; *** FCAMem 0.2 Alpha *** 
; *** Read and writes Memory *** 
; !!!!! This patch is dangerous !!!!! 
; Author: fca00000 , fca00000-at-yahoo-dot-es 
; Date: 2005.11.15 version 0.1 
; Date: 2005.11.20 version 0.2 
; Firmware: Siemens-SX1 Possibly all versions. Tested on Iberia15.2 and O2-14 
; Omap: Core-Img (Z1) 
; 
; Allow to read and write the memory 
; This patch needs a program called FCAMem.sis 
; Install the patch and the program, choose the first menu MemRead and type: 
; -the address, for example 50000000 
; -size, for example 00001000 
; then it will create file e:\zz\mem.bin with the content of the memory 
; 
; this line modifies PowerMeasLdd.GetCaps so that allows read 
replace:0610A0E1040052E30420A0A3530100EB04D08DE2:0710A0E1400052E34020A0A3530100EB04D08DE2 

; this line modifies edosyin.GetCaps so that allows write 
replace:0400A0E10610A0E1040052E30420A0A3AC0100EB04D08DE27080BDE830402DE9:0400A0E10610A0E1040052E30420A0A3009087E504D08DE27080BDE830402DE9 
; 
; warning: reading a non-existing address will reboot your mobile 
; and writing data is even worse. This can break your phone 
; This patch is useless for almost everyone, except people making patches. 
; Dedicated to Z-Team and oslik.ru 
; 
; The address and size need to have 8 digits in hexadecimal. 
; Some addresses: 
; flash-ROM: 50000000, only 01000000 bytes 
; address_dma: 5800F800, only 00001000 bytes 
; address_cam: 58005800, only 00001000 bytes 
; address_tci: 5800EC00, only 00001000 bytes 
; address_wire: 58002000, only 00001000 bytes 
; address_wireTx: 58002018, only 00001000 bytes 
; address_WireClk: 58002010, only 00001000 bytes 
; address_mmc: 58006800, only 00001000 bytes 
; address_config: 5800D000, only 00001000 bytes 
; chunk-SvData: 80000000, only 00008000 bytes, but this depends on the free mem 
; chunk-SvStack: 80400000, only 00010000 bytes, but this depends on the free mem 
; 
;**************************************** 
; Este parche permite leer y escribir la memoria del SX1. 
; Solo es util para gente que hace parches, quienes posiblemente saben ingles. Por eso 
; no lo traduzco. 
; !!!!! Este parche es peligroso !!!!! 
;**************************************** 
; end of FCAMem 

-------------------------------------------------------------------------- 

This file is required: 

http://comunes.comunidad-siemens.com/SX1/FCAMem.SIS 

Read it:
FCAMem 0.2 for Siemens-SX1 
Author: fca00000 , fca00000-at-yahoo-dot-es 
Date: 2005.11.19 
License: GPL 

This is a small application that can read/write memory for mobiles SX1. 
You need the patch called FCAMem.sxp 

First of all, a important warning: reading from non-existing memory will reset the mobile. 
Furthermore, writing data can damage it permanently. 

The menu "Mem Read" asks the initial address, and the size. Both values are in hexadecimal, for 
example you can read the flash using Address=50000000 and size=01000000 
This will create file e:\zz\mem.bin with the content of the memory 

Menu "Mem::Copy" ejecutes the user-land function Mem::Copy , and therefore can only read data belonging 
to the program that is being executed, that is, FCAMem.app , which is almost useless. 
If you have TasksNeverProtected.sxp , then it can read memory from other process, ex FF800000 

Menu "Search" will find a sequence of bytes, but only in the current program FCAMem.app , which is almost useless. 

Menu "Chunks" will show the address, permisions, and size of Chunks. These are common areas shared by all programs. 
You might need patch TasksNeverProtected.sxp to access Private and Local chunks. 
The address and size are not neccesary. 

Menu "Registers" shows some ARM registers: R0, R9, R10, R11, R12, R13, R14, SP and PC 
The address and size are not neccesary. 

Menu "Mem Write" allows to write the memory. The value is specified in little-indian. 
Of course you can not write in flash. Also, writing to a critical memory cell might crash the phone. 
Writing data without knowing what you are doing might disable your phone for ever. 

Menu "Logical Channel" will show logical channels. Then (if you make the program) you can hook to them 
and intercept their data. 
The address and size are not neccesary. 


All these applications are useless for almost everybody, except people making patches or willing to know more 
about SX1 and Symbian phones. 

****************************** 
End of FCAMem.txt