How to send AT command to inside radio module - Windows Mobile Software Development

Posted:Mon Aug 18, 2003 06:21
Post subject:
--------------------------------------------------------------------------------
Hi,every one
I meet a problem,please help me:
I have a PDA which is installed inside a radio module, called ET180 with
pocket PC 2002 OS, I do not know how to send AT command to radio module in program, I am using EVB or EVC for coding.
If outside radio module is connect to PC by serial port, I can send command to serial port. but on ET180, I do not know how the radio module is connected.
Do you know is there a RIL(radio interface layer) function that can send command, and How? or any other way?
Thanks

I would have to have a look at a et180 rom, to see how it works. probably it is an entirely different hardware platform than the xda.

I run a sample EVC program on ET180, using RIL API, run well,
sample show how radio module receive and send information, exactly like
AT command,
1.
I figure if RIL API have function to directly send AT Command and get feedback, that will meet my requirement, bu I do not know if there is such API.
2.
If any vitual COM driver available, maybe also ok.
3. I seach the web, and know the radio modile is from siemens
If you search the web, ET180 document can be found, from lenovo
the largest IT corporation in China

yes, I saw there site, unfortunately my chinese is not that good.
If you can post a link pointing directly to a downloadable rom, or rom upgrade package, that would be very helpful.
specifically I need to look at rilgsm.dll and probably serial{1,2,3}.dll
you may use osimagetool together with dumprom to extract them.

The manufacturer not provide ROM for download, and I can not copy DLL file from ROM by IE, if you have Osimagetool, please attach here, so I can send ROM to you.
thank you!
by the way, when ET180 connected to my PC, ActiveSync3.5(builder 1240) works.

I make a backup (backup.stg) for ROM and RAM by ActiveSync,attach here, if you have tool to read, you will see every thing.
oh, the file can not be attached in this forum, open your Email if you please.

Can anyone tell ril API "RIL_GetSerialPortHandle" and "RIL_DevSpecific"
is implemented yet or not? and how to call the API? I write code:
1
iReturn=RIL_DevSpecific(hRil, (BYTE *)"AT+CSQ\r", (DWORD)7);
Result callback is not responded.
2
iReturn=RIL_GetSerialPortHandle(hRil,lphSerial);
HANDLE lphSerial is invalide.
Thanks

Related

BLUEANGEL synCE linux

Hi I just got SynCE 0.90 working fine with kernel 2.6.x
In case you didn't know synCE is the linux (open source) version of Activesync
homepage at http://synce.sourceforge.net/
I used this with pocket PC 2003SE on blueangel
It also works fine with synce-kde, just like activesync
here is the updated snippet from the wiki:
I ran it on a 2.6.9 kernel and I added this to my ipaq.h:
(look for this)
#define HTC_VENDOR_ID 0x0bb4
#define HTC_WALLABY_ID 0x00ce
#define HTC_HIMALAYA_ID 0x0a02
(new part here)
#define HTC_BLUEANGEL_ID 0x0a05
(end new part)
And this to my ipaq.c (/usr/src/linux/drivers/usb/serial/)
(look for this)
{ USB_DEVICE(HTC_VENDOR_ID, HTC_WALLABY_ID) },
{ USB_DEVICE(HTC_VENDOR_ID, HTC_HIMALAYA_ID) },
(new part here)
{ USB_DEVICE(HTC_VENDOR_ID, HTC_BLUEANGEL_ID) },
(end new part)
In the ipaq_id_table to be precise.
hope this helps (and the wiki is updated when online)
Barry
Uau!!!
Do you know is everything is syncable? (calendar, contact,..)
cannot make it work under suse 9.1 kernel 2.6.8.x
I've been trying to make Syncce under Suse 9.1 with kernel 2.6.8.x work. But no luck. Any suggestions or tips?
synce can sync with kde using Multisync. http://synce.sourceforge.net/synce/multisync_guide.php
I havn't used it myself, but I read good things.
As for the problem with Suse 9.1 with kernel 2.6.8.x you would have to be more specific.
did you modprobe usbserial and ipaq after modifyig the source, rebuilding the kernel, and rebooting?
If you did all of the above and you still have problems then post your dmesg output with the above loaded and the device pluged in.
cool! is this bluangel specific or could work also with xda-mini, ...?
Do u use synce with usb or bluetooth? tnx
you will ned to get the device id for the mini to make it work, but thats easy
the blueangel is 0x0a05, you see this when you use the tool usbview
click on ipaq, and then look for
Product Id: 0a05 (this will say a different device id)
change the above code, and replace the device id of the mini.
I have successfully used both bluetooth and usb to sync my pda.
check out http://synce.sourceforge.net/
could you make a howto:
ive been trying everything
here is what i have
i have the Audiovox XV6600 w/cam (default rom) got it like 1 month ago.
im running slack 10.2 with the test26.s kernel u can pick upon install (its 2.6.13)
i leave pda in regular mode and connect it through usb after i am in kde desktop
then i switch the pda mode to wmodem.
with kppp (dial up app) i select software xon/xoff mode
i select script
i try and find my modem and put it on dev/tty0 or /dev/tty1 and querry it
usually it does querry but all the commands come back blank
i try to log in and it says modem ready and then it goes to "initializing modem" and its not froze or hung but it just stays there
note: i do not see the 3 little lights in wmodem flash when i querry or try to connect.
with 2.6.13 i dont think you have to edit the ipaq.h or ipaq.c files in /usr/src/linux/drivers/usb/serial
when i compile a kernel what option makes the ipaq module load?
ok thanks
anyone gonna try and help a fellow linuxer out?
m16-maniac said:
anyone gonna try and help a fellow linuxer out?
Click to expand...
Click to collapse
Hi,
not so much at once. We are already running Linux
on Blueangel now
You don't need to recompile anything. Just
modprobe ipaq debug=1 vendor=XXXX product=YYYY
with vendor and product numbers.
Works here even on amd64 linux.
Can tell you the steps necessary to do from
the command line.
Don't know about KDE though.
cr2 said:
m16-maniac said:
anyone gonna try and help a fellow linuxer out?
Click to expand...
Click to collapse
Hi,
not so much at once. We are already running Linux
on Blueangel now
You don't need to recompile anything. Just
modprobe ipaq debug=1 vendor=XXXX product=YYYY
with vendor and product numbers.
Works here even on amd64 linux.
Can tell you the steps necessary to do from
the command line.
Don't know about KDE though.
Click to expand...
Click to collapse
well linux detects the modem with np and it automatically loads the ipaq module. i can verify this by doing the 'lsmod' command and its in there
im using the HARRIER model but should work close to the same.
ive tried to configure with pppsetup and also kppp from kde and havent had to much luck so far.
i know i have a symlink i create that goes like this
/dev/modem = /dev/ttyUSB0
with verizon i dont think it uses pap/chap as you can logon with just the #777 and no userass
i dont think modem uses hardware control or modem compression but i cant connect to verizon without it but when i look in my "WINXP" modem view log it says no hardware and no modem compression
anyhow ive tried with minicom and kppp and when i try to connect i see the ppc (wmodem) lights flashing on and off and i see in the log viewer a bunch of garbage
so i think this is a config prob
anyhelp will be greatly appreciated
m16-maniac said:
well linux detects the modem with np and it automatically loads the ipaq module. i can verify this by doing the 'lsmod' command and its in there
Click to expand...
Click to collapse
You can lookup vendor and product in
the 'lsusb' output, then do 'rmmod ipaq' and
modprobe ipaq vendor=XXXX product=YYYY
if this is the problem.
cr2 said:
m16-maniac said:
well linux detects the modem with np and it automatically loads the ipaq module. i can verify this by doing the 'lsmod' command and its in there
Click to expand...
Click to collapse
You can lookup vendor and product in
the 'lsusb' output, then do 'rmmod ipaq' and
modprobe ipaq vendor=XXXX product=YYYY
if this is the problem.
Click to expand...
Click to collapse
i dont think that is the problem cause as isay its picled up ok upon boot (as i edited the ipaq.c file then compiled the module to do that already
my problem i believe is in the pppsetup program that creats files called "options", "pppscript", "papscript" and "chapscript" i believe
in those files its doing commands wmodem does not understand i think
i am going to try as u suggested and see what happens but i dont think its gonna do anything different as i can already communicate with the modem just my isp sends garbage (i think) or the modem sends garbage im not sure which one it is
cr2 said:
m16-maniac said:
well linux detects the modem with np and it automatically loads the ipaq module. i can verify this by doing the 'lsmod' command and its in there
Click to expand...
Click to collapse
You can lookup vendor and product in
the 'lsusb' output, then do 'rmmod ipaq' and
modprobe ipaq vendor=XXXX product=YYYY
if this is the problem.
Click to expand...
Click to collapse
ok did what u suggested and it is the same info as it reports when i boot up with ppc plugged in (ur way and my way = same end result) so that not the problem

Script to write (not change) IMEI to a file on an M2000

I am currently working through moving a set of M1000s and M2000s from a pilot stage project to production within my organisation.
Part of the process requires us to use our existing asset management software (using typical Pocket PC config settings) to get information on the device. This works for a lot of the settings but does not include details on the device IMEI. This I guess because the asset management software was designed for plain vanilla Pocket PC devices and not GSM-enabled Pocket PCs such as the M2000.
Does anyone know of a script that when run from the device will store the IMEI number in a text file on the device that can then be interrogated by the asset management software remotely?
Any contributions gratefully received.
Sean
You could write a custom app in EVC I guess to gather and output the info to a file.
Don't know of any scripts though.
V
Thanks for the reply.
With a quick search on EVC I came across this post:
http://forum.xda-developers.com/viewtopic.php?t=13455&highlight=evc
I never managed to compile the embedded c++ code to get the IMEI number.
I don't suppose anyone has a compiled script or application that can gather the IMEI number and write to a file?
TIA,
Sean

[Q] ConManClient3 & Device.GetRemoteAgent() for native access?

Hi all,
has someone tried to get privileged access to wp7 via calls to conmanclient3? The RemoteAgent settings are all there (C:\ProgramData\Microsoft\Phone Tools\CoreCon\10.0).
Visual Studio 2010 does use the new CoreCon 10 files if it deploys to a real wp7 device. If it deploys to the emulator it does use the 5.1 files instead.
It looks like the settings for the 10.0 files differ from prevoius versions as the SmartDevice Tools of VS2008 (Plattformbuilder 6 based) won't work with the new files.
But in theory it should be possible to get access via a RemoteAgent (h__p://msdn.microsoft.com/en-us/library/microsoft.smartdevice.connectivity.remoteagent(v=VS.90).aspx), shouldn't it?
As cormanclient3, CMAccess and friends are all signed by microsoft and consist of native code it would be interesting to talk to someone who has already created a RemoteAgent based connection to a smartdevice. Is there someone out there?
Best regards,
-tobias
From the WP7 Developer Tools Application Deployment Tool, I'm pretty sure it's only using the CoreCon 10.0 files.
My RemoteExecute program here is using the Device classes (though I might have rewritten it a bit to get the Device.ConManServer), I'll now try the sample you linked too, and see if I can get it to work. File manipulation using the ConManServerseems to give lots of "Access Denied" errors, which I'm trying to work out why, and there's some stuff to be done with registry access as well, but this is the only way I've yet found of controlling the device from a desktop, without extra on device apps.
I check it with procmon, if you deploy to the emulator is loads the 5.01 files.
The MSDN Sample from above won't work as the service ids are from an older ce version. You need to use the ids from the file in corecon 10 addon folder.
do you get "access denied" or "not implemented" errors? Would be interesting if there is another set of files in the platform builder 7 which do implement additional functionality. I'd seen your remote execute program but I think the trick is to get a remoteagent running (looks like that's what visual studio does to get the debugger working).
regards,
- tobias
kuerbis2 said:
I check it with procmon, if you deploy to the emulator is loads the 5.01 files.
The MSDN Sample from above won't work as the service ids are from an older ce version. You need to use the ids from the file in corecon 10 addon folder.
do you get "access denied" or "not implemented" errors? Would be interesting if there is another set of files in the platform builder 7 which do implement additional functionality. I'd seen your remote execute program but I think the trick is to get a remoteagent running (looks like that's what visual studio does to get the debugger working).
regards,
- tobias
Click to expand...
Click to collapse
Ah, I'm just checking the Application Deployment tools, rather than the debugger, which would be a lot more useful... I think the emulator isn't really emulating, it's running using x86 code, and just acting like a WP7 environment (unlike the older emulators that emulated the entire hardware).
Will find the IDs for corecon 10 then, as that might make things work! (I've got device connections working, device name is "Windows Phone 7 Device".
I get Access Denied with most of them, though there is at least one function that's not implemented somewhere (I can't remember which one it is though!). The file manipulation APIs are quite different in the latest version of Microsoft.SmartDevice.Connectivity, with things like ProvisionDevice() not exisiting at all.
Will look at getting a RemoteAgent running, the functions are all there, and implemented, I just need the right IDs.
I can upload my code somewhere if you want (it's a little messy though!)

[minnow for whale]USB Video Out Dev&Dig (Status:success)

We all remember at the MIX10 Joe Belfiore projects his phone onto the big screen. Even on the recent XBOX show he did that again.
http://www.youtube.com/watch?v=9IA28wRWAI8
http://www.youtube.com/watch?v=uCDXaJh4bwE
this kind of video out is through micro-usb, normal type one. You can find Joe is using a Lumia 800 in his hand in the XBOX video.
I asked him through twitter and received an answer of "Special Software build".
I did some research and dig into the register keys. Found something.
This is a special driver that only shared inside the MS and normally won't be out anytime soon.
...
(Deleted because they are no longer of any means)
...
----Update on 2012.Feb 9 China Time----
marsrogers said:
Big Step Forward, since the DFT Rom released, the exe can be run in WP7.
One thing I need now is if someone can build an app for me, which calls the changeusbprofile.exe under /windows
Things here is I'm using the Opera mini launcher to call it, but the path is under /application, not under /Windows, and the result is my computer can not detect the phone when the phone reboots. I think this may relates to the path I call.
I'm not a typical tech-man, so I need help here. Thanks!
Click to expand...
Click to collapse
----Update on 2012.Feb 9 23:00 China Shanghai Time----
Today I really thank @GoodDayToDie and @ultrashot for helping so many.
@ultrashot sent me a xap app that does the job, calling the changusbprofile.exe in Windows folder. Although result is the same with yesterday, but now I am more sure that we are one more step closer to our destination. I'll wait my new micro usb cables to arrive and then I'll make a second try. Thank you again!!! Can't reach here without you kind people~~~
----Update on 2012.Feb 10 19:22 China Shanghai Time----
I removed the attachments because the project is now on special stage. I will put them back after the feature works, or after I can't make it work. Either way, I will put them back~~~Don't worry.
----Update on 2012.Feb 12 15:22 China Shanghai Time----
Complete failure....
New cable arrived and still my computer can't recognize the phone in usb video out mode...I changed a computer and till the same...
Will think about next steps...if I can't make figure it out next week, I shall put everything at present stage onto here.
----Update on 2012.Feb 14 10:22 China Shanghai Time----
Think it over, and think there is still a hill in front of us. The changeusbprofile.exe seems just to be a toggle, like a shortcut. But the real port of usb video out hasn't been enabled. On my samsung focus, I checked the *#7284# in Diagnosis Mode before and after I ran the changeusbprofile. The thing changes from Zun to Tethering, while it's not the real tethering mode. I think the changeusbprofile is just doing a job like changing usb mode from zune to tethering or to Diag mode. So that's to say, we haven't really seen the iceberg yet. I'll keep finding and hoping that anyone can get any help on this. This may requires me to dig some post in Windows Mobile age, since some parts between the two system are same.
And I contacted the kind secret person, and get the news that the usb cable doesn't really matters. Any short cables should serve the job. So our attention should move back onto the phone again.
----Update on 2012.Feb 15 15:13 China Shanghai Time----
I figured it out~The changeusbprofile changes the value in Registry Local_Machine/Drivers/USB/FunctionDrivers, DefaultClientDriver=CompositeFn to UFN_VIDSTREAM_CLASS. Every value change here points to a folder in FunctionDrivers.
in Samsung Focus, it is like below:
/CompositeFn;
/CompositeFn_QCOM;
/CompositeFn_SAMSUNG;(This is the one when we choose Diag Mode in Diagnosis App *#7284#)
/MtpClientDrvUsb;
/Samsung_USBSER_Modemlink;
/Serial_Class;
/Serial_Class_Diag_Qcom;
/Serial_Class_Nmea_Qcom;
/Serial_Class_Trace_Qcom;
/USBSER_Class;
/USBSER_Modemlink_Qcom;
There is no UFN_VIDSTREAM_CLASS folder here, so that explains why the changeusbprofile works well while it is no use at all...
Next step, I will try looking for the Setting in Asus E600, if I can find someone who has this device. Maybe Samsung Taylor will do the same.
If you can help, don't hesitate~~
----Update on 2012.Mar 3 15:13 China Shanghai Time----
marsrogers said:
Updated some info
I looked into the Key name, UFN_VIDSTREAM_CLASS, which is very unique way to name.
This belongs to a USB function Driver, and the only thing I saw similar is a UFN_PRINTER_CLASS, which is in Wince 6.0
http://msdn.microsoft.com/en-us/library/ee483856(v=winembedded.60).aspx
And you may check this
http://msdn.microsoft.com/en-us/library/ee485691(v=winembedded.60).aspx
So I'm still waiting for somebody who can offer any help on this. I talked with Mr. Yang Zhongke, who invented RecX prototype, fiinix optimized that, but not the inventor.
His way is not quite efficient and seems can't go further. But he will do some work for this in a foreseeable future.
Any one has a Asus E600, plz contact me, will keep your name secret.
Thanks!~
Click to expand...
Click to collapse
----Update on 2012.Mar 6 1:02 China Shanghai Time----
Project suspended, cuz according to a source, WP8 will have Remote desktop support.
"The ability to take screenshots (via Remote Desktop, no less) will be a feature of Windows Phone 8. I don't see anything changing before that."
Click to expand...
Click to collapse
"Only that you will be able to remote desktop into the Phone, which should allow you to create videos and/or screenshots from a PC."
Click to expand...
Click to collapse
The source is quite trustful, and I have no reason to doubt that.
So just be patient, and it will come. No need for this project to keep going.
At last, use my words in the email I talked with the source.
Me:Really puzzled why MS doesn't release such a cool and convenient feature. Haven't they realized that when people use this feature, they are promoting WP7 for free...(Actually I've promoted in this way for Android as a "side effect" in the company I work in for three months and as a result more than 20 Samsung Galaxy SII were added during this period. Google and Samsung should thank me...)
Click to expand...
Click to collapse
---Update on 2012.August 17 14:21 China Shanghai Time---
A very kind man has sent me the 7003 LG Panther ROM, which has the necessary file, and we successfully got them out. But I just lost my sell phone, so it may take some time to buy a new WP7 Samsung focus. Maybe next week. Very close to the final line. God bless us. Cheers.
Click to expand...
Click to collapse
Good luck!~
--Update on 2012.August 20 22:37 China Shanghai Time--
I tried to make it work while it still failed. The computer recognised my cellphone as WM7VIDSTREAM while the PC side app still does n't work.
I think this could be related to that the PC side app is for mango and the cellphone side is grabbed from 7003. I uploaded the VSD folder which contains what I think are the everything we need for now.
If anyone wants to build an rom, now it's the time.
Click to expand...
Click to collapse
--Update on 2012.August 23 17:42 China Shanghai Time--
One friend, who you will know someday later, gave me a home-make cab which includes the pkg file from Microsoft. Right now it is not for public for now. But it is successful.
Although I started this project, but as it always be, not a technique project but a sociology one. So there are many things and many people's benefit to consider. So just wait for some time, it is there when it is there.
For technique part, the pkg file includes as same as the VSD.rar in the attachment.
Cheers
Click to expand...
Click to collapse
--Update on 2012.August 28 19:43 China Shanghai Time--
Check here, you have what you want. http://forum.xda-developers.com/showthread.php?t=1856509
This is a long story, and finally it ended beautifully.
"Always be closing"--Glengarry Glen Ross (1992)
To me? Yeah, this project closed.
Regards,
marsrogers
Click to expand...
Click to collapse
Well, I can tell you a little about the thing you found (good investigation, by the way!)
First off, that's a module - it's kind of like a file (and shows up in the filesystem) but is baked into the ROM and can't be opened, much less modified, like a normal file.
There are tools that are supposed to be able to re-assemble modules, such as recmod. I haven't been able to get them to work, but maybe I'm just doing it wrong. In theory, it should be possible to create a "normal" DLL out of the components of a module.
The next trick is getting that rebuilt DLL onto the phone. This can be done pretty easily on Samsung, and is possible on interop-unlocked HTC, but on LG/Toshiba/Fujitsu/Dell/Nokia we don't currently have a way.
After that, you'll need to "install" the driver. Now, there's a registry entry for doing this. The problem is, I only know that the entry is required - I don't know if it's sufficient, or if there's also a database or something that must be updated. In any case, any phone where we can put a file into the Windows folder, we can also do registry editing.
Then there's the thing of actually getting the UI for this feature (the Settings "app" to control it). It's vaguely possible that the retail ROMs include it, but this is doubtful, so you'll probably need to pull it out of that old ROM. It's probably an EXE, so it's unlokely you can make a XAP for it - instead, you'll need to install it into the phone directly, including putting in the registry entried to launch it (this is a guess, I've never tried).
It's worth noting here that it's probably *WAY* easier to just pull that feature out of your old ROM and bake it into a custom ROM. This should be pretty straightforward, however, then it's only useful on custom ROMs, which in turn are only possible on HTC phones (right now).
GoodDayToDie said:
Well, I can tell you a little about the thing you found (good investigation, by the way!)
First off, that's a module - it's kind of like a file ...
Click to expand...
Click to collapse
Thanks for your reply. I did something with the recmod, but the dll it packed is only 1kb, apparently it's not useful. I guess it is because there is no imageinfo.bin inside the dll folder. I used some tools recommended by Da_G who started to try modding WP7 on the first day. Like nbsplit.exe to creat a IMGFS.bin, and use xidump to dump it. Just like what they have done before, I got the dll folders as same as I got at the beginning.
You may be right for the part that it's rather easier to build a new rom. There are tools to repack the whole IMGFS from files while I didn't find any good ways to pack a specific folder.
May ask more people all over the world (thx to the internet) cuz I just moved from android. In android, I use cygwin to pack the Odin Tar files, but it's totally different of course.
Anyway, doing this research is just for fun~ All is because MS is moving too slow...not to mention the NFC function I already have for a year on my Nexus S~~
Thank U again!~
This would be awesome good luck
Really a good find! Found that reg entry some time ago but I didn't care about it...Now that you bring up that thing again I also think that this could be very useful (even if you want it just for fun and not for business purposes). But note that the DLL file doesn't have to be in the /windows folder. It could be somewhere different, too.
@-WP7User-: That's an interesting idea, and might enable this to work on LG phones (where we have registry but not filesystem control). The registry value that speicies the path to the driver binary only ever gives the file name (example:
[HKLM\Drivers\Builtin\HTCFileUtility]
Dll="HTCFileUtility.dll")
However, it might work to specify a full path instead of just a relative one (relative to the \Windows folder, one must assume, since that's where the files in question are located).
However, there's still the issue of actually getting the phone to load the driver correctly. Just adding or editing the registry value for Drivers\Builtin didn't work for me - it did something (the driver stopped working when I chancged the value for an existing driver) - I wasn't able to make a user-added DLL work (even a different version of an official driver).
any news on this?
The old Recmod doesn't work on WP7 files. I believe there is a patched version for WP7 floating around XDA somewhere. Have to check my files, could of swore I downloaded it once.
EDIT: Here you go.
I have get the source code for creating the dcTNONE_ANALOGTV.dll, they are .c file and .def file.
My Problem is I don't know how to build them.
And I have got the changeusbmode.exe and the xml file with it. Figuring an idea to put them in.
marsrogers said:
I have get the source code for creating the dcTNONE_ANALOGTV.dll, they are .c file and .def file.
My Problem is I don't know how to build them.
And I have got the changeusbmode.exe and the xml file with it. Figuring an idea to put them in.
Click to expand...
Click to collapse
Download the FixRecMod.exe above I posted. Drag the dctNONE_analogtv.dll folder with the "s000 s001 s002 s003 s004" files in it over the exe. Now you'll find the actual DLL file inside the folder. Any problems, just upload the folder & I'll do it for you.
drkfngthdragnlrd said:
Download the FixRecMod.exe above I posted. Drag the dctNONE_analogtv.dll folder with the "s000 s001 s002 s003 s004" files in it over the exe. Now you'll find the actual DLL file inside the folder. Any problems, just upload the folder & I'll do it for you.
Click to expand...
Click to collapse
I have made the dll successfully. But when I put the dll into the /Windows folder in my Samsung Focus, nothing happened even after a reboot.
And another interesting thing is in WP7 Root Tools, when exploring the /Windows folder, all single file has a "ROM Module" or "ROM File" written blew, but the files I moved in has nothing written under it.
I tried to check the usb mode in diagnosis *#7248#, still there are three options to choose, nothing new.
I personally don't see the future of this project for now.
However, You have done a lot to help, it's very kind of you, thank you so much!
marsrogers said:
I have made the dll successfully. But when I put the dll into the /Windows folder in my Samsung Focus, nothing happened even after a reboot.
And another interesting thing is in WP7 Root Tools, when exploring the /Windows folder, all single file has a "ROM Module" or "ROM File" written blew, but the files I moved in has nothing written under it.
I tried to check the usb mode in diagnosis *#7248#, still there are three options to choose, nothing new.
I personally don't see the future of this project for now.
However, You have done a lot to help, it's very kind of you, thank you so much!
Click to expand...
Click to collapse
It wouldn't have ROM FILE/MODULE under it as it wasn't cooked in. You probably need some registry for it to work. Also, try opening the DLL in PEexplorer & checking to see it it has a cert attached.
Example of a DLL/EXE with a cert;
Gonna cook it into my rom and try it out...Do you have an idea which reg entry it could need?
I think of something for the settings page. Because if you haven't got a settings page for it, how can you activate it?
And maybe another entry which points it to the DLL file...?
-WP7User- said:
Gonna cook it into my rom and try it out...Do you have an idea which reg entry it could need?
I think of something for the settings page. Because if you haven't got a settings page for it, how can you activate it?
And maybe another entry which points it to the DLL file...?
Click to expand...
Click to collapse
Next weekend I may upload the dcTNONE_ANALOGTV.dll folder which I found in the leaked ROM for HTC Surround even before the WP7 was officially to public, the source code which is .c and .def for it, which is to remove some limits for QSD8250 CPU, and the changeusbprofile.exe and changeusbprofile.xml from Asus E600 (the only dev phone has the display mirror feather in 7720 for now)someone Mr X, who I am very grateful to gave me.
I ain't major in this level of computing techs, so I think in order to make the project alive, it's better to share what I have to those who has the ability to do it. Let them holding in my hand is a great waste at present stage.
The QSD8250 is a very old cpu, so there should be no problem with NDA.
P.S
There should be a manual installed usb driver on PC and a client application on PC but I don't have them right now. If you have friends or friend's friend who is a dev, holding a e600 dev phone, try ask them to share something, appreciated.
drkfngthdragnlrd said:
It wouldn't have ROM FILE/MODULE under it as it wasn't cooked in. You probably need some registry for it to work. Also, try opening the DLL in PEexplorer & checking to see it it has a cert attached.
Example of a DLL/EXE with a cert;
http://i105.photobucket.com/albums/m240/drkfngthdragnlrd/Untitled-31.png
Click to expand...
Click to collapse
I've uploaded all my files so you can make the check yourself.
After all I'm major in management not IT techniques so I don't want to pull the path down.
Thank You for the help you offered!~~~
Thanks for uploading your files. But it seems like I can't find the reg key...
There isn't a single reg entry which points to the uploaded .dll. At least not in the official Mango Update for the HD7.
But if you post the whole entry, I could try to cook the .dll into my rom and see what happens.
-WP7User- said:
Thanks for uploading your files. But it seems like I can't find the reg key...
There isn't a single reg entry which points to the uploaded .dll. At least not in the official Mango Update for the HD7.
But if you post the whole entry, I could try to cook the .dll into my rom and see what happens.
Click to expand...
Click to collapse
has this registry something to do With that ? :
Local Machine\Drivers\Display\TV\
PanelDLL=string:"dcTNONE_ANALOGTV.dll"
-WP7User- said:
Thanks for uploading your files. But it seems like I can't find the reg key...
There isn't a single reg entry which points to the uploaded .dll. At least not in the official Mango Update for the HD7.
But if you post the whole entry, I could try to cook the .dll into my rom and see what happens.
Click to expand...
Click to collapse
Just like @tessut posted. It's it. And I think you'd better try to build the dcTNONE_ANALOGTV.dll yourself from the source, it should be more reliable than using fixedRecmod. I can't do that cuz there seems to need many head files that do not exist in computer even I have vs2010...
Sent from my SGH-i937 using XDA Windows Phone 7 App
Okay, if someone wants to try that, too: The exact reg key (just copy and paste) is
[HKEY_LOCAL_MACHINE\Drivers\Display\TV]
"PanelDLL"=string:"dcTNONE_ANALOGTV.dll"
Didn't flash the rom on my device yet, but that's soon going to happen
The dctNONE_analogtv.dll is in the windows folder, the changeusbprofile.exe and .xml are in there, too. I hope it works!
EDIT: Didn't work at all...The ChangeUSBProfile.exe didn't get installed (although I'm 100% sure that it is there and of course in the right folder). Wasn't there a license xml around or something? Because normally a Windows Phone 7 App needs a license file to get installed when starting the phone for the first time. Don't know if this applies to .exe files though.
Has someone got an idea?
-WP7User- said:
EDIT: Didn't work at all...The ChangeUSBProfile.exe didn't get installed (although I'm 100% sure that it is there and of course in the right folder). Wasn't there a license xml around or something? Because normally a Windows Phone 7 App needs a license file to get installed when starting the phone for the first time. Don't know if this applies to .exe files though.
Has someone got an idea?
Click to expand...
Click to collapse
Thanks for the work! Is it possible if we extract the official .cab update file to get a licence and patch it to the exe?
I used a PE Explorer to open the changusbprofile.exe and found a license called"Windows Mobile TCB signing cert" in it.
Another thing is I used a way to open .exe in IE (use IE in WP7 to open this thread and download the usbvideoout.zip and you can have the chance to open changeusbprofile.exe directly) but it failed in Mango. Maybe we should try this in 7004 because this is really an old file. Or we should find a .cab file that contains a exe file in it and this .cab must be announced after mango update.

hacking nac peugeot

hello,
anyone can help me to find a way to unlock/hack the infotainment system on the new peugeot 3008/5008 ecc.
i've tried to hold note button for engineering mode but only for spy menu.
anyone have more differently code for unlock android setting? for example how the kia/hyundai cars?
please sorry for my english....
I found the code 1122 to access the radio monitor...
hi guys, I'm also looking for a way to get into the hidden menu of the NAC (3d Connect Nav) Peugeot. My car is a 2008, with CarPlay, Mirrorlink and Android Auto. Now compared to what I saw for the KIA, I would try to figure out if there is a chance to enter the system that is declared Linux, and find a gateway like an android virtual emulator, on which even turns android auto, to install other applications directly on the multimedia of the car. The only 2 codes we know are: 1111 1122, the first for spylogs, the second one gives us a series of info on the system, but apparently they are only legible and there is no way to get inside. In practice using the code 1122 the first time also gave me only info on the radio, but then typing in increasing order the following codes and typing 1122 again, for several times I have drawn many other info. I took pictures that I would like to share with you to find out if there is a chance to find a way.
umbeluxa said:
hi guys, I'm also looking for a way to get into the hidden menu of the NAC (3d Connect Nav) Peugeot. My car is a 2008, with CarPlay, Mirrorlink and Android Auto. Now compared to what I saw for the KIA, I would try to figure out if there is a chance to enter the system that is declared Linux, and find a gateway like an android virtual emulator, on which even turns android auto, to install other applications directly on the multimedia of the car. The only 2 codes we know are: 1111 1122, the first for spylogs, the second one gives us a series of info on the system, but apparently they are only legible and there is no way to get inside. In practice using the code 1122 the first time also gave me only info on the radio, but then typing in increasing order the following codes and typing 1122 again, for several times I have drawn many other info. I took pictures that I would like to share with you to find out if there is a chance to find a way.
Click to expand...
Click to collapse
First of all, does anyone know that LINUX can run Android within? Would it be possible to enter the NAC system to install Android apps?
Any progress here?
I'm also try to hack in the nac.
I scanned for open ports in Bluetooth and Wifi but all ports are closed.
Does anyone has another idea how i can get access to the system files?
The source code is published here.
https://www.groupe-psa.com/en/oss/
It's from the RCC, not the NAC.
RCC is from Bosch and the NAC from Continental.
And it's useless unless you have the login data or the schematics from the board because all ports are closed.
Maybe a secret code open the ports.
But so far only 1111 and 1122 are known.
Crunchy_Nuts said:
It's from the RCC, not the NAC.
RCC is from Bosch and the NAC from Continental.
And it's useless unless you have the login data or the schematics from the board because all ports are closed.
Maybe a secret code open the ports.
But so far only 1111 and 1122 are known.
Click to expand...
Click to collapse
According to information published on https://fccid.io/ZFW-NACEUR2. This should be the source of the NAC WAVE 2 and 3.
Excludes are sources of proprietary software.
It seems that the software developed for the RCC unit, is (partly?) used for the NAC.
The base of the OS is GENIVI. A linux based OS developed for in car systems.
https://events.static.linuxfound.or...tware updates for Linux-based IVI systems.pdf.
It is designed to prevent the hacking of the system in any way.
For those of you who want to analyze their spy logs after using code 1111, you need to install Qt (qt.io/download) and download the DLT Viewer project (github.com/GENIVI/dlt-viewer). You also need a tool to extract lz4 compressed files (e.g. github.com/lz4/lz4/releases). Once you configure everything you need to extract the .lz4 file (e.g. "1_startup_20190924_181656.dlt.lz4") which results in a .dlt file (e.g. "1_startup_20190924_181656.dlt"). You can then open this in DLT Viewer.
I assume that the Navi 5.0 is using a logger similar to the one described here: github.com/GENIVI/dlt-daemon] . Also based on the information in some of the crash reports, the Navi 5.0 seems to be using Qt apps/objects.
Unfornately I do not really know how to install all these programs.
I could install qt and visual.
But all other failed.
Can you maybe do a tutorial for that?
I would be verry thankful
Regards
i do not understand too how to install these programms , can you eplain , please?
step by step would be the best.
thanks
I'll try to detail the steps for Windows as soon as I get a chance.
I installed Qt 5.12.5 + Microsoft Visual Studio 2015. When configuring the Qt Kit, I selected no C compiler and "Microsoft Visual C++ Compiler 14.0 (x86_amd64)" as the C++ compiler. After that I was able to build and run the DLT Viewer project.
The lz4 command-line utility is pretty straight-forward. Simply run "lz4.exe <file name>.dlt.lz4" to extract the files.
That's a problem fo me, I could install qt and visual but that's all.
I do not have exe files for iz4 and for dlt I do not have too.
So if you could do a tutorial with links step by step it would be verry cool
Thanks
No answer
DLT Viewer - Step by Step for Windows
I have been busy, so it took me some time The output of DLT Viewer will probably make no sense to many people, but you can draw your own conclusion at the end. I uninstalled and re-installed everything from scratch to note down each step. This assumes that you have exported the spy logs using code 1111 and that you have placed them on your PC.
Download a tool to extract the lz4 compressed spy logs.
None of the 7-zip tools/plugins worked for me.
From the command-line you can use one of the binaries here: github.com/lz4/lz4/releases . Simply run "lz4.exe <file name>.dlt.lz4" from the command-line to extract the files.
For a GUI interface, see reboot.pro/topic/22062-lz4-compressor . Within the tool, in the VHD file field you need to select your lz4 file (e.g. "1_startup_20190924_181656.dlt.lz4"). Select the output folder in the Lz4 Folder field. Leave the LZ4 field empty. Click on the COMPRESS button to extract the file (I know, the name of the button doesn't make sense).
You should end up with a .dlt file.
Download and install Visual Studio Community Edition 2015: stackoverflow.com/questions/44290672/how-to-download-visual-studio-community-edition-2015-not-2017
During installation select Custom install and Programming Languages -> Visual C++
Download and unzip DLT Viewer: github.com/GENIVI/dlt-viewer/archive/master.zip
Download and install Qt 5.12.6: download.qt.io/official_releases/qt/5.12/5.12.6/qt-opensource-windows-x86-5.12.6.exe
During installation select the following component: Qt -> Qt 5.12.6 -> MSVC 2015 64-bit
Configure the compiler in Qt
Go to the Tools menu -> Options
Select Kits in the left pane -> Kits tab
Click on "Dekstop Qt 5.12.6 ..." under "Auto-detected"
Select for Compiler C: <No compiler>
Select for Compiler C++: Microsoft Visual C++ Compiler 14.0 (amd64)
Compile and run the DLT Viewer project
Within Qt click on Open Project and open the BuildDltViewer.pro project in the unzipped folder of DLT Viewer.
Qt will switch to the Projects page (otherwise click on Projects on the left)
For the Active Project, BuildDltViewer should be selected
Click on Configure Project on the right
Go to the Build menu -> Build Project ...
When the build is finished, go the Build menu -> Run
Go to File -> Open and open one of the .dlt files.
The DLT Viewer manual can be found here: at.projects.genivi.org/wiki/display/PROJ/DLT+Viewer+Manual
I haven't spent much time looking at the DLT Viewer output, so I cannot help anyone to decipher that. Obviously feel free to share any of your findings.
New Codes Found
Nice work, Bob.
I live in Brazil and my Citroen C4 Cactus seems to use this same unit.
I reached the "Expert Mode" pressing MENU for 10 seconds and the tried the 1111 and 1122 codes.
Here 1111 brings me up the "spy" files, that I extracted using a pendrive, lz4.exe and read with a simple text editor, that does not show the file in a structure but give a good idea that what is inside it.
1122 brings only radio information.
Some news, discovered in this interaction:
1144 disabled the system beep.
1155 enabled the system beep.
I´m just downloading the source code to have an idea on how it works.
I found some schematics at web a few months ago. I will try to recover it and post here.
It will be wondering if we can get Android Auto Wireless working with these units.
Regards,
Estefano
BobM2019 said:
I have been busy, so it took me some time The output of DLT Viewer will probably make no sense to many people, but you can draw your own conclusion at the end. I uninstalled and re-installed everything from scratch to note down each step. This assumes that you have exported the spy logs using code 1111 and that you have placed them on your PC.
Download a tool to extract the lz4 compressed spy logs.
None of the 7-zip tools/plugins worked for me.
From the command-line you can use one of the binaries here: github.com/lz4/lz4/releases . Simply run "lz4.exe <file name>.dlt.lz4" from the command-line to extract the files.
For a GUI interface, see reboot.pro/topic/22062-lz4-compressor . Within the tool, in the VHD file field you need to select your lz4 file (e.g. "1_startup_20190924_181656.dlt.lz4"). Select the output folder in the Lz4 Folder field. Leave the LZ4 field empty. Click on the COMPRESS button to extract the file (I know, the name of the button doesn't make sense).
You should end up with a .dlt file.
Download and install Visual Studio Community Edition 2015: stackoverflow.com/questions/44290672/how-to-download-visual-studio-community-edition-2015-not-2017
During installation select Custom install and Programming Languages -> Visual C++
Download and unzip DLT Viewer: github.com/GENIVI/dlt-viewer/archive/master.zip
Download and install Qt 5.12.6: download.qt.io/official_releases/qt/5.12/5.12.6/qt-opensource-windows-x86-5.12.6.exe
During installation select the following component: Qt -> Qt 5.12.6 -> MSVC 2015 64-bit
Configure the compiler in Qt
Go to the Tools menu -> Options
Select Kits in the left pane -> Kits tab
Click on "Dekstop Qt 5.12.6 ..." under "Auto-detected"
Select for Compiler C: <No compiler>
Select for Compiler C++: Microsoft Visual C++ Compiler 14.0 (amd64)
Compile and run the DLT Viewer project
Within Qt click on Open Project and open the BuildDltViewer.pro project in the unzipped folder of DLT Viewer.
Qt will switch to the Projects page (otherwise click on Projects on the left)
For the Active Project, BuildDltViewer should be selected
Click on Configure Project on the right
Go to the Build menu -> Build Project ...
When the build is finished, go the Build menu -> Run
Go to File -> Open and open one of the .dlt files.
The DLT Viewer manual can be found here: at.projects.genivi.org/wiki/display/PROJ/DLT+Viewer+Manual
I haven't spent much time looking at the DLT Viewer output, so I cannot help anyone to decipher that. Obviously feel free to share any of your findings.
Click to expand...
Click to collapse
NAC Wave 2 codes (from German PSA forum)
1111 Spy log generation
1122 Master mask
1130 Information about amplifier, battery etc
1133 Information about radio / received / freq
1134 Information on satellites and services
1135 TomTom version
1136 Information about WiFi devices
1137 current user status, temp.
1138 Linux, USB, processor utilization
1139 GPU memory load
1140 connection status WiFi, tethering, Bluetooth, rndis, ipadreesen and macadressen and much more.
1141 Connected USB devices
1142 ATB connection
1143 no information without serial connection
1144 tone becomes quieter
1145 Provider status, SMS status
1146 Download status
Hope this would help
Pretty Good work BobM2019!!!
Thank you, I will try it.
For the Swiss man:
What source is the German side for the codes?
When did they wrote these info?
MitchtheMitch said:
What source is the German side for the codes?
When did they wrote these info?
Click to expand...
Click to collapse
https://www.google.com/search?q=peugeot+nac+"1144"+"1155"
Peugeot Naceur wave 2Continental Serial Connection
With TX and Rx it is possible to get in the serial console of the head unit.
But it asks for a login and password.
Imx6x-std login:
Password:
Tried a lot of things, like root and pass.
Left pass empty but nothing works.
Anybody a clue?

Categories

Resources