Viper n Ice Dragon

[greenapple]

hello to my masters,

just like to ask what is inside the PPM?

i know that is has the language pack, message tone, ringtone in PPM. what i want to know is the break down. i mean in Nfree i can see 7-9 PPM. what are those? thanks

[Brobble]

You mean the checksums! Every Nokia-PPM-Package has 8 Checksums! That NFree sometimes shows only 7, is a bug, but I´m sure, Viper will fix it soon!

Do you know this joke?:

"Mary held her little daughter fif**** minutes under water! Not to make her any troubles, but to see the funny bubbles!" lol

Greetings MR... (after 5 beers) *rülps*

Good night!

[Ice Dragon]

[quote]Originally posted by Kontact:<br /><strong>hello to my masters,

just like to ask what is inside the PPM?

i know that is has the language pack, message tone, ringtone in PPM. what i want to know is the break down. i mean in Nfree i can see 7-9 PPM. what are those? thanks</strong><hr></blockquote>

Read this link:<br /><a href="http://www.gsmcity.de/cgi-bin/ultimatebb.cgi?ubb=get_topic&f=5&t=002362#000000" target="_blank">http://www.gsmcity.de/cgi-bin/ultimatebb.cgi?ubb=get_topic&f=5&t=002362#000000</a><br />it shows how to compute for the checksums and the contents of each PPM block.

[greenapple]

thanks ice d. btw, i tried to change the message tone. to prodece ringtone sound i think i work... i read it in your previous message how to do it.

i think we can also edit the language. what do u think it is possible..?

i use hex editor...

btw, i'm trying to use ida to disassemble Thumb. sadly it's hard to understand the assembly language...

thanks again to both u..

[greenapple]

ice hope u can give me more info.... thanks

[Ice Dragon]

[quote]Originally posted by Kontact:<br /><strong>thanks ice d. btw, i tried to change the message tone. to prodece ringtone sound i think i work... i read it in your previous message how to do it.

i think we can also edit the language. what do u think it is possible..?

i use hex editor...

btw, i'm trying to use ida to disassemble Thumb. sadly it's hard to understand the assembly language...

thanks again to both u..</strong><hr></blockquote>

I tried changing message tone and prove to be successful on some models (5110, 6210 and 3310 mostly, haven't tried on other models, no units available for testing).

With the language, I haven't tried changing some text yet. Most probably the phone will incur no "Contact Service" but also it will have no signal <img src="frown.gif" border="0">

I'm still hunting how to compute for the flash checksum found in the end of full flash or maybe some other checksums I don't know about.

Although Thumb is also an assembly language but its harder to understand than with 80x86 Assembler. Assembler requires a student of the old school. Most developers nowadays use C++.

You do assembly programming yourself?

[ 31 August 2001: Message edited by: Ice Dragon ]</p>

[Brobble]

I tried to change menu names! The problem is: We can correct the PPM-checksums, but not the flash-checksum! Or does anybody know its calculation! Flash-Checksum is 32 bit, last 4 Bytes of flash, before EEPROM begins!

Greetings MR...

[DCAvdP]

Hi everyone,

Is there already a newer version then 1.2 of the<br />great tool by Viper????

Anyone ??

thx

<img src="tongue.gif" border="0">

[Brobble]

@Nutzo:

There is MCU-Checksum, 8 PPM-Checksum and Flash-Checksum! The Flash-Checksum we cant calculate! Can you?

Greetings MR...

[Bph&co]

<img src="smile.gif" border="0">

[ 13 September 2001: Message edited by: Bph&Co ]</p>

[greenapple]

ice: yes, i do some programming but it was eons ago where i used debug doing some little assebmly lang n clipper. i used to run a BBS but when my 486 burnt i stop the bbs.

bec. of my friend i tried to learn nokia.

yesterday, we tried to flash a 3210. but the flash bios seems to be busted it won't erase 3f2000 n 3f2001 address. so it won't work. it's in the PPM area.

i noticed that if the unit says INSERT SIM, then auto shut off, then Contact service, it surely has a PPM problem, most probably corruptted.

i also have the soic clip. i will try what bph_co said and see...

btw, in the hex workshop. i think the checksum 32 has a bug or i'm wrong. i tried to check the PPM checksum32 and in the hexwork it does not compute the right value. do u use another software to compute the checksum32? if yes, can u give it to me. thanks

i tried adding some ringtone, i mean 35 ringtone in 6210 to 38. 8) saidly it didn't work. i think it's possible but the checksum thing is a big problem.

[Ice Dragon]

Hi,

Have you tried the same flash loaders and boot loaders on other 3210s? Do they flash okey?

Was there any error message when trying to write the flash on the 3F2000 of your suspected corrupted flash bios?

Hexworkshop:<br />32-bit checksum calculation is a bug alright. It's still a 16-bit calculation, not a 32-bit. I haven't tried using other hexeditors other than the hexworkshop so I have nothing to recommend it to you.

I once had a Visual Basic program to do a 32-bit calculation but I forgot where I put it. I made it myself, I guess I have to make one again, that is if I'll have a little time enough to do that.

Ringtones:<br />Tried that already, won't work, no signal. It keeps haunting me though. I mean, I can change the message tones successfully but the ringtones kept on eluding me.

If I could change the message tones, recalculate the checksums concerned and rewrite to phone, the phone works with no problem, all working with signal.

But when I change even just one default ringtone, recalculate and rewrite to phone, no "Contact Service" but no signal. I don't know what keeps.

You see, the checksums were altered all right but there is signal in the case of message tones but there is none with ring tones. So it must not be the checksums. Or might be that there is another checksum recalculation that must be done for the whole PPM package, not just be sections.

But if there is another checksum for the whole PPM package and was not recalculated, there should be a "Contact Service" right? Or the CS only shows when the MCU checksum is not correct? Tried altering the contents of the flash for so many times I already forgot what causes what.

<br />Brobble and Nutzo:

Hi guys.

What do you call the 4-bytes checksum (I used to call it Flash checksum) found in the beginning of flash at offset 0038h? Is this 32-bit or 16-bit and anybody know how is this calculated?

And what's the last 32-bit checksum found at the end of the PPM called (the one Brobble was pointing out)?

[greenapple]

on the 3210. i tried diff boot n floader. i think the 3f2000 n 3f2001 byte is really busted like on a diskette bad sector. it seem that i will not erase or upon erasing it validate a wrong output.

yeah, hex work has bugs like u said.

about the ringtone it will try today n let u know. m a little busy my monitor went kaputt. 2 days ago. 8(

[Ice Dragon]

[quote]Originally posted by Kontact:<br /><strong>on the 3210. i tried diff boot n floader. i think the 3f2000 n 3f2001 byte is really busted like on a diskette bad sector. it seem that i will not erase or upon erasing it validate a wrong output.

yeah, hex work has bugs like u said.

about the ringtone it will try today n let u know. m a little busy my monitor went kaputt. 2 days ago. 8(</strong><hr></blockquote>

Tried reading 3F2000 to 400000? Contents should all be FF except the last 6 bytes of the flash.<br /> <br />If contents between 3F2000 to 3FFFFA has values other than FF that could be a big problem indeed since you cannot write to 3F2000. Otherwise, reflash it with your original backup from 200000 to 3F2000 by trimming off the values from 3F2000 to 400000 (since these values should be from the original flash since you cant overwrite into it, right?).

[ 03 September 2001: Message edited by: Ice Dragon ]</p>