HEX study - first results!!! - GSM-Forum

ldril · 02-15-2002, 16:32

This message is a follow-up (with a small correction) for: <a href="http://www.gsmcity.de/ubb/ultimatebb.php?ubb=get_topic&f=20&t=001687" target="_blank">http://www.gsmcity.de/ubb/ultimatebb.php?ubb=get_topic&f=20&t=001687</a>

The sub at 06F2 actually reads 13 bytes from PC and is the sub for MSID decoding. It returns to the PC 4 bytes with PPM CHK, 4 bytes with COBBA_ID and 3 check bytes: First byte MSID ---- check bytes should be 81 ---- A5 A6 A7 82 ---- A8 A9 AA 83 ---- AC AD AB

I have written a program that emulates the PIC to decode the MSID number. I have to put it somewhere online. Most probably it will at http:\\www.geocities.com\ldril\

ldril · 02-15-2002, 16:43

Oops, forgot to mention that you must have in the same directory the file dex0.hex <img src="rolleyes.gif" border="0">

ldril

Freestyler2000 · 02-15-2002, 16:47

Hi Downloaded your program, but cannot calculate Cobba ID and flash checksum for 81111111111111111111111111. Why?

Best regards Daniel

Y2K · 02-15-2002, 17:15

@daniel checksum for 81111111111111111111111111 could it be that cobbaID starts with 2A.... and faid with EE9C.....

<img src="biggrin.gif" border="0"> <img src="biggrin.gif" border="0">

best regards Y2K

[ 15 February 2002: Message edited by: Y2K ]

ldril · 02-15-2002, 17:19

What exactly do you mean by cannot calculate? How did the program behave? Any error messages? What was the output?

Do you have the hex file in the same directory?

Anyway for me it works: Flash chk: 941BD1C8 Cobba ID: 2A15CFB9 Check: 6EE49AA867 (ofc as you can see this is not a valid MSID)

VsH-GsM · 02-15-2002, 17:30

@drill Hey!!! You are great!!! Good work!!! Keep on your Excellent work!!! Please send me a source of your program to : [email protected] !!! I want to Make Log Calculator... Thank you!

@Y2K No,Can not

Y2K · 02-15-2002, 17:54

@VsH-GsM

 hehe could be for 10000% belife me <img src="biggrin.gif" border="0"> <img src="biggrin.gif" border="0">

daniel know what i'mtalking about <img src="wink.gif" border="0">

dito · 02-15-2002, 18:03

misd.bat

dec_msid.exe 00112233445566778899001122

Gives Flash chk: 34BEAABF Cobba ID: 505DB56C and check 4B0CFA887E

Was goning to use a msid I knew, but anyway...

Best regards!

Lead · 02-15-2002, 18:05

MSID: 819516F525579B6E7312075FAB Flash chk: 92614E65 .... OK Cobba ID: 006347F7 Check: A5A6A7248B

davieb · 02-15-2002, 18:14

Wow! If source is released (or if you work on it now!) I expect a log calculator to be out within hours!

Forgive me for my ignorance but as I understand it - that program extracts flash, cobba, and check from readed MSID? In which case, all that needs done is the faid calc algo, which takes in these values, to be "emulated"??

Well done idril!!!

ldril · 02-15-2002, 18:18

I think the MSID can start only with 81, 82 or 83. Other values might not give an answer at all... and the program does very few checks for good input data. So GIGO (garbage in garbage out <img src="smile.gif" border="0"> ). If the first 3 bytes of check are not what I described earlier, then I guess the MSID is not right.

ldril

ldril · 02-15-2002, 18:40

[quote]Originally posted by DavieB: Wow! If source is released (or if you work on it now!) I expect a log calculator to be out within hours!

Forgive me for my ignorance but as I understand it - that program extracts flash, cobba, and check from readed MSID? In which case, all that needs done is the faid calc algo, which takes in these values, to be "emulated"??

Well done idril!!!<hr></blockquote>

You're right, the values are decoded from MSID. I'm working to find out how the FAID is calculated. For this I need some input and output of the loggers. Can someone send some logs to me pls?

ldril

davieb · 02-15-2002, 18:53

idril check you mail - a calc'd and uncalc'd koci are attached... Keep up the good work!

VsH-GsM · 02-15-2002, 19:27

***************** OUTPUT LOG FROM LOGGER ***************** [ppm_ver] in=Here is Phone version in hex format

[imei] in=Here is Phone imei in hex format

[msid] in=Here is Phone MSID

[data] in=Here is Some bytes: 1st Bytes <img src="tongue.gif" border="0"> hone ID 2nd Byte <img src="tongue.gif" border="0"> PM Info 3th Byte:MSID Checksum 4th Byte <img src="biggrin.gif" border="0"> SP internal version ************************************************* ******************** *************** CALCULATED LOG FOR LOGGER *************** [ppm_ver] out=PPM ver in String out=IMEI in DEC out=MSID out=FAID out=FAID CHECKSUM ************************************************* ******************** Here is faid checksum calculating algorithm by VsH-GsM: FAID Checksum: B8 + phone_id + all numbers of FAID example: Phone ID :2C (6150) MSID : 821EE569C7B8F7E7CCECF3F204 FAID : 3D09CB14F43B4292702CFC37 FAID CHECKSUM : B8 + 2C + 3D + 09 + CB + 14 + F4 + 3B + 42 + 92 + 70 + 2C + FC + 37 = DB ************************************************* ********************

GSMWIZARD · 02-15-2002, 19:45

[quote]Originally posted by ldril: This message is a follow-up (with a small correction) for: <a href="http://www.gsmcity.de/ubb/ultimatebb.php?ubb=get_topic&f=20&t=001687" target="_blank">http://www.gsmcity.de/ubb/ultimatebb.php?ubb=get_topic&f=20&t=001687</a>

The sub at 06F2 actually reads 13 bytes from PC and is the sub for MSID decoding. It returns to the PC 4 bytes with PPM CHK, 4 bytes with COBBA_ID and 3 check bytes: First byte MSID ---- check bytes should be 81 ---- A5 A6 A7 82 ---- A8 A9 AA 83 ---- AC AD AB

I have written a program that emulates the PIC to decode the MSID number. I have to put it somewhere online. Most probably it will at http:\\www.geocities.com\ldril\<hr></blockquote>

hi idril

excellent work.........!!!!!!!!

02-15-2002, 16:32	#1 (permalink)
ldril Insane Poster Join Date: Jan 2002 Location: Romania Posts: 61 Member: 8505 Status: Offline Thanks Meter: 0	HEX study - first results!!! This message is a follow-up (with a small correction) for:<br /><a href="http://www.gsmcity.de/ubb/ultimatebb.php?ubb=get_topic&f=20&t=001687" target="_blank">http://www.gsmcity.de/ubb/ultimatebb.php?ubb=get_topic&f=20&t=001687</a> The sub at 06F2 actually reads 13 bytes from PC and is the sub for MSID decoding. It returns to the PC 4 bytes with PPM CHK, 4 bytes with COBBA_ID and 3 check bytes:<br />First byte MSID ---- check bytes should be<br />81 ---- A5 A6 A7<br />82 ---- A8 A9 AA<br />83 ---- AC AD AB I have written a program that emulates the PIC to decode the MSID number. I have to put it somewhere online. Most probably it will at http:\\www.geocities.com\ldril\

02-15-2002, 16:47	#3 (permalink)
Freestyler2000 No Life Poster Join Date: Dec 2000 Location: UK Posts: 724 Member: 2868 Status: Offline Thanks Meter: 514	Hi<br />Downloaded your program, but cannot calculate Cobba ID and flash checksum for 81111111111111111111111111.<br />Why? Best regards<br />Daniel

02-15-2002, 17:15	#4 (permalink)
Y2K VIP-Member Join Date: May 1999 Location: home Posts: 285 Member: 69 Status: Offline Thanks Meter: 0	@daniel<br />checksum for 81111111111111111111111111<br />could it be that cobbaID starts with 2A....<br />and faid with EE9C..... <img src="biggrin.gif" border="0"> <img src="biggrin.gif" border="0"> best regards Y2K [ 15 February 2002: Message edited by: Y2K ]</p>

02-15-2002, 17:19	#5 (permalink)
ldril Insane Poster Join Date: Jan 2002 Location: Romania Posts: 61 Member: 8505 Status: Offline Thanks Meter: 0	What exactly do you mean by cannot calculate? How did the program behave? Any error messages? What was the output? Do you have the hex file in the same directory? Anyway for me it works:<br />Flash chk: 941BD1C8 Cobba ID: 2A15CFB9 Check: 6EE49AA867<br />(ofc as you can see this is not a valid MSID)

02-15-2002, 17:30	#6 (permalink)
VsH-GsM Banned Join Date: Nov 2001 Location: IRAN Age: 38 Posts: 3,679 Member: 7444 Status: Offline Sonork: 100.99999 Thanks Meter: 10,013	@drill<br />Hey!!!<br />You are great!!!<br />Good work!!!<br />Keep on your Excellent work!!!<br />Please send me a source of your program to : [email protected] !!!<br />I want to Make Log Calculator...<br />Thank you! @Y2K <br />No,Can not

02-15-2002, 16:43	#2 (permalink)
ldril Insane Poster Join Date: Jan 2002 Location: Romania Posts: 61 Member: 8505 Status: Offline Thanks Meter: 0	Oops, forgot to mention that you must have in the same directory the file dex0.hex <img src="rolleyes.gif" border="0"> ldril

02-15-2002, 17:54	#7 (permalink)
Y2K VIP-Member Join Date: May 1999 Location: home Posts: 285 Member: 69 Status: Offline Thanks Meter: 0	@VsH-GsM <br />hehe could be for 10000% belife me <img src="biggrin.gif" border="0"> <img src="biggrin.gif" border="0"> daniel know what i'mtalking about <img src="wink.gif" border="0">

02-15-2002, 18:03	#8 (permalink)
dito No Life Poster Join Date: Jan 2000 Posts: 501 Member: 860 Status: Offline Thanks Meter: 1	misd.bat dec_msid.exe 00112233445566778899001122 Gives Flash chk: 34BEAABF Cobba ID: 505DB56C and check 4B0CFA887E Was goning to use a msid I knew, but anyway... Best regards!

02-15-2002, 18:05	#9 (permalink)
Lead No Life Poster Join Date: Aug 2008 Age: 52 Posts: 3,292 Member: 1841 Status: Offline Thanks Meter: 469	MSID: 819516F525579B6E7312075FAB<br />Flash chk: 92614E65 .... OK <br />Cobba ID: 006347F7 <br />Check: A5A6A7248B

02-15-2002, 18:14	#10 (permalink)
davieb No Life Poster Join Date: May 2001 Location: Glasgow, Scotland Posts: 625 Member: 4690 Status: Offline Thanks Meter: 1	Wow!<br />If source is released (or if you work on it now!) I expect a log calculator to be out within hours! Forgive me for my ignorance but as I understand it - that program extracts flash, cobba, and check from readed MSID?<br />In which case, all that needs done is the faid calc algo, which takes in these values, to be "emulated"?? Well done idril!!!

02-15-2002, 18:18	#11 (permalink)
ldril Insane Poster Join Date: Jan 2002 Location: Romania Posts: 61 Member: 8505 Status: Offline Thanks Meter: 0	I think the MSID can start only with 81, 82 or 83. Other values might not give an answer at all... and the program does very few checks for good input data. So GIGO (garbage in garbage out <img src="smile.gif" border="0"> ). If the first 3 bytes of check are not what I described earlier, then I guess the MSID is not right. ldril

02-15-2002, 18:40	#12 (permalink)
ldril Insane Poster Join Date: Jan 2002 Location: Romania Posts: 61 Member: 8505 Status: Offline Thanks Meter: 0	[quote]Originally posted by DavieB:<br /><strong>Wow!<br />If source is released (or if you work on it now!) I expect a log calculator to be out within hours! Forgive me for my ignorance but as I understand it - that program extracts flash, cobba, and check from readed MSID?<br />In which case, all that needs done is the faid calc algo, which takes in these values, to be "emulated"?? Well done idril!!!</strong><hr></blockquote> You're right, the values are decoded from MSID. I'm working to find out how the FAID is calculated. <br />For this I need some input and output of the loggers. Can someone send some logs to me pls? ldril

02-15-2002, 18:53	#13 (permalink)
davieb No Life Poster Join Date: May 2001 Location: Glasgow, Scotland Posts: 625 Member: 4690 Status: Offline Thanks Meter: 1	idril check you mail - a calc'd and uncalc'd koci are attached...<br />Keep up the good work!

02-15-2002, 19:27	#14 (permalink)
VsH-GsM Banned Join Date: Nov 2001 Location: IRAN Age: 38 Posts: 3,679 Member: 7444 Status: Offline Sonork: 100.99999 Thanks Meter: 10,013	*************** OUTPUT LOG FROM LOGGER *************<br />[ppm_ver]<br />in=Here is Phone version in hex format [imei]<br />in=Here is Phone imei in hex format [msid]<br />in=Here is Phone MSID [data]<br />in=Here is Some bytes:<br />1st Bytes <img src="tongue.gif" border="0"> hone ID<br />2nd Byte <img src="tongue.gif" border="0"> PM Info<br />3th Byte:MSID Checksum<br />4th Byte <img src="biggrin.gif" border="0"> SP internal version<br />********************************************* ****************<br />*********** CALCULATED LOG FOR LOGGER ***********<br />[ppm_ver]<br />out=PPM ver in String<br />out=IMEI in DEC<br />out=MSID<br />out=FAID<br />out=FAID CHECKSUM<br />********************************************* ****************<br />Here is faid checksum calculating algorithm by VsH-GsM:<br />FAID Checksum: B8 + phone_id + all numbers of FAID<br />example:<br />Phone ID :2C (6150)<br />MSID : 821EE569C7B8F7E7CCECF3F204<br />FAID : 3D09CB14F43B4292702CFC37<br />FAID CHECKSUM : B8 + 2C + 3D + 09 + CB + 14 + F4 + 3B <br />+ 42 + 92 + 70 + 2C + FC + 37 = DB<br />********************************************* ******************

02-15-2002, 19:45	#15 (permalink)
GSMWIZARD Freak Poster Join Date: Jan 2002 Location: U.K Posts: 114 Member: 8465 Status: Offline Thanks Meter: 0	[quote]Originally posted by ldril:<br /><strong>This message is a follow-up (with a small correction) for:<br /><a href="http://www.gsmcity.de/ubb/ultimatebb.php?ubb=get_topic&f=20&t=001687" target="_blank">http://www.gsmcity.de/ubb/ultimatebb.php?ubb=get_topic&f=20&t=001687</a> The sub at 06F2 actually reads 13 bytes from PC and is the sub for MSID decoding. It returns to the PC 4 bytes with PPM CHK, 4 bytes with COBBA_ID and 3 check bytes:<br />First byte MSID ---- check bytes should be<br />81 ---- A5 A6 A7<br />82 ---- A8 A9 AA<br />83 ---- AC AD AB I have written a program that emulates the PIC to decode the MSID number. I have to put it somewhere online. Most probably it will at http:\\www.geocities.com\ldril\</strong><hr></blockquote> hi idril excellent work.........!!!!!!!!

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
ODM v3.03 First result W375 dead	ab1009	IQ-Box	11	07-01-2007 00:59
Searching for smart clip hex 2.18 for 3 months with no result! PLEASE HELP!	boria	Hardware Equipments for GSM	0	11-09-2006 00:44
HEX study - let's combine our knowledge	ldril	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	7	02-14-2002 23:47
First results for C 30 unlocker for beta testers	bobik	x1x to x45/x50	12	06-15-2001 11:08