View Full Version : Flash Patching: Create New ShortCut (Inbox and Outbox)
Hi All,
anybody using SL45 v56 who need shortcut for Inbox and Outbox SMS (located in the SIM Card), just follow this patching action (using your full-flash file) :
*) Patching for Outbox (overwrite 'Conceal ID' shortcut) :
0x18E38A : 49 ==> 92
0x18E3BE : 4A 01 ==> 69 00
0x18E416 : 49 01 49 01 ==> 92 01 92 01
0x3AE308 : DA DA 04 A3 ==> DA D9 F8 0A
remark: 0x18E38A is address in the full flash file, 49 is the original value(s), and 92 is the new value(s)...
*) Patching for Inbox (overwrite 'Profile' shortcut) :
0x18E3AC : 2A 08 ==> 5A 03
0x18E3E0 : 0B 02 ==> D3 00
0x18E524 : 2A 08 2A 08 ==> 5A 03 5B 03
0x3AE412 : DA DF 94 4C ==> DA D9 EE 0A
Good Luck,
RizaPN
thx. riza ! will try it :-)
more about zSiemens? new versions? For me it stops writing fullflash (SL45i)...
Proggy
@Proggy:
Sorry, but I will concentrate more in the patching, not in the flashing anymore (we already *have* UniSiemens, and I think it is the best flasher).
@All:
For fast modification, if there is no full-flash yet, just download the flash from address 0x180000 with size 0x10000 and from 0x3A0000 size 0x10000 (partials). Name the first one as sl45_18.bin and the 2nd as sl45_3A.bin
Addresses to be modified from file sl45_18.bin is : E38A, E3BE, E416 (for outbox), and E3AC, E3E0, E524 (for Inbox).
Address to be modified from file sl45_3A.bin is E308 for Outbox and E412 for Inbox.
After the modification, upload sl45_18.bin to the phone at address 0x180000 with size 0x10000, and sl45_3A.bin to 0x3A0000 size 0x10000.
RizaPN
RizaPN i have made your modifies!
U are great! and a very good searcher of mistery of flash!:-)
There is something "wrong" that i want to say u....
The message when i select "Incoming message" is "Start: Conceal ID"..... is the option overwritten i know....but can be modified and point to correct string....?
I have only a new voice Incoming msgs so i think a little error in write bytes in your post, perhaps this....
0x18E524 : 2A 08 2A 08 ==> 5A 03 5B 03.......?
can be new values: 5A 03 5A 03.......?
Another very interesting thing.....that perhaps depends of something wrong byte.....
after change when i push number 9 now i shortcut to calendar like pushing number 2.....
so in this part of flash (tables?) these bytes seem to set also option phone numbers....
Always more interesting!!!:)
@Wind:
Is your flash v56? I can not reproduce your problem in my own SL45v56. Do you mind to explain it more detail, so I can check it with my own?
ps:
- 5A 03 and 5B 03 is pointing to the same string (Incoming msgs and Incoming<0D>Message)
NEW PATCH (still for SL45v56 *only*) :
Eliminate the additional "_nnn_nnn" string when we move SMS to the archive folder
0x39FE5C : 88 60 F0 C8 ==> FA D9 02 FF
Good luck,
RizaPN
SL45_6688i
01-22-2003, 15:19
Hi Masters,
I'd like to know where is the start point of program in SL45 firmware. Would you please tell me? or send me suggestions?
Thx.
@SL45_6688i:
*) I'm not masters.
*) Please read my reply in your mailbox...
New Patch.
>>>Get access to "SIM Location" directly using front UP Arrow key<<<
original:
0x3B0366 : EA 20 3C 04 48 C3 EA 20
0x3B036E: 3C 04 46 FC 20 00 EA 20
0x3B0376 : 5A 04 48 C6 EA 20 82 04
modify to:
0x3B0366 : 2D 6A 48 C3 2D 68 46 FC
0x3B036E: 20 00 2D 74 48 C6 EA 20
0x3B0376 : 82 04 46 FC 21 00 2D 7E
original:
0x3B0474: E0 0C E0 0D E0 0E DA D4 AC 70
modify to:
0x3B0474: DA DB 3C EF 0D 02 DA DB 46 EF
Good luck,
RizaPN
Hi RizaPN i have made a mistake sorry!:), your solution is good!
I hadn't overwritten the byte in the first offset 18E38A!:rolleyes:
Works very well now!
But now i want to patch in your second way, it is the best solution i think!
Thanx!
Wind
RizaPN, you are really great! Could you please patch flash to eliminate that annoying playing ringtones at very low volume level and then raising it, even if the volume is set to max?
If can help i have recently found that settings volume are in Fullblock 5011 (no explanation about this block in InitMap), i have made some changes but not good result yet
Wind
Hi guys,
Rizapn,
You're a genius!! your ideas are magnificent!!
Can you pls. tell me or give a link on PROGRAMS that will be used in these PATCHES and modifications that you created?
Please reply coz i'm very interested to modify my phone!!
unisiemens? flashers?
Pls. give the software, all of them to create these mods!! pls.....
@r4rosal:
1) Please read old posts about read/write flash from/to the phone.
2) Please be very carefull while doing these activities. It can kill your phone, if you don't really know what's going on.
3) OK. Use UniSiemens or any other SL4x compatible flasher to read your flash, use hexa editor, such as WinHex, HexEdit, UltraEdit, etc to modify your binary flash file, and use UniSiemens again to write it back to your phone ...
RizaPN
Thanks RizaPN!
But where can i get Winhex, Hexedit,etc.? Can you pls. give a link? please!!!
thanks a lot for the advise!!! You're GREAT!!!!
shadyjr5
01-25-2003, 21:33
hi guys ,
i have a problem with my siemens sl45 mobile
when i make new entry in my address book with
mobile , office, and home telephone for a person , then when this
person ring on my mobile the phone dose not give me any icon or any sign to show me
from any of theses phones he is calling ( i do not know if he is calling from mobile or office or home)
this is very stupid thing in my mobile which disturbing me a lot and every time i think that
siemens will correct this in the new firmware but this not happened. and do not tell me i have to put a new entry for each number for the same person(so why they do the
multimedia card with these all options???!!!!, all other mobile (nokia or samsung or alcatel ) show u an icon to know from which phone the person is calling
so why siemens dose not correct this stupid defect in thier mobiles ??!!!
i know all of u have the same problem with ur siemens SL45
so if u can find away to correct it may be by editing some values in the bin file or firmware using
hex editng programs , can u do it , u really do a very good work before by editing the bin file
with the values u put here i got many usueful needed functions in my mobile (inbox and outbox shortcuts)
and others .... so can u do it for the problem i have mentioned ???? u will be great
hI gUYS!
Can anyone please tell about START ADDRESSES and how to get them? also the SIZE of FLASHES, how do you get them?
I tried using FFmodifier by RizaPN, i've modified some images and saved them as fullflash and partial flash. problem is i don't know the addresses and sizes to flash these files to the fone.
do i need some table or calculator to know the size and address?
Anyone please HELP!!!
Rizapn i know you could give us some tutorials with hex editing and flashings and patchings!! Please help us!!!!!!
@r4rosal: Sorry...
RizaPN
RizaPN, I think your work in patching is great. I have one more thing to ask - could you please patch flash to enable transfering any type of file via IrDA? Now I'm using your great midlet SMSMe to rename such files, but I have to copy file I want to send to "storage" directory, rename it, transfer and rename again. It would be very nice if I could send file of any type in CardExplorer.
Please...
Add "Send via IrDA ..." options
This patch will *overwrite* ---Help--- menu inside the Sort menu with the new "Send via IrDA" options.
0x18A3E4 : 28 01 28 01 => 21 02 21 02 (change the text)
0x18A3FE : AE AB => A4 7D (change the function address)
Good luck,
RizaPN
ps:
- add something in the menu item is more difficult than modify the existing item (at least for me until now).
Thank you RizaPN!
Your work is great. In fact you make SL45 works in a way it should work.
shadyjr5
01-29-2003, 01:30
RizaPN, I think your work in patching is great. I have one more thing to ask - could you u plz read the following and see what u can do about it::
have a problem with my siemens sl45 mobile
when i make new entry in my address book with
mobile , office, and home telephone for a person , then when this
person ring on my mobile the phone dose not give me any icon or any sign to show me
from any of theses phones he is calling ( i do not know if he is calling from mobile or office or home)
this is very stupid thing in my mobile which disturbing me a lot and every time i think that
siemens will correct this in the new firmware but this not happened. and do not tell me i have to put a new entry for each number for the same person(so why they do the
multimedia card with these all options???!!!!, all other mobile (nokia or samsung or alcatel ) show u an icon to know from which phone the person is calling
so why siemens dose not correct this stupid defect in thier mobiles ??!!!
i know all of u have the same problem with ur siemens SL45
so if u can find away to correct it may be by editing some values in the bin file or firmware using
hex editng programs , can u do it , u really do a very good work before by editing the bin file
with the values u put here i got many usueful needed functions in my mobile (inbox and outbox shortcuts)
and others .... so can u do it for the problem i have mentioned ???? u will be great
@shadyjr5:
I read your first post about this. I got your messsage. But, sorry, I have no solution yet. If you read my post in the other topics (GSM Programming: Siemens Entry Point), then you will see my problem. I still not able to get the incoming call function yet... I need that to do the modification you (and some of us) need...
Maybe other patcher already have that?
RizaPN
shadyjr5
01-29-2003, 08:40
RizaPN, thanks soo soo much for ur replay
u r sooo great guy , hope u accept me as a friend :)
if u need any help i can do for u in ur patching work , plz do not hesitate to ask me at the moment.
bye bye
PS : my real name is shady (in arabic it means the guy with charming voice :) . i'm from Egypt , work as doctor , just graduated :) , mob. +20122718993
shadyjr5
01-30-2003, 03:37
RizaPN , my friend i have another question for u,
when i try to write a new entry in my address book in arabic the names written in arabic dose not appear (appears as dots) , but when i press the call or view buttons the name appears correctly
in arabic , . also when i changed the mobile language to arabic, the names written in arabic appears correctly . . but when the langauage is english it appears as dots. but when browsing the names in the adrress book ,the arabic names appears as dotst. this only happened with arabic names , when my mobile set to english language and when i want to make a new entry in my address book with any other languages it appears correctly except arabic . do u know any solution for this ???
i think all arabic users have the same problem. i think it is easy problem to correct by patching the flash file.
ps : my mobile sl45i , with FW 56 , with fully arabic support.
ps : i'm muslim egyptian , work as doctor :) may be i have mentiontened this before :)
Drug_Store
01-30-2003, 03:44
Hi
Thanks rizapn
Iīve applied almost every changes youīve posted exceept the first on.
The mobile seems to be working ok, but I canīt find the Send Via IRDA change...
And other thing, copying all numbers from sim to phone, he shuts immediatly down...
I guess Iīll flash my v56 backup again, just changing the Sim card list shortcut.
Anyway, thanks
Oh, and by the way, thereīs any possibility of enabling GPRS???
Drug_Store
01-30-2003, 03:49
Oh, and Iīll keep the solution to eliminate 000.000 on saved sms.
Thatīs a great solution too...
Drug_Store
01-30-2003, 03:59
Ok, Iīve found the send via IRDA...
Thatīs great...
So whatīs causing the shut down when trying to copy all SIM numbers to phonebook?
Can you explain a little better whatīs for the first solution youīve posted, to create new shortcuts.
Drug_Store
01-30-2003, 04:23
Ok, Iīm fixing my problem... Itīs from my MMC
yeah,,,,great work rizapn...
@Drug-Store:
By inputting those patch (create Inbox/Outbox shortcut), you can assign any button as a shortcut to SIM Card Inbox and/or Outbox. If you have that, then it is more easy to use our SL45 as a *Notes*...
RizaPN
Drug_Store
01-30-2003, 11:54
Ok, Iīll add that to my flash too.
Many thanks.
And what about GPRS? Any clue?
GPRS?
Personally, I have to say, I'm still very far from that. Even for adding very simple new functions (functions which was not exist in the firmware), it is hard. We have to work directly with byte-code (pesimistic? Maybe, but I just try to be more realistic)...
RizaPN
I have been reading this discussion with great interest. You are doing a fantastic work. I think it would be worth putting up a sticky in this forum with all your patches.
Better would be a webpage, or downloadable document to list them all.
I can't wait to try some of them.
One request: on my SL4x I use the fw55 SLCK version, mainly because of the shortcut to illumination (it helps save battery life). Do you think any of you could find out how to add it to fw56 SLIK?
Also, as one of you mentioned it is much easier to replace existing shortcuts than replace new ones, here is a list of the shortcuts I have on fw55 SLCK and what I think of them:
+ Phone Number -> same as quickdial on nokia, invaluable
- SIM location -> not needed anymore with the up arrow patch
~ Conceal ID -> never used it, but I guess it could be useful
- Internet -> I never understood the point of WAP phones
+ Write MSG
~ Calendar -> could be useful
+ IrDA -> if you have pc with IrDA very useful
+ Calculator
~ Currency Convertor -> can be useful when travelling
- Games -> who needs them with Java?
- Voicedialling -> anybody uses it?
- <blank entry> -> does not do anything
- Information -> crashes mu phone
~ Appointments -> could be useful
- Dictaphone -> not needed, the side button does a good job
- MP3 Player -> same here, totally redundant
- Card Explorer -> when I use it I have enough time to use the menu
+ Profiles -> invaluable
~ Calls missed
~ Calls received
+ Illumination -> great for improving battery life
+ Java -> good if you use it
+ Empty -> needed to unassign shortcuts
The +/~/- are only my opinion of what I think of them; the - shortcuts are the one I think should be overwritten first.
hi rizapn,
thanks for your ideas. i've done the shortcut to inbox and outbox and want to try with access SIM location thru up button.
could you please tell me how will i know the address and size if i will create a partial flash?
PLEASE help coz as of now i already knew how to modify data but i still donn't know on what address and what size i have to flash the phone.
PLEASE HELP!!! THANKS!!!!
Originally posted by r4rosal
PLEASE help coz as of now i already knew how to modify data but i still donn't know on what address and what size i have to flash the phone.
I think it is quite simple: when rizapn says modify 0x3B0366 ... if you want to a partial flash you need to extract address 0x3B0000 size 0x10000 with UniSiemens (save SL45_3B.bin). Then modify the file at 0x0366 and do a partial flash using the modified file at 0x3B0000 size 0x10000.
shadyjr5
01-30-2003, 21:08
RizaPN , my friend , why do not u replay my 2 posts ??
did not u see them ?? or u ignore them ??:(
shadyjr5
01-30-2003, 21:11
RizaPN , my friend , why do not u replay my 2 posts ??
did not u see them ?? or u ignore them ?
u will find them in the second page of this topic
1- one with many thanks and another one about arabic names
arman68,
hi!, i've done what you said. i read the flash at the required address but when i open the file with ultraedit32 and select go to address to be modified, the address out of range.
could you help me determine how to get the size of flash with relation to address?
i've done inbox,outbox patch already, works great!!!
but in sim location by up key patch, no size of flash stated. so please help!!!
thanks my friend!!!!
@shadyjr5:
Sorry brother, I totally missed that message (about arabic writing/display problem). And again, sorry, I have still no idea about that. I never touch them...
@arman68:
What is that illumination main-function. Is it for on/off swicth? or anything else?
@r4rosal:
Yes. Just do like arman68 wrote. If you need to modify flash in the address 0x3Bzzzz, it means you need partial flash sl45_3B.bin which is containing flash from address 0x3B0000 with size 0x10000. And when you have that file, you have to modify the zzzz address (of course you will not found address 0x3Bzzzz).
RizaPN
To r4rosal:
You mean you have read flash from 3B0000 size 10000 (you have extactly 64kB file) and when you go to address 0x0366 this address is out of file? Impossible... 0x0366 is at the very beginning of file, in first kB...
illumination is swith on/off in. It is in Setup/Device/Display/Illumination. I will welcome very much shortcut for this...
Drug_Store
01-31-2003, 01:10
Also appears Options on left soft key, and enters into a menu like the contrast, but this one itīs to light up or reduce light intensity...
I guess he means that...
I need the some nokia ringtones in *.mid files.
Anyone can convert them and sent me or give me an Url of where I could get it?
I need those: (Almost all from new DCT-4 Generation)
Electric eel
HummingBird
Jitters
Treadmill
Private eye
Tingle
Side step
Bounce
Regae
Sandst
Many thanks
Illumination:
If we talk about something very similar with "Display" menu, then this is my solution :
*) Overwrite "VoiceDialling" shortcut with "Display" shortcut ...
(use Left side button [+] to access VoiceDialling) ...
0x18E3A0 : 4E 02 --> 60 00 (shorcut Start: text)
0x18E3D4 : 4F 02 --> 60 00 (upper-right button text)
0x18E4A6 : 4E 02 4E 02 --> 60 00 60 00 (menu item text)
0x3AE3B2 : DA E6 F8 A9 --> DA D5 6A F2 (function entry-point)
It will give the access to the "Display" menu directly...
But, if that Illumination shortcut (in the v55 SLCK) is directly change the illumination mode (ON/OFF by pressing a single button), then that is not the answer ..
THIS IS THE SOLUTION
>>> Overwrite "VoiceDialling" shortcut with "Illumination Toggle" ones
0x18E3A0 : 4E 02 --> 82 00
0x18E3D4 : 4F 02 --> 82 00
0x18E4A6 : 4E 02 4E 02 --> 82 00 82 00
0x3AE3B2 : DA E6 F8 A9 --> DA DC 80 46
It can be used to assign a single button for doing Illumination Toggle...
@Drug_Store:
You can use my Universal Ringtone Converter to convert NOKIA (or Siemens) ringtone format to the MIDI ones (and vice-versa). Download it from http://www.geocities.com/rizapn or http://groups.yahoo.com/group/z-soft/files ...
RizaPN
Terima Kasih rizapn, you've made me a happy man :D
I think your second patch is the one I was talking about. I have not tried yet as I am using SLCK fw55 at the moment, but this week-end I will go back to SLIK fw56 to try a few of your patches.
You are really making the SL45 work as it should, amazing! :cool:
I will post your patches in the sticky.
Just another thing: I am sure you are aware of the aeroOn and aeroOff blocks. Do you thing you could document them in the same way you've done the other patches?
BTW, I was not aware of the "VoiceDialling" shortcut by pressing the [+] key on the side. Very useful place to have an "Illumination Toggle" shortcut. I learn something new everyday ;)
@arman68:
sama-sama...
For AeroCheck, you can use my zSiemenz to modify EEPROM block from your SL (if you already have any experience with another eeprom block tools, you can also use them).
1) Read EEPROM block number 0047,
2) Modify the 1st byte with 0A
3) Write it back to the original place (Block ID 0047).
RizaPN
@rizapn
You mean to disable AeroCheck, patch
0x5F0047 : 00 => 0A
(the EEprom starts at 0x5F0000)
When I check the aeroOn and aeroOff blocks 71 (0x47) in a hex editor, there seem to be much more difference than a single byte though.
Interestingly, in my aeroOn block, I have 0x47 : 0F, whereas in a fullflash ff_56_slik.bin I have 0x5F0047 : 00. Same for a different fullflash fls_sl45iv56.bin 0x5F0047 : 00
I thought you stopped the development of zSiemenz. Can it be used reliably to read/write flash/eeprom instead of UniSiemens?
AeroOff:
No-no-no, don't do that...
What I mean is : Use my zSiemenz tools to read your SL45 EEPROM Block ID 0047, then modify the 1st byte in that data output with 0A, and then Write that data into the EEPROM block ID 0047.
1. Open zSiemenz, select Read Block, SL45, COMx, enter 0047 in the Block1, and 0047 in the Block2...
2. Press Read Phone (your phone was OFF), then press ON button (just as usual), then wait until 100%.
3. Press Write File, enter somename.txt
4. Open that file (somename.txt) using your normal text editor, edit the first byte 0xZZ with 0x0A, save it with any name you like (AeroOff.txt for ex.)
5. Select Write Block, SL45, COMx ...
6. Press Read File, select your AeroOff.txt file,
7. Press Write Phone, press ON button, and wait until 100% ...
8. ...
Good luck,
RizaPN
Drug_Store
01-31-2003, 17:51
Rizapn, can you create a shortcut to write an SMS in the left directionl key?
^
<- | ->
v
<- in this one...
And what about the great idea of r4rosal about unlocking the keypad?
many thanks, youīre doing a great work...
Originally posted by rizapn
AeroOff:
No-no-no, don't do that...
What I mean is : Use my zSiemenz tools to read your SL45 EEPROM Block ID 0047, then modify the 1st byte in that data output with 0A, and then Write that data into the EEPROM block ID 0047.
Is that because when a change is made to the EEPROM the checksum needs to be calculated again? I assume your tool calculates the checksum in the process of writing an EEPROM block, is that right?
Modifying the flash (not the EEPROM zone), does not require a checksum, correct?
rizapn - great work guy ! what about compile all these changes to one bin file and create FW 57 ?
Originally posted by jklamo
rizapn - great work guy ! what about compile all these changes to one bin file and create FW 57 ?
This might lead to confusion when Siemens comes around to releasing firmware 57 with support for 256MB MMC :D
Plus not everyone want to use all of those patches. If you know how to flash your firmware, it is very easy to apply the patches you want.
@RizaPN
I went back to SLIK fw56 and tried 2 of your patches: up arrow browse SIM location, and illumination shortcut. It works great :)
2 point of details regarding illumination:
[list=1]
when assigned to the left speed key, it displays "Illuminati" (string too long) which is kind of ugly... The SLCK fw55 displays "Light". Do you know how to change it?
the left [+] key is still assigned to voice dialling/voice command. Is it feasible to assign it to "Toggle Illumination"?
[/list=1]
I did not try the aeroOff, as I already know how to do it with blocks, and I prefer to have aeroOn to prevent my mobile from being switched on by accident.
I tried writing the full flash and eeprom flash using zsiemenz and even though it completed, after that the phone was unusable. Could not even switch on or show battery charging. I had to use UniSiemens instead.
Reading full flash and eeprom works fine though, and the resulting files can be written with UniSiemens. At last I can backup my phone (UniSiemens always hangs at 99% for me when reading flash). Thanks.
@Drug_Store:
Maybe it is better to combine all similar patching (assign function to the button as a programmable or fixed shortcut) in one software, to give the user the capability to assign their own selected function to each button.
@jklamo:
Maybe... but I have no plan to do that. Let the user select their own patch.
@arman68:
0). About EEPROM Block. I think we talk about something different. What I mean with EEPROM Block is block data inside the EEPROM flash area, not the EEPROM area it self. Those data is used by some function inside the phone (just like AeroOff check which use the block ID no. 0047). There is some detail explanation about each data block by SkyLord in his siemens_eeprom_tools software.
1). Yes, I know. But, there is no "Light" or similar text found in the flash. That's why I pick the "Illumination" as their text.
2). How about using new button as an Illumination Toggle shortcut. I use [GREEN] as my own shortcut to that function.
-). Hope you do not mind to use zSiemenz as it is now. If you found some error, just skip that function. Personally, I use zSiemenz to do partial flash with my SL45 (better habbit than UniSiemens which is need to take battery off or close the program before the phone is able to used), with no problem.
*** Use # short button to release the key-lock ***
0x3B07C4 : 1E -> 14
0x3B07C7 : 03 -> 04
0x3B07CA : 1F -> 21
0x3B07CE : DA A2 18 4C 48 40 2D 10 -> 0D 03 DA DA EC F6 0D 0F
If you want to use * instead of #, modify 0x3B07CA with 13.
For other button, use the value listed in the button code table.
That patch is also unhide (there is a function to do VoiceDial when the key is locked, but I don't know how to use it) a VoiceDial function. Press UP arrow key when the key is locked to activate the VoiceDial function. If you want to use another button, just modify the value in 0x3B07C4 with the listed button code.
*** Use [GREEN] as an Illumination Toggle shortcut ***
0x3AD7A4 : E6 FC 0A 00 E6 FD 36 00 -> E6 00 36 00 F3 FC 0A 00
0x3AD7AC : DA DB 00 30 48 40 3D 21 -> 47 FC 2A 00 3D 04 DA DC
0x3AD7B4 : E6 00 36 00 CC 00 -> 80 46 EA 00 04 DA
If you want to use 0[GREEN], just modify 2A (0x3AD7AE) with 30.
If you want to use #[GREEN] use 23 ...
~~~~~~~~
Button Code:
5C : UPPER LEFT
05 : GREEN
01 : RED
03 : UPPER RIGHT
22 : RIGHT ARROW
20 : DOWN ARROW
21 : UP ARROW
23 : LEFT ARROW
13 : *
14 : #
15 : DIGIT 0-9
1F : LONG #
0E : LEFT SIDE +
0D : LEFT SIDE -
62 : LEFT SIDE PLAY
Good luck,
RizaPN
Drug_Store
02-01-2003, 19:43
Ok, Iīve tested the keylock patch and it works 100%...
This is another great solution by rizapn.
ntc_silver
02-01-2003, 22:43
Originally posted by rizapn
NEW PATCH (still for SL45v56 *only*) :[/color]
Eliminate the additional "_nnn_nnn" string when we move SMS to the archive folder
0x39FE5C : 88 60 F0 C8 ==> FA D9 02 FF
Good luck,
RizaPN
I tried this, but now I lose the possibility to archive any message! :(
To RizaPN:
You are doing really great work. I've applied almost every of your patches... Could you please make one more? I often change my sims and phone asks me to copy phonebook everytime I switch it on with new simcard. Could you please disable this annoying function at switching phone on?
@All:
If you did apply my unlock-keypad patch before this, then please redo your patch with the new values (5 bytes different). I did a small mistake...
@ntc_silver:
- I read your idea in the other post-topic. Let me check.
- Please try again, maybe you forget some bytes. Please check the address and the original value. If it was different with mine, then probably our SL has different firmware version.
@drzconza:
Let me check... OK I found it !
~~~~~~~~~~~~~~~~~~~~~~~~~
*** Disable "Do you want to copy all SIM Card content to the phonebook" message when change SIM Card ***
0x44EB9E : 3D -> 0D
~~~~~~~~~~~~~~~~~~~~~~~~~
Salam,
RizaPN
shadyjr5
02-02-2003, 08:43
hello my friend RizaPN,
ur work is sooo great , all siemens users are very greatful for ur great work.
can u add ( copy all into sim card ) , to be able to copy alll names from my address book to the sim card . u can found this function when u copy from sim to address book .
2- can u add (mark all) , to able to mark multible things at one time.
Thanks my brother
@shadyjr5:
Again, sorry... those are not simple task. I can not give any promises on that kind of patch.
~~~~~~~~~~~~~~~~~~~~
*** Use * 0 and # followed by [GREEN] button as shortcut buttons ***
0x3AD7A4 : E6 FC 0A 00 E6 FD 36 00 -> E6 00 36 00 F3 FC 0A 00
0x3AD7B2 : 2D 19 -> 2D 12
0x3B3000 : F0 ED 70 EC 2D 0B DC 4D -> E0 14 27 FC 23 00 3D 03
0x3B3008 : A9 2C 47 F2 -> DA D8 B4 E1 (# button function)
0x3B300C : 30 00 2D 06 47 F2 -> 0D 09 29 C7 3D 03
0x3B3012 : 2A 00 2D 03 -> DA DC 80 46 (* button function)
0x3B3016 : 47 F2 23 00 3D 02 -> 0D 04 29 C6 3D 03
0x3B301C : E0 04 DB 00 -> DA D9 62 0A (0 button function)
0x3B3020 : E0 14 DB 00 -> E0 04 DB 00
It will assign :
#[GREEN] as a shortcut to "Java",
*[GREEN] as a shortcut to "Illumination Toggle",
0[GREEN] as a shortcut to "Write Message" ...
Remark: if you already apply patch : "*[GREEN] as an Illumination Toggle shortcut" then you need to reset some addresses back to their original values.
RizaPN
Big thanks RizaPN!
BTW: What was wrong with old unlock-keypad patch? For me it worked?
@drzconza:
Yes it (short # unlock-keypad patch) work fine (for short unlock-keypad). But... if previously you can do VoiceDial by pressing UP Arrow key for a long time, then you will loose that function after that patching. Use the new patch values, and you will loose nothing...
RizaPN
Hmm...
When keyboard is locked up arrow works as VoiceDial (short press) in both old and new patch. When keyboard is unlocked up arrow works as shortcut to sim phonebook (one of your patches), so this shortcut to VoiceDial is disabled anyway...
@drzonca:
Some people do not like to loose their UP Arrow key as a VoiceDial shortcut. Just try to make all people happy with their own choice, right?
Personally, I am not using that patch anymore.
I will send the new patch, LEFT Key for SIM Location, and RIGHT key (duplicated menu) for Card-Explorer ...
RizaPN
Drug_Store
02-03-2003, 01:05
Send it?
Post it here please.
Thanks Rizapn
@Drug_Store:
Yes, that was what I mean. Send it here... hehehe...
RizaPN
Drug_Store
02-03-2003, 01:15
Ok.
Weīre all waiting for it...
Many, many thanks.
shadyjr5
02-03-2003, 02:05
RizaPN, my brother , another boring question :)
when u go to missed , dialled , or recieved calls , u will find (Delet all) in the menu , can u add (Delete) to the menu to be able to delete just the names u do not want and leave other names ???
this option is found in other siemens mobile phones ( ME45 , S45)
Thanks my brother
@shadyjr5:
Let me try...
RizaPN
hi riza,
first i want to congratulate you to your very very good work!
i have an idea ... do you see a possibility to invert the display by software... this would be great, because the sl has a very good illumination
Drug_Store
02-03-2003, 19:16
@Rizapn
Itīs possible to create or change the function of rejecting calls.
I mean, as Green and Read, to answer and reject, the soft keys with same function, when someone is calling you. What I wanna know is itīs possible to change right soft key to enter in silence mode, as new nokia Dct4. Donīt stop calling, just stops ringing...
I wonder if itīs possible to make this.
Is it?
ntc_silver
02-03-2003, 19:24
@Drug_Store:
You know that you can stop ringing with long-press of *
Drug_Store
02-03-2003, 19:35
Youīre right!!!
I didnīt know that...
Learning new stuff about SL45 everyday...
Thanks
@Rizapn
After all I donīt need that patch...
Thanks
ntc_silver
02-03-2003, 19:48
@Drug_store:
Ehy! You are my teacher! :P
Drug_Store
02-03-2003, 21:12
Teacher?!?!?
I think Iīm gonna cry... My boys are so big, yesterday they were so small...
LOL
Iīm not teacher to anyone. I just give some tips about handling your (all) phones.
Thanks for the complement... Really gratefull ... ntc_silver
*** Use LEFT Arrow key as a "SIM-Location" shortcut ***
* If you already apply patch for UP Arrow as a "SIM-Location" shortcut, and want to apply this patch, please reset them back to the original values *
0x3B03B0 : EA 20 0A 05 46 FC 14 00 -> 8D 04 46 FC 15 00 EA F0
0x3B03B8 : EA 20 0A 05 46 FC 15 00 -> 0A 05 46 FC 23 00 2D 5D
0x3B0474 : E0 0C E0 0D E0 0E -> DA DB 3C EF 0D 02
0x3B047A : DA D4 AC 70 -> DA DB 46 EF
~~~~~~~~~~~~
*** Use RIGHT Arrow key as a "Card-Explorer" shortcut ***
It will overwrite the previous function (entered to the Main Menu)
0x3B0368 : 3C -> 54
0x3B0450 : F0 C4 DA E5 -> EA 00 EE 07
0x3B0454 : 24 3A EA 00 F4 07 -> DA D8 CA E1 0D 23
~~~~~~~~~~~~
Salam,
RizaPN
@rizapn
I have just been testing the following patches:
[list=1]
Use * 0 and # followed by [GREEN] button as shortcuts
Disable "Do you want to copy all SIM Card content to the phonebook" message when change SIM Card
Use # short button to release the key-lock
[/list=1]
They work well; excellent work! :cool:
One observation: I do not think the patch 3 is as complete as could be; when the keyboard is locked and another key than # is pressed, it displays the following message for a few seconds:
Keypad locked
press and hold '#' to release
At this point, a short key press on any other key makes the message disappear, a short key press on # has no effect, and a long key press on # brings up the unlock function.
I think it should be possible to make a short key press on # call the unlock function straight away.
@rizapn
Request: Long press of [+] side key shortcut to "Profiles"
I remember reading an errata from Siemens stating that the [+] key did not bring up the "Profiles" menu as documented. Instead it activates VoiceDialling.
IMHO it is pointless to activate VoiceDialling with [+] since it is already assigned to the [UP] arrow. It would be much more useful as originally specified by Siemens.
Would it be possible to make a patch for it?
On that subject, is there scope to add a function to the [-] side key as well (long press)? If it is possible and you set [+] as a shortcut to "Profiles", I would prefer [-] to be a shortcut to "Illumination Toggle" (I know you did it as * [Green], but it is more convenient with a single key press)
I love your patches: at last I can assign shortcut phone numbers to (almost) all the digit keys. Thanks.
@holg:
I don't think I can do that in the short time. It is not as easy as another patch that I made. Maybe, someone else?
@arman68:
The result of that "short #" patch is still based on keylock habbit. If we press any wrong key, then it will display "Press long #", and wait for sometimes before going to the normal locked screen again. In that time (when the 'error' message is displayed), then any key press will have no impact. Wait until the normal-locked-screen, then the short press of # should work well. I have no idea to eliminate that time-out function yet.
Assigning new function in a (or some) new shortcut button is easy. My only problem is, most of the time, function in each button is very-very depend on each person. I like that, you like that, but some of us do not, and perhaps I do not like, you like, some like, and some other don't. So, I have my own filter to do that kind of patching. Hope everyone understood (that I can not do each person request, especially for shortcut type patch).
Anyway, I will try about [+] and [-] side button.
RizaPN
Riza,
can you help me know how to overwrite the shortcut "view CB" (short press of #) because its useless in our country.... the networks dont give out broadcasts.... maybe you could change it to "inbox"... how were you able to do it.. so that i could learn too....if its ok with you :)
thanks
Inan
Originally posted by rizapn
My only problem is, most of the time, function in each button is very-very depend on each person. I like that, you like that, but some of us do not, and perhaps I do not like, you like, some like, and some other don't. So, I have my own filter to do that kind of patching. Hope everyone understood (that I can not do each person request, especially for shortcut type patch).
No problem. Even if you stopped patching the SL45 firmware now, I would still be grateful for everything you have done.
I believe as well it is better not to overwrite/delete existing functionality. Even if only a few people are using it we should not prevent them from doing so. In the case of the voicedial function though, the use of the [+] button is clearly redundant since you activated the [UP] arrow function as in SLCK firmwares. The [UP] arrow is even better since it also works when the keypad is locked.
Has anyone tested the above patch and could tell us if it also activated voicedialling with the PTT button when the keypad is locked?
shadyjr5
02-05-2003, 10:52
arman68,
u do not need a shortcut for Profile function , just if u press (*)
for short time u will get access to profile function with ur right soft key, try it, and tell me .
short press on * then u will find (profile) appeared above the right soft key
Originally posted by shadyjr5
short press on * then u will find (profile) appeared above the right soft key
Your are right! I learned something new. :)
Still, it would be more convenient having it on the side:
[+] -> [+/-] -> [RIGHT SOFT KEY]
is easier to use than
-> [RIGHT SOFT KEY] -> [UP/DOWN] arrow -> [RIGHT SOFT KEY]
Don't forget that the [+] and [-] keys can be used to scroll up and down.
Actually anything that requires a scroll function would be well placed as shortcut on [+] or [-]. "Address Book", "SIM location" and "Menu" do not need it as being on the arrow pad they are already very well located.
IMHO good candidates are: "Profiles", "Java" (if you put everything straight under the JAM folder), "Games" and that's about it. "Card Explorer" would not benefit from it as it requires use of the [RIGHT] arrow as well.
Nice to know it works. I stand corrected:D
@Z-man:
Yes, View CB is also useless here (Indonesia). But, I still have some mistery about that function...
I will post a new patch :
- Overwrite "User Group" programmable shortcut (hotkey) options with "Archive" (SMS in the MMC),
- Use short press of left side [+] as an IrDA shortcut, and long press for "Illumination Toggle",
- Modify *[GREEN] to become an external low-level program shortcut.
Wait for some minutes,
RizaPN
Here are some of them ...
*** Long press of left side [+] button for "Illumination Toggle" and its short press for IrDA ***
0x3B04A4 : DA A2 18 4C 48 40 EA 20 -> DC 59 98 C8 A8 D8 DC 4D
0x3B04AC : F6 07 DC 59 -> D4 8C 04 00
0x3B04B0 : 98 C8 A8 D8 DC 4D -> 46 F8 EB 00 2D 03
0x3B04B6 : D4 8C 04 00 -> DA DC E8 46 ... (*)
0x3B04BA : 46 F8 EB 00 EA 30 F6 07 -> 0D 07 E0 1C E6 FD 82 00
0x3B04C2 : E0 1C DA F0 -> DA E6 98 F1
0x3B04C6 : 50 83 EA 00 -> DA DC 80 46
0x3B04CA : D6 07 -> 0D 0B
* Known bug : IrDA will also toggled for long-press ...
If you want to apply this patch withour IrDA capability, use :
0x3B04B6 : D4 8C 04 00 -> CC 00 CC 00 ... (without IrDA)
~~~~~~~~~~~~~~~~~~~
*** Overwrite selectable "User Group" shortcut/hotkey with "Archive" ***
0x18E388 : 8B 00 -> DE 03
0x18E3BC : 8C 00 -> DE 03
0x18E4B8 : 8B 00 8B 00 -> DE 03 DE 03
0x3AE311 : D7 02 45 -> D9 02 0B
~~~~~~~~~~~~~~~~~~
RizaPN
@RizaPN
Thanks, fantastic job as usual.
I am intrigued by your low level function... It will be very interesting if you manage to add a totally new functionality to the firmware. BTW what do you use to make your patches?
@arman68:
Thank's. I use IDAPro to disassembly the flash file, C166 assembler document to get the new function/command byte-code, HexaEditor to apply them back to the flash file, and my zSiemenz to upload it (partially) into my lovely SL.
RizaPN
robbiesl42
02-06-2003, 11:08
can u guys make FW57 with support of 256mb mmc or not possilbel at all!!
@RizaPN
Hi, RizaPN! Your patches are very useful. I have the pleasure of using some of them. I've got an idea how to see the calling phone number.
During incoming call the calling number is written first. Then it is overwritten by the name from the Addressbook. The idea is in moving the contents of the line containing name to the next line. Then the number will be stored on the screen. Is it possible to implement it this way?
Originally posted by rizapn
[I use IDAPro to disassembly the flash file, C166 assembler document to get the new function/command byte-code, HexaEditor to apply them back to the flash file, and my zSiemenz to upload it (partially) into my lovely SL.
It takes me back to the old days when I use to write programs in assembly this way on the old atari and amiga. ;) I must admit motorola 68xxx and RISC assembly languages were a joy to work with. I gave up when confronted with the horrible intel cisc. From what I have seen, it is getting worse and worse with every intel processor generation. :(
Here are the last patches (maybe? for button/shortcut management) ...
*** Modify 0[UpperRight] from "Select Line" to "Archive" ***
0x3B309E : 48 40 -> E0 14
0x3B30C4 : 7B 03 -> DE 03
0x3B3322 : DA A0 AC 15 -> DA D9 02 0B
0x3B3326 : 48 40 -> E0 04
~~~~~~~~~~~~~~~~~~
*** Modify #[UpperRight] from "View New CB" to "Java" ***
0x3B31AC : 7D 03 -> B0 0D
0x3B3388 : DA DB 14 19 -> DA D8 B4 E1
0x3B338C : 48 40 -> 0D 04
~~~~~~~~~~~~~~~
*** Use * 0 and # followed by [GREEN] as another shortcut ***
(*: Inbox, 0: Write SMS, #: Outbox)
0x3AD7A4 : E6 FC 0A 00 E6 FD 36 00 -> E6 00 36 00 F3 FC 0A 00
0x3AD7B2 : 2D 19 -> 2D 12
0x3B3000 : F0 ED 70 EC 2D 0B DC 4D -> E0 14 27 FC 23 00 3D 03 (#)
0x3B3008 : A9 2C 47 F2 -> DA D9 F8 0A
0x3B300C : 30 00 2D 06 47 F2 -> 0D 09 29 C7 3D 03 (*)
0x3B3012 : 2A 00 2D 03 -> DA D9 EE 0A
0x3B3016 : 47 F2 23 00 3D 02 -> 0D 04 29 C6 3D 03 (0)
0x3B301C : E0 04 DB 00 -> DA D9 62 0A
0x3B3020 : E0 14 -> E0 04
~~~~~~~~~~~~~~
Yes, they were some duplicated patch (due to some trial).
Personally, I use these fix button shortcut :
-) Left side [+] for IrDA and Illumination
-) *,0,+ followed [GREEN] for Inbox, Write SMS, and Outbox
-) LEFT for "SIM Location" and RIGHT for "Card-Explorer"
-) 0[UpperRight] for Archive, and #[UpperRight] for Java
All buttons already occupied (except for PTT and some other (if exist) headset button). I don't want to overwrite the existing buttons with unique function (not duplicated), just like :
- Left side [-] for saving Flash SMS,
- [PLAY] and [REC] for MP3/dictaphone,
- [Long UP] for VoiceDial, [Long *] for Ringer, [Long #] for keylock
So... I think, it's time to go to the next patching journey...
RizaPN
gosicnarf
02-07-2003, 06:17
Originally posted by rizapn
Here are the last patches (maybe? for button/shortcut management) ...
*** Modify 0[UpperRight] from "Select Line" to "Archive" ***
0x3B309E : 48 40 -> E0 14
0x3B30C4 : 7B 03 -> DE 03
0x3B3322 : DA A0 AC 15 -> DA D9 02 0B
0x3B3326 : 48 40 -> E0 04
~~~~~~~~~~~~~~~~~~
*** Modify #[UpperRight] from "View New CB" to "Java" ***
0x3B31AC : 7D 03 -> B0 0D
0x3B3388 : DA DB 14 19 -> DA D8 B4 E1
0x3B338C : 48 40 -> 0D 04
~~~~~~~~~~~~~~~
*** Use * 0 and # followed by [GREEN] as another shortcut ***
(*: Inbox, 0: Write SMS, #: Outbox)
0x3AD7A4 : E6 FC 0A 00 E6 FD 36 00 -> E6 00 36 00 F3 FC 0A 00
0x3AD7B2 : 2D 19 -> 2D 12
0x3B3000 : F0 ED 70 EC 2D 0B DC 4D -> E0 14 27 FC 23 00 3D 03 (#)
0x3B3008 : A9 2C 47 F2 -> DA D9 F8 0A
0x3B300C : 30 00 2D 06 47 F2 -> 0D 09 29 C7 3D 03 (*)
0x3B3012 : 2A 00 2D 03 -> DA D9 EE 0A
0x3B3016 : 47 F2 23 00 3D 02 -> 0D 04 29 C6 3D 03 (0)
0x3B301C : E0 04 DB 00 -> DA D9 62 0A
0x3B3020 : E0 14 -> E0 04
~~~~~~~~~~~~~~
Yes, they were some duplicated patch (due to some trial).
Personally, I use these fix button shortcut :
-) Left side [+] for IrDA and Illumination
-) *,0,+ followed [GREEN] for Inbox, Write SMS, and Outbox
-) LEFT for "SIM Location" and RIGHT for "Card-Explorer"
-) 0[UpperRight] for Archive, and #[UpperRight] for Java
All buttons already occupied (except for PTT and some other (if exist) headset button). I don't want to overwrite the existing buttons with unique function (not duplicated), just like :
- Left side [-] for saving Flash SMS,
- [PLAY] and [REC] for MP3/dictaphone,
- [Long UP] for VoiceDial, [Long *] for Ringer, [Long #] for keylock
So... I think, it's time to go to the next patching journey...
RizaPN
[UpperRight] ? is that the right soft key?
yeh i guess theres only one button left...(PTT)
btw hows it going with the PTT button?
i got one problem with the *** Use # short button to release the key-lock *** patch.
when i have applyed this patch my LONG UP button is still switchin on the voice dialling option even with the LOCKED KEYBOARD.
it wasn't like this before, coz if you lock the keyboard, every key (except for PTT button) should be locked, but now LONG UP button is unlocked.
Is it possible to fix this problem???
Thanks
thanks riza!... but i was hoping to assign the View CB with ..inbox.... i'm not sure if it is possible :)
@rizapn
UpperRight is Right Soft Key, right? :D
There are a few things that you have mentioned which I cannot find in my phone:
- 0[UpperRight] shortcut for "Select Line"
- #[UpperRight] shortcut for "View New CB"
- The user group shortcut always end up as an undefined shortcut (actually the entry is shown as blank), even with overwritten as archive with your patch
- there is no cell broadcast option anywhere in my phone
I think it is due to orange uk providing a locked down version of the phone firmware, and some of those functions use the eeprom (orange uk is as bad as dell). Would it be possible to send me a full backup of your firmware (including eeprom)? I suggest you change your IEMEI to 000000000000000 before backing it up.
@Z-man:
Of course it is possible. I will answer it when I post the summary of fix shortcut patching ...
@arman68:
Are you sure you don't have all of these?
- If you receive flash SMS, press the left side [-] button, and you will see the complete normal message,
- [PLAY] is the lowest left side button (for playing MP3), and [REC] is the most upper left side button (for Dictaphone).
- [Long UP] means pressing UP Arrow key button for a long time.
I got the full-flash from www.gsm-multifund.com, please try to get it from there also.
RizaPN
ps:
- I found the PTT solution. I will post it with my summary about these fix shortcut patching (how to use them with your own selected functions)
@rizapn
My mistake :o A classic case of wrong cut and paste... I edited my original post to correct it.
I think I checked to full flash from GSM multifund if I remember correctly, it is the same as the one I am using. The only thing is I am still using my orange uk eeprom content.
OK, guys...
I think we need to open another topics to minimize the number of pages here. I did post my last "Enabling PTT for VoiceDial when keypad is locked" patch in the new topic "Flash Patching (2nd Part)" ...
RizaPN
but just another one questions pls :)
why just not to do all thats many variations with + - joy * # etc. to shortcuts and anybody make 4self any function to any new shorcutkey...? (sorry if primitive question :))
and pls Riza - for unlock keypad - JUST ONE LONG # (without any "OK") - thats be greatfull !
TNX
WBR