SLIK v56: Flash Patching (2nd part) ... - GSM-Forum

rizapn · 02-07-2003, 13:33

Hi All,
the 1st topic about Flash Patching has to many pages. But, anyway, if you are new in this topics, please read that postings before replying something here.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ADDITIONAL FIX SHORTCUT PATCHING SUMMARY
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Let me, one again, wrote the updated fix shortcut patching here :

1) Use LEFT Arrow key as a "SIM-Location" shortcut :

0x3B03B0 : EA 20 0A 05 46 FC 14 00 -> 8D 04 46 FC 15 00 EA F0
0x3B03B8 : EA 20 0A 05 46 FC 15 00 -> 0A 05 46 FC 23 00 2D 5D
0x3B0474 : E0 0C E0 0D -> DA DB 3C EF
0x3B0478 : E0 0E -> 0D 02
0x3B047A : DA D4 AC 70 -> DA DB 46 EF ... (see table)

2) Use RIGHT Arrow key as a "Card-Explorer" shortcut :

0x3B0368 : 3C -> 54
0x3B0450 : F0 C4 DA E5 -> EA 00 EE 07
0x3B0454 : 24 3A EA 00 -> DA D8 CA E1 ... (see table)
0x3B0458 : F4 07 -> 0D 23

3) Modify 0[UpperRight] from "Select Line" to "Archive" :

0x3B309E : 48 40 -> E0 14
0x3B30C4 : 7B 03 -> DE 03 ... ***
0x3B3322 : DA A0 AC 15 -> DA D9 02 0B ... (see table)
0x3B3326 : 48 40 -> E0 04

4) Modify #[UpperRight] from "View New CB" to "Java" :

0x3B31AC : 7D 03 -> B0 0D ... ***
0x3B3388 : DA DB 14 19 -> DA D8 B4 E1 ... (see table)
0x3B338C : 48 40 -> 0D 04

5) Use * 0 and # followed by [GREEN] as another shortcut :
(*: Inbox, 0: Write SMS, #: Outbox)

0x3AD7A4 : E6 FC 0A 00 E6 FD 36 00 -> E6 00 36 00 F3 FC 0A 00
0x3AD7B2 : 2D 19 -> 2D 12
0x3B3000 : F0 ED 70 EC 2D 0B DC 4D -> E0 14 27 FC 23 00 3D 03
0x3B3008 : A9 2C 47 F2 -> DA D9 F8 0A ... # button, (see table)
0x3B300C : 30 00 2D 06 47 F2 -> 0D 09 29 C7 3D 03
0x3B3012 : 2A 00 2D 03 -> DA D9 EE 0A ... * button, (see table)
0x3B3016 : 47 F2 23 00 3D 02 -> 0D 04 29 C6 3D 03
0x3B301C : E0 04 DB 00 -> DA D9 62 0A ... 0 button, (see table)
0x3B3020 : E0 14 -> E0 04

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Those patches use almost all unused fix key as a shortcut.
If you see "(see table)", it means you can modify their values with values shown in this table (Entry-Point), based on the function you like to assign to that particular fix shortcut. If you see also "***" before that remark, it means you also need to modify the text index with the new value (Text) :

=============================================
Entry-Point : Text : Functions
=============================================
DA D8 B4 E1 : B0 0D : Java
DA D8 B8 E1 : 53 03 : Internet
DA D8 C4 E1 : B8 01 : MP3Player
DA D8 CA E1 : 81 05 : Card-Explorer
DA D8 CE E1 : B0 0D : Chronometer
DA D8 D6 E1 : D7 02 : Currency
DA D8 DA E1 : 59 02 : Games
DA DB 3C EF : 16 00 : Addressbook
DA DB 46 EF : 33 02 : SIM-Location
DA DB 50 EF : 58 01 : Calendar
DA DB 5C EF : 9D 02 : Appointments
DA DB 68 EF : B7 00 : Dictaphone
DA DB 6C EF : 56 00 : Answer-Message
DA DB 70 EF : D2 02 : BussinessCard
DA DB 7C EF : 8A 02 : Calculator
DA DB 80 EF : 80 03 : VoiceControl
DA DB 80 F2 : E7 00 : Call-Missed
DA DB 84 F2 : 44 00 : Call-Received
DA DB 88 F2 : 22 01 : Call-Dialed
DA DB 8C F2 : E8 00 : Alarm-Missed
DA DC 16 06 : 9C 01 : Compose-Melody
DA DC 04 79 : BE 04 : Game-SuperMind
DA DC 10 79 : C0 04 : Game-MoveTheBox
DA DC 14 79 : 87 05 : Game-Wacko
DA DC 08 79 : C2 04 : Game-HomeRun
DA DC FC 78 : 99 04 : Game-Reversi
DA DC 00 79 : 9B 04 : Game-Quattropoli
DA DC 0C 79 : C4 04 : Game-TheMaze
DA D9 62 0A : 3C 02 : Write-Message
DA D9 EE 0A : D3 00 : Incoming-Message
DA D9 F8 0A : 69 00 : Outgoing-Message
DA D9 02 0B : DE 03 : Archive
DA DC 12 42 : 6C 04 : Contrast
DA D5 5A F2 : 5B 02 : Language
DA D5 6A F2 : 5F 00 : Display
DA D5 82 F2 : 7E 02 : T9-Input
=============================================

~~~~~~~~~~~~~
EXAMPLE :
~~~~~~~~~~~~~
See patch no.3 ...
If you want to assign "Game-SuperMind" instead of "Archive" into your 0[UpperRight] keys, then you just need to use :

0x3B30C4 : 7B 03 -> BE 04 (Game-Supermind text)
0x3B3322 : DA A0 AC 15 -> DA DC 04 79 (Supermind entry-point)

instead of the original patch values.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Hope it is clear,
Good luck,
RizaPN

arman68 · 02-07-2003, 15:00

Everyone should be happy with this!

I will update the sticky when I have the time.

arman68 · 02-07-2003, 15:01

@rizapn
I forgot to ask: have you seen any sign of the Tetris and Traffic games while disassembling the firmware?

Yurgen1 · 02-07-2003, 22:53

Hi RizaPN!
I from Russia, therefore sorry for my English. I have made input of Russian symbols in a addressbook, SMS and SIM. Russian symbols are made in the English input of kind ÀÁÂÃ2ABC. But a problem with Russian in organiser. Input only 5 symbols and does not save. Help to solve this problem, please.

Wind · 02-08-2003, 03:42

@riza
i am trying to follow your example.....so i have found the activation of Band Selection, new option menù for SL45 (it exists in 6688, slck)
Thank again !!!

ADD NEW OPTION MENU FOR SL45 FW56 - > BAND SELECTION

0018D6BA: 04 02 -> F9 01

Menu->Setup->Network->Setup->Band selection

°) Automatic
°) GSM 900
°) GSM 1800

Wind

gosicnarf · 02-08-2003, 03:51

sorry RIZAPN but it seems that the PTT button did not work...

it seems that the address 0x3B04C8 contains EA instead of D6 that you specify...

have anyone tried the patch?

rizapn · 02-08-2003, 04:12

@Wind:
You're welcome...

@gosicnarf:
Sorry, it was my mistake. The address should be written as : 0x3B04CA instead of 0x3B04C8 ...

RizaPN

Rojer · 02-08-2003, 08:14

Hello, Riza!
In your post I seen one mistake. Sorry, but I think which is the case.

*) Short # to unlock keypad, UP arrow and PTT button when locked to do VoiceDial :
.........
0x3B04C8 : D6 -> D8
.........

To the address 0x3B04C8 primordial value is EA, after patching by

*** Long press of left side [+] button for "Illumination Toggle" and its short press for IrDA ***
.........
0x3B04C6 : 50 83 EA 00 -> DA DC 80 46
.........

the value is 80. So I do'nt understand what value and what address must be change.

Thank you.

Sorry for my very bad English, I am from Russia.

rizapn · 02-08-2003, 13:18

@Rojer:
Don't you read my answer just before your question ? (gosignarf did ask about the same address)...

Anyway, I did edit the original post to make no more confuse ...

RizaPN

gosicnarf · 02-08-2003, 16:48

RIZAPN it still doesn't work...

i already made the modifications and double check my entries but no luck...

what could be the problem?

rizapn · 02-09-2003, 00:54

@gosicnarf:
OK. Wrong copy-paste... Here is the good ones...

*) Short # to unlock keypad, UP arrow and PTT button for VoiceDial when keypad is locked :

0x3B0384 : CE -> D8
0x3B038C : CE -> D8
0x3B0394 : CE -> D8

0x3B04CA : D6 -> D8 ... (don't modify if it was 0D)

0x3B07BD : 4F D4 8E -> 7F 98 8E
0x3B07C0 : 02 00 46 F8 1E 00 2D 03 -> 98 8E 98 CE 98 DE 46 F8
0x3B07C8 : 46 F8 1F 00 3D 07 -> 14 00 2D 09 46 F8
0x3B07CE : DA A2 -> 21 00 ... (see remark1)
0x3B07D0 : 18 4C 48 40 2D 10 DA E6 -> 2D 03 46 F8 1E 00 3D 07
0x3B07D8 : 82 AB 0D 0C DC 5F D4 CE -> DA E6 82 AB 0D 0C DA DA
0x3B07E0 : 04 00 D4 DE 06 00 -> EC F6 0D 09 CC 00

remark1:
If you don't like to use UP Arrow to activate VoiceDial when keypad is locked, then use this :

0x3B07CE : DA A2 -> 14 00

Salam,
RizaPN

gosicnarf · 02-09-2003, 01:30

FINALLY! thanks RIZAPN!!! it works!!!

Thanks... my *** you are a legend!!!

Talon · 02-09-2003, 05:53

Riza can you made unlocking keypad by just pressing long # ?

Talon · 02-09-2003, 05:56

are you know thats long pressing left side "+" and "-" together do voicedialing ?

Talon · 02-09-2003, 06:27

some mistake found:

1) Use LEFT Arrow key as a "SIM-Location" shortcut :

0x3B03B0 : EA 20 0A 05 46 FC 14 00 -> 8D 04 46 FC 15 00 EA F0
0x3B03B8 : EA 20 0A 05 46 FC 15 00 -> 0A 05 46 FC 23 00 2D 5D
0x3B0474 : E0 0C E0 0D -> DA DB 3C EF
0x3B0476 : E0 0E -> 0D 02
0x3B047A : DA D4 AC 70 -> DA DB 46 EF ... (see table)

4 line means 0x3b0478 instead 0x3b0476

02-07-2003, 13:33	#1 (permalink)
rizapn No Life Poster Join Date: Mar 2002 Location: -[r0]- Age: 53 Posts: 834 Member: 9891 Status: Offline Thanks Meter: 2	SLIK v56: Flash Patching (2nd part) ... Hi All, the 1st topic about Flash Patching has to many pages. But, anyway, if you are new in this topics, please read that postings before replying something here. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ADDITIONAL FIX SHORTCUT PATCHING SUMMARY ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Let me, one again, wrote the updated fix shortcut patching here : 1) Use LEFT Arrow key as a "SIM-Location" shortcut : 0x3B03B0 : EA 20 0A 05 46 FC 14 00 -> 8D 04 46 FC 15 00 EA F0 0x3B03B8 : EA 20 0A 05 46 FC 15 00 -> 0A 05 46 FC 23 00 2D 5D 0x3B0474 : E0 0C E0 0D -> DA DB 3C EF 0x3B0478 : E0 0E -> 0D 02 0x3B047A : DA D4 AC 70 -> DA DB 46 EF ... (see table) 2) Use RIGHT Arrow key as a "Card-Explorer" shortcut : 0x3B0368 : 3C -> 54 0x3B0450 : F0 C4 DA E5 -> EA 00 EE 07 0x3B0454 : 24 3A EA 00 -> DA D8 CA E1 ... (see table) 0x3B0458 : F4 07 -> 0D 23 3) Modify 0[UpperRight] from "Select Line" to "Archive" : 0x3B309E : 48 40 -> E0 14 0x3B30C4 : 7B 03 -> DE 03 ... * 0x3B3322 : DA A0 AC 15 -> DA D9 02 0B ... (see table) 0x3B3326 : 48 40 -> E0 04 4) Modify #[UpperRight] from "View New CB" to "Java" : 0x3B31AC : 7D 03 -> B0 0D ... * 0x3B3388 : DA DB 14 19 -> DA D8 B4 E1 ... (see table) 0x3B338C : 48 40 -> 0D 04 *5) Use 0 and # followed by [GREEN] as another shortcut :** (: Inbox, 0: Write SMS, #: Outbox) 0x3AD7A4 : E6 FC 0A 00 E6 FD 36 00 -> E6 00 36 00 F3 FC 0A 00 0x3AD7B2 : 2D 19 -> 2D 12 0x3B3000 : F0 ED 70 EC 2D 0B DC 4D -> E0 14 27 FC 23 00 3D 03 0x3B3008 : A9 2C 47 F2 -> DA D9 F8 0A ... # button, (see table) 0x3B300C : 30 00 2D 06 47 F2 -> 0D 09 29 C7 3D 03 0x3B3012 : 2A 00 2D 03 -> DA D9 EE 0A ... button, (see table) 0x3B3016 : 47 F2 23 00 3D 02 -> 0D 04 29 C6 3D 03 0x3B301C : E0 04 DB 00 -> DA D9 62 0A ... 0 button, (see table) 0x3B3020 : E0 14 -> E0 04 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Those patches use almost all unused fix key as a shortcut. If you see "(see table)", it means you can modify their values with values shown in this table (Entry-Point), based on the function you like to assign to that particular fix shortcut. If you see also "*" before that remark, it means you also need to modify the text index with the new value (Text) : ============================================= Entry-Point : Text : Functions ============================================= DA D8 B4 E1 : B0 0D : Java DA D8 B8 E1 : 53 03 : Internet DA D8 C4 E1 : B8 01 : MP3Player DA D8 CA E1 : 81 05 : Card-Explorer DA D8 CE E1 : B0 0D : Chronometer DA D8 D6 E1 : D7 02 : Currency DA D8 DA E1 : 59 02 : Games DA DB 3C EF : 16 00 : Addressbook DA DB 46 EF : 33 02 : SIM-Location DA DB 50 EF : 58 01 : Calendar DA DB 5C EF : 9D 02 : Appointments DA DB 68 EF : B7 00 : Dictaphone DA DB 6C EF : 56 00 : Answer-Message DA DB 70 EF : D2 02 : BussinessCard DA DB 7C EF : 8A 02 : Calculator DA DB 80 EF : 80 03 : VoiceControl DA DB 80 F2 : E7 00 : Call-Missed DA DB 84 F2 : 44 00 : Call-Received DA DB 88 F2 : 22 01 : Call-Dialed DA DB 8C F2 : E8 00 : Alarm-Missed DA DC 16 06 : 9C 01 : Compose-Melody DA DC 04 79 : BE 04 : Game-SuperMind DA DC 10 79 : C0 04 : Game-MoveTheBox DA DC 14 79 : 87 05 : Game-Wacko DA DC 08 79 : C2 04 : Game-HomeRun DA DC FC 78 : 99 04 : Game-Reversi DA DC 00 79 : 9B 04 : Game-Quattropoli DA DC 0C 79 : C4 04 : Game-TheMaze DA D9 62 0A : 3C 02 : Write-Message DA D9 EE 0A : D3 00 : Incoming-Message DA D9 F8 0A : 69 00 : Outgoing-Message DA D9 02 0B : DE 03 : Archive DA DC 12 42 : 6C 04 : Contrast DA D5 5A F2 : 5B 02 : Language DA D5 6A F2 : 5F 00 : Display DA D5 82 F2 : 7E 02 : T9-Input ============================================= ~~~~~~~~~~~~~ EXAMPLE :** ~~~~~~~~~~~~~ See patch no.3 ... If you want to assign "Game-SuperMind" instead of "Archive" into your 0[UpperRight] keys, then you just need to use : 0x3B30C4 : 7B 03 -> BE 04 (Game-Supermind text) 0x3B3322 : DA A0 AC 15 -> DA DC 04 79 (Supermind entry-point) instead of the original patch values. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Hope it is clear, Good luck, RizaPN Last edited by rizapn; 02-09-2003 at 09:42.

02-08-2003, 03:42	#5 (permalink)
Wind Insane Poster Join Date: May 2002 Posts: 68 Member: 12263 Status: Offline Thanks Meter: 1	New Function Band selection @riza i am trying to follow your example.....so i have found the activation of Band Selection, new option menù for SL45 (it exists in 6688, slck) Thank again !!! ADD NEW OPTION MENU FOR SL45 FW56 - > BAND SELECTION 0018D6BA: 04 02 -> F9 01 Menu->Setup->Network->Setup->Band selection °) Automatic °) GSM 900 °) GSM 1800 Wind

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
SLIKv56: Flash Patching (3rd part) ...	rizapn	x4x, x5x Flashpatching	2900	12-24-2007 10:51
Problem to flash 7200! 2nd Boot Error	Maurone	Twisterflasher	1	03-26-2005 18:17
Where can i download riza's SLIKv56: Flash Patching (3rd part)	Gabriel_he	Siemens-Benq Flash Patching	2	04-04-2003 03:20
Dead SLik.. Unknown flash type. Pls Help	Death_star	Siemens-Benq RingTones and WallPapers	12	03-16-2003 00:30
Dead SLik.. Unknown flash type. Pls Help	Death_star	x1x to x45/x50	18	03-07-2003 17:13

02-07-2003, 15:00	#2 (permalink)
arman68 Major Poster Join Date: Jan 2003 Posts: 47 Member: 20543 Status: Offline Thanks Meter: 2	Everyone should be happy with this! I will update the sticky when I have the time.

02-07-2003, 15:01	#3 (permalink)
arman68 Major Poster Join Date: Jan 2003 Posts: 47 Member: 20543 Status: Offline Thanks Meter: 2	@rizapn I forgot to ask: have you seen any sign of the Tetris and Traffic games while disassembling the firmware?

02-07-2003, 22:53	#4 (permalink)
Yurgen1 Junior Member Join Date: Feb 2003 Location: Russia Age: 52 Posts: 5 Member: 21009 Status: Offline Thanks Meter: 0	Hi RizaPN! I from Russia, therefore sorry for my English. I have made input of Russian symbols in a addressbook, SMS and SIM. Russian symbols are made in the English input of kind ÀÁÂÃ2ABC. But a problem with Russian in organiser. Input only 5 symbols and does not save. Help to solve this problem, please.

02-08-2003, 03:51	#6 (permalink)
gosicnarf Junior Member Join Date: Feb 2003 Location: philippines Age: 44 Posts: 34 Member: 20779 Status: Offline Thanks Meter: 0	sorry RIZAPN but it seems that the PTT button did not work... it seems that the address 0x3B04C8 contains EA instead of D6 that you specify... have anyone tried the patch?

02-08-2003, 04:12	#7 (permalink)
rizapn No Life Poster Join Date: Mar 2002 Location: -[r0]- Age: 53 Posts: 834 Member: 9891 Status: Offline Thanks Meter: 2	@Wind: You're welcome... @gosicnarf: Sorry, it was my mistake. The address should be written as : 0x3B04CA instead of 0x3B04C8 ... RizaPN

02-08-2003, 08:14	#8 (permalink)
Rojer Junior Member Join Date: Feb 2003 Age: 48 Posts: 3 Member: 20918 Status: Offline Thanks Meter: 0	Hello, Riza! In your post I seen one mistake. Sorry, but I think which is the case. ) Short # to unlock keypad, UP arrow and PTT button when locked to do VoiceDial : ......... 0x3B04C8 : D6 -> D8 ......... To the address 0x3B04C8 primordial value is EA, after patching by Long press of left side [+] button for "Illumination Toggle" and its short press for IrDA * ......... 0x3B04C6 : 50 83 EA 00 -> DA DC 80 46 ......... the value is 80. So I do'nt understand what value and what address must be change. Thank you. Sorry for my very bad English, I am from Russia.

02-08-2003, 13:18	#9 (permalink)
rizapn No Life Poster Join Date: Mar 2002 Location: -[r0]- Age: 53 Posts: 834 Member: 9891 Status: Offline Thanks Meter: 2	@Rojer: Don't you read my answer just before your question ? (gosignarf did ask about the same address)... Anyway, I did edit the original post to make no more confuse ... RizaPN

02-08-2003, 16:48	#10 (permalink)
gosicnarf Junior Member Join Date: Feb 2003 Location: philippines Age: 44 Posts: 34 Member: 20779 Status: Offline Thanks Meter: 0	RIZAPN it still doesn't work... i already made the modifications and double check my entries but no luck... what could be the problem?

02-09-2003, 00:54	#11 (permalink)
rizapn No Life Poster Join Date: Mar 2002 Location: -[r0]- Age: 53 Posts: 834 Member: 9891 Status: Offline Thanks Meter: 2	@gosicnarf: OK. Wrong copy-paste... Here is the good ones... ) Short # to unlock keypad, UP arrow and PTT button for VoiceDial when keypad is locked : 0x3B0384 : CE -> D8 0x3B038C : CE -> D8 0x3B0394 : CE -> D8 0x3B04CA : D6 -> D8 ... (don't modify if it was 0D)* 0x3B07BD : 4F D4 8E -> 7F 98 8E 0x3B07C0 : 02 00 46 F8 1E 00 2D 03 -> 98 8E 98 CE 98 DE 46 F8 0x3B07C8 : 46 F8 1F 00 3D 07 -> 14 00 2D 09 46 F8 0x3B07CE : DA A2 -> 21 00 ... (see remark1) 0x3B07D0 : 18 4C 48 40 2D 10 DA E6 -> 2D 03 46 F8 1E 00 3D 07 0x3B07D8 : 82 AB 0D 0C DC 5F D4 CE -> DA E6 82 AB 0D 0C DA DA 0x3B07E0 : 04 00 D4 DE 06 00 -> EC F6 0D 09 CC 00 remark1: If you don't like to use UP Arrow to activate VoiceDial when keypad is locked, then use this : 0x3B07CE : DA A2 -> 14 00 Salam, RizaPN

02-09-2003, 01:30	#12 (permalink)
gosicnarf Junior Member Join Date: Feb 2003 Location: philippines Age: 44 Posts: 34 Member: 20779 Status: Offline Thanks Meter: 0	FINALLY! thanks RIZAPN!!! it works!!! Thanks... my *** you are a legend!!!

02-09-2003, 05:53	#13 (permalink)
Talon Junior Member Join Date: Feb 2003 Location: Kiev Posts: 12 Member: 20776 Status: Offline Thanks Meter: 0	Riza can you made unlocking keypad by just pressing long # ?

02-09-2003, 05:56	#14 (permalink)
Talon Junior Member Join Date: Feb 2003 Location: Kiev Posts: 12 Member: 20776 Status: Offline Thanks Meter: 0	are you know thats long pressing left side "+" and "-" together do voicedialing ?

02-09-2003, 06:27	#15 (permalink)
Talon Junior Member Join Date: Feb 2003 Location: Kiev Posts: 12 Member: 20776 Status: Offline Thanks Meter: 0	some mistake found: 1) Use LEFT Arrow key as a "SIM-Location" shortcut : 0x3B03B0 : EA 20 0A 05 46 FC 14 00 -> 8D 04 46 FC 15 00 EA F0 0x3B03B8 : EA 20 0A 05 46 FC 15 00 -> 0A 05 46 FC 23 00 2D 5D 0x3B0474 : E0 0C E0 0D -> DA DB 3C EF 0x3B0476 : E0 0E -> 0D 02 0x3B047A : DA D4 AC 70 -> DA DB 46 EF ... (see table) 4 line means 0x3b0478 instead 0x3b0476