Reverse engineering Androids serial AT commands for LG? - Android Q&A, Help & Troubleshooting

I've been looking into the serial AT commands for LG phones (G3 & G4). I was able through objdump to reassemble the file /bin/atd which holds all the AT commands, like AT%FRST (factory reset device), etc.
Anyways, what I'm looking to do now is to find the actual functions that go along with these AT commands located in the file: atd. I was able to snoop around a bit and found many files that all seemed to converse with this main atd file, but finding the actual functions was to no avail. I was able to generate a atd.c file through an online decompiler, but the file is generated and doesn't seem to actually show the actual functions, but just the memory addresses to these AT functions themselves, which I haven't been able to trace. I'm looking for certain files that I could reassemble and get these functions that go along with the commands, it'd be greatly appreciated for any help at all. Thank you
If you'd like me to show my current findings, please let me know. First time posting on here, and I can't seem to locate the attachment button.

Related

Never Flash/tweak again for modifying an Ext ROM

A better way (??)
Why would one want to do this?
1. Extended ROM is (as ITSME has pointed out) a Disk on Chip.
1a. It is totally lockable/unlockable -- and can be deleted/added to if one wants to, as long as one understands a few basic things.
2. When the device is hard resetted, after booting is complete, one automatically runs the CAB files in Extended ROM that "localize" the device in accordance with the Carrier's wishes. This is a good thing, and a bad thing... especially if the SW they install is Caller ID, for example, that eats memory and battery performance. But it is a needed thing for the most part in my opinion.
BUT.....
What if you could do the following:
1. Delete your entire extended Rom (ITSME has shown this to be possible)
2. Take the extended ROM files "as is" from all of the carriers out there -- kind of like ala carte menu choices -- and place them somewhere where upon your choosing, could be installed immediately at one's whim (even with the same parameters and running as if they were still came from the Extended ROM)
3. Never have to worry about flashing your device again, unless there is a significant OS reason to do so.
4. Forget using tools one doesn't need to use.
5. Tweaking a config.txt file -- why bother if ya don't have to.
Sound Good????
In my opinion, the only real reason we have many people out there playing around with flashing ROMS is that they want a "perfectly customized device" every time they hard reset. The REAL, Operating System upgrades and Radio stack upgrades are not needed as often and people are willing to wait until their device OEM gets around to the upgrading themselves.
Bottom line: Hard Reset, install your own programs to your liking, and have your device almost as if you never resetted it up and running in a matter of minutes (2 or 3, not 30) with no risk at all to your ROMS.
If this is what people REALLY would rather have, instead of flashing extended ROMS and risking killing their machines....
In a day or two, I will have a (very) little app made that can do this, and show you the "secret" (though I think this is not a secret -- but could be wrong) do doing this.
This post is sent out to "test the water" on this app/solution I will provide.
((no charge))
Feel free to comment, so I can see if people want it or not -- so I will know if to bother making (have made) /telling how to do this.
Plus, also feel free to comment if my thinking here is completely from Mars
Excellent idea. Just a simple list of cab files with location, check box to select and parameters if required is all thats needed inmo. You could then store the cab where you want, SD or Extrom, and then after a hard reset just run the app to execute the select cab's
Can't wait, certainly prevent all those deep despare moments when it doesn't go smoothly and you think you've trashed you device !!!
Victor...
Give us the application then....
Smiles.
got to have it made first....
Ok, here is the deal: I don't have time today to test all of the in's and out's of this -- but by leveraging the power of this forum, I think it will quickly be all figured out and expanded upon.
1. Most people don't know that if you place a directory called "2577" on an SD Card and place in it a file called "Autorun.exe", the file will run when you place the card in the slot of your device. This works for smartphones, XDA2's and Ipaq's (so I am guessing that it is a WIN CE thing).
2. If you could develop an app whose sole purpose was to execute the cab files in the directory (easy to make, for a dev), you could autoload apps at will.
This means that after a hard reset, if your Ext ROM was empty, you could basically mimmick the loading of the stuff when and how you want to -- without cooking an External ROM.
This leaves tons of possibilities
1. using the EXT ROM area for storage that will not go away on Hard Resets and is larger than the normal persistent storage on our devices.
2. using the EXT ROM area for "private storage" that can be hidden with ITSME's tools.
3. using the SD Card to not only load your preferred files, but also (if someone is really clever and can figure this out) your connection settings and what ever other REG settings you feel like.
I HAVE FOUND ONE "CATCH" HERE...
The autorun.exe will execute upon card removal too, so one will have to probably rename the file while in the device or the directory name to "2577XX" so it will not run again.
if you let your mind wander a bit -- the possibilities are endless here
but again, I have not tested out all of the possibilities nor tested it for problem situations -- so that is where the power of the forum comes in. Seems easy to experiment without nuke-ing your device.
I am going to erase my EXT ROM, make my own version of what I want on the SD card, and use the EXT ROM for storing stuff I don't want to lose ever.
By all means... comment, take this idea and run with it.
I am going to have a little app made that will run all cabs in the 2577 directory in a few days -- but I am dependent upon a DEV resource so the delivery time of this "5 minute application" is not 100% known.
Enjoy!!
It's a great idea. I do like it very much. I will try to play with the concept. But, let me ask you where to get 'Autorun.exe' and comand line for this program.
Thanks,
Ah! I think I understand now. "Autorun.exe" can be any executable program, just name it "Autorun.exe". Right?
It work like a charm. I copy a program "Autoconfig.exe" and rename it to "Autorun.exe". Then move it to dir "2577". When I insert SD card into the socket, it stand still, nothing happen. But when I turn off and then on, it execute the said program. Then I Off and On for second time, it won't execute, which is correct. It will execute the program again if I take the SD out from the socket.
I can then play a lot of things with it.
Thanks, Victor
you are right.. any EXE program can be renamed autorunexe. I have not got all the permutations worked out yet as to what can or cannot be done yet, but if time allows I will do more research.
I am expecting my little EXE to be finished today, where it's sole purpose will be to run all CAB files in the directory.
When done, then I will post it here.
If anyone has ideas as to how to re-do the connections / reg settings and place them in a CAB file, like the OEMs do, then you can comletely customize evrything at will, with a power-on.
For portugal here are the configs, in a .cab for each portughese mobile operator.
These were made by www.qtek.com.pt
http://www.enev.pt/ppcforum/index.php?act=ST&f=37&t=1492&s=2a02c5df8d4b65cf66ca27e0aadc4817
(portughese language forum, but if interested in any info send me a PM)
how autorun works
when you insert the sdcard the autorun.exe is copied to \windows, and executed as '\windows\autorun.exe install'
when you remove the sdcard, '\windows\autorun.exe uninstall' is executed, and then autorun.exe is deleted from \windows.
So then, in theory, if you manually delete this file before removing the SD card -- it would not run again then, right?
Trying to think of ways to automate the entire Hard Reset issue -- select your Extended ROM programs / settings you want -- and then plug and play. Changing EXT ROMS made to be as simple as selecting which SD card to install after Hard Reset.
Plus, if the last thing you did before the Hard Reset was to perform a backup to a secure area (like the now empty EXT ROM area), you could also have the autorun program look for the back up and do a restore. May be easier than trying to place all settings into CABS and you benefit from having your data again after a Hard Reset -- all in a few sinple steps.
That is the whole purpose of my activities / efforts here. I hard reset at least 2 times a week (I have special reasons for this).
obviously -- some of the ideas presented up to now are simply brainstorming the possibilities. hope to come up with the right and complete idea soon and have it made here. Then post it here for all.

System files moving not permitted

Hi to everyone.
Before this HTC device I had others and also had a Motorola Mpx220 (WM2003 SE).
I was used to move the files within "\Windows\Start Menu" (mostly .lnk files to installed programs) into newly created subfolders, to be able to use and/or access the function I needed in a faster way.
I've tried doing the same on this WM5 device, but everytime I try I get an error message reporting it is not possible (File Explorer has greyed out options to cut and/or copy, while TotalCommander just reports it's not possible to "overwrite" ???).
Does anyone have an idea of how this can be done (registry ???) ?
Thank you.
Ciao
Here is the solution...
Hi Mix, it's Mix answering (yes, I'm the same person...)...
First of all I would like to thank you ALL the people which knew the solution and were fighting to answer to my doubt...
You were so many, I wonder why the message has been read times and so many answers arrived: 0 (yes, ZERO).
Anyway, I came across the solution myself, by chance...
The problems seems being the smartphone versions of WM5 being protected against file modifications. This protection extends also to some files execution and to certificate installations (hence some problems may arise when connecting to an Exchange Server for syncronization).
Some tools are needed to remove this protection, and some experience of registry modification is required too (I will not help anyone beside what is in this message and I take no responsability for any mistakes and/or troubles you may produce or face).
First of all you need a special version of RegEdit (the tool from PHM): you should find an HTC digitally signed copy of it called RegEditSTG.exe.
Look around for it: there are many forums around which do hold a copy of it.
Place it in your phone's memory, not on the MicroSD card...
With this tool you should change the following values:
HKLM\Security\Policies\Policies\00001001 = 2 => 1 (RAPI)
HKLM\Security\Policies\Policies\00001005 = 16 => 40 (Cert)
HKLM\Security\Policies\Policies\00001017 = 128 => 144 (?)
The first is the value you will find, the second is the value you should enter. The third line has a question mark because someone says it should be made, someone not... It's up to you. I made it.
Then you should find another tool (with the same above method) called SDA_ApplicationUnlock.exe which has to be run on your desktop PC with the phone already connected with USB (and possibly with ActiveSync not in the middle of a sync...).
Once you run this, you will get a message that the unlock took place (if not, it may be the first operations did not complete well).
Disconnect your phone from the USB cable and power cycle it (switch it off and then on again).
Opla'... the phone is not APPLICATION UNLOCKED and you will be able to move file around the directories as I was looking to when I first posted my message.
Now I have a very quick Start Menu, as I wanted.
Please, be aware that this operation hacks the security policies of WM5 and then any other application which may be dangerous can now run on your phone.
If you wish to stay on the safe side, it could be useful to restore the registry settings to their original values, but I do not know if this could cause other problems, since I didn't on my phone.
I actually double check every single file by myself before launching it and I do not run anything which I'm not sure it is safe.
So, pay attention... (you have been warned...).
Hope this helps someone else out there.
Ciao
Thanks for the tips mate! I was searching around for the same problem.
Can a hard reset put all the files back as in the old WM2003? I'm asking that 'cause if you look at the windows directory, many exe and dll files are repeated, with a different code. I guessed they are for the many different languages the phone support and the code is the country code. Maybe when you switch from one language to another those files are renamed so you have the correct exe and dll for the language you need...
If I can erase all the files I don't need (I will never change the language or maybe have only italian and english) I can save lot of space.
Am I wrong? Was that ever tried before?
vbi said:
Thanks for the tips mate! I was searching around for the same problem.
Click to expand...
Click to collapse
;-) I knew...
Can a hard reset put all the files back as in the old WM2003? I'm asking that 'cause if you look at the windows directory, many exe and dll files are repeated, with a different code. I guessed they are for the many different languages the phone support and the code is the country code. Maybe when you switch from one language to another those files are renamed so you have the correct exe and dll for the language you need...
If I can erase all the files I don't need (I will never change the language or maybe have only italian and english) I can save lot of space.
Am I wrong? Was that ever tried before?
Click to expand...
Click to collapse
In order:
- Yes, I suppose a hard reset of the device completely restores the original factory settings, hence, the device will appear as "brand new".
- You're right: all the localized files present there are just to be able to swithc to other languages (maybe following user's settings and maybe also following user's SIM settings too...).
- Erasing the unused files may appear as a "space saving" job. It is not. First of all you will not be able to remove ROM resident files, but provided you could be able to do this, you will not be able to use ROM space as you intend...
Finally then, it's completely unuseful to try to remove them, just a waste of time trying...
Ciao
Thanks Michele.
Are you sure the windows directory is in ROM?
I always tought ROM was only to store the "disk" image when you hard reset the device. I was so for the Qtek S100.
vbi said:
Are you sure the windows directory is in ROM?
Click to expand...
Click to collapse
Yes it is. On the fact that it is then copied into RAM, well, this is a tecnique which was used up to WM2003 SE devices.
Starting from WM5 devices MS somewhat changed the behaviour of the whole system, hence I'm not then so sure.
Indeed, I have never been sure of anything, beside death, so you can imagine...
I'm not really so "expert".
Having used an MPx220 for over one year (with all its limitations, but exploiting it very much), using a WM5 device now is a much more relaxed experience (faster, more realiable and less troubly in terms of memory).
Just MHO
Thanks Mix - i followed your directions and it worked.
Got my QTEK (running i-Mate ROM) Application Unlocked

Divining application registrations

Hey guys:
Quick question. I've got a bunch of apps registered on my phone. Every time I flash a new ROM I need to reenter all of those serial numbers. I was looking at the UC customization threads to see if maybe I could just create a provisioning XML to create the appropriate registry entries automatically. Problem is don't think all the apps store their registration information in the registry.
So a couple questions:
1. I've found a good way to see registry changes (and thus figure out which keys I need to update), but I can't find the equivalent for the file system. Is there a tool that can take a snapshot of the file system on the phone, and then show diffs of the current file system with that snapshot? (That way I could figure out the additional files I'd need to copy over to make apps think they're registered.)
2. Is there another mechanism, other than registry and file system, that apps use to set themselves as registered? I couldn't think of anything... but then I'm hardly a hacker. (Even though... and correct me if I'm wrong... this is not technically hacking -- the serials are valid, I just don't want to reenter 10 of them every time I flash)
3. (And this probably belongs more in the UC thread): for some reason my provisionining file has no effect whatsoever. I've verified syntactical correctness of the file, and that cabarc can successfully create a CAB out of it. I've verified that the file is "installed" during the customization step. Yet, after a reset I see none of the changes specified in the provisionining xml. Any idea how I can debug this? Is there a log file that the config program leaves somewhere?
Thanks!

Modifying ActionMenu.dll?

Hi all,
I was trying to modify the ActionMenu that pops up when you slide the querty out. This is on a HTC S740, but I suppose it would be the same for all HTC devices with a slide out keyboard. My intention was to edit it in a way that option nr. 3 (messenger) brings up a different messenger than WLMessenger, as I never use this one.
My findings so far are that the information to the links are stored in a dll called ActionMenu in the windows folder. I was able to open it with notepad, however editing the path for the messenger somehow broke the whole dll so ActionMenu won't pop up at all anymore when sliding the keyboard open. I also tried editing it with XN Resource Editor, but there nothing is displayed. So for now I am at my wits end.
Maybe someone else could help out here? Would truly be appreciated.
Regards,
.-ombre-.
Dll is a compiled library and therefore a binary file... If you would like to edit it this brute way you should use hex editor and only REPLACE links. That means, new link must have the same lenght as the old one and none of bytes should be moved. Then obviously, final file must have the same size as the old one.
Anyway, then it mustn't work either.
yeah, thats something I tried in the meantime and no, that doesnt work either..
Oh well..

Retrieving .db files from an unrootable phone

I'm trying to retrieve a couple .db files from an old phone of mine. I tried many root methods, both .apk roots and PC versions. It seems many others owners have also come to the conclusion that the phone is unrootable (but if anyone knows how, let me know). What other ways are there to get at those files? I know the specific filepaths of the .db files that I'm trying to retrieve. Assuming that I don't care about the condition of the phone afterwards, is there no way, including removing the hard drive, to get at the files?
For reference, the phone is a vivo X6D and the files I'm trying to get are from WeChat. My old WeChat account was created before they required a phone number, so I can't recover the account itself to get my messages, so I'd like to get at the EnMicroMsg.db file. Thanks for any help you guys are able to offer, it's much appreciated.

Categories

Resources