[ExiTuS], NokiaPort.deNokia DCT-3 Flash Reverse Engineering

Hier findest du Informationen über das Flash-File. Erklärung von einzelnen Bytes, Strings, usw..

• Übersicht Flash-File (beta)
• MCU
• PPM
• EEPROM
• Menugrafiken
• Menugrafiken Nokia 6210
• Klingeltöne / SMS-Töne
• Indikatoren (Netz-/Akku-Balken)
• Checksummen
• Net Monitor
• Display Zones
• Info Nokia 5130 v05.71

Net-Monitor Offset-Jumps (Teilausschnitt)

...
-------------------------------------------------------------------------------------------------------------------------------------------
0021D710	"00 2A 21 B4"	...
		 -----------
			I
			+-> "00 02 02 70 04 00 46 C0"
-------------------------------------------------------------------------------------------------------------------------------------------
0021D7E0	"00 2A 2F B0"	"00 2A 2F B1"	...
		 -----------	 -----------
			I		I
			I		+-> "01 00 00"	"00 2A 23 6C"	"00 22 03 EC"	"weitere Offset-Adressen ..."
			I
			+-> "01 01 00 00"	"00 2A 23 6C"	"00 22 03 EC"	"weitere Offset-Adressen ..."
-------------------------------------------------------------------------------------------------------------------------------------------
0021D86C	"00 2A 21 CC"	"00 2A 21 C4"	...
		 -----------	 -----------
			I		I
			I		+-> "00 03 01 30"
			I
			+-> "00 03 01 30"
-------------------------------------------------------------------------------------------------------------------------------------------
0021D8B8	"00 21 D8 F0"	"00 21 D8 E4"	"00 21 D8 E4"	"00 21 D8 E0"	"00 21 D8 F0"	"00 21 D8 E4"	"00 21 D8 E4"	"00 21 D8 EA"	"00 21 D8 F0"	"00 21 D8 E4"	...
		 -----------	 -----------	 -----------	 -----------	 -----------	 -----------	 -----------	 -----------	 -----------	 -----------
			I		I		I		I		I		I		I		I		I		I
			I		I		I		I		I		I		I		I		I		+-> "46 FE 47 00 E0 04"
			I		I		I		I		I		I		I		I		I
			I		I		I		I		I		I		I		I		+-> "21 00 5E 40 79 69
			I		I		I		I		I		I		I		I
			I		I		I		I		I		I		I		+-> "21 00 56 40 E0 01"
			I		I		I		I		I		I		I
			I		I		I		I		I		I		+-> "46 FE 47 00 E0 04"
			I		I		I		I		I		I
			I		I		I		I		I		+-> "46 FE 47 00 E0 04"
			I		I		I		I		I
			I		I		I		I		+-> "21 00 5E 40 79 69
			I		I		I		I
			I		I		I		+-> "78 00 E0 07"
			I		I		I
			I		I		+-> "46 FE 47 00
			I		I
			I		+-> "46 FE 47 00
			I
			+-> "21 00 5E 40 ...
-------------------------------------------------------------------------------------------------------------------------------------------
0021D9B0	"00 2A DC 4C"	...
		 -----------
			I
			+-> springt zu "02 02 02 00"
-------------------------------------------------------------------------------------------------------------------------------------------
0021D9CC	"00 2A DC 44"	...
		 -----------
			I
			+-> Springt zu "20 00 00 00"	"00 2A 34 30"
							 -----------
								I
								+-> springt zu "00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 18 19 1A 1B 1C 1D 1E 1F" (Das sind Werte die für die entpsrechende Angabe eingesetzt werden (?)).
-------------------------------------------------------------------------------------------------------------------------------------------
0021DC98	"00 2A 35 50"	"00 2A 33 F8"	"00 2A 35 5C"	"00 2A 33 C0"	"00 2A 33 D8"	...
-------------------------------------------------------------------------------------------------------------------------------------------
...

------------------------------------------------------------------------------------------------------------------------------------------

Net-Monitor Einträge:
*********************
Hier sind die Einträge, die in den einzelnen Net-Monitor-Displays angezeigt werden!
Unter www.NokiaPort.de / "NetMonitor" gibt es mehr Infos zu den einzelnen Displays!*

002201C0	"PRP:"
002201C8	"IMSI:"
002201D0	"CC:"
002201D4	"NC:"
002201D8	"LAC:"
002201E0	"CH :"
002201E8	"CID:
002201F0	"CIPHER :"
002201FC	"HOPPING:"
00220208	"DTX    :"
00220214	"IMSI   :"
00220220	"DTX(DEF):"
0022022C	"DTX(BS) :"
0022023C	"LIGHTS"
00220244	"   RESET
		"  HANDOVER
		"  COUNTERS"

00220264	"HandOOK:"
00220270	"PrevCH :"
0022027C	"HONotOK:"
00220288	"HOIntra:"
00220294	"T200MS:"
0022029C	"T200BS:"
002202A0	"E A H C I BR"
002202B4	" FIELD TEST
		"  DISPLAY
		"  COUNTER
		"   RESET"
002202E0	"NOPSW  :"
002202EC	"SYNCR  :"
002202F8	"RESELEC:"
00220304	"PSW  :"
0022030C	"SYNCR:"
00220314	"BCCH :"
0022031C	"BCCHE:"
00220324	"RESET
0022032C	"TIMERS"
00220334	"ChkSum"
0022033C	"Date"
00220344	"TXT
0022034C	"HW:
00220350	"MM:"
00220354	"RR:"

00220358	" SCREENING
		" INDICATOR
		"   IS"

00220378	"
		" REVISION
		"LEVEL IS"

00220388	"
		"TRANSMITTER"

00220398	"Mod:"
002203A0	"AudReq:"
002203A8	"AccMod:"
002203B0	"H2Path:"
002203B8	"T321:"

002203C0	" AUDIO
		" ENCHANCEMENT

002203D4	"  SHOW TASK
002203E4	"H="
002203E8	"d"

002203EC	"CH RxL TxPwr
		"TS TA RQ RTL
		" C1      C2
		"    CHT"

0022041C	"PM RAR Ro BC
		"RelR QL F
		"CRO TO PenT
		"H MAIO HSN"

0022044C	"SCH C1 rx C2
		"1CH C1 rx C2
		"2CH C1 rx C2
		"    1N 2N"

00220480	"3CH C1 rx C2
		"4CH C1 rx C2
		"5CH C1 rx C2
		"  3N 4N 5N"

002204B4	"6CH C1 rx C2
		"7CH C1 rx C2
		"8CH C1 rx C2
		"  6N 7N 8N"

002204E8	"LReg   1_For
		"1_Pre  2_For
		"2_Pre  3_For
		"3_Pre  4_For"

0022051C	"Serving Cell
		"system info
		"bits"

0022053C	"TMSI(hex)
		"PaRP DSF AGC
		"  AFC   Ch

0022056C	" MCC    MNC
		"LocAreaCode
		"ServChannel
		"   CellId"

0022059C	"CipherValue
		"HoppingValue
		"DTXValue
		"IMSIAttach"

002205CC	"DTXMode
		"DefaultDTXSta
		"DTXValFromBS"

002205F0	"Use menu to
		"  change
		" Screening
		" indicator"

0022061C	"Use menu to
		"toggle BTS
		"test ON/OFF"

00220640	"Use menu to
		"to toggle
		"  lights
		"  ON/OFF"

00220668	"Use menu to
		"toggle cell
		"barr status
		"DIS/ACC/REV"

00220698	"BatVol ChMod
		"BTemp ChTime
		"ChrgVol Pwn
		" BTyp BFDC"

002206CC	"MTDif MPDif
		"BUpV  BDownV
		"AverV SumMF"

002206F4	"DeriC ChAm
		"VDif VDrop
		" VDTi AvDif
		" Temp Volt"

00220724	"TxOn   TxOff
		"ChCur  Stdby
		"Age CAP Curr
		"Tmp CmAhTarg"

00220758	"A1Cnf  A2Cnf
		"  ST   AU3 
		"1Tone  2Tone
		" Conf  HFVol"

0022078C	"CM LD LM NM
		"PEC FEC OEC
		"ACC RXS TXS
		"Mod"

002207B4	"Reset reason
		"Task name"

002207DC	" UN WD DSP
		"SIM IDL STK"

002207E4	"CC Cause VAlu
		"MM Cause Valu
		"RR Coase Valu"

0022080C	"  Use menu
		"  to reset
		"  handover
		"  counters"

00220838	"HandOvOKCntr
		"PrevChanCntr
		"HandOvNOKCnt
		"HOIntraOKCnt"

0022086C	"T200 MS
		"T200 BS"

0022087C	"Use menu to
		"   change
		"  Revision
		"   Level"

002208A8	"Use menu to
		" enable or
		"  disable
		"transmitter"

002208D8	"VSel Bau SA1
		"SCond CStop
		"PIN12  PUK12
		"ATR  FE/PE"

0022090C	"ResF1  ResF2
		"ResF3  ResF4
		"ResF5  ResF6
		"ResF7  ResF8"

00220940	" Ptr  Cntr
		" Task"

00220954	" Status of
		" stacks
		" Block sets"

00220974	"Use menu to
		"reset field
		"test display
		"counters"

002209A4	"PSWMesgCntr
		"SynchMeasCntr
		"CellReselCtr"

002209CC	"NeghbrPSWCntr
		"SyncMeasCntr
		"BCCHMeasCntr
		"BCCHExtMeAtm"

00220A00	"CalRel RelDi
		"MOCAtmp MOOK
		"AllMT   MTOK"

00220A28	"NFai NL NLOK
		"PFai PL PLOK
		" Loc update
		"  counters"

00220A5C	"SFai MO MOOK
		"RFai MT MTOK
		"Sched MSgs
		"SMS counters"

00220A90	"TR1 TR2 TRA
		"TC2 SCH
		"SMS time out
		"  counters"

00220AC0	" Temporary
		"DSP counters
		" R DSP2FTS"

00220AE4	"Use menu to
		"control DSP
		"   audio
		"enhancements"

00220B10	"DB1  B1  DB2
		"HEX1 B2 HEX2
		"HEX3 B3 HEX4
		"  HEX5 HEX6"

00220B48	"DsigL USigL
		"      NseLvl
		" DTbl  UTbl"

00220B70	"ExtAudStatus
		"AudioRequest
		"AccAudMod

00220B98	"EVol PeakVoal
		"CutOff COAve
		"PkAver"

00220BBC	"MicPeak MAve
		"CutOff COAve"

00220BD8	"EAA Ada ERL
		"RxG TxG GLi
		"TxN Sta Mod
		" RVAD TUAD"

00220C08	"MicCutB MicCTA
		"EpCutB EPCTA
		"MicLev EarLv"

00220C30	"  USe menu
		"  to reset
		" field test
		"   timers"

00220C5C	"Use menu to
		"control test
		"  display
		"  timers"

00220C88	"PwrOn In Serv
		"NSPS  TxON
		"   Timers
		"   Status"

00220CB4	"Use menu to
		"select shown
		" task info"

00220CD8	"IDLE  DEV_IO
		"LOCAL MDISND
		"MDIRCV  UI
		" TONE   PN"

00220D08	" FBUS   AUD
		"L1SYSP  L2
		" CC     MM"

00220D38	" RR     RM
		" SMS    EM
		"SIMUPL SIML2
		" DDI"

00220D60	"  FIQ  IRQ"

00220D6C	"MCUSW  PPM
		"MCUSW_Date
		"MCU_Checksum
		"DSP_Version"

00220D9C	"HW version
		"Test version"

Net-Monitor Eintrags-Werte:
***************************
Hier sind die Werte, die bei entsprechenden Displays als Werte eingefügt werden!

Display 1: Verwendete Kanaltypen:
00220DB4	"AGCH"
00220DBC	"BCCH"
00220DC4	"CCCH"
00220DCC	"SEAR"
00220DD4	"NSPS"
00220DDC	"xxxx"
00220DE4	"CBCH"
00220DEC	"SDCC"
00220DF4	"THR0"
00220DFC	"THR1"
00220E04	"TFR"
00220E0C	"TEFR"
00220E14	"F144"
00220E1C	"F96"
00220E24	"F72"
00220E2C	"F48"
00220E34	"F24"
00220E3C	"H480"
00220E44	"H481"
00220E4C	"H240"
00220E54	"H241"
00220E5C	"FA"
00220E64	"FAH0"
00220E6C	"FAH1"

00220DB4	"DTX:DEF   "
00220E80	"DTX:ON   "
00220E8C	"DTX:OFF   "

00220E98	"ON"
00220E9C	"OFF"
00220EA0	"MAY"
00220EA4	"USE"
00220EA8	"NOTALLOWED"

Display 20: Lade-Status: Laden, Fertig geladen, Schnell-Laden, usw..
00220EB8	"xxxxx"
00220EC0	"Charg"
00220EC8	"Maint"
00220ED0	"Faile"
00220ED8	"DisCh"
00220EE0	"InitC"
00220EE8	"BatCk"
00220EF0	"ChaCK"
00220EF8	"CelBr"
00220F00	"BSIFa"
00220F08	"TmpFa"
00220F10	"VolFa"
00220F18	"CurFa"
00220F20	"FastC"
00220F28	"FullM"
00220F30	"HotM"
00220F38	"ColdM"
00220F40	"TxOnC"
00220F48	"TxNoF"
00220F50	"LithC"
00220F58	"LiAFu"
00220F60	"LiFul"
00220F68	"LiTxO"
00220F70	"LNFTx"
00220F78	"ColdC"
00220F80	"I_Che"
00220F88	"L_Che"
00220F90	"F_Che"
00220F98	"M_Che"
00220FA0	"MaBFD"
00220FA8	"LiDCH"
00220FB0	"LiHot"

00220FB8	"UN"
00220FBC	"MO"
00220FC0	"MT"
00220FC4	"IN"

00220FC8	"OS IDLE "
00220FD4	"DEV IO  "
00220FE0	"LOCAL   "
00220FEC	"MDI SEND"
00220FF8	"MDI RECE"
00221004	"UI TASK "
00221010	"TONETASK"
0022101C	"PN TASK "
00221028	"FBUSTASK"
00221034	"AUD TASK"
00221040	"L1 CONTR"
0022104C	"L1 MEAS "
00221058	"L1 SYSPA"
00221064	"L2 TASK "
00221070	"CC TASK "
0022107C	"MM TASK "
00221088	"RR TASK "
00221094	"RM TASK "
002210A0	"SMS TASK"
002210AC	"EM TASK "
002210B8	"SIM UPL "
002210C4	"SIM L2  "
002210D0	"DDI TASK"

002210DC	"NO"
002210E0	"EX"
002210E4	"RO"
002210E8	"SB"
002210EC	"HP"

002210F8	"HD      "
00221104	"HFU1    "
00221110	"HFU2 STD"
0022111C	"HFU2HSOH"

00221128	"V"
0022112C	"K"
00221130	"P"
00221134	"PA"
00221138	"A"
0022113C	"C"
00221140	"CA"

00221144	"xxx"
00221148	"  3"
0022114C	"3/5"
00221150	"  5"
00221154	"372"
00221158	" 64"
0022115C	" 32"

00221160	"DOWN    "
0022116C	"DOWN(UP)"
00221178	"UP      "
00221184	"UP(DOWN)"

---

002A32E0	"STACKS  "

002A32EC	"MSG "

002A32F0	"BUFS "

002A32F8	"FAST BUFS"

002A3304	"ENABLED"

002A330C	"DISABLED"

002A3318	"
		"  CELL BARR
		"  DISCARD"

002A3330	"  CELL BARR
		"  ACCEPTED"

002A3348	"
		"  CELL BARR
		"  REVERSE"

002A3360	"
		"  BTS TEST
		"     ON"

002A3378	"  BTS TEST
		"    OFF"
--------------------------------------------------
002A3388	"00 22 0E 74"
002A338C	"00 22 0E 80"
002A3390	"00 22 0E 8C"
002A3394	"00 22 0E 98"
002A3398	"00 22 0E 9C"
002A339C	"00 22 0E A0"
002A33A0	"00 22 0E A4"
002A33A4	"00 22 0E A8"
002A33A8	"00 22 0E AC"
--------------------------------------------------
002A33AC	"
		" NO TEST"

002A33B8	"ERROR"
002A33C0	"0123456789ABCDEF"
002A33D4	"x"
002A33D8	"xx"
002A33DC	"xxx"
002A33E0	"xxxx"
002A33E8	"xxxxx"
002A33F0	"ON "
002A33F4	"OFF"

002A33F8	"00 2A 33 D4"
002A33F8	"00 2A 33 D8"
002A3400	"00 2A 33 DC"
002A3404	"00 2A 33 E0"
002A3408	"00 2A 33 E8"

002A340C	"00 01 02 03 04 05 06 07 08 90 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 18 19 1A 1B 1C 1D 1E 1F" (Das sind Werte die für die entpsrechende Angabe eingesetzt werden (?)).
002A3430	"00 01 02 03 04 05 06 07 08 90 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 18 19 1A 1B 1C 1D 1E 1F" (Das sind Werte die für die entpsrechende Angabe eingesetzt werden (?)).

©2002 [ExiTuS], NokiaPort.de