how to modify the flash file to unprotect it?? - GSM-Forum

Kevin perez · 10-03-2003, 17:23

I would ask for a programm to read the flash files in hex format, to modify the protection. Which program can i use??
I have flashed the Trium Mars with two flashes (one of them is the original), but it no turns up, i think that it is because the flashes are protected, mabe be??
I whould unprotect it but i don´t could edit the file in hex format. Can anybody tell me what program can i use for it??

Another ask:

In the IPL 2.90 program, to flash the phone, for what is the option of: "loader file" (ithumb.bin, agent.bin, iarm.bin)????

thanks alot!

AlienTech · 10-03-2003, 18:56

With IPL just select product and it selects the agent itself. I use like HEDIT but there are a LOT of hex editors out there, a lot of them free. See if there is a 2 BYTE: CD AB in the file. Thats the deprotection code.

from balu dark.

IN FLASH FILE FIND THIS SEQUENSE (FIND WITH FIRST 4 BYTE OF THEM)

1C 00 9F E5 B0 00 D0 E1 AB CC 40 E2 CD 00 5C E3
01 00 00 0A 01 00 A0 E3 00 00 00 EA 00 00 A0 E3
1E FF 2F E1 XX XX XX XX
LO .. .. HI

XX XX XX XX ADRESS OF CD AB SEQUENSE(END OF FLASH PROTECT)
YOU MUST CHANGE LOW BYTE TO 00 AND YOU GET ADRESS OF FLASH PROTECT!

FOR EXAMPLE: YOU FIND STRING AND AFTER 2F E1 YOU SEE: B6 50 14 00
AFTER SWAP BYTE ORDER YOU GET ADRESS: 001450B6 (SHORT-1450B6)
AT THIS ADRESS YOU PUT 2 BYTE: CD AB
AFTER YOU CHANGE LOW BYTE TO 00 AND GET ADRESS 145000
FROM 145000 TO 1450B5 YOU PUT FF BYTE(AS I KNOW IT NOT CHECK !)
SO CHANGE TO FF BYTE NOT NESSESARY

Zanzamar · 10-03-2003, 19:29

@Kevin perez
Protected flash will just cause "permanently blocked" message. In your case it looks like you read flash with that poor reader that everybody use here - it produces inexact results most times and you have damaged backups. Try downloading good working flash backup and writing it to phone

spectrum · 10-05-2003, 16:08

@Zanzamar
Where can we find the reader that gives accurate result, then?

Zanzamar · 10-05-2003, 21:41

@spectrum
I don't know (i use my own

), just warned about possible damage from that tool. Try reading many times and comparing results before trying to write that readout. Or just download tested/factory flashes somewhere - f.e. as i remember all flashes from gengheraenga.net that i tried were good

Kevin perez · 10-06-2003, 11:49

Hi, Zanzamar! i have a buckup of the original flash, but may be it is corroed, but i have flashed the phone with other flashes from the net, and it doesn´t works, It doesn´t turns on...

Know anybody what is my problem and solution???

(it isn´t a hardware problem because before flashing it, them works..)

thanks a lot

10-03-2003, 17:23	#1 (permalink)
Kevin perez Junior Member Join Date: Apr 2003 Posts: 12 Member: 26320 Status: Offline Thanks Meter: 0	how to modify the flash file to unprotect it?? I would ask for a programm to read the flash files in hex format, to modify the protection. Which program can i use?? I have flashed the Trium Mars with two flashes (one of them is the original), but it no turns up, i think that it is because the flashes are protected, mabe be?? I whould unprotect it but i don´t could edit the file in hex format. Can anybody tell me what program can i use for it?? Another ask: In the IPL 2.90 program, to flash the phone, for what is the option of: "loader file" (ithumb.bin, agent.bin, iarm.bin)???? thanks alot!

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
because they have not risen to support the flash files to send	residentdenuevo	Infinity-Box	2	07-30-2010 14:39
Regarding VPL files [How to modify a VPL file to extract The variant when you can't]	ptt	Cyclonebox	2	01-03-2010 16:19
How to use the DIV2UFS to convert the flash file for T610?	hooi76	UFS2 + UFS3-Tornadoflasher	0	02-20-2008 11:58
How to modify a flash file	spider-man	GSM Programming & Reverse Engineering	8	07-13-2007 16:09
Is it possible to revise the sbn file to enable the message report on T28s? need help	subaru	Old Ericsson Phones & Sony Phones	0	10-05-2003 01:27

10-03-2003, 18:56	#2 (permalink)
AlienTech Insane Poster Join Date: Aug 2003 Posts: 66 Member: 36752 Status: Offline Thanks Meter: 0	With IPL just select product and it selects the agent itself. I use like HEDIT but there are a LOT of hex editors out there, a lot of them free. See if there is a 2 BYTE: CD AB in the file. Thats the deprotection code. from balu dark. IN FLASH FILE FIND THIS SEQUENSE (FIND WITH FIRST 4 BYTE OF THEM) 1C 00 9F E5 B0 00 D0 E1 AB CC 40 E2 CD 00 5C E3 01 00 00 0A 01 00 A0 E3 00 00 00 EA 00 00 A0 E3 1E FF 2F E1 XX XX XX XX LO .. .. HI XX XX XX XX ADRESS OF CD AB SEQUENSE(END OF FLASH PROTECT) YOU MUST CHANGE LOW BYTE TO 00 AND YOU GET ADRESS OF FLASH PROTECT! FOR EXAMPLE: YOU FIND STRING AND AFTER 2F E1 YOU SEE: B6 50 14 00 AFTER SWAP BYTE ORDER YOU GET ADRESS: 001450B6 (SHORT-1450B6) AT THIS ADRESS YOU PUT 2 BYTE: CD AB AFTER YOU CHANGE LOW BYTE TO 00 AND GET ADRESS 145000 FROM 145000 TO 1450B5 YOU PUT FF BYTE(AS I KNOW IT NOT CHECK !) SO CHANGE TO FF BYTE NOT NESSESARY

10-03-2003, 19:29	#3 (permalink)
Zanzamar Freak Poster Join Date: Jun 2002 Location: Scara Brae Posts: 246 Member: 12623 Status: Offline Thanks Meter: 5	@Kevin perez Protected flash will just cause "permanently blocked" message. In your case it looks like you read flash with that poor reader that everybody use here - it produces inexact results most times and you have damaged backups. Try downloading good working flash backup and writing it to phone

10-05-2003, 16:08	#4 (permalink)
spectrum No Life Poster Join Date: Oct 2002 Posts: 1,126 Member: 17330 Status: Offline Thanks Meter: 15	@Zanzamar Where can we find the reader that gives accurate result, then?

10-05-2003, 21:41	#5 (permalink)
Zanzamar Freak Poster Join Date: Jun 2002 Location: Scara Brae Posts: 246 Member: 12623 Status: Offline Thanks Meter: 5	@spectrum I don't know (i use my own ), just warned about possible damage from that tool. Try reading many times and comparing results before trying to write that readout. Or just download tested/factory flashes somewhere - f.e. as i remember all flashes from gengheraenga.net that i tried were good

10-06-2003, 11:49	#6 (permalink)
Kevin perez Junior Member Join Date: Apr 2003 Posts: 12 Member: 26320 Status: Offline Thanks Meter: 0	Hi, Zanzamar! i have a buckup of the original flash, but may be it is corroed, but i have flashed the phone with other flashes from the net, and it doesn´t works, It doesn´t turns on... Know anybody what is my problem and solution??? (it isn´t a hardware problem because before flashing it, them works..) thanks a lot