???? Write adress 000000 to 200000 ????

[adrianoliveira]

Is possible write the adress 000000 to 200000 using a Flash cable?
If yes, what program I can use to this? (Rollis Flasher don´t write adress less than 200000)

Thanks.

[bobl]

It doesn't exist, the first byte is @ 0x200000

I don't know why it's called that, but there is not physical memory before that point.

Anyone care to explain?

Cheers

Bob

[adrianoliveira]

In memory 000000 to 200000 is the DCT3 algoritm, no?

[jeep]

There is some boot code tucked in there - but my guess is that it's mask-programmed and that's why you can read it with rolis, but not flash it.

The only text that appears is
001790: Oct 26 2001 14:12:34
0017A8: DCT3 ALGORITHM
but I'm sure there are people that have decoded more of it? I know there are some very interesting things going on in the developers' forum (Single Board Computer thread).

[edit] The offsets above are valid on my 3410 - your phone could well be different! [/edit]
...

Remember that when we flash, MCU is erased first. If that was the only code that the phone ran, the software would fall over at that point and flashing would fail. This boot code lets us flash a phone, even if there is no MCU present (ie. the program that the phone runs).

If the boot code was "flash" type memory as well, then the phone would lock up as soon as you tried to write to it - remember you need to erase before you can write, so the processor would have it's program removed whilst still trying to run it!

Just as well Rolis won't let you do it really


George

[BOEBOE]

Didn't thought there was some code...

Now I know, will check it!

[jeep]

Not all the 000000-1FFFFF is used, and you'll find the boot code repeats 4 times. I believe some of it is RAM, but no-one has a full memory map (except Nokia) so there's a lot of guesswork going on!

I'd be very interested to hear other people's thoughts or discoveries...


George

[liteFun]

your phone won't work if that ram is broken. so it is important

[wumpus]

I have a devised full memory map:

3310 memory map
00000000 - 0000FFFF RAM (= 00100000-0010FFFF)
00010000 - 00010FFF DSP shared memory
00020000 - 000200FF IO (Primary I/O range, configuers perpihals)
00030000 - 00030001 DSPIF (API control register)
00040000 - 00040003 MCUIF (Secondary I/O range, configures memory ranges)
00100000 - 0011FFFF RAM
00200000 - 003FFFFF Flash ROM
00400000 - 005FFFFF Flash ROM 2 (mirrored Flash ROM if it is only 2MB)
00600000 - 007FFFFF External ROM/RAM; empty (0x00)

Can you cope with VC++6 source? If yes, I can send you a patched KNOK source that can write a program to 00000000 - 0000FFFF.

[bobl]

Oooh, I look stupid now ... but you all knew that anyway.

Interesting information

Cheers

Bob

[wumpus]

well don't feel stupid AFAIK this is new information

[jeep]

And good information too - thanks for sharing it wumpus. Your findings are very interesting reading - I just wish that I had time to play with some of it!


George