GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > GSM & CDMA Phones / Tablets Software & Hardware Area > Various > Siemens-Benq > Siemens-Benq Flash Patching > x4x, x5x Flashpatching

Reply
 
LinkBack Thread Tools Display Modes
Old 04-13-2003, 00:06   #61 (permalink)
Major Poster
 
Join Date: Nov 2002
Age: 41
Posts: 47
Member: 17718
Status: Offline
Thanks Meter: 0
Hello RizaPN (can u do it)??!!!


My brother RizaPN :
(i found the patch below in the FW V.55 patching section in this forum and i think it is very useful patch and many users need it for FW V.56 , can u made it for us my brother RizaPN plz ???)


>>>the short alert when dialing in 50 seconds,
110seconds, 170seconds,
-------, so that you can avoid talking over one
minutes and be charged more:

001F62 : E6 FC 3C 00 -> DA BF 00 00

1F0000 : FF FF FF FF FF FF FF FF -> 46 F4 32 00
05 26 F4
1F0008 : FF FF FF FF FF FF FF FF -> 32 00 E6 FC 3C
00 DB 00
1F0010 : FF FF FF FF FF FF -> E6 FC 32 00 DB 00

==========================================
Second : for the great patch (Modify MultiLine Indicator to become Vibra Indicator):
when i apply this patch i foud that the picture for vibration always appears on the top of my screen either vibration is active or not , can u find what is the problem plz and correct it for us??
==========================================
3rd : the patch (#[RightSoft] as Vibra Toggle ) is not working with me, when i press #[RightSoft], java works ( i reset all values to its original values) , plz find what is the problem or change the shortcut
  Reply With Quote
Old 04-13-2003, 20:35   #62 (permalink)
Junior Member
 
Join Date: Apr 2003
Location: Poland/Polska
Age: 36
Posts: 2
Member: 26472
Status: Offline
Thanks Meter: 0
;the short alert when dialing in 50 seconds,
;110seconds, 170seconds, -------, so that you can avoid talking over one minutes and be charged more


Firmware :56

0x001F16: E6FC3C00 DABF0000

0x1F0000: FFFFFFFFFFFFFFFF 46F432008D0526F4
0x1F0008: FFFFFFFFFFFFFFFF 3200E6FC3C00DB00
0x1F0010: FFFFFFFFFFFF E6FC3200DB00
  Reply With Quote
Old 04-14-2003, 00:32   #63 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 48
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
*** 54. Call Minutes Beep Modification ***

Firmware : SL45v56
Author : RizaPN
Release : April 14, 2003

It will give you call minutes beep at 10 seconds before each minutes (just another version).

0x001F20 : F2 F4 0C FE -> DA C7 10 D1

0x27D110 : FF FF FF FF FF FF FF FF -> F2 F4 0C FE 46 F4 32 00
0x27D118 : FF FF -> DB 00

If you want to modify the margin, just modify byte 32 in the address 0x27D116 to become your own value (hexa 32 = decimal 50).

~~~~~~~~~~~~~~~~

RizaPN
  Reply With Quote
Old 04-15-2003, 10:49   #64 (permalink)
Junior Member
 
Join Date: Feb 2003
Location: Ukraine
Age: 44
Posts: 25
Member: 22131
Status: Offline
Thanks Meter: 0
*** Show an icon "home/office/mobile" on incoming call ***

Firmware : SL45v56
Author : Chaos
Release : April 15, 2003

030F27: A3 10 2C -> C7 20 EC

27EC20: FF FF FF FF FF FF FF FF -> DA A3 10 2C E6 00 0C 00
27EC28: FF FF FF FF FF FF FF FF -> E6 FC 34 31 E6 FE 01 E4
27EC30: FF FF FF FF FF FF FF FF -> BB 10 E6 FC 4B 31 E6 FE
27EC38: FF FF FF FF FF FF FF FF -> 1C E4 BB 0B E6 FC 62 31
27EC40: FF FF FF FF FF FF FF FF -> E6 FE 21 E4 BB 06 E6 FC
27EC48: FF FF FF FF FF FF FF FF -> 79 31 E6 FE 04 E4 BB 01
27EC50: FF FF FF FF FF FF FF FF -> DB 00 E6 F1 41 2C F3 F8
27EC58: FF FF FF FF FF FF FF FF -> 3D 2C 99 9C 49 9D 3D 1F
27EC60: FF FF FF FF FF FF FF FF -> 29 81 3D FB E6 FD 94 2E
27EC68: FF FF FF FF FF FF FF FF -> F2 F4 2A 2C 48 41 2D 02
27EC70: FF FF FF FF FF FF FF FF -> 06 FD 2A 00 F0 4D A8 CD
27EC78: FF FF FF FF FF FF FF FF -> 66 FC 3F 00 2D 10 00 DC
27EC80: FF FF FF FF FF FF FF FF -> 00 DC A8 1D C4 1D 04 00
27EC88: FF FF FF FF FF FF FF FF -> 28 D2 40 D4 3D FA 08 C2
27EC90: FF FF FF FF FF FF FF FF -> B8 CD C4 ED 02 00 E6 FE
27EC98: FF FF FF FF FF FF FF FF -> 20 00 C4 ED 04 00 CB 00

48C55D: 00 00 FC -> 7F E0 00
48C561: 00 00 BC 00 1F F0 3C -> 80 10 00 00 99 D0 00
48C569: 15 50 FC 00 17 F0 04 -> A4 10 00 00 A5 50 00
48C571: 15 50 34 00 17 F0 14 -> A4 10 00 00 A5 50 00
48C579: 75 50 14 00 7F F0 34 -> A4 10 00 00 99 50 00
48C581: 00 00 04 00 00 00 FC -> 80 10 00 00 7F E0 00
48C58B: FC -> 00

49146E: 00 00 FC 00 00 00 BC 00 1F F0 -> 7F E0 00 00 80 10 00 00 99 D0
491478: 3C 00 15 50 FC 00 17 F0 -> 00 00 A4 10 00 00 A5 50
491480: 04 00 15 50 34 00 17 F0 -> 00 00 A4 10 00 00 A5 50
491488: 14 00 75 50 14 00 7F F0 -> 00 00 A4 10 00 00 99 50
491490: 34 00 00 00 04 00 00 00 -> 00 00 80 10 00 00 7F E0
491498: FC -> 00

Note: icon will be shown only if the calling number is exactly the same as stored in the phonebook (so, write numbers in international format)
  Reply With Quote
Old 04-15-2003, 13:52   #65 (permalink)
Junior Member
 
Join Date: Mar 2003
Location: Polska
Age: 32
Posts: 34
Member: 25560
Status: Offline
Thanks Meter: 0
VKP File:

030F27: A3102C C720EC

27EC20: FFFFFFFFFFFFFFFF DAA3102CE6000C00
27EC28: FFFFFFFFFFFFFFFF E6FC3431E6FE01E4
27EC30: FFFFFFFFFFFFFFFF BB10E6FC4B31E6FE
27EC38: FFFFFFFFFFFFFFFF 1CE4BB0BE6FC6231
27EC40: FFFFFFFFFFFFFFFF E6FE21E4BB06E6FC
27EC48: FFFFFFFFFFFFFFFF 7931E6FE04E4BB01
27EC50: FFFFFFFFFFFFFFFF DB00E6F1412CF3F8
27EC58: FFFFFFFFFFFFFFFF 3D2C999C499D3D1F
27EC60: FFFFFFFFFFFFFFFF 29813DFBE6FD942E
27EC68: FFFFFFFFFFFFFFFF F2F42A2C48412D02
27EC70: FFFFFFFFFFFFFFFF 06FD2A00F04DA8CD
27EC78: FFFFFFFFFFFFFFFF 66FC3F002D1000DC
27EC80: FFFFFFFFFFFFFFFF 00DCA81DC41D0400
27EC88: FFFFFFFFFFFFFFFF 28D240D43DFA08C2
27EC90: FFFFFFFFFFFFFFFF B8CDC4ED0200E6FE
27EC98: FFFFFFFFFFFFFFFF 2000C4ED0400CB00

48C55D: 0000FC 7FE000
48C561: 0000BC001FF03C 8010000099D000
48C569: 1550FC0017F004 A4100000A55000
48C571: 1550340017F014 A4100000A55000
48C579: 755014007FF034 A4100000995000
48C581: 000004000000FC 801000007FE000
48C58B: FC 00

49146E: 0000FC000000BC001FF0 7FE000008010000099D0
491478: 3C001550FC0017F0 0000A4100000A550
491480: 04001550340017F0 0000A4100000A550
491488: 1400755014007FF0 0000A41000009950
491490: 3400000004000000 0000801000007FE0
491498: FC 00
  Reply With Quote
Old 04-16-2003, 16:44   #66 (permalink)
Crazy Poster
 
Join Date: Mar 2003
Posts: 58
Member: 24557
Status: Offline
Thanks Meter: 0
"Overwrite Menu mode and Help options inside configuration menu by Time/Charge and Divert"
Firmware : Sl45v56
Author : Gurgy
Release : April 16, 2003


This patch is usefull in combination with GFX menu, because you only need one icon to go to configuration, divert and time/charge. So you have two free icons to put another options. (I use it to have a GFX menu with only six icons but all the options avaible).

THANK'S RIZA WITHOUT YOUR HELP IT WAS IMPOSSIBLE!!!!!!

001A1E12: A101A201 EF02ED02 ;(TIME/CHARGE TEXT)
001A1EB4: 2901AB02 BD02BC02 ;(DIVERT TEXT)
001A1EC2: EA4ADC 7C40DB ;(TIME/CHARGE E.POINT)
001A1EE6: DEFFDB 8C40DB ;(DIVERT E.POINT)
  Reply With Quote
Old 04-17-2003, 11:33   #67 (permalink)
Junior Member
 
Join Date: Feb 2003
Location: Ukraine
Age: 44
Posts: 25
Member: 22131
Status: Offline
Thanks Meter: 0
*** Show an icon "home/office/mobile" on incoming call - v3 ***

Firmware : SL45v56
Author : Chaos
Release : April 18, 2003

Now the last digits of number is compared with whole phonebook record, but no more than 10 digits - no need to write numbers in international fotmat, and the icon is correctly displayed under diffrerent operators.
Bug with lists of received/missed calls fixed.



030F27: A3 10 2C -> C7 E0 EB

27EBE0: FF FF FF FF FF FF FF FF -> DA A3 10 2C E6 FC 34 31
27EBE8: FF FF FF FF FF FF FF FF -> E6 FD 01 E4 BB 10 E6 FC
27EBF0: FF FF FF FF FF FF FF FF -> 4B 31 E6 FD 1C E4 BB 0B
27EBF8: FF FF FF FF FF FF FF FF -> E6 FC 62 31 E6 FD 21 E4
27EC00: FF FF FF FF FF FF FF FF -> BB 06 E6 FC 79 31 E6 FD
27EC08: FF FF FF FF FF FF FF FF -> 04 E4 BB 01 DB 00 F0 FC
27EC10: FF FF FF FF FF FF FF FF -> F4 2C FE FF 29 21 FD 2F
27EC18: FF FF FF FF FF FF FF FF -> BB 2F F1 98 E6 FF 41 2C
27EC20: FF FF FF FF FF FF FF FF -> F3 F2 3D 2C BB 29 E1 A5
27EC28: FF FF FF FF FF FF FF FF -> F0 FC F1 29 BB 2E F1 43
27EC30: FF FF FF FF FF FF FF FF -> F1 28 E6 FF 41 2C BB 29
27EC38: FF FF FF FF FF FF FF FF -> 41 34 3D 1D 29 81 29 91
27EC40: FF FF FF FF FF FF FF FF -> 8D 02 29 51 3D F1 E6 FF
27EC48: FF FF FF FF FF FF FF FF -> B4 2E F2 F4 2A 2C 48 41
27EC50: FF FF FF FF FF FF FF FF -> 2D 02 06 FF 2A 00 E0 D4
27EC58: FF FF FF FF FF FF FF FF -> D4 1F FA FF 88 1F 28 41
27EC60: FF FF FF FF FF FF FF FF -> 3D FB E6 F4 20 00 88 4F
27EC68: FF FF FF FF FF FF FF FF -> 88 DF 28 F2 A8 CF 90 CC
27EC70: FF FF FF FF FF FF FF FF -> FD 01 E0 EC B8 CF CB 00
27EC78: FF FF FF FF FF FF FF FF -> 5C 11 29 21 F1 82 BB 05
27EC80: FF FF FF FF FF FF FF FF -> 47 F3 0F 00 3D 01 29 81
27EC88: FF FF FF FF FF FF FF FF -> CB 00 C0 2E 7C 1E 00 EF
27EC90: FF FF FF FF FF FF FF FF -> A9 3E 69 21 2D 01 7C 41
27EC98: FF FF FF FF FF FF -> 67 F3 0F 00 CB 00

48C55D: 00 00 FC -> 7F E0 00
48C561: 00 00 BC 00 1F F0 3C -> 80 10 00 00 99 D0 00
48C569: 15 50 FC 00 17 F0 04 -> A4 10 00 00 A5 50 00
48C571: 15 50 34 00 17 F0 14 -> A4 10 00 00 A5 50 00
48C579: 75 50 14 00 7F F0 34 -> A4 10 00 00 99 50 00
48C581: 00 00 04 00 00 00 FC -> 80 10 00 00 7F E0 00
48C58B: FC -> 00

49146E: 00 00 FC 00 00 00 BC 00 1F F0 -> 7F E0 00 00 80 10 00 00 99 D0
491478: 3C 00 15 50 FC 00 17 F0 -> 00 00 A4 10 00 00 A5 50
491480: 04 00 15 50 34 00 17 F0 -> 00 00 A4 10 00 00 A5 50
491488: 14 00 75 50 14 00 7F F0 -> 00 00 A4 10 00 00 99 50
491490: 34 00 00 00 04 00 00 00 -> 00 00 80 10 00 00 7F E0
491498: FC -> 00


vkp-version:

030F27: A3102C C7E0EB
27EBE0: FFFFFFFFFFFFFFFF DAA3102CE6FC3431
27EBE8: FFFFFFFFFFFFFFFF E6FD01E4BB10E6FC
27EBF0: FFFFFFFFFFFFFFFF 4B31E6FD1CE4BB0B
27EBF8: FFFFFFFFFFFFFFFF E6FC6231E6FD21E4
27EC00: FFFFFFFFFFFFFFFF BB06E6FC7931E6FD
27EC08: FFFFFFFFFFFFFFFF 04E4BB01DB00F0FC
27EC10: FFFFFFFFFFFFFFFF F42CFEFF2921FD2F
27EC18: FFFFFFFFFFFFFFFF BB2FF198E6FF412C
27EC20: FFFFFFFFFFFFFFFF F3F23D2CBB29E1A5
27EC28: FFFFFFFFFFFFFFFF F0FCF129BB2EF143
27EC30: FFFFFFFFFFFFFFFF F128E6FF412CBB29
27EC38: FFFFFFFFFFFFFFFF 41343D1D29812991
27EC40: FFFFFFFFFFFFFFFF 8D0229513DF1E6FF
27EC48: FFFFFFFFFFFFFFFF B42EF2F42A2C4841
27EC50: FFFFFFFFFFFFFFFF 2D0206FF2A00E0D4
27EC58: FFFFFFFFFFFFFFFF D41FFAFF881F2841
27EC60: FFFFFFFFFFFFFFFF 3DFBE6F42000884F
27EC68: FFFFFFFFFFFFFFFF 88DF28F2A8CF90CC
27EC70: FFFFFFFFFFFFFFFF FD01E0ECB8CFCB00
27EC78: FFFFFFFFFFFFFFFF 5C112921F182BB05
27EC80: FFFFFFFFFFFFFFFF 47F30F003D012981
27EC88: FFFFFFFFFFFFFFFF CB00C02E7C1E00EF
27EC90: FFFFFFFFFFFFFFFF A93E69212D017C41
27EC98: FFFFFFFFFFFF 67F30F00CB00
48C55D: 0000FC 7FE000
48C561: 0000BC001FF03C 8010000099D000
48C569: 1550FC0017F004 A4100000A55000
48C571: 1550340017F014 A4100000A55000
48C579: 755014007FF034 A4100000995000
48C581: 000004000000FC 801000007FE000
48C58B: FC 00
49146E: 0000FC000000BC001FF0 7FE000008010000099D0
491478: 3C001550FC0017F0 0000A4100000A550
491480: 04001550340017F0 0000A4100000A550
491488: 1400755014007FF0 0000A41000009950
491490: 3400000004000000 0000801000007FE0
491498: FC 00

--
chaos

Last edited by chaos; 04-19-2003 at 19:36.
  Reply With Quote
Old 04-20-2003, 14:19   #68 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 48
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
LeftSoft Key Text for More Shortcut Patch

*** 56. Modify LeftSoft Key Text for More Shortcut Patch ***

Firmware : SL45v56
Author : RizaPN
Release : April 22, 2003

This patch will put shortcut text in the Left Soft Key position (overwrite the normal 'Clear' text).

Need 'More Shortcut' patch (button folowed by Left Soft Key) before applying this patch.


367E0E : EA 00 F6 7E -> FA C7 1A D9
3B0538 : EA 00 F6 07 -> FA C7 00 D9

27D900 : FF FF FF FF FF FF FF FF -> E0 04 D7 40 36 00 F7 F8
27D908 : FF FF FF FF FF FF FF FF -> 0B 00 E6 F4 34 12 D7 40
27D910 : FF FF FF FF FF FF FF FF -> 34 00 F6 F4 20 39 FA DB
27D918 : FF FF FF FF FF FF FF FF -> F6 07 E6 F2 36 12 D7 40
27D920 : FF FF FF FF FF FF FF FF -> 36 00 F2 F4 0A 00 D7 40
27D928 : FF FF FF FF FF FF FF FF -> 34 00 F2 F3 20 39 26 F3
27D930 : FF FF FF FF FF FF FF FF -> 34 12 2D 04 48 31 3D 13
27D938 : FF FF FF FF FF FF FF FF -> 49 80 2D 11 49 90 3D 0B
27D940 : FF FF FF FF FF FF FF FF -> 88 60 DA C7 28 D3 DC 49
27D948 : FF FF FF FF FF FF FF FF -> C4 68 04 00 98 60 49 80
27D950 : FF FF FF FF FF FF FF FF -> 2D 06 E6 F2 35 12 D7 40
27D958 : FF FF FF FF FF FF FF FF -> 34 00 F6 F2 20 39 FA D6
27D960 : FF FF -> F6 7E

~~~~~~~~~~~~~~~~~~~~~~

RizaPN

Last edited by rizapn; 05-11-2003 at 13:03.
  Reply With Quote
Old 04-30-2003, 14:49   #69 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 48
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
*** 63. Password for Functions Access ***

Firmware : SL45v56
Author : RizaPN
Release : April 30, 2003
Update : May 13, 2003

Assign password to restrict some function access, such as SMS (Inbox, Outbox, Write SMS) and Voice Message ...

Usage : code * password # [Left Side PLAY]

Password is a number between 1 .. 65535
Code :
0 : disable password (open all access)
1 : lock Inbox+Outbox and New Inc.Message function
2 : lock Write Message function
4 : lock Voice Message function

If you want to lock more than one function, just add the code. For example, code 5 will lock code 1 and code 4, code 7 will lock code 1, code 2, and code 4 ...

To modify password : 0 * old_password * new_password #

Code is entered as a non-permanent parameter, means: it will not saved in the
phone EEPROM. If the phone turn OFF then ON again, it will use the saved code values.

To save permanent code to the phone, use + instead of * as a delimiter.

The default password, from the fresh EEPROM is 65535 ...

Example : 0 * 6 5 5 3 5 # [LeftSidePLAY]


0x396374 : F2 FF 02 FE DA EE 12 11 -> E6 FF 02 00 DA C7 10 DA
0x399A9E : F2 FF 02 FE DA EE 12 11 -> E6 FF 01 00 DA C7 10 DA
0x39F702 : F2 FF 02 FE DA EE 12 11 -> E6 FF 01 00 DA C7 10 DA

0x35364C : F2 FF 02 FE DA EE 12 11 -> E6 FF 04 00 DA C7 10 DA

0x3AD668 : 46 FE 0E 00 -> DA C7 70 D9

0x278334 : F0 C2 -> CC 00

0x27D970: 46 FE 62 00 2D 17 46 FE 0E 00 DB 00 E0 0C 88 C0
0x27D980: 88 C0 88 C0 E0 3C 88 C0 E6 FC 55 14 E6 FD FD 3F
0x27D990: E6 FE 37 00 E0 0F E6 F5 C2 00 DA C7 88 EE 06 F0
0x27D9A0: 08 00 CB 00 E0 AC E6 FD 36 00 DA C7 E6 82 88 10
0x27D9B0: 88 40 DA C7 E6 82 88 40 E0 04 47 F2 2A 00 3D 02
0x27D9C0: DA C7 E6 82 88 40 E6 F4 3E 2F BB D8 98 20 98 30
0x27D9D0: 98 40 98 10 D7 40 37 00 42 F3 FE 3F 2D 06 E6 FD
0x27D9E0: 3C 07 E0 1C DA E6 98 F1 0D 11 48 40 3D 03 48 20
0x27D9F0: 2D 01 F0 32 D7 50 37 00 F7 F8 FD 3F F6 F3 FE 3F
0x27DA00: 47 F2 2A 00 2D 03 E6 F4 92 2F BB B8 E0 1E DB 00
0x27DA10: D7 50 37 00 F3 F2 FD 3F F2 F4 FE 3F 3D 0F 88 C0
0x27DA20: 88 D0 88 E0 88 F0 E6 F4 3E 2F BB A8 98 F0 98 E0
0x27DA30: 98 D0 98 C0 D7 40 37 00 F3 F2 FD 3F 60 1F 3D CF
0x27DA40: F2 FF 02 FE DA EE 12 11 DB 00

Additional Info:
This patch use EEPROM block 0x1455 (decimal 5205). Use this to add the block into your SL EEPROM :

*) Download data file for block 5205 from my other z-soft site, http://groups.yahoo.com/group/zsoft_...s/eep_5205.eep to be used with Skylord's Siemens_EEPROM_tools,
*) From the left side, press [Init], press the phone ON button, press [Load], select that file, copy to right side using the BIG Right Arrow,
*) From the right side, select that block ID (5205), press Save Selected ... and then press left side's [Exit]

~~~~~~~~~~~~~~~~~~~~

Last edited by rizapn; 05-13-2003 at 13:40.
  Reply With Quote
Old 05-06-2003, 21:38   #70 (permalink)
Crazy Poster
 
Join Date: Mar 2003
Posts: 58
Member: 24557
Status: Offline
Thanks Meter: 0
Modify surf/fun menu options
Firmware : Sl45v56
Author : Gurgy
Release : May 6, 2003

Well, once more i have modified the surf/fun menu cause I've created icons for access to java, card-explorer, mp3 and games (GFX patch). And I don't want to have these options repeated.
So the new surf/fun menu have the folowing options:
-Internet
-Calculator
-Composse melody
-Chronometer
-Currency conv.
------------------------------------------------------------------------------

;Modifing Surf/Fun menu
0018A54C: B00DB00D 89028802 ;TEXT Calc
0018A5D8: B4E1D8 7CEFDB ;FUNCTION Calc
0018A570: B701B601 E607E607 ;TEXT Composse Melody
0018A5E0: C4E1D8 1606DC ;FUNCTION Composse Melody
;HIDDE GAMES AND CARD-EXPLORER
0018A5C4: B004 0402
0018A58E: C704 0402
;HIDDE CALC FROM ORGANISSER MENU
001A086E: 1C05 0402
  Reply With Quote
Old 05-08-2003, 00:57   #71 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 48
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
*** D03. Modify AT+CGSN Command to do Debug ***

It is USELESS patch, UNLESS you want to create patch and need to read the RAM area while the phone is ON.

0x10F100 : 26 C1 D2 -> 40 D7 C7

0x27D740 : DA C7 48 D7 FA D3 AC 84 E6 FC B4 08 BB 0C D7 40
0x27D750 : 11 00 F3 F8 B3 08 47 F8 2E 00 2D 57 BB 04 98 C0
0x27D760 : 98 D0 BB 28 DB 00 E6 FD 11 00 E0 04 DC 4D 99 2C
0x27D770 : 47 F2 30 00 8D 12 47 F2 39 00 FD 09 67 F2 DF 00
0x27D780 : 47 F2 41 00 8D 0A 47 F2 46 00 ED 07 29 27 67 F2
0x27D790 : 0F 00 E1 03 5C 44 00 41 0D E9 88 40 88 C0 F0 C4
0x27D7A0 : DA D3 20 B1 E6 FC 8E 3F E6 FD C1 02 DA D3 B2 B1
0x27D7B0 : 98 C0 CB 00 26 F0 F0 00 E0 5E F0 20 E6 F1 10 00
0x27D7C0 : DC 4D A9 8C BB 37 E4 82 02 00 DC 4D 99 8C 7C 44
0x27D7D0 : BB 31 E4 82 01 00 E7 F8 20 00 B9 82 08 23 28 11
0x27D7E0 : 3D EF E1 D8 26 F2 30 00 B9 82 06 F2 30 00 28 E1
0x27D7F0 : 3D E5 F0 C0 66 FC FF 3F F2 FD 02 FE E6 FE F0 00
0x27D800 : DA D3 C4 B1 06 F0 F0 00 CB 00 98 D0 E0 0E F0 1E
0x27D810 : F0 2C D7 40 11 00 99 82 47 F8 0D 00 2D 07 DC 4D
0x27D820 : 49 8D 2D F7 08 E1 46 FE FF 3F FD F1 F0 CE DA D3
0x27D830 : 20 B1 DB 00 67 F8 0F 00 47 F8 09 00 FD 01 09 87
0x27D840 : 07 F8 30 00 CB 00

By applying this patch, it is possible to dump RAM and flash area through the serial port (use Hyperterminal like software) using normal AT command.

The command syntax is :

AT+CGSN:page,offset
displaying 0x50 bytes of flash area starting from address page:offset.

AT+CGSN.page.Text
search Text inside the page area (page:0000h - page:3FFFh)

It will overwrite the normal AT+CGSN function (display IMEI).


~~~~~~~~~~~~~~~~~~~~

Happy searching,
RizaPN
  Reply With Quote
Old 05-11-2003, 12:18   #72 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 48
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
*** 55. Skip Addressbook for SMS Viewing v03 ***

Firmware : SL45v56
Author : RizaPN
Release : May 11, 2003
Update : May 12, 2003 (3rd edition)

By applying this, sender number and number inside the SMS will only be searched in the SIM-Location.
Make SMS viewing faster in some conditions.


0x27DA60 : FF FF FF FF FF FF FF FF -> D7 40 0C 00 F6 8E 52 1A
0x27DA68 : FF FF FF FF FF FF FF FF -> 88 90 88 80 DB 00 48 E0
0x27DA70 : FF FF FF FF FF FF FF FF -> 3D 04 D7 40 0C 00 F6 8F
0x27DA78 : FF FF FF FF FF FF FF FF -> 52 1A 88 90 88 80 DB 00

0x3470AC : 88 90 88 80 -> DA C7 6E DA
0x341AF6 : 88 90 88 80 -> DA C7 72 DA

0x398F64 : 88 90 88 80 -> DA C7 60 DA
0x39F47A : 88 90 88 80 -> DA C7 60 DA

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RizaPN

Last edited by rizapn; 05-12-2003 at 09:13.
  Reply With Quote
Old 05-11-2003, 15:46   #73 (permalink)
Junior Member
 
Join Date: Feb 2003
Location: Ukraine
Age: 44
Posts: 25
Member: 22131
Status: Offline
Thanks Meter: 0
*** Advanced debugging with AT+CGSN ***

I modified debugging patch written by Riza, to add some
useful things: improved search, write to memory, call procedures.



10F100: 26 C1 D2 -> D0 D7 C7

27D740: FF FF FF FF FF FF FF FF -> E0 04 BB 07 9D FE CB 00
27D748: FF FF FF FF FF FF FF FF -> E0 04 BB 03 8D 01 BB 01
27D750: FF FF FF FF FF FF FF FF -> CB 00 D7 40 11 00 99 2C
27D758: FF FF FF FF FF FF FF FF -> 27 F2 30 00 8D 0C 47 F2
27D760: FF FF FF FF FF FF FF FF -> 0A 00 8D 06 67 F2 DF 00
27D768: FF FF FF FF FF FF FF FF -> 29 27 47 F2 0F 00 ED 03
27D770: FF FF FF FF FF FF FF FF -> 5C 44 71 82 CB 00 1F 88
27D778: FF FF FF FF FF FF FF FF -> CB 00 88 50 88 E0 88 F0
27D780: FF FF FF FF FF FF FF FF -> 88 D0 F1 82 7C 44 F1 92
27D788: FF FF FF FF FF FF FF FF -> 66 F4 0F 0F 47 F9 0A 00
27D790: FF FF FF FF FF FF FF FF -> 8D 01 09 97 47 F8 0A 00
27D798: FF FF FF FF FF FF FF FF -> 8D 01 09 87 06 F4 30 30
27D7A0: FF FF FF FF FF FF FF FF -> 88 40 F0 C0 66 FC FF 3F
27D7A8: FF FF FF FF FF FF FF FF -> F2 FD 02 FE DA D3 B2 B1
27D7B0: FF FF FF FF FF FF FF FF -> 08 04 98 F0 98 E0 98 50
27D7B8: FF FF FF FF FF FF FF FF -> CB 00 F0 1E 7C 81 E0 0D
27D7C0: FF FF FF FF FF FF FF FF -> BB DC F0 1E E6 FD 20 00
27D7C8: FF FF FF FF -> BB D8 CB 00
27D7D0: FF FF FF FF FF FF FF FF -> E6 FC B3 08 D7 40 11 00
27D7D8: FF FF FF FF FF FF FF FF -> 99 3C 27 F3 2A 00 9D 02
27D7E0: FF FF FF FF FF FF FF FF -> FA D2 26 C1 BB AD F0 F4
27D7E8: FF FF FF FF FF FF FF FF -> BB AB F0 E4 49 30 2D 15
27D7F0: FF FF FF FF FF FF FF FF -> 29 34 2D 1F 27 F3 12 00
27D7F8: FF FF FF FF FF FF FF FF -> 2D 16 E0 DD BB BE E1 7B
27D800: FF FF FF FF FF FF FF FF -> E1 FA E6 FD 20 00 DC 4F
27D808: FF FF FF FF FF FF FF FF -> 99 2E BB B7 E0 DD 29 A1
27D810: FF FF FF FF FF FF FF FF -> 2D FA 9D F7 29 B1 9D F4
27D818: FF FF FF FF FF FF FF FF -> 0D 25 BB 96 8D 23 DC 4F
27D820: FF FF FF FF FF FF FF FF -> B9 8E 08 E1 0D FA DA C7
27D828: FF FF FF FF FF FF FF FF -> 68 D8 BB C7 F0 EF BB C5
27D830: FF FF FF FF FF FF FF FF -> 0D 19 26 F0 40 00 F0 20
27D838: FF FF FF FF FF FF FF FF -> BB 87 8D 03 B9 82 08 21
27D840: FF FF FF FF FF FF FF FF -> 0D FB 20 20 A7 58 A7 A7
27D848: FF FF FF FF FF FF FF FF -> 08 E1 2D 0A F0 10 F0 DE
27D850: FF FF FF FF FF FF FF FF -> F0 C2 DC 4F 99 8D 49 8D
27D858: FF FF FF FF FF FF FF FF -> 3D F5 28 C1 3D FA BB AD
27D860: FF FF FF FF FF FF FF FF -> 06 F0 40 00 FA D3 AC 84
27D868: FF FF FF FF FF FF -> EC FF EC FE DB 00


Commands are:

AT+CGSN
Display IMEI, as usual

AT+CGSN:page,offset
Dump 128 bytes of memory starting at address page:offset

AT+CGSN.page,offset,data
Search data on the given page, starting from offset. Data is a hexadecimal string without spaces. Offset is in range 0...3FFF.

AT+CGSN*page,offset,data
Write data to memory at address page:offset. Data is a hexadecimal string without spaces.

[email protected],offset
Inter-segment call to address seg:offset. On return, values of r14 and r15 will be displayed. Note that seg is the segment, not the page (eg. if you wrote procedure to 11:500, call it at 4:4500). Procedure should end with far return. If the procdure consumes much time, make sure to insert srvwdt instruction in its loop.


--
Chaos
  Reply With Quote
Old 05-15-2003, 10:54   #74 (permalink)
Crazy Poster
 
Join Date: Mar 2003
Posts: 58
Member: 24557
Status: Offline
Thanks Meter: 0
Access to GFX menu instead normal menu during a call
Firmware : Sl45v56
Author : Gurgy
Release : May 15, 2003

0018DF64: 6CBCDA C0D5C7

During a call if you go to Menu>Main menu It will open the Gfx menu.
  Reply With Quote
Old 05-18-2003, 13:22   #75 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 48
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
*** 69. Modify Date Display Format ***

Firmware : SL45v56
Author : RizaPN
Release : May 18, 2003

This patch will modify the display of Date in the idle (and some other) screen
to have Day information in the beginning (format : DY,DD.MM.YY or DY,MM/DD/YY)


0x04B9A8 : F0 9F F0 8E -> DA C7 80 DA
0x04BA92 : 9A F6 -> 0D 01

0x27DA80 : FF FF FF FF FF FF FF FF -> F0 9F F0 8E 88 80 88 90
0x27DA88 : FF FF FF FF FF FF FF FF -> 88 C0 88 D0 DA A4 10 B3
0x27DA90 : FF FF FF FF FF FF FF FF -> 5C 14 D7 40 1F 03 D4 14
0x27DA98 : FF FF FF FF FF FF FF FF -> C0 1A E6 F2 2C 00 98 D0
0x27DAA0 : FF FF FF FF FF FF FF FF -> 98 C0 98 90 98 80 08 83
0x27DAA8 : FF FF FF FF FF FF FF FF -> DC 69 89 48 89 38 89 28
0x27DAB0 : FF FF FF FF -> 08 83 DB 00
0x27DAC0 : FF FF FF FF FF FF FF FF -> 4D 6F 54 75 57 64 54 68
0x27DAC8 : FF FF FF FF FF FF -> 46 72 53 61 53 75

Day is entered on address 0x27DAC0, 2 bytes each, starting from Monday.
Comma after day is entered on address 0x27DA8C (hexa value 2C).
Just modify them as you like.


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

RizaPN
Jakarta, Indonesia

Last edited by rizapn; 05-19-2003 at 01:08.
  Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
thread Thread Starter Forum Replies Last Post
SLIKv56: Flash Patching (3rd part) ... rizapn x4x, x5x Flashpatching 2900 12-24-2007 09:51
TOC for Sticky: SLIKv56: Flash patches. StevieRay x4x, x5x Flashpatching 17 10-15-2005 08:26
"Bugs" in Thread SLIKv56: Flash patches trustkill Siemens-Benq Flash Patching 2 07-13-2004 07:33
M55 Flash Patch -Anyone´s got full modded flashes ready for flash--?? Uvedovle x4x, x5x Flashpatching 0 04-27-2004 10:32
Where can i download riza's SLIKv56: Flash Patching (3rd part) Gabriel_he Siemens-Benq Flash Patching 2 04-04-2003 02:20

 



All times are GMT +1. The time now is 18:59.



Powered by Searchlight © 2019 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2019 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2017 -
Page generated in 0.51124 seconds with 9 queries

SEO by vBSEO