mcu checksums... - GSM-Forum

gigaphreak · 07-11-2001, 11:26

can anyone tell me if there are other mcu software checksums?! first one is on file offset
22-23 and second is at 39FFFA-39FFFB, BUT what are the 4 bytes after this checksum-is that a full flash checksum?!- and what other mcu checksums are there ( adresses from 6210 v3.01 ppm C)?

Cyberdog · 07-11-2001, 17:07

ViperBJK,s sw can only read two CRC of the flashes! Which bits do you mean?
Do you mean, that the full flash (without EEPROM) have a CRC, too?
I think, that NOKIA has made two CRC's in MCU and seven CRC's in PPM!
All language has got other CRC.

One question:
When you read full flash (with EEPROM), than you have eight CRC's in PPM file.
When you read flash (without EEPROM), than you have only seven CRC's!!!!!
Why?
There are only seven language in package.
Is tha last CRC, a CRC for the full PPM file.
The phone controll first the seperate CRC's and than the full CRC.
Than you maybe think right.
Maybe this is the CRC for MCU and PPM!
Have you made any tests with NFREE?
I have made a file, for made MCU update for 8210 v5.16, but I think it dosen't work, but nobody would test it´.
I think it is possible to make a sw for PPM or MCU update for homeuser.
I and my friend would like to make this.
If you have interestet, you can help me.

Cyberdog

gigaphreak · 07-12-2001, 13:32

no not full flash (mcu+ppm+pmm) a checksum for mcu+ppm block!!!

how to make such a home flasher?please tell me...

Cyberdog · 07-12-2001, 16:33

It's not so easy I think!
At fist, do you think, where do the NFREE program read, where stands the CRC's in PPM?
Where stands the adresses????????????
I must know it!!!!!!!!!!!!!!!!!!!
I write if I have made a 100% WORKING MCU or PPM Update!

Cyberdog

gigaphreak · 07-12-2001, 17:30

if you don't know where the checksum adresses in ppm are you haven't done enough research!! because thats too easy: search in ppm block 7x"00","01",8x"00" and after or before(i don't remember) that is the ppmchecksum of this block! but this is not usefull! you siad you made "upgrade 8210" file, but you haven't tested yet... i can tell you what happens! i have tested with my 6210...i changed only mcu block!did some changes in this block to correct checksum(don't tell me now "if you change checksum the phone does not work" I DID NOT CHANGE THE CHECKSUM!!!)

i did that for mcu block with the known mcu checksums!!! but phone has no network and resets after about 10 sek!!! so this has nothing to do with ppm package!! there must be an additional mcu checksum or some kind of combined(mcu+other) checksum!!! if we get this checksum we can change mcu and maybe ppm!!!!

Cyberdog · 07-12-2001, 18:00

You have change some thinks in MCU flash, than was the CRC the same and the file a other! Is this right?
You only have update MCU?
You must rewrite PPM flash, too and flash it with MCU file.
You can't flash MCU file only, becouse than you have a other version on MCU!!!!!

In my file I have change the MCU CRC!
CRC same than the other.
Than I have change all PPM CRC's!
PPM CRC's than same as the other.
But the Adresses (when I read it with NFREE) are other than the original version.
The program NFREE search the written CRC's in PPM on the same adresse than the phone where I have readet.
I think, when I have rewrite this, than my file WORKS!

You have not untersand me!
I must know, where in MCU or PPM stands the right position for reading the CRC's???????
This adress I must change.
Do you know this adresse?

Cyberdog

alaraf · 07-14-2001, 14:20

Cyberdog, I think you forgot about Flash Authority checksum. Without knowladge how it is calculated you can't update SW in phone.

Maby I'm in wrong and you have this algorithm????

AlAraf

gigaphreak · 07-14-2001, 22:52

i think cyberdog (and me) try to find other solution:

to let faid as it is... and so on to let all checksums as they are(just to change some (unimportant)bytes to correct to the existing checksums from the "original" softwareversion, BUT for that we need every checksum in ppm and mcu and maybe for both!!!

Cyberdog · 07-15-2001, 21:23

He gigaphreak!

Do you know NEWS about our project?
If you have news, than write me a mail to [email protected] and not into forum, becouse, ALL in this forum would like to change PPM or MCU and NOBODY would like to held us!!!!!!!!!!!!!!!!!!!!
I think, now we written by mail.

Cyberdog

Ice Dragon · 07-16-2001, 06:51

Quote:

Originally posted by gigaphreak:
i think cyberdog (and me) try to find other solution:

to let faid as it is... and so on to let all checksums as they are(just to change some (unimportant)bytes to correct to the existing checksums from the "original" softwareversion, BUT for that we need every checksum in ppm and mcu and maybe for both!!!

I already did that:
I let the current/existing checksums in their original values, changed some "unimportant" bytes to compensate the changes done. No "Contact Service" errors but also no signal and phone resets.

Although I'm running tests as to what the checksums on the end of the flash are for.

It's possible that there are other checkpoints (not just checksums) that the phone is checking. Although we didn't incur CS, the next obstacle is the no network.

I'm still having doubts about this so called FAID. Sometimes I think it's the MSID but I can't be sure. I can't determine the FAID from the 6210 (v3.01C) and the MSID (using NokiaTool and others to see the MSID).

gigaphreak · 07-16-2001, 12:36

you can't get msid? use wintesla!

yes ice dragon...i did same ... and i had no network too and phone resets too! i have found out that there are some bytes after the (first) mcu checksum area e.g. 6210 v3.01
offset 330140/41 is "3401" if you change this value to anything else... you'll get exactly the same problems(not net and reset) BUT after these two bytes from 330142 to 33015F you can change EVERYTHING!!! and you HAVE NET AND NO RESET...next two bytes seem to be the next "fileinternal" checksum after these two bytes you can again change everythin you want (till 33017F) and so on ->

two bytes "check" (unchangeable), 30 bytes data(changeable), two bytes "check" .....

so what is this? it must be something like secnd mcu checksum!!! this is the problem why the phone does not get net and the reset!

Cyberdog · 07-16-2001, 19:03

He!

Did anyone have a full flash for 8210 5.16 or 5.21?
Please send me!!!!!!!!!!!!!
I need it for tests.

THX
Cyberdog

Bert · 07-17-2001, 05:02

Hello
Check your email cyberdog

good luck!

Jedli · 09-25-2001, 02:57

Hello Gigaphreak, Could I change language, when I change bytes by your advance:

 i have found out that there are some bytes after the (first) mcu checksum area e.g. 6210 v3.01 offset 330140/41 is "3401" if you change this value to anything else... you'll get exactly the same problems(not net and reset) BUT after these two bytes from 330142 to 33015F you can change EVERYTHING!!! and you HAVE NET AND NO RESET...next two bytes seem to be the next "fileinternal" checksum after these two bytes you can again change everythin you want (till 33017F) and so on -> two bytes "check" (unchangeable), 30 bytes data(changeable), two bytes "check" .....

 Is it possible to change language by this.

Cyberdog · 09-26-2001, 17:33

Where read Viper the "Addy"-values?

THX Cyberdog

07-11-2001, 11:26	#1 (permalink)
gigaphreak Insane Poster Join Date: Feb 2001 Posts: 85 Member: 3397 Status: Offline Thanks Meter: 0	mcu checksums... can anyone tell me if there are other mcu software checksums?! first one is on file offset 22-23 and second is at 39FFFA-39FFFB, BUT what are the 4 bytes after this checksum-is that a full flash checksum?!- and what other mcu checksums are there ( adresses from 6210 v3.01 ppm C)?

09-25-2001, 02:57	#14 (permalink)
Jedli Junior Member Join Date: May 2001 Location: Czech Republic Posts: 34 Member: 4781 Status: Offline Thanks Meter: 0	Hello Gigaphreak,<br />Could I change language, when I change bytes by your advance: <br />i have found out that there are some bytes after the (first) mcu checksum area e.g. 6210 v3.01<br />offset 330140/41 is "3401" if you change this value to anything else... you'll get exactly the same problems(not net and reset) BUT after these two bytes from 330142 to 33015F you can change EVERYTHING!!! and you HAVE NET AND NO RESET...next two bytes seem to be the next "fileinternal" checksum after these two bytes you can again change everythin you want (till 33017F) and so on -> <br />two bytes "check" (unchangeable), 30 bytes data(changeable), two bytes "check" ..... <br />Is it possible to change language by this.

09-26-2001, 17:33	#15 (permalink)
Cyberdog No Life Poster Join Date: Dec 2000 Location: Austria Posts: 483 Member: 2832 Status: Offline Thanks Meter: 0	Where read Viper the "Addy"-values? THX<br />Cyberdog

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
2630 FSIG/ext. FSIG/MCU checksum/what else?	krisha	Nokia Digital Core Technology 4 ( DCT-4 )	1	11-19-2008 09:54
9210i mcu checksum failed	mj2000	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	1	12-16-2003 15:16
8810 Ver 3.01 .. Need Mcu Backup, or repair Mcu Checksum .. Brobble ?	makona	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	6	03-13-2002 02:24
mcu checksum failed	CellM@n	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	5	12-11-2001 05:31
eeprom checksum , mcu rom checksum !!!!!	makona	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	5	01-25-2001 00:44

07-11-2001, 17:07	#2 (permalink)
Cyberdog No Life Poster Join Date: Dec 2000 Location: Austria Posts: 483 Member: 2832 Status: Offline Thanks Meter: 0	ViperBJK,s sw can only read two CRC of the flashes! Which bits do you mean? Do you mean, that the full flash (without EEPROM) have a CRC, too? I think, that NOKIA has made two CRC's in MCU and seven CRC's in PPM! All language has got other CRC. One question: When you read full flash (with EEPROM), than you have eight CRC's in PPM file. When you read flash (without EEPROM), than you have only seven CRC's!!!!! Why? There are only seven language in package. Is tha last CRC, a CRC for the full PPM file. The phone controll first the seperate CRC's and than the full CRC. Than you maybe think right. Maybe this is the CRC for MCU and PPM! Have you made any tests with NFREE? I have made a file, for made MCU update for 8210 v5.16, but I think it dosen't work, but nobody would test it´. I think it is possible to make a sw for PPM or MCU update for homeuser. I and my friend would like to make this. If you have interestet, you can help me. Cyberdog

07-12-2001, 13:32	#3 (permalink)
gigaphreak Insane Poster Join Date: Feb 2001 Posts: 85 Member: 3397 Status: Offline Thanks Meter: 0	no not full flash (mcu+ppm+pmm) a checksum for mcu+ppm block!!! how to make such a home flasher?please tell me...

07-12-2001, 16:33	#4 (permalink)
Cyberdog No Life Poster Join Date: Dec 2000 Location: Austria Posts: 483 Member: 2832 Status: Offline Thanks Meter: 0	It's not so easy I think! At fist, do you think, where do the NFREE program read, where stands the CRC's in PPM? Where stands the adresses???????????? I must know it!!!!!!!!!!!!!!!!!!! I write if I have made a 100% WORKING MCU or PPM Update! Cyberdog

07-12-2001, 17:30	#5 (permalink)
gigaphreak Insane Poster Join Date: Feb 2001 Posts: 85 Member: 3397 Status: Offline Thanks Meter: 0	if you don't know where the checksum adresses in ppm are you haven't done enough research!! because thats too easy: search in ppm block 7x"00","01",8x"00" and after or before(i don't remember) that is the ppmchecksum of this block! but this is not usefull! you siad you made "upgrade 8210" file, but you haven't tested yet... i can tell you what happens! i have tested with my 6210...i changed only mcu block!did some changes in this block to correct checksum(don't tell me now "if you change checksum the phone does not work" I DID NOT CHANGE THE CHECKSUM!!!) i did that for mcu block with the known mcu checksums!!! but phone has no network and resets after about 10 sek!!! so this has nothing to do with ppm package!! there must be an additional mcu checksum or some kind of combined(mcu+other) checksum!!! if we get this checksum we can change mcu and maybe ppm!!!!

07-12-2001, 18:00	#6 (permalink)
Cyberdog No Life Poster Join Date: Dec 2000 Location: Austria Posts: 483 Member: 2832 Status: Offline Thanks Meter: 0	You have change some thinks in MCU flash, than was the CRC the same and the file a other! Is this right? You only have update MCU? You must rewrite PPM flash, too and flash it with MCU file. You can't flash MCU file only, becouse than you have a other version on MCU!!!!! In my file I have change the MCU CRC! CRC same than the other. Than I have change all PPM CRC's! PPM CRC's than same as the other. But the Adresses (when I read it with NFREE) are other than the original version. The program NFREE search the written CRC's in PPM on the same adresse than the phone where I have readet. I think, when I have rewrite this, than my file WORKS! You have not untersand me! I must know, where in MCU or PPM stands the right position for reading the CRC's??????? This adress I must change. Do you know this adresse? Cyberdog

07-14-2001, 14:20	#7 (permalink)
alaraf Junior Member Join Date: May 2001 Posts: 15 Member: 4817 Status: Offline Thanks Meter: 0	Cyberdog, I think you forgot about Flash Authority checksum. Without knowladge how it is calculated you can't update SW in phone. Maby I'm in wrong and you have this algorithm???? AlAraf

07-14-2001, 22:52	#8 (permalink)
gigaphreak Insane Poster Join Date: Feb 2001 Posts: 85 Member: 3397 Status: Offline Thanks Meter: 0	i think cyberdog (and me) try to find other solution: to let faid as it is... and so on to let all checksums as they are(just to change some (unimportant)bytes to correct to the existing checksums from the "original" softwareversion, BUT for that we need every checksum in ppm and mcu and maybe for both!!!

07-15-2001, 21:23	#9 (permalink)
Cyberdog No Life Poster Join Date: Dec 2000 Location: Austria Posts: 483 Member: 2832 Status: Offline Thanks Meter: 0	He gigaphreak! Do you know NEWS about our project? If you have news, than write me a mail to [email protected] and not into forum, becouse, ALL in this forum would like to change PPM or MCU and NOBODY would like to held us!!!!!!!!!!!!!!!!!!!! I think, now we written by mail. Cyberdog

07-16-2001, 12:36	#11 (permalink)
gigaphreak Insane Poster Join Date: Feb 2001 Posts: 85 Member: 3397 Status: Offline Thanks Meter: 0	you can't get msid? use wintesla! yes ice dragon...i did same ... and i had no network too and phone resets too! i have found out that there are some bytes after the (first) mcu checksum area e.g. 6210 v3.01 offset 330140/41 is "3401" if you change this value to anything else... you'll get exactly the same problems(not net and reset) BUT after these two bytes from 330142 to 33015F you can change EVERYTHING!!! and you HAVE NET AND NO RESET...next two bytes seem to be the next "fileinternal" checksum after these two bytes you can again change everythin you want (till 33017F) and so on -> two bytes "check" (unchangeable), 30 bytes data(changeable), two bytes "check" ..... so what is this? it must be something like secnd mcu checksum!!! this is the problem why the phone does not get net and the reset!

07-16-2001, 19:03	#12 (permalink)
Cyberdog No Life Poster Join Date: Dec 2000 Location: Austria Posts: 483 Member: 2832 Status: Offline Thanks Meter: 0	He! Did anyone have a full flash for 8210 5.16 or 5.21? Please send me!!!!!!!!!!!!! I need it for tests. THX Cyberdog

07-17-2001, 05:02	#13 (permalink)
Bert No Life Poster Join Date: Oct 1999 Location: Hong Kong Posts: 1,509 Member: 596 Status: Offline Sonork: 100.33096 Thanks Meter: 514	Hello Check your email cyberdog good luck!