tricks only!!!

[ambot]

Tricks only : (i just want to share only)<br />I have applied this things to my 3210v531 phone… using azyshell, nfree, hexworkshop and my full flash I have came up with this tricks… the works of “ice dragon” and “azywerks” inspired me to come up with this tricks… what I did was only to interchange the words or values. Example: I want to change the word “CALLING” to “NETWORK” during the call attemp. using the hexworkshop sw you can interchange the two. I choose the word “NETWORK” as a replacement to the word “CALLING” because both are 7-letter words and if I change the word “calling” to anything which is not a 7-letter word this will change the checksum of my full flash and can cause contact service… adding, deleting or replacing values will change the checksum of the flash… so, what I did was only to interchange (location) the values or words in order not to change the checksum…. This tricks was done at the address 00320000 to 00360000 of my full flash… using azyshell I have manage to split up my full flash to a 128kb size each. The reason why I split up the full flash in order for me not to write back the whole full flash to the phone instead at a certain address only where I made some changes, like in the case of my tricks which is at 00320000-00360000 so I will only flash at the start address 00320000….by the way, if this tricks was done or posted already or sound just a piece of **** pls. ignore this thing…. This is only for those who haven’t managed to search for the tricks like this in this forum if ever there is… and also I’m not a programmer this is only for fun… thanks to the help of azywerks and d_bug this two great guy had inspired me with regards to software...

<br />Trick #1:<br />I interchange the words “Calling” and “Network”. So, every time I made a call the word “Network” will be displayed on the screen not the word “Calling”...

Trick #2..<br />“Message sent” and “Invalid shortcut”. I interchange only the word “Message” and “Invalid”…. “Invalid sent” will be displayed after a successful message sending… and every wrong shortcut “message shortcut” will be displayed…

Trick #3 ( for Philippine network only)<br />“SMART Gold” and “GLOBE”. I interchange the words “smart” and “globe”… so, if I use simcard <br />from globe network, it will display “SMART” (SMART will only came out if the phone doesn’t have any logo installed at globe network)… and the same will happen if you insert simcard from SMART network to the phone.. it will display “GLOBE Gold”.

<br />So, thats it only….. but you can still do a lot of tricks unless you didn’t change your checksum… you will know the checksum of your flash if you open it in hexworkshop ( I use version 3.11) then go to “TOOLS” menu select “GENERATE CHECKSUM” then at generate checksum window you can select the “checksum (16 bit)” then press “generate” button and at the lower part of the Hexworkshop window you will see the checksum generated. Every time you made changes on your flash pls always check the checksum for any changes… this tricks can kill your phone, so, be careful in flashing your phone…. And always make sure you have a good full backup of your phone… I’m not responsible if any bad things happen to your phone… I have only tested this tricks on a 3210v531 PPM “C” phone….. other model not yet……

AND also just this morning i tried to change some without changing the checksum but the phone goes CONTACT SERVICE....any one can explain why?

[aspog]

Hi Ambot!

Good Work Man! I'll try these tricks of yours.

Regards,

<img src="cool.gif" border="0"> <img src="cool.gif" border="0"> <img src="cool.gif" border="0">

[mudboy]

Great idea!<br />You are good..

Regards Mudboy

[masterID]

Hey BOY!<br />Is it true???

I've just last night make experience just like you!!

But no maneged anything <img src="frown.gif" border="0"> <br />Contact service smile for me <img src="frown.gif" border="0">

Cheksumes OK. But I chenged in textbytes in the ppm sector, egsactly :x310000-x31FFFF and an other at x350000-x35ffff. Enough make 64KB partials, not needed 128k, but it is not important.<br />1.case: I changed game message: You lost (or similar, I used hungarien pack) to You sucked. <img src="smile.gif" border="0">

2.case: I changed a provider name: Vodafone to mynamex

All replacing bytes cheksum and word measure stay same, not changed!But I got CS!

I think the mobile cheks the flashcodes not just a simply byte cheksum, but a kind of CRC valu. It calculate the sequence of the bytes too. But I will try your experiences too.

masterID

[ 28 September 2001: Message edited by: masterID ]</p>

[Viper -BJK-]

Why researching for these old things ?

Was solved months ago ..<br />see nfree.gsmsearch.com :0)

Cya, Viper BJK

[rothmanns]

good work man!!!! its been awhile since my last post.... been busy putting up a new store.. continue the goodwork .... more power.

[ambot]

masterID:<br />with regards to your provider name you will come up to a CS because vodafone had 8letters and mynamex had 7letters... you should change it with same # of letters in a word...

rothmanns:<br />thats nice... bihira na rin ako mag internet o mag visit sa forum ngayon... so, good luck...

[ 01 October 2001: Message edited by: ambot ]</p>

[masterID]

Hi,

mynamix is mean Bodolaix, that Bodolai is my firstname, and x is a letter which corrigat the word to Vodafone cheksumes and letters!<br /> Is it clear?

Another interesting thing: when I use vodafone network, the firs second I see vodafone logo, after the 1 second I see Vodafone! It is crazzy!!<br />The phone stores only Vodafone word in its PPM, where from get the vodafone word, meybe from the SIM??

Sorry for my english...

When you calculate cheksums do you use nfree 1.2, or use a simple chaksum calculation? I used a simple (byte added) chksume calc. maybe this is the source of the wrong operation (CS)...

Because I think its not a simple calc., nfree calc some kind of CRC, but Idont understend what kind of CRC is it. I dont understand clearly his explanation of PPM chksums of his page also.

But you are done a very good work!

Do you interested in chaging nokia skin (menu graphics, etc)too? I have some info, but I get a hard coding problem of it.

[masterID]

OK, I've changed the name of Vodafone provider to mine! I had to use nfree 1.2, Thnx for nfree team!!

I have some reason for V and v thing: The vodafone word is came from the SIM, after the identication of provider the phone replace it by the default (and also changeble <img src="smile.gif" border="0"> ) Vodafone word.

Question: It is possible to change the all PPM language section to another languge by using similar method like cheating before mentioned??<br />It would be a hard work, and also maybe get a nice slang translation, because we have to use all sinonames and slangs of the other languge!But we wont need LOG manipulations and boxes and etc.<br />This is a kind of right way?

[Chips]

Ayos kababayan!

[ambot]

masterID:<br />in calculating checksum i use the hexworkshop311 sw... i have mentioned it at the beginning of this topic... with regards to in changing menu graphics, i'm very much interested but maybe i can not handle it because i'm not a programmer... but i will try...

[masterID]

AMBOT:

It is to be very interesting!<br />When I used hexwork 311 cheksum calc with 32 bit, (it a simple byte sum) Your trick with provider name DONT work, however I use v600 3210. But with nfree 1.2 chksum calc, Your trics works!!!!<br />I am also not a programmer, but I interest to this, becaus I learn it lot time before, and last ther is a good subject to make experinence <img src="smile.gif" border="0"> )<br />Nokia's phones stores the logos and I think the skin grafics data in the eeprom (it is a separet chip in 3210). The start-up logo is different than other ones. It has stored a coded (not so plain like picture messages or oplogo) format in the eeprom. And it has animation like menugraphics. I think the skin graphics also stored in the eeprom area. But I cant understand the code format, so a cant find the skin data <img src="frown.gif" border="0"> .<br />I think also ther are only two cheksumes in the eeprom, and the logo area fortunately is above of this area, so it is changeble esaly if you know the storage code algorithm.<br />I help someone to crack this code...

[Viper -BJK-]

I don't know how the logos and grafics are saved within the 3210, but in other phones like the 6210 grafics are saved within the PMM area. Image format is the same as Nokia uses for it's grafic imports. Just check Nokia Dev. Pack.

Anyway, MCU Checksum CAN'T be calculated using HexWorkshop !! It is because the sum is not calculated in 16-bit steps. It is a simple 4 byte addition with set up length. <br />I really can't understand why you guys don't read my project papers. There the same things are already explained. Read it and help us calculating the flashchecksum. Humbling with old things is no big help as infos already exist.

Cya, Viper BJK