flash individual upgrades :)

[pornopig]

Hi!<br />you nedd some things<br />1: hex workshop<br />2: FAID calculation<br />3: nfree<br />4: Nokia Flasher <br />tested and works (my unbelivable 5110 <img src="smile.gif" border="0"> )<br />factory ringtones: name,tone, pieces (ex: old 8 new just 1 i need place <img src="smile.gif" border="0"> )<br />extended characters(like: Hungarian use "Á" not "ß" or something)<br />Change *#0000# text <img src="smile.gif" border="0"> <br />if i found ARM assembler maybe in tha future:<br />cut eeprom crc (all!!)<br />brand new "menu"<br />(i hope)to be continued<br />****opig

[northernbloke]

I've managed to change the text displayed with *#0000# but even after FAID calc with logs phone still restarts and has no network. I checked it on Wintesla and it showed MCU checksum failed so I used Nfree 1.2 to correct the checksum, reflashed and Relogged for FAID calc - still the same.

Any chance of some info for what u did and how i did it to see where i'm going wrong?

cheers

Steve H

[Finn]

Hi..i did already......<br />Now i have new MCU version in my 6210 5.45 15-01-02<br />lets work together....

[pornopig]

Hi!<br />my phone not work (not logged to network) because is my trial phone <img src="smile.gif" border="0"> <br />i dont know maybe this area have chksum, i still working my flash <img src="smile.gif" border="0"> when i have, i post here<br />sorry tha bad english<br />regards ****opig

[Nick-A]

If I sent someone a flash of 00200000-00300000 from a 6130 (NSK-3) could someone alter it so the MCU checksum is right please? Thats all thats wrong according to wintesla.

Can anyone help?<br />If theres anything I can do in return tell me.

Nick

[northernbloke]

@Finn

I saw one of your post's about that on here finn - I just read a full flash of my phone (6210 V5.44) then ran in thru hexworkshop scanning for text strings such as NPE-3 and PPM. I edited the text and saved it then re-wrote the flash back to the phone and got "contact service". I checked on Wintesla and saw the MCU checksum was failing so used NFree 1.2 to change the checksum, rewrote the flash again and contact service was gone but phone lost service and reset - so I logged it, got faid calc done and updated the phone but still it kept losing service and resetting.

Flashed my original backup in and all is ok.

Would like to find out what i did wrong and fix it<br />any ideas?

Regards,

Steve H

[northernbloke]

forgot to add that after the contact service cleared I was able to do *#0000# and saw that the text I had changed was right and had indeed changed to what I wanted

[Finn]

I didnt use FAID calc for this.Just search for 05.44 in your flash and Use replace function to change it into what u want.SAve the flash..must be the same size as backup even the last byte.After correct all MCu and PPM checksums.Now phone works great and *#0000# shows 05.45 15-01-02

[northernbloke]

cheers Finn - i'm going to do some experimenting - changing 1 or 2 characters at a time and see how it works out - guess it will take a while

[kaen1948]

@ Finn

Hi Finn,

check your E-Mails

Regards<br />kaen

[northernbloke]

well thats it for me for today - totally ****ed off with it

I've discovered (on 6210 V5.44) by searching for text strings of 5.44 that it appears in 3 locations

2867fb, 507d7f and 520007<br />mcu ppm and eeprom

<br />If i either or both of the ppm (change version to 5.45 and date to 16-01-2001 for example)the are no apparent probs (ie phone works normally) no problems, phone works fine - only wintesla shows the changes.

i've been reading 280000-290000 for mcu version<br />500000-510000 for ppm version and 520000-530000 for the eeprom one

If i edit the mcu version in the same manner however I get contact service - I can use Nfree 1.2 to correct the checksum - reflash and phone keeps resetting. Logging makes no difference and i'm running out of credit on my logs.... Nfree 1.3 cant calculate the mcu checksum - keeps generating an error message saying<br />'0x&lt;F ist kein guiltiger Integerwert'

<br />Can anyone shed any light on this?

[rolis]

@****opig,finn - eeprom chk checking patch will useless here cause all things,at least FAID calc,<br />are maked not by ARM processor.<br />About new menu you may forget too,until you found how are calculated real all flash <br />called ppm checksum (4 bytes).<br />In new versions like 3310v503 you can't change ANY byte or even bit,wihout network loosing<br />In new 3310,3330 all flash are protected with 4 bytes checksum.<br />And logger not help here.<br />I'm already explane problem , check my posts about it.

<br />In old versions don't toutch every 2 bytes at address:

0040<br />0060<br />0080<br />....<br />until flash end

<br />all others you may change freely (with chk correction)

<br />rolis

[pornopig]

Hi!<br />thx rolis !!

regards ****opig

[northernbloke]

Thanks Rolis, <br />thats got it sorted now - mcu s/w and date changed to whatever i like within reason (1st digit of the date is in a 20h spot so not changing it but changing anything else is ok)

Cheers

Steve H