GSM Shop GSM Shop
GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > Other Gsm/Mobile Related Forums > GSM Programming & Reverse Engineering

GSM Programming & Reverse Engineering Here you can post all Kind of GSM Programming and Reverse Engineering tools and Secrets.

Reply
 
LinkBack Thread Tools Display Modes
Old 02-27-2022, 03:21   #1 (permalink)
Junior Member
 
Join Date: Feb 2021
Location: Constanta
Posts: 19
Member: 2982260
Status: Offline
Thanks Meter: 0
Exclamation Need help reverse engineering 16bit Windows app / Binary EEPROM BOSCH 607


Hello all !

I want to create an aplication for change start up logo on old phone EEPROM (1997 Bosch COM 607).

I do know is a very old phone but it can serve as good start for retro modding knowledge because supposably is simpler because of age.

So, I did spent a lot of time trying to figure out how to disassamble the .BIN EEPROM file using IDA Pro and Ghidra with no real success.

I managed to find out that this phone is using Siemens C166 processor.
In IDA Pro I managed to disassemble the file but I cannot find the entry point for correctly disassamble the file.

Second, I tried to open as binary and try to locate the logo area by selecting small chunks of binary and convert in 1bit image, with no luck.

I tried using HEX converter to see the instruction calls from processor c166 with adresses but I cannot find the correct encoding..

I also have an old 16bit Windows app (Bosch-G Logo graphics viewer) which you can view the current logo inside the EEPROM but can not make any changes except invert colors..

For the sake of good old GSM times..can somebody help me identify the correct addresses and how to modify this file ?

Many thanks !

I attached to EEPROM binary for Bosch COM 607 (remove .TXT from name - forum limitation)
Attached Files
File Type: txt B607.BIN.TXT (4.0 KB, 14 views)
  Reply With Quote
Old 02-27-2022, 03:23   #2 (permalink)
Junior Member
 
Join Date: Feb 2021
Location: Constanta
Posts: 19
Member: 2982260
Status: Offline
Thanks Meter: 0
Any help or idea is greatly appreciated !
  Reply With Quote
Old 02-28-2022, 12:52   #3 (permalink)
No Life Poster
 
Nishith's Avatar
 
Join Date: May 2012
Location: BHARAT
Posts: 1,571
Member: 1766148
Status: Offline
Sonork: 100.1614494
Thanks Meter: 490
I don't exactly remember the tool name, but try to find some bin editor, which will help you to extract the resources from the bin fw file and repack the bin file with correct checksum, etc.

I used it years ago to modify some Samsung Firmware, But right now I don't remember any details.
  Reply With Quote
Old 02-28-2022, 18:42   #4 (permalink)
Junior Member
 
Join Date: Feb 2021
Location: Constanta
Posts: 19
Member: 2982260
Status: Offline
Thanks Meter: 0
Right now I use HEX editor but i cannot figure out the encoding used for binary file. C166 i am not sure is using checksum. I was trying to use a binary to inage converter but cannot find anywhre on the web.. there is one website who provide a tool to convert binary to image but no image show up... At some point somebody sugested to use Siemens Smelter because of compatibility with the C166 but still no luck.. I even tried Siemens Image Viewer for C35 series (uses C166 processor) but cannot recognize the bin. If you remember the tool please write back. I plan to make a ibternational website with 1000+ reto tools for modify the old phones free of charge.. thousand of logos, java games and mods. Big thanks for any help.
  Reply With Quote
Old 05-10-2024, 17:29   #5 (permalink)
Junior Member
 
Join Date: May 2022
Posts: 1
Member: 3013517
Status: Offline
Thanks Meter: 1
Arrow

Quote:
Originally Posted by n4spd View Post
Hello all !

I want to create an aplication for change start up logo on old phone EEPROM (1997 Bosch COM 607).

I do know is a very old phone but it can serve as good start for retro modding knowledge because supposably is simpler because of age.

So, I did spent a lot of time trying to figure out how to disassamble the .BIN EEPROM file using IDA Pro and Ghidra with no real success.

I managed to find out that this phone is using Siemens C166 processor.
In IDA Pro I managed to disassemble the file but I cannot find the entry point for correctly disassamble the file.

Second, I tried to open as binary and try to locate the logo area by selecting small chunks of binary and convert in 1bit image, with no luck.

I tried using HEX converter to see the instruction calls from processor c166 with adresses but I cannot find the correct encoding..

I also have an old 16bit Windows app (Bosch-G Logo graphics viewer) which you can view the current logo inside the EEPROM but can not make any changes except invert colors..

For the sake of good old GSM times..can somebody help me identify the correct addresses and how to modify this file ?

Many thanks !

I attached to EEPROM binary for Bosch COM 607 (remove .TXT from name - forum limitation)
Looking at the dump you sent with an raw image viewer (name of it is image_search_editor - ISE) the splash screen you want to change is at 0x9c6 and is stored in 1bpp linear in reverse-order (1st pixel (bit 7) in bit 0, 2nd pixel (bit 6) in bit 1...), and total size 0x150 (128x28 reso/1bpp). It looks like nv eeprom, not program code rom which is big than the dump.
If you are to mod the logo with ISE you have to set to byte reverse mode then edit->replace by bmp and open the new splash bitmap -> check apply -> ok and save new dump, then write modified dump to eeprom.
I might attach a python and/or c program for changing the splash without ise soon, sorry if i replied to a 2 year old post but noticed this now whilst looking for some samsung agere imei lock thing.
  Reply With Quote
The Following User Says Thank You to 30raura2022 For This Useful Post:
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


 



All times are GMT +1. The time now is 22:06.



Powered by Searchlight © 2024 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2024 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2023 -
Page generated in 0.16333 seconds with 9 queries

SEO by vBSEO