mcu checksums...
 

can anyone tell me if there are other mcu software checksums?! first one is on file offset
22-23 and second is at 39FFFA-39FFFB, BUT what are the 4 bytes after this checksum-is that a full flash checksum?!- and what other mcu checksums are there ( adresses from 6210 v3.01 ppm C)?

ViperBJK,s sw can only read two CRC of the flashes! Which bits do you mean?
Do you mean, that the full flash (without EEPROM) have a CRC, too?
I think, that NOKIA has made two CRC's in MCU and seven CRC's in PPM!
All language has got other CRC.

One question:
When you read full flash (with EEPROM), than you have eight CRC's in PPM file.
When you read flash (without EEPROM), than you have only seven CRC's!!!!!
Why?
There are only seven language in package.
Is tha last CRC, a CRC for the full PPM file.
The phone controll first the seperate CRC's and than the full CRC.
Than you maybe think right.
Maybe this is the CRC for MCU and PPM!
Have you made any tests with NFREE?
I have made a file, for made MCU update for 8210 v5.16, but I think it dosen't work, but nobody would test it´.
I think it is possible to make a sw for PPM or MCU update for homeuser.
I and my friend would like to make this.
If you have interestet, you can help me.

Cyberdog

no not full flash (mcu+ppm+pmm) a checksum for mcu+ppm block!!!

how to make such a home flasher?please tell me...

It's not so easy I think!
At fist, do you think, where do the NFREE program read, where stands the CRC's in PPM?
Where stands the adresses????????????
I must know it!!!!!!!!!!!!!!!!!!!
I write if I have made a 100% WORKING MCU or PPM Update!

Cyberdog

if you don't know where the checksum adresses in ppm are you haven't done enough research!! because thats too easy: search in ppm block 7x"00","01",8x"00" and after or before(i don't remember) that is the ppmchecksum of this block! but this is not usefull! you siad you made "upgrade 8210" file, but you haven't tested yet... i can tell you what happens! i have tested with my 6210...i changed only mcu block!did some changes in this block to correct checksum(don't tell me now "if you change checksum the phone does not work" I DID NOT CHANGE THE CHECKSUM!!!)

i did that for mcu block with the known mcu checksums!!! but phone has no network and resets after about 10 sek!!! so this has nothing to do with ppm package!! there must be an additional mcu checksum or some kind of combined(mcu+other) checksum!!! if we get this checksum we can change mcu and maybe ppm!!!!

You have change some thinks in MCU flash, than was the CRC the same and the file a other! Is this right?
You only have update MCU?
You must rewrite PPM flash, too and flash it with MCU file.
You can't flash MCU file only, becouse than you have a other version on MCU!!!!!

In my file I have change the MCU CRC!
CRC same than the other.
Than I have change all PPM CRC's!
PPM CRC's than same as the other.
But the Adresses (when I read it with NFREE) are other than the original version.
The program NFREE search the written CRC's in PPM on the same adresse than the phone where I have readet.
I think, when I have rewrite this, than my file WORKS!

You have not untersand me!
I must know, where in MCU or PPM stands the right position for reading the CRC's???????
This adress I must change.
Do you know this adresse?

Cyberdog

Cyberdog, I think you forgot about Flash Authority checksum. Without knowladge how it is calculated you can't update SW in phone.

Maby I'm in wrong and you have this algorithm????

AlAraf

i think cyberdog (and me) try to find other solution:

to let faid as it is... and so on to let all checksums as they are(just to change some (unimportant)bytes to correct to the existing checksums from the "original" softwareversion, BUT for that we need every checksum in ppm and mcu and maybe for both!!!

He gigaphreak!

Do you know NEWS about our project?
If you have news, than write me a mail to [email protected] and not into forum, becouse, ALL in this forum would like to change PPM or MCU and NOBODY would like to held us!!!!!!!!!!!!!!!!!!!!
I think, now we written by mail.

Cyberdog

I already did that:
I let the current/existing checksums in their original values, changed some "unimportant" bytes to compensate the changes done. No "Contact Service" errors but also no signal and phone resets.

Although I'm running tests as to what the checksums on the end of the flash are for.

It's possible that there are other checkpoints (not just checksums) that the phone is checking. Although we didn't incur CS, the next obstacle is the no network.

I'm still having doubts about this so called FAID. Sometimes I think it's the MSID but I can't be sure. I can't determine the FAID from the 6210 (v3.01C) and the MSID (using NokiaTool and others to see the MSID).

you can't get msid? use wintesla!

yes ice dragon...i did same ... and i had no network too and phone resets too! i have found out that there are some bytes after the (first) mcu checksum area e.g. 6210 v3.01
offset 330140/41 is "3401" if you change this value to anything else... you'll get exactly the same problems(not net and reset) BUT after these two bytes from 330142 to 33015F you can change EVERYTHING!!! and you HAVE NET AND NO RESET...next two bytes seem to be the next "fileinternal" checksum after these two bytes you can again change everythin you want (till 33017F) and so on ->

two bytes "check" (unchangeable), 30 bytes data(changeable), two bytes "check" .....


so what is this? it must be something like secnd mcu checksum!!! this is the problem why the phone does not get net and the reset!

He!

Did anyone have a full flash for 8210 5.16 or 5.21?
Please send me!!!!!!!!!!!!!
I need it for tests.

THX
Cyberdog :D :D :D :D :D :D

Hello
Check your email cyberdog :) good luck!

Hello Gigaphreak,<br />Could I change language, when I change bytes by your advance:

<br />i have found out that there are some bytes after the (first) mcu checksum area e.g. 6210 v3.01<br />offset 330140/41 is "3401" if you change this value to anything else... you'll get exactly the same problems(not net and reset) BUT after these two bytes from 330142 to 33015F you can change EVERYTHING!!! and you HAVE NET AND NO RESET...next two bytes seem to be the next "fileinternal" checksum after these two bytes you can again change everythin you want (till 33017F) and so on -&gt; <br />two bytes "check" (unchangeable), 30 bytes data(changeable), two bytes "check" .....

<br />Is it possible to change language by this.

Where read Viper the "Addy"-values?

THX<br />Cyberdog