S55 Flash Patches

[avkiev]

;S55v20 - Creating only High-photos, without Low-quality
;Patch "Creating photos in folder Camera" must be installed
;(c)avkiev 25.05.2004
14FF2F: 58 00

;S55v20 - Changing sound of Camera
;(c)avkiev 25.05.2004
42BBC0: 7E XX ; XX - any sound from list

[Acidmrp]

; Play Sound on CarKit Profil selection
; 2004 by ACiD[mrp]

; S55v20

331DCE: 88908880 DA8BCCA9
4BA9CC: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 48C33D05E6FC3B00DAA40CADE03C8890
4BA9DC: FFFFFFFF 8880DB00

[avkiev]

Level of net, Consumed cuircut, Akku in the main screen

Screenshot - http://avkiev.siemens-club.ru/Siemen.../Info/info.bmp
Pictures - http://avkiev.siemens-club.ru/Siemen...o/add17pic.vkp
Patch - http://avkiev.siemens-club.ru/Siemen.../Info/info.vkp

[GIROSAVO]

;*** View Flash SMS as Fullscreen ***
;Firmware: S55 v20
;Authors: Roxxy and Lalo
;Adapted by Girosavo
;Luki's Siemens Modding Forum

33A2E2: 3D 2D
33A2F9: 0C 1C

[GIROSAVO]

;*** Change of fat figures in a calendar ***
;original patch by © Matr!x on M55 v10
;adapted by Girosavo for S55v20
;Luki's Siemens Modding Forum

13EEB: 386C6C6C6C6C38000618381818181818000630 FC84B4B4B484FC0006FCECCCECECECFC0006FC
13EFE: 68081830607800063058183018583000061C3C2C 84F484BC84FC0006FC84F484F484FC0006FCB4B4
13F12: 6C7C0C0C00067C6060780C0C780006386060786C 84F4F4FC0006FC84BC84F484FC0006FC84BC84B4
13F26: 6C3800067C0C18183030300006386C6C386C6C38 84FC0006FC84F4ECDCDCFC0006FC84B484B484FC
13F3C: 386C6C3C0C0C38 FC84B484F484FC

[avkiev]

Net, Cuircut, Akku, Profiles, Vibra in the main screen v2

Screenshot - http://avkiev.siemens-club.ru/Siemen.../Info/info.bmp
Pictures - http://avkiev.siemens-club.ru/Siemen...o/add17pic.vkp
Pictures for Profiles and Vibra - http://avkiev.siemens-club.ru/Siemen..._vibra-pic.vkp
Patch - http://avkiev.siemens-club.ru/Siemen...Info/info2.vkp

[k.kari]

Transparent numbers to Net, Cuircut, Akku, Profiles, Vibra in the main screen

;S55v20 - Transparent pictures for displaying miscellaneous information


1027FE: DB EC

0CD6D8: FFFFFFFFFFFFFFFF 03050500002D8601 ; 2DB - %
0CD6E0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 030505000F2D8601030505001E2D8601 ; 2DC,2DD - 0 1
0CD6F0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 030505002D2D8601030505003C2D8601 ; 2DE,2DF - 2 3
0CD700: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 030505004B2D8601030505005A2D8601 ; 2E0,2E1 - 4 5
0CD710: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 03050500692D860103050500782D8601 ; 2E2,2E3 - 6 7
0CD720: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 03050500872D860103050500962D8601 ; 2E4,2E5 - 8 9
0CD730: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 03050500A52D860103050500B42D8601 ; 2E6,2E7 - ' C
0CD740: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 03050500C32D860103050500D22D8601 ; 2E8,2E9 - m A
0CD750: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 03050500E12D860103050500F02D8601 ; 2EA,2EB - , V

21AD00: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00C0C0C0C000C000C000C0C0C0C000 ; %
21AD0F: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C000C000C00000C00000C000C000C0 ; 0
21AD1E: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C0C000C0000000C000C0C000C0C000 ; 1
21AD2D: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 0000C0C0C000C000C000C0C0000000 ; 2
21AD3C: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 0000C0C0C000C000C0C0C0000000C0 ; 3
21AD4B: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C0C000C000C000C000000000C0C000 ; 4
21AD5A: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00000000C0C00000C0C0C0000000C0 ; 5
21AD69: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C0C000C000C000C00000C000C000C0 ; 6
21AD78: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 000000C0C000C000C000C0C000C0C0 ; 7
21AD87: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C000C000C000C000C000C000C000C0 ; 8
21AD96: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C000C000C00000C000C000C000C0C0 ; 9
21ADA5: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C00000C00000C0C0C0C0C0C0C0C0C0 ; '
21ADB4: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C000C000C00000C0C000C000C000C0 ; C
21ADC3: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C0C0C0C0C0C000000000000000C000 ; m
21ADD2: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C000C000C00000C00000000000C000 ; A
21ADE1: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF C0C0C0C0C0C0C0C0C0C000C0C000C0 ; ,
21ADF0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 00C00000C00000C00000C000C000C0 ; V

[Acidmrp]

; Advanced Security SMS Patch

; S55 FW 20
; (c) 2004 by ACiD[mrp]
; GSM Development Crew
; www.gsm-dev.com

; !!! BE CAREFUL USING THIS !!!
; !!! READ INSTRUCTIONS !!!

; this will send an SMS on SIM change after network connection
; this will send an new SMS after EVERY reboot with new SIM card
; you can stop this by changing EEPROM block 5003 again to FFFF
; then it will start again on next SIM change.

; you need to have an EEPROM Block 5003 on you phone. Create this
; with Siemens Debugger. Size is 2 Bytes and it should contain the
; data FFFF

; data AAAA means send Security SMS on next network connect
; data 1111 means send Security SMS on next network connect after
; next reboot.

; after send SMS data is changed from AAAA into 1111
; after reboot data is changed from 1111 into AAAA

; with this patch you will not have any more warnings "allow connection"
; for any MIDlet.

; use this MIDlet:
; ftp://ronees.unets.ru/siemens/SecureSMS.rar

; a:\Java\jam\SecureSMS\GSM.jar
; change this to run another MIDlet
21A8D0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 613A5C4A6176615C6A616D5C53656375
21A8E0: FFFFFFFFFFFFFFFFFFFFFFFFFFFF 7265534D535C47534D2E6A617200

;---- New block. Segment address: CB0000 --------
8B2B9E: 26F01804E00DC4D02C00C4C02A00E02E 884088C088D088E088F0E6FC1000DA73
8B2BAE: 88E0E6FC6E24E6FD520100E066FEFF3F 870EE6FCAAAADA6130A898F098E098D0
8B2BBE: F2FF02FEDACE 98C09840DB00

;---- New block. Segment address: 610000 --------
21A800: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF E00C88C0E00DE00E88E088D0E02F88F0
21A810: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF E6FC8B13E6FDF000E03EE00FDAA212CD
21A820: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 06F00800E004D7400300F2F4F000DB00
21A830: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF D7400300F6FCF000E00C88C0E00DE00E
21A840: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 88E088D0E02F88F0E6FC8B13E6FDF000
21A850: FFFFFFFFFFFFFFFFFFFFFFFFFFFF E03EE00FDAA266CD06F00800DB00
21A85E: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF DA6100A846F4FFFF2D04E6FCAAAADA61
21A86E: FFFFFFFFFFFFFFFF 30A8DA927264DB00
21A876: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 8840886088C088D088E088F0DA6100A8
21A886: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 46F4FFFF2D0846F411112D05BB0DE6FC
21A896: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 1111DA6130A898F098E098D098C09860
21A8A6: FFFFFFFFFFFFFFFF 984088908880DB00
21A8AE: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF E006D7400D00F7FCD815E6FCD028E6FD
21A8BE: FFFFFFFFFFFFFFFFFFFF 8601E00EDA97ACAFCB00

;---- New block. Segment address: 990000 --------
59D2FC: 2D04 CC00

;---- New block. Segment address: 710000 --------
31A9CC: 88908880 DA6176A8

;---- New block. Segment address: CB0000 --------
8B2B06: DA927264 DA615EA8


Sourcecode to convert to other phones:

; .----------------------------------------.
; |            SIEMENS S55 v20             |
; |     Advanced Java Security Patch       |
; |           2004 by ACiD [mrp]           |
; |                                        |
; |         GSM Development Crew           |
; |           www.gsm-dev.com              |
; |       please sign guestbook ;)         |
; '----------------------------------------'

$Segmented
$Mod167 

; you need to have EEBlock 5003 in Phone
; create this with Siemens Debugger (2 Byte = 0xFFFF)

WriteEEPROM           EQU 0A2CD66h
ReadEEPROM            EQU 0A2CD12h
FreeSpace             EQU 061A800h
RunMIDlet             EQU 097AFACh
HideSelectDefaultBook EQU 0730E87h
ProviderName          EQU 071A9CCh
Patch_Address         EQU 0CB2B9Eh ;Free Space in Flash (CHANGE THIS)
TempSpaceInRAM        EQU 0C0F0h   ; 2 Bytes free space in RAM
ByteBeforRunMIDlet    EQU 0355D8h

; Status of EEPROM Block 5003:
; FF - no need to send security SMS
; AA - send security SMS now
; 11 - send security SMS after reboot.

Patch	Section Code Word At Patch_address ; Start Patch at Patch_Address
    main proc far  ; start main of patch
	; Patch kommt da hin wo die Abfrage "alle Einträge ins Addressbuch kopieren?" war
    	mov     [-r0], r4
    	mov     [-r0], r12
    	mov     [-r0], r13
    	mov     [-r0], r14
    	mov     [-r0], r15

	mov r12, #10h
	calls   seg(HideSelectDefaultBook), sof(HideSelectDefaultBook)
	
	mov r12, #0AAAAh
	calls   seg(MyWriteEEPROM), sof(MyWriteEEPROM)

    	mov     r15, [r0+]
    	mov     r14, [r0+]
    	mov     r13, [r0+]
    	mov     r12, [r0+]
    	mov     r4, [r0+]

	rets
    main endp
Patch   EndS

MainRoutine	Section Code Word At FreeSpace ; Start Patch at Patch_Address
    MyReadEEPROM proc far  ; start main of patch
	mov     r12, #0
	mov     [-r0], r12
	mov     r13, #0
	mov     r14, #0
	mov     [-r0], r14
	mov     [-r0], r13
	mov     r15, #2                   ; DataToRead BYTES
	mov     [-r0], r15
	mov     r12, #5003                ; EEBLOCK: 5003
	mov     r13, #POF(TempSpaceInRAM) ; DataToRead OFFSET
	mov     r14, #PAG(TempSpaceInRAM) ; DataToRead SEGMENT
	mov     r15, #0                   ; Start at Byte (Offset)
	calls	seg(ReadEEPROM),sof(ReadEEPROM)
	add     r0, #8
	mov r4, #0h
	extp #PAG(TempSpaceInRAM), #1
	mov r4, POF(TempSpaceInRAM)
	rets
    MyReadEEPROM endp

    MyWriteEEPROM proc far
	extp #PAG(TempSpaceInRAM), #1
	mov POF(TempSpaceInRAM), r12
	mov     r12, #0
	mov     [-r0], r12
	mov     r13, #0
	mov     r14, #0
	mov     [-r0], r14
	mov     [-r0], r13
	mov     r15, #2                   ; DataToWrite BYTES
	mov     [-r0], r15
	mov     r12, #5003                ; EEBLOCK: 5003
	mov     r13, #POF(TempSpaceInRAM) ; DataToWrite OFFSET
	mov     r14, #PAG(TempSpaceInRAM) ; DataToWrite SEGMENT
	mov     r15, #0                   ; Start at Byte (Offset)
	calls   seg(WriteEEPROM),sof(WriteEEPROM) 
	add     r0, #8
	rets
    MyWriteEEPROM endp
    
    TestSendAgain proc far ; this routine has to be called on every boot
   
   	calls   seg(MyReadEEPROM), sof(MyReadEEPROM)
	cmp r4, #0FFFFh
	jmp cc_Z, no_SendAgain
      SendAgain:
	mov r12, #0AAAAh
	calls   seg(MyWriteEEPROM), sof(MyWriteEEPROM)
      no_SendAgain:    	

   	calls   seg(0926472h), sof(0926472h) ;overwritten command
	rets
    TestSendAgain endp

    TestSend proc far
    	mov     [-r0], r4
    	mov     [-r0], r6
    	mov     [-r0], r12
    	mov     [-r0], r13
    	mov     [-r0], r14
    	mov     [-r0], r15

       	calls   seg(MyReadEEPROM), sof(MyReadEEPROM)
	cmp r4, #0FFFFh
	jmp cc_Z, no_Send
	cmp r4, #01111h
	jmp cc_Z, no_Send
	call SendNow
	mov r12, #1111h
	calls   seg(MyWriteEEPROM), sof(MyWriteEEPROM)
      no_Send:

    	mov     r15, [r0+]
    	mov     r14, [r0+]
    	mov     r13, [r0+]
    	mov     r12, [r0+]
    	mov     r6, [r0+]
    	mov     r4, [r0+]

    	mov     [-r0], r9 ; replaced code
	mov     [-r0], r8 ; replaced code
     	rets		
    TestSend endp

    SendNow proc near
	mov     r6, #0
	extp    #PAG(ByteBeforRunMIDlet), #1
	movb    POF(ByteBeforRunMIDlet), rl6
	mov     r12, #POF(String)
	mov     r13, #PAG(String)
	mov     r14, #0
	calls   seg(RunMIDlet), sof(RunMIDlet)
        ret	
      EndPoint:
    SendNow endp
MainRoutine   EndS

String  Section Data Byte At (EndPoint)
	db "a:\Java\jam\SecureSMS\GSM.jar", 0
String  EndS

DisableJavaQestion	Section Code Word At 099D2FCh 
    DisableJavaQestion_main proc far  ; start main of patch
	nop
    DisableJavaQestion_main endp
DisableJavaQestion   EndS

EntryProviderName	Section Code Word At 071A9CCh 
    CallPatch proc far
    	calls   seg(TestSend), sof(TestSend)
    CallPatch endp
EntryProviderName    EndS	

EntryBoot	Section Code Word At 0CB2B06h 
    CallPatch2 proc far
    	calls   seg(TestSendAgain), sof(TestSendAgain)
    CallPatch2 endp
EntryBoot    EndS	




END


; my very best greetings goes out to:
; RizaPN, SkyLord, SiNgle, mamaich, Chaos, Cluni, exr
; Schiffner, Braindead, b@iLLi, holg, vikado77, gurgy
; SL45_6688i, DarkBear, cool_lang, spinkilla, Andi_HUYVU
; mic.kan, dspmobile, NIXS, GIROSAVO, 4CB
; and all patchers I forgot (Sorry ;))

;   /------------\  /------------\  /---\     /---\
;   |            |  |            |  |    |   |    |
;   |   /--------/  |    /-------/  |     | |     |
;   |   |           |    |_______   |      |      |
;   |   |           |            |  |   |\   /|   |
;   |   | /------\  |________    |  |   | \./ |   |
;   |   | |__    |           |   |  |   |     |   |
;   |   |____|   |  /--------/   |  |   |     |   |
;   |            |  |            |  |   |     |   |
;   |____________/  \____________/  |___|     |___|
;
;           D E V E L O P M E N T  C R E W
;               http://www.gsm-dev.com

[Acidmrp]

; ask YES / NO befor Unlock the Key's with long pressed '#'
; S55 v20

; 2004 by ACiD[mrp]
; GSM Development Crew
; www.gsm-dev.com

;---- New block. Segment address: 610000 --------
21A380: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF E01CE6FD0103E6FE92A3E6FF6100FA9E
21A390: FFFF 6C7F

; Unlock Keys with 'YES'
21A392: FFFFFFFFFFFFFFFFFFFF 48C02D01DB00FA64DA4F

; Unlock Keys with 'NO'
;21A392: FFFFFFFFFFFFFFFFFFFF 48C02D02FA64DA4FDB00

;---- New block. Segment address: 9E0000 --------
5E8FD4: DA64DA4F DA6180A3

Sourcecode to convert to other phones:

; .----------------------------------------.
; |            SIEMENS S55 v20             |
; |   Ask YES / NO befor Unlock the keys   |
; |           2004 by ACiD [mrp]           |
; '----------------------------------------'

$Segmented
$Mod167 

YesNoBox            EQU 09E7F6Ch
ID_Yes		    EQU 0
ID_No		    EQU 1
ID_Cancel	    EQU 2

DisableKeyLock      EQU 0644FDAh


;Strings:
ID_string_KeyLockSet EQU 0301h

;Address for Patch Data
Patch_Address    EQU 061A380h 
ReleaseKeylock   EQU 09E8FD4h 

Patch	Section Code Word At Patch_address ; Start Patch at Patch_Address
    main proc far  ; start main of patch
	mov     r12, #1
	mov     r13, #ID_string_KeyLockSet
	mov     r14, #sof(YESNOReturn)
	mov     r15, #seg(YESNOReturn)
	jmps   seg(YesNoBox),sof(YesNoBox) 
    main endp

    YESNOReturn  proc    far
	cmp     r12, #ID_YES
	jmpr    cc_Z, UserPressedYES
UserPressedCancel: ; #Cancel
UserPressedNO:     ; #No
	rets
UserPressedYES:    ;#Yes
	jmps   seg(DisableKeyLock),sof(DisableKeyLock) 
    YESNOReturn   endp  
Patch   EndS

PatchEntry	Section Code Word At ReleaseKeylock 
    mainEntry proc far  ; start main of patch
	calls   seg(main),sof(main) 
    mainEntry endp	
PatchEntry   EndS

END


; my very best greetings goes out to:
; RizaPN, SkyLord, SiNgle, mamaich, Chaos, Cluni, exr
; Schiffner, Braindead, b@iLLi, holg, vikado77, gurgy
; SL45_6688i, DarkBear, cool_lang, spinkilla, Andi_HUYVU
; mic.kan, dspmobile, NIXS, GIROSAVO, 4CB
; and all patchers I forgot (Sorry ;))

;   /------------\  /------------\  /---\     /---\
;   |            |  |            |  |    |   |    |
;   |   /--------/  |    /-------/  |     | |     |
;   |   |           |    |_______   |      |      |
;   |   |           |            |  |   |\   /|   |
;   |   | /------\  |________    |  |   | \./ |   |
;   |   | |__    |           |   |  |   |     |   |
;   |   |____|   |  /--------/   |  |   |     |   |
;   |            |  |            |  |   |     |   |
;   |____________/  \____________/  |___|     |___|
;
;           D E V E L O P M E N T  C R E W
;               http://www.gsm-dev.com

[avkiev]

Increase Flex-memory v1 (1,33Mb)
http://avkiev.siemens-club.ru/Siemen...x/incflex1.vkp

[avkiev]

Increase Flex-memory v2 (1,58Mb)

http://avkiev.siemens-club.ru/Siemen...x/incflex2.vkp

[avkiev]

Moving T9 for using it after increasing flex-memory.

http://avkiev.siemens-club.ru/Siemen...ex/move_t9.vkp

[GIROSAVO]

file with italian language for "Increase Flex-memory v2 (1,58Mb)" by avkiev
my very best regards to him !! very good job !!

S55v20_ita_lg1_From_B0.rar (right click and "save object with name")

[GIROSAVO]

;***Don't show any text in screensaver (like operator name) ***
;Author: © Matr!x - 29/04/2004 for M55v10
;Adapted for S55v20 by KiRiK
;Luki's - Siemens Modding Forum

332F1A: DA73D650 CC00CC00
332F38: DA64FA31 CC00CC00

[avkiev]

Increase Flex-memory v3 (1,71Mb). Final release.

http://avkiev.siemens-club.ru/Siemen...x/incflex3.vkp