QMAT - QC Mobile Analysis Tool
What is it ?
It is a development and debugging tool for Qualcomm mobiles - the only tool you'll ever need for research and development.
Who may need it ?
Mobile engineers / reverse engineers and cryptoanalysts
Crypto Functions :
- Calculate CRC-30, CRC-32, SHA1, SHA2 (SHA224 + SHA256), MD4 and MD5 of any file
- Bruteforce bytes to fit CRC-30 needed when qcsblhd_cfgdata.mbn was edited
- Decrypt and Encrypt any RSA-Message, including ASN-1 / SHA Signatures. (you can add publickeys to publickeys.xml)
- Generate RSA Private Key and create .pvk files
- Check firmware signature given Modulus and Exponent (for HTC and BQS mobiles)
- Extract information from .pvk files
- Search for algorithms in binary files (find cryptomethods + signatures) CRC8, CRC16, CRC32, MD4, MD5, SHARK, HAVAL, GZIP, ZIP, SHA1, ... and much more (you can add cryptosignatures to crypto.xml)
JTAG Interface :
(soon via Segger J-Link)
Functions for QC mobiles :
1. Load binary files for :
Extraction of certificates
Extraction of BMPs,GIFs,PNGs, JPGs
2. Load Partition File to get overview about NAND/NOR structure
3. Send any String to a COM/USB Port and backup all your SMS !
4. Make usage of QCs Diag USB/COM Port Interface
(Useful for any QC mobile in the world)
Standard Features :
- Send standard diag commands or any hexadecimal command you want (database included)
- Read out all NVItems (range given)
(all that exist, more than QPST normally extracts)
- Backup and Restore all NVItems
- Read out and Dump Firmware in Memory (SRam)
- Read out complete EFS
- Switch to FTM Mode (or anything else you want)
- Get infos about phone, codes ..... etc ..... a lot more functions
- Generate SimSecure Command to write to SimSecure using given file (may brick your phone when used without knowledge)
- Full Feature EFS Browser
Bootloader / DownloadMode Features :
- Load any file to mobile at any address and execute (bootloader f.e.)
- Read out complete NAND Memory using bootloader (range given) with included MSM6250/A bootloader or any given bootloader
Usage : Take out battery, put in battery, press ON # to enter emergency mode, Execute Loader
or (with SL91,SF71 f.e.) enable FTM mode, Execute Loader
- Use any Download Mode or Bootloader Command to experiment
- Read application memory of newer Diag Ver 6 in Download Mode
- Show complete infos about used NAND after loading of Bootloader
Flasher Features :
Flash any QC mobile (OBL Multiboot) with given bootloader
- Flash PBL (dangerous), QCSBL, QCSBL Header and Config Bits, Partition, OEMSBL, OEMSBL Header, AMSS, AMSS Header and EFS
Functions for BQS only :
1. Load AMSS to extract files or useful infos
(EF81, E81C, EF91, SXG75, EF82, SF71, SL91 or similiar ones)
Features :
Extract Infos from AMSS : USBID, Product.Nr., SVN, SwBuild, Mobiletype
Extract internal filesystem (mif,bar,sig etc. files)
Extract AMSS signature bytes (if production key)
Show all file references used by mobile
2. Check Firmware validity (signature)
3. Sim_Secure extraction/decryption (non-public)
4. Master-/Usercode/Unlock extraction and direct unlock (non-public)
Functions for HTC only :
1. Check validity of HTC firmware (signature check)
2. Cut out signatures from .nbh file
3. Split radio.nb into qualcomm files for analysis
4. Find HTC Public keys using Cryptosearch
5. Generate Security passwords (SPL + radio) for newer HTC
6. Generate NBH Files (you can add any device into devlist.xml)
7. Dump Files from NBH (you can add any type into nbhtype.xml)
8. Fix radio.nb checksum
9. Generic Bootloader / AT Command interface with logging functions
Functions for Network Engineers
Network Calculators :
TDMA (GSM/UMTS) :
--------------------
IMEI
GSM A5-1
GSM A5-2
GSM A5-3
3G ECSD
GEA3 - GPRS
3G SNOW
3G UEA2
3G UIA2
GSM A3/A8 COMP128 V1
GSM A3/A8 COMP128 V2
GSM A3/A8 COMP128 V3
3G Milenage
3G Milenage Resync
CDMA :
-------
CAVE
CAVE Authentication
CAVE CMEA
CAVE EMEA
CAVE EMEA_NF
CAVE Wireless Residential Extension
CAVE Datakey / Look Up Table / Mask
CAVE DTC / DCCH
CAVE KSG
CAVE Long Block
CAVE Short Block
CAVE Enhanced Message
CAVE Enhanced Voice Privacy
CAVE Enhanced Data Mask
and much more ....
Planned in future :
1. Bugfixes
2. EFS Restore to Zip File
3. QC Jtag interface using Segger J-Link ARM
4. LNBS HTC support to replace MTTY 5. Tooltips showing real addresses in graphical window
5. CDMA Write functions
6. Read out / Write back Addressbook
7. Restore backupped SMS to phone
8. much much more
NO UNLOCKING ! PLEASE DO NOT REQUEST. THIS PROJECT IS FOR EDUCATIONAL PURPOSES ONLY, NOT TO HARM COMPANIES FOR THEIR EFFORTS.
What we need :
- Any contribution to the project is welcome.
- Donations for new hardware and software for further development of this tool.
Link to the project files :
------------------------
Version 4.21 (Major Release) Stable
QMAT Homepage
Cya and keep on reversing,
Viper BJK
==> Donate via PayPal <==
Thanks, that's very useful. Keep up the good work!
Update : Version 3.51
---------------------
- Crypto Bugfixes solved
- Com Port Bugfixes solved
Added QMAT 3.51 manual to download page
Cya,
Viper BJK
Update : 3.52
-------------
What's new ?
1. Added SHA2 crypto search algos (SHA224 and SHA256)
2. Added SHA2 (SHA224 and SHA256) and MD5 hash generation
3. Some Bugfixes
4. HTC Security Generator for all newer HTC models (reverse genned) :
SPL and radio (works with Diamond !!)
Note : For Copy'n'Paste .. do not use MTTY, but Putty !!!
See new manual for further details ....
Enjoy !
Cya,
Viper BJK
nice one..!
Thanks
New version : 3.54
------------------
Updates :
- Added SHA-256 from HTC
- Improved RSA Decryption ... now better readable
- Added function to reverse byte strings for RSA Decryption
- Bugfixes
Cya,
Viper BJK
Update:
Small SHA2 bugfix
Good information. thanks
New version : 3.6
------------------
Updates :
- Added NBH Generator Tool
=> you can add any device to devlist.xml
=> you can sign rom files either using pvk file or using dummy signature
- Added NBH Dump Tool
=> Remove Signatures function or
=> Extract any part you wish or
=> Extract all files from nbh
=> Show infos about nbh file
=> Add new deviceparts (typeinfo) to nbhtype.xml
- Added publickeys as XML
=> add any public key to publickeys.xml
- Added tool to fix radio.nb checksum
Bugfixes :
- Fixed NBH Signature extraction
- Fixed RSA Function
For the design of NBH Tools, I was strictly influenced by Olipro's work
Cya,
Viper BJK
This is a real work....!!!!
thx for this great program
Update : 3.61
-------------
What is new ?
-------------
After being fed up with buggy Putty + Mtty, I implemented
HTC Bootloader AT Command Interface. (see picture below)
Also I was missing a good copy paste function for my hex editor.
Why wasn't it working before ?
=> HTC Bootloader isn't able to take more than one byte sent.
So :
- Implemented HTC Bootloader AT Command Tool (works also for other ones)
- Several severe bugfixes (like Display fixes)
- Fixed RSA Decryption bug (Pubkeys loaded incorrectly from xml)
What will be next ?
------------------
As I'm a Vista user (sic!) I also use the really old Activesync driver.
But this one lacks of high-speed transfer, so I'm going to implement a solution
for newer HTC phones and newer OS, as Micros*** changed to WinUSB Interface (which is better imho than virtual com port).
So :
- Will implement REAL Usb interface, no virtual serial port use
Cya,
Viper BJK
Small update :
--------------
WinUSB is now fully implemented !
It really works like a charm, much faster than putty or mtty, and really stable.
mb command runs like hell
Even better, you can break off USB connection and continue seconds after reading out bytes .... this is big news
So ... Vista Users, use new WMDC drivers, forget about old activesync one.
And as for the XP users, download WinUSB runtimes now
Bad to say, but of course WinUSB won't work with old activesync.
I'm going to implement now a logfunction for binary data, so it can be used with pdump. Once I understand how "autodownload" works, I will implement it also so that my tool can replace mtty.
If there are any wishes what should be implemented, say so
Of course I will open source for WinUSB connection for those who want to port their tools.
Cya,
Viper BJK
Update 3.70
------------
What is new ?
--------------
- Big bugfixes
- Added new WinUSB and Serial Interface for HTC Bootloader (with binary log AND pdump support)
- Added partition tool to show MORE info
- Complete new Serial interface
- Added feature to use different bootloader commands for nand reading
- Added feature to read different sizes for nand reading
- Fixed radio.nb extraction
- Fixed radio.nb checksum calculation
- etc. ..... see Manual 3.7 for complete introduction
Cya,
Viper BJK
Update 3.71
------------
Sorry for that one ... WinUSB didn't work due to memory leak.
Fixed ....
Cya,
Viper BJK
Update 3.72
------------
What's new ?
-------------
- Included HTC Security Decoder in AT Command Interface
(easier to use)
- Fixed USB / SER Problems
- HTCE/HTCS were not displayed correctly
- Fixed Display Scroll Problems in AT Command Interface
Enjoy !
Cya,
Viper BJK
Update 3.73 *Speed release !*
------------
As someone really needed this func, the following was added :
- htc at command interface bytelog can now be any filename (select log file)
- You can send any data to encapsulate, for example you want to send bytes 0x00 0x01 0x02 and 0x03 .... enter "00010203", press encap button and
bytes will be send using correct HTC "HTCS....HTCE" encap
Cya,
Viper BJK
- removed -
Update 3.74 *Special Edition for CMonex*
------------------------------------------
News :
- Added function to upload files in encapsulated header
- Bugfixes
Cya,
Viper BJK
News :
-------
3.74 has a lot of bugs in it, so sorry for that.
Download of my tool is atm not possible, I'm looking for another hoster.
New version 3.75 will be soon out, adding several bugfixes and nvitems support for HTC. Also, beginning with 3.75, my software will be shareware.
People that already donated 15 EUR will of course get source and registration key as usual for free.
Expect news soon.
Cya,
Viper BJK
ThanX Alot for this GREAT Tool !
Keep up your Good Work !
Is it possible to upload this tool on the board ? I have a forbidden acces to the google code page ... :'(
Hi i currently using HTC Trinity p3600i(black) as my pda. I frequently search for useful software but that habit is causing me more problem because i'm a newbies and stil learning in this forum & PDA world.
My PDA won't connect when my 3G simcard voice & data provider(Maxis).
I downloaded anvanced configuration tools & Resco Explorer Spb Suite(comes in pack with encryptor). What happen is, I had to hard reset my device cos it has gone haywired & hanged ( using ctrl+alt+del 3button push ) last week.
After that, I can't connect to any data connection whatsoever & it keep saying "the remote party has ended this connection". But however unlikely, when i use another ISP simcard (Celcom ) it worked just fine. Please help & advise me what to do. I'm totally blurred.
-My current ROM & Device Information-
About-Windows Mobile R 6 Professional
CE OS 5.2.1437 ( BUILD 17944.0.3.1 )
Processor : SC32442B-500MHz
Memory : 49.22 MB
Device Info
ROM VERSION : 3.00.707.17
ROM DATE : 06/29/07
RADIO VERSION : 1.46.00.11
PROTOCOL VERSION : 32.79.7020.19H
CPU : SAMSUNG (R) 2442
SPEED : 500MHz
RAM : 64MB
FLASH : 256 MB
DATA BUS : 32 BITS
STORAGE SIZE : 179.14MB
DISPLAY : 240 X 320
COLORS : 65536
TO ALL THE SIFU HERE, PLEASE HELP ME. PLS
Need Assistance in Modifying a BenQ T3 (Performance wise, Reducing Apps & Flashing)
Hello,
Before I begin explaining my predicament I would like to state that this is essentially my first post on this website so I apologize in advance if I am essentially breaching any forum policies or rules and regulations for that matter. The moderators can amend this post as they may see fit since I am not too familiar with how things work here. That said let me get straight into what I am hoping to achieve.
I have a Benq T3 Android phone that I would like to customize, upgrade, add new features, remove flagship (reads default phone) applications, since they're essentially hogging space on the phone, and I hardly use them & finally upgrade the said former to a new Android (custom) or standard OS if it's possible based on the details I will be posting below. With all this I would like a custom or simple boot up screen as well without the Benq logo flashing all over the screen every time I power on or restart the phone.
The purpose of this exercise is:
1) I need to push this phone to the maximum limits of its hardware capability, overclocking, optimizing RAM, increasing swap space etc (currently it's not fast enough for me)
2) Remove all unnecessary applications completely (Flipboard, Benq applications that are part of the phone, WPS office), all these are by default inside the phone and even though I have tried uninstalling them they only uninstall the updates and the application still sits in hogging the phone space, which is quite frustrating.
3) To see if any relatively latest Android version could be used with the acceleration (hypothetically) done in the above point (1).
4) Flashing a new ROM (if necessary) something that may actually make this phone a better version of itself.
What will I use this phone for (Once it is done)
1) Twitter (Main function)
2) Texting (Main function)
3) Whatsapp (Main function)
4) Newspaper Applications~Text Reading Mainly, some sort of Flash / HTML5 as well (Main Function)
5) PDF reading (Main Function)
6) Discussion Board Browsing (Main function)
7) Emails (Secondary Function) ~ Using an Email client (Also need recommendations of light Apps that might work on the new made over system)
8) Youtube (Secondary Function)
9) Soundcloud (Secondary Function)
10) Word Processing including Spreadsheet + Ppt stuff occasionally (Secondary Function)
VERY IMPORTANT ~ EVERYTHING OTHER THAN WHAT I HAVE WRITTEN NEEDS TO GO
VERY IMPORTANT ~ THIS PHONE IS ROOTED VIA KINGO ROOT ALREADY
What I have currently
1) A computer running Windows 7 Home Premium x64 bit, i5 Gen 2 with 6 GB DDR2 RAM - Dell Inspiron N5110
2) An internet connection of around 20-30 Mbps
3) No programming ability whatsoever (A complete Newbie while being a downright noob in such stuff)
4) 3 hours a day (at best) to understand, implement and get this over with ASAP
5) English as my first language
6) Nothing else I am afraid
Please note that my generic aim to customize this BenQ phone is in pursuits of attaining maximum performance that the phone can generate for me while running the basic apps that I have mentioned above.
----------------------------------------------------------------------------------------------------------
That said I will now proceed to mention all my phone's tidbits based on the information that I gathered via Aida64 application
----------------------------------------------------------------------------------------------------------
Code:
----------------------------------------------------------------------------------
System
----------------------------------------------------------------------------------
Manufacturer - BenQ
Model - BenQ T3
Board - MSM8926
Device - T3_17A
Hardware - QCom
Platform - msm8226
Product - T3_08
Installed RAM - 1 GB
Total Memory - 866 MB
Available Memory - 256 MB
Internal Storage (Total Space) - 2051 MB
Internal Storage (Free Space) - 732 MB
----------------------------------------------------------------------------------
android.hardware.bluetooth
android.hardware.bluetooth_le
android.hardware.camera
android.hardware.camera.any
android.hardware.camera.autofocus
android.hardware.camera.flash
android.hardware.faketouch
android.hardware.location
android.hardware.location.gps
android.hardware.location.network
android.hardware.microphone
android.hardware.screen.landscape
android.hardware.screen.protrait
android.hardware.sensor.accelerometer
android.hardware.sensor.compass
android.hardware.sensor.light
android.hardware.sensor.proximity
android.hardware.sensor.stepcounter
android.hardware.sensor.stepdetector
android.hardware.telephony
android.hardware.telephony.gsm
android.hardware.touchscreen
android.hardware.touchscreen.multitouch
android.hardware.touchscreen.multitouch.district
android.hardware.touchscreen.multitouch.jazzhand
android.hardware.usb.accessory
android.hardware.wifi
android.hardware.wifi.direct
android.software.app_widgets
android.software.device_admin
android.software.home_screen
android.software.input_methods
android.software.live_wallpaper
android.software.sip
android.software.sip.voip
com.nxp.mifare
mobi.qiss.preload.benq
mobi.qiss.preload.benqhome
Code:
----------------------------------------------------------------------------------
CPU
-----------------------------------------------------------------------------------
SoC Model - Quadcomm Snapdragon 400 (MSM8926)
Core Architecture - 4x ARM Cortex-A7 @ 1190 MHz
Manufacturing Process - 28 nm
Instruction Set - 32-bit ARMv7
CPU Revision - r0p3
CPU Cores - 4
CPU Clock Range - 300 - 1190 MHz
Core 1 Clock - 787 MHz
Core 2 Clock - 787 MHz
Core 3 Clock - 787 MHz
Core 4 Clock - (Sleeping)
CPU Utilization - 74%
Scaling Governor ondemand
CPU ABI - armeabi-v7a
CPU ABI2 - armeabi
AES - Not Supported
NEON - Supported
SHA1 - Not Supported
SHA2 - Not Supported
Code:
------------------------------------------------------------------------------------
DISPLAY
------------------------------------------------------------------------------------
Screen Resolution - 540 x 960
Screen Size - 56 mm x 99 mm
Screen Diagonal - 4.48 inches
Pixel Density - 246 dpi (hdpi)
xdpi / ydpi - 245 / 246 dpi
GPU Vendor - Qualcomm
GPU Renderer - Adreno 305
GPU ALUs - 24
Current GPU Clock - 320 MHz
CPU Clock Range - 200 - 450 MHz
GPU Utilization - 0%
Scaling Governor msm-adreno-tz
Refresh Rate - 62 Hz
Default Orientation - Portrait
OpenGL ES Version - 3.0
GPU Version - OpenGL ES 3.0 [email protected]
[email protected]
LNXBUILD_Nondeterminist
ic_AU+PATCH[ES]_msm8226
_LNX.LA.3.5.1_RB1_CL330
4448_release_ENGG
([email protected])
--------------------------------------------------------------------------------------
GL_AMD_compressed_ATC_texture
GL_AMD_performance_monitor
GL_AMD_program_binary_Z400
GL_EXT_debug_label
GL_EXT_debug_marker
GL_EXT_discard_framebuffer
GL_EXT_robustness
GL_EXT_texture_format_BGRA8888
GL_EXT_texture-type_2_10_10_10_REV
GL_NV_fence
GL_OES_compress_ETC1_RGB8_texture
GL_OES_depth_texture
GL_OES_depth24
GL_OES_EGL_image
GL_OES_EGL_image_external
GL_OES_element_index_uint
GL_OES_fbo_render_mipmap
GL_OES_fragment_precision_high
GL_OES_get_program_binary
GL_OES_packed_depth_stencil
GL_OES_depth_texture_cube_map
GL_OES_rgb8_rgba8
GL_OES_standard_derivatives
GL_OES_texture_3D
GL_OES_texture_float
GL_OES_texture_half_float
GL_OES_texture_half_float_linear
GL_OES_texture_npot
GL_OES_vertex_half_float
GL_OES_vertex_type_10_10_10_2
GL_OES_vertex_array_object
GL_QCOM_alpha_test
GL_QCOM_binning_control
GL_QCOM_driver_control
GL_QCOM_perform_global_mode
GL_QCOM_extended_get
GL_QCOM_extended_get2
GL_QCOM_tiled_rendering
GL_QCOM_writenly_rendering
GL_EXT_sRGB
GL_EXT_sRGB_write_control
GL_EXT_texture_sRGB_decode
GL_EXT_texture_filter_anisotropic
GL_EXT_multisampled_render_to_texture
GL_EXT_color_buffer_float
GL_EXT_color_buffer_half_float
Code:
--------------------------------------------------------------------------------
NETWORK
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
TELEPHONY
--------------------------------------------------------------------------------
Phone Type - GSM
SIM State - Absent
ICC Card - Not Present
---------------------------------------------------------------------------------
WIFI
---------------------------------------------------------------------------------
State - Enabled
SSID - DSC Network
BSSID - d4:6e:0e:ee:2c:6b
Hidden SSID - No
MAC Address - 1c:e1:92:1c:11:ba
Signal Strength - 47 dBm (Excellent)
Link Speed - 65 Mbps
Network ID - 3
Gateway - 192.168.0.1
Netmask - 255.255.255.0
DNS1 - 192.168.0.1
DHCP Lease Duration - 2 hours
Wi-Fi Aware - Not Supported
Wi-Fi Direct - Supported
Code:
--------------------------------------------------------------------------------
BATTERY
--------------------------------------------------------------------------------
Power Source - A/C Charger
Level - 67 %
Status - Charging
Health - Good
Technology - Li-ion
Temperature - 40.6 C
Voltage - 4.044 V
Capacity (Reported by Andorid) - 2520 mAh
Code:
--------------------------------------------------------------------------------
ANDROID
---------------------------------------------------------------------------------
Andriod Version - 4.4.2 (KitKat)
API Level - 19
Rooted Device - YES
Android ID - 63f50428151aae1c
Baseband - MPSS.DI.2.0.1.c1-00223-
M8926DAAAANAZM-1
Build ID - SWEP_GA31I17A_v01.057.03.g_08
Codename - REL
Fingerprint - BenQ/T3_08/T3_17A:4.4.2/
KVT49L/
SWEP_GA3I17A_v01.057.03
.g_08:user/release-keys
ID - KVT49L
Incremental - 376
Java Runtime Version - Android Runtime 0.9
Java VM Version - Dalvik 1.6.0
Java VM Heap Size - 96 MB
Kernel Architecture - armv7I
Kernel Version - 3.4.-g3104c58
([email protected]
)(gcc version 4.7 (GCC))
#1 SMP PREEMPT Thu Mar
12 10:52:17 CST 2015
Tags - release-keys
Type - User
Google Play Services Version - 11.5.09 (034-164803921)
OpenSSL Version - OpenSSL 1.0.1e 11 Feb 2013
ZLib Version - 1.2.8.f-linuxfoundation-
mods-v1
ICU CLDR - 23.0
ICU library Version - 51.1.0.1
ICU Unicode Version - 6.2
Android Language - English (United States)
Configured Time - Malaysia Time (UTC+08:00)
UpTime - 01:16:03
Code:
-----------------------------------------------------------------------------
DEVICES
-----------------------------------------------------------------------------
-----------------------------------------------------------------------------
Rear Facing Camera
-----------------------------------------------------------------------------
Resolution - 8.0 MP (3264 x 2448)
Video Resolution - 2.1 MP (1920 x 1080)
Focal Length - 3.85 mm
Focus Modes - auto, infinity, macro,
continious-video,
continuous-picture
Video Snapshot - Supported
Video Stabilization - Not Supported
Zoom - Supported
Smooth Zoom - Not Supported
Auto Exposure Locking - Supported
Auto White Balance Locking - Supported
Flash - Supported
-----------------------------------------------------------------------------
Front-Facing Camera
-----------------------------------------------------------------------------
Resolution - 0.3 MP (640 x 480)
Video Resolution - 0.3 MP (640 x 480)
Focal length - 1.21 mm
Focus Modes - Fixed
Video Snapshot - Supported
Video Stabilization - Not Supported
Zoom - Supported
Smooth Zoom - Not Supported
Auto Exposure Locking - No Supported
Auto White Balance Locking - Not Supported
-----------------------------------------------------------------------------
OpenCL Device - QUALCOMM
Adreno(TM)
-----------------------------------------------------------------------------
Device name - QUALCOMM Adreno (TM)
Device Type - GPU
Device Vendor - QUALCOMM
Device Vendor ID - 0xBF4D3C4B
Device Version - OpenCL 1.1 Adreno(TM) 305
Device Profile - Embedded
Driver Version - OpenCL 1.1 QUALCOMM build:
LNXBUILD_Nondeterminist
ic_AU+PATCH[ES]_msm8226
_LNX.LA.3.5.1_RB1_CL330
448_release_ENGG
(CL3304448)
Build Date: 04/21/14 Mon
Local Branch:
Remote Branch: quic/
LNX.LA.3.5.1_RB1.1
Compiler E031.24.00.14
OpenCL C Version - OpenCL C1.1 Adreno(TM) 305
Clock Rate - 400 MHz
Compute Units - 1
Address Space Size - 32-bit
Max 2D Image Size - 4096 x 4096
Max 3D Image Size - 4096 x 4096 x 512
Max Samplers - 16
Max Work-Item Size - 256 x 256 x 256
Max Work Group Size - 256
Max Argument Size - 256 Bytes
Max Constant Buffer Size - 4 KB
Max Constant Arguments - 8
Max Printf Buffer Size - 1 MB
Native ISA Vector Widths - char1, short1, int1, half1, float1
Preferred Native Vector Widths - char1, short1, int1, long1, half1, float1
Profilling Timer Resolution - 1000 ns
OpenCl Library - /system/vendor/lib/libOpenCL.so
Global Memory - 443684 KB
Global Memory Cache - 8 KB (Read/Write, 64 Byte Line)
Local Memory - 8 KB
Max Memory Object Allocation Size - 443684 KB
Memory Base Address Alignment - 512-bit
Min Data Type Alignment - 64 Bytes
Command-Queue Out of Order Execution - Enabled
Command-Queue Profiling - Enabled
Compiler Available - Yes
Error Correction - Not Supported
Images - Supported
Kernel Execution - Supported
Linker Available - Yes
Linker-Endian Device - Yes
Native Kernel Execution - Not Supported
SVM Automics - Not Supported
SVM Coarse Grain Buffer - Not Supported
SVM Fine Grain System - Not Supported
Unified Memory - Yes
OpenCL Extension
cl_img_egl_image
cl_khr_byte_addressable_store
cl_khr_egl_event
cl_khr_fp16
cl_khr_gl_gl_sharing
cl_khr_global_int32_base_atomics
cl_khr_global_int32_extended_atomics
cl_khr_local_int32_base_atomics
cl_khr_local_int32_extended_atomics
cl_qcom_create_buffer_from_image
cl_qcom_ext_host_ptr
cl_qcom_ion_host_ptr
cl_qcom_limited_printf
cl_qcom_extended_images
-----------------------------------------------------------------------
OpenCL Device - QUALCOMM Krait(TM)
-----------------------------------------------------------------------
Device Name - QUALCOMM Krait(TM)
Device Type - CPU
Device Vendor - QUALCOMM
Device Vendor ID - 0xBF4D3C4B
Device Version - OpenCL 1.1. Krait(TM)
Device Profile - Embedded
Driver Version - OpenCl 1.1 QUALCOMM
build:
LNXBUILD_Nondeterminist
ic_AU+PATCH[ES]_msm8226
_LNX.LA.3.5.1_RB1_CL330
4448_release_ENGG
(CL3304448)
Build Date: 04/21/14 Mon
Local Branch:
Remote Branch: quic/
LNX.L.A.3.5.1_RB1.1
Compiler E031.24.00.14
OpenCL C Version - OpenCL C 1.1. Krait(TM)
Compute Units - 1
Address Space Size - 32-bit
Max 2D Image Size - 8192 x 8192
Max 3D Image Size - 2048 x 2048 x 2048
Max Samplers - 16
Max Work-Item Size - 1 x 1 x 1
Max Work-Group Size - 1
Max Argument Size - 256 bytes
Max Constant Buffer Size - 64 KB
Max Constant Buffer Size - 8
Native ISA Vector Widths - char16, short8,int4, long1, half8, float4
Preferred Native Vector Widths - char16, short16, int16, long1, half16,float16
OpenCL Library - /system/vendor/lib/libOpenCL.so
Global Memory - 443684 KB
Global Memory Cache - 1 MB (Read/Write, 64-byte
line)
Local Memory - 32 KB
Man Memory Object Allocation Size - 443684 KB
Memory Base Address Alignment - 1024-bit
Min Data Type Alignment - 128 bytes
Command-Queue Out of Order Execution - Enabled
Command-Queue Profiling - Enabled
Compiler Available - Yes
Error Correction - Not Supported
Images - Supported
Kernel Execution - Supported
Linker Available - Yes
Little-Edndian Device - Yes
Native Kernel Execution - Supported
SVM Atomics - Not Supported
SVM Coarse Grain Buffer - Not Supported
SVM Fine Grain Buffer - Not Supported
SVM Fine Grain System - Not Supported
United Memory - Yes
OpenCL Extensions
cl_khr_global_int32_base_atomics
cl_khr_global_int32_extended_atomics
cl_khr_local_int32_base_atomics
cl_khr_local_extended_atomics
cl_khr_byte_addressable_store
cles_khr_int64
cl_khr_fp16
No USB devices found.
No CUDA devices found.
No Vulkan devices found.
No PCI devices found.
Code:
----------------------------------------------------------------------------
THERMAL
----------------------------------------------------------------------------
tsens_tz_sensor0 - 42.0 C
tsens_tz_sensor1 - 43.0 C
tsens_tz_sensor2 - 42.0 C
tsens_tz_sensor3 - 42.0 C
tsens_tz_sensor4 - 41.0 C
tsens_tz_sensor5 - 43.0 C
ppm8226_tz - 38.7 C
pa_therm0 - 25.0 C
pa_therm1 - 25.0 C
Battery - 31.6 C
Ok, I did a bit of a mess up with the phone - Sorry! I tried removing the bloatware (BenQ software) using SuperUser app that I had installed previously after the KingoRoot and now the phone has lost it's systemUi
I see no icons on my screen and it takes very long to boot up the phone (heck most times it just gets stuck on the loading screen). I tried to do a master reset by pressing the power button + Volume down and cleaning all user data but everything I try seems to be in vain. The data was reset as I had to enter my google account and all flagship apps lost its updates but even so the result (i.e. no SystemUi) remains.
There seem to be no guides on this phone Model (BenQ - T3) at all on XDA forum or the internet for that matter.
Any suggestions on what can I do next ??
P.S. The phone has no SD card and this is just a Testing phone so I can play around with it as much as I can. Any help on the matter would be much appreciated.
Writing this after I've successfully troubleshooted and resurrected the phone to a much better state. Apparently in my haste to try out things I accidently damaged the launcher for my phone which totally messed up the User Interface.
Nearly three months of searching and reading various online material for my phone (still cannot find stock ROM) without avail I came back on XDA and posted this entire problem from scratch in the Noob Friendly Questions Thread.
Luckily a couple of blokes helped me out on the matter and I have managed to bring my phone back to a working state (typing this post from the XDA app itself on my BenQ)
If you want the reference to the conversation please visit the thread '[HELP THREAD] Ask ANY Question. by immortalneo' and start reading my post from page 4075 onwards.
Tools that I used to rectify this:
1) Adb and Fastboot drivers installed in the PC
2) Rooted BenQ T3 (if you haven't Rooted yet then just download KingoRoot, enable USB debugging and root the phone - Do a Google search and you'll find it pretty easy)
3) KitKat launcher apk app
At first I went into recovery mode and wiped clean the data and cache, this helped me boot into the phone after which I connected it to my PC (USB debugging on) and ran the following command:
Code:
Adb reboot bootloader
The phone then went into Fastboot mode and I had to further write this:
Code:
Fastboot oem unlock
The above command unlocked the bootloader after which I once again booted into the phone recovery and wiped clean the data and cache. When the boot up process was done I had to connect again to the PC (USB debugging on) and install the launcher by writing:
Code:
Adb install [launcher_name]
This repaired my UI and all the icons and screen windows came back to normal, my problem of being stuck at a normal boot up process also resolved once I reinstalled the launcher correctly!
Once the GUI came back I reentered my Google credentials, carefully uninstalled all bloat ware and unnecessary apps via Kingo Super user app and updated all the ones that I use on a daily basis.
I now will look to find TWRP or any custom recovery for my phone and Custom ROMs as well. If anyone can point me to the right direction then that would be highly appreciated !!!
Hi all.
I need to deactivate the Bluetooth connection in my Citroën C4. It uses a NAC infotainment system (same as Peugeot) but there is no option in the menu to do it.
I founded in previous infotainment there were some cheats codes (like BTSTARTER;0) to do it, but they don't work in NAC. There we have the hidden menu but it only shows information and is not possible to modify anything there.
Spoiler: Explanation
To access the hidden menu in NAC is necessary to press at least 6 seconds the multimedia button and then enter first the list (for example 1130) and then the code 1122.
Here is the list of available codes
1111 Spy log generation
1122 Master mask
1130 Information about amplifier, battery etc
1133 Information about radio / received / freq
1134 Information on satellites and services
1135 TomTom version
1136 Information about WiFi devices
1137 current user status, temp.
1138 Linux, USB, processor utilization
1139 GPU memory load
1140 connection status WiFi, tethering, Bluetooth, rndis, ipadreesen and macadressen and much more.
1141 Connected USB devices
1142 ATB connection
1143 no information without serial connection
1144 tone becomes quieter
1145 Provider status, SMS status
1146 Download status
But under the NAC there is a Linux system, so for sure it is possible to create a script or something similar that would be read from the USB.
In this thread they found the way to create a file that will be read by the system to perform some actions, so I guess it could be a starting point
Spoiler: Explanation
Here is explained how to create a file to be read by the car:
Crunchy_Nuts said:
So the complete content of the usb file is
Code:
#USB Demo file
[general]
id=9cfd0bf57a94a3beb6c990e9c9c78247a8bc78fd3310aa6f58a247f8dabe3b7f
# Activate engineering mode
# engineering_mode=0 (Absent) engineering_mode=1 (Present)
engineering_mode=1
# Create one spy
# create_spy=0 (don't create spy) create_spy=1 (create spy)
create_spy=1
# Option to automatically sync spies with USB. Currently it exports spies to USB and delete the existing ones on NAND
sync_spies_with_usb=1
Create a file and rename it to ID (without any file extension!) and copy the code above into the file.
Copy the file in the root directory of the usb stick and plug it in to the nac.
After you insert it in the nac, it will copy the spylogs to usb.
And maybe you can do other things with the engineering mode.
Click to expand...
Click to collapse
The id comes from rootfs\usr\bin\sem_dm_server, but I would need help to find my own ID if necessary
I don't know if it would be possible to do it based on some of the previous ideas or somebody has another way to do it. I would really appreciate any ideas.
It is something very important for me, so I would be happy to invite some drinks (or a dinner!) if somebody could help me with it.
Cheers!