What parameters to use in mkrom for the new ATT offical rom? - Windows Mobile Development and Hacking General

I use splitrom and guessed parameters. but none of them work, in fact, mkrom always reported some zero pointer error and stopped. anyone tried?

I'm using following settings in mkrom:
wincever=4
start1=81740000
size1=00040000
start2=81bc0000
size2=00300000
startbmp=81ec0000
startop=81bc0000
For me it works fine.....
HTH
Stefan

here is what I got
Warning: OS type not detected, you may need to set tounicode variable manually
Integer overflow in hexadecimal number at (eval 4) line 1.
Hexadecimal number > 0xffffffff non-portable at (eval 4) line 1.
write xip block starting at 81740000, with 3 files
Integer overflow in hexadecimal number at makexip.pl line 25.
Hexadecimal number > 0xffffffff non-portable at makexip.pl line 25.
write xip block starting at ffffffff, with 0 files
Integer overflow in hexadecimal number at chainedit.pl line 217.
Hexadecimal number > 0xffffffff non-portable at chainedit.pl line 217.
Integer overflow in hexadecimal number at chainedit.pl line 217.
Hexadecimal number > 0xffffffff non-portable at chainedit.pl line 217.

well, my fault. put too many zeros after the number. now it is working

Related

No PocketMSN icon on Today screen..

..and it not under Settings/Personal/Today/Items to chech it, either. Can someone give me a hint?
Many thanks,
D.
Well first of all check dat ur MSN mess. is working fine ,if it is then let me know i will dump the reg settings ofmy handset and u can create the same in your reg .Hope so it will work .
HKLM\SOFTWARE\Microsoft\Today\Items\Pocket MSN\DLL
create a string value with msnmobileplus.dll
HKLM\SOFTWARE\Microsoft\Today\Items\Pocket MSN\Enabled
create a DWORD with 0 as a decimal value
HKLM\SOFTWARE\Microsoft\Today\Items\Pocket MSN\Flags
create a DWORD with 0 as a decimal value
HKLM\SOFTWARE\Microsoft\Today\Items\Pocket MSN\Options
create a DWORD with 0 as a decimal value
HKLM\SOFTWARE\Microsoft\Today\Items\Pocket MSN\Order
create a DWORD with 2 as a decimal value
HKLM\SOFTWARE\Microsoft\Today\Items\Pocket MSN\Selectability
create a DWORD with 2 as a decimal value
HKLM\SOFTWARE\Microsoft\Today\Items\Pocket MSN\Type
create a DWORD with 4 as a decimal value
I hope so it will solve ur problem.
no PocketMsn icon on today screen
Thank you very much, it is working !
D.

Some console commands for P3300.

Below are some commands for Artemis.
For the moment still did not find a command to backup existing ROM.
There are some interesting ones related to debug and use of TFTP.
Commands are case sensitive.
Looks like battery is charging while in bootloader mode. It was not a case with Prophet.
regards,
fdp24
*******************************************
Cmd>fm
Wrong parameters of FM Command!!
Usage:
fm [command] [frequency]
where:
if[command] = i Initialize FM.
if[command] = o Power on FM.
if[command] = f Power off FM.
if[command] = t Tune FM channel to [frequency].
if[command] = a FM auto seek test.
if[command] = m Mono(1) or Stereo(0).
if[command] = v Volume (0x00 - 0x0F).
if[command] = u Mute(0)
if[command] = g AGC(1)
if[command] = h Set seek threshold (0x00 - 0xFF).
if[command] = s Seek Up(1) or Down(0).
if[command] = r Get RSSI (0x00 - 0xFF).
if[command] = c Get current channel [frequency].
if[command] = d Get RDS data (1 - 10 groups of data).
*******************************************
Cmd>cpldver
xsvfExecute - CpldType=1
SUCCESS - Completed XSVF execution.
CPLD Ver[0]=1
CPLD Ver[1]=FC
CPLD Ver[2]=26
CPLD Ver[3]=5
Unknown yet.
*******************************************
Cmd>SetDsbDBGMSGT
Unknown yet.
*******************************************
Cmd>ReadExtROM
Dump Ext ROM to MTTY terminal
*******************************************
Cmd>WLANReset
Usage:
WLANReset 1(or0)
set SDIO: 0-WLAN ;1-SDMC.
Cmd>WLANReset 0
WLANReset(FALSE)
Cmd>WLANReset 1
WLANReset(TRUE)
*******************************************
Cmd>SDSelect
Usage:
SDSelect 1(or0)
set SDIO: 0-WLAN ;1-SDMC.
Cmd>SDSelect 1
Select SD Card
*******************************************
Cmd>emapiWlanMac
Notice: This MAC address takes effect only when your platform is EEPRON-less configuration. Please use (emapiTest) to verify it !
Copying GSM DATA image to SDRAM:00004000
Wlan data header ++++++++++++++++++++
Signature : 0xEE1250
UpdateStatus : 0x2
UpdateCount : 0xA
BodyLength : 0x1A1
BodyCRC : 0x4349311B
Wlan data header --------------------------
0x00000000
0x00000009
0x0000002D
0x000000D2
0x000000D5
0x000000FB
*******************************************
Cmd>emapiTest
+emapiTest
1. Power on WLAN
2. Reset WLAN
3. Switch MUX to WLAN
4. Enable WLAN clock
5. Init WLAN SDIO interface
6. DeviceID Test
DeviceID = 403xxxx
EEPROMless configuration!
-emapiTest
*******************************************
Cmd>emapiPwrDwn
*******************************************
Cmd>emapiRead
Parameter Wrong!!
*******************************************
Cmd>getdevinfo
Need password!
*******************************************
Cmd>wdata
Usage:
wdata [StartAddr Len]
Write data to memory(if write to ROM, need erase first).
StartAddr : Start address of memory.
Len : How many bytes will be written.
Length must not more than 0x10000 bytes(buffer limitation).
Write to RAM: 4 bytes(CRC checksum limitation).
1 byte(in user mode).
Write to ROM: 4 bytes(CRC checksum limitation).
2(16-bit)/4(32-bit) bytes(in user mode).
Write to ROM(16-bit data bus): 32 bytes(writebuffer mode).
Write to ROM(32-bit data bus): 64 bytes(writebuffer mode).
Length must be 4 bytes boundary(CRC checksum) if not in user mode.
After command execute, then send out the data to terminal.
Data format: HTCS(4 bytes)+DATA+checksum(4 bytes, if not in user mode)+HTCE(4 bytes).
*******************************************
Cmd>password
Usage:
password [String]
Enter the password string to enable wdata, erase and rbmc functions.
*******************************************
Cmd>set
Usage:
set [Type Value]
Set control flags.
Type(hex) : Control function types.
Value(hex) : Setting values for types.
Type 1(Operation mode): 1(auto) and 0(user).
Type 2(Back color on/off): 1(on) and 0(off).
Type 4(Front color value): 16 bits data
Type 5(Background color value): 16 bits data
Type 6(Set color of screen): Fill color to whole screen one time.
Current flag settings:
Type 1(Operation mode flag): g_cOpModeFlag=(0x0).
Type 2(Back color flag): cBackColorShowFlag=(0x0).
Type 4(Front color): g_dwFColor24bit=(0x0).
Type 5(Background color): g_dwBColor24bit=(0xFFFFFF).
Type 6(Set color of screen): None.
Type 32: Unlock Flash Command
Set control flags.
*******************************************
Cmd>SetDebugMethod
Copying GSM DATA image to SDRAM:00004000
Default DebugTransport Value =00000000
Current Usage:
0 No Debug
A UART MTTY Output Debug Message
B USB MTTY Output Debug Message
*******************************************
Cmd>checksum
Usage:
checksum addr len
Return CRC checksum of memory.
In user mode: Show 4 bytes of CRC checksum value on display of terminal.
In auto mode: Send 4 bytes of CRC checksum value to terminal with data format.
*******************************************
Cmd>ResetDevice
no comments
*******************************************
**When CID is locked.
Cmd>ls
clean up the image temp buffer at 0x8C100000 Length 0x03A00000
BOOTLOAD_PAGE_TABLE_BASE_C_VIRTUAL= 0x8C080000
Clear image temp buffer done .
MTTYDownloadImage
Not allow operation!
Error : DownloadImage return error (code = 0xFFFFFFFF)
**When CID is locked.
*******************************************
**When CID unlocked
Cmd>ls
clean up the image temp buffer at 0x8C100000 Length 0x03A00000
BOOTLOAD_PAGE_TABLE_BASE_C_VIRTUAL= 0x8C080000
Clear image temp buffer done .
MTTYDownloadImage
start download
==CreateFile err==
**When CID unlocked
*******************************************
Cmd>GPSRouting
Dump code to mtty console.
*******************************************
Cmd>BTRouting
Dump code to mtty console.
*******************************************
Cmd>BTRouting
+GSM_Modem_Init : include DAGON
Copying GSM DATA image to SDRAM:00004000
GSM - dwSize = 3479D
GSM Page0
GSM - dwSize = 45457
GSM Page1
GSM - dwSize = 4B768
GSM Page2
GSM - dwSize = 4E0A9
GSM Page3
GSM - dwSize = 4B4C4
GSM Page4
GSM - dwSize = 4C71F
GSM Page5
GSM - dwSize = 2958E
GSM Page6
GSM - dwSize = E8D8
GSM Page7
Copying GSM CODE image to SDRAM:00000000
ARMBOOT = 1 --> boot from CS3
Reset ARM 7 -- ok
Please close MTTY USB connection and open BT Testing program...
*******************************************
Wow.. Very VERY nice!
Wow fdp24
Please how did you found out all those comands ?
I'm curious and in the need of unbricking some.
can we use any of therse comands to make the SimLockTool_Artemis_Excalibur tool work

[Q] 8-digit hexadecimal identifier in your phone - anyone know what it could mean?

I've noticed an 8-digit hexadecimal value in Elfs/Elfins that appears to be the same across devices except when the CID/Device ID is different.
For example:
ELF010150 ROGER001: 7675BF93
ELF010150 ROGER202: 5C8C1AAB
ELF010150 BSTAR301: 6560536F (even when Part # is different)
ELF010050 BSTAR301: ?
These 4 bytes could represent something like an IP address, but that wouldn't make sense.
Anyone know what the significance of these numbers are? Is it some internal numbering system that represents a DEVICE ID + CID? Or something even more useful?
The command to obtain it is:
pdocread -S BK1C -n 1 0x8c 0x8 value.txt
Or just run the value.bat file included in this attachment.

Assign a Software to HD2 Hardware Keys

Hey guys this is my first post
I think so long for use HD2 hardkeys and find a way that explain with XDA user "rezaulkabir" And I test that and make a little change to assign voice Speed dialer to send key (Green Button) So do following :
Go to registry: you can ues resco explorer or other soft
HKLM\Software\Microsoft\Shell\
Create a new Key and named that "Keys"
Inside "Keys" create another Key named that "40C6"
Inside "40C6" create following Registry values:
1. String Value : Name= Name , value= Send key(Hold)
2. String Value : Name= Icon , value= \windows\SendKeyIcon.exe, 0
3. DWORD Value : Name= Flags , value= 0
4. String Value : Name= default , value=\windows\sddialer.exe (Or other exe files)
Now restart.
for other software you can find EXE file in windows folder and in 4 step write that.
test it and tel me how it work.

Nokia Hidden Xamls

Hi everyone.
for a better finding hidden xamls In Nokia I create a new thread to find any hidden xamls.
If you want to help us in finding these xamls please write the name of app that you are checked for it xamls.
what is your Rom Version and what xap did you used to find xamls (like me)
My phone is a Nokia Lumia 920 and it runs GDR3 Developer Preview and I used GDR2 xaps to find the xamls.
Here I take screenshots from Extras + Info xamls that you can see them in the following link.
first picture is GUID to Run and second one is the running xaml.
xamls found:
1.Extras + Info Xamls. (xap extracted from GDR2 and run on GDR3 Developer Preview)
http://d-h.st/Ip3
Instead of making a new thread...
I thought I'd post some of my new work here. This will contain everything I can possibly find that will launch.
Some of this will be SYSTEM apps, some will be OEM apps.
SOURCE: Lumia 521
HKLM\SOFTWARE\OEM\ADC (Launches access point)
Pasteable Key (for Native Toasts)
app://CE3895C7-01D0-4DAF-A4C3-25C10463942D /View/MainPage.xaml
Code:
Values Type Size Data
AutoDataConfigDll String 72 C:\Programs\CommonFiles\ADC\Adc.dll
NsaGuid String 74 ce3895c7-01d0-4daf-a4c3-25c10463942d
NsaUri String 40 /View/MainPage.xaml
MultivariantDLL String 80 C:\windows\System32\MultivariantDLL.dll
HKLM\SOFTWARE\OEM\Nokia\MultiVariant (Launches extras+info/MultiVarient?)
Code:
Values Type Size Data
Started Integer 4 0
Completed Integer 4 0
Failed Integer 4 0
Warmboot Integer 4 0
MaxRetries Integer 4 1
Retries Integer 4 0
SPN String 2
IMSI String 2
Variant String 2
CSPNodeList MultiString 94 BrowserFavorites
SUPL
SecurityPolicy
Registry
UILaunched Integer 4 0
PostOOBEAppParams String 98 /_default#/FUELib;component/Pages/SetupPage.xaml
SOFTWARE\Microsoft\Shell\OOBE - (Launches OOBE Setup?)
Pasteable Key (for Native Toasts)
app://2377fe1b-c10f-47da-92f3-fc517345a3c0/_default#/FUELib;component/Pages/ConsentPage.xaml
Code:
Values Type Size Data
ShowLanguageSelectionUI Integer 4 0
MobileOperatorLiveID String 2
CustomOOBETimeout Integer 4 300000
ActivationLocationOOBETimeout Integer 4 90000
BMRDownloadTimeout Integer 4 300000
OobeCompleteTime Long 8
CustomOOBEConnReq Integer 4 1
CustomOOBETaskName String 86 @C:\Windows\AccountDisplayStrings.dll,-102
CustomOOBEPartnerName String 86 @C:\Windows\AccountDisplayStrings.dll,-101
CustomOOBEGUIDParams String 102 /_default#/FUELib;component/Pages/ConsentPage.xaml
CustomOOBEGUID String 74 2377fe1b-c10f-47da-92f3-fc517345a3c0
BMRState Integer 4 0
NextSection Integer 4 17
ActivationLocation Integer 4 1
Done Integer 4 2
ActivationLocationLat String 0
ActivationLocationLon String 0
ActivationLocationRad String 0

Categories

Resources