i tried to build a cfg.txt as described above (with all P?? parameters listed on the web-config-page). as checksum algo i used crc16.
the phone loads this cfg.txt but ignores it.
it would be very helpful to have some or at least one working cfg.txt to reverse engineer the binary header data.
if anyone were able to help here, please contact me at: x at ccn.net.