Siemens A35 and not only software developement. need help !!

[ByReaL]

I want to develop my own, software for a Siemens A35, i want for example when i press a key on my phone to auto send a predefined sms, to a predefined phone number.. and so on
in fact i want to change all the software in the cellphone to fit my aplication, and i need a developement software for my siemens A35

and i also need the complet specification of the language used to program the phone, the info about the set of instruction (i think assembler will be used)

anyoane can help me with any information in that matter?

[ByReaL]

ok it seams no one knows what i have asked before, i post again another qestion

to develop an aplication i need to know what kind of CPU this phone have, so i have turned into peaces my phone and i found the next cips:

Infineon PMB 6850 E V1.3 M37
AMD V20810-F6171-12OEI
Infineon 6250V21 SMARTI 0142

wich of this do u think (i need to know for certain so do not take a gues -post here only if u know for certain) it is the uC used by this phone (Siemens A35)

[ByReaL]

anyoane can tell me what kind of uC or from wht famlly is the uC on the Siemens A35 ?

[asmax1]

Originally Posted by ByReaL

anyoane can tell me what kind of uC or from wht famlly is the uC on the Siemens A35 ?

try to download fullflash via vklay and then to edit it via Hexworkshop

[fcotrina]

The chip is a C166 made by Infineon.
You need tools like SiemensDebugger by acid-mrp
and sfe by rizapn

[ByReaL]

aha, thx, but can u tell me wich kind of C166 it is, coz as i understood so far the C166 is the famly of the chip, not the chip itself, and on infineon webpage i have found many developent tools but i have to know exactly what uC it is, i'll download the tools u told me and i'll work with them
thx again

[ByReaL]

i receive a message like "OpenBFB Patch NOT installed", where can i found this patch and download it?

[jetawo ademola]

Hi pal, I have an A35 siemens that stops ringing and tha ear pieace and ***** pieace
has stop working.Can you help me out pls.

[ByReaL]

i made this post having in mind software developement for cell phones, writing from zero my own software (firmware) for it, not to solve service problems

[ByReaL]

ok, about that OpenBFB
i found a program called smelter by avkiev, and here i see:
Block: 5122
Description: OpenBFB key
EIT: 001A6C
V: 0
Offset: 001882
Size: 6

i use hexeditor i select that range/area but i do not know what values should i write there in order to make SiemensDebugger work

anyoane knows what are the corect values, or how can i install the OpendBFB patch?
the phone is an A35

i also use IDA 4.3 to decompile the firmware, but the generated ASM code does not seams to me to be the corect one

i also have DAvE,
Keil uVision3

but till now i do not made any progress i need a lot more documentation, about the phone some good sample source code...
any help will be apreciated

PS: i played with hexeditor and i modifed random values in the firmware and then uploaded into the phone, and in some cases it was very fun, in others the phone stoped working at all, but this is not a solution for what i want to do
and also adiing a uC to the phone to give him AT command it is not a solution, so i have to rewrite entirly the phone software. HELP

[fcotrina]

As far as I know, it is C166S V1.
The doc I use is called
C166S V1 Core, Instruction Set and SubSystem

I suggest you to take a copy of the flash for any Siemens phone, use the program
sfe made by Rizapn
and start debugging the working system.

To install the OpenBFB patch in S45i there is something called S45i activator made by Acid[mrp].
I don't know for A35.

Keil uVision is good to compile C programs int oassembler, but it does not understand about the operating system in the phone.
If you want to change completly the O.S. , you will need to rebuild the routines for making calls, SIM handling (some are secret), voice compression, radio interface, serial port, ... This is a big task.

Good luck.

[ByReaL]

not copletly:

look what i realy want to do:
my phone company offer a service, and with this service i can read all the time on the phone screen the name of the location where i am.

but for when i'm not near my phone but i want to know where it is,i want to be able to do the next thing: send a SMS to my phone, the phone recognize the coomand and he automaticaly send back a SMS to the number from where he recived the reqest with that text wich mention the his position.
the text displyed on the screen it is a SMS wich is updated at every 7 seconds and it came from the phone company.

so i need to add a rutine/function in the phone firmware and that function must track the incoming sms, make a matck to see if it is a normal SMS or a position reqest, auto replay with a SMS containg the phone position, and delete the reqest. this is all i want to add to the existing firmware, maybe the phone will not have enoug memory space to keep the original functions+my function, so maybe i'll delete some of unuseful functions of the original firmare.

[ByReaL]

http://www.tasking.com/products/C166-ST10/c166.html

http://bbs.dbsjw.com/Dispbbs.asp?boa...=228316&skin=1

this are some links wich i think will help me and others

[fcotrina]

OK, now I see.
For other Siemens phones, people have investigated some rutines in the Firmware.
For example, in S45i, it is known how to get SMS, intercept it, read memory that stores the are information, and send one SMS. But as far as I know, thins info is not know for A35.
Take a look at other patches. Disassemble them, and try to find the equivalent funcions in A35.

[rasty]

He Guys!!
Very interessting thread!!
Does the solutions / software also works for the Siemens S35 phones?? I would be glad if anybody knows it...
Best regards