vB Easy Archive - firmware editing

Pages: 1

firmware editing
(Click here to view the original thread with full colors/images)

Posted by: BB88

Someone in this Chinese Panasonic forum found the hex location in the firmware where the "icons" on the top bar, and edit the icon by himself.
http://www.mobile01.com/topicdetail.php?f=10&t=3217

Being inspired, I just took the A39 no shutter sound and with sound firmware and do a simple hex comparison, and I found that this block is different: hex 00621BB4 to 006222DA.
By doing the same thing with A53 firmwares, similar thing can be found. Can this be the shutter sound?

Posted by: BB88

I have confirmed it myself. I took the A40 firmware (with camera sound), and find the difference offset (attached). Then I set all the bytes to zero (00). I flashed my phone, and now I have A40 without camera sound!

You can open the attached file with a Hex Editor. This is the difference of the sound/no sound firmwares.

Posted by: BB88

Note that different firmwares have different offsets on this block. Also, I do not take any responsibility if this damage your phone.

Posted by: ctfb

It can be done and the secret is now out. I'm no programmer, but I think this can be done with relative ease.

The offset blocks are different as BB88 reported and by comparaing 3 different firmware files I've verified that the sound data is the same in each firmware.

I've attached a TXT file that when opened in WordPad shows the Sound file comparason between A53 with camera sound (left side)& without (right Side). This string can be used to add the sound back to a nosound file or if you have a version that has yet to have the cam sound removed you can go straight to the hex string and replace it with 80 80 80 80 etc.

Oh, and after looking at a couple of different A39_nosound files it looks as though two different people found & hacked the file. One file uses 80 to overite the data and another uses 00. Both Hex values work to kill the sound.

-Mike

Posted by: BB88

different firmwares may have different offset, but as long as you can find the block, you're fine.

Next task will be what the sound format is in, then we can start changing the shutter sound ourselves. Sometimes I think there should be a compensation between the loud sound and no sound at all.

Posted by: ctfb

I believe it's a WAV file that was converted to a MFM file. I'll paly with it and see what I can find. You should be able to take a MFM of the same length and replace that data in the firmware file to change the sound. Not exactly easy but with the HEX code for the sound exposed, it's possible.

-Mike

Posted by: BB88

I believe it's mfm file too, but maybe the header starts somewhere else since that block doesn't play. I found somewhere in the firmware with lots of mfm string. (around 0066cb00)

Things that I want to look in the firmware (if possible):
- remove the 50KB filesize limit
- force my browser to be default as charset:big5 (decode Chinese properly)
- show time on outside LCD, but not inside LCD
- the offset for all the icons
- active flip (dreaming?)
- image resolution
- picture ID size

Posted by: ctfb

Here's a start. I ripped this from the A53 firmware file.

If you look at the file in a hex editor you will see exactly where the file begins and ends in the firmware file.

-Mike

Posted by: BB88

Good stuff. Let the hex hunt begins!

Posted by: ctfb

Here's another sound from the A53 firmware. This one is a racecar and I have no idea where this is meant to be used inthe phone.

Now if there is only a pattern to the other things you mentioned it would make things interensting.

-MIke

Posted by: BB88

Just tried to replace the camera shutter sound with some other similar size (length) mfm file, and it works. The length of the block does not have to be exactly the same.

Posted by: ducvader

How do you do this? I have hex editor but all I know is how to change the words to the phone..nothing more. Someone should post lessons on how to edit files!

Posted by: BB88

All you need to do is replace a block of hex values with another block of hex values. The blocks have to be the same length.

Posted by: ctfb

Great work BB88! I haven't had the chance to try the replacement yet. It would be cool having Austin Powers saying "Give it to me Baby, Yeah!" when you take a picture

-Mike

Posted by: BB88

I don't know how big the mfm file it will accept for the replacement. I dare not to try a bigger one since it may replace other codes in the firmware. I only tested with a mfm file less than 3k.

Posted by: ducvader

I know how replace the blocks....what I want to know is which are sounds and which are pictures. How can you tell the difference because all I see is numbers!

Posted by: BB88

It's by testing. Read my first post, and you'll know how I found the camera sound. And all other sound blocks starts with the ASCII string "mfmp". You just have to do some hunting in the firmware ASCII/Text String.

Posted by: BB88

Here I have a layoout of the hex codes for the color of those logos on the top of the screen (it may be for all the color in the phone)

Use Hex Editor to open the logo_colormap.raw, and compare it with the picture.
The logo_colormap.raw can be opened by photoshop too, but it is only in greyscale.

Posted by: deeloc187

wuzup yall.. long time i said nuthin.. only read... but i have to ask ..how do i change the main icons ?!

and the major question... how can i change the audio recorder rec time.. i wanna record more than 10 Sec!

holla..