Help...

[Boemio]

I patched my 8250 flashfile with several functions in g3nolite and i'm trying to make the menustructure so i can controle them.

I'm using SmaRkieS Tutorial (http://www.geocities.com/smarkenshin/genolite2d.htm) to guide me in the creation of the menus...!

When i click to create the structure, i always get errors...


Here are the Menustructure file:

# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
# using 'PORT' lang chunk
#

# ---------------------------------------------

# FLS : 1900544 bytes

# with PPM at 00140000

# offset: 0011FD08

# ---------------------------------------------

#

# checking given ROOT-entry..

# ... seems to be okay
#

#

[0x0031FBE8] (0x0B) (0x10) (0x0101) [0x0013086E]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00326732] [0x00326BCD] [0x0031E3C4] (0x004E) (0x0387) (0x0000) (0x003A) (0x0000) (0x0003) Mensagem enviada
[0x0031E2BC] (0x0A) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326732] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Mensagem enviada
[0x00326819] [0x00326B49] [0x0000001F] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Limpar visor
[0x003267E6] [0x00326BD9] [0x0000001C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) N^ do centro:
[0x00326837] [0x00326BDF] [0x0000001B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Op¸Áes de mensagens
[0x00325DBD] [0x00326C06] [0x0000009C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Perfil padr·o
[0x0032632D] [0x00000000] [0x0000008C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Imagem %N
[0x00326834] [0x00326B79] [0x00000021] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Memorizar
[0x003260B1] [0x00326B22] [0x00000026] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Temas
[0x0032628E] [0x00326B4F] [0x0031DEFC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Erro de c¾digo
[0x0031DEB4] (0x02) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0100) (0x001A)
[0x003263F3] [0x00000000] [0x00000048] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Ouvir mensagens vocais
[0x003263F6] [0x00000000] [0x00000049] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Fax e dados
# --------------
[0x00326A50] [0x00326BF4] [0x00000024] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Mensagem: %U
[0x00326A80] [0x00326BFD] [0x0031E2B0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Nova mensagem Ade voz
[0x0031E268] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x003263F0] [0x00326B16] [0x0000002D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Definido
[0x00326A77] [0x00326BFA] [0x0000002B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) A procurar
# --------------
# --------------
[0x0032600F] [0x00326B0A] [0x0031ED78] (0x004F) (0x0387) (0x0000) (0x003A) (0x0000) (0x0004) Chamada em curso
[0x0031ECB8] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032600F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Chamada em curso
[0x00326459] [0x00326B7C] [0x00000000] (0x012D) (0x0282) (0x0000) (0x004E) (0x0400) (0x001A) Sem espa¸o para novas mensagens
[0x00326633] [0x00326BB2] [0x00000000] (0x012D) (0x0281) (0x0000) (0x004E) (0x0400) (0x001A) Chamadas efectuadas
[0x00326630] [0x00326BAF] [0x00000000] (0x012D) (0x0280) (0x0000) (0x004E) (0x0400) (0x001A) Hora alterada
[0x00326441] [0x00326B4C] [0x0031F840] (0x012D) (0x0387) (0x0000) (0x004E) (0x2000) (0x001A) Apagar tudo
[0x0031F7C8] (0x04) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00326279] [0x00000000] [0x00000011] (0x012D) (0x05E0) (0x0000) (0x003E) (0x3000) (0x001A) Final. todas
[0x00326282] [0x00000000] [0x00000006] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Marcadas
[0x0032627F] [0x00000000] [0x00000004] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Cart·o
[0x00326288] [0x00000000] [0x00000005] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Telefone
# --------------
[0x0032602A] [0x00326B13] [0x00000014] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Dura¸·o ch. recebidas
[0x00325FFD] [0x00326B01] [0x00000017] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Limite de custos
[0x00326000] [0x00326B04] [0x0031ECAC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Visualizar custos de chamadas
[0x0031EC64] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Visualizar custos de chamadas
[0x00325FFA] [0x00326B25] [0x0000001A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Limite:
[0x003261FE] [0x00326B34] [0x00000019] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Unidades
# --------------
# --------------
[0x0032646E] [0x00326B7F] [0x0000006A] (0x0051) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0005) Activar
[0x0032672C] [0x00326BCA] [0x0031FA68] (0x0052) (0x0387) (0x0000) (0x003A) (0x0000) (0x0006) N^s servi¸os
[0x0031F978] (0x09) (0x80) (0x0101) [0x00130878]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325E53] [0x00326AEC] [0x00000064] (0x012D) (0x05E0) (0x0000) (0x004E) (0x2800) (0x001A) Activar
[0x00326609] [0x00326BAC] [0x00000066] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) am
[0x00325DD8] [0x00326C09] [0x0031F12C] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) (vazio)
[0x0031F024] (0x0A) (0x80) (0x0101) [0x00130870]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00326672] [0x00326BB5] [0x00000051] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Toque
[0x00326675] [0x00326BB8] [0x0000000D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Sinaliza¸·o de chamada
[0x0032667B] [0x00326BBB] [0x0000000C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Tipo %N
[0x0032614D] [0x00000000] [0x00000023] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Envia o pr¾prio n^ ao atender
[0x00326A62] [0x00326BF7] [0x0031DDD0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Desligado
[0x0031DD88] (0x02) (0xC0) (0x8AAE) [0x00000000]
# --------------
[0x00326A62] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Desligado
[0x00326A5C] [0x00000000] [0x00000001] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) Confirmar novo c¾digo PIN2:
[0x00326A5F] [0x00000000] [0x00000000] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) Ligado
# --------------
[0x0032688E] [0x00326BE8] [0x00000077] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Mensagem n·o envi- ada desta vez
[0x003263BA] [0x00326B6A] [0x0000000B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Junho-%1S %2S:%3S:%4S
[0x00326ADA] [0x00326C00] [0x0031E0A0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A)
Nota memorizada
[0x0031E058] (0x02) (0xC0) (0x8AA7) [0x00000000]
# --------------
[0x00326ADA] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A)
Nota memorizada
[0x00326AE3] [0x00000000] [0x00000004] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Desligados
[0x00326AE0] [0x00000000] [0x000000FF] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Tons de aviso
# --------------
[0x003266F9] [0x00326BBE] [0x0000008A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Caract. invµlidos para cart·o
[0x00326468] [0x00000000] [0x0000006C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Personalizar
# --------------
[0x00325DAE] [0x00326C03] [0x0031F96C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Portugu¹s
[0x0031F924] (0x02) (0xC0) (0x0101) [0x00130876]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DB7] [0x00000000] [0x0031F8AC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) M·os-livres
[0x0031F864] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002C] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Auscultadores
[0x00325EA4] [0x00326AF5] [0x0031F84C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x0031DFB0] (0x02) (0xC0) (0x8A2C) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Resposta automµtica
# --------------
# --------------
[0x00325DB4] [0x00000000] [0x0031F918] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Perfil activo
[0x0031F8B8] (0x03) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002B] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Auscultadores
[0x00325EA4] [0x00326AF5] [0x0031F858] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x0031DFB0] (0x02) (0xC0) (0x8A2B) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Agosto-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Resposta automµtica
# --------------
[0x003263E4] [0x00326B70] [0x0031E04C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Apagadas chamadas marcadas
[0x0031E004] (0x02) (0xC0) (0x8A2A) [0x00000000]
# --------------
[0x003263E4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Apagadas chamadas marcadas
[0x003263E7] [0x00000000] [0x00000001] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) Ilumina¸·o
[0x003263EA] [0x00000000] [0x00000000] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) Ligada
# --------------
# --------------
# --------------
[0x003264BF] [0x00326B82] [0x0031FB70] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Activada actualiza¸. automµtica
[0x0031FB10] (0x03) (0xC0) (0x0A2D) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0000) (0x0000) (0x001A)
[0x003264C8] [0x003264BC] [0x00000002] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Confirm. antes
[0x003264C5] [0x003264B9] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Actualiz. automµt. desactivada
[0x003264CB] [0x003264C2] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Sim
# --------------
[0x00326021] [0x00326B10] [0x0031F018] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) Ligada
[0x0031EF70] (0x06) (0x80) (0x0101) [0x00130874]
# --------------
[0x00326021] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Ligada
[0x00325E8C] [0x00326AF2] [0x0031DFA4] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Responder
[0x0031DF5C] (0x02) (0xC0) (0x8A16) [0x00000000]
# --------------
[0x00325E8C] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Responder
[0x00325E92] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Desligado
[0x00325E8F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Qualquer tecla para responder
# --------------
[0x00326018] [0x00326B0D] [0x0031E148] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Chamada %N
[0x0031E100] (0x02) (0xC0) (0x0A19) [0x00000000]
# --------------
[0x00326018] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Chamada %N
[0x0032601E] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x0032601B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Remarca¸·o automµtica
# --------------
[0x0032653A] [0x00326B97] [0x0031E19C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Ligada
[0x0031E154] (0x02) (0xC0) (0x0A1A) [0x00000000]
# --------------
[0x0032653A] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Ligada
[0x00326537] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00326534] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) 1 chamada n·o atendida
# --------------
[0x00326036] [0x00326B19] [0x00000000] (0x012D) (0x0BC6) (0x0000) (0x004E) (0x0000) (0x001A) Chamadas em espera canceladas
[0x00326126] [0x00326B2E] [0x0031E208] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) N·o mostra n^ que chama
[0x0031E1A8] (0x03) (0xC0) (0x8A1B) [0x00000000]
# --------------
[0x00326126] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) N·o mostra n^ que chama
[0x00326114] [0x00000000] [0x00000000] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Pré-definido
[0x0032611A] [0x00000000] [0x00000001] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Inactivo
[0x00326117] [0x00000000] [0x00000002] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Predefinido
# --------------
[0x00325E80] [0x00326AEF] [0x0000004C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Mudar para linha de telefone?
# --------------
[0x003265B5] [0x00326BA0] [0x0031EF64] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) N^ de telefone:
[0x0031EEBC] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x003265B5] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) N^ de telefone:
[0x003263D8] [0x00326B6D] [0x0000000A] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Seleccio- nado Portugu¹s
[0x00326405] [0x00326B73] [0x0031F1EC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Maio-%1S %2S:%3S:%4S
[0x0031F1A4] (0x02) (0xC0) (0x0A1C) [0x00000000]
# --------------
[0x00326405] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Maio-%1S %2S:%3S:%4S
[0x0032640B] [0x00000000] [0x00000001] (0x012D) (0x0EDC) (0x0000) (0x003E) (0x1300) (0x001A) Desligada
[0x00326408] [0x00000000] [0x00000000] (0x012D) (0x0EDD) (0x0000) (0x003E) (0x1300) (0x001A) Informa¸·o da célula
# --------------
[0x0032676B] [0x00326BD3] [0x0031FE10] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Servi¸os SIM
[0x0031FDC8] (0x02) (0xC0) (0x8A26) [0x00000000]
# --------------
[0x0032676B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Servi¸os SIM
[0x00326771] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) N·o perguntar
[0x0032676E] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Confirmar ac- ¸Áes serv. SIM
# --------------
[0x00326591] [0x00326B9A] [0x00000000] (0x012D) (0x0294) (0x0000) (0x004E) (0x0400) (0x001A) Enviar »cone
[0x00326A4A] [0x00326BF1] [0x00000059] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) NÂmero ocupado
[0x003269A2] [0x00326BEE] [0x0000003C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) A trocar modo
# --------------
[0x0032671D] [0x00326BC7] [0x0031EEB0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Telefone
[0x0031EE08] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032671D] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Telefone
[0x003265D6] [0x00326BA9] [0x00000031] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) C¾digo PIN alterado
[0x00325FF4] [0x00326AFE] [0x0031E694] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Aten¸·o: chamadas restritas
[0x0031E5EC] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x00325FF4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Aten¸·o: chamadas restritas
[0x00326504] [0x00326B91] [0x00000000] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Sem nÂmero de telefone
[0x003264F5] [0x00326B8E] [0x00000001] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Internacionais excepto para pa»s origem
[0x003264F2] [0x00326B8B] [0x00000002] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Entrada de chamadas
[0x003264EF] [0x00326B88] [0x00000003] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Entrada de chamadas no estrangeiro
[0x003264EC] [0x00326B85] [0x00000004] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Alcan¸ado limite de custos
[0x0032603C] [0x00326B1C] [0x00000005] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0400) (0x001A) Servi¸o inactivo
# --------------
[0x00326444] [0x00326B52] [0x0000004A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Apagar Âltimas chamadas
[0x00326132] [0x00326B31] [0x0031EB80] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Imposs»vel enviar o pr¾prio n^
[0x0031EB20] (0x03) (0xC0) (0x4A82) [0x00000000]
# --------------
[0x00326132] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Imposs»vel enviar o pr¾prio n^
[0x003261E9] [0x00000000] [0x00000000] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) N^ n·o pertence a grupo restrito
[0x003261EF] [0x00000000] [0x00000001] (0x012D) (0x0A78) (0x0000) (0x003E) (0x1000) (0x001A) Valor demasiado grande
[0x003261F5] [0x00000000] [0x00000002] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) Grupo restrito %N em uso
# --------------
[0x00326711] [0x00326BC4] [0x0000004E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Confirmar c¾digo:
[0x003260B4] [0x00326B2B] [0x0031EDFC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Servi¸o de informa¸·o
[0x0031ED84] (0x04) (0x80) (0x0101) [0x00000000]
# --------------
[0x003260B4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Servi¸o de informa¸·o
[0x00326708] [0x00326BC1] [0x00000009] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) C¾digo alterado
[0x003265D0] [0x00326BA6] [0x00000030] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) C¾digo PUK2:
[0x003265C4] [0x00326BA3] [0x00000033] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) C¾digo PIN2 bloqueado
[0x003265A3] [0x00326B9D] [0x0000003E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Erro de password
# --------------
# --------------
[0x0032644D] [0x00326B76] [0x00000010] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Uma a uma
# --------------
[0x00326003] [0x00326B07] [0x0031EA54] (0x0050) (0x0387) (0x0000) (0x003A) (0x0000) (0x0007) Op¸Áes de custos de chamadas
[0x0031E994] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326003] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Op¸Áes de custos de chamadas
[0x00326225] [0x00326B37] [0x00000000] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio activo
[0x0032623D] [0x00326B46] [0x00000001] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio se n·o acess»vel
[0x00326237] [0x00326B40] [0x00000002] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio inactivo
[0x0032623A] [0x00326B43] [0x00000003] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio se n·o atendida
[0x00326231] [0x00326B3D] [0x00000005] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Reenvio cancelado
[0x0032622B] [0x00326B3A] [0x00000006] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A)
Reenvios cancelados
[0x0032603F] [0x00326B1F] [0x00000004] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0400) (0x001A) Cancelar todas as restri¸Áes
# --------------
[0x003262D9] [0x00326B55] [0x0000006D] (0x0054) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0008) Mem¾ria
[0x00325F34] [0x00326AF8] [0x00000068] (0x0055) (0x05E0) (0x0000) (0x003A) (0x0400) (0x0009) Subtrair
[0x00325F40] [0x00326AFB] [0x00000078] (0x0053) (0x05E0) (0x0000) (0x003A) (0x0400) (0x000A) Verificar nota de calendµrio
[0x00326381] [0x00326B94] [0x00000000] (0x0057) (0x0CB2) (0x0000) (0x003A) (0x0500) (0x000B) Verificar pre¸o uni- tµrio e limite
[0x0012D82C] [0x00326BD0] [0x00000034] (0x0058) (0x05E0) (0x0000) (0x003A) (0x0000) (0x000C) INVALID ADDRESS
[0x00325D18] [0x00000000] [0x0000002E] (0x0059) (0x05E0) (0x0000) (0x003A) (0x0400) (0x001A) Net monitor
# --------------

And the functions patched:



-----------------------------------------
locating functions for the 5E0 table
-----------------------------------------
5e0_prt_action_1:
located at: 0x000F90C4
- func_start: 000F90C4
- func_end: 000F90D4
----------------------------------
5e0_prt_action_2:
located at: 0x000F93E0
- func_start: 000F93E0
- func_end: 000F93F0
----------------------------------
5e0_disp_val:
located at: 0x000F93F2
- func_start: 000F93F2
- func_end: 000F9400
----------------------------------
5e0_call_func:
located at: 0x000F90D6
- func_start: 000F90D6
- func_end: 000F93DE
----------------------------------
ldr at: 000F90C6
ldr at: 000F90CA
ldr at: 000F93E2
ldr at: 000F90F0
ldr at: 000F90FA
ldr at: 000F90FE
ldr at: 000F93F4


-----------------------------------------
-> The 5E0 Table has 1288 bytes, and 0xa0 entries in it

-----------------------------------------
# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
checking for space in PPM...
# - No CODE chunk found...


--------> 5e0 Table is at 0032C280

----------------------------------
locating all the needed functions
----------------------------------

show_main_menu:
located at: 0x0007D204
----------------------------------
disp_msg:
located at: 0x000F2038
[searching back to entry point]
- func_start: 000F2028
- func_end: 000F20EE
----------------------------------
divide:
located at: 0x00106F2C
----------------------------------
task0:
located at: 0x000F3888
- func_start: 000F3888
- func_end: 000F39B2
----------------------------------
memset:
located at: 0x00108C84
----------------------------------
clear_rect:
located at: 0x0007DD24
[searching back to entry point]
- func_start: 0007DCFC
- func_end: 0007E162
----------------------------------
update_screen:
located at: 0x00065860
- func_start: 00065860
- func_end: 00067048
----------------------------------
to_screen:
located at: 0x0007E3E6
[searching back to entry point]
- func_start: 0007E37C
- func_end: 0007E442
----------------------------------
setpixel:
located at: 0x0007E168
- func_start: 0007E168
- func_end: 0007E1F0
----------------------------------
draw_bitmap:
located at: 0x0007E1F2
- func_start: 0007E1F2
- func_end: 0007E37A
----------------------------------
clear_lcd_ram:
located at: 0x0007EFD8
- func_start: 0007EFD8
- func_end: 0007EFFE
----------------------------------
disable_irq:
located at: 0x000F7426
----------------------------------
enable_irq:
located at: 0x000F7440
----------------------------------
disable_irq:
located at: 0x000F7426
----------------------------------
enable_irq:
located at: 0x000F7440
----------------------------------
memset:
located at: 0x00108C84
----------------------------------
seccode_routine:
located at: 0x00087A86
[searching back to entry point]
- func_start: 00087A74
- func_end: 00087AE0
----------------------------------
setfaid_routine:
located at: 0x000880A6
- func_start: 000880A6
- func_end: 00088120
----------------------------------
seccode_routine:
located at: 0x00087A86
[searching back to entry point]
- func_start: 00087A74
- func_end: 00087AE0
----------------------------------
setfaid_routine:
located at: 0x000880A6
- func_start: 000880A6
- func_end: 00088120
----------------------------------
prep_xba:
located at: 0x0004485C
[searching back to entry point]
- func_start: 0004483E
- func_end: 0004488C
----------------------------------
send_xba:
located at: 0x00044898
[searching back to entry point]
- func_start: 0004488E
- func_end: 000448B4
----------------------------------
fbus_f40:
located at: 0x000470BE
[searching back to entry point]
- func_start: 000470A4
- func_end: 000475D6
----------------------------------
draw_line:
located at: 0x0007E8AC
- func_start: 0007E8AC
- func_end: 0007EB0E
----------------------------------
set_lights:
located at: 0x0007F042
----------------------------------
blink_call:
located at: 0x0009627E
----------------------------------
play_tone:
located at: 0x000DF972
----------------------------------
tonetask:
located at: 0x000DFD2C
[searching back to entry point]
- func_start: 000DFCE4
- func_end: 000E00C4
----------------------------------
to_screen_patch:
located at: 0x0007E3E6
----------------------------------

----------------------------------
searching for the menu select things
----------------------------------

----------------------------------
searching for the light toggle routine
----------------------------------
set_lights_1: 000F718E
set_lights_2: 000F71A8

----------------------------------
searching for the tone task things
----------------------------------
tonetask: 000DFD1A

----------------------------------
searching for the malloc/eeprom routines
----------------------------------
n_malloc: 0008BF00
read_eeprom: 001068E0
write_eeprom: 001068B0
calc_eeprom_chk: 00087C1E

----------------------------------
patching to_screen for inverted display
----------------------------------
invert_1: 0007E3F6
invert_2: 0007E416
send_lcd_data: 00100286

----------------------------------
looking for a nice place in task #0
----------------------------------
Task #0 patch at 000F38B6

----------------------------------
looking for free space...
----------------------------------
# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
checking for space in PPM...
# - No CODE chunk found...

----------------------------------
settling our nice graphix...
----------------------------------
found 0504 bytes for function pic2_1 at 0x00136D38
found 0504 bytes for function pic2_2 at 0x00136F30
found 0504 bytes for function pic2_3 at 0x00137128
found 0504 bytes for function pic2_4 at 0x00137320
found 0012 bytes for function logo_pic1_info at 0x00137518
found 0012 bytes for function logo_pic2_info at 0x00137524
found 0012 bytes for function logo_pic3_info at 0x00137530
found 0012 bytes for function logo_pic4_info at 0x0013753C
found 0052 bytes for function own_slideshow_table at 0x00137548
found 0013 bytes for function own_cmd_table at 0x0013757C

----------------------------------
hammering in our functions
----------------------------------
found 0048 bytes for function own_get_ram at 0x0013758C
- bl: 0013759A -> 0008BF00: F7 54 FC B1
- bl: 001375A6 -> 00108C84: F7 D1 FB 6D
found 0048 bytes for function own_set_ram at 0x001375BC
- bl: 001375CA -> 0008BF00: F7 54 FC 99
- bl: 001375D6 -> 00108C84: F7 D1 FB 55
found 0020 bytes for function own_update_screen at 0x001375EC
- bl: 001375F6 -> 0007E37C: F7 46 FE C1
found 0024 bytes for function own_show_bitmap at 0x00137600
- bl: 00137608 -> 0007E1F2: F7 46 FD F3
- bl: 0013760C -> 001375EC: F7 FF FF EE
found 0032 bytes for function own_get_keypress at 0x00137618
found 0060 bytes for function own_get_led at 0x00137638
found 0132 bytes for function own_set_led at 0x00137674
- bl: 00137680 -> 000F7426: F7 BF FE D1
- bl: 00137690 -> 000F7440: F7 BF FE D6
- bl: 001376A0 -> 000F7426: F7 BF FE C1
- bl: 001376B4 -> 000F7440: F7 BF FE C4
- bl: 001376C4 -> 000F7426: F7 BF FE AF
- bl: 001376D8 -> 000F7440: F7 BF FE B2
found 0010 bytes for function own_led_on at 0x001376F8
- bl: 001376FC -> 00137674: F7 FF FF BA
found 0022 bytes for function own_toggle_led at 0x00137704
- bl: 00137706 -> 00137638: F7 FF FF 97
- bl: 00137714 -> 00137674: F7 FF FF AE
found 0044 bytes for function own_get_config_nibble at 0x0013771C
- bl: 00137732 -> 001068E0: F7 CF F8 D5
found 0074 bytes for function own_set_config_nibble at 0x00137748
- bl: 00137762 -> 001068E0: F7 CF F8 BD
- bl: 00137786 -> 001068B0: F7 CF F8 93
- bl: 0013778A -> 00087C1E: F7 50 FA 48
found 0036 bytes for function own_menu_table at 0x00137794
found 0040 bytes for function own_menu_hook at 0x001377B8
- bl: 001377BC -> 0013771C: F7 FF FF AE
5E0 ID# A1 | Set Menu #0
found 0012 bytes for function own_set_cx_x at 0x001377E0
- bl: 001377E6 -> 00137748: F7 FF FF AF
5E0 ID# A2 | Set Menu #1
found 0012 bytes for function own_set_cx_x at 0x001377EC
- bl: 001377F2 -> 00137748: F7 FF FF A9
5E0 ID# A3 | Set Menu #2
found 0012 bytes for function own_set_cx_x at 0x001377F8
- bl: 001377FE -> 00137748: F7 FF FF A3
5E0 ID# A4 | Set Menu #3
found 0012 bytes for function own_set_cx_x at 0x00137804
- bl: 0013780A -> 00137748: F7 FF FF 9D
5E0 ID# A5 | Set Menu #4
found 0012 bytes for function own_set_cx_x at 0x00137810
- bl: 00137816 -> 00137748: F7 FF FF 97
5E0 ID# A6 | Set Menu #5
found 0012 bytes for function own_set_cx_x at 0x0013781C
- bl: 00137822 -> 00137748: F7 FF FF 91
found 0084 bytes for function own_fade_led at 0x00137828
- bl: 0013782C -> 00137704: F7 FF FF 6A
- bl: 00137830 -> 00137618: F7 FF FE F2
- bl: 00137844 -> 00137618: F7 FF FE E8
- bl: 00137854 -> 00137618: F7 FF FE E0
- bl: 00137864 -> 00137704: F7 FF FF 4E
- bl: 00137870 -> 00137704: F7 FF FF 48
found 0092 bytes for function own_blink_led at 0x0013787C
- bl: 0013788C -> 000F7426: F7 BF FD CB
- bl: 0013789C -> 000F7440: F7 BF FD D0
- bl: 001378AC -> 000F7426: F7 BF FD BB
- bl: 001378C0 -> 000F7440: F7 BF FD BE
found 0040 bytes for function own_blink_hook at 0x001378D8
- bl: 001378DC -> 0013771C: F7 FF FF 1E
- bl: 001378E6 -> 00137638: F7 FF FE A7
- bl: 001378EE -> 0013787C: F7 FF FF C5
found 0044 bytes for function own_enable_hook at 0x00137900
- bl: 00137904 -> 0013771C: F7 FF FF 0A
- bl: 0013790E -> 00137638: F7 FF FE 93
- bl: 00137918 -> 00137674: F7 FF FE AC
5E0 ID# A7 | Rhythmic 0
found 0012 bytes for function own_set_cx_x at 0x0013792C
- bl: 00137932 -> 00137748: F7 FF FF 09
5E0 ID# A8 | Rhythmic 1
found 0012 bytes for function own_set_cx_x at 0x00137938
- bl: 0013793E -> 00137748: F7 FF FF 03
found 0032 bytes for function own_invert at 0x00137944
- bl: 0013794A -> 0013771C: F7 FF FE E7
- bl: 0013795A -> 00100286: F7 C8 FC 94
5E0 ID# A9 | Invert 0
found 0012 bytes for function own_set_cx_x at 0x00137964
- bl: 0013796A -> 00137748: F7 FF FE ED
5E0 ID# AA | Invert 1
found 0012 bytes for function own_set_cx_x at 0x00137970
- bl: 00137976 -> 00137748: F7 FF FE E7
found 0060 bytes for function own_delay_table at 0x0013797C
found 0052 bytes for function own_fade_hook_out at 0x001379B8
- bl: 001379BE -> 0013771C: F7 FF FE AD
- bl: 001379C4 -> 00137638: F7 FF FE 38
- bl: 001379D4 -> 00137828: F7 FF FF 28
- bl: 001379DA -> 00137674: F7 FF FE 4B
found 0052 bytes for function own_fade_hook_in at 0x001379EC
- bl: 001379F2 -> 0013771C: F7 FF FE 93
- bl: 001379F8 -> 00137638: F7 FF FE 1E
- bl: 00137A08 -> 00137828: F7 FF FF 0E
- bl: 00137A0E -> 00137674: F7 FF FE 31
5E0 ID# AB | Fade in val 0
found 0012 bytes for function own_set_cx_x at 0x00137A20
- bl: 00137A26 -> 00137748: F7 FF FE 8F
5E0 ID# AC | Fade in val 1
found 0012 bytes for function own_set_cx_x at 0x00137A2C
- bl: 00137A32 -> 00137748: F7 FF FE 89
5E0 ID# AD | Fade in val 2
found 0012 bytes for function own_set_cx_x at 0x00137A38
- bl: 00137A3E -> 00137748: F7 FF FE 83
5E0 ID# AE | Fade in val 3
found 0012 bytes for function own_set_cx_x at 0x00137A44
- bl: 00137A4A -> 00137748: F7 FF FE 7D
5E0 ID# AF | Fade in val 4
found 0012 bytes for function own_set_cx_x at 0x00137A50
- bl: 00137A56 -> 00137748: F7 FF FE 77
5E0 ID# B0 | Fade in val 5
found 0012 bytes for function own_set_cx_x at 0x00137A5C
- bl: 00137A62 -> 00137748: F7 FF FE 71
5E0 ID# B1 | Fade in val 6
found 0012 bytes for function own_set_cx_x at 0x00137A68
- bl: 00137A6E -> 00137748: F7 FF FE 6B
5E0 ID# B2 | Fade in val 7
found 0012 bytes for function own_set_cx_x at 0x00137A74
- bl: 00137A7A -> 00137748: F7 FF FE 65
5E0 ID# B3 | Fade in val 8
found 0012 bytes for function own_set_cx_x at 0x00137A80
- bl: 00137A86 -> 00137748: F7 FF FE 5F
5E0 ID# B4 | Fade in val 9
found 0012 bytes for function own_set_cx_x at 0x00137A8C
- bl: 00137A92 -> 00137748: F7 FF FE 59
5E0 ID# B5 | Fade out val 0
found 0012 bytes for function own_set_cx_x at 0x00137A98
- bl: 00137A9E -> 00137748: F7 FF FE 53
5E0 ID# B6 | Fade out val 1
found 0012 bytes for function own_set_cx_x at 0x00137AA4
- bl: 00137AAA -> 00137748: F7 FF FE 4D
5E0 ID# B7 | Fade out val 2
found 0012 bytes for function own_set_cx_x at 0x00137AB0
- bl: 00137AB6 -> 00137748: F7 FF FE 47
5E0 ID# B8 | Fade out val 3
found 0012 bytes for function own_set_cx_x at 0x00137ABC
- bl: 00137AC2 -> 00137748: F7 FF FE 41
5E0 ID# B9 | Fade out val 4
found 0012 bytes for function own_set_cx_x at 0x00137AC8
- bl: 00137ACE -> 00137748: F7 FF FE 3B
5E0 ID# BA | Fade out val 5
found 0012 bytes for function own_set_cx_x at 0x00137AD4
- bl: 00137ADA -> 00137748: F7 FF FE 35
5E0 ID# BB | Fade out val 6
found 0012 bytes for function own_set_cx_x at 0x00137AE0
- bl: 00137AE6 -> 00137748: F7 FF FE 2F
5E0 ID# BC | Fade out val 7
found 0012 bytes for function own_set_cx_x at 0x00137AEC
- bl: 00137AF2 -> 00137748: F7 FF FE 29
5E0 ID# BD | Fade out val 8
found 0012 bytes for function own_set_cx_x at 0x00137AF8
- bl: 00137AFE -> 00137748: F7 FF FE 23
5E0 ID# BE | Fade out val 9
found 0012 bytes for function own_set_cx_x at 0x00137B04
- bl: 00137B0A -> 00137748: F7 FF FE 1D
found 0064 bytes for function own_read_via_xbus at 0x00137B10
- bl: 00137B26 -> 0004483E: F7 0C FE 8A
- bl: 00137B48 -> 0004488E: F7 0C FE A1
found 0044 bytes for function own_write_via_xbus at 0x00137B50
- bl: 00137B64 -> 0004483E: F7 0C FE 6B
- bl: 00137B74 -> 0004488E: F7 0C FE 8B
found 0048 bytes for function own_get_ram at 0x00137B7C
- bl: 00137B8A -> 0008BF00: F7 54 F9 B9
- bl: 00137B96 -> 00108C84: F7 D1 F8 75
found 0048 bytes for function own_set_ram at 0x00137BAC
- bl: 00137BBA -> 0008BF00: F7 54 F9 A1
- bl: 00137BC6 -> 00108C84: F7 D1 F8 5D
found 0054 bytes for function own_write_ownram at 0x00137BDC
- bl: 00137BEC -> 00137BAC: F7 FF FF DE
- bl: 00137BFA -> 0004483E: F7 0C FE 20
- bl: 00137C0A -> 0004488E: F7 0C FE 40
found 0048 bytes for function own_read_ownram at 0x00137C14
- bl: 00137C20 -> 00137B7C: F7 FF FF AC
- bl: 00137C30 -> 0004483E: F7 0C FE 05
- bl: 00137C3C -> 0004488E: F7 0C FE 27
found 0062 bytes for function own_write_combi at 0x00137C44
- bl: 00137C56 -> 000F7426: F7 BF FB E6
- bl: 00137C60 -> 000F7440: F7 BF FB EE
- bl: 00137C6C -> 0004483E: F7 0C FD E7
- bl: 00137C7A -> 0004488E: F7 0C FE 08
found 0064 bytes for function own_write_dword at 0x00137C84
- bl: 00137CA6 -> 0004483E: F7 0C FD CA
- bl: 00137CB6 -> 0004488E: F7 0C FD EA
found 0068 bytes for function own_fbus_cmd at 0x00137CC4
- bl: 00137CCC -> 00137B10: F7 FF FF 20
- bl: 00137CD6 -> 00137B50: F7 FF FF 3B
- bl: 00137CE0 -> 00137C44: F7 FF FF B0
- bl: 00137CEA -> 00137C84: F7 FF FF CB
- bl: 00137CF4 -> 00137BDC: F7 FF FF 72
- bl: 00137CFE -> 00137C14: F7 FF FF 89
found 0016 bytes for function own_hook_temp at 0x00137D08
- bl: 00137D0A -> 00137CC4: F7 FF FF DB
found 0016 bytes for function own_delay at 0x00137D18
found 0032 bytes for function own_show_bitmap_data at 0x00137D28
- bl: 00137D40 -> 00137600: F7 FF FC 5E
found 0032 bytes for function own_scroll_in_bitmap at 0x00137D48
- bl: 00137D50 -> 00137618: F7 FF FC 62
- bl: 00137D5A -> 00137D28: F7 FF FF E5
found 0034 bytes for function own_scroll_in_bitmap_diag at 0x00137D68
- bl: 00137D70 -> 00137618: F7 FF FC 52
- bl: 00137D7A -> 00137D28: F7 FF FF D5
found 0070 bytes for function own_blink_bitmap at 0x00137D8C
- bl: 00137D98 -> 00137618: F7 FF FC 3E
- bl: 00137DAC -> 00137D28: F7 FF FF BC
- bl: 00137DBE -> 00137D28: F7 FF FF B3
found 0206 bytes for function own_graph_cmd at 0x00137DD4
- bl: 00137E18 -> 00137D48: F7 FF FF 96
- bl: 00137E22 -> 00137D68: F7 FF FF A1
- bl: 00137E2E -> 00137D8C: F7 FF FF AD
- bl: 00137E38 -> 00137D18: F7 FF FF 6E
- bl: 00137E52 -> 0007DCFC: F7 45 FF 53
- bl: 00137E68 -> 0007E8AC: F7 46 FD 20
- bl: 00137E6C -> 001375EC: F7 FF FB BE
- bl: 00137E82 -> 00137828: F7 FF FC D1
- bl: 00137E8A -> 00137704: F7 FF FC 3B
- bl: 00137E96 -> 00137D28: F7 FF FF 47
found 0056 bytes for function own_run_commands at 0x00137EA4
- bl: 00137EB4 -> 00137618: F7 FF FB B0
- bl: 00137EC8 -> 00137618: F7 FF FB A6
- bl: 00137ED2 -> 00137DD4: F7 FF FF 7F
found 0020 bytes for function own_draw_slideshow at 0x00137EDC
- bl: 00137EE2 -> 00137EA4: F7 FF FF DF
5E0 ID# BF | Run Slideshow
found 0064 bytes for function own_set_vibra at 0x00137EF0
- bl: 00137EFE -> 000F7426: F7 BF FA 92
- bl: 00137F14 -> 000F7426: F7 BF FA 87
- bl: 00137F22 -> 000F7440: F7 BF FA 8D
5E0 ID# C0 | Vibra Level 0/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F30
- bl: 00137F34 -> 00137EF0: F7 FF FF DC
5E0 ID# C1 | Vibra Level 2/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F3C
- bl: 00137F40 -> 00137EF0: F7 FF FF D6
5E0 ID# C2 | Vibra Level 4/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F48
- bl: 00137F4C -> 00137EF0: F7 FF FF D0
5E0 ID# C3 | Vibra Level 6/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F54
- bl: 00137F58 -> 00137EF0: F7 FF FF CA
5E0 ID# C4 | Vibra Level 8/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F60
- bl: 00137F64 -> 00137EF0: F7 FF FF C4
5E0 ID# C5 | Vibra Level 10/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F6C
- bl: 00137F70 -> 00137EF0: F7 FF FF BE
5E0 ID# C6 | Vibra Level 12/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F78
- bl: 00137F7C -> 00137EF0: F7 FF FF B8
5E0 ID# C7 | Vibra Level 14/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F84
- bl: 00137F88 -> 00137EF0: F7 FF FF B2
5E0 ID# C8 | Vibra Level 16/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F90
- bl: 00137F94 -> 00137EF0: F7 FF FF AC
5E0 ID# C9 | Vibra Level 18/14
found 0010 bytes for function own_5e0_vib_level at 0x00137F9C
- bl: 00137FA0 -> 00137EF0: F7 FF FF A6
found 0176 bytes for function own_run_checksum at 0x00137FA8
- bl: 00137FAC -> 00137B7C: F7 FF FD E6
- bl: 00137FBC -> 00137BAC: F7 FF FD F6
- bl: 00137FC4 -> 00137BAC: F7 FF FD F2
- bl: 00137FF0 -> 00137B7C: F7 FF FD C4
- bl: 00137FFE -> 00137BAC: F7 FF FD D5
- bl: 00138008 -> 00137BAC: F7 FF FD D0
- bl: 00138012 -> 00137B7C: F7 FF FD B3
- bl: 0013801C -> 00137BAC: F7 FF FD C6
- bl: 00138024 -> 00137B7C: F7 FF FD AA
- bl: 0013802C -> 00137B7C: F7 FF FD A6
- bl: 00138036 -> 00137B7C: F7 FF FD A1
found 0016 bytes for function own_hook_temp at 0x00138058
- bl: 0013805A -> 00137FA8: F7 FF FF A5

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Trying to find suitable code at 0x000F38B6
oh, cool.. a BL! => relocateable!
offset: 0x000F38B6
Relocatable code found at 0x000F38B6
- bl: 0013805E -> 000E2F48: F7 AA FF 73
- bl: 000F38B6 -> 00138058: F0 44 FB CF
this tricky thing was done =)

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

----------------------------------
doing the fade stuff...
----------------------------------

------ set_lights_1 ------
Trying to find suitable code at 0x000F718E
oh, cool.. a BL! => relocateable!
offset: 0x000F718E
Relocatable code found at 0x000F718E
- bl: 001379E0 -> 000F7426: F7 BF FD 21
- bl: 000F718E -> 001379B8: F0 40 FC 13
this tricky thing was done =)

------ set_lights_2 -------
Trying to find suitable code at 0x000F71A8
oh, cool.. a BL! => relocateable!
offset: 0x000F71A8
Relocatable code found at 0x000F71A8
- bl: 00137A14 -> 000F7426: F7 BF FD 07
- bl: 000F71A8 -> 001379EC: F0 40 FC 20
this tricky thing was done =)
- bl: 00096296 -> 001376F8: F0 A1 FA 2F

----------------------------------
doing the rhythmic stuff...
----------------------------------

------ play_tone -------
Trying to find suitable code at 0x000DF97A
oh, cool.. a BL! => relocateable!
offset: 0x000DF97A
Relocatable code found at 0x000DF97A
- bl: 001378F4 -> 00106F2C: F7 CF FB 1A
- bl: 000DF97A -> 001378D8: F0 57 FF AD
this tricky thing was done =)

------ tonetask -------
Trying to find suitable code at 0x000DFD1A
found an LDRB ... goood =)
found an CMP R,# ... goood =)
now we have all...
offset: 0x000DFD1A
Relocatable code found at 0x000DFD1A
- bl: 000DFD1A -> 00137900: F0 57 FD F1
this tricky thing was done =)

----------------------------------
doing the xbus hack...
----------------------------------
Trying to find suitable code at 0x000470A4
PUSH, wont touch this
found an MOV R,H ... goood =)
PUSH, wont touch this
ADD SP, # ... wont touch this
found an Logical Shift (LSx) ... goood =)
found an LDRB ... goood =)
now we have all...
offset: 0x000470AC
Relocatable code found at 0x000470AC
- bl: 000470AC -> 00137D08: F0 F0 FE 2C
this tricky thing was done =)

----------------------------------
doing the menu hack...
----------------------------------
Trying to find suitable code at 0x0007D214
oh, cool.. a BL! => relocateable!
offset: 0x0007D214
Relocatable code found at 0x0007D214
- bl: 001377D0 -> 0007CFFC: F7 45 FC 14
- bl: 0007D214 -> 001377B8: F0 BA FA D0
this tricky thing was done =)

----------------------------------
doing the display invert hack...
----------------------------------
- bl: 0007E3F6 -> 00137944: F0 B9 FA A5
- bl: 0007E416 -> 00137944: F0 B9 FA 95

----------------------------------
4873 bytes injected... got that trick ;)
4873 bytes estimated at start


-------------------------
------ SUMMARY ------
-------------------------
Offset for slide frame #1: hex: 00136D38 dec: 1273144
Offset for slide frame #2: hex: 00136F30 dec: 1273648
Offset for slide frame #3: hex: 00137128 dec: 1274152
Offset for slide frame #4: hex: 00137320 dec: 1274656


If you want to change the graphics, use the above offsets in poodriver
use for the bars width 6 and height 30

-------------------------
You didnt place an 0xDBDDFCAC at the start of an 0400 block

Could some one of you help me out, checking if there is something wrong with the original menustructure? And help me out in this menu creation task?

Thanks a lot

[Boemio]

Come on m8s... I'm a little new in this modding stuff and when i try to make a new menu using the commands in smarkies tutorial when i try to write the menu, i get an error:

c:\g3n0lite\menus.c:998 generating failed


I introduced this:


+ADD_TEXT Special
[0xDEADBEEF] [0x0000000] [0x0000000] (0x0175) (0x0387) (0x0000) (0x003E) (0x0000) (0x0024)
[0x00000000] (0x01) (0xc0) (0x0101) [0x00000000]
[0x00000000] [0x00000000] [0x00000000] (0x019B) (0x00DC) (0x0000) (0x0013) (0x0100) (0x001E)
[0x00325D18] [0x00000000] [0x0000002E] (0x0059) (0x05E0) (0x0000) (0x003A) (0x0400) (0x001A) Net monitor

Right after:


[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)

[Boemio]

Finally... I made the menu... Problem was in the language... WHen i used Inglish instead of my one (Portuguese) g3n0lite made the menu without major problems... I'm testing it now, to see if it works!

Lets keep our fingers crossed! It all goes wright, i will tranlate it to portuguese!

[Boemio]

Well i got Contact Service... :(

Any ideas?

[sander18]

i'm not sure but i understand you finaly have created your menu but when flashing you get contact service... my solution - "Fix all Checks"
P.S. sometimes i get contact service even when i done it... in that case i use quick set faid , set imei, reset sp and full fac settings (knok)

[mestrini]

Can you explain what you wanna achieve?
I read the patches log but can't see where's your reference to their ID's when generating new menus.

if you let us know what are your plans we can help better

--------------------------------------

Podes explicar o que queres fazer?
Eu li o relatório da aplicação dos patches mas não vi qualquer referência aos ID's das funções que queres injectar :-?
O que eu vi foi apenas a criação de um menu

Diz-me o que pretendes para eu poder ajudar :)

cumps

[Boemio]

Well lets give it another trye.

Mestrini:

Hi there... How are you?

I want to make the menus that alow me to access the ritmic leds and clock defenitions. I already patched the flashfile.

The result is posted on the second quote box i previouslly posted, and there you will find the ID's you are looking for. The one that allow to activate rythmic leds is ID# CD and to deactivate is ID# CC. The ones for the clock i didn't posted them, my fault (i forgot to post thsm) and i will post them in the end of this message.

Thanks for the help
-------------
Here i wrote everything in my natural language, portuguese)

Oi, tudo fino?

Bom, o que pretendo fazer é criar os menus que permitem configurar as luzes ritmicas e o screensaver com o relógio. Já fiz o patch ao ficheiro da flash do meu 8250.

O resultado está na 2ª caixa indicada, lá poderás ver o resultado das ID's que injectei, nomeadamente para activar as luzes ritmicas ID# CD e para desactivar ID# CC. As do relógio não as tinha posto... falha minha... São as que apresento a seguir.

Obrigado pela ajuda...


----------------------------------------------
processing:
'inserts an analog and digital fullscreen clock'
by 'krisha'
----------------------------------------------


this patches an analog and a digital fullscreen clock to your nokia cellular phone.
after a toggled time of no keypress the clock is activated.
the clock is disabled, while you are in the menu or you have a call.
it is also disabled when the netgraph or the dataviewer is toggled on.

create a own menu to toggle it. the IDs are printed while patching.
you can use your own backgrounds if u want to and switch between 4 different backgrounds!
you can change inphone the fonts for the digital clock via menu.

thx to:
katha, my girlfriend
g3gg0
digicroxx
nok5rev
nokdoc
and of cause all others i forgot!

krisha is reachable @: icq 93857183 & www.chrisi.de & [email protected]
please don't disturb me with shit. search a forum instead!!!
don't tell that this is your patch... it's copyrighted by me :)

now beginning to patch...


get_time:
located at: 0x000E0A00
[searching back to entry point]
- func_start: 000E09DC
- func_end: 000E0A74
----------------------------------

currentstate:
located at: 0x000CC06E
----------------------------------

2dec:
located at: 0x000EC1C4
----------------------------------
ldr at: 0007E3A8
ldr at: 0007E3AA
ldr at: 000CC072
own_get_ram:
FATAL: not found - sorry
----------------------------------
function name own_get_ram not found in flash, will create it
found 0048 bytes for function own_get_ram at 0x00136798
- bl: 001367A6 -> 0008BF00: F7 55 FB AB
- bl: 001367B2 -> 00108C84: F7 D2 FA 67
own_set_ram:
FATAL: not found - sorry
----------------------------------
function name own_set_ram not found in flash, will create it
found 0048 bytes for function own_set_ram at 0x001367C8
- bl: 001367D6 -> 0008BF00: F7 55 FB 93
- bl: 001367E2 -> 00108C84: F7 D2 FA 4F
own_get_config_nibble:
FATAL: not found - sorry
----------------------------------
function name own_get_config_nibble not found in flash, will create it
found 0044 bytes for function own_get_config_nibble at 0x001367F8
- bl: 0013680E -> 001068E0: F7 D0 F8 67
own_set_config_nibble:
FATAL: not found - sorry
----------------------------------
function name own_set_config_nibble not found in flash, will create it
found 0074 bytes for function own_set_config_nibble at 0x00136824
- bl: 0013683E -> 001068E0: F7 D0 F8 4F
- bl: 00136862 -> 001068B0: F7 D0 F8 25
- bl: 00136866 -> 00087C1E: F7 51 F9 DA

found 0052 bytes for function creditz at 0x00136870

own_get_keypress:
FATAL: not found - sorry
----------------------------------
function name own_get_keypress not found in flash, will create it

found 0032 bytes for function own_get_keypress at 0x001368A4
a own clear_lcd_ram 'cause i don't like nokia's original :)

own_clear_lcd:
FATAL: not found - sorry
----------------------------------
function name own_clear_lcd not found in flash, will create it

found 0036 bytes for function own_clear_lcd at 0x001368C4
- bl: 001368CE -> 00108C84: F7 D2 F9 D9
- bl: 001368DA -> 00108C84: F7 D2 F9 D3
creating the menu IDs you have to use...

-----------------------------------------
locating functions for the 5E0 table
-----------------------------------------
5e0_prt_action_1:
located at: 0x000F90C4
- func_start: 000F90C4
- func_end: 000F90D4
----------------------------------
5e0_prt_action_2:
located at: 0x000F93E0
- func_start: 000F93E0
- func_end: 000F93F0
----------------------------------
5e0_disp_val:
located at: 0x000F93F2
- func_start: 000F93F2
- func_end: 000F9400
----------------------------------
5e0_call_func:
located at: 0x000F90D6
- func_start: 000F90D6
- func_end: 000F93DE
----------------------------------
ldr at: 000F90C6
ldr at: 000F90CA
ldr at: 000F93E2
ldr at: 000F90F0
ldr at: 000F90FA
ldr at: 000F90FE
ldr at: 000F93F4


-----------------------------------------
-> The 5E0 Table has 1288 bytes, and 0xa0 entries in it

-----------------------------------------
# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
checking for space in PPM...
# - No CODE chunk found...


--------> 5e0 Table is at 0032C280

found 0012 bytes for function clock_off at 0x001368E8
- bl: 001368EE -> 00136824: F7 FF FF 99
5E0 ID# A1 | clock_off

found 0012 bytes for function clock_10s at 0x001368F4
- bl: 001368FA -> 00136824: F7 FF FF 93
5E0 ID# A2 | clock_10s

found 0012 bytes for function clock_20s at 0x00136900
- bl: 00136906 -> 00136824: F7 FF FF 8D
5E0 ID# A3 | clock_20s

found 0012 bytes for function clock_30s at 0x0013690C
- bl: 00136912 -> 00136824: F7 FF FF 87
5E0 ID# A4 | clock_30s

found 0012 bytes for function clock_1min at 0x00136918
- bl: 0013691E -> 00136824: F7 FF FF 81
5E0 ID# A5 | clock_1min

found 0012 bytes for function clock_2min at 0x00136924
- bl: 0013692A -> 00136824: F7 FF FF 7B
5E0 ID# A6 | clock_2min

found 0012 bytes for function clock_5min at 0x00136930
- bl: 00136936 -> 00136824: F7 FF FF 75
5E0 ID# A7 | clock_5min

found 0012 bytes for function clock_10min at 0x0013693C
- bl: 00136942 -> 00136824: F7 FF FF 6F
5E0 ID# A8 | clock_10min

found 0012 bytes for function clock_20min at 0x00136948
- bl: 0013694E -> 00136824: F7 FF FF 69
5E0 ID# A9 | clock_20min

found 0012 bytes for function clock_30min at 0x00136954
- bl: 0013695A -> 00136824: F7 FF FF 63
5E0 ID# AA | clock_30min

found 0020 bytes for function clock_bg1 at 0x00136960
- bl: 00136964 -> 001367F8: F7 FF FF 48
- bl: 0013696E -> 00136824: F7 FF FF 59
5E0 ID# AB | clock_bg1

found 0024 bytes for function clock_bg2 at 0x00136974
- bl: 00136978 -> 001367F8: F7 FF FF 3E
- bl: 00136986 -> 00136824: F7 FF FF 4D
5E0 ID# AC | clock_bg2

found 0024 bytes for function clock_bg3 at 0x0013698C
- bl: 00136990 -> 001367F8: F7 FF FF 32
- bl: 0013699E -> 00136824: F7 FF FF 41
5E0 ID# AD | clock_bg3

found 0024 bytes for function clock_bg4 at 0x001369A4
- bl: 001369A8 -> 001367F8: F7 FF FF 26
- bl: 001369B6 -> 00136824: F7 FF FF 35
5E0 ID# AE | clock_bg4

found 0020 bytes for function menu_font1 at 0x001369BC
- bl: 001369C0 -> 001367F8: F7 FF FF 1A
- bl: 001369CA -> 00136824: F7 FF FF 2B
5E0 ID# AF | menu_font1

found 0024 bytes for function menu_font2 at 0x001369D0
- bl: 001369D4 -> 001367F8: F7 FF FF 10
- bl: 001369E2 -> 00136824: F7 FF FF 1F
5E0 ID# B0 | menu_font2

found 0024 bytes for function menu_font3 at 0x001369E8
- bl: 001369EC -> 001367F8: F7 FF FF 04
- bl: 001369FA -> 00136824: F7 FF FF 13
5E0 ID# B1 | menu_font3

found 0024 bytes for function menu_font4 at 0x00136A00
- bl: 00136A04 -> 001367F8: F7 FF FE F8
- bl: 00136A12 -> 00136824: F7 FF FF 07
5E0 ID# B2 | menu_font4

found 0020 bytes for function clock_digital at 0x00136A18
- bl: 00136A1C -> 001367F8: F7 FF FE EC
- bl: 00136A26 -> 00136824: F7 FF FE FD
5E0 ID# B3 | clock_digital

found 0020 bytes for function clock_analog at 0x00136A2C
- bl: 00136A30 -> 001367F8: F7 FF FE E2
- bl: 00136A3A -> 00136824: F7 FF FE F3
5E0 ID# B4 | clock_analog

found 0028 bytes for function show_creditz at 0x00136A40
- bl: 00136A42 -> 001368A4: F7 FF FF 2F
- bl: 00136A4A -> 0007EFD8: F7 48 FA C5
- bl: 00136A52 -> 000F2028: F7 BB FA E9
5E0 ID# B5 | show_creditz
sinus routine using sinus table, 'cause arm chips doesn't like floats

sinus:
FATAL: not found - sorry
----------------------------------
function name sinus not found in flash, will create it

found 0200 bytes for function sinus at 0x00136A5C

found 0032 bytes for function bmp2lcdram at 0x00136B24
- bl: 00136B3C -> 0007E1F2: F7 47 FB 59

found 0052 bytes for function draw_number_of_font at 0x00136B44
- bl: 00136B66 -> 00136B24: F7 FF FF DD
now we need 4 fine background images for the clock. if u want to change, here are the addresses
thx to noscript, for the background 1 & 2
background 1:

found 0504 bytes for function clockbg1_2 at 0x00136B78
background 2:

found 0504 bytes for function clockbg2_2 at 0x00136D70
background 3:

found 0504 bytes for function clockbg3 at 0x00136F68
background 4:

found 0504 bytes for function clockbg4 at 0x00137160

found 0012 bytes for function clockbginfo1 at 0x00137358

found 0012 bytes for function clockbginfo2 at 0x00137364

found 0012 bytes for function clockbginfo3 at 0x00137370

found 0012 bytes for function clockbginfo4 at 0x0013737C
if you want to change the fonts. create numbers 0 - 9 with 16x24 pixel
and the colon with 10x24 pixel and put the pics in sequence at the following addresses!
every number must have 50 bytes. fill up with 0x00's...
font one:

found 0550 bytes for function digitfont1 at 0x00137388
font two:

found 0550 bytes for function digitfont2 at 0x001375B0
font three:

found 0550 bytes for function digitfont3 at 0x001377D8
font four:

found 0550 bytes for function digitfont4 at 0x00137A00

found 0256 bytes for function show_clock_analog at 0x00137C28
- bl: 00137C2A -> 00136B24: F7 FE FF 7B
- bl: 00137C2E -> 000E09DC: F7 A8 FE D5
- bl: 00137C42 -> 00106F2C: F7 CF F9 73
- bl: 00137C4A -> 00106F2C: F7 CF F9 6F
- bl: 00137C52 -> 00106F2C: F7 CF F9 6B
- bl: 00137C68 -> 00136A5C: F7 FE FE F8
- bl: 00137C84 -> 0007E8AC: F7 46 FE 12
- bl: 00137C9C -> 00136A5C: F7 FE FE DE
- bl: 00137CB8 -> 0007E8AC: F7 46 FD F8
- bl: 00137CD4 -> 00136A5C: F7 FE FE C2
- bl: 00137CFE -> 0007E8AC: F7 46 FD D5
- bl: 00137D0C -> 0007E37C: F7 46 FB 36

found 0148 bytes for function show_clock_digital at 0x00137D28
- bl: 00137D30 -> 000E09DC: F7 A8 FE 54
- bl: 00137D44 -> 00106F2C: F7 CF F8 F2
- bl: 00137D4C -> 00106F2C: F7 CF F8 EE
- bl: 00137D54 -> 00106F2C: F7 CF F8 EA
- bl: 00137D5E -> 000EC1C4: F7 B4 FA 31
- bl: 00137D62 -> 001368C4: F7 FE FD AF
- bl: 00137D70 -> 00136B44: F7 FE FE E8
- bl: 00137D7A -> 00136B44: F7 FE FE E3
- bl: 00137D84 -> 00136B44: F7 FE FE DE
- bl: 00137D8C -> 000EC1C4: F7 B4 FA 1A
- bl: 00137D96 -> 00136B44: F7 FE FE D5
- bl: 00137DA0 -> 00136B44: F7 FE FE D0
- bl: 00137DA8 -> 0007E37C: F7 46 FA E8

found 0244 bytes for function clockmain at 0x00137DBC
- bl: 00137DC0 -> 001367F8: F7 FE FD 1A
- bl: 00137DCC -> 00136798: F7 FE FC E4
- bl: 00137DD6 -> 0008BF00: F7 54 F8 93
- bl: 00137DE0 -> 00108C84: F7 D0 FF 50
- bl: 00137DE8 -> 001367C8: F7 FE FC EE
- bl: 00137DF0 -> 001368A4: F7 FE FD 58
- bl: 00137DF8 -> 000E09DC: F7 A8 FD F0
- bl: 00137DFE -> 000E09DC: F7 A8 FD ED
- bl: 00137E1E -> 00136798: F7 FE FC BB
- bl: 00137E2E -> 00136798: F7 FE FC B3
- bl: 00137E4A -> 001367F8: F7 FE FC D5
- bl: 00137E58 -> 001367F8: F7 FE FC CE
- bl: 00137E6C -> 00137C28: F7 FF FE DC
- bl: 00137E74 -> 001367F8: F7 FE FC C0
- bl: 00137E86 -> 00137D28: F7 FF FF 4F

found 0012 bytes for function task0hook at 0x00137EB0
- bl: 00137EB6 -> 00137DBC: F7 FF FF 81
Trying to find suitable code at 0x000F38B6
oh, cool.. a BL! => relocateable!
offset: 0x000F38B6
Relocatable code found at 0x000F38B6
- bl: 00137EB2 -> 000E2F48: F7 AB F8 49
- bl: 000F38B6 -> 00137EB0: F0 44 FA FB
this tricky thing was done =)
if u like me or my patch tell me & spend some money *ggg*
greetz

[Boemio]

Well it seem that there is something wrong with thw menu! I fixed all checks and flashed it... And, when i try to access the menus, they don't work, and the phone is always reseting... :'(

Any one has ideas?

I think i'm going to start all over again, patching and creating the menus acording to the info i'm getting!

[Boemio]

Well started all over again and created the menu... As i suspected, i can't open almost any menu, the only one i can open is the names one. What's wrong, can any one point me a direction?

I only created the a Special menu with a sub-menu to enable/disable rhytmic leds.

Here are the ID# used by it:


5E0 ID# A3 | Rhythmic 0
found 0012 bytes for function own_set_cx_x at 0x00137C64
- bl: 00137C6A -> 00137B14: F7 FF FF 53
5E0 ID# A4 | Rhythmic 1
found 0012 bytes for function own_set_cx_x at 0x00137C70
- bl: 00137C76 -> 00137B14: F7 FF FF 4D


And here is my new menu structure:


# oh, seems to be an DEAD MCU check hack
# greetz to NokDoc =)
# ... okay will search the PPM via the old routines
# PPM found located (via offset table) at offset 00140000
# using 'ENGL' lang chunk
#

# ---------------------------------------------

# FLS : 1900544 bytes

# with PPM at 00140000

# offset: 0011FD08

# ---------------------------------------------

#

# checking given ROOT-entry..

# ... seems to be okay
#

#

[0x00340040] (0x0B) (0x10) (0x0101) [0x0013086E]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00338008] [0x00000000] [0x00340160] (0x0175) (0x0387) (0x0000) (0x003E) (0x0000) (0x0024) Special
[0x0034016C] (0x01) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x019B) (0x00DC) (0x0000) (0x0013) (0x0100) (0x001E)
[0x003394D4] [0x00000000] [0x0034019C] (0x0175) (0x0387) (0x0000) (0x003E) (0x0000) (0x0024) Rhytmic Led's
[0x003401A8] (0x02) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x019B) (0x00DC) (0x0000) (0x0013) (0x0100) (0x001E)
[0x0033A9C4] [0x00000000] [0x000000A3] (0x0175) (0x05E0) (0x0000) (0x003E) (0x2800) (0x0024) off
[0x0033A9CE] [0x00000000] [0x000000A4] (0x0175) (0x05E0) (0x0000) (0x003E) (0x1300) (0x0024) on
# --------------
# --------------
[0x00325D18] [0x00000000] [0x0000002E] (0x0059) (0x05E0) (0x0000) (0x003A) (0x0400) (0x001A) Net monitor
[0x00326732] [0x00326BCD] [0x003401F0] (0x004E) (0x0387) (0x0000) (0x003A) (0x0000) (0x0003) Message sent
[0x003401FC] (0x0A) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326732] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Message sent
[0x00326819] [0x00326B49] [0x0000001F] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Clear screen
[0x003267E6] [0x00326BD9] [0x0000001C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Centre number:
[0x00326837] [0x00326BDF] [0x0000001B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Message settings
[0x00325DBD] [0x00326C06] [0x0000009C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Default profile
[0x0032632D] [0x00000000] [0x0000008C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Picture %N
[0x00326834] [0x00326B79] [0x00000021] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Save
[0x003260B1] [0x00326B22] [0x00000026] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Topics
[0x0032628E] [0x00326B4F] [0x00340304] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Code error
[0x00340310] (0x02) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0100) (0x001A)
[0x003263F3] [0x00000000] [0x00000048] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Listen to voice messages
[0x003263F6] [0x00000000] [0x00000049] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Fax and data
# --------------
[0x00326A50] [0x00326BF4] [0x00000024] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Message: %U
[0x00326A80] [0x00326BFD] [0x00340358] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) New voice message
[0x00340364] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x003263F0] [0x00326B16] [0x0000002D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) On
[0x00326A77] [0x00326BFA] [0x0000002B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Searching
# --------------
# --------------
[0x0032600F] [0x00326B0A] [0x003403AC] (0x004F) (0x0387) (0x0000) (0x003A) (0x0000) (0x0004) Call in progress
[0x003403B8] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032600F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Call in progress
[0x00326459] [0x00326B7C] [0x00000000] (0x012D) (0x0282) (0x0000) (0x004E) (0x0400) (0x001A) No space for new messages
[0x00326633] [0x00326BB2] [0x00000000] (0x012D) (0x0281) (0x0000) (0x004E) (0x0400) (0x001A) Dialled numbers
[0x00326630] [0x00326BAF] [0x00000000] (0x012D) (0x0280) (0x0000) (0x004E) (0x0400) (0x001A) Time is set
[0x00326441] [0x00326B4C] [0x00340478] (0x012D) (0x0387) (0x0000) (0x004E) (0x2000) (0x001A) Erase all
[0x00340484] (0x04) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00326279] [0x00000000] [0x00000011] (0x012D) (0x05E0) (0x0000) (0x003E) (0x3000) (0x001A) End all calls
[0x00326282] [0x00000000] [0x00000006] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Dialled
[0x0032627F] [0x00000000] [0x00000004] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) SIM card
[0x00326288] [0x00000000] [0x00000005] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Phone
# --------------
[0x0032602A] [0x00326B13] [0x00000014] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Received calls' duration
[0x00325FFD] [0x00326B01] [0x00000017] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Call cost limit
[0x00326000] [0x00326B04] [0x003404FC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Show call costs
[0x00340508] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Show call costs
[0x00325FFA] [0x00326B25] [0x0000001A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Limit:
[0x003261FE] [0x00326B34] [0x00000019] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Units
# --------------
# --------------
[0x0032646E] [0x00326B7F] [0x0000006A] (0x0051) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0005) Activate
[0x0032672C] [0x00326BCA] [0x00340550] (0x0052) (0x0387) (0x0000) (0x003A) (0x0000) (0x0006) Service Nos.
[0x0034055C] (0x09) (0x80) (0x0101) [0x00130878]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325E53] [0x00326AEC] [0x00000064] (0x012D) (0x05E0) (0x0000) (0x004E) (0x2800) (0x001A) Activate
[0x00326609] [0x00326BAC] [0x00000066] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) am
[0x00325DD8] [0x00326C09] [0x0034064C] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) (empty)
[0x00340658] (0x0A) (0x80) (0x0101) [0x00130870]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00326672] [0x00326BB5] [0x00000051] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Ringing
[0x00326675] [0x00326BB8] [0x0000000D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Incoming call alert
[0x0032667B] [0x00326BBB] [0x0000000C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Type %N
[0x0032614D] [0x00000000] [0x00000023] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) My No. sent when I answer
[0x00326A62] [0x00326BF7] [0x00340760] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Off
[0x0034076C] (0x02) (0xC0) (0x8AAE) [0x00000000]
# --------------
[0x00326A62] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Off
[0x00326A5C] [0x00000000] [0x00000001] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) Verify new PIN2 code:
[0x00326A5F] [0x00000000] [0x00000000] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) On
# --------------
[0x0032688E] [0x00326BE8] [0x00000077] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Message not sent this time
[0x003263BA] [0x00326B6A] [0x0000000B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) %0N-June-%1S %2S:%3S:%4S
[0x00326ADA] [0x00326C00] [0x003407B4] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Welcome note saved
[0x003407C0] (0x02) (0xC0) (0x8AA7) [0x00000000]
# --------------
[0x00326ADA] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Welcome note saved
[0x00326AE3] [0x00000000] [0x00000004] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00326AE0] [0x00000000] [0x000000FF] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Warning tones
# --------------
[0x003266F9] [0x00326BBE] [0x0000008A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Invalid char. for SIM card
[0x00326468] [0x00000000] [0x0000006C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Personalise
# --------------
[0x00325DAE] [0x00326C03] [0x00340808] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) English
[0x00340814] (0x02) (0xC0) (0x0101) [0x00130876]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DB7] [0x00000000] [0x0034085C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Handsfree
[0x00340868] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002C] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Headset
[0x00325EA4] [0x00326AF5] [0x003408B0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Aug-%1S %2S:%3S:%4S
[0x003408BC] (0x02) (0xC0) (0x8A2C) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Aug-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Automatic answer
# --------------
# --------------
[0x00325DB4] [0x00000000] [0x00340904] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Active profile
[0x00340910] (0x03) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002B] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Headset
[0x00325EA4] [0x00326AF5] [0x00340970] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Aug-%1S %2S:%3S:%4S
[0x0034097C] (0x02) (0xC0) (0x8A2B) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Aug-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Automatic answer
# --------------
[0x003263E4] [0x00326B70] [0x003409C4] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Dialled numbers erased
[0x003409D0] (0x02) (0xC0) (0x8A2A) [0x00000000]
# --------------
[0x003263E4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Dialled numbers erased
[0x003263E7] [0x00000000] [0x00000001] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) Lights
[0x003263EA] [0x00000000] [0x00000000] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) On
# --------------
# --------------
# --------------
[0x003264BF] [0x00326B82] [0x00340A18] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Automatic update enabled
[0x00340A24] (0x03) (0xC0) (0x0A2D) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0000) (0x0000) (0x001A)
[0x003264C8] [0x003264BC] [0x00000002] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Confirm first
[0x003264C5] [0x003264B9] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Automatic update disabled
[0x003264CB] [0x003264C2] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) On
# --------------
[0x00326021] [0x00326B10] [0x00340A84] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) On
[0x00340A90] (0x06) (0x80) (0x0101) [0x00130874]
# --------------
[0x00326021] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) On
[0x00325E8C] [0x00326AF2] [0x00340B38] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Answer
[0x00340B44] (0x02) (0xC0) (0x8A16) [0x00000000]
# --------------
[0x00325E8C] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Answer
[0x00325E92] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00325E8F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Anykey answer
# --------------
[0x00326018] [0x00326B0D] [0x00340B8C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Call %N
[0x00340B98] (0x02) (0xC0) (0x0A19) [0x00000000]
# --------------
[0x00326018] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Call %N
[0x0032601E] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x0032601B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Automatic redial
# --------------
[0x0032653A] [0x00326B97] [0x00340BE0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) On
[0x00340BEC] (0x02) (0xC0) (0x0A1A) [0x00000000]
# --------------
[0x0032653A] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) On
[0x00326537] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00326534] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) 1 missed call
# --------------
[0x00326036] [0x00326B19] [0x00000000] (0x012D) (0x0BC6) (0x0000) (0x004E) (0x0000) (0x001A) Call waiting cancelled
[0x00326126] [0x00326B2E] [0x00340C34] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Number of caller is not shown
[0x00340C40] (0x03) (0xC0) (0x8A1B) [0x00000000]
# --------------
[0x00326126] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Number of caller is not shown
[0x00326114] [0x00000000] [0x00000000] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Default
[0x0032611A] [0x00000000] [0x00000001] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00326117] [0x00000000] [0x00000002] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Set by network
# --------------
[0x00325E80] [0x00326AEF] [0x0000004C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Change the phone line?
# --------------
[0x003265B5] [0x00326BA0] [0x00340CA0] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) Phone number:
[0x00340CAC] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x003265B5] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Phone number:
[0x003263D8] [0x00326B6D] [0x0000000A] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) English selected
[0x00326405] [0x00326B73] [0x00340D54] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-May-%1S %2S:%3S:%4S
[0x00340D60] (0x02) (0xC0) (0x0A1C) [0x00000000]
# --------------
[0x00326405] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-May-%1S %2S:%3S:%4S
[0x0032640B] [0x00000000] [0x00000001] (0x012D) (0x0EDC) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00326408] [0x00000000] [0x00000000] (0x012D) (0x0EDD) (0x0000) (0x003E) (0x1300) (0x001A) Cell info display
# --------------
[0x0032676B] [0x00326BD3] [0x00340DA8] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) SIM services
[0x00340DB4] (0x02) (0xC0) (0x8A26) [0x00000000]
# --------------
[0x0032676B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) SIM services
[0x00326771] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Not asked
[0x0032676E] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Confirm SIM service actions
# --------------
[0x00326591] [0x00326B9A] [0x00000000] (0x012D) (0x0294) (0x0000) (0x004E) (0x0400) (0x001A) Send graphic
[0x00326A4A] [0x00326BF1] [0x00000059] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Number busy
[0x003269A2] [0x00326BEE] [0x0000003C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Switching profile
# --------------
[0x0032671D] [0x00326BC7] [0x00340DFC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Phone
[0x00340E08] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032671D] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Phone
[0x003265D6] [0x00326BA9] [0x00000031] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) PIN code changed
[0x00325FF4] [0x00326AFE] [0x00340EB0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Note: call barrings
[0x00340EBC] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x00325FF4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Note: call barrings
[0x00326504] [0x00326B91] [0x00000000] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) No phone number
[0x003264F5] [0x00326B8E] [0x00000001] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) International except to home country
[0x003264F2] [0x00326B8B] [0x00000002] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Incoming calls
[0x003264EF] [0x00326B88] [0x00000003] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Incoming calls when abroad
[0x003264EC] [0x00326B85] [0x00000004] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Call cost limit reached
[0x0032603C] [0x00326B1C] [0x00000005] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0400) (0x001A) Call waiting not active
# --------------
[0x00326444] [0x00326B52] [0x0000004A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Erase recent call lists
[0x00326132] [0x00326B31] [0x00340F64] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Own No. could not be sent
[0x00340F70] (0x03) (0xC0) (0x4A82) [0x00000000]
# --------------
[0x00326132] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Own No. could not be sent
[0x003261E9] [0x00000000] [0x00000000] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) Number not in closed group
[0x003261EF] [0x00000000] [0x00000001] (0x012D) (0x0A78) (0x0000) (0x003E) (0x1000) (0x001A) Value too large
[0x003261F5] [0x00000000] [0x00000002] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) Closed group %N in use
# --------------
[0x00326711] [0x00326BC4] [0x0000004E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Verify new security code:
[0x003260B4] [0x00326B2B] [0x00340FD0] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Info service
[0x00340FDC] (0x04) (0x80) (0x0101) [0x00000000]
# --------------
[0x003260B4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Info service
[0x00326708] [0x00326BC1] [0x00000009] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Security code changed
[0x003265D0] [0x00326BA6] [0x00000030] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Enter PUK2 code:
[0x003265C4] [0x00326BA3] [0x00000033] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) PIN2 code blocked
[0x003265A3] [0x00326B9D] [0x0000003E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Password error
# --------------
# --------------
[0x0032644D] [0x00326B76] [0x00000010] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) One by one
# --------------
[0x00326003] [0x00326B07] [0x00341054] (0x0050) (0x0387) (0x0000) (0x003A) (0x0000) (0x0007) Call cost settings
[0x00341060] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326003] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Call cost settings
[0x00326225] [0x00326B37] [0x00000000] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert active
[0x0032623D] [0x00326B46] [0x00000001] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert when phone off or no coverage
[0x00326237] [0x00326B40] [0x00000002] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert not active
[0x0032623A] [0x00326B43] [0x00000003] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert if not answered
[0x00326231] [0x00326B3D] [0x00000005] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert de- activated
[0x0032622B] [0x00326B3A] [0x00000006] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert cancelled
[0x0032603F] [0x00326B1F] [0x00000004] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0400) (0x001A) Cancel all barrings
# --------------
[0x003262D9] [0x00326B55] [0x0000006D] (0x0054) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0008) Memory
[0x00325F34] [0x00326AF8] [0x00000068] (0x0055) (0x05E0) (0x0000) (0x003A) (0x0400) (0x0009) Subtract
[0x00325F40] [0x00326AFB] [0x00000078] (0x0053) (0x05E0) (0x0000) (0x003A) (0x0400) (0x000A) Check the calendar
[0x00326381] [0x00326B94] [0x00000000] (0x0057) (0x0CB2) (0x0000) (0x003A) (0x0500) (0x000B) Check unit price and limit
# --------------


Thanks a lot...

[mestrini]

[0x0034016C] (0x01) (0xC0) (0x0101) [0x00000000]


This is the fourth line. try to replace the 'C' for an '8' beacuse of the type of menu you have


[0x00000000] [0x00000000] [0x00000000] (0x019B) (0x00DC) (0x0000) (0x0013) (0x0100) (0x001E)
[0x0033A9C4] [0x00000000] [0x000000A3] (0x0175) (0x05E0) (0x0000) (0x003E) (0x2800) (0x0024) off
[0x0033A9CE] [0x00000000] [0x000000A4] (0x0175) (0x05E0) (0x0000) (0x003E) (0x1300) (0x0024) on

keep both functions with 0x1300 (this means that when you accept the option the 'Done' message will appear)

Change 0x003E for something like 0x004E (this means that when you press the cancel button in that menu you jump to the previous one and not to the root like 3A)

The yellow values are the ID's of the animation and the number 24 comes from the 3310 flash where you get an empty screen (no animation). For looking through your menu structure looks like the empty value is 1A, which i think you should switch. The value in 1E (special menu) is even higher so i think is the reason for freezing or crashing. Use 1A always

Hope it helps a bit

-----------------------

Desculpa não traduzir mas o texto é longo e não tenho muito tempo

cumps :)

[Boemio]

Well, that might be part of the problem... I corrected those items you said, and flashed. The problem remains... So i started again and this time, i only created the Menu Special,without any submenu... The Menu structure is here, and this time i had also the same problem. :-o So, The bug must be just in the beginning of the menu structure...

I'm starting to desperate!

Please, help..... :( :-?

# with PPM at 00140000

# offset: 0011FD08

# ---------------------------------------------

#

# checking given ROOT-entry..

# ... seems to be okay
#

#

[0x0033B1B0] (0x0B) (0x10) (0x0101) [0x0013086E]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00338008] [0x00000000] [0x0033B2D0] (0x0175) (0x0387) (0x0000) (0x003E) (0x0000) (0x001E) Special
[0x0033B2DC] (0x00) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x019B) (0x00DC) (0x0000) (0x0013) (0x0100) (0x001E)
# --------------
[0x00326732] [0x00326BCD] [0x0033B2F4] (0x004E) (0x0387) (0x0000) (0x003A) (0x0000) (0x0003) Message sent
[0x0033B300] (0x0A) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326732] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Message sent
[0x00326819] [0x00326B49] [0x0000001F] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Clear screen
[0x003267E6] [0x00326BD9] [0x0000001C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Centre number:
[0x00326837] [0x00326BDF] [0x0000001B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Message settings
[0x00325DBD] [0x00326C06] [0x0000009C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Default profile
[0x0032632D] [0x00000000] [0x0000008C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Picture %N
[0x00326834] [0x00326B79] [0x00000021] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Save
[0x003260B1] [0x00326B22] [0x00000026] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Topics
[0x0032628E] [0x00326B4F] [0x0033B408] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Code error
[0x0033B414] (0x02) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0100) (0x001A)
[0x003263F3] [0x00000000] [0x00000048] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Listen to voice messages
[0x003263F6] [0x00000000] [0x00000049] (0x012D) (0x05E0) (0x0000) (0x0025) (0x0400) (0x001A) Fax and data
# --------------
[0x00326A50] [0x00326BF4] [0x00000024] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Message: %U
[0x00326A80] [0x00326BFD] [0x0033B45C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) New voice message
[0x0033B468] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x003263F0] [0x00326B16] [0x0000002D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) On
[0x00326A77] [0x00326BFA] [0x0000002B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Searching
# --------------
# --------------
[0x0032600F] [0x00326B0A] [0x0033B4B0] (0x004F) (0x0387) (0x0000) (0x003A) (0x0000) (0x0004) Call in progress
[0x0033B4BC] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032600F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Call in progress
[0x00326459] [0x00326B7C] [0x00000000] (0x012D) (0x0282) (0x0000) (0x004E) (0x0400) (0x001A) No space for new messages
[0x00326633] [0x00326BB2] [0x00000000] (0x012D) (0x0281) (0x0000) (0x004E) (0x0400) (0x001A) Dialled numbers
[0x00326630] [0x00326BAF] [0x00000000] (0x012D) (0x0280) (0x0000) (0x004E) (0x0400) (0x001A) Time is set
[0x00326441] [0x00326B4C] [0x0033B57C] (0x012D) (0x0387) (0x0000) (0x004E) (0x2000) (0x001A) Erase all
[0x0033B588] (0x04) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00326279] [0x00000000] [0x00000011] (0x012D) (0x05E0) (0x0000) (0x003E) (0x3000) (0x001A) End all calls
[0x00326282] [0x00000000] [0x00000006] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Dialled
[0x0032627F] [0x00000000] [0x00000004] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) SIM card
[0x00326288] [0x00000000] [0x00000005] (0x012D) (0x02B2) (0x0000) (0x003E) (0x1000) (0x001A) Phone
# --------------
[0x0032602A] [0x00326B13] [0x00000014] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Received calls' duration
[0x00325FFD] [0x00326B01] [0x00000017] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0000) (0x001A) Call cost limit
[0x00326000] [0x00326B04] [0x0033B600] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Show call costs
[0x0033B60C] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Show call costs
[0x00325FFA] [0x00326B25] [0x0000001A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Limit:
[0x003261FE] [0x00326B34] [0x00000019] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Units
# --------------
# --------------
[0x0032646E] [0x00326B7F] [0x0000006A] (0x0051) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0005) Activate
[0x0032672C] [0x00326BCA] [0x0033B654] (0x0052) (0x0387) (0x0000) (0x003A) (0x0000) (0x0006) Service Nos.
[0x0033B660] (0x09) (0x80) (0x0101) [0x00130878]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325E53] [0x00326AEC] [0x00000064] (0x012D) (0x05E0) (0x0000) (0x004E) (0x2800) (0x001A) Activate
[0x00326609] [0x00326BAC] [0x00000066] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) am
[0x00325DD8] [0x00326C09] [0x0033B750] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) (empty)
[0x0033B75C] (0x0A) (0x80) (0x0101) [0x00130870]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00326672] [0x00326BB5] [0x00000051] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Ringing
[0x00326675] [0x00326BB8] [0x0000000D] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Incoming call alert
[0x0032667B] [0x00326BBB] [0x0000000C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Type %N
[0x0032614D] [0x00000000] [0x00000023] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) My No. sent when I answer
[0x00326A62] [0x00326BF7] [0x0033B864] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Off
[0x0033B870] (0x02) (0xC0) (0x8AAE) [0x00000000]
# --------------
[0x00326A62] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Off
[0x00326A5C] [0x00000000] [0x00000001] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) Verify new PIN2 code:
[0x00326A5F] [0x00000000] [0x00000000] (0x012D) (0x1A30) (0x0000) (0x003E) (0x1300) (0x001A) On
# --------------
[0x0032688E] [0x00326BE8] [0x00000077] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Message not sent this time
[0x003263BA] [0x00326B6A] [0x0000000B] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) %0N-June-%1S %2S:%3S:%4S
[0x00326ADA] [0x00326C00] [0x0033B8B8] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Welcome note saved
[0x0033B8C4] (0x02) (0xC0) (0x8AA7) [0x00000000]
# --------------
[0x00326ADA] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Welcome note saved
[0x00326AE3] [0x00000000] [0x00000004] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00326AE0] [0x00000000] [0x000000FF] (0x012D) (0x1A2E) (0x0000) (0x003E) (0x1300) (0x001A) Warning tones
# --------------
[0x003266F9] [0x00326BBE] [0x0000008A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Invalid char. for SIM card
[0x00326468] [0x00000000] [0x0000006C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Personalise
# --------------
[0x00325DAE] [0x00326C03] [0x0033B90C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) English
[0x0033B918] (0x02) (0xC0) (0x0101) [0x00130876]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DB7] [0x00000000] [0x0033B960] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Handsfree
[0x0033B96C] (0x02) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002C] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Headset
[0x00325EA4] [0x00326AF5] [0x0033B9B4] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Aug-%1S %2S:%3S:%4S
[0x0033B9C0] (0x02) (0xC0) (0x8A2C) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Aug-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Automatic answer
# --------------
# --------------
[0x00325DB4] [0x00000000] [0x0033BA08] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Active profile
[0x0033BA14] (0x03) (0x80) (0x0101) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x0000) (0x001A)
[0x00325DBA] [0x00000000] [0x0000002B] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) Headset
[0x00325EA4] [0x00326AF5] [0x0033BA74] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-Aug-%1S %2S:%3S:%4S
[0x0033BA80] (0x02) (0xC0) (0x8A2B) [0x00000000]
# --------------
[0x00325EA4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-Aug-%1S %2S:%3S:%4S
[0x00325EAA] [0x00000000] [0x00000001] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00325EA7] [0x00000000] [0x00000000] (0x012D) (0x1A2D) (0x0000) (0x003E) (0x1300) (0x001A) Automatic answer
# --------------
[0x003263E4] [0x00326B70] [0x0033BAC8] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Dialled numbers erased
[0x0033BAD4] (0x02) (0xC0) (0x8A2A) [0x00000000]
# --------------
[0x003263E4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Dialled numbers erased
[0x003263E7] [0x00000000] [0x00000001] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) Lights
[0x003263EA] [0x00000000] [0x00000000] (0x012D) (0x1A2F) (0x0000) (0x003E) (0x1300) (0x001A) On
# --------------
# --------------
# --------------
[0x003264BF] [0x00326B82] [0x0033BB1C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Automatic update enabled
[0x0033BB28] (0x03) (0xC0) (0x0A2D) [0x00000000]
# --------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0000) (0x0000) (0x001A)
[0x003264C8] [0x003264BC] [0x00000002] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Confirm first
[0x003264C5] [0x003264B9] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) Automatic update disabled
[0x003264CB] [0x003264C2] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x9000) (0x001A) On
# --------------
[0x00326021] [0x00326B10] [0x0033BB88] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) On
[0x0033BB94] (0x06) (0x80) (0x0101) [0x00130874]
# --------------
[0x00326021] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) On
[0x00325E8C] [0x00326AF2] [0x0033BC3C] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Answer
[0x0033BC48] (0x02) (0xC0) (0x8A16) [0x00000000]
# --------------
[0x00325E8C] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Answer
[0x00325E92] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00325E8F] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Anykey answer
# --------------
[0x00326018] [0x00326B0D] [0x0033BC90] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Call %N
[0x0033BC9C] (0x02) (0xC0) (0x0A19) [0x00000000]
# --------------
[0x00326018] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Call %N
[0x0032601E] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x0032601B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Automatic redial
# --------------
[0x0032653A] [0x00326B97] [0x0033BCE4] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) On
[0x0033BCF0] (0x02) (0xC0) (0x0A1A) [0x00000000]
# --------------
[0x0032653A] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) On
[0x00326537] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00326534] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) 1 missed call
# --------------
[0x00326036] [0x00326B19] [0x00000000] (0x012D) (0x0BC6) (0x0000) (0x004E) (0x0000) (0x001A) Call waiting cancelled
[0x00326126] [0x00326B2E] [0x0033BD38] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Number of caller is not shown
[0x0033BD44] (0x03) (0xC0) (0x8A1B) [0x00000000]
# --------------
[0x00326126] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Number of caller is not shown
[0x00326114] [0x00000000] [0x00000000] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Default
[0x0032611A] [0x00000000] [0x00000001] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00326117] [0x00000000] [0x00000002] (0x012D) (0x0BC9) (0x0000) (0x003E) (0x1300) (0x001A) Set by network
# --------------
[0x00325E80] [0x00326AEF] [0x0000004C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Change the phone line?
# --------------
[0x003265B5] [0x00326BA0] [0x0033BDA4] (0x012D) (0x0387) (0x0000) (0x004E) (0x4000) (0x001A) Phone number:
[0x0033BDB0] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x003265B5] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Phone number:
[0x003263D8] [0x00326B6D] [0x0000000A] (0x012D) (0x0394) (0x0000) (0x004E) (0x0800) (0x001A) English selected
[0x00326405] [0x00326B73] [0x0033BE58] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) %0N-May-%1S %2S:%3S:%4S
[0x0033BE64] (0x02) (0xC0) (0x0A1C) [0x00000000]
# --------------
[0x00326405] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) %0N-May-%1S %2S:%3S:%4S
[0x0032640B] [0x00000000] [0x00000001] (0x012D) (0x0EDC) (0x0000) (0x003E) (0x1300) (0x001A) Off
[0x00326408] [0x00000000] [0x00000000] (0x012D) (0x0EDD) (0x0000) (0x003E) (0x1300) (0x001A) Cell info display
# --------------
[0x0032676B] [0x00326BD3] [0x0033BEAC] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) SIM services
[0x0033BEB8] (0x02) (0xC0) (0x8A26) [0x00000000]
# --------------
[0x0032676B] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) SIM services
[0x00326771] [0x00000000] [0x00000001] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Not asked
[0x0032676E] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x003E) (0x1300) (0x001A) Confirm SIM service actions
# --------------
[0x00326591] [0x00326B9A] [0x00000000] (0x012D) (0x0294) (0x0000) (0x004E) (0x0400) (0x001A) Send graphic
[0x00326A4A] [0x00326BF1] [0x00000059] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Number busy
[0x003269A2] [0x00326BEE] [0x0000003C] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Switching profile
# --------------
[0x0032671D] [0x00326BC7] [0x0033BF00] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Phone
[0x0033BF0C] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x0032671D] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Phone
[0x003265D6] [0x00326BA9] [0x00000031] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) PIN code changed
[0x00325FF4] [0x00326AFE] [0x0033BFB4] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Note: call barrings
[0x0033BFC0] (0x06) (0x80) (0x0101) [0x00000000]
# --------------
[0x00325FF4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Note: call barrings
[0x00326504] [0x00326B91] [0x00000000] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) No phone number
[0x003264F5] [0x00326B8E] [0x00000001] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) International except to home country
[0x003264F2] [0x00326B8B] [0x00000002] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Incoming calls
[0x003264EF] [0x00326B88] [0x00000003] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Incoming calls when abroad
[0x003264EC] [0x00326B85] [0x00000004] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0000) (0x001A) Call cost limit reached
[0x0032603C] [0x00326B1C] [0x00000005] (0x012D) (0x0BBC) (0x0000) (0x004E) (0x0400) (0x001A) Call waiting not active
# --------------
[0x00326444] [0x00326B52] [0x0000004A] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0800) (0x001A) Erase recent call lists
[0x00326132] [0x00326B31] [0x0033C068] (0x012D) (0x0387) (0x0000) (0x004E) (0x0800) (0x001A) Own No. could not be sent
[0x0033C074] (0x03) (0xC0) (0x4A82) [0x00000000]
# --------------
[0x00326132] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x1100) (0x001A) Own No. could not be sent
[0x003261E9] [0x00000000] [0x00000000] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) Number not in closed group
[0x003261EF] [0x00000000] [0x00000001] (0x012D) (0x0A78) (0x0000) (0x003E) (0x1000) (0x001A) Value too large
[0x003261F5] [0x00000000] [0x00000002] (0x012D) (0x0A79) (0x0000) (0x003E) (0x1300) (0x001A) Closed group %N in use
# --------------
[0x00326711] [0x00326BC4] [0x0000004E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0C00) (0x001A) Verify new security code:
[0x003260B4] [0x00326B2B] [0x0033C0D4] (0x012D) (0x0387) (0x0000) (0x004E) (0x0000) (0x001A) Info service
[0x0033C0E0] (0x04) (0x80) (0x0101) [0x00000000]
# --------------
[0x003260B4] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Info service
[0x00326708] [0x00326BC1] [0x00000009] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Security code changed
[0x003265D0] [0x00326BA6] [0x00000030] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Enter PUK2 code:
[0x003265C4] [0x00326BA3] [0x00000033] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) PIN2 code blocked
[0x003265A3] [0x00326B9D] [0x0000003E] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) Password error
# --------------
# --------------
[0x0032644D] [0x00326B76] [0x00000010] (0x012D) (0x05E0) (0x0000) (0x004E) (0x0400) (0x001A) One by one
# --------------
[0x00326003] [0x00326B07] [0x0033C158] (0x0050) (0x0387) (0x0000) (0x003A) (0x0000) (0x0007) Call cost settings
[0x0033C164] (0x07) (0x80) (0x0101) [0x00000000]
# --------------
[0x00326003] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A) Call cost settings
[0x00326225] [0x00326B37] [0x00000000] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert active
[0x0032623D] [0x00326B46] [0x00000001] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert when phone off or no coverage
[0x00326237] [0x00326B40] [0x00000002] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert not active
[0x0032623A] [0x00326B43] [0x00000003] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert if not answered
[0x00326231] [0x00326B3D] [0x00000005] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert de- activated
[0x0032622B] [0x00326B3A] [0x00000006] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0000) (0x001A) Divert cancelled
[0x0032603F] [0x00326B1F] [0x00000004] (0x012D) (0x0BBA) (0x0000) (0x004E) (0x0400) (0x001A) Cancel all barrings
# --------------
[0x003262D9] [0x00326B55] [0x0000006D] (0x0054) (0x05E0) (0x0000) (0x003A) (0x0000) (0x0008) Memory
[0x00325F34] [0x00326AF8] [0x00000068] (0x0055) (0x05E0) (0x0000) (0x003A) (0x0400) (0x0009) Subtract
[0x00325F40] [0x00326AFB] [0x00000078] (0x0053) (0x05E0) (0x0000) (0x003A) (0x0400) (0x000A) Check the calendar
[0x00326381] [0x00326B94] [0x00000000] (0x0057) (0x0CB2) (0x0000) (0x003A) (0x0500) (0x000B) Check unit price and limit
[0x0012D82C] [0x00326BD0] [0x00000034] (0x0058) (0x05E0) (0x0000) (0x003A) (0x0000) (0x000C) INVALID ADDRESS
# --------------

[crashynot]

I think i found your Problem
--------------
[0x00000000] [0x00000000] [0x00000000] (0x012D) (0x00DC) (0x0000) (0x0010) (0x0100) (0x001A)
[0x00338008] [0x00000000] [0x00340160] (0x0175) (0x0387) (0x0000) (0x003E) (0x0000) (0x0024) Special
[0x0034016C] (0x01) (0xC0) (0x0101) [0x00000000]
# --------------
[0x00325D18] [0x00000000] [0x0000002E] (0x0059) (0x05E0) (0x0000) (0x003A) (0x0400) (0x001A) Net monitor

replace the yellow = 0x0175
to the netmonitor ID = 0x0059 and netmonitor to 0x0175
and it will work

[mestrini]

That won't do much good m8 because that id is related to the Bitmap shown in the menu. 175 means blank and 59 is probably the netmonitor bitmap.

I think the problem here is a compatibility issue of the patch with the phone in question.
I remember trying to apply rithmic leds via 5E0 table on a 8210 and all i got was a reboot menu :lol:

I think i'll give it another try and see if it works :-P

[Boemio]

Finally, I made it! It's working! :D Thanks a lot to all of you...

Now i only have to figure out wy has the last menu (infrared) disapeared. :-o Also i want to figure out, whou to make some menu items look like Language menu, witch shows the selectioned option.

By the way, i noticed thar there is a limit of line we can write in G3nolite...

I was trying to create this structure:

Special :
-Rhythmic Leds:
-on
-of
-Fade Led's
-Fade in
- off / 1 / 2 / 3 / 4 / 5 / 6 / 7 / 8 / 9
-Fade out
- off / 1 / 2 / 3 / 4 / 5 / 6 / 7 / 8 / 9
-Clock Screensaver:
-Settings:
-Time Limit: 10s, 20s, 30s, 1m, 2m, 5m, 10m, 20m, 30m
-Background: 1, 2, 3, 4
-Font: 1, 2, 3, 4
-Type:
-Digital
-Analog

And i had to exlude some of the optionsof fade in/out, time limit, background, and font in order to be able to cinfigure something!

[mestrini]

The trick is to copy all the text to a .txt (notepad) file and edit as much as you like.

then just open genolite, read menu structure and delete all the text in the box. After, just copy and paste what you did in notepad

[Boemio]

Well... It seems that everything is ok with the created menu (but i'm still correcting some minor bugs), but, infrared menu disapeared. I beleive it's omething related with this line... since i added a new menu, i have all menus + Special.

What do i have to change in order to make the infrared become visible?


[0x0033A400] (0x0B) (0x10) (0x0101) [0x0013086E]

I tryed changing 0B to 0C and got an error... I beleive i will have to chjange either 0B or 10 to something... Now, to what?

As to make for instance, the rhytmic leds menu show wich option is selected, does any one know how? It isn't using 08 nor C0.

[mestrini]

the problem is that when you added the menus you miscounted and deleted the infra-red menu line.
0B is hex for 12 and you probably had 13 menus (0C) and when writing menu structure genolite deletes the lines that go beyond the defined number by that (0x0B) and gives error if you give a larger number than the menus you have
Now that you deleted it the two solutions are: start from beggining and remember to change the hex value to the right number of menus (0F is 15 and 10 is 16) or change the 0B to 0C but copy/paste the missing line (from infra-red) menu to the right place in the menu structure and then press 'write'

hope it helped

----------------------------------------------
Sabes que é bueda estranho tar a trocar palavras com um tuga na lingua do shakespeare :lol:

cumps

[Boemio]

LOL... Thats really strange... But, it wouldn't be wright to write in Portuguese in an English forum... Thanks For the all the help...!

By the way, do you know, the code that allows us to configure the menus as a list of names... and the one that gives us the "preview" of the selected option (this one is like te menu were we select the language of the phone, before selecting, it tells us the one selected.)?

Thanks a lot....

- - - - - - - - - - -

Não sei o que os moderadores acham mas não seria de bom tom estarmos escrever apenas na nossa língua materna. Felizmente é uma daquelas coisas que temos que sber para podermos comunicar seja com quem for... Um abraço e obrigado por toda a ajuda que me estás a dar...! :D

[mestrini]

# --------------
[0x0042C56A] [0x0042D11F] [0x0041FC28] (0x019B) (0x0387) (0x0000) (0x005A) (0x0800) (0x001E) No call active
[0x0041FBE0] (0x02) (0xC0) (0x0A1A) [0x00000000]
# --------------
[0x0042C56A] [0x00000000] [0x00000000] (0x019B) (0x00DC) (0x0000) (0x0013) (0x1100) (0x001E) No call active
[0x0042C567] [0x00000000] [0x00000001] (0x019B) (0x00DC) (0x0000) (0x004A) (0x1300) (0x001E) No answer
[0x0042C564] [0x00000000] [0x00000000] (0x019B) (0x00DC) (0x0000) (0x004A) (0x1300) (0x001E) No access

----------------------------------------------------------------
Okay, lets see if i can explain this cleary but let you know now that i haven't found the complete solution (that's more with guys like g3gg0, krisha and NokDoc)
The above piece of menu structure is taken from a 5210 flash

(0x0800) -> this value is the one that defines that the menu will have the chosen option visible ( it has preference over the (0x1100) of the ghost menu unless you leave it filled with zeros 0x0000)
(0xC0) -> This value defines the kind of menu, in this case a menu that opens to a screen with more options (if the value is 0x80 the menu is like Netmonitor where you open directly into the option)
(0x0A1A) -> This is where the gold is :lol: This is the address that is responsible for the chosen option to be displayed. The problem is that you can't use it with any other menu since it's specific to this one and i don't know how to find it.
If you look at this field in some lines of your flash you can see the value (0x0101) which means that the first option to choose from is always displayed :-x . If you change it to (0x0102) option number two is always displayed even though it's not the active one. If you change it to (0x0100) or to (0x0103) if you haven't three choices then nothing is displayed.

I have to keep looking and reading and testing to see if i can sort this out

Just hope you got the picture and bare in mind that for a phone like 8210 some of the values (like 0x0800) can be different

cheers

fica bem

[danwood76]

Podes explicar o que queres fazer?
Eu li o relatório da aplicação dos patches mas não vi qualquer referência aos ID's das funções que queres injectar :-?
O que eu vi foi apenas a criação de um menu

Diz-me o que pretendes para eu poder ajudar :)

cumps

This is against the rules!!
ALL postings must be in english

please respect the forum rules

Danny

[mestrini]

This is against the rules!!
ALL postings must be in english

please respect the forum rules

Danny

What a great mod we have here :-o

Why don't you try to discover if what i wrote in portuguese is the same i wrote in english... doh :-P

I don't need anyone to tell me about the rules. If you read my posts ever since i become a member you can see that i do not come here to f*** around. :-x

Besides, i'm a moderator in another forum and i know about the business.

Why don't you go through some threads in TDMA section where you see several posts written in spanish, most of them offensive, no one saying anything about it and no one getting warned or bannedd for it. :-?

That's all...