How to find ASK -> RPL algorithm (part 1) - Page 2 - GSM-Forum

alnasser · 12-24-2004, 01:28

hehe

finaly since two year..........will be back to see part 2

**..::Neo::..** · 12-24-2004, 04:12

how is every one is waiting for part 2 and we did't see any useful post or inofrmation till now

kiriazy · 12-24-2004, 05:00

Quote:

Originally Posted by zulea

Hi,

Just downlaod HEX dump from TDS-6 and start disassembling.
The algorithm for calculate RPL data from ASK files is there.
The HEX file of TDS-6 box can be free downloaded here:
http://www.zulea.ro/TDS6.BIN

Just use IDA and select processor "Hitachi H8/300H".
Good luck

If I will have enough free time, more interesting info soon in "part 2".

Best regards,
Zulea

it is such a great thing at last to repair to ask files but

COULD U EXPLAIN CLEARER PLEASE

thanx ZULEA

MiKa · 12-26-2004, 16:29

Hello,
Who have disassembled this file?
Where is reset vector for this CPU?
MiKa

toddz · 12-27-2004, 06:01

Any chance of giving us the EEPROM binary file to go along with the processor binary file?

Todd

MiKa · 12-28-2004, 11:49

TO Zulea:
Please send more info about disassembing this file...
I have problem with IDA... (need sppecial settings??? )
B.R:
MiKa

toddz · 12-29-2004, 05:41

@MiKa

Just choose H8300A as the processor type and then the defaults for memory size. After that, you will have to examine the vector area to figure out where the code starts. Vectors start at address 0x00000000 and are 4 bytes (long type).

Todd

Zanzamar · 12-29-2004, 09:46

Hehe, if you have problems finding vector table, definitely you'll have much bigger problems finding algo itself, coz i don't see any strings like "ASK/RPL algo entry point here" inside that dump

John_Doe · 12-29-2004, 12:44

Quote:

Originally Posted by Zanzamar

Hehe, if you have problems finding vector table, definitely you'll have much bigger problems finding algo itself, coz i don't see any strings like "ASK/RPL algo entry point here" inside that dump

hehehe, good one

however, as bph&co already told here, no algo for calculation DATA1/DATA2 inside that dump...

12-29-2004, 13:15

But Zuki is smart, he will "find" something for sure, lol

TechPhone · 12-29-2004, 13:24

waiting.......................

mayer · 12-29-2004, 16:30

Quote:

Originally Posted by legija

But Zuki is smart, he will "find" something for sure, lol

would be better not to force him to proof how smart he is and what he really can find by himself. this wouldnt affect onlz the griffin-boyz

toddz · 12-30-2004, 03:48

john doe, bph&co,

Can either of you please verify that this binary file is actually TDB-6 instead of TDS-6? The code looks good at first glance, but it could have been changed slightly.

Todd

John_Doe · 12-30-2004, 03:56

Quote:

Originally Posted by toddz

john doe, bph&co,

Can either of you please verify that this binary file is actually TDB-6 instead of TDS-6? The code looks good at first glance, but it could have been changed slightly.

Todd

verified. zulea was probably "bull****ed" by somebody...

toddz · 12-31-2004, 17:38

So could this file be used to make a TDB-6 box from a TDF-4 box, they seem to be exactly the same box just with different code? Of course I assume that the TDB-6 box would need to be activated, and programmed to support the configuration keys for a specific provider. Also the closing lock password and the security box password would have to be known. Finally you would also have to have a PKD-1SA+.

Todd

12-24-2004, 04:12	#17 (permalink)
..::Neo::.. Administrator Join Date: Jul 2002 Location: E G Y P T Age: 39 Posts: 3,224 Member: 14178 Status: Offline Thanks Meter: 9,101	how is every one is waiting for part 2 and we did't see any useful post or inofrmation till now Last edited by Evil Neo; 12-24-2004 at 17:06.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Similar Threads
thread	Thread Starter	Forum	Replies	Last Post
how to use ASK and RPL on HWK - with image and video tutorial	tarek on	HWK	15	09-10-2010 18:06
how to read ask for rpl?	sandrea	Cyclonebox	1	09-18-2009 10:29
Wanted: Calculator for .ask -> .rpl program	m_dige	Wanted Products	14	09-02-2009 15:38
How to make ASK/RPL calculation to repair dead phones, ASK/RPL server settings	InfinitySupport	Infinity-Box	4	03-20-2008 23:57

12-24-2004, 01:28	#16 (permalink)
alnasser Freak Poster Join Date: Feb 2001 Location: K.S.A Age: 24 Posts: 376 Member: 3463 Status: Offline Thanks Meter: 4	hehe finaly since two year..........will be back to see part 2

12-26-2004, 16:29	#19 (permalink)
MiKa Freak Poster Join Date: Dec 2001 Location: Slovakia Posts: 114 Member: 7856 Status: Offline Thanks Meter: 0	Hello, Who have disassembled this file? Where is reset vector for this CPU? MiKa

12-27-2004, 06:01	#20 (permalink)
toddz Crazy Poster Join Date: Mar 2002 Location: Texas, USA Posts: 56 Member: 10368 Status: Offline Thanks Meter: 0	Any chance of giving us the EEPROM binary file to go along with the processor binary file? Todd

12-28-2004, 11:49	#21 (permalink)
MiKa Freak Poster Join Date: Dec 2001 Location: Slovakia Posts: 114 Member: 7856 Status: Offline Thanks Meter: 0	TO Zulea: Please send more info about disassembing this file... I have problem with IDA... (need sppecial settings??? ) B.R: MiKa

12-29-2004, 05:41	#22 (permalink)
toddz Crazy Poster Join Date: Mar 2002 Location: Texas, USA Posts: 56 Member: 10368 Status: Offline Thanks Meter: 0	@MiKa Just choose H8300A as the processor type and then the defaults for memory size. After that, you will have to examine the vector area to figure out where the code starts. Vectors start at address 0x00000000 and are 4 bytes (long type). Todd

12-29-2004, 09:46	#23 (permalink)
Zanzamar Freak Poster Join Date: Jun 2002 Location: Scara Brae Posts: 246 Member: 12623 Status: Offline Thanks Meter: 5	Hehe, if you have problems finding vector table, definitely you'll have much bigger problems finding algo itself, coz i don't see any strings like "ASK/RPL algo entry point here" inside that dump

12-29-2004, 13:15	#25 (permalink)
legija Guest Posts: n/a Member:	But Zuki is smart, he will "find" something for sure, lol

12-29-2004, 13:24	#26 (permalink)
TechPhone No Life Poster Join Date: Oct 2003 Location: MUMBAI Age: 54 Posts: 1,202 Member: 41672 Status: Offline Thanks Meter: 195	waiting.......................

12-30-2004, 03:48	#28 (permalink)
toddz Crazy Poster Join Date: Mar 2002 Location: Texas, USA Posts: 56 Member: 10368 Status: Offline Thanks Meter: 0	john doe, bph&co, Can either of you please verify that this binary file is actually TDB-6 instead of TDS-6? The code looks good at first glance, but it could have been changed slightly. Todd

12-31-2004, 17:38	#30 (permalink)
toddz Crazy Poster Join Date: Mar 2002 Location: Texas, USA Posts: 56 Member: 10368 Status: Offline Thanks Meter: 0	So could this file be used to make a TDB-6 box from a TDF-4 box, they seem to be exactly the same box just with different code? Of course I assume that the TDB-6 box would need to be activated, and programmed to support the configuration keys for a specific provider. Also the closing lock password and the security box password would have to be known. Finally you would also have to have a PKD-1SA+. Todd