GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > GSM & CDMA Phones / Tablets Software & Hardware Area > Various > Siemens-Benq > Siemens-Benq Flash Patching > x4x, x5x Flashpatching


Reply
 
LinkBack Thread Tools Display Modes
Old 07-16-2004, 00:44   #16 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 53
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2

@rc-flitzer:
Sorry, but I really have no other information about that functions. Maybe you can find something about that from chaos or mamaich site (I'm not sure).

@DeadManS:
Yes, as far as I know (from drawImgIdx routines), the PIT value is stored in that address. But, I never try to change the value to move PIT to the new address. Anyway, why do you need to move the PIT to the area if there is another way to extend it? If you move them, then you need another "big" free area for the new PIT.

rizapn
  Reply With Quote
Old 07-16-2004, 07:04   #17 (permalink)
Junior Member
 
Join Date: Dec 2003
Location: Beijing,China
Posts: 12
Member: 46843
Status: Offline
Thanks Meter: 0
Hello, Rizapn
can you tell me some info about T9?
  Reply With Quote
Old 07-16-2004, 07:20   #18 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 53
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
@coollang:
Long time no "see". Aha... that's my wish too. I did discuss some about T9 with mamaich, but we did not found something really clear about T9. I only cover very-very preliminary info about T9 structure. You can download it from my z-soft, http://groups.yahoo.com/group/z-soft...s/t9_trial.txt ... If you find some other thing, please share it with us ...
  Reply With Quote
Old 07-16-2004, 07:55   #19 (permalink)
Junior Member
 
Join Date: Dec 2003
Location: Beijing,China
Posts: 12
Member: 46843
Status: Offline
Thanks Meter: 0
@Riza
very thanks!
I have found some info about T9, but there is more different between lg8 and others. i would share all found!
  Reply With Quote
Old 07-16-2004, 20:52   #20 (permalink)
Freak Poster
 
Join Date: Jun 2004
Location: Russia, Zelenograd
Age: 35
Posts: 336
Member: 70080
Status: Offline
Thanks Meter: 2
Patch exists .....................

Last edited by Seklth; 07-17-2004 at 15:25.
  Reply With Quote
Old 07-17-2004, 15:16   #21 (permalink)
No Life Poster
 
lalo.lerry's Avatar
 
Join Date: Jan 2004
Location: Italy
Age: 49
Posts: 1,018
Member: 50673
Status: Offline
Thanks Meter: 2
@ Sekith:
thanks

@ Master RIZA:
I've seen that in all you patches that have a request of confirmation you used to create a new MsgBox, but there isn't in SLIK fw a DisMsgBox? () function alread done (in S45i I found 3 - FA4D9C, FA4E18 and FA4E38)?

And can you teach me well (even if I've yet partly understood) how to create a new msgbox (icon,text,sks,headers, sk answers jump...)
Thanks

Last edited by lalo.lerry; 07-17-2004 at 17:17.
  Reply With Quote
Old 07-17-2004, 15:54   #22 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 53
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
Message Box and Dialogs

Yes, SL45 also has some (many) display message box, such as : 0xE6F138, 0xE6EF0A, 0xE6F198, 0xE6EFE4, 0xD4E960, etc-etc. There are also some show Dialog routines, 0xE5DD76, 0xE5DE28, 0xE5ECD8, etc-etc.

Mostly, I use the one in 0xE5DDCE (why? because, in my current knowledge, this is the most compact ones) ... and here is my 'generic' syntax :

Code:
#define showMsgIcon2  0E5DDCEh

x_main:
        mov     r12, #q(x_data)
        mov     r13, #p(x_data)
        mov     r14, #q(x_text)
        mov     r15, r13             ; save 2 bytes
        jmps    showMsgIcon2

x_handler:
        mov     r4, r14
        cmp     r14, #23h   ; if yes pressed
        jmpr    cc_NZ, xh_rets
        jmps    yes_function       ; the function for Yes button
xh_rets:
        rets

x_data:
        dw      0,0,2
x_text:
        dw      4a0h, 0b5h, 7fffh                 ; pointer to text to displayed
        dw      0,0
        dw      o(x_handler), s(x_handler)
        dw      0,0,2c5ah,2e2h,4e26h,2        ; pointer to yes+no button definition
Actually x_text is separated from x_data, but I like to save some spaces, so I combine both, and x_text is become a part of x_data. The original format is :

x_text:
dw string_ID, string_ID, string_ID, ... ,7fffh

x_data:
dw 0,0,2,x,y,7fffh, ... 2e2h,4e26h,2

I dunno the meaning of each word in the x_data, but some of them (time-to-wait, handler, and button-definition). I use a 'generic' format to display the generic (but different text) dialog.

I saw that SME45iv04 has more 'powerfull' built-in displayYesNoDialog, such as : 0xFA4E18 (r12=style?,r13=text,r14=ofs(yes_handler),r15=seg( yes_handler)) ...

rizapn

Last edited by rizapn; 07-17-2004 at 16:18.
  Reply With Quote
Old 07-17-2004, 17:13   #23 (permalink)
No Life Poster
 
lalo.lerry's Avatar
 
Join Date: Jan 2004
Location: Italy
Age: 49
Posts: 1,018
Member: 50673
Status: Offline
Thanks Meter: 2
Thank you MASTER!

Quote:
Originally Posted by rizapn
I saw that SME45iv04 has more 'powerfull' built-in displayYesNoDialog, such as : 0xFA4E18 (r12=style?,r13=text,r14=ofs(yes_handler),r15=seg( yes_handler)) ...
Yes, I know S45i MsgBox? and already used it in some patches as "Add request of confirmation for unlocking keybord".
E.g.:

DisplayMessageBoxD(? icon) {
mov r12, flag ; #1=boxed, #2=unboxed
mov r13, #textID
mov r14, #segment offset(YESNOReturn)
mov r15, #segment (YESNOReturn)
call FA4E38 ; MsgBox ? icon with yes on left sk
answer in r12: sk right o arrow right=no=0, sk left=yes=1, red button rets


I think I'm going to use this if I'll adaptate you latest patches...
May I ask you another thing?
In these MsgBox? if mov r14 and r15 are setted to 0 where is return routine?
I alway go mad to find them!
  Reply With Quote
Old 07-18-2004, 16:05   #24 (permalink)
No Life Poster
 
Join Date: Mar 2004
Posts: 593
Member: 60520
Status: Offline
Thanks Meter: 0
After some bugging in the SMS counter patch I discovered that the values for received and sent messages are stored in RAM right after values for currency calculator. I presume that the values will be stored in EEPROM together with curreny calc. values?

Sometimes my SL crashes after sending an SMS (maybe from the modification with menu structures), so every change since last regular shutdown of the phone is lost. It's a pity that the SMS counts are only stored when shutting off the phone. Is it possible to write them directly into EEPROM, using the described eeprom routines? So the values will be stored immediately just like appointments. Or will this method be too time-critical?
(I announce that values have to be also read from EEPROM not from RAM.)
  Reply With Quote
Old 07-20-2004, 10:43   #25 (permalink)
Insane Poster
 
Join Date: May 2002
Age: 39
Posts: 76
Member: 12407
Status: Offline
Thanks Meter: 0
dear riza,
there is a very interesting function in your rsb patch. D6A20A draws a rectangle of white pixels. now my question: is there also a function that does the same thing by drawing black pixels? this will make the drawing of the signal bars in my supernet patch much easier!

thanks
arsh0r
  Reply With Quote
Old 07-20-2004, 13:26   #26 (permalink)
No Life Poster
 
Join Date: Mar 2002
Location: -[r0]-
Age: 53
Posts: 834
Member: 9891
Status: Offline
Thanks Meter: 2
SMS Counter
Thank's. I never try (use EEPROM func in that SMS Counter patch), but I think it is possible. If the result is same (not directly write into the EEPROM), then we have to check more in the Appointment routines. About reading the value, I think it will be no different (read it from RAM or read it from EEPROM) because the SMS Counter function will be executed after all phone initialization (including copy most EEPROM content/pointer to the RAM).

ClearRect and FillRect

...
ClearRect is a sub-function of FillRect.
FillRect() in SL45v56 is 0xC0E5D0, and here is the usage:

Code:
FillRect_test:
  mov  r12, #color     ; 0=white, 1=black
  mov [-r0], r12
  mov r12, #X
  mov r13, #Y
  mov r14, #width
  mov r15, #height
  calls 0xC0E5D0
  add r0, #2
  rets

sub_clearRect:
  mov r1, #0
  mov [-r0], r1
  calls 0xC0E5D0
  add r0, #2
  rets
There is also : drawImage() (not a drawImgIdx ones) and even drawString() in the firmware.

rizapn

Last edited by rizapn; 07-20-2004 at 14:07.
  Reply With Quote
Old 07-20-2004, 18:57   #27 (permalink)
Freak Poster
 
Join Date: Jun 2004
Location: Russia, Zelenograd
Age: 35
Posts: 336
Member: 70080
Status: Offline
Thanks Meter: 2
What hear - is found tel in idle state/locking state or no?

Last edited by Seklth; 07-22-2004 at 17:11.
  Reply With Quote
Old 07-21-2004, 04:22   #28 (permalink)
Freak Poster
 
Join Date: May 2003
Location: Russia, Ekaterinburg
Age: 44
Posts: 184
Member: 29316
Status: Offline
Thanks Meter: 0
How i can load the mid file into a individual 1-3 song memory ?
Patch idea:
song name = phone number into in address book
ringtone = individual3
before the play of ringtone when incomingcall we load a .mid file into a individual3 memory, and phone plays them
  Reply With Quote
Old 07-21-2004, 12:50   #29 (permalink)
Insane Poster
 
Join Date: May 2002
Age: 39
Posts: 76
Member: 12407
Status: Offline
Thanks Meter: 0
thx riza, now it works perfectly!
I also want to share my source with all of you:
supernetv0.4beta: http://www.2chaos.de/supernet/supernet0.4.txt
because i don't use mamaichs functions anymore, it can be easily ported to f.e. SME45 (but i only have sl45).

we need more functions in the app menu, too many patches are allready selctable, theres nothing left.
/edit: thx again riza, 48 patches ijn app menu will last for generations of patches...

cya
arsh0r

Last edited by arsh0r; 07-22-2004 at 09:41. Reason: i want to
  Reply With Quote
Old 07-26-2004, 10:52   #30 (permalink)
No Life Poster
 
trustkill's Avatar
 
Join Date: May 2003
Location: GERMANY
Age: 49
Posts: 980
Member: 27745
Status: Offline
Thanks Meter: 0
I know how to do some shortcuts to functions in the app-menu.

But only by changing some exiting patch code -> for example this:

0x18E388: 8B00 A904 ;string #8B -> #4A9
0x18E3BC: 8C00 A904 ;string #8B -> #4A9
0x18E4B8: 8B008B00 A904A904 ;same thing
0x3AE310: DAD70245 DAC7E0D3 ;call to patch

How can I find the marked things ? The change of the language strings is easy to do, but I can´t reproduce the other things.

The patch ist easy to do, too:
Code:
	mov	[-r0], r12		; Register 12 sichern
	extp	#0Eh, #01h
	mov	r12, 03A42h		; r12 = 03BA42h
	jnb	r12.1, notSelected	; springe, wenn bit 1 nicht gesetzt (=Funktion Nr. 2)
	bclr	r12.1
	jmpr    cc_UC, clean
notSelected:
	bset	r12.1
clean:
	extp	#0Eh, #01h
	mov	03A42h, r12	
	mov	r12, [r0+]		; Register 12 zurück
Or, even better, how can I add some more shortcuts (not changing existing ones)...
  Reply With Quote
Reply

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
BB5 - Technical Discussion adihack Nokia Base Band 5 ( BB-5 ) 220 10-14-2011 05:31
x65 patching technical discussion Acidmrp x6x and x7x Flashpatching 42 10-10-2009 07:06
Iphone 3G Technical Discussion and SP Unlocking theory GraveSlayer iPhone 2 / iPhone 3G / iPhone 3GS 8 11-15-2008 06:04
Technical discussion sharp705sh celluniversal Sharp 0 05-17-2007 17:26
Technical discussion BB5 unlocking twisterfan Nokia Base Band 5 ( BB-5 ) 0 05-16-2007 19:36

 



All times are GMT +1. The time now is 10:52.



Powered by Searchlight © 2024 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -
Page generated in 0.22539 seconds with 10 queries

SEO by vBSEO