GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > GSM & CDMA Phones / Tablets Software & Hardware Area > Various > Siemens-Benq > Siemens-Benq Flash Patching > x6x and x7x Flashpatching


x6x and x7x Flashpatching x6x and x7x Flashpatching (and newer phones).

Reply
 
LinkBack Thread Tools Display Modes
Old 11-07-2005, 15:15   #1 (permalink)
Freak Poster
 
Join Date: Jan 2004
Location: Kiev, Ukraine
Age: 53
Posts: 291
Member: 48709
Status: Offline
Thanks Meter: 0
FunctionLibrary and Patterns


Lets talk here about FunctionLibrary patch and signatures for it.

> benj9: In Smelter 7.10 functions.ini some functions are prepared, but the search string is missing
Because I didn't find it's patterns. Lets fill file "functions.ini" for Smelter together

> benj9: When I replace the 3 lines with:
f66:IsScreenSaver = B50120????????80BD80B50028????0120????????80BD0120
it has no effect...

Smelter searchs functions for FunctionLibrary only via even addresses...
So, you have to write: f66:IsScreenSaver = ??B5...

Please, put your signatures for functions, variables, constants, patches here...
  Reply With Quote
Old 11-07-2005, 19:02   #2 (permalink)
Junior Member
 
Join Date: Jul 2005
Posts: 39
Member: 158963
Status: Offline
Thanks Meter: 0
ok, it works nice. a common database is appreciated.

smelter does the job, but could you explain the rule, in which case to add +1 to a jump?

f66:IsScreenSaver = 80B50120????????80BD80B50028????0120????????80BD01 20
f67:IsUnlocked = ????80B5103880680028????????????002801D1012080BD
f68:TempLigntOn = B0B5????????163D29780022????????291C201C????????B0 BD10B5041C00220021

f75:StartMidlet = F04D2DE90040A0E10100D0E5
  Reply With Quote
Old 11-08-2005, 07:10   #3 (permalink)
Freak Poster
 
Join Date: Jan 2004
Location: Kiev, Ukraine
Age: 53
Posts: 291
Member: 48709
Status: Offline
Thanks Meter: 0
Quote:
Originally Posted by benj9
could you explain the rule, in which case to add +1 to a jump?
If second byte is Bx (example - 80B5...).
In other cases you have to write it manually. Example:
MySuperFunction = 123456789A + 1
  Reply With Quote
Old 11-08-2005, 13:41   #4 (permalink)
Junior Member
 
Join Date: Jul 2005
Posts: 39
Member: 158963
Status: Offline
Thanks Meter: 0
Thx.

I think that maximum limit of 100 functions in the library is maybe a little bit to close, and there is no reason to limit it. Please be more splendid NOW, before we code it in our patches.
  Reply With Quote
Old 11-08-2005, 14:21   #5 (permalink)
BuG
Junior Member
 
Join Date: Jan 2005
Location: Germany
Posts: 31
Member: 102514
Status: Offline
Thanks Meter: 0
Here are some more functions, maybe some of them are usefull:

CallScreening = 10B5041C??48??????????????????49031C1431201C??4A
CallWaiting = 80B58D208000??????????4909200870FF20A530????????00 28
CheckCarkitOrHeadsetStatus = BCB5041C68460D1C????????291C201C6A46????????0128?? D20120BCBD
CheckHomezoneStatus1 = B0B5??4C051C143CA0790028??D00020A071
CheckHomezoneStatus2 = 70B50025??????????4E0124201C????????0028??D0?????? ??A042
CheckHomezoneStatus3 = 10B50024??????????490120D4224243521892685207
CheckHomezoneStatus4 = B0B50025????????0124201C????????0528??D1D4206043
CheckIrDAStatus = F8B5061C0D1C0024??????????4FB842??D0311C????????B8 42
CheckKeypadLockStatus= ??4880B5103880680028??D0????????0028??D1012080BD
CheckMicMute = 04E02DE541DF4DE204008DE2??????E???????FA741FA0E3?? ????E5??????FA04308DE2??????E?0110A0E33400A0E3
CheckRingtoneStatusBeepOrOff = 10402DE9??????E???????E?004090E5??????E?0400A0E110 80BDE8
CheckVibraStatus = ??4880B501780129??D140680128??D1????????0028??D001 2080BD
CheckVibraStatusForVibraLogo = 80B5??F???F???F???F?FF28??D0012080BD002080BD
Divert = B0B5051C??488EB0????????00240120????????0028??D105 200590062006900224
DrawFrameInNativeMenu= FFB59FB01F1C0123289C0020161C002C04900593299D
DrawIconToIconbar = F8B510880F1C141C8507AD0F86081328??D902DF
DrawMainScreen = 70B5??490131481E??????E???4D0120??600420
DrawMainScreenIcons = F0B5051C002087B000AB??4C1883261C002D
GenProviderString = B0B5051C0C1C??F???F?011C221C281C??F???F?B0BD
GenProviderStringMS = F0B5041C0E1CD7B03BA936A82422??F???E?051C
GetCallList = 80B5ACB00A9110A9087128A9002008800B9008220A72
GetMissedCallsCount = 10B5??F???E?AA484468??F???E?201C10BD10B5??F???E?16 48
HideID = ??4880B59038??????????490A200870??48??A1??A27030
IlluminationFadeOut = 10B5041C??????????4941436420????????021C0021201C?? ??????201C????????10BD
MainScreenInit = B0B500240D1CE443??????????30????????0028??D0?????? ????30
ProviderInMainScreen = 70B5051C0021????????0128??D1281C????????061C0124?? E0211C281C
ProviderInScreensaver= 70B5041C0E1C9AB007A902A82622
RemoveKeypadLockOnClosedSlider = 10B5??49??48??????????49041CA831??????????49201C?? ????????490120????????201C????????10BD
RunNativeMenu = 10B5??????F???????F?041C??????E?201C10BD0020704700 207047
ShowMsgInR1_1 = ??4AC307??D438320B1C0021??E7
ShowMsgInR1_2 = ??4AE032C307??D438320B1C0021??E7??4AE0
ShowMsgInR1_3 = ??4AE032C307??D438320B1C0021??E7??4AC3
ShowMsgInR1_4 = ??4AC307??D4383A0B1C0021??E7
ShowMsgInR1_5 = ??4A3832C307??D438320B1C0021??E7
ShowMsgInR1_6 = 0B1C111C??4A7032??E6
ShowMsgInR1_7 = 0B1C111C??4AA832??E6
ShowMsgInR1_8 = 8CB5C20702D5??F???F?8CBD
ShowMsgInR3_1 = FFB5FFB0E4B0171C0E1CFF221D1CBD3205A96846??F???E?04 1C0022011C281C??F???F?201C??F???E???F???E?051C211C ??F???E?3A1C311C2B1CE398??F???F?7FB068B0F0BD0000?? ????A0
ShowMsgInR3_2 = FFB5FFB0E4B0171C0E1CFF221D1CBD3205A96846??F???E?04 1C0022011C281C??F???F?201C??F???E???F???E?051C211C ??F???E?3A1C311C2B1CE398??F???F?7FB068B0F0BD??B5
ShowMainMenu = 80B5??F???F???F???E?80BD08B5??F???E?0028??D0
ShowNativeMenu = 80B5??F???F?80BD0000??????A0????0000??????A0?????? A0??????A0??????A1??????A070B5
SwitchGprsOnOff = 80B5??F???E?0028??D00020??F???E???490231??E00120?? F???E???4903310120??F???E?80BD
SwitchIrdaOnOff = 80B50120??F???F?01210120??F???F?0028??D0??49??E0
SwitchVibraOnOff = 80B5??F???F???490870??F???F???F???F?FF28??D1??F??? F?0021??F???F???49??E0
ToggleHandsfree = F0452DE941DF4DE20170A0E10060A0E104008DE2??????E202 A0A0E1??????FA??????E5??????E5??????FA04308DE2???? ??E20110A0E33400A0E3??????FA??????E5000098E5A00350 E30020A003??00000A????F?EB0050B0E1??00000A0500A0E1 ????F?EB0040B0E1??00000A????F?EBA003A0E3000088E5B6 70C8E1B460C8E1????F?EB1C
ToggleMicMute = F0452DE941DF4DE20170A0E10060A0E104008DE2??????E202 A0A0E1??????FA??????E5??????E5??????FA04308DE2???? ??E20110A0E33400A0E3??????FA??????E5000098E5A00350 E30020A003??00000A????F?EB0050B0E1??00000A0500A0E1 ????F?EB0040B0E1??00000A????F?EBA003A0E3000088E5B6 70C8E1B460C8E1????F?EB18


expanded searchstring:
DecToHex = F0B5061C0C1C151C85B068461122??49??????????E0207869 466A460009085C307021780134
GetAkku = 1C402DE9????9FE5002180E0822083E00120D2E7FF0052E374 039F050F00000A
SPrintF_1 = 0FB430B591B00F900C4816A90E91784408900B48784409900F AD281C01AB0EAA1599????????041C291C0020????????201C 11B030BC08BC04B01847????0000????0000??B50C1C
SPrintF_2 = 0FB430B591B00F900C4816A90E91784408900B48784409900F AD281C01AB0EAA1599????????041C291C0020????????201C 11B030BC08BC04B01847????0000????0000??B4??B5

same searchstring (what's wrong?):
MkDir = FF412DE90060A0E10800A0E30380A0E10170A0E10250A0E1?? ??????047080E5008080E50080A0E398779FE5
SetFileAttrib = FF412DE90060A0E10800A0E30380A0E10170A0E10250A0E1?? ??????047080E5008080E50080A0E398779FE5
  Reply With Quote
Old 11-08-2005, 14:41   #6 (permalink)
Freak Poster
 
Join Date: Jan 2004
Location: Kiev, Ukraine
Age: 53
Posts: 291
Member: 48709
Status: Offline
Thanks Meter: 0
Quote:
Originally Posted by benj9
I think that maximum limit of 100 functions in the library is maybe a little bit to close, and there is no reason to limit it. Please be more splendid NOW, before we code it in our patches.
My first idea was just 32 functions ))
Now we have 128 objects = 100 fun + 20 var + 8 const.
Ok, lets do 256 obj = 200 fun + 28 var + 28 const.
It'll be enough ?

PS. We don't need allocate ALL functions in library. Only patch-useable functions...
All another functions we can get by help unlimited "Standard functions"...
  Reply With Quote
Old 11-08-2005, 14:52   #7 (permalink)
Junior Member
 
Join Date: Jul 2005
Posts: 39
Member: 158963
Status: Offline
Thanks Meter: 0
I guess that's enough, but if I see Bugs list ... 512 objects would only be 4k. And we have vast desert of space up to the next used block of almost 128k. what you think about A0FC0000-A0FC1000 as function library?
  Reply With Quote
Old 11-08-2005, 15:07   #8 (permalink)
Freak Poster
 
Join Date: Jan 2004
Location: Kiev, Ukraine
Age: 53
Posts: 291
Member: 48709
Status: Offline
Thanks Meter: 0
Quote:
Originally Posted by benj9
I guess that's enough, but if I see Bugs list ... 512 objects would only be 4k. And we have vast desert of space up to the next used block of almost 128k. what you think about A0FC0000-A0FC1000 as function library?
We never will used _all_ this functions in patches.
We should allocate in library only useable functions.
We have not 128k, only 64K, because Extended PIT-table starts from 0FD0000.
So, I propose 256=200+28+28.

If 3 years later ( ) we will need additional library - we can create patch "FunctionLibrary2" and allocate it at 0FCF000 (for example)

So, I propose:
A0FC0000: Library = 2K = 256 obj = 200+28+28
A0FC0800: Reserved for Library2
A0FC0C00: MasterPatch
A0FC1000: patches...

Last edited by avkiev; 11-08-2005 at 15:18.
  Reply With Quote
Old 11-08-2005, 17:08   #9 (permalink)
Freak Poster
 
Join Date: Jan 2004
Location: Kiev, Ukraine
Age: 53
Posts: 291
Member: 48709
Status: Offline
Thanks Meter: 0
Smelter 7.15
- FunctionLibrary was extended to 256=200+28+28 objects
  Reply With Quote
Old 11-08-2005, 18:53   #10 (permalink)
Freak Poster
 
Join Date: Jan 2004
Location: Kiev, Ukraine
Age: 53
Posts: 291
Member: 48709
Status: Offline
Thanks Meter: 0
Just try it:
S65v58 - FunctionLibrary
x65 - MasterPatch
x65 - Date at the bottom of maincsreen as "We, 11 May" v7
  Reply With Quote
Old 11-09-2005, 10:09   #11 (permalink)
BuG
Junior Member
 
Join Date: Jan 2005
Location: Germany
Posts: 31
Member: 102514
Status: Offline
Thanks Meter: 0
Thanks for the new version.

Let me do a feature request for a new Smelter version, please. It's not urgent.
If you search for functions in a fullflash file, is it possible to search for those xrefs that call such "jump functions" to these functions automatically?
Something like that:
Code:
LDR     PC, =dwMODdw
DCD dwMODdw
or that:
Code:
LDR     R12, =(GetProfile+1)
BX      R12
DCD GetProfile+1
Would be great.
  Reply With Quote
Old 11-09-2005, 10:32   #12 (permalink)
Freak Poster
 
Join Date: Jan 2004
Location: Kiev, Ukraine
Age: 53
Posts: 291
Member: 48709
Status: Offline
Thanks Meter: 0
Quote:
Originally Posted by BuG
If you search for functions in a fullflash file, is it possible to search for those xrefs that call such "jump functions" to these functions automatically?
You can do it manually.
Smelter - Ctrl-X
  Reply With Quote
Old 11-09-2005, 11:24   #13 (permalink)
BuG
Junior Member
 
Join Date: Jan 2005
Location: Germany
Posts: 31
Member: 102514
Status: Offline
Thanks Meter: 0
Sure, I know that and it's great. But it's annoying to do that for every single function.
  Reply With Quote
Old 11-09-2005, 11:28   #14 (permalink)
Freak Poster
 
Join Date: Jan 2004
Location: Kiev, Ukraine
Age: 53
Posts: 291
Member: 48709
Status: Offline
Thanks Meter: 0
Ok, may be later.......
  Reply With Quote
Old 11-10-2005, 19:50   #15 (permalink)
Junior Member
 
Join Date: Jul 2005
Posts: 39
Member: 158963
Status: Offline
Thanks Meter: 0
I would like to ask you to include these 3 items in functions.ini, I use them in my coming patch, having these ones I am *free of porting*


--- function: ---------
Mainscreen_Get_ScreensaverAddressAndState = 80B50028????0120????????80BD0120????????80BD
returns address in of Screensaver-Byte R0 and its content in R1. You can read and set the byte.
Byte AND 0x19: = 0x19: Lock Device.
Byte AND 1: =1: screensaver active. =0: screensaver not active.

--- ram var: ---------
ram_gui_state = 00AB??8B??28????????CE43301C????????0028
add 0x20 to the found address. goto its content. add 2, there is the byte.
meaning: 0 while booting, FF not at mainscreen, something else at mainscreen
----
edit: one func removed temporariliy

-------------------------
By the way: smelter is a g-r-e-a-t tool!

Last edited by benj9; 11-10-2005 at 22:32.
  Reply With Quote
Reply

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Switchblade Stiletto CUFF TANK TOP- In Choice of Colors and Patterns (Leopard) IPMART ipmart WebShop 0 03-16-2010 11:10
9530 with pattern like HTC my touch or any android personal pattern removal help mymiela0419 FuriousGold 5 01-13-2010 18:43
BGA pattern for Siemens Infineon X55 and X60 LukasU Main Sales Section 0 08-17-2004 10:01
Change the Menu logos and pattern? Saaduk x1x to x45/x50 12 05-06-2003 20:59
LCD pattern generator koloksky Hardware Equipments for GSM 0 11-25-2000 01:00

 



All times are GMT +1. The time now is 06:17.



Powered by Searchlight © 2024 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -
Page generated in 0.28229 seconds with 9 queries

SEO by vBSEO