NFC microchip Read only unlock

my18666 · February 28, 2020, 9:58pm

What do the photos mean?
Same for other apps
Cannot write.

ThexTallxDude · February 28, 2020, 10:26pm

Is this error returned when you try to read memory from your chip?

The end of my read is this(there’s roughly 65recods between where your’s stops and mine):

[ 00:00:00:00 ] Addr. DF : DATA
[ 00:00:00:00 ] Addr. E0 : DATA
[ 4E:45:78:54 ] Addr. E1 : DATA
[ 00:00:7F:BD ] Addr. E2 : LOCK2 - LOCK4
[ 04:00:00:E3 ] Addr. E3 : CFG 0 (MIRROR / AUTH0)
[ 00:05:00:00 ] Addr. E4 : CFG 1 (ACCESS)
[ 00:00:00:00 ] Addr. E5 : PWD0 - PWD3
[ 00:00:00:00 ] Addr. E6 : PACK0 - PACK1

my18666 · February 29, 2020, 12:12am

No. Displayed when writing.

You may have checked the Lock Tag in the photo above.

If checked, can I unlock?

Pilgrimsmaster · February 29, 2020, 12:28am

can you try these apps and let us know your results
Tag Writer
Tag Info
NFC Tools
NFC Tools Pro

anon2520759 · February 29, 2020, 12:29am

Don’t check the lock option. As it states, it’s permanent and you won’t be able to change it in future.

ThexTallxDude · February 29, 2020, 12:33am

No, that’s why the warning is telling you you can’t unlock the tag if that is checked. You may be able to recover it with a Proxmark, but I can’t confirm that, you’d have to wait for someone else to chime in.

How did you get your tag readout that you posted here?
The readout you posted has an error at the bottom, which may be contributing to the issue. There’s Dynamic lock bytes stored in the last page or so of the chip that I’m not seeing in your dump.

Here’s a quote from one of Amal’s posts explaining this:

DNFC and password protection

The NTAG216 chip has two sets of lock bytes. The first set are called the “static lock bytes” and are the last two bytes of page 02. The second set are called “dynamic lock bytes” and are the last three bytes of page E2. Each bit all of these lock bytes represent user programmable memory pages. If the lock bit is 0 then the page is writable, if it is 1 then that page is forever locked. These bytes are very powerful and in the case of an implant, server no real purpose since there is no conceivable situation anyone could think of where lock bytes would want to be used… except two places. The first is the CC - page 03 - which, if programmed correctly for use as an NFC Type 2 tag, should never be changed. So, we set a bit in the static lock bytes in page 02 to forever lock page 03 and secure the CC from ever being changed. The second thing that could benefit from being locked, are the lock bytes themselves. Fortunately there are bits within both the static and dynamic lock bytes that can lock the lock bytes themselves… effectively locking the lock bytes. So, after locking page 03 and securing the CC, the dynamic and static lock bytes are then locked, blocking any further user memory pages from being locked.

my18666 · February 29, 2020, 1:53am

All apps are listed as read only.
Unlock by using Proxmark?

my18666 · February 29, 2020, 2:05am

If checked, can I unlock?

I may have checked

amal · February 29, 2020, 2:07am

The only way to tell for sure is another scan from TagInfo (dngr.us/taginfo)… try to get the full scan (no aborted error).

my18666 · February 29, 2020, 2:09am

If locked permanently, can other writing be done with the same tip?

my18666 · February 29, 2020, 5:57am

FULL SCAN ------------------------------

Technologies supported:

ISO/IEC 14443-3 (Type A) compatible
ISO/IEC 14443-2 (Type A) compatible

Android technology information:

Tag description:

TAG: Tech [android.nfc.tech.NfcA, android.nfc.tech.MifareUltralight, android.nfc.tech.Ndef]
Maximum transceive length: 253 bytes
Default maximum transceive time-out: 618 ms

Detailed protocol information:

ID: 04:65:AF:12:FF:38:81
ATQA: 0x4400
SAK: 0x00

Memory content:

[00] * 04:65:AF 46 (UID0-UID2, BCC0)
[01] * 12:FF:38:81 (UID3-UID6)
[02] . 54 48 00 00 (BCC1, INT, LOCK0-LOCK1)
[03] . E1:10:6D:0F (OTP0-OTP3)
[04] . 03 1F D1 01 |…|
[05] . 1B 54 82 65 |.T.e|
[06] . 6E FF FE 30 |n…0|
[07] . 00 39 00 30 |.9.0|
[08] . 00 35 00 34 |.5.4|
[09] . 00 36 00 39 |.6.9|
[0A] . 00 35 00 33 |.5.3|
[0B] . 00 33 00 38 |.3.8|
[0C] . 00 FE 00 00 |…|
[0D] . 3D 6B 65 6E |=ken|
[0E] . 67 6F 25 32 |go%2|
[0F] . 30 73 68 69 |0shi|
[10] . 6E 64 61 26 |nda&|
[11] . 69 6E 70 75 |inpu|
[12] . 74 3D 74 65 |t=te|
[13] . 78 74 26 74 |xt&t|
[14] . 65 78 74 3D |ext=|
[15] . 30 39 30 35 |0905|
[16] . 34 36 39 35 |4695|
[17] . 33 33 38 11 |338.|
[18] . 01 1B 54 82 |…T.|
[19] . 65 6E FF FE |en…|
[1A] . 30 00 39 00 |0.9.|
[1B] . 30 00 35 00 |0.5.|
[1C] . 34 00 36 00 |4.6.|
[1D] . 39 00 35 00 |9.5.|
[1E] . 33 00 33 00 |3.3.|
[1F] . 38 00 51 01 |8.Q.|
[20] . 33 55 04 6C |3U.l|
[21] . 61 6B 65 73 |akes|
[22] . 69 64 65 6C |idel|
[23] . 6C 61 6D 61 |lama|
[24] . 2E 63 6F 6D |.com|
[25] . 2F 61 70 70 |/app|
[26] . 3F 68 6B 3D |?hk=|
[27] . 6B 65 6E 67 |keng|
[28] . 6F 25 32 30 |o%20|
[29] . 73 68 69 6E |shin|
[2A] . 64 61 25 32 |da%2|
[2B] . 30 31 39 39 |0199|
[2C] . 35 31 31 30 |5110|
[2D] . 39 FE 00 00 |9…|
[2E] . 00 00 00 00 |…|
[2F] . 00 00 00 00 |…|
[30] . 00 00 00 00 |…|
[31] . 00 00 00 00 |…|
[32] . 00 00 00 00 |…|
[33] . 00 00 00 00 |…|
[34] . 00 00 00 00 |…|
[35] . 00 00 00 00 |…|
[36] . 00 00 00 00 |…|
[37] . 00 00 00 00 |…|
[38] . 00 00 00 00 |…|
[39] . 00 00 00 00 |…|
[3A] . 00 00 00 00 |…|
[3B] . 00 00 00 00 |…|
[3C] . 00 00 00 00 |…|
[3D] . 00 00 00 00 |…|
[3E] . 00 00 00 00 |…|
[3F] . 00 00 00 00 |…|
[40] . 00 00 00 00 |…|
[41] . 00 00 00 00 |…|
[42] . 00 00 00 00 |…|
[43] . 00 00 00 00 |…|
[44] . 00 00 00 00 |…|
[45] . 00 00 00 00 |…|
[46] . 00 00 00 00 |…|
[47] . 00 00 00 00 |…|
[48] . 00 00 00 00 |…|
[49] . 00 00 00 00 |…|
[4A] . 00 00 00 00 |…|
[4B] . 00 00 00 00 |…|
[4C] . 00 00 00 00 |…|
[4D] . 00 00 00 00 |…|
[4E] . 00 00 00 00 |…|
[4F] . 00 00 00 00 |…|
[50] . 00 00 00 00 |…|
[51] . 00 00 00 00 |…|
[52] . 00 00 00 00 |…|
[53] . 00 00 00 00 |…|
[54] . 00 00 00 00 |…|
[55] . 00 00 00 00 |…|
[56] . 00 00 00 00 |…|
[57] . 00 00 00 00 |…|
[58] . 00 00 00 00 |…|
[59] . 00 00 00 00 |…|
[5A] . 00 00 00 00 |…|
[5B] . 00 00 00 00 |…|
[5C] . 00 00 00 00 |…|
[5D] . 00 00 00 00 |…|
[5E] . 00 00 00 00 |…|
[5F] . 00 00 00 00 |…|
[60] . 00 00 00 00 |…|
[61] . 00 00 00 00 |…|
[62] . 00 00 00 00 |…|
[63] . 00 00 00 00 |…|
[64] . 00 00 00 00 |…|
[65] . 00 00 00 00 |…|
[66] . 00 00 00 00 |…|
[67] . 00 00 00 00 |…|
[68] . 00 00 00 00 |…|
[69] . 00 00 00 00 |…|
[6A] . 00 00 00 00 |…|
[6B] . 00 00 00 00 |…|
[6C] . 00 00 00 00 |…|
[6D] . 00 00 00 00 |…|
[6E] . 00 00 00 00 |…|
[6F] . 00 00 00 00 |…|
[70] . 00 00 00 00 |…|
[71] . 00 00 00 00 |…|
[72] . 00 00 00 00 |…|
[73] . 00 00 00 00 |…|
[74] . 00 00 00 00 |…|
[75] . 00 00 00 00 |…|
[76] . 00 00 00 00 |…|
[77] . 00 00 00 00 |…|
[78] . 00 00 00 00 |…|
[79] . 00 00 00 00 |…|
[7A] . 00 00 00 00 |…|
[7B] . 00 00 00 00 |…|
[7C] . 00 00 00 00 |…|
[7D] . 00 00 00 00 |…|
[7E] . 00 00 00 00 |…|
[7F] . 00 00 00 00 |…|
[80] . 00 00 00 00 |…|
[81] . 00 00 00 00 |…|
[82] . 00 00 00 00 |…|
[83] . 00 00 00 00 |…|
[84] . 00 00 00 00 |…|
[85] . 00 00 00 00 |…|
[86] . 00 00 00 00 |…|
[87] . 00 00 00 00 |…|
[88] . 00 00 00 00 |…|
[89] . 00 00 00 00 |…|
[8A] . 00 00 00 00 |…|
[8B] . 00 00 00 00 |…|
[8C] . 00 00 00 00 |…|
[8D] . 00 00 00 00 |…|
[8E] . 00 00 00 00 |…|
[8F] . 00 00 00 00 |…|
[90] . 00 00 00 00 |…|
[91] . 00 00 00 00 |…|
[92] . 00 00 00 00 |…|
[93] . 00 00 00 00 |…|
[94] . 00 00 00 00 |…|
[95] . 00 00 00 00 |…|
[96] . 00 00 00 00 |…|
[97] . 00 00 00 00 |…|
[98] . 00 00 00 00 |…|
[99] . 00 00 00 00 |…|
[9A] . 00 00 00 00 |…|
[9B] . 00 00 00 00 |…|
[9C] . 00 00 00 00 |…|
[9D] . 00 00 00 00 |…|
[9E] . 00 00 00 00 |…|
[9F] . 00 00 00 00 |…|
[A0] . 00 00 00 00 |…|
[A1] . 00 00 00 00 |…|
[A2] . 00 00 00 00 |…|
[A3] . 00 00 00 00 |…|
[A4] . 00 00 00 00 |…|
[A5] . 00 00 00 00 |…|
[A6] . 00 00 00 00 |…|
[A7] . 00 00 00 00 |…|
[A8] . 00 00 00 00 |…|
[A9] . 00 00 00 00 |…|
[AA] . 00 00 00 00 |…|
[AB] . 00 00 00 00 |…|
[AC] . 00 00 00 00 |…|
[AD] . 00 00 00 00 |…|
[AE] . 00 00 00 00 |…|
[AF] . 00 00 00 00 |…|
[B0] . 00 00 00 00 |…|
[B1] . 00 00 00 00 |…|
[B2] . 00 00 00 00 |…|
[B3] . 00 00 00 00 |…|
[B4] . 00 00 00 00 |…|
[B5] . 00 00 00 00 |…|
[B6] . 00 00 00 00 |…|
[B7] . 00 00 00 00 |…|
[B8] . 00 00 00 00 |…|
[B9] . 00 00 00 00 |…|
[BA] . 00 00 00 00 |…|
[BB] . 00 00 00 00 |…|
[BC] . 00 00 00 00 |…|
[BD] . 00 00 00 00 |…|
[BE] . 00 00 00 00 |…|
[BF] . 00 00 00 00 |…|
[C0] . 00 00 00 00 |…|
[C1] . 00 00 00 00 |…|
[C2] . 00 00 00 00 |…|
[C3] . 00 00 00 00 |…|
[C4] . 00 00 00 00 |…|
[C5] . 00 00 00 00 |…|
[C6] . 00 00 00 00 |…|
[C7] . 00 00 00 00 |…|
[C8] . 00 00 00 00 |…|
[C9] . 00 00 00 00 |…|
[CA] . 00 00 00 00 |…|
[CB] . 00 00 00 00 |…|
[CC] . 00 00 00 00 |…|
[CD] . 00 00 00 00 |…|
[CE] . 00 00 00 00 |…|
[CF] . 00 00 00 00 |…|
[D0] . 00 00 00 00 |…|
[D1] . 00 00 00 00 |…|
[D2] . 00 00 00 00 |…|
[D3] . 00 00 00 00 |…|
[D4] . 00 00 00 00 |…|
[D5] . 00 00 00 00 |…|
[D6] . 00 00 00 00 |…|
[D7] . 00 00 00 00 |…|
[D8] . 00 00 00 00 |…|
[D9] . 00 00 00 00 |…|
[DA] . 00 00 00 00 |…|
[DB] . 00 00 00 00 |…|
[DC] . 00 00 00 00 |…|
[DD] . 00 00 00 00 |…|
[DE] . 00 00 00 00 |…|
[DF] . 00 00 00 00 |…|
[E0] . 00 00 00 00 |…|
[E1] . 00 00 00 00 |…|
[E2] . 00 00 00 BD (LOCK2-LOCK4, CHK)
[E3] . 04 00 00 FF (CFG, MIRROR, AUTH0)
[E4] . 00 05 – -- (ACCESS)
[E5] +P FF FF FF FF (PWD0-PWD3)
[E6] +P 00 00 – -- (PACK0-PACK1)

*:locked & blocked, x:locked,
+:blocked, .:un(b)locked, ?:unknown
r:readable (write-protected),
p:password protected, -:write-only
P:password protected write-only

Drwolfsburg · February 29, 2020, 6:03am

This might be a silly question but is something you need to do to your NFC chip like first set up or can you just right away pull up your NFC tools app and write to it? Password or is there anything that no buddy can just use there tool app and write to my chip?

my18666 · February 29, 2020, 11:34pm

I did a scan.
Do you know the cause?

FULL SCAN ------------------------------

Technologies supported:

ISO/IEC 14443-3 (Type A) compatible
ISO/IEC 14443-2 (Type A) compatible

Android technology information:

Tag description:

TAG: Tech [android.nfc.tech.NfcA, android.nfc.tech.MifareUltralight, android.nfc.tech.Ndef]
Maximum transceive length: 253 bytes
Default maximum transceive time-out: 618 ms

Detailed protocol information:

ID: 04:65:AF:12:FF:38:81
ATQA: 0x4400
SAK: 0x00

Memory content:

[00] * 04:65:AF 46 (UID0-UID2, BCC0)
[01] * 12:FF:38:81 (UID3-UID6)
[02] . 54 48 00 00 (BCC1, INT, LOCK0-LOCK1)
[03] . E1:10:6D:0F (OTP0-OTP3)
[04] . 03 1F D1 01 |…|
[05] . 1B 54 82 65 |.T.e|
[06] . 6E FF FE 30 |n…0|
[07] . 00 39 00 30 |.9.0|
[08] . 00 35 00 34 |.5.4|
[09] . 00 36 00 39 |.6.9|
[0A] . 00 35 00 33 |.5.3|
[0B] . 00 33 00 38 |.3.8|
[0C] . 00 FE 00 00 |…|
[0D] . 3D 6B 65 6E |=ken|
[0E] . 67 6F 25 32 |go%2|
[0F] . 30 73 68 69 |0shi|
[10] . 6E 64 61 26 |nda&|
[11] . 69 6E 70 75 |inpu|
[12] . 74 3D 74 65 |t=te|
[13] . 78 74 26 74 |xt&t|
[14] . 65 78 74 3D |ext=|
[15] . 30 39 30 35 |0905|
[16] . 34 36 39 35 |4695|
[17] . 33 33 38 11 |338.|
[18] . 01 1B 54 82 |…T.|
[19] . 65 6E FF FE |en…|
[1A] . 30 00 39 00 |0.9.|
[1B] . 30 00 35 00 |0.5.|
[1C] . 34 00 36 00 |4.6.|
[1D] . 39 00 35 00 |9.5.|
[1E] . 33 00 33 00 |3.3.|
[1F] . 38 00 51 01 |8.Q.|
[20] . 33 55 04 6C |3U.l|
[21] . 61 6B 65 73 |akes|
[22] . 69 64 65 6C |idel|
[23] . 6C 61 6D 61 |lama|
[24] . 2E 63 6F 6D |.com|
[25] . 2F 61 70 70 |/app|
[26] . 3F 68 6B 3D |?hk=|
[27] . 6B 65 6E 67 |keng|
[28] . 6F 25 32 30 |o%20|
[29] . 73 68 69 6E |shin|
[2A] . 64 61 25 32 |da%2|
[2B] . 30 31 39 39 |0199|
[2C] . 35 31 31 30 |5110|
[2D] . 39 FE 00 00 |9…|
[2E] . 00 00 00 00 |…|
[2F] . 00 00 00 00 |…|
[30] . 00 00 00 00 |…|
[31] . 00 00 00 00 |…|
[32] . 00 00 00 00 |…|
[33] . 00 00 00 00 |…|
[34] . 00 00 00 00 |…|
[35] . 00 00 00 00 |…|
[36] . 00 00 00 00 |…|
[37] . 00 00 00 00 |…|
[38] . 00 00 00 00 |…|
[39] . 00 00 00 00 |…|
[3A] . 00 00 00 00 |…|
[3B] . 00 00 00 00 |…|
[3C] . 00 00 00 00 |…|
[3D] . 00 00 00 00 |…|
[3E] . 00 00 00 00 |…|
[3F] . 00 00 00 00 |…|
[40] . 00 00 00 00 |…|
[41] . 00 00 00 00 |…|
[42] . 00 00 00 00 |…|
[43] . 00 00 00 00 |…|
[44] . 00 00 00 00 |…|
[45] . 00 00 00 00 |…|
[46] . 00 00 00 00 |…|
[47] . 00 00 00 00 |…|
[48] . 00 00 00 00 |…|
[49] . 00 00 00 00 |…|
[4A] . 00 00 00 00 |…|
[4B] . 00 00 00 00 |…|
[4C] . 00 00 00 00 |…|
[4D] . 00 00 00 00 |…|
[4E] . 00 00 00 00 |…|
[4F] . 00 00 00 00 |…|
[50] . 00 00 00 00 |…|
[51] . 00 00 00 00 |…|
[52] . 00 00 00 00 |…|
[53] . 00 00 00 00 |…|
[54] . 00 00 00 00 |…|
[55] . 00 00 00 00 |…|
[56] . 00 00 00 00 |…|
[57] . 00 00 00 00 |…|
[58] . 00 00 00 00 |…|
[59] . 00 00 00 00 |…|
[5A] . 00 00 00 00 |…|
[5B] . 00 00 00 00 |…|
[5C] . 00 00 00 00 |…|
[5D] . 00 00 00 00 |…|
[5E] . 00 00 00 00 |…|
[5F] . 00 00 00 00 |…|
[60] . 00 00 00 00 |…|
[61] . 00 00 00 00 |…|
[62] . 00 00 00 00 |…|
[63] . 00 00 00 00 |…|
[64] . 00 00 00 00 |…|
[65] . 00 00 00 00 |…|
[66] . 00 00 00 00 |…|
[67] . 00 00 00 00 |…|
[68] . 00 00 00 00 |…|
[69] . 00 00 00 00 |…|
[6A] . 00 00 00 00 |…|
[6B] . 00 00 00 00 |…|
[6C] . 00 00 00 00 |…|
[6D] . 00 00 00 00 |…|
[6E] . 00 00 00 00 |…|
[6F] . 00 00 00 00 |…|
[70] . 00 00 00 00 |…|
[71] . 00 00 00 00 |…|
[72] . 00 00 00 00 |…|
[73] . 00 00 00 00 |…|
[74] . 00 00 00 00 |…|
[75] . 00 00 00 00 |…|
[76] . 00 00 00 00 |…|
[77] . 00 00 00 00 |…|
[78] . 00 00 00 00 |…|
[79] . 00 00 00 00 |…|
[7A] . 00 00 00 00 |…|
[7B] . 00 00 00 00 |…|
[7C] . 00 00 00 00 |…|
[7D] . 00 00 00 00 |…|
[7E] . 00 00 00 00 |…|
[7F] . 00 00 00 00 |…|
[80] . 00 00 00 00 |…|
[81] . 00 00 00 00 |…|
[82] . 00 00 00 00 |…|
[83] . 00 00 00 00 |…|
[84] . 00 00 00 00 |…|
[85] . 00 00 00 00 |…|
[86] . 00 00 00 00 |…|
[87] . 00 00 00 00 |…|
[88] . 00 00 00 00 |…|
[89] . 00 00 00 00 |…|
[8A] . 00 00 00 00 |…|
[8B] . 00 00 00 00 |…|
[8C] . 00 00 00 00 |…|
[8D] . 00 00 00 00 |…|
[8E] . 00 00 00 00 |…|
[8F] . 00 00 00 00 |…|
[90] . 00 00 00 00 |…|
[91] . 00 00 00 00 |…|
[92] . 00 00 00 00 |…|
[93] . 00 00 00 00 |…|
[94] . 00 00 00 00 |…|
[95] . 00 00 00 00 |…|
[96] . 00 00 00 00 |…|
[97] . 00 00 00 00 |…|
[98] . 00 00 00 00 |…|
[99] . 00 00 00 00 |…|
[9A] . 00 00 00 00 |…|
[9B] . 00 00 00 00 |…|
[9C] . 00 00 00 00 |…|
[9D] . 00 00 00 00 |…|
[9E] . 00 00 00 00 |…|
[9F] . 00 00 00 00 |…|
[A0] . 00 00 00 00 |…|
[A1] . 00 00 00 00 |…|
[A2] . 00 00 00 00 |…|
[A3] . 00 00 00 00 |…|
[A4] . 00 00 00 00 |…|
[A5] . 00 00 00 00 |…|
[A6] . 00 00 00 00 |…|
[A7] . 00 00 00 00 |…|
[A8] . 00 00 00 00 |…|
[A9] . 00 00 00 00 |…|
[AA] . 00 00 00 00 |…|
[AB] . 00 00 00 00 |…|
[AC] . 00 00 00 00 |…|
[AD] . 00 00 00 00 |…|
[AE] . 00 00 00 00 |…|
[AF] . 00 00 00 00 |…|
[B0] . 00 00 00 00 |…|
[B1] . 00 00 00 00 |…|
[B2] . 00 00 00 00 |…|
[B3] . 00 00 00 00 |…|
[B4] . 00 00 00 00 |…|
[B5] . 00 00 00 00 |…|
[B6] . 00 00 00 00 |…|
[B7] . 00 00 00 00 |…|
[B8] . 00 00 00 00 |…|
[B9] . 00 00 00 00 |…|
[BA] . 00 00 00 00 |…|
[BB] . 00 00 00 00 |…|
[BC] . 00 00 00 00 |…|
[BD] . 00 00 00 00 |…|
[BE] . 00 00 00 00 |…|
[BF] . 00 00 00 00 |…|
[C0] . 00 00 00 00 |…|
[C1] . 00 00 00 00 |…|
[C2] . 00 00 00 00 |…|
[C3] . 00 00 00 00 |…|
[C4] . 00 00 00 00 |…|
[C5] . 00 00 00 00 |…|
[C6] . 00 00 00 00 |…|
[C7] . 00 00 00 00 |…|
[C8] . 00 00 00 00 |…|
[C9] . 00 00 00 00 |…|
[CA] . 00 00 00 00 |…|
[CB] . 00 00 00 00 |…|
[CC] . 00 00 00 00 |…|
[CD] . 00 00 00 00 |…|
[CE] . 00 00 00 00 |…|
[CF] . 00 00 00 00 |…|
[D0] . 00 00 00 00 |…|
[D1] . 00 00 00 00 |…|
[D2] . 00 00 00 00 |…|
[D3] . 00 00 00 00 |…|
[D4] . 00 00 00 00 |…|
[D5] . 00 00 00 00 |…|
[D6] . 00 00 00 00 |…|
[D7] . 00 00 00 00 |…|
[D8] . 00 00 00 00 |…|
[D9] . 00 00 00 00 |…|
[DA] . 00 00 00 00 |…|
[DB] . 00 00 00 00 |…|
[DC] . 00 00 00 00 |…|
[DD] . 00 00 00 00 |…|
[DE] . 00 00 00 00 |…|
[DF] . 00 00 00 00 |…|
[E0] . 00 00 00 00 |…|
[E1] . 00 00 00 00 |…|
[E2] . 00 00 00 BD (LOCK2-LOCK4, CHK)
[E3] . 04 00 00 FF (CFG, MIRROR, AUTH0)
[E4] . 00 05 – -- (ACCESS)
[E5] +P FF FF FF FF (PWD0-PWD3)
[E6] +P 00 00 – -- (PACK0-PACK1)

*:locked & blocked, x:locked,
+:blocked, .:un(b)locked, ?:unknown
r:readable (write-protected),
p:password protected, -:write-only
P:password protected write-only