PDA

View Full Version : 3410 tester needed!



mestrini
18-08-2004, 03:13 AM
Hi guys,

been looking for function patterns for 3410/2100 so that nokix can be compatible with all DCT3 and need someone to test this flash to see if the scripts with new patterns work ok

What it has: 3410 flash file pack C
- Invert LCD via menu
- Minute beep
- Call duration
- Killed MCU check
- Killed FAID check
(remove .txt extension from attachments)

Please post results quickly :lol:

Cheers and thanks

--------------------------------
edited 22.08.04
uploaded another version

hellhound
18-08-2004, 11:57 AM
i have flashed the phone with your test version but it doesn't work. it asks me the security code although it's not activated( actually what i see on the phone's screen is "hing security" and instead of "ok" button i have "md"
i entered my security code but it sais that is invalid so i can't start the phone. then i have done a full factory reset
and it started with the default code 12345. all text is busted. the minute beep feature it doesn't activate. i selected 0, 5, 10 sec but is off. and i couldn't find the "show call duration" and "invert screen" option.keep on the good work. you are close

mestrini
18-08-2004, 01:28 PM
thanks for the quick reply :)

I'll check the menu structure and code lines to see what might have gone wrong

cheers

hellhound
18-08-2004, 07:23 PM
i'll help you with further testing, but please make some patches from the original file because i am on dial-up with only 10 hours per month :(

hellhound
18-08-2004, 07:24 PM
i'll help you with further testing, but please make some patches from the original file because i am on dial-up with only 10 hours per month :( and it's hard to download 2 MB!

kraze1984
20-08-2004, 04:34 PM
i'll help you with further testing, but please make some patches from the original file because i am on dial-up with only 10 hours per month :( and it's hard to download 2 MB!
Dial-up also, but unlimited :p And my mom has got a 3410 ! i hope she will not notice my experiments on her fone :)

mestrini
20-08-2004, 11:48 PM
nothing new yet. last few days been busy :(

Still, been checking the add_ppm_strings.rx to see where it messes up with the flash file but there are a lot of steps to go through

Hope to have something soon and i'll PM you the scripts and txt files instead of the flash file

cheers

kraze1984
21-08-2004, 03:23 PM
Same thing as by hellhound. The ppm is messed, however in PPMMaker all strings seem to be OK. Another thing, i found two main menus in your flash, using g3n0lite by jook ???! And they were not similar....

hellhound
22-08-2004, 06:38 PM
2 Mestrini. could you release the scripts you have modified so we, who have a 3410 can test them and make them work

mestrini
22-08-2004, 11:24 PM
2 Mestrini. could you release the scripts you have modified so we, who have a 3410 can test them and make them work

Please don't take me wrong but i prefer not to do it right now.

Even so, all i'm doing is finding the patterns of existing functions for 3410/2100 and older versions of phones like 5110/6110. It's true that i edit one or two lines so that the program finds the required BL's/LDR's amongst others but i would like to have it complete and hand it over to Yak for him to evaluate and make available in any upcoming nokix release (i heard he's doing big improvments :eek: ) if he would like it, of course.

About some errors in the first flash i uploaded, i must admit that i had something to do with it. First, i forgot to uncomment some menu structure lines (didn't need them when testing the processing) and that's why the menus didn't show up :P . Second, i found out that nokix's add_ppm_strings.rx script can't count correctly the GREEK LANG strings and maybe that's where the messed ppm strings come from.

So this time the comments are off and also removed some languages, leaving only ENGL, SPAN, PORT

Sorry for having to download it again :( . Please do it from the first post, this time in smaller files

Please post results thanks

cheers

hellhound
24-08-2004, 08:20 AM
this time the flash is destroyed. it still requests the security code. and now i can't call.
the ppm is still destroyed. you have two menu structures at 289170 and 2C70AC. the phone reads the one from 289170 but it shows only 4 menues. i have tried to fix it but it is the same thing.

hellhound
26-08-2004, 07:18 PM
I HAVE A SUGGESTION. patch the file with only one script at once so you can tell were the problem is. good luck

mestrini
31-08-2004, 03:25 PM
Hi again,

thanks for the suggestion but the problem is that i do not have a 3410 nor there is an emulator for me to test the patched flashes and since nokix gives no errors when patching i do not know where the problem is unless flashed to phone.

So what i did was checking instruction lines of the used scripts and even compared the original and patched flash with winarm.
The first thing i saw was that i had skipped a pattern that wasn't being found in 3410 flash, and i think that it was an important ("get_ppm_strings").
Except for eeprom.rx that it is too complex for me to verify i think that all the other scripts used are compatible with 3410 and the only two errors i found were minor (one only affects v5.42 and that's why i use v5.30).

As for the two menu structure found in the edited flashes, if you read a 3310 nokix patched flash with early versions of genolite you'll find two menus as well. But to be sure i followed the pointers in both flashes (using winarm) and they lead to same place: 491ECA -> 04 037E that in decimal means 894. Check this number in thext strings and you'll get the string "MENU" :grin:

So now i patched the flash again using latest versions of edited scripts and ask you to download it again to test.

This time i patched only with invert_LCD script and added new ppm strings and new menu strcture, of course. Removed FAID and MCU kill routines to be sure that it works.

Keepin' my fingers crossed

cheers and post results plz

thanks

hellhound
31-08-2004, 07:24 PM
Hi,
ppm strings are correct now, but the menu still remains bad. the main menu has only 4 submenues (msg, call reg, profiles and settings).
in the settings menu after all usual submenues, the main menu continues with reminders and all the others. in the lcd submenu there are some submenues from "cell info display" and the invert function doesn't work. i select on but it still remains off.

kraze1984
31-08-2004, 08:31 PM
Forgot my flashdrive :( @ home. Will check the flash tomorrow. But i think, i'll get the same result as hellhound.

mestrini
31-08-2004, 09:00 PM
... you have two menu structures at 289170 and 2C70AC. the phone reads the one from 289170 but it shows only 4 menues. i have tried to fix it but it is the same thing.

Sorry once again m8, :roll:

when you wrote this i thought the other menus didn't show up but in your last post you explained a little better and i knew right away that it was a case of missing the menu ending (@end). I've fixed it and will post flash in my previous post, so please be patient and download it again (if you can). This time checksums are already calcd so you can flash it straight away ;-)

thanks

cheers

hellhound
01-09-2004, 12:13 PM
and i think there is something wrong in the eeprom functions, because i have to do a full factory reset for the flash to work, although i have 5.30 version

mestrini
01-09-2004, 12:34 PM
The need to make a full reset is because you go from an original firmware to a modded one. The same thing happens to me every time i get a phone that has never been flashed and i flash it with modded flash. I'm not sure but i think the same happens when going back to the original unmodded firmware.

hope it makes sense

did you have chance to try the new flash?

cheers

hellhound
01-09-2004, 12:43 PM
in this test version (4) the menu shows correct now, but how i said earlier there is something wrong in the eeprom functions. i select on in the lcd menu but it still remains off.
when it starts the phone asks for sec code and there is a strange beep when i press the keyboard and i have to do a full fact reset.and by the way when you post a new test version you can give me a call at 40742635016.you let it ring once so would now to download the new ver. cheers

hellhound
10-09-2004, 02:08 PM
i have modified the call duration gsc and nrx to work with 3410 but the call duration doesn't appear on the phone's screen. can someone tell me what i did wrong? the script is only for 3410 5.30 version

mestrini
10-09-2004, 03:00 PM
why did you add those long patterns since you could easily use nokix's "call" instructions that use same patterns from locate.rx and then returns the result?

see the original call_duration.nrx:


call locate "malloc"; malloc=result
call locate "free"; free=result
call locate "itoa"; itoa=result
call locate "own_get_font"; own_get_font=result
call locate "own_get_string_width"; own_get_string_width=result
call locate "own_get_char_base"; own_get_char_base=result
call locate "own_print_string"; own_print_string=result
call locate "show_prints"; show_prints=result


the next line isn ot necessary because you already defined that PRINT_TEXT_SHOW=rc is the var with the address of the pattern



PRINT_TEXT_SHOW=PRINT_TEXT_SHOW



BTW, how did you get to that hex code? I don't know much about asm and arm but i believe that the A's in the end of the original code are there to be replaced by moved instructions...

and what was the result with the original script with the new patterns?

hellhound
12-09-2004, 09:03 AM
the hex string i gor it from a hex editor :) i looked at the results after compiling call_duration.gsc from g3n0lite and got the functions adress in a 3310 flash and then comparing the asm code to the one from 3410. i think that 3410 works different so another scripts must be built.

mestrini
14-09-2004, 01:00 AM
@ hellhound

i got a 3410 a couple of days ago and now can test the scripts also :-D

the problems you report are also present in my tests and i think that the problem lies in the eeprom table.

The eeprom.rx script i edited finds a function that i believe to be the equivalent of 3310 eeprom table but maybe i let something go by since when activating the patches in the phone's menu there's no change, or goes back to original state if another patch is selected

i'm checking on it now and will post more info when i find something

cheers

hellhound
17-09-2004, 08:04 PM
any progress m8?

mestrini
17-09-2004, 08:18 PM
sorry m8 but haven't got the time these days. My daughter was born two days ago and now things are kinda busy :D (but it's for a good cause :) )

NokDoc
18-09-2004, 07:04 AM
...My daughter was born two days ago and now things are kinda busy :D ...

Mr. Mestrini,

CongratZ mate. ;)

NokDoc

hellhound
18-09-2004, 10:50 AM
c o n g r a t u a t i o n s!!!!!

mestrini
18-09-2004, 05:07 PM
Thanks m8s. I'm feeling a lucky guy :D

Not been able to sleep much but... it's a small price :P

cheers

hellhound
24-09-2004, 01:27 PM
hi,
can someone help me find the refresh zones in a 3410 flash. i tried to use "nokz0ne" and "flsedit 0.5" but this programs only show the zones and not the refresh zones like in a 3310 flash

mestrini
24-09-2004, 05:18 PM
There's no refresh zones

see nokdoc's reply here: http://nokiafree.org/forums/showpost.php?p=334852&postcount=9

cheers

hellhound
30-09-2004, 01:32 PM
Mr Mestrini, could you take a look at this. I have modified “call duration.gsc” to work with 3410 but the call duration doesn’t show on screen.i did this because the gsc doesn’t need to modify to 5e0 table, doesn’ requirw the on/off function. i have compared the changes made in a 3310 flash with 3410 and all seems to be ok(I only look at the arm instruction without knowing what they do :) and they seem also ok)
Also I have tried to modify the “minute_beep.nrx” to remove the on/off function but no success. When you have time please look at them. I think it woul be easier to look at the minute beep function. Cheers

hellhound
30-09-2004, 08:52 PM
Hi,
I have applied “shortkeys.nrx” with one shortkey for applications and a problem appeared. The script works, but when I select a profile in the profiles menu for editing, the phone hangs. It also hangs in the settings menu in the tone subsection. i have looked at the menu structure and everything seems to be fine. cheers

mestrini
30-09-2004, 11:49 PM
Hi,
I have applied “shortkeys.nrx” with one shortkey for applications and a problem appeared. The script works, but when I select a profile in the profiles menu for editing, the phone hangs. It also hangs in the settings menu in the tone subsection. i have looked at the menu structure and everything seems to be fine. cheers


True, confirmed :evil:

it's related to the sound_type that is supposed to be played when the patch is activated. The pattern in the script isn't found and maybe it's responsible for the bug :???:

I'm going to look into that next :)

mestrini
01-10-2004, 01:41 AM
well, looks like i was wrong :(

i already fixed the pattern issue and now i can hear a beep sound when shortkey is used :grin: but the mentioned problem still remains :x

it must be related to something more complex like configs and ram :???:

you can update your script with the following red/bold lines in that precise location !!!!



patt=x2c(F000F00060A020041900F000F00020009000200B216822852300F000F000F000F000200B2101F000F000200021F1220D)
mask=x2c(F000F000FFFFFFFFFFFFF000F000FFFFFFFFFFFFFFFFFFFFFFFFF000F000F000F000FFFFFFFFF000F000FF00FF00FF00)
find x2d(200000) "patt" "mask"
if rc=0 then do
patt=x2c(F7FFFE9C60A01D20F7FFFE6E24009400250A1C28216822852300F000F000F000F0001C282101F000F0001C2021F1220D) /*added patt for 3410-2100*/
mask=x2c(F000F000FFFFFFFFF000F000FFFFFFFFFFFFFFFFFFFFFFFFFFFFF000F000F000F000FFFFFFFFF000F000FFFFFFFFFFFF)
find x2d(200000) "patt" "mask"; end
if rc~=0 then do; getbyte rc+47; sound_type=rc; end
else sound_type=0
if vb>0 then say "Sound type: 0x"d2x(sound_type)

hellhound
01-10-2004, 08:39 AM
hi,
NEW SCRIPTS on yak's page. check it out. cheers