Boemio
25-04-2004, 08:46 PM
I patched my 8250 flashfile with several functions in g3nolite and i'm trying to make the menustructure so i can controle them.
I'm using SmaRkieS Tutorial (http://www.geocities.com/smarkenshin/genolite2d.htm) to guide me in the creation of the menus...!
When i click to create the structure, i always get errors...
Here are the Menustructure file:
# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
# using 'PORT' lang chunk
#
# ---------------------------------------------
# FLS : 1900544 bytes
# with PPM at 00140000
# offset: 0011FD08
# ---------------------------------------------
#
# checking given ROOT-entry..
# ... seems to be okay
#
#
[0x0031FBE8] (0x0B) (0x10) (0x0101) [0x0013086E]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00326732] [0x00326BCD] [0x0031E3C4] (0x004E) (0x0387) (0x0000) (0x003A) (0x0000) (0x0003) Mensagem enviada
[0x0031E2BC] (0x0A) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326732] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Mensagem enviada
[0x00326819] [0x00326B49] [0x0000001F] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Limpar visor
[0x003267E6] [0x00326BD9] [0x0000001C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) N^ do centro:
[0x00326837] [0x00326BDF] [0x0000001B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Op¸Áes de mensagens
[0x00325DBD] [0x00326C06] [0x0000009C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Perfil padr·o
[0x0032632D] [0x00000000] [0x0000008C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Imagem %N
[0x00326834] [0x00326B79] [0x00000021] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Memorizar
[0x003260B1] [0x00326B22] [0x00000026] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Temas
[0x0032628E] [0x00326B4F] [0x0031DEFC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Erro de c¾digo
[0x0031DEB4] (0x02) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0100) (0x001A)
[0x003263F3] [0x00000000] [0x00000048] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Ouvir mensagens vocais
[0x003263F6] [0x00000000] [0x00000049] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Fax e dados
# --------------
[0x00326A50] [0x00326BF4] [0x00000024] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Mensagem: %U
[0x00326A80] [0x00326BFD] [0x0031E2B0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Nova mensagem Ade voz
[0x0031E268] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x003263F0] [0x00326B16] [0x0000002D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Definido
[0x00326A77] [0x00326BFA] [0x0000002B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) A procurar
# --------------
# --------------
[0x0032600F] [0x00326B0A] [0x0031ED78] (0x004F) (0x0387) (0x0000) (0x003A) (0x0000) (0x0004) Chamada em curso
[0x0031ECB8] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032600F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Chamada em curso
[0x00326459] [0x00326B7C] [0x00000000] (0x012D) (0x0282) (0x0000) (0x004E) (0x0400) (0x001A) Sem espa¸o para novas mensagens
[0x00326633] [0x00326BB2] [0x00000000] (0x012D) (0x0281) (0x0000) (0x004E) (0x0400) (0x001A) Chamadas efectuadas
[0x00326630] [0x00326BAF] [0x00000000] (0x012D) (0x0280) (0x0000) (0x004E) (0x0400) (0x001A) Hora alterada
[0x00326441] [0x00326B4C] [0x0031F840] (0x012D) (0x0387) (0x0000) (0x004E) (0x2000) (0x001A) Apagar tudo
[0x0031F7C8] (0x04) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00326279] [0x00000000] [0x00000011] (0x012D) (0x05E0) (0x0000) (0x003E) (0x3000) (0x001A) Final. todas
[0x00326282] [0x00000000] [0x00000006] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Marcadas
[0x0032627F] [0x00000000] [0x00000004] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Cart·o
[0x00326288] [0x00000000] [0x00000005] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Telefone
# --------------
[0x0032602A] [0x00326B13] [0x00000014] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Dura¸·o ch. recebidas
[0x00325FFD] [0x00326B01] [0x00000017] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Limite de custos
[0x00326000] [0x00326B04] [0x0031ECAC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Visualizar custos de chamadas
[0x0031EC64] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Visualizar custos de chamadas
[0x00325FFA] [0x00326B25] [0x0000001A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Limite:
[0x003261FE] [0x00326B34] [0x00000019] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Unidades
# --------------
# --------------
[0x0032646E] [0x00326B7F] [0x0000006A] (0x0051) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0005) Activar
[0x0032672C] [0x00326BCA] [0x0031FA68] (0x0052) (0x0387) (0x0000) (0x003A) (0x0000) (0x0006) N^s servi¸os
[0x0031F978] (0x09) (0x80) (0x0101) [0x00130878]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325E53] [0x00326AEC] [0x00000064] (0x012D) (0x05E0) (0x0000) (0x004E) (0x2800) (0x001A) Activar
[0x00326609] [0x00326BAC] [0x00000066] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) am
[0x00325DD8] [0x00326C09] [0x0031F12C] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) (vazio)
[0x0031F024] (0x0A) (0x80) (0x0101) [0x00130870]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00326672] [0x00326BB5] [0x00000051] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Toque
[0x00326675] [0x00326BB8] [0x0000000D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Sinaliza¸·o de chamada
[0x0032667B] [0x00326BBB] [0x0000000C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Tipo %N
[0x0032614D] [0x00000000] [0x00000023] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Envia o pr¾prio n^ ao atender
[0x00326A62] [0x00326BF7] [0x0031DDD0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Desligado
[0x0031DD88] (0x02) (0xC0) (0x8AAE) [0x00000000]
# --------------
[0x00326A62] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Desligado
[0x00326A5C] [0x00000000] [0x00000001] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) Confirmar novo c¾digo PIN2:
[0x00326A5F] [0x00000000] [0x00000000] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) Ligado
# --------------
[0x0032688E] [0x00326BE8] [0x00000077] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Mensagem n·o envi- ada desta vez
[0x003263BA] [0x00326B6A] [0x0000000B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Junho-%1S %2S:%3S:%4S
[0x00326ADA] [0x00326C00] [0x0031E0A0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A)
Nota memorizada
[0x0031E058] (0x02) (0xC0) (0x8AA7) [0x00000000]
# --------------
[0x00326ADA] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A)
Nota memorizada
[0x00326AE3] [0x00000000] [0x00000004] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Desligados
[0x00326AE0] [0x00000000] [0x000000FF] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Tons de aviso
# --------------
[0x003266F9] [0x00326BBE] [0x0000008A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Caract. invµlidos para cart·o
[0x00326468] [0x00000000] [0x0000006C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Personalizar
# --------------
[0x00325DAE] [0x00326C03] [0x0031F96C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Portugu¹s
[0x0031F924] (0x02) (0xC0) (0x0101) [0x00130876]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DB7] [0x00000000] [0x0031F8AC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) M·os-livres
[0x0031F864] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002C] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Auscultadores
[0x00325EA4] [0x00326AF5] [0x0031F84C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x0031DFB0] (0x02) (0xC0) (0x8A2C) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Resposta automµtica
# --------------
# --------------
[0x00325DB4] [0x00000000] [0x0031F918] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Perfil activo
[0x0031F8B8] (0x03) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002B] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Auscultadores
[0x00325EA4] [0x00326AF5] [0x0031F858] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x0031DFB0] (0x02) (0xC0) (0x8A2B) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Resposta automµtica
# --------------
[0x003263E4] [0x00326B70] [0x0031E04C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Apagadas chamadas marcadas
[0x0031E004] (0x02) (0xC0) (0x8A2A) [0x00000000]
# --------------
[0x003263E4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Apagadas chamadas marcadas
[0x003263E7] [0x00000000] [0x00000001] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) Ilumina¸·o
[0x003263EA] [0x00000000] [0x00000000] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) Ligada
# --------------
# --------------
# --------------
[0x003264BF] [0x00326B82] [0x0031FB70] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Activada actualiza¸. automµtica
[0x0031FB10] (0x03) (0xC0) (0x0A2D) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0000) (0x0000) (0x001A)
[0x003264C8] [0x003264BC] [0x00000002] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Confirm. antes
[0x003264C5] [0x003264B9] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Actualiz. automµt. desactivada
[0x003264CB] [0x003264C2] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Sim
# --------------
[0x00326021] [0x00326B10] [0x0031F018] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) Ligada
[0x0031EF70] (0x06) (0x80) (0x0101) [0x00130874]
# --------------
[0x00326021] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Ligada
[0x00325E8C] [0x00326AF2] [0x0031DFA4] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Responder
[0x0031DF5C] (0x02) (0xC0) (0x8A16) [0x00000000]
# --------------
[0x00325E8C] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Responder
[0x00325E92] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Desligado
[0x00325E8F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Qualquer tecla para responder
# --------------
[0x00326018] [0x00326B0D] [0x0031E148] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Chamada %N
[0x0031E100] (0x02) (0xC0) (0x0A19) [0x00000000]
# --------------
[0x00326018] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Chamada %N
[0x0032601E] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x0032601B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Remarca¸·o automµtica
# --------------
[0x0032653A] [0x00326B97] [0x0031E19C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Ligada
[0x0031E154] (0x02) (0xC0) (0x0A1A) [0x00000000]
# --------------
[0x0032653A] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Ligada
[0x00326537] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00326534] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) 1 chamada n·o atendida
# --------------
[0x00326036] [0x00326B19] [0x00000000] (0x012D) (0x0BC6) (0x0000) (0x004E) (0x0000) (0x001A) Chamadas em espera canceladas
[0x00326126] [0x00326B2E] [0x0031E208] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) N·o mostra n^ que chama
[0x0031E1A8] (0x03) (0xC0) (0x8A1B) [0x00000000]
# --------------
[0x00326126] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) N·o mostra n^ que chama
[0x00326114] [0x00000000] [0x00000000] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Pré-definido
[0x0032611A] [0x00000000] [0x00000001] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Inactivo
[0x00326117] [0x00000000] [0x00000002] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Predefinido
# --------------
[0x00325E80] [0x00326AEF] [0x0000004C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Mudar para linha de telefone?
# --------------
[0x003265B5] [0x00326BA0] [0x0031EF64] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) N^ de telefone:
[0x0031EEBC] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x003265B5] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) N^ de telefone:
[0x003263D8] [0x00326B6D] [0x0000000A] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Seleccio- nado Portugu¹s
[0x00326405] [0x00326B73] [0x0031F1EC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Maio-%1S %2S:%3S:%4S
[0x0031F1A4] (0x02) (0xC0) (0x0A1C) [0x00000000]
# --------------
[0x00326405] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Maio-%1S %2S:%3S:%4S
[0x0032640B] [0x00000000] [0x00000001] (0x012D) (0x0EDC) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00326408] [0x00000000] [0x00000000] (0x012D) (0x0EDD) (0x0000) (0x003E) (0x1300) (0x001A) Informa¸·o da célula
# --------------
[0x0032676B] [0x00326BD3] [0x0031FE10] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Servi¸os SIM
[0x0031FDC8] (0x02) (0xC0) (0x8A26) [0x00000000]
# --------------
[0x0032676B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Servi¸os SIM
[0x00326771] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) N·o perguntar
[0x0032676E] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Confirmar ac- ¸Áes serv. SIM
# --------------
[0x00326591] [0x00326B9A] [0x00000000] (0x012D) (0x0294) (0x0000) (0x004E) (0x0400) (0x001A) Enviar »cone
[0x00326A4A] [0x00326BF1] [0x00000059] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) NÂmero ocupado
[0x003269A2] [0x00326BEE] [0x0000003C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) A trocar modo
# --------------
[0x0032671D] [0x00326BC7] [0x0031EEB0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Telefone
[0x0031EE08] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032671D] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Telefone
[0x003265D6] [0x00326BA9] [0x00000031] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) C¾digo PIN alterado
[0x00325FF4] [0x00326AFE] [0x0031E694] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Aten¸·o: chamadas restritas
[0x0031E5EC] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x00325FF4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Aten¸·o: chamadas restritas
[0x00326504] [0x00326B91] [0x00000000] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Sem nÂmero de telefone
[0x003264F5] [0x00326B8E] [0x00000001] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Internacionais excepto para pa»s origem
[0x003264F2] [0x00326B8B] [0x00000002] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Entrada de chamadas
[0x003264EF] [0x00326B88] [0x00000003] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Entrada de chamadas no estrangeiro
[0x003264EC] [0x00326B85] [0x00000004] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Alcan¸ado limite de custos
[0x0032603C] [0x00326B1C] [0x00000005] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0400) (0x001A) Servi¸o inactivo
# --------------
[0x00326444] [0x00326B52] [0x0000004A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Apagar Âltimas chamadas
[0x00326132] [0x00326B31] [0x0031EB80] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Imposs»vel enviar o pr¾prio n^
[0x0031EB20] (0x03) (0xC0) (0x4A82) [0x00000000]
# --------------
[0x00326132] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Imposs»vel enviar o pr¾prio n^
[0x003261E9] [0x00000000] [0x00000000] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) N^ n·o pertence a grupo restrito
[0x003261EF] [0x00000000] [0x00000001] (0x012D) (0x0A78) (0x0000) (0x003E) (0x1000) (0x001A) Valor demasiado grande
[0x003261F5] [0x00000000] [0x00000002] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) Grupo restrito %N em uso
# --------------
[0x00326711] [0x00326BC4] [0x0000004E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Confirmar c¾digo:
[0x003260B4] [0x00326B2B] [0x0031EDFC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Servi¸o de informa¸·o
[0x0031ED84] (0x04) (0x80) (0x0101) [0x00000000]
# --------------
[0x003260B4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Servi¸o de informa¸·o
[0x00326708] [0x00326BC1] [0x00000009] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) C¾digo alterado
[0x003265D0] [0x00326BA6] [0x00000030] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) C¾digo PUK2:
[0x003265C4] [0x00326BA3] [0x00000033] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) C¾digo PIN2 bloqueado
[0x003265A3] [0x00326B9D] [0x0000003E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Erro de password
# --------------
# --------------
[0x0032644D] [0x00326B76] [0x00000010] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Uma a uma
# --------------
[0x00326003] [0x00326B07] [0x0031EA54] (0x0050) (0x0387) (0x0000) (0x003A) (0x0000) (0x0007) Op¸Áes de custos de chamadas
[0x0031E994] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326003] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Op¸Áes de custos de chamadas
[0x00326225] [0x00326B37] [0x00000000] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio activo
[0x0032623D] [0x00326B46] [0x00000001] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio se n·o acess»vel
[0x00326237] [0x00326B40] [0x00000002] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio inactivo
[0x0032623A] [0x00326B43] [0x00000003] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio se n·o atendida
[0x00326231] [0x00326B3D] [0x00000005] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio cancelado
[0x0032622B] [0x00326B3A] [0x00000006] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A)
Reenvios cancelados
[0x0032603F] [0x00326B1F] [0x00000004] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0400) (0x001A) Cancelar todas as restri¸Áes
# --------------
[0x003262D9] [0x00326B55] [0x0000006D] (0x0054) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0008) Mem¾ria
[0x00325F34] [0x00326AF8] [0x00000068] (0x0055) (0x05E0) (0x0000) (0x003A) (0x0400) (0x0009) Subtrair
[0x00325F40] [0x00326AFB] [0x00000078] (0x0053) (0x05E0) (0x0000) (0x003A) (0x0400) (0x000A) Verificar nota de calendµrio
[0x00326381] [0x00326B94] [0x00000000] (0x0057) (0x0CB2) (0x0000) (0x003A) (0x0500) (0x000B) Verificar pre¸o uni- tµrio e limite
[0x0012D82C] [0x00326BD0] [0x00000034] (0x0058) (0x05E0) (0x0000) (0x003A) (0x0000) (0x000C) INVALID ADDRESS
[0x00325D18] [0x00000000] [0x0000002E] (0x0059) (0x05E0) (0x0000) (0x003A) (0x0400) (0x001A) Net monitor
# --------------
And the functions patched:
-----------------------------------------
locating functions for the 5E0 table
-----------------------------------------
5e0_prt_action_1:
located at: 0x000F90C4
- func_start: 000F90C4
- func_end: 000F90D4
----------------------------------
5e0_prt_action_2:
located at: 0x000F93E0
- func_start: 000F93E0
- func_end: 000F93F0
----------------------------------
5e0_disp_val:
located at: 0x000F93F2
- func_start: 000F93F2
- func_end: 000F9400
----------------------------------
5e0_call_func:
located at: 0x000F90D6
- func_start: 000F90D6
- func_end: 000F93DE
----------------------------------
ldr at: 000F90C6
ldr at: 000F90CA
ldr at: 000F93E2
ldr at: 000F90F0
ldr at: 000F90FA
ldr at: 000F90FE
ldr at: 000F93F4
-----------------------------------------
-> The 5E0 Table has 1288 bytes, and 0xa0 entries in it
-----------------------------------------
# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
checking for space in PPM...
# - No CODE chunk found...
--------> 5e0 Table is at 0032C280
----------------------------------
locating all the needed functions
----------------------------------
show_main_menu:
located at: 0x0007D204
----------------------------------
disp_msg:
located at: 0x000F2038
[searching back to entry point]
- func_start: 000F2028
- func_end: 000F20EE
----------------------------------
divide:
located at: 0x00106F2C
----------------------------------
task0:
located at: 0x000F3888
- func_start: 000F3888
- func_end: 000F39B2
----------------------------------
memset:
located at: 0x00108C84
----------------------------------
clear_rect:
located at: 0x0007DD24
[searching back to entry point]
- func_start: 0007DCFC
- func_end: 0007E162
----------------------------------
update_screen:
located at: 0x00065860
- func_start: 00065860
- func_end: 00067048
----------------------------------
to_screen:
located at: 0x0007E3E6
[searching back to entry point]
- func_start: 0007E37C
- func_end: 0007E442
----------------------------------
setpixel:
located at: 0x0007E168
- func_start: 0007E168
- func_end: 0007E1F0
----------------------------------
draw_bitmap:
located at: 0x0007E1F2
- func_start: 0007E1F2
- func_end: 0007E37A
----------------------------------
clear_lcd_ram:
located at: 0x0007EFD8
- func_start: 0007EFD8
- func_end: 0007EFFE
----------------------------------
disable_irq:
located at: 0x000F7426
----------------------------------
enable_irq:
located at: 0x000F7440
----------------------------------
disable_irq:
located at: 0x000F7426
----------------------------------
enable_irq:
located at: 0x000F7440
----------------------------------
memset:
located at: 0x00108C84
----------------------------------
seccode_routine:
located at: 0x00087A86
[searching back to entry point]
- func_start: 00087A74
- func_end: 00087AE0
----------------------------------
setfaid_routine:
located at: 0x000880A6
- func_start: 000880A6
- func_end: 00088120
----------------------------------
seccode_routine:
located at: 0x00087A86
[searching back to entry point]
- func_start: 00087A74
- func_end: 00087AE0
----------------------------------
setfaid_routine:
located at: 0x000880A6
- func_start: 000880A6
- func_end: 00088120
----------------------------------
prep_xba:
located at: 0x0004485C
[searching back to entry point]
- func_start: 0004483E
- func_end: 0004488C
----------------------------------
send_xba:
located at: 0x00044898
[searching back to entry point]
- func_start: 0004488E
- func_end: 000448B4
----------------------------------
fbus_f40:
located at: 0x000470BE
[searching back to entry point]
- func_start: 000470A4
- func_end: 000475D6
----------------------------------
draw_line:
located at: 0x0007E8AC
- func_start: 0007E8AC
- func_end: 0007EB0E
----------------------------------
set_lights:
located at: 0x0007F042
----------------------------------
blink_call:
located at: 0x0009627E
----------------------------------
play_tone:
located at: 0x000DF972
----------------------------------
tonetask:
located at: 0x000DFD2C
[searching back to entry point]
- func_start: 000DFCE4
- func_end: 000E00C4
----------------------------------
to_screen_patch:
located at: 0x0007E3E6
----------------------------------
----------------------------------
searching for the menu select things
----------------------------------
----------------------------------
searching for the light toggle routine
----------------------------------
set_lights_1: 000F718E
set_lights_2: 000F71A8
----------------------------------
searching for the tone task things
----------------------------------
tonetask: 000DFD1A
----------------------------------
searching for the malloc/eeprom routines
----------------------------------
n_malloc: 0008BF00
read_eeprom: 001068E0
write_eeprom: 001068B0
calc_eeprom_chk: 00087C1E
----------------------------------
patching to_screen for inverted display
----------------------------------
invert_1: 0007E3F6
invert_2: 0007E416
send_lcd_data: 00100286
----------------------------------
looking for a nice place in task #0
----------------------------------
Task #0 patch at 000F38B6
----------------------------------
looking for free space...
----------------------------------
# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
checking for space in PPM...
# - No CODE chunk found...
----------------------------------
settling our nice graphix...
----------------------------------
found 0504 bytes for function pic2_1 at 0x00136D38
found 0504 bytes for function pic2_2 at 0x00136F30
found 0504 bytes for function pic2_3 at 0x00137128
found 0504 bytes for function pic2_4 at 0x00137320
found 0012 bytes for function logo_pic1_info at 0x00137518
found 0012 bytes for function logo_pic2_info at 0x00137524
found 0012 bytes for function logo_pic3_info at 0x00137530
found 0012 bytes for function logo_pic4_info at 0x0013753C
found 0052 bytes for function own_slideshow_table at 0x00137548
found 0013 bytes for function own_cmd_table at 0x0013757C
----------------------------------
hammering in our functions
----------------------------------
found 0048 bytes for function own_get_ram at 0x0013758C
- bl: 0013759A -> 0008BF00: F7 54 FC B1
- bl: 001375A6 -> 00108C84: F7 D1 FB 6D
found 0048 bytes for function own_set_ram at 0x001375BC
- bl: 001375CA -> 0008BF00: F7 54 FC 99
- bl: 001375D6 -> 00108C84: F7 D1 FB 55
found 0020 bytes for function own_update_screen at 0x001375EC
- bl: 001375F6 -> 0007E37C: F7 46 FE C1
found 0024 bytes for function own_show_bitmap at 0x00137600
- bl: 00137608 -> 0007E1F2: F7 46 FD F3
- bl: 0013760C -> 001375EC: F7 FF FF EE
found 0032 bytes for function own_get_keypress at 0x00137618
found 0060 bytes for function own_get_led at 0x00137638
found 0132 bytes for function own_set_led at 0x00137674
- bl: 00137680 -> 000F7426: F7 BF FE D1
- bl: 00137690 -> 000F7440: F7 BF FE D6
- bl: 001376A0 -> 000F7426: F7 BF FE C1
- bl: 001376B4 -> 000F7440: F7 BF FE C4
- bl: 001376C4 -> 000F7426: F7 BF FE AF
- bl: 001376D8 -> 000F7440: F7 BF FE B2
found 0010 bytes for function own_led_on at 0x001376F8
- bl: 001376FC -> 00137674: F7 FF FF BA
found 0022 bytes for function own_toggle_led at 0x00137704
- bl: 00137706 -> 00137638: F7 FF FF 97
- bl: 00137714 -> 00137674: F7 FF FF AE
found 0044 bytes for function own_get_config_nibble at 0x0013771C
- bl: 00137732 -> 001068E0: F7 CF F8 D5
found 0074 bytes for function own_set_config_nibble at 0x00137748
- bl: 00137762 -> 001068E0: F7 CF F8 BD
- bl: 00137786 -> 001068B0: F7 CF F8 93
- bl: 0013778A -> 00087C1E: F7 50 FA 48
found 0036 bytes for function own_menu_table at 0x00137794
found 0040 bytes for function own_menu_hook at 0x001377B8
- bl: 001377BC -> 0013771C: F7 FF FF AE
5E0 ID# A1 | Set Menu #0
found 0012 bytes for function own_set_cx_x at 0x001377E0
- bl: 001377E6 -> 00137748: F7 FF FF AF
5E0 ID# A2 | Set Menu #1
found 0012 bytes for function own_set_cx_x at 0x001377EC
- bl: 001377F2 -> 00137748: F7 FF FF A9
5E0 ID# A3 | Set Menu #2
found 0012 bytes for function own_set_cx_x at 0x001377F8
- bl: 001377FE -> 00137748: F7 FF FF A3
5E0 ID# A4 | Set Menu #3
found 0012 bytes for function own_set_cx_x at 0x00137804
- bl: 0013780A -> 00137748: F7 FF FF 9D
5E0 ID# A5 | Set Menu #4
found 0012 bytes for function own_set_cx_x at 0x00137810
- bl: 00137816 -> 00137748: F7 FF FF 97
5E0 ID# A6 | Set Menu #5
found 0012 bytes for function own_set_cx_x at 0x0013781C
- bl: 00137822 -> 00137748: F7 FF FF 91
found 0084 bytes for function own_fade_led at 0x00137828
- bl: 0013782C -> 00137704: F7 FF FF 6A
- bl: 00137830 -> 00137618: F7 FF FE F2
- bl: 00137844 -> 00137618: F7 FF FE E8
- bl: 00137854 -> 00137618: F7 FF FE E0
- bl: 00137864 -> 00137704: F7 FF FF 4E
- bl: 00137870 -> 00137704: F7 FF FF 48
found 0092 bytes for function own_blink_led at 0x0013787C
- bl: 0013788C -> 000F7426: F7 BF FD CB
- bl: 0013789C -> 000F7440: F7 BF FD D0
- bl: 001378AC -> 000F7426: F7 BF FD BB
- bl: 001378C0 -> 000F7440: F7 BF FD BE
found 0040 bytes for function own_blink_hook at 0x001378D8
- bl: 001378DC -> 0013771C: F7 FF FF 1E
- bl: 001378E6 -> 00137638: F7 FF FE A7
- bl: 001378EE -> 0013787C: F7 FF FF C5
found 0044 bytes for function own_enable_hook at 0x00137900
- bl: 00137904 -> 0013771C: F7 FF FF 0A
- bl: 0013790E -> 00137638: F7 FF FE 93
- bl: 00137918 -> 00137674: F7 FF FE AC
5E0 ID# A7 | Rhythmic 0
found 0012 bytes for function own_set_cx_x at 0x0013792C
- bl: 00137932 -> 00137748: F7 FF FF 09
5E0 ID# A8 | Rhythmic 1
found 0012 bytes for function own_set_cx_x at 0x00137938
- bl: 0013793E -> 00137748: F7 FF FF 03
found 0032 bytes for function own_invert at 0x00137944
- bl: 0013794A -> 0013771C: F7 FF FE E7
- bl: 0013795A -> 00100286: F7 C8 FC 94
5E0 ID# A9 | Invert 0
found 0012 bytes for function own_set_cx_x at 0x00137964
- bl: 0013796A -> 00137748: F7 FF FE ED
5E0 ID# AA | Invert 1
found 0012 bytes for function own_set_cx_x at 0x00137970
- bl: 00137976 -> 00137748: F7 FF FE E7
found 0060 bytes for function own_delay_table at 0x0013797C
found 0052 bytes for function own_fade_hook_out at 0x001379B8
- bl: 001379BE -> 0013771C: F7 FF FE AD
- bl: 001379C4 -> 00137638: F7 FF FE 38
- bl: 001379D4 -> 00137828: F7 FF FF 28
- bl: 001379DA -> 00137674: F7 FF FE 4B
found 0052 bytes for function own_fade_hook_in at 0x001379EC
- bl: 001379F2 -> 0013771C: F7 FF FE 93
- bl: 001379F8 -> 00137638: F7 FF FE 1E
- bl: 00137A08 -> 00137828: F7 FF FF 0E
- bl: 00137A0E -> 00137674: F7 FF FE 31
5E0 ID# AB | Fade in val 0
found 0012 bytes for function own_set_cx_x at 0x00137A20
- bl: 00137A26 -> 00137748: F7 FF FE 8F
5E0 ID# AC | Fade in val 1
found 0012 bytes for function own_set_cx_x at 0x00137A2C
- bl: 00137A32 -> 00137748: F7 FF FE 89
5E0 ID# AD | Fade in val 2
found 0012 bytes for function own_set_cx_x at 0x00137A38
- bl: 00137A3E -> 00137748: F7 FF FE 83
5E0 ID# AE | Fade in val 3
found 0012 bytes for function own_set_cx_x at 0x00137A44
- bl: 00137A4A -> 00137748: F7 FF FE 7D
5E0 ID# AF | Fade in val 4
found 0012 bytes for function own_set_cx_x at 0x00137A50
- bl: 00137A56 -> 00137748: F7 FF FE 77
5E0 ID# B0 | Fade in val 5
found 0012 bytes for function own_set_cx_x at 0x00137A5C
- bl: 00137A62 -> 00137748: F7 FF FE 71
5E0 ID# B1 | Fade in val 6
found 0012 bytes for function own_set_cx_x at 0x00137A68
- bl: 00137A6E -> 00137748: F7 FF FE 6B
5E0 ID# B2 | Fade in val 7
found 0012 bytes for function own_set_cx_x at 0x00137A74
- bl: 00137A7A -> 00137748: F7 FF FE 65
5E0 ID# B3 | Fade in val 8
found 0012 bytes for function own_set_cx_x at 0x00137A80
- bl: 00137A86 -> 00137748: F7 FF FE 5F
5E0 ID# B4 | Fade in val 9
found 0012 bytes for function own_set_cx_x at 0x00137A8C
- bl: 00137A92 -> 00137748: F7 FF FE 59
5E0 ID# B5 | Fade out val 0
found 0012 bytes for function own_set_cx_x at 0x00137A98
- bl: 00137A9E -> 00137748: F7 FF FE 53
5E0 ID# B6 | Fade out val 1
found 0012 bytes for function own_set_cx_x at 0x00137AA4
- bl: 00137AAA -> 00137748: F7 FF FE 4D
5E0 ID# B7 | Fade out val 2
found 0012 bytes for function own_set_cx_x at 0x00137AB0
- bl: 00137AB6 -> 00137748: F7 FF FE 47
5E0 ID# B8 | Fade out val 3
found 0012 bytes for function own_set_cx_x at 0x00137ABC
- bl: 00137AC2 -> 00137748: F7 FF FE 41
5E0 ID# B9 | Fade out val 4
found 0012 bytes for function own_set_cx_x at 0x00137AC8
- bl: 00137ACE -> 00137748: F7 FF FE 3B
5E0 ID# BA | Fade out val 5
found 0012 bytes for function own_set_cx_x at 0x00137AD4
- bl: 00137ADA -> 00137748: F7 FF FE 35
5E0 ID# BB | Fade out val 6
found 0012 bytes for function own_set_cx_x at 0x00137AE0
- bl: 00137AE6 -> 00137748: F7 FF FE 2F
5E0 ID# BC | Fade out val 7
found 0012 bytes for function own_set_cx_x at 0x00137AEC
- bl: 00137AF2 -> 00137748: F7 FF FE 29
5E0 ID# BD | Fade out val 8
found 0012 bytes for function own_set_cx_x at 0x00137AF8
- bl: 00137AFE -> 00137748: F7 FF FE 23
5E0 ID# BE | Fade out val 9
found 0012 bytes for function own_set_cx_x at 0x00137B04
- bl: 00137B0A -> 00137748: F7 FF FE 1D
found 0064 bytes for function own_read_via_xbus at 0x00137B10
- bl: 00137B26 -> 0004483E: F7 0C FE 8A
- bl: 00137B48 -> 0004488E: F7 0C FE A1
found 0044 bytes for function own_write_via_xbus at 0x00137B50
- bl: 00137B64 -> 0004483E: F7 0C FE 6B
- bl: 00137B74 -> 0004488E: F7 0C FE 8B
found 0048 bytes for function own_get_ram at 0x00137B7C
- bl: 00137B8A -> 0008BF00: F7 54 F9 B9
- bl: 00137B96 -> 00108C84: F7 D1 F8 75
found 0048 bytes for function own_set_ram at 0x00137BAC
- bl: 00137BBA -> 0008BF00: F7 54 F9 A1
- bl: 00137BC6 -> 00108C84: F7 D1 F8 5D
found 0054 bytes for function own_write_ownram at 0x00137BDC
- bl: 00137BEC -> 00137BAC: F7 FF FF DE
- bl: 00137BFA -> 0004483E: F7 0C FE 20
- bl: 00137C0A -> 0004488E: F7 0C FE 40
found 0048 bytes for function own_read_ownram at 0x00137C14
- bl: 00137C20 -> 00137B7C: F7 FF FF AC
- bl: 00137C30 -> 0004483E: F7 0C FE 05
- bl: 00137C3C -> 0004488E: F7 0C FE 27
found 0062 bytes for function own_write_combi at 0x00137C44
- bl: 00137C56 -> 000F7426: F7 BF FB E6
- bl: 00137C60 -> 000F7440: F7 BF FB EE
- bl: 00137C6C -> 0004483E: F7 0C FD E7
- bl: 00137C7A -> 0004488E: F7 0C FE 08
found 0064 bytes for function own_write_dword at 0x00137C84
- bl: 00137CA6 -> 0004483E: F7 0C FD CA
- bl: 00137CB6 -> 0004488E: F7 0C FD EA
found 0068 bytes for function own_fbus_cmd at 0x00137CC4
- bl: 00137CCC -> 00137B10: F7 FF FF 20
- bl: 00137CD6 -> 00137B50: F7 FF FF 3B
- bl: 00137CE0 -> 00137C44: F7 FF FF B0
- bl: 00137CEA -> 00137C84: F7 FF FF CB
- bl: 00137CF4 -> 00137BDC: F7 FF FF 72
- bl: 00137CFE -> 00137C14: F7 FF FF 89
found 0016 bytes for function own_hook_temp at 0x00137D08
- bl: 00137D0A -> 00137CC4: F7 FF FF DB
found 0016 bytes for function own_delay at 0x00137D18
found 0032 bytes for function own_show_bitmap_data at 0x00137D28
- bl: 00137D40 -> 00137600: F7 FF FC 5E
found 0032 bytes for function own_scroll_in_bitmap at 0x00137D48
- bl: 00137D50 -> 00137618: F7 FF FC 62
- bl: 00137D5A -> 00137D28: F7 FF FF E5
found 0034 bytes for function own_scroll_in_bitmap_diag at 0x00137D68
- bl: 00137D70 -> 00137618: F7 FF FC 52
- bl: 00137D7A -> 00137D28: F7 FF FF D5
found 0070 bytes for function own_blink_bitmap at 0x00137D8C
- bl: 00137D98 -> 00137618: F7 FF FC 3E
- bl: 00137DAC -> 00137D28: F7 FF FF BC
- bl: 00137DBE -> 00137D28: F7 FF FF B3
found 0206 bytes for function own_graph_cmd at 0x00137DD4
- bl: 00137E18 -> 00137D48: F7 FF FF 96
- bl: 00137E22 -> 00137D68: F7 FF FF A1
- bl: 00137E2E -> 00137D8C: F7 FF FF AD
- bl: 00137E38 -> 00137D18: F7 FF FF 6E
- bl: 00137E52 -> 0007DCFC: F7 45 FF 53
- bl: 00137E68 -> 0007E8AC: F7 46 FD 20
- bl: 00137E6C -> 001375EC: F7 FF FB BE
- bl: 00137E82 -> 00137828: F7 FF FC D1
- bl: 00137E8A -> 00137704: F7 FF FC 3B
- bl: 00137E96 -> 00137D28: F7 FF FF 47
found 0056 bytes for function own_run_commands at 0x00137EA4
- bl: 00137EB4 -> 00137618: F7 FF FB B0
- bl: 00137EC8 -> 00137618: F7 FF FB A6
- bl: 00137ED2 -> 00137DD4: F7 FF FF 7F
found 0020 bytes for function own_draw_slideshow at 0x00137EDC
- bl: 00137EE2 -> 00137EA4: F7 FF FF DF
5E0 ID# BF | Run Slideshow
found 0064 bytes for function own_set_vibra at 0x00137EF0
- bl: 00137EFE -> 000F7426: F7 BF FA 92
- bl: 00137F14 -> 000F7426: F7 BF FA 87
- bl: 00137F22 -> 000F7440: F7 BF FA 8D
5E0 ID# C0 | Vibra Level 0/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F30
- bl: 00137F34 -> 00137EF0: F7 FF FF DC
5E0 ID# C1 | Vibra Level 2/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F3C
- bl: 00137F40 -> 00137EF0: F7 FF FF D6
5E0 ID# C2 | Vibra Level 4/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F48
- bl: 00137F4C -> 00137EF0: F7 FF FF D0
5E0 ID# C3 | Vibra Level 6/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F54
- bl: 00137F58 -> 00137EF0: F7 FF FF CA
5E0 ID# C4 | Vibra Level 8/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F60
- bl: 00137F64 -> 00137EF0: F7 FF FF C4
5E0 ID# C5 | Vibra Level 10/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F6C
- bl: 00137F70 -> 00137EF0: F7 FF FF BE
5E0 ID# C6 | Vibra Level 12/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F78
- bl: 00137F7C -> 00137EF0: F7 FF FF B8
5E0 ID# C7 | Vibra Level 14/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F84
- bl: 00137F88 -> 00137EF0: F7 FF FF B2
5E0 ID# C8 | Vibra Level 16/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F90
- bl: 00137F94 -> 00137EF0: F7 FF FF AC
5E0 ID# C9 | Vibra Level 18/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F9C
- bl: 00137FA0 -> 00137EF0: F7 FF FF A6
found 0176 bytes for function own_run_checksum at 0x00137FA8
- bl: 00137FAC -> 00137B7C: F7 FF FD E6
- bl: 00137FBC -> 00137BAC: F7 FF FD F6
- bl: 00137FC4 -> 00137BAC: F7 FF FD F2
- bl: 00137FF0 -> 00137B7C: F7 FF FD C4
- bl: 00137FFE -> 00137BAC: F7 FF FD D5
- bl: 00138008 -> 00137BAC: F7 FF FD D0
- bl: 00138012 -> 00137B7C: F7 FF FD B3
- bl: 0013801C -> 00137BAC: F7 FF FD C6
- bl: 00138024 -> 00137B7C: F7 FF FD AA
- bl: 0013802C -> 00137B7C: F7 FF FD A6
- bl: 00138036 -> 00137B7C: F7 FF FD A1
found 0016 bytes for function own_hook_temp at 0x00138058
- bl: 0013805A -> 00137FA8: F7 FF FF A5
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Trying to find suitable code at 0x000F38B6
oh, cool.. a BL! => relocateable!
offset: 0x000F38B6
Relocatable code found at 0x000F38B6
- bl: 0013805E -> 000E2F48: F7 AA FF 73
- bl: 000F38B6 -> 00138058: F0 44 FB CF
this tricky thing was done =)
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
----------------------------------
doing the fade stuff...
----------------------------------
------ set_lights_1 ------
Trying to find suitable code at 0x000F718E
oh, cool.. a BL! => relocateable!
offset: 0x000F718E
Relocatable code found at 0x000F718E
- bl: 001379E0 -> 000F7426: F7 BF FD 21
- bl: 000F718E -> 001379B8: F0 40 FC 13
this tricky thing was done =)
------ set_lights_2 -------
Trying to find suitable code at 0x000F71A8
oh, cool.. a BL! => relocateable!
offset: 0x000F71A8
Relocatable code found at 0x000F71A8
- bl: 00137A14 -> 000F7426: F7 BF FD 07
- bl: 000F71A8 -> 001379EC: F0 40 FC 20
this tricky thing was done =)
- bl: 00096296 -> 001376F8: F0 A1 FA 2F
----------------------------------
doing the rhythmic stuff...
----------------------------------
------ play_tone -------
Trying to find suitable code at 0x000DF97A
oh, cool.. a BL! => relocateable!
offset: 0x000DF97A
Relocatable code found at 0x000DF97A
- bl: 001378F4 -> 00106F2C: F7 CF FB 1A
- bl: 000DF97A -> 001378D8: F0 57 FF AD
this tricky thing was done =)
------ tonetask -------
Trying to find suitable code at 0x000DFD1A
found an LDRB ... goood =)
found an CMP R,# ... goood =)
now we have all...
offset: 0x000DFD1A
Relocatable code found at 0x000DFD1A
- bl: 000DFD1A -> 00137900: F0 57 FD F1
this tricky thing was done =)
----------------------------------
doing the xbus hack...
----------------------------------
Trying to find suitable code at 0x000470A4
PUSH, wont touch this
found an MOV R,H ... goood =)
PUSH, wont touch this
ADD SP, # ... wont touch this
found an Logical Shift (LSx) ... goood =)
found an LDRB ... goood =)
now we have all...
offset: 0x000470AC
Relocatable code found at 0x000470AC
- bl: 000470AC -> 00137D08: F0 F0 FE 2C
this tricky thing was done =)
----------------------------------
doing the menu hack...
----------------------------------
Trying to find suitable code at 0x0007D214
oh, cool.. a BL! => relocateable!
offset: 0x0007D214
Relocatable code found at 0x0007D214
- bl: 001377D0 -> 0007CFFC: F7 45 FC 14
- bl: 0007D214 -> 001377B8: F0 BA FA D0
this tricky thing was done =)
----------------------------------
doing the display invert hack...
----------------------------------
- bl: 0007E3F6 -> 00137944: F0 B9 FA A5
- bl: 0007E416 -> 00137944: F0 B9 FA 95
----------------------------------
4873 bytes injected... got that trick ;)
4873 bytes estimated at start
-------------------------
------ SUMMARY ------
-------------------------
Offset for slide frame #1: hex: 00136D38 dec: 1273144
Offset for slide frame #2: hex: 00136F30 dec: 1273648
Offset for slide frame #3: hex: 00137128 dec: 1274152
Offset for slide frame #4: hex: 00137320 dec: 1274656
If you want to change the graphics, use the above offsets in poodriver
use for the bars width 6 and height 30
-------------------------
You didnt place an 0xDBDDFCAC at the start of an 0400 block
Could some one of you help me out, checking if there is something wrong with the original menustructure? And help me out in this menu creation task?
Thanks a lot
I'm using SmaRkieS Tutorial (http://www.geocities.com/smarkenshin/genolite2d.htm) to guide me in the creation of the menus...!
When i click to create the structure, i always get errors...
Here are the Menustructure file:
# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
# using 'PORT' lang chunk
#
# ---------------------------------------------
# FLS : 1900544 bytes
# with PPM at 00140000
# offset: 0011FD08
# ---------------------------------------------
#
# checking given ROOT-entry..
# ... seems to be okay
#
#
[0x0031FBE8] (0x0B) (0x10) (0x0101) [0x0013086E]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00326732] [0x00326BCD] [0x0031E3C4] (0x004E) (0x0387) (0x0000) (0x003A) (0x0000) (0x0003) Mensagem enviada
[0x0031E2BC] (0x0A) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326732] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Mensagem enviada
[0x00326819] [0x00326B49] [0x0000001F] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Limpar visor
[0x003267E6] [0x00326BD9] [0x0000001C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) N^ do centro:
[0x00326837] [0x00326BDF] [0x0000001B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Op¸Áes de mensagens
[0x00325DBD] [0x00326C06] [0x0000009C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Perfil padr·o
[0x0032632D] [0x00000000] [0x0000008C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Imagem %N
[0x00326834] [0x00326B79] [0x00000021] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Memorizar
[0x003260B1] [0x00326B22] [0x00000026] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Temas
[0x0032628E] [0x00326B4F] [0x0031DEFC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Erro de c¾digo
[0x0031DEB4] (0x02) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0100) (0x001A)
[0x003263F3] [0x00000000] [0x00000048] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Ouvir mensagens vocais
[0x003263F6] [0x00000000] [0x00000049] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Fax e dados
# --------------
[0x00326A50] [0x00326BF4] [0x00000024] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Mensagem: %U
[0x00326A80] [0x00326BFD] [0x0031E2B0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Nova mensagem Ade voz
[0x0031E268] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x003263F0] [0x00326B16] [0x0000002D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Definido
[0x00326A77] [0x00326BFA] [0x0000002B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) A procurar
# --------------
# --------------
[0x0032600F] [0x00326B0A] [0x0031ED78] (0x004F) (0x0387) (0x0000) (0x003A) (0x0000) (0x0004) Chamada em curso
[0x0031ECB8] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032600F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Chamada em curso
[0x00326459] [0x00326B7C] [0x00000000] (0x012D) (0x0282) (0x0000) (0x004E) (0x0400) (0x001A) Sem espa¸o para novas mensagens
[0x00326633] [0x00326BB2] [0x00000000] (0x012D) (0x0281) (0x0000) (0x004E) (0x0400) (0x001A) Chamadas efectuadas
[0x00326630] [0x00326BAF] [0x00000000] (0x012D) (0x0280) (0x0000) (0x004E) (0x0400) (0x001A) Hora alterada
[0x00326441] [0x00326B4C] [0x0031F840] (0x012D) (0x0387) (0x0000) (0x004E) (0x2000) (0x001A) Apagar tudo
[0x0031F7C8] (0x04) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00326279] [0x00000000] [0x00000011] (0x012D) (0x05E0) (0x0000) (0x003E) (0x3000) (0x001A) Final. todas
[0x00326282] [0x00000000] [0x00000006] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Marcadas
[0x0032627F] [0x00000000] [0x00000004] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Cart·o
[0x00326288] [0x00000000] [0x00000005] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Telefone
# --------------
[0x0032602A] [0x00326B13] [0x00000014] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Dura¸·o ch. recebidas
[0x00325FFD] [0x00326B01] [0x00000017] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Limite de custos
[0x00326000] [0x00326B04] [0x0031ECAC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Visualizar custos de chamadas
[0x0031EC64] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Visualizar custos de chamadas
[0x00325FFA] [0x00326B25] [0x0000001A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Limite:
[0x003261FE] [0x00326B34] [0x00000019] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Unidades
# --------------
# --------------
[0x0032646E] [0x00326B7F] [0x0000006A] (0x0051) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0005) Activar
[0x0032672C] [0x00326BCA] [0x0031FA68] (0x0052) (0x0387) (0x0000) (0x003A) (0x0000) (0x0006) N^s servi¸os
[0x0031F978] (0x09) (0x80) (0x0101) [0x00130878]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325E53] [0x00326AEC] [0x00000064] (0x012D) (0x05E0) (0x0000) (0x004E) (0x2800) (0x001A) Activar
[0x00326609] [0x00326BAC] [0x00000066] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) am
[0x00325DD8] [0x00326C09] [0x0031F12C] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) (vazio)
[0x0031F024] (0x0A) (0x80) (0x0101) [0x00130870]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00326672] [0x00326BB5] [0x00000051] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Toque
[0x00326675] [0x00326BB8] [0x0000000D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Sinaliza¸·o de chamada
[0x0032667B] [0x00326BBB] [0x0000000C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Tipo %N
[0x0032614D] [0x00000000] [0x00000023] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Envia o pr¾prio n^ ao atender
[0x00326A62] [0x00326BF7] [0x0031DDD0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Desligado
[0x0031DD88] (0x02) (0xC0) (0x8AAE) [0x00000000]
# --------------
[0x00326A62] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Desligado
[0x00326A5C] [0x00000000] [0x00000001] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) Confirmar novo c¾digo PIN2:
[0x00326A5F] [0x00000000] [0x00000000] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) Ligado
# --------------
[0x0032688E] [0x00326BE8] [0x00000077] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Mensagem n·o envi- ada desta vez
[0x003263BA] [0x00326B6A] [0x0000000B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Junho-%1S %2S:%3S:%4S
[0x00326ADA] [0x00326C00] [0x0031E0A0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A)
Nota memorizada
[0x0031E058] (0x02) (0xC0) (0x8AA7) [0x00000000]
# --------------
[0x00326ADA] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A)
Nota memorizada
[0x00326AE3] [0x00000000] [0x00000004] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Desligados
[0x00326AE0] [0x00000000] [0x000000FF] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Tons de aviso
# --------------
[0x003266F9] [0x00326BBE] [0x0000008A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Caract. invµlidos para cart·o
[0x00326468] [0x00000000] [0x0000006C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Personalizar
# --------------
[0x00325DAE] [0x00326C03] [0x0031F96C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Portugu¹s
[0x0031F924] (0x02) (0xC0) (0x0101) [0x00130876]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DB7] [0x00000000] [0x0031F8AC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) M·os-livres
[0x0031F864] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002C] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Auscultadores
[0x00325EA4] [0x00326AF5] [0x0031F84C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x0031DFB0] (0x02) (0xC0) (0x8A2C) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Resposta automµtica
# --------------
# --------------
[0x00325DB4] [0x00000000] [0x0031F918] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Perfil activo
[0x0031F8B8] (0x03) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002B] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Auscultadores
[0x00325EA4] [0x00326AF5] [0x0031F858] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x0031DFB0] (0x02) (0xC0) (0x8A2B) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Resposta automµtica
# --------------
[0x003263E4] [0x00326B70] [0x0031E04C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Apagadas chamadas marcadas
[0x0031E004] (0x02) (0xC0) (0x8A2A) [0x00000000]
# --------------
[0x003263E4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Apagadas chamadas marcadas
[0x003263E7] [0x00000000] [0x00000001] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) Ilumina¸·o
[0x003263EA] [0x00000000] [0x00000000] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) Ligada
# --------------
# --------------
# --------------
[0x003264BF] [0x00326B82] [0x0031FB70] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Activada actualiza¸. automµtica
[0x0031FB10] (0x03) (0xC0) (0x0A2D) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0000) (0x0000) (0x001A)
[0x003264C8] [0x003264BC] [0x00000002] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Confirm. antes
[0x003264C5] [0x003264B9] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Actualiz. automµt. desactivada
[0x003264CB] [0x003264C2] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Sim
# --------------
[0x00326021] [0x00326B10] [0x0031F018] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) Ligada
[0x0031EF70] (0x06) (0x80) (0x0101) [0x00130874]
# --------------
[0x00326021] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Ligada
[0x00325E8C] [0x00326AF2] [0x0031DFA4] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Responder
[0x0031DF5C] (0x02) (0xC0) (0x8A16) [0x00000000]
# --------------
[0x00325E8C] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Responder
[0x00325E92] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Desligado
[0x00325E8F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Qualquer tecla para responder
# --------------
[0x00326018] [0x00326B0D] [0x0031E148] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Chamada %N
[0x0031E100] (0x02) (0xC0) (0x0A19) [0x00000000]
# --------------
[0x00326018] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Chamada %N
[0x0032601E] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x0032601B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Remarca¸·o automµtica
# --------------
[0x0032653A] [0x00326B97] [0x0031E19C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Ligada
[0x0031E154] (0x02) (0xC0) (0x0A1A) [0x00000000]
# --------------
[0x0032653A] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Ligada
[0x00326537] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00326534] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) 1 chamada n·o atendida
# --------------
[0x00326036] [0x00326B19] [0x00000000] (0x012D) (0x0BC6) (0x0000) (0x004E) (0x0000) (0x001A) Chamadas em espera canceladas
[0x00326126] [0x00326B2E] [0x0031E208] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) N·o mostra n^ que chama
[0x0031E1A8] (0x03) (0xC0) (0x8A1B) [0x00000000]
# --------------
[0x00326126] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) N·o mostra n^ que chama
[0x00326114] [0x00000000] [0x00000000] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Pré-definido
[0x0032611A] [0x00000000] [0x00000001] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Inactivo
[0x00326117] [0x00000000] [0x00000002] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Predefinido
# --------------
[0x00325E80] [0x00326AEF] [0x0000004C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Mudar para linha de telefone?
# --------------
[0x003265B5] [0x00326BA0] [0x0031EF64] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) N^ de telefone:
[0x0031EEBC] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x003265B5] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) N^ de telefone:
[0x003263D8] [0x00326B6D] [0x0000000A] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Seleccio- nado Portugu¹s
[0x00326405] [0x00326B73] [0x0031F1EC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Maio-%1S %2S:%3S:%4S
[0x0031F1A4] (0x02) (0xC0) (0x0A1C) [0x00000000]
# --------------
[0x00326405] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Maio-%1S %2S:%3S:%4S
[0x0032640B] [0x00000000] [0x00000001] (0x012D) (0x0EDC) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00326408] [0x00000000] [0x00000000] (0x012D) (0x0EDD) (0x0000) (0x003E) (0x1300) (0x001A) Informa¸·o da célula
# --------------
[0x0032676B] [0x00326BD3] [0x0031FE10] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Servi¸os SIM
[0x0031FDC8] (0x02) (0xC0) (0x8A26) [0x00000000]
# --------------
[0x0032676B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Servi¸os SIM
[0x00326771] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) N·o perguntar
[0x0032676E] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Confirmar ac- ¸Áes serv. SIM
# --------------
[0x00326591] [0x00326B9A] [0x00000000] (0x012D) (0x0294) (0x0000) (0x004E) (0x0400) (0x001A) Enviar »cone
[0x00326A4A] [0x00326BF1] [0x00000059] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) NÂmero ocupado
[0x003269A2] [0x00326BEE] [0x0000003C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) A trocar modo
# --------------
[0x0032671D] [0x00326BC7] [0x0031EEB0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Telefone
[0x0031EE08] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032671D] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Telefone
[0x003265D6] [0x00326BA9] [0x00000031] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) C¾digo PIN alterado
[0x00325FF4] [0x00326AFE] [0x0031E694] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Aten¸·o: chamadas restritas
[0x0031E5EC] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x00325FF4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Aten¸·o: chamadas restritas
[0x00326504] [0x00326B91] [0x00000000] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Sem nÂmero de telefone
[0x003264F5] [0x00326B8E] [0x00000001] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Internacionais excepto para pa»s origem
[0x003264F2] [0x00326B8B] [0x00000002] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Entrada de chamadas
[0x003264EF] [0x00326B88] [0x00000003] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Entrada de chamadas no estrangeiro
[0x003264EC] [0x00326B85] [0x00000004] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Alcan¸ado limite de custos
[0x0032603C] [0x00326B1C] [0x00000005] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0400) (0x001A) Servi¸o inactivo
# --------------
[0x00326444] [0x00326B52] [0x0000004A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Apagar Âltimas chamadas
[0x00326132] [0x00326B31] [0x0031EB80] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Imposs»vel enviar o pr¾prio n^
[0x0031EB20] (0x03) (0xC0) (0x4A82) [0x00000000]
# --------------
[0x00326132] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Imposs»vel enviar o pr¾prio n^
[0x003261E9] [0x00000000] [0x00000000] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) N^ n·o pertence a grupo restrito
[0x003261EF] [0x00000000] [0x00000001] (0x012D) (0x0A78) (0x0000) (0x003E) (0x1000) (0x001A) Valor demasiado grande
[0x003261F5] [0x00000000] [0x00000002] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) Grupo restrito %N em uso
# --------------
[0x00326711] [0x00326BC4] [0x0000004E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Confirmar c¾digo:
[0x003260B4] [0x00326B2B] [0x0031EDFC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Servi¸o de informa¸·o
[0x0031ED84] (0x04) (0x80) (0x0101) [0x00000000]
# --------------
[0x003260B4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Servi¸o de informa¸·o
[0x00326708] [0x00326BC1] [0x00000009] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) C¾digo alterado
[0x003265D0] [0x00326BA6] [0x00000030] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) C¾digo PUK2:
[0x003265C4] [0x00326BA3] [0x00000033] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) C¾digo PIN2 bloqueado
[0x003265A3] [0x00326B9D] [0x0000003E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Erro de password
# --------------
# --------------
[0x0032644D] [0x00326B76] [0x00000010] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Uma a uma
# --------------
[0x00326003] [0x00326B07] [0x0031EA54] (0x0050) (0x0387) (0x0000) (0x003A) (0x0000) (0x0007) Op¸Áes de custos de chamadas
[0x0031E994] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326003] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Op¸Áes de custos de chamadas
[0x00326225] [0x00326B37] [0x00000000] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio activo
[0x0032623D] [0x00326B46] [0x00000001] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio se n·o acess»vel
[0x00326237] [0x00326B40] [0x00000002] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio inactivo
[0x0032623A] [0x00326B43] [0x00000003] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio se n·o atendida
[0x00326231] [0x00326B3D] [0x00000005] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio cancelado
[0x0032622B] [0x00326B3A] [0x00000006] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A)
Reenvios cancelados
[0x0032603F] [0x00326B1F] [0x00000004] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0400) (0x001A) Cancelar todas as restri¸Áes
# --------------
[0x003262D9] [0x00326B55] [0x0000006D] (0x0054) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0008) Mem¾ria
[0x00325F34] [0x00326AF8] [0x00000068] (0x0055) (0x05E0) (0x0000) (0x003A) (0x0400) (0x0009) Subtrair
[0x00325F40] [0x00326AFB] [0x00000078] (0x0053) (0x05E0) (0x0000) (0x003A) (0x0400) (0x000A) Verificar nota de calendµrio
[0x00326381] [0x00326B94] [0x00000000] (0x0057) (0x0CB2) (0x0000) (0x003A) (0x0500) (0x000B) Verificar pre¸o uni- tµrio e limite
[0x0012D82C] [0x00326BD0] [0x00000034] (0x0058) (0x05E0) (0x0000) (0x003A) (0x0000) (0x000C) INVALID ADDRESS
[0x00325D18] [0x00000000] [0x0000002E] (0x0059) (0x05E0) (0x0000) (0x003A) (0x0400) (0x001A) Net monitor
# --------------
And the functions patched:
-----------------------------------------
locating functions for the 5E0 table
-----------------------------------------
5e0_prt_action_1:
located at: 0x000F90C4
- func_start: 000F90C4
- func_end: 000F90D4
----------------------------------
5e0_prt_action_2:
located at: 0x000F93E0
- func_start: 000F93E0
- func_end: 000F93F0
----------------------------------
5e0_disp_val:
located at: 0x000F93F2
- func_start: 000F93F2
- func_end: 000F9400
----------------------------------
5e0_call_func:
located at: 0x000F90D6
- func_start: 000F90D6
- func_end: 000F93DE
----------------------------------
ldr at: 000F90C6
ldr at: 000F90CA
ldr at: 000F93E2
ldr at: 000F90F0
ldr at: 000F90FA
ldr at: 000F90FE
ldr at: 000F93F4
-----------------------------------------
-> The 5E0 Table has 1288 bytes, and 0xa0 entries in it
-----------------------------------------
# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
checking for space in PPM...
# - No CODE chunk found...
--------> 5e0 Table is at 0032C280
----------------------------------
locating all the needed functions
----------------------------------
show_main_menu:
located at: 0x0007D204
----------------------------------
disp_msg:
located at: 0x000F2038
[searching back to entry point]
- func_start: 000F2028
- func_end: 000F20EE
----------------------------------
divide:
located at: 0x00106F2C
----------------------------------
task0:
located at: 0x000F3888
- func_start: 000F3888
- func_end: 000F39B2
----------------------------------
memset:
located at: 0x00108C84
----------------------------------
clear_rect:
located at: 0x0007DD24
[searching back to entry point]
- func_start: 0007DCFC
- func_end: 0007E162
----------------------------------
update_screen:
located at: 0x00065860
- func_start: 00065860
- func_end: 00067048
----------------------------------
to_screen:
located at: 0x0007E3E6
[searching back to entry point]
- func_start: 0007E37C
- func_end: 0007E442
----------------------------------
setpixel:
located at: 0x0007E168
- func_start: 0007E168
- func_end: 0007E1F0
----------------------------------
draw_bitmap:
located at: 0x0007E1F2
- func_start: 0007E1F2
- func_end: 0007E37A
----------------------------------
clear_lcd_ram:
located at: 0x0007EFD8
- func_start: 0007EFD8
- func_end: 0007EFFE
----------------------------------
disable_irq:
located at: 0x000F7426
----------------------------------
enable_irq:
located at: 0x000F7440
----------------------------------
disable_irq:
located at: 0x000F7426
----------------------------------
enable_irq:
located at: 0x000F7440
----------------------------------
memset:
located at: 0x00108C84
----------------------------------
seccode_routine:
located at: 0x00087A86
[searching back to entry point]
- func_start: 00087A74
- func_end: 00087AE0
----------------------------------
setfaid_routine:
located at: 0x000880A6
- func_start: 000880A6
- func_end: 00088120
----------------------------------
seccode_routine:
located at: 0x00087A86
[searching back to entry point]
- func_start: 00087A74
- func_end: 00087AE0
----------------------------------
setfaid_routine:
located at: 0x000880A6
- func_start: 000880A6
- func_end: 00088120
----------------------------------
prep_xba:
located at: 0x0004485C
[searching back to entry point]
- func_start: 0004483E
- func_end: 0004488C
----------------------------------
send_xba:
located at: 0x00044898
[searching back to entry point]
- func_start: 0004488E
- func_end: 000448B4
----------------------------------
fbus_f40:
located at: 0x000470BE
[searching back to entry point]
- func_start: 000470A4
- func_end: 000475D6
----------------------------------
draw_line:
located at: 0x0007E8AC
- func_start: 0007E8AC
- func_end: 0007EB0E
----------------------------------
set_lights:
located at: 0x0007F042
----------------------------------
blink_call:
located at: 0x0009627E
----------------------------------
play_tone:
located at: 0x000DF972
----------------------------------
tonetask:
located at: 0x000DFD2C
[searching back to entry point]
- func_start: 000DFCE4
- func_end: 000E00C4
----------------------------------
to_screen_patch:
located at: 0x0007E3E6
----------------------------------
----------------------------------
searching for the menu select things
----------------------------------
----------------------------------
searching for the light toggle routine
----------------------------------
set_lights_1: 000F718E
set_lights_2: 000F71A8
----------------------------------
searching for the tone task things
----------------------------------
tonetask: 000DFD1A
----------------------------------
searching for the malloc/eeprom routines
----------------------------------
n_malloc: 0008BF00
read_eeprom: 001068E0
write_eeprom: 001068B0
calc_eeprom_chk: 00087C1E
----------------------------------
patching to_screen for inverted display
----------------------------------
invert_1: 0007E3F6
invert_2: 0007E416
send_lcd_data: 00100286
----------------------------------
looking for a nice place in task #0
----------------------------------
Task #0 patch at 000F38B6
----------------------------------
looking for free space...
----------------------------------
# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
checking for space in PPM...
# - No CODE chunk found...
----------------------------------
settling our nice graphix...
----------------------------------
found 0504 bytes for function pic2_1 at 0x00136D38
found 0504 bytes for function pic2_2 at 0x00136F30
found 0504 bytes for function pic2_3 at 0x00137128
found 0504 bytes for function pic2_4 at 0x00137320
found 0012 bytes for function logo_pic1_info at 0x00137518
found 0012 bytes for function logo_pic2_info at 0x00137524
found 0012 bytes for function logo_pic3_info at 0x00137530
found 0012 bytes for function logo_pic4_info at 0x0013753C
found 0052 bytes for function own_slideshow_table at 0x00137548
found 0013 bytes for function own_cmd_table at 0x0013757C
----------------------------------
hammering in our functions
----------------------------------
found 0048 bytes for function own_get_ram at 0x0013758C
- bl: 0013759A -> 0008BF00: F7 54 FC B1
- bl: 001375A6 -> 00108C84: F7 D1 FB 6D
found 0048 bytes for function own_set_ram at 0x001375BC
- bl: 001375CA -> 0008BF00: F7 54 FC 99
- bl: 001375D6 -> 00108C84: F7 D1 FB 55
found 0020 bytes for function own_update_screen at 0x001375EC
- bl: 001375F6 -> 0007E37C: F7 46 FE C1
found 0024 bytes for function own_show_bitmap at 0x00137600
- bl: 00137608 -> 0007E1F2: F7 46 FD F3
- bl: 0013760C -> 001375EC: F7 FF FF EE
found 0032 bytes for function own_get_keypress at 0x00137618
found 0060 bytes for function own_get_led at 0x00137638
found 0132 bytes for function own_set_led at 0x00137674
- bl: 00137680 -> 000F7426: F7 BF FE D1
- bl: 00137690 -> 000F7440: F7 BF FE D6
- bl: 001376A0 -> 000F7426: F7 BF FE C1
- bl: 001376B4 -> 000F7440: F7 BF FE C4
- bl: 001376C4 -> 000F7426: F7 BF FE AF
- bl: 001376D8 -> 000F7440: F7 BF FE B2
found 0010 bytes for function own_led_on at 0x001376F8
- bl: 001376FC -> 00137674: F7 FF FF BA
found 0022 bytes for function own_toggle_led at 0x00137704
- bl: 00137706 -> 00137638: F7 FF FF 97
- bl: 00137714 -> 00137674: F7 FF FF AE
found 0044 bytes for function own_get_config_nibble at 0x0013771C
- bl: 00137732 -> 001068E0: F7 CF F8 D5
found 0074 bytes for function own_set_config_nibble at 0x00137748
- bl: 00137762 -> 001068E0: F7 CF F8 BD
- bl: 00137786 -> 001068B0: F7 CF F8 93
- bl: 0013778A -> 00087C1E: F7 50 FA 48
found 0036 bytes for function own_menu_table at 0x00137794
found 0040 bytes for function own_menu_hook at 0x001377B8
- bl: 001377BC -> 0013771C: F7 FF FF AE
5E0 ID# A1 | Set Menu #0
found 0012 bytes for function own_set_cx_x at 0x001377E0
- bl: 001377E6 -> 00137748: F7 FF FF AF
5E0 ID# A2 | Set Menu #1
found 0012 bytes for function own_set_cx_x at 0x001377EC
- bl: 001377F2 -> 00137748: F7 FF FF A9
5E0 ID# A3 | Set Menu #2
found 0012 bytes for function own_set_cx_x at 0x001377F8
- bl: 001377FE -> 00137748: F7 FF FF A3
5E0 ID# A4 | Set Menu #3
found 0012 bytes for function own_set_cx_x at 0x00137804
- bl: 0013780A -> 00137748: F7 FF FF 9D
5E0 ID# A5 | Set Menu #4
found 0012 bytes for function own_set_cx_x at 0x00137810
- bl: 00137816 -> 00137748: F7 FF FF 97
5E0 ID# A6 | Set Menu #5
found 0012 bytes for function own_set_cx_x at 0x0013781C
- bl: 00137822 -> 00137748: F7 FF FF 91
found 0084 bytes for function own_fade_led at 0x00137828
- bl: 0013782C -> 00137704: F7 FF FF 6A
- bl: 00137830 -> 00137618: F7 FF FE F2
- bl: 00137844 -> 00137618: F7 FF FE E8
- bl: 00137854 -> 00137618: F7 FF FE E0
- bl: 00137864 -> 00137704: F7 FF FF 4E
- bl: 00137870 -> 00137704: F7 FF FF 48
found 0092 bytes for function own_blink_led at 0x0013787C
- bl: 0013788C -> 000F7426: F7 BF FD CB
- bl: 0013789C -> 000F7440: F7 BF FD D0
- bl: 001378AC -> 000F7426: F7 BF FD BB
- bl: 001378C0 -> 000F7440: F7 BF FD BE
found 0040 bytes for function own_blink_hook at 0x001378D8
- bl: 001378DC -> 0013771C: F7 FF FF 1E
- bl: 001378E6 -> 00137638: F7 FF FE A7
- bl: 001378EE -> 0013787C: F7 FF FF C5
found 0044 bytes for function own_enable_hook at 0x00137900
- bl: 00137904 -> 0013771C: F7 FF FF 0A
- bl: 0013790E -> 00137638: F7 FF FE 93
- bl: 00137918 -> 00137674: F7 FF FE AC
5E0 ID# A7 | Rhythmic 0
found 0012 bytes for function own_set_cx_x at 0x0013792C
- bl: 00137932 -> 00137748: F7 FF FF 09
5E0 ID# A8 | Rhythmic 1
found 0012 bytes for function own_set_cx_x at 0x00137938
- bl: 0013793E -> 00137748: F7 FF FF 03
found 0032 bytes for function own_invert at 0x00137944
- bl: 0013794A -> 0013771C: F7 FF FE E7
- bl: 0013795A -> 00100286: F7 C8 FC 94
5E0 ID# A9 | Invert 0
found 0012 bytes for function own_set_cx_x at 0x00137964
- bl: 0013796A -> 00137748: F7 FF FE ED
5E0 ID# AA | Invert 1
found 0012 bytes for function own_set_cx_x at 0x00137970
- bl: 00137976 -> 00137748: F7 FF FE E7
found 0060 bytes for function own_delay_table at 0x0013797C
found 0052 bytes for function own_fade_hook_out at 0x001379B8
- bl: 001379BE -> 0013771C: F7 FF FE AD
- bl: 001379C4 -> 00137638: F7 FF FE 38
- bl: 001379D4 -> 00137828: F7 FF FF 28
- bl: 001379DA -> 00137674: F7 FF FE 4B
found 0052 bytes for function own_fade_hook_in at 0x001379EC
- bl: 001379F2 -> 0013771C: F7 FF FE 93
- bl: 001379F8 -> 00137638: F7 FF FE 1E
- bl: 00137A08 -> 00137828: F7 FF FF 0E
- bl: 00137A0E -> 00137674: F7 FF FE 31
5E0 ID# AB | Fade in val 0
found 0012 bytes for function own_set_cx_x at 0x00137A20
- bl: 00137A26 -> 00137748: F7 FF FE 8F
5E0 ID# AC | Fade in val 1
found 0012 bytes for function own_set_cx_x at 0x00137A2C
- bl: 00137A32 -> 00137748: F7 FF FE 89
5E0 ID# AD | Fade in val 2
found 0012 bytes for function own_set_cx_x at 0x00137A38
- bl: 00137A3E -> 00137748: F7 FF FE 83
5E0 ID# AE | Fade in val 3
found 0012 bytes for function own_set_cx_x at 0x00137A44
- bl: 00137A4A -> 00137748: F7 FF FE 7D
5E0 ID# AF | Fade in val 4
found 0012 bytes for function own_set_cx_x at 0x00137A50
- bl: 00137A56 -> 00137748: F7 FF FE 77
5E0 ID# B0 | Fade in val 5
found 0012 bytes for function own_set_cx_x at 0x00137A5C
- bl: 00137A62 -> 00137748: F7 FF FE 71
5E0 ID# B1 | Fade in val 6
found 0012 bytes for function own_set_cx_x at 0x00137A68
- bl: 00137A6E -> 00137748: F7 FF FE 6B
5E0 ID# B2 | Fade in val 7
found 0012 bytes for function own_set_cx_x at 0x00137A74
- bl: 00137A7A -> 00137748: F7 FF FE 65
5E0 ID# B3 | Fade in val 8
found 0012 bytes for function own_set_cx_x at 0x00137A80
- bl: 00137A86 -> 00137748: F7 FF FE 5F
5E0 ID# B4 | Fade in val 9
found 0012 bytes for function own_set_cx_x at 0x00137A8C
- bl: 00137A92 -> 00137748: F7 FF FE 59
5E0 ID# B5 | Fade out val 0
found 0012 bytes for function own_set_cx_x at 0x00137A98
- bl: 00137A9E -> 00137748: F7 FF FE 53
5E0 ID# B6 | Fade out val 1
found 0012 bytes for function own_set_cx_x at 0x00137AA4
- bl: 00137AAA -> 00137748: F7 FF FE 4D
5E0 ID# B7 | Fade out val 2
found 0012 bytes for function own_set_cx_x at 0x00137AB0
- bl: 00137AB6 -> 00137748: F7 FF FE 47
5E0 ID# B8 | Fade out val 3
found 0012 bytes for function own_set_cx_x at 0x00137ABC
- bl: 00137AC2 -> 00137748: F7 FF FE 41
5E0 ID# B9 | Fade out val 4
found 0012 bytes for function own_set_cx_x at 0x00137AC8
- bl: 00137ACE -> 00137748: F7 FF FE 3B
5E0 ID# BA | Fade out val 5
found 0012 bytes for function own_set_cx_x at 0x00137AD4
- bl: 00137ADA -> 00137748: F7 FF FE 35
5E0 ID# BB | Fade out val 6
found 0012 bytes for function own_set_cx_x at 0x00137AE0
- bl: 00137AE6 -> 00137748: F7 FF FE 2F
5E0 ID# BC | Fade out val 7
found 0012 bytes for function own_set_cx_x at 0x00137AEC
- bl: 00137AF2 -> 00137748: F7 FF FE 29
5E0 ID# BD | Fade out val 8
found 0012 bytes for function own_set_cx_x at 0x00137AF8
- bl: 00137AFE -> 00137748: F7 FF FE 23
5E0 ID# BE | Fade out val 9
found 0012 bytes for function own_set_cx_x at 0x00137B04
- bl: 00137B0A -> 00137748: F7 FF FE 1D
found 0064 bytes for function own_read_via_xbus at 0x00137B10
- bl: 00137B26 -> 0004483E: F7 0C FE 8A
- bl: 00137B48 -> 0004488E: F7 0C FE A1
found 0044 bytes for function own_write_via_xbus at 0x00137B50
- bl: 00137B64 -> 0004483E: F7 0C FE 6B
- bl: 00137B74 -> 0004488E: F7 0C FE 8B
found 0048 bytes for function own_get_ram at 0x00137B7C
- bl: 00137B8A -> 0008BF00: F7 54 F9 B9
- bl: 00137B96 -> 00108C84: F7 D1 F8 75
found 0048 bytes for function own_set_ram at 0x00137BAC
- bl: 00137BBA -> 0008BF00: F7 54 F9 A1
- bl: 00137BC6 -> 00108C84: F7 D1 F8 5D
found 0054 bytes for function own_write_ownram at 0x00137BDC
- bl: 00137BEC -> 00137BAC: F7 FF FF DE
- bl: 00137BFA -> 0004483E: F7 0C FE 20
- bl: 00137C0A -> 0004488E: F7 0C FE 40
found 0048 bytes for function own_read_ownram at 0x00137C14
- bl: 00137C20 -> 00137B7C: F7 FF FF AC
- bl: 00137C30 -> 0004483E: F7 0C FE 05
- bl: 00137C3C -> 0004488E: F7 0C FE 27
found 0062 bytes for function own_write_combi at 0x00137C44
- bl: 00137C56 -> 000F7426: F7 BF FB E6
- bl: 00137C60 -> 000F7440: F7 BF FB EE
- bl: 00137C6C -> 0004483E: F7 0C FD E7
- bl: 00137C7A -> 0004488E: F7 0C FE 08
found 0064 bytes for function own_write_dword at 0x00137C84
- bl: 00137CA6 -> 0004483E: F7 0C FD CA
- bl: 00137CB6 -> 0004488E: F7 0C FD EA
found 0068 bytes for function own_fbus_cmd at 0x00137CC4
- bl: 00137CCC -> 00137B10: F7 FF FF 20
- bl: 00137CD6 -> 00137B50: F7 FF FF 3B
- bl: 00137CE0 -> 00137C44: F7 FF FF B0
- bl: 00137CEA -> 00137C84: F7 FF FF CB
- bl: 00137CF4 -> 00137BDC: F7 FF FF 72
- bl: 00137CFE -> 00137C14: F7 FF FF 89
found 0016 bytes for function own_hook_temp at 0x00137D08
- bl: 00137D0A -> 00137CC4: F7 FF FF DB
found 0016 bytes for function own_delay at 0x00137D18
found 0032 bytes for function own_show_bitmap_data at 0x00137D28
- bl: 00137D40 -> 00137600: F7 FF FC 5E
found 0032 bytes for function own_scroll_in_bitmap at 0x00137D48
- bl: 00137D50 -> 00137618: F7 FF FC 62
- bl: 00137D5A -> 00137D28: F7 FF FF E5
found 0034 bytes for function own_scroll_in_bitmap_diag at 0x00137D68
- bl: 00137D70 -> 00137618: F7 FF FC 52
- bl: 00137D7A -> 00137D28: F7 FF FF D5
found 0070 bytes for function own_blink_bitmap at 0x00137D8C
- bl: 00137D98 -> 00137618: F7 FF FC 3E
- bl: 00137DAC -> 00137D28: F7 FF FF BC
- bl: 00137DBE -> 00137D28: F7 FF FF B3
found 0206 bytes for function own_graph_cmd at 0x00137DD4
- bl: 00137E18 -> 00137D48: F7 FF FF 96
- bl: 00137E22 -> 00137D68: F7 FF FF A1
- bl: 00137E2E -> 00137D8C: F7 FF FF AD
- bl: 00137E38 -> 00137D18: F7 FF FF 6E
- bl: 00137E52 -> 0007DCFC: F7 45 FF 53
- bl: 00137E68 -> 0007E8AC: F7 46 FD 20
- bl: 00137E6C -> 001375EC: F7 FF FB BE
- bl: 00137E82 -> 00137828: F7 FF FC D1
- bl: 00137E8A -> 00137704: F7 FF FC 3B
- bl: 00137E96 -> 00137D28: F7 FF FF 47
found 0056 bytes for function own_run_commands at 0x00137EA4
- bl: 00137EB4 -> 00137618: F7 FF FB B0
- bl: 00137EC8 -> 00137618: F7 FF FB A6
- bl: 00137ED2 -> 00137DD4: F7 FF FF 7F
found 0020 bytes for function own_draw_slideshow at 0x00137EDC
- bl: 00137EE2 -> 00137EA4: F7 FF FF DF
5E0 ID# BF | Run Slideshow
found 0064 bytes for function own_set_vibra at 0x00137EF0
- bl: 00137EFE -> 000F7426: F7 BF FA 92
- bl: 00137F14 -> 000F7426: F7 BF FA 87
- bl: 00137F22 -> 000F7440: F7 BF FA 8D
5E0 ID# C0 | Vibra Level 0/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F30
- bl: 00137F34 -> 00137EF0: F7 FF FF DC
5E0 ID# C1 | Vibra Level 2/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F3C
- bl: 00137F40 -> 00137EF0: F7 FF FF D6
5E0 ID# C2 | Vibra Level 4/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F48
- bl: 00137F4C -> 00137EF0: F7 FF FF D0
5E0 ID# C3 | Vibra Level 6/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F54
- bl: 00137F58 -> 00137EF0: F7 FF FF CA
5E0 ID# C4 | Vibra Level 8/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F60
- bl: 00137F64 -> 00137EF0: F7 FF FF C4
5E0 ID# C5 | Vibra Level 10/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F6C
- bl: 00137F70 -> 00137EF0: F7 FF FF BE
5E0 ID# C6 | Vibra Level 12/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F78
- bl: 00137F7C -> 00137EF0: F7 FF FF B8
5E0 ID# C7 | Vibra Level 14/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F84
- bl: 00137F88 -> 00137EF0: F7 FF FF B2
5E0 ID# C8 | Vibra Level 16/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F90
- bl: 00137F94 -> 00137EF0: F7 FF FF AC
5E0 ID# C9 | Vibra Level 18/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F9C
- bl: 00137FA0 -> 00137EF0: F7 FF FF A6
found 0176 bytes for function own_run_checksum at 0x00137FA8
- bl: 00137FAC -> 00137B7C: F7 FF FD E6
- bl: 00137FBC -> 00137BAC: F7 FF FD F6
- bl: 00137FC4 -> 00137BAC: F7 FF FD F2
- bl: 00137FF0 -> 00137B7C: F7 FF FD C4
- bl: 00137FFE -> 00137BAC: F7 FF FD D5
- bl: 00138008 -> 00137BAC: F7 FF FD D0
- bl: 00138012 -> 00137B7C: F7 FF FD B3
- bl: 0013801C -> 00137BAC: F7 FF FD C6
- bl: 00138024 -> 00137B7C: F7 FF FD AA
- bl: 0013802C -> 00137B7C: F7 FF FD A6
- bl: 00138036 -> 00137B7C: F7 FF FD A1
found 0016 bytes for function own_hook_temp at 0x00138058
- bl: 0013805A -> 00137FA8: F7 FF FF A5
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Trying to find suitable code at 0x000F38B6
oh, cool.. a BL! => relocateable!
offset: 0x000F38B6
Relocatable code found at 0x000F38B6
- bl: 0013805E -> 000E2F48: F7 AA FF 73
- bl: 000F38B6 -> 00138058: F0 44 FB CF
this tricky thing was done =)
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
----------------------------------
doing the fade stuff...
----------------------------------
------ set_lights_1 ------
Trying to find suitable code at 0x000F718E
oh, cool.. a BL! => relocateable!
offset: 0x000F718E
Relocatable code found at 0x000F718E
- bl: 001379E0 -> 000F7426: F7 BF FD 21
- bl: 000F718E -> 001379B8: F0 40 FC 13
this tricky thing was done =)
------ set_lights_2 -------
Trying to find suitable code at 0x000F71A8
oh, cool.. a BL! => relocateable!
offset: 0x000F71A8
Relocatable code found at 0x000F71A8
- bl: 00137A14 -> 000F7426: F7 BF FD 07
- bl: 000F71A8 -> 001379EC: F0 40 FC 20
this tricky thing was done =)
- bl: 00096296 -> 001376F8: F0 A1 FA 2F
----------------------------------
doing the rhythmic stuff...
----------------------------------
------ play_tone -------
Trying to find suitable code at 0x000DF97A
oh, cool.. a BL! => relocateable!
offset: 0x000DF97A
Relocatable code found at 0x000DF97A
- bl: 001378F4 -> 00106F2C: F7 CF FB 1A
- bl: 000DF97A -> 001378D8: F0 57 FF AD
this tricky thing was done =)
------ tonetask -------
Trying to find suitable code at 0x000DFD1A
found an LDRB ... goood =)
found an CMP R,# ... goood =)
now we have all...
offset: 0x000DFD1A
Relocatable code found at 0x000DFD1A
- bl: 000DFD1A -> 00137900: F0 57 FD F1
this tricky thing was done =)
----------------------------------
doing the xbus hack...
----------------------------------
Trying to find suitable code at 0x000470A4
PUSH, wont touch this
found an MOV R,H ... goood =)
PUSH, wont touch this
ADD SP, # ... wont touch this
found an Logical Shift (LSx) ... goood =)
found an LDRB ... goood =)
now we have all...
offset: 0x000470AC
Relocatable code found at 0x000470AC
- bl: 000470AC -> 00137D08: F0 F0 FE 2C
this tricky thing was done =)
----------------------------------
doing the menu hack...
----------------------------------
Trying to find suitable code at 0x0007D214
oh, cool.. a BL! => relocateable!
offset: 0x0007D214
Relocatable code found at 0x0007D214
- bl: 001377D0 -> 0007CFFC: F7 45 FC 14
- bl: 0007D214 -> 001377B8: F0 BA FA D0
this tricky thing was done =)
----------------------------------
doing the display invert hack...
----------------------------------
- bl: 0007E3F6 -> 00137944: F0 B9 FA A5
- bl: 0007E416 -> 00137944: F0 B9 FA 95
----------------------------------
4873 bytes injected... got that trick ;)
4873 bytes estimated at start
-------------------------
------ SUMMARY ------
-------------------------
Offset for slide frame #1: hex: 00136D38 dec: 1273144
Offset for slide frame #2: hex: 00136F30 dec: 1273648
Offset for slide frame #3: hex: 00137128 dec: 1274152
Offset for slide frame #4: hex: 00137320 dec: 1274656
If you want to change the graphics, use the above offsets in poodriver
use for the bars width 6 and height 30
-------------------------
You didnt place an 0xDBDDFCAC at the start of an 0400 block
Could some one of you help me out, checking if there is something wrong with the original menustructure? And help me out in this menu creation task?
Thanks a lot