Project Blacksphere Intro Hardware 331x/3330 ARM DSP Code Blocks Shared Mem GSM MDI MDI locals (send) MDI types (receive) MDI types (send) 02 Config 04 CBCH 0C RACH 0F Neighbour 11 NMEAS 14 Cipher 1B GSM L2 1F TX Ctrl 3C MSSI 4C FBUS Mode 70 Local Memory Map Phone models Peripherals Nokia OS Software Glossary of Terms Todo Credits Forum Guestbook

MDI types (send)

The sizes and offsets are in bytes, and excluding the two byte MDI header. Size S means short MDI packet. Short MDI packets need to be sent via the short MDI route and can not be send via the circular queues. (this has something to do with the register the parameters end up in inside the DSP) Size X means this MDI type is not confirmed for DSP ROM6. Padding bytes must be filled with zeroes.
Type Size Description
02 20 CHANNEL_CONFIGURE details
03 0 DEACTIVATE
04 52 CBCH details
05 Unk. FROM_MCU_TO_FBUS Frame to send is literally attached as packet starting with 0x1E(Cable) or 0x1C(IRDA)
06 X CIPHER_KEY
07 X MEAS_PLMN_RSSI
08 S TYPE_TEST_ENABLED 0/1
09 80 PSW_SEARCH_LIST Packet is 40 halfwords
0B 76 HOPPING_PARAMETERS
0C 8 IDLE_RA details Transmit on RACH (Random Access CHannel).
0D 66 MODULATOR_TABLE The entire modulator table is 256 bytes, while this packet contains only up to 64 bytes of data. The first halfword of this MDI packet tells which block to set (0-3) The rest is data.
0E 2 MODULATOR_DC_OFFSET
0F 68 NEIGHBOUR_LIST details
10 S NEXT_BCCH
11 12 NMEAS_INSTRUCTIONS details
13 X ON_OFF_CIPHER
14 12 CIPHER_PARAMETERS details Used to signal the Cipher Key and Algorithm to use for subsequent transmission.
1A X SEARCH_LIST
1B Unk. SEND_BLOCK details
1F 4 TX_CONTROL details
28 X IR_LINK_STATUS
2C X DSP_CONSTANTS
30 S TX_ENABLE =0 Disable transmitter
=1 Enable transmitter
31 X MEAS_REQ_ON
36 X DISCHARGE
38 S TYPE_LOOP_BACK 0x01/0x02/0x03/0x05/0x09/0x11/0x19
39 S PARAMETER_UPDATE
3A X RX_TX_CONTROL
3B X TEMPERATURE
3C 60 DSP_PARAMETERS Never used as it seems.
3E S DTX_CONTROL DTX (Discontinous Transmission Exchange) =0 DTX OFF =1 DTX ON
3F X POWER_LEVEL_RAMP
41 S IGNORE_CBCH_MESSAGE
42 8 CBCH_BITMAP 1 octet padding
7 octets CBCH bitmap
45 S OWN_BCCH
46 8 MSI details
47 X LOOP_BACK
48 X LOOP_BACK_SHORT
49 X RTC_CALIBRATION_REQUEST
4A 4 TXC_BIAS_RESULT Sent mostly on reply to MDIRCV 99
0x00 2b A/D 1 value (transformed)
0x02 2b A/D 6 value (transformed)
4B S MORE_RSSI Parameter (1 octet) is aaaabbbb a and b are RSSI values?
4C 4 FBUS_MODE details
4D X SEND_DTE_DATA_BLOCK Send data to DTE (RS-232C). See also RECEIVED_DTE_DATA_BLOCK in the MDIRCV section.
4E X SEND_IRLAP_DATA_BLOCK Send data to IRDA link. See also RECEIVED_IRLAP_DATA_BLOCK in the MDIRCV section.
4F X DATA_CODING_MODE
50 Unk. SEND_TCH_DATA_BLOCK Send data to Traffic Channel (GSM). Frame to send is literally attached as packet (same as FBUS type 0xF0). See also RECEIVED_TCH_DATA_BLOCK in the MDIRCV section.
51 Unk. Upload data to DSP RAM 0x00 2b Address
0x02 ... Data to upload
52 1 ? Set something to 0/1
53 16 ND train parameters
55 4 ?
56 Unk. ?
57 4 ?
70 Unk. COMMAND_LOCAL details See MDI locals(send) section.

Last updated: 2005-02-21 14:19

This site is the result of a great deal of assembly code reading, research, countless (mostly futile) searches for data sheets, cross-referencing and analysing. If you use this information in any way please mention wumpus <blacksphere@goliath.darktech.org> (and others in the credits section) in the credits of your program/document. And tell me :) If you have more information please contribute. If you just copy this, stick your name on it and call it yours I hope you get your genitals bitten off by a three headed monkey. Have a nice day.

No mobile phones were harmed in the production of this site.