S55 flash patching(Thread for discussing)

[zdob]

This is topic for discussing about flash patching for siemens S55.

WBR
Zdob

[[.lamoz]]

May any one help me.
I can't find table for entry points (s55v20). avkiev suggested me a program "Smelter" but i can't find in it entry points which i need (all from sms menu and meny others) & some of e-points are different from those which is in patches (like e-point of gprs-info).
if it's not difficult post e-points here or show me the url where i can find them out.
p.s. & sorry for my en

[xlukix]

come here: http://www.forumcommunity.net/index....=480129&c=3784
if you register you can speak with our espert who 'll help you!!!
see ya!!!

[468]

Hi...

I want 2 things for S55.
1. To write small Non-Capital Greek letters (unicode) on SMS writing and
2. The start address for T9 flash file for V-klay programm S55 v20 Lg4.

That's all.

Thank's...

[wlodixon]

How to change options of IDA:
for a decompiling flash
Which processor type should I choose?

[[.lamoz]]

Originally Posted by wlodixon

How to change options of IDA:
for a decompiling flash
Which processor type should I choose?

Siemens C166 processor type i think

[[.lamoz]]

May someone adapt this patch for s55v20 (original patch is for M55v10):

;*** www.SMS_translit (from russian charasters to english ones) *** © Chaos
;When you r writing SMS with russian T9, in the menu appears "Trans", which if it
;needs decode all the text in the translit.
0B67A0: F0C8F0D9 FA9FD004
37E228: 24032403 5F0B5F0B
7F0440: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 4100420056004700440045005A685A00
7F0450: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 49004A004B004C004D004E004F005000
7F0460: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 52005300540055004600480043004368
7F0470: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 53685368270049002700450059755961
7F0480: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 6100620076006700640065007A687A00
7F0490: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 69006A006B006C006D006E006F007000
7F04A0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 72007300740075006600680063006368
7F04B0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 73687368270069002700650079757961
7F04C0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 000065000A002C000000080022000600
7F04D0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF E6FE9819E0EFE6FCC404E06DDC5F981E
7F04E0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 98FED7407C0298EC00E128D13DF7DC4F
7F04F0: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 987E2D208870E008DC4F981EBB1F4990
7F0500: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 2D01088128713DF89870F0DE00D800D8
7F0510: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 008728E2DC4FA81EBB11C0962D02DC4F
7F0520: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 886DC0863D01F061DC4F886D28713DF1
7F0530: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF DC4F888DFA2B7668CC00CC00E00446F1
7F0540: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 10048D0C46F152049D09F04126F41004
7F0550: FFFFFFFFFFFFFFFFFFFFFFFFFFFF 5C1406F44004D7407C02A844CB00

[wlodixon]

Should I set anything else ?

[[.lamoz]]

Originally Posted by wlodixon

Should I set anything else ?

If you wanna to decompile ur fubu u have to:
1. reed your FF;
2. run ida & open FF;
3. in appeared window enter:
Loading segment: 0xA0000
*** Loading offset: 0
*** Change processor -> Siemens C166
disable "Create Segments" checkbox
4. click 'Ok'
5. find idc script for your mobile(model & sw) or to create idc script by yourself (would be better if you find idc script for ur mobile);
6. go to address of entry point to FF and begin to analize code.

This is for sl45(i).

[wlodixon]

Where can I find Idc scripts?
I can't find it!

Can You help me ?


-----------
Are there any tutorials about decompiling flashes ?

[[.lamoz]]

Originally Posted by wlodixon

Where can I find Idc scripts?
I can't find it!
Can You help me ?
-----------
Are there any tutorials about decompiling flashes ?

I know some articles in russian about decompiling flashes
& which model of sie d'u have? what u want to decompile?

p.s. if u wanna to get answer for ur questions write in the title or in the msg:
1. model of mobile;
2. software version;
3. type of flash;
4. what have u already did with ur mobile (step by step);
5. bugs wich u find out & possibly reasons of there appearence.
(c) forum.Siemens-Club.ru

[Ivero]

May someone remake the following patch for S55v20?

;Black Group

;?????? ??????
;Black Group
;(C)SiNgle
;M55v10
;Released 04.02.04
;Ver 1.1

823082: F08ce00d FA9F303F ;

; Uncomment what you need
; Phone press red button automatic
007F3F30: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF 46FC09002D04F08CE00DFAA286309880
007F3F40: FFFFFFFF FA22CA0C

Thank's...

[wlodixon]

There was better if phone press green and red button automatic

[M1cha3L]

Originally Posted by 468

Hi...

I want 2 things for S55.
1. To write small Non-Capital Greek letters (unicode) on SMS writing and
2. The start address for T9 flash file for V-klay programm S55 v20 Lg4.

That's all.

Thank's...

Ηι
to write small greek letters, just mudify the character layout
with the v-klay in a language that u dont use ie the russian

the t9-04 is in the above address:
Start address: 0x480000
Size: 0x040000

If u're greek you'll find www.myphone.gr forum very interesting

[AndyEro]

I use this patch for disable softkeys when incoming call:
==
;(c) Skylord Nov 13, 2003
12863C: 05 00
128640: 3600 FFFF
128642: 3E 00
128646: 2B02 FFFF
==
But when i recieve incoming call left and right softkeys make ANSWER
After patch only labels disappear from screen when incoming call.
And right softkey will work as left softkey.
Anybody try to press softkeys after this patch?