2001 19:13: Message edited 1 time, lastly by Brobble ]</font>

[Brobble]

I forgot: My solution (the first one :-)) was deleting all of PMM with FFFFFF, only not the block headers! You should not do that! Viper and I found this better (best) solution!

Greetings to him and all other, who are finding secrets and release them for free! :-)

MR...

<FONT COLOR="#ffff00" SIZE="1">[ 03 July 2001 19:10: Message edited 1 time, lastly by Brobble ]</font>

[X-Shadow]

Nice work,
I could not have done better myself.
B.R. Linus

[sebla]

Hi, i have destroy my 6210 first i read securuty code by logomanager and not function, after i have use dejian and off!!
Help super help.
Exuse for my english...tanks to you.

[Brobble]

@Seb:

Mail me and I will try to solve your Problem!

Greetings MR...

<FONT COLOR="#ffff00" SIZE="1">[ 04 July 2001 18:01: Message edited 1 time, lastly by Brobble ]</font>

[Leeloo]

I just want to give a shout out to you Brobble, and of course Viper to.
You Have given so much to us that are into gsm tweaking.
Hope to be able to give something back in the future.
Keep it up Everyone!!!!!!!!!
Regards Leeloo

[Robby]

I miss the old times with BrobbleNKfree software and 3 pages replyies.
Where are these good days ??;-)

Robby the Greek

[Brobble]

Really cool! I did´nt know, that I´m so popular! :-) Thanks! Perhaps next time I will have more time for gsm stuff! I hope so! :-)

Greetings from germany!

MR...

[Jaca]

Hi Brobble!

Do you know the address to the snake highscore for the other Nokia phones, like 3210, 3310, 3330, 5110, 6110, 6150, 7110, 8210?
Thanks in advance.
Best regards.
Jaca