GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > GSM & CDMA Phones / Tablets Software & Hardware Area > Various > Siemens-Benq > Siemens-Benq Flash Patching > x4x, x5x Flashpatching

Reply
 
LinkBack Thread Tools Display Modes
Old 01-20-2003, 01:13   #1 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 52
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
Flash Patching: Create New ShortCut (Inbox and Outbox)


Hi All,

anybody using SL45 v56 who need shortcut for Inbox and Outbox SMS (located in the SIM Card), just follow this patching action (using your full-flash file) :

*) Patching for Outbox (overwrite 'Conceal ID' shortcut) :
0x18E38A : 49 ==> 92
0x18E3BE : 4A 01 ==> 69 00
0x18E416 : 49 01 49 01 ==> 92 01 92 01
0x3AE308 : DA DA 04 A3 ==> DA D9 F8 0A

remark: 0x18E38A is address in the full flash file, 49 is the original value(s), and 92 is the new value(s)...

*) Patching for Inbox (overwrite 'Profile' shortcut) :

0x18E3AC : 2A 08 ==> 5A 03
0x18E3E0 : 0B 02 ==> D3 00
0x18E524 : 2A 08 2A 08 ==> 5A 03 5B 03
0x3AE412 : DA DF 94 4C ==> DA D9 EE 0A

Good Luck,
RizaPN

Last edited by rizapn; 01-23-2003 at 04:23.
  Reply With Quote
Old 01-20-2003, 22:55   #2 (permalink)
Freak Poster
 
Join Date: Aug 2001
Location: Germany
Posts: 139
Member: 6087
Status: Offline
Thanks Meter: 0
thx. riza ! will try it :-)


more about zSiemens? new versions? For me it stops writing fullflash (SL45i)...

Proggy
  Reply With Quote
Old 01-21-2003, 01:35   #3 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 52
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
@Proggy:
Sorry, but I will concentrate more in the patching, not in the flashing anymore (we already *have* UniSiemens, and I think it is the best flasher).

@All:
For fast modification, if there is no full-flash yet, just download the flash from address 0x180000 with size 0x10000 and from 0x3A0000 size 0x10000 (partials). Name the first one as sl45_18.bin and the 2nd as sl45_3A.bin

Addresses to be modified from file sl45_18.bin is : E38A, E3BE, E416 (for outbox), and E3AC, E3E0, E524 (for Inbox).
Address to be modified from file sl45_3A.bin is E308 for Outbox and E412 for Inbox.

After the modification, upload sl45_18.bin to the phone at address 0x180000 with size 0x10000, and sl45_3A.bin to 0x3A0000 size 0x10000.

RizaPN

Last edited by rizapn; 01-22-2003 at 09:52.
  Reply With Quote
Old 01-21-2003, 21:13   #4 (permalink)
Insane Poster
 
Join Date: May 2002
Posts: 68
Member: 12263
Status: Offline
Thanks Meter: 1
RizaPN i have made your modifies!
U are great! and a very good searcher of mistery of flash!:-)

There is something "wrong" that i want to say u....
The message when i select "Incoming message" is "Start: Conceal ID"..... is the option overwritten i know....but can be modified and point to correct string....?

I have only a new voice Incoming msgs so i think a little error in write bytes in your post, perhaps this....
0x18E524 : 2A 08 2A 08 ==> 5A 03 5B 03.......?

can be new values: 5A 03 5A 03.......?


Another very interesting thing.....that perhaps depends of something wrong byte.....
after change when i push number 9 now i shortcut to calendar like pushing number 2.....

so in this part of flash (tables?) these bytes seem to set also option phone numbers....

Always more interesting!!!
  Reply With Quote
Old 01-22-2003, 01:22   #5 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 52
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
@Wind:
Is your flash v56? I can not reproduce your problem in my own SL45v56. Do you mind to explain it more detail, so I can check it with my own?

ps:
- 5A 03 and 5B 03 is pointing to the same string (Incoming msgs and Incoming<0D>Message)

NEW PATCH (still for SL45v56 *only*) :

Eliminate the additional "_nnn_nnn" string when we move SMS to the archive folder

0x39FE5C : 88 60 F0 C8 ==> FA D9 02 FF

Good luck,
RizaPN

Last edited by rizapn; 01-22-2003 at 09:59.
  Reply With Quote
Old 01-22-2003, 15:19   #6 (permalink)
Crazy Poster
 
Join Date: Jan 2003
Location: CHN
Posts: 52
Member: 19801
Status: Offline
Thanks Meter: 0
Hi Masters,

I'd like to know where is the start point of program in SL45 firmware. Would you please tell me? or send me suggestions?

Thx.
  Reply With Quote
Old 01-22-2003, 16:48   #7 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 52
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
@SL45_6688i:
*) I'm not masters.
*) Please read my reply in your mailbox...

New Patch.
>>>Get access to "SIM Location" directly using front UP Arrow key<<<


original:
0x3B0366 : EA 20 3C 04 48 C3 EA 20
0x3B036E: 3C 04 46 FC 20 00 EA 20
0x3B0376 : 5A 04 48 C6 EA 20 82 04

modify to:
0x3B0366 : 2D 6A 48 C3 2D 68 46 FC
0x3B036E: 20 00 2D 74 48 C6 EA 20
0x3B0376 : 82 04 46 FC 21 00 2D 7E

original:
0x3B0474: E0 0C E0 0D E0 0E DA D4 AC 70

modify to:
0x3B0474: DA DB 3C EF 0D 02 DA DB 46 EF

Good luck,
RizaPN
  Reply With Quote
Old 01-22-2003, 20:58   #8 (permalink)
Insane Poster
 
Join Date: May 2002
Posts: 68
Member: 12263
Status: Offline
Thanks Meter: 1
Hi RizaPN i have made a mistake sorry!, your solution is good!

I hadn't overwritten the byte in the first offset 18E38A!

Works very well now!

But now i want to patch in your second way, it is the best solution i think!

Thanx!

Wind
  Reply With Quote
Old 01-23-2003, 01:01   #9 (permalink)
Major Poster
 
Join Date: Jan 2002
Location: Poland
Posts: 45
Member: 9095
Status: Offline
Thanks Meter: 0
RizaPN, you are really great! Could you please patch flash to eliminate that annoying playing ringtones at very low volume level and then raising it, even if the volume is set to max?
  Reply With Quote
Old 01-23-2003, 10:27   #10 (permalink)
Insane Poster
 
Join Date: May 2002
Posts: 68
Member: 12263
Status: Offline
Thanks Meter: 1
If can help i have recently found that settings volume are in Fullblock 5011 (no explanation about this block in InitMap), i have made some changes but not good result yet

Wind
  Reply With Quote
Old 01-25-2003, 01:46   #11 (permalink)
Junior Member
 
Join Date: Jan 2003
Location: Washington
Posts: 18
Member: 20338
Status: Offline
Thanks Meter: 0
Hi guys,

Rizapn,
You're a genius!! your ideas are magnificent!!

Can you pls. tell me or give a link on PROGRAMS that will be used in these PATCHES and modifications that you created?

Please reply coz i'm very interested to modify my phone!!

unisiemens? flashers?

Pls. give the software, all of them to create these mods!! pls.....
  Reply With Quote
Old 01-25-2003, 02:05   #12 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 52
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
@r4rosal:
1) Please read old posts about read/write flash from/to the phone.
2) Please be very carefull while doing these activities. It can kill your phone, if you don't really know what's going on.
3) OK. Use UniSiemens or any other SL4x compatible flasher to read your flash, use hexa editor, such as WinHex, HexEdit, UltraEdit, etc to modify your binary flash file, and use UniSiemens again to write it back to your phone ...

RizaPN
  Reply With Quote
Old 01-25-2003, 12:13   #13 (permalink)
Junior Member
 
Join Date: Jan 2003
Location: Washington
Posts: 18
Member: 20338
Status: Offline
Thanks Meter: 0
Thanks RizaPN!

But where can i get Winhex, Hexedit,etc.? Can you pls. give a link? please!!!

thanks a lot for the advise!!! You're GREAT!!!!
  Reply With Quote
Old 01-25-2003, 21:33   #14 (permalink)
Major Poster
 
Join Date: Nov 2002
Age: 46
Posts: 47
Member: 17718
Status: Offline
Thanks Meter: 0
Callin icon....!!!

hi guys ,
i have a problem with my siemens sl45 mobile
when i make new entry in my address book with
mobile , office, and home telephone for a person , then when this
person ring on my mobile the phone dose not give me any icon or any sign to show me
from any of theses phones he is calling ( i do not know if he is calling from mobile or office or home)
this is very stupid thing in my mobile which disturbing me a lot and every time i think that
siemens will correct this in the new firmware but this not happened. and do not tell me i have to put a new entry for each number for the same person(so why they do the
multimedia card with these all options???!!!!, all other mobile (nokia or samsung or alcatel ) show u an icon to know from which phone the person is calling
so why siemens dose not correct this stupid defect in thier mobiles ??!!!
i know all of u have the same problem with ur siemens SL45
so if u can find away to correct it may be by editing some values in the bin file or firmware using
hex editng programs , can u do it , u really do a very good work before by editing the bin file
with the values u put here i got many usueful needed functions in my mobile (inbox and outbox shortcuts)
and others .... so can u do it for the problem i have mentioned ???? u will be great
  Reply With Quote
Old 01-26-2003, 15:15   #15 (permalink)
Junior Member
 
Join Date: Jan 2003
Location: Washington
Posts: 18
Member: 20338
Status: Offline
Thanks Meter: 0
hI gUYS!

Can anyone please tell about START ADDRESSES and how to get them? also the SIZE of FLASHES, how do you get them?

I tried using FFmodifier by RizaPN, i've modified some images and saved them as fullflash and partial flash. problem is i don't know the addresses and sizes to flash these files to the fone.

do i need some table or calculator to know the size and address?

Anyone please HELP!!!

Rizapn i know you could give us some tutorials with hex editing and flashings and patchings!! Please help us!!!!!!
  Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
thread Thread Starter Forum Replies Last Post
how create a shortcut xcit Chinese Models & Cloned Phones 1 09-07-2009 23:54
A60 bzzz and switches off when trying to create new sms... Burnt Cobba E-Gold Based Phones 3 10-08-2007 04:48
help on creating new flash file for nokia dct4 supporting a new languge greeni222000 GSM Programming & Reverse Engineering 0 01-14-2006 19:30
about flash patching: zdob x1x to x45/x50 2 06-07-2003 19:36
How to create a 5210, 3610 and 3350 option to flash the phone in a Dejan Flasher 2.15 hooi76 Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 2 09-20-2002 09:40

 



All times are GMT +1. The time now is 16:17.



Powered by Searchlight © 2024 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -
Page generated in 0.23762 seconds with 9 queries

SEO by vBSEO