Database Develop

Un-hide built in GPS Control Panel [NOT GPS hardware]

Open registry editor (resco ecc...)
Go to
HKLM\ControlPanel\GPS Settings\
cancel the Hide=1 key
Add a Dword Value
Group = 2 (DWORD decimal)
Soft-reset
And after ?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Wow,
Have you tried ti make it run? Does it work, or is it only displayed?

That's the standard GPS settings control panel, a standard registry hack that works on every WM5 device AFAIK. It doesn't (necessarily) enable hardware, just virtual ports etc.
V

It means that there is no point to install tomtom? Or it might work?

ops.. sorry ^__^

I would say there's no point, but I'd love to be proved wrong on this. I suggest you wait for someone else to try it.
V

Well, I couldn't resist and gave it a shot. I used these settings
bigyellowdog said:
I'm using tomtom 6.010 and it works perfectly on Xda Orbit.
Settings in Orbit
Program GPS: Com 4
Hardware GPS: None, baud rate 9600
Tick Manage GPS Automatically
Settings in tomtom
Select "Other NMEA GPS Receiver" 9600 on Com 4.
Click to expand...
Click to collapse
I figured the Artemis is pretty much the same inside as the Trinity, and if it's going to work it'll probably use the same settings as well.
But alas my labour was unfruitfull....

When I try to modify the registry with MobileRegistryEditor I get the error mesage "Acess Denied" Any idea to solve it?

Finnaly I could modify the registry and apply the suggested settings on gps cnfiguration but in TomTom 6 it doesn't work. I think that still the gps hardware remains disable (by the ROM!!). With the registry modification we only have the GPS option available on Windows Mobile but nothing else, so we should wait until a new ROM appears!!!
Good luck if someone success!!!

I figured the same, at least now we can pretend to have GPS

Taken from here (spec sheet of GPSONE chip alias MSM6275, installed on P3600)
http://www.cdmatech.com/download_library/pdf/gpsone.pdf
How gpsOne Works
The gpsOne technology functions in four different modes of operation. Chosen automatically or specified by software, the four modes are Standalone GPS, Mobile Station (MS)-based, MS-assisted and MS-assisted/Hybrid. In the A-GPS modes, gpsOne technology utilizes assistance data from a location server in the wireless network in combination with A-GPS circuitry and software in the wireless device.Note: The common term used by standards bodies for the handset/terminal device in CDMA2000 is "Mobile Station" (MS) and in WCDMA (UMTS)/GPRS/GSM/HSDPA/EDGE is “User Equipment” (UE). For simplicity in this document, references to the handset/terminal will be "MS," but this use implies both MS and UE.
Standalone GPS: The GPS receiver calculates a position without using any assistance data and without a connection to the wireless network.
MS-Based: The GPS receiver calculates the position using assistance data from a location server to increase cold-start sensitivity and reduce the start time for an initial position calculation.
MS-Assisted: The GPS receiver uses assistance data from a location server to make measurements related to its distance from the GPS satellites, then sends this information to the location server where the position is calculated. This mode also increases cold start sensitivity and reduces the start time for an initial position calculation.
MS-Assisted/Hybrid: Wireless network information is added to GPS measurements as part of the position calculation by the location server, integrating the relative strengths of GPS information and available wireless network location information for increased positioning reliability in difficult GPS environments.
Click to expand...
Click to collapse
I think that this chip is still to be activated (via firmware update maybe)

Dear Sir
The GPS radio on the P3600 was initially disabled due to a compatibility issue with the release firmware. A new compatible update will be released soon that will reenable the radio. On release this will be available for the support section of our website.
Thank you for your enquiry, Should you have any other problem, please do not hesitate to call us. Your Local number can be found at http://www.europe.htc.com/support/cs_by_phone.html
Best regards,
HTC Support
[email protected]
http://www.htc.com
Click to expand...
Click to collapse
[Edit by V: I presume this is a quote. It doesn't seem that WishMaster works for HTC.]

wonderiuy said:
Taken from here (spec sheet of GPSONE chip alias MSM6275, installed on P3600)
http://www.cdmatech.com/download_library/pdf/gpsone.pdf
I think that this chip is still to be activated (via firmware update maybe)
Click to expand...
Click to collapse
in this PDF file i can see "locate person" like Ally, Mark ecc..ecc... But i think that in UE a software that locate GSM or UMTS is not legal. Against privacy even if maybe very very cool

Anyone tried the COM 9?
I remember that someone that made a review to the phone said that the com 9 will be the port used by the gps.
i'll post here the link if i find it...
Here is the link:
http://translate.google.com/translate?u=http%3A%2F%2Fwww.mobinaute.com%2F67019-orange-lance-les-pdaphone-spv-m650-et-spv-m700-sous-windows-mobile-5.html&langpair=fr%7Cen&hl=pt-PT&ie=UTF-8&oe=UTF-8&prev=%2Flanguage_tools

Tried them all
I tried every COM port going a few weeks ago! Not to my suprise none of them worked.

htc 's register
if you search with regedit 's softwarethe string : "GPS SETTING"
there is a menu HIDE and 1. change 1 by 0 , save and reboot htc.
the gps menu appears in the parameters...and now tried gps
if it's possible

i have tomtom working on my trinity
i have tomtom 6.010 working on my trinity!
i used a prog called gps utilities developed by Efficasoft. and google maps. as suggested by www.coolsmartphone.com.
once i got the gps unit woking i installed tomtom 6.01 on my trinity, or spv m700 as mine is.
the gps settings are com port 9, and baud 4800.
it works a treat, not found any probs with software at all
if anyone wants the software i have a copy of the gps util. so let me know if you want me to sent you a copy. its a trail but once the gps is switched on it works fine. of course unless you do the reg hack you have no access to the gps settings after the trial has expired on gps utils

TomTom also works without any other third party app. on the Trinity. Just select the built-in GPS in TomTom and you are fine....

two_bus said:
i have tomtom 6.010 working on my trinity!
i used a prog called gps utilities developed by Efficasoft. and google maps. as suggested by www.coolsmartphone.com.
once i got the gps unit woking i installed tomtom 6.01 on my trinity, or spv m700 as mine is.
the gps settings are com port 9, and baud 4800.
it works a treat, not found any probs with software at all
if anyone wants the software i have a copy of the gps util. so let me know if you want me to sent you a copy. its a trail but once the gps is switched on it works fine. of course unless you do the reg hack you have no access to the gps settings after the trial has expired on gps utils
Click to expand...
Click to collapse
Glad you are happy with your M700 and TomTom.
This topic was started (and finished!) way back in January, when some of the Trinity devices didn't have GPS enabled in the ROM, causing much confusion.
Since March/April, all SPV M700's and other derivatives have had GPS enabled, so there is no need to use a program to 'switch it on'.
Configure an appropriate GPS program correctly, and give sufficient time to obtain a fix, and it will work. Remember that GPS signals are very weak, and work by line of sight, so a clear view of the sky is needed for a good fix.
The hardware baud rate is actually 57600, but anything from 4800 (the NMEA standard) to 115200 will be OK. The actual data transferred is less than 1000 baud anyway

maybe it was started back in jan,
but i didn't have my m700 back then and i am just getting started getting it working the way i want it.
i would like to enable the gps settings on my phone but all i can find are things that are for the hermes, and they tend to come with warnings that they will brick any other phone.

ALK to release CoPilot 7 GPS for WM6 next week

I spoke with ALK today. They should have the new version (7) up on their website by the end of next week. They are currently taking preorders. If anyone is interested in preordering or have questions about the product, you call them at 888-872-8768 x210 or send an email at [email protected] . I preordered my copy last month for my TyTN II and I'm excited to try it out an review it for the other forum members
--------------------------------------------
Here is what is new in CoPilot Live :
New map display with colorful 2D/3D maps, 3D points of interest icons, and powerful zoom capabilities.
New smoother map movement more natural and realistic location and movement on-screen.
New user-selectable color themes and map styles including industry-standard map styles
New Route preview -now you can review and experience an entire trip before you drive
New natural voice directions in 14 languages provide clearer turn instructions
New Points of Interest database easily find the nearest gas station, restaurant or hotel with over 6 million choices including phone numbers.
New walking, cycling and motorcycle routing options provide guidance suited to the pedestrian motorcyclist or cyclist, ignoring vehicle restrictions where appropriate.
New CoPilot® Central™ desktop software. CoPilot Central makes easy to plan a trip, download maps, points of interest and other content to CoPilot Live on your device.
Redesigned, non-distracting Driver Safety view including additional display options of 2D or 3D map near a turn
Improved detour function - with more information provided to help find the best alternative route around unexpected roadblocks and traffic.
Latest maps of North America including over 600 counties updated and over 100,000 miles of new road
Simplified user interface with large finger-touch buttons and intuitive menus. CoPilot Live is easier to use than ever before
Simplified address entry with more choice, fewer steps and predictive address searching.
Improved real-time traffic enabled nationwide
Improved routing engine with additional personalized profiles and scenic routing
One software version for Windows Devices with support for Pocket PC 2003, Windows Mobile 6 and 5.0 devices
Live Tracking as standard
In addition to satellite navigation, CoPilot Live 7 also provides real-time tracking using a connected phone or Pocket PC’s built-in mobile Internet connection. Friends, family or colleagues will be able to monitor your progress, send you messages and even new destinations in real time, wherever you are, via the internet

...and here is what it looks like on the Kaiser, very smooth graphics at 10FPS !
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
We have a thread about it here http://www.gpspassion.com/forumsen/topic.asp?TOPIC_ID=80008

Any news about pricing? CoPilot is relatively more expensive than TomTom. Is it worth shelling out more (if that is the case) considering we already have TomTom on the Tytn II and 'only' need the maps?

CoPilot 7 not working ... no fun!
I just got the CoPilot Live 7 software and I've tried everything possible to get it to work and nothing. I copied the 2GB microSD contents over to my 6GB card and executed an autorun and nothing. Tried again and launched the .cab file and nothing. Hooked it up to the laptop and installed the software from there saving it to the storage care ... nothing. I uninstalled between each load attempts and absolutely nothing. I don't want to put it on the phone as it runs from their dang SD card, so why won't it run from mine? Has to be some kind of proprietary thing or a bug. I don't want to load it on the main memory as I'm runing out. I've used CoPilot since version 3 and have always saved it onto the card.
If anyone can help, I'd greatly appreciate it.

kahibbi said:
I just got the CoPilot Live 7 software and I've tried everything possible to get it to work and nothing. I copied the 2GB microSD contents over to my 6GB card and executed an autorun and nothing. Tried again and launched the .cab file and nothing. Hooked it up to the laptop and installed the software from there saving it to the storage care ... nothing. I uninstalled between each load attempts and absolutely nothing. I don't want to put it on the phone as it runs from their dang SD card, so why won't it run from mine? Has to be some kind of proprietary thing or a bug. I don't want to load it on the main memory as I'm runing out. I've used CoPilot since version 3 and have always saved it onto the card.
If anyone can help, I'd greatly appreciate it.
Click to expand...
Click to collapse
Where did you get it from?

Initial Impressions of CoPilot 7
I know there have been many discussions regarding GPS SW here & elsewhere. I have been looking for GPS mapping SW that; 1- is resident on the Tilt, 2 - capable of obtaining maps for all of NA, Europe & Austraila, 3 - does not require a live Internet connection, but will use it if available to provide U.S. city traffic & other services and 4 does not require a monthly subscription fee.
Based on various discussions, I had pre-ordered the new version of CoPilot 7 under the 30 day return policy. They were very good during the order process, answering my questions promptly. The SW arrived on Friday 11/9. I installed it & spent the last 2 days out using it around Colorado. Here are my initial impressions...
Installation:
Copied the files from their uSD card to my 6GB uSD. Plugged the card in & the install went without problem. It found the Tilt GPS without any configuration. (I'm also running / testing VisualGPS, GPSGate, Google Maps on this Tilt) I also installed the PC version of CoPilot for planning. This also went in w/o problem.
Operation:
As a relatively knowledgeable user, I always attempt to use the product w/o reading any manual. This tells me how intuitive the operation is & I use that as a measurement on how well it was designed. On this count, I was less than impressed. The UI at first touch was not intutitve. This changed a little over time & by following the tips at startup. I like the voice directions, but miss the voice not naming the up-coming street name for the turn.
One major thing I noticed is that the lookup of POIs is very slow & sometimes didn't find things like major airports (Denver's DIA) or attractions (Mount Evans & Pikes Peak) properly.
Operation of the PC-based planning SW was also not intuitive. I finally figured it out, but it could use work. Double clicks were used when a single click selection was more intutitive.
On the plus side, after I got a couple of trips planned, they executed almost flawlessly. When I deviated from the planned route, the SW re-routed quickly and gave relatively good voice directions for the change.
Maps:
They seem like they may be a little out of date. They placed the GPS location of my house in the correct place physically, but in the wrong city by name. Some of the routing provided by the system attempts to take me through a street in my area that is permenently closed & has been for 2 years. When attempting to load a destination address, and the street in not in the map DB, it will not allow loading of the destination. This was a street in IL that has been there for at least 2 years.
Considering the competition:
I'm not into TeleNav as I don't want to pay by the month and I need maps outside the US w/o a large data bill. I don't feel like I want to be nickled & dimed on the cost of maps like some of the other products. I do want to be able to receive traffic updates for the U.S. The maps & SW must be able to be put on my card now & in the future as they get larger and not locked to the Vendors uSD card (Garmin).
Concludions:
Will I keep CoPilot? I'm not sure yet. Compared to what's out there, I might be able to get used to the UI. I wish they provided a way to give feedback on the map errors & allow more rapid fixes to be downloaded.
Sorry for the long-winded post. I'm going to keep using this for a while & I expect that as I become more familiar with the UI, the experiance should get better.
A quick additional note... CoPilot does have an on-line feedback mechinism for errors in maps. I will be driving my area to document the changes. Still not sure how long it will take to get the updates into the maps.
Thanks & please anyone else out there with any experiances? I'm looking to compare notes before my 30 days is up.

clove.co.uk have it in stock and selling it for £79.90
http://www.clove.co.uk/viewProduct.aspx?product=DB4D6BD5-6B99-4E02-9CD0-FD52074A1D91

I received mine directly from CopPilot. I am a long time user of the product and get email notifications. www.copilotgps.com

jskoller said:
...
Thanks & please anyone else out there with any experiances? I'm looking to compare notes before my 30 days is up.
Click to expand...
Click to collapse
Just wondering, I bought mine directly from CoPilot's website. Where do they mention the 30 day return policy? I might return mine since it is missing Text-2-Speech functionality.
- TKN

[SOLVED] SDCard not recognised, RAPI/ActiveSync disabled, caused by Exchange policies

Dear all,
My Storage Card keeps disappearing after a while. Can't get it back other than by hard-resetting the device.
I've rebuild the phone several times now, and after a few hours incl. some warm-reboots, it's not able to recognise the SDCard anymore. Another problem which I figured out is that it disables RAPI too, which makes connecting with ActiveSync impossible. Luckily I was able to build an enableRAPI.cab file, which enables it (which I sent by mail to my phone!)...Well... Anyone that knows what this might be caused by?
Regards,
Nika.
PS. This started when I started to use the new ROM (see signature), but I think it's a general issue, maybe caused by UC or other programs installed by UC, or myself (after restarting)...

Hi all,
I have figured out that this is caused by Exchange policies (after my first Activesync Sync) pushed to my mobile! I have no idea how to change them back, going to try to figure that out now...
Any thoughts?
Regards,
Nika.

Dear all,
I figured it out. This was caused by the "enforce security settings" which can be done by Microsoft Exchange push-mail.
I got the following message:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
I hadn't realised before, but this caused my phone to be inaccessible for ActiveSync (RAPI was disabled) too, and made my StorageCard disappear.
When I realised this I started my investigation on Microsoft Exchange. I opened the Exchange Management Console:
And then I opened the Default Properties, and changed to the Sync Settings tab:
Here I turned on all options, resynced the phone, rebooted and all my issues were solved
Kind Regards,
Nika.

For those of you interested in the rest of the Exchange Security Policy settings, here's screenprints of the other tabs:
Regards,
Nika.

thanks
Nice info
many thanks, this helps much ppl...
Cheers

Lol, thanks. You wouldn't want to know how many times I reinstalled my phone due to this (thank god for Sleuth's UC!!), so I really hope this thread will help people struggling with the same problems if they arise...
Regards,
Nika.

Cert fixed my problem
I noticed that your Exchange 2007 settings had the "Allow nonprovisional devices..." setting still enabled. This was initially the setting I changed in our Exchange 2007 environment that made the difference, however, as others have suggested, this was an unacceptable long term solution and likely not even a possibility if you're not the Exchange Admin.
The solution for me was to export the cert (the same one that is used when logging into your Outlook Webmail) and install the cert on the phone.
The problems described in this thread only became an issue for me when I upgraded to 6.1. I kept the same radio 1.48 so I know it wasn't a radio issue in my case.
I switched the nonprovisional setting off once I installed my cert and the device has had no problems syncing ever since. Compromising policy and security is never the best solution (although still a solution sometimes) so I hope this helps some of you in the same boat as I was in.

Did you have to enable the options on the 'Device' tab as well as I would pretty much want all them features enabled ?
This worries me a bit as my company is about to upgrade to Exchange 2007 and they don't consult users before enabling things like this. I currently use BlackBerry Connect but would prefer to move to native ActiveSync since BBC has some other issues. If it means they are going to lock out all the functionality of my Kaiser then I'll not bother. I'll have to wait and see...
Andy

Can't Setup my BB connect.

Ok. I have a BB pearl and an AT&T Tilt. My BB pearl is provisioned for unlimited everything. (Tethering, Blackberry, Internet). I work for AT&T so this is my company issued SIM. I downloaded the BB connect software on my Kaiser so I could switch out my SIM into my kaiser and just use the BB for making calls and SMS. It's obsolete compared to the TILT as in the things you can do with it. Personal Preference I guess. Here's my issue.
Here is a screenshot of my version of BB connect:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Now I tried to get it to register with the BB network. I clicked on Suspend and then I clicked on it again to refresh and when I clicked on my H for HSPDA it said Blackberry and it had a timer next to it indicating it had been connected for so long. About 10 seconds later it disconnected and this is what I saw.

...................................................................................................
If I click on details I get this:
I checked my browser settings on my phone and disable the box for:
This network uses a proxy server.
I am able to access the internet, tried soft reset with stylus, and hard reset by pulling battery out. Same issue. I tried searching on google but only threads I find is how to get the BB Connect installed. There is no Troubleshooting section. I'd really appreciate it if you guys would be kind enough of looking at these screenshots and helping me. Until then I'll keep playing with it. (That's what she said).
Thanks guys

I also want to add that I will not be using this for a BES email. I want to be able to have my personal email pushed to my phone. I'm going to look around so I can find a way of getting BB messenger to work. I heard someone got it to work. I know it's possible because I know someone who has it working 100 percent on their T-Mobile version of Kaiser. I am provisioned for Blackberry Enterprise Feature even though I don't use it. So I should be straight.

I have fixed with this problem before. I had to call at&t and have them change a code on my account. I don’t know the exact terminology but, what they did is change a code on my account from blackberry to windows mobile blackberry. Then the mail flowed.

Ok I already stated I have all the correct provisioning on my account. I have a company SIM we are provisioned with everything. I can't even get it started to get email as you can see from the screenshots.

My apologies. I forgot to mention that there is a registry key that need to be modified for 6.1 roms. I can tell because you PIN number is still pending. See the following post.
http://forum.xda-developers.com/showthread.php?t=400020
There is a mistake in the registry key line. It should read:
HKLM/System/Version/AKU. Change the value of the AKU key to REG_SZ of 0.4.4
After this soft reset the device. It can take as long a 5 minutes toe get the pin number from the network. You can tell your good because you will see the BB (or what looks like 4 0's) in the system tray. You will also notice that you have received a pin number.
I have this setup working with the latest at&t 6.1 rom v3.55.502.1 and BBC V4.0.0.100

I just check my records. You will still have to re-provision you sim for windows mobile blackberry connect. Again I have made this upgrade before.

There is a mistake in the registry key line. It should read:
HKLM/System/Version/AKU. Change the value of the AKU key to REG_SZ of 0.4.4
Click to expand...
Click to collapse
Ok I get all the way to Version (Mine says Versions). If I click on it. I don't have an AKU there. Would you mind providing a screenshot so I can manually add it.

You are correct it is versions. remember this only needs to be applied to Mobile 6.1. And you will need to re-provision from blackbery to windows mobile blackberry.

Ok my problem is solved. No need to re-provision anything since I already stated 2x that I was provisioned. This is what I did.
1. I went to the registry and modified AKU value,
2. I disabled my 3g connection and bought it down to E
3. Rebooted device.
4. Installed BB connect software via the phone.
5. Installed software
6. Soft reset
7. Went to the softare and did a register now
8. Got a pin!!
9. Logged into my Blackberry account online and update PIN and IMEI of my Kaiser so that it would xfer all my email accts to my Kaiser
10. Enabled 3g again.
11. Sat back and relaxed it works now.
Now I just have to figure out how to get BB Messenger to work for sending PIN messages as well. I know there has to be a way if you can read them why not be able to send them. Yadadamean?

Windows Phone 8 Root/other Certificates Maybe?

Hey Guys,
Below is a list of the things that my HTC 8x does when it checks for Windows Updates. I am waiting for Microsoft's server to decide to give me a new firmware, so I decided to sniff out the TCP stream. Of note, I found the following:
1. Phone contacts http://fe1.update.microsoft.com/WP8/MicrosoftUpdate/Selfupdate/5_UssDetection.dll
The Phone goes out and fetches this dll onto the system. It references the following certificates (which you can download):
root cert http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
production cert http://www.microsoft.com/pkiops/certs/Microsoft Windows Phone Production PCA 2012.crt
time stamp PCA? http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt
2. After that, it goes and fetches the following cab file: http://sds.download.windowsupdate.com/wp8/MicrosoftUpdate/Redir/duredir.cab. This cab file contains a single xml file called wuredir.xml. It has two values: the clientServerURL and the ReportingServer URL.
3. After this, some https traffic occurs to the clientserver URL. I am guessing this is it checking for updates.
4. Then it posts to http://statsfe1.update.microsoft.com/ReportingWebService/ReportingWebService.asmx with a SOAP action of http://www.microsoft.com/SoftwareDistribution/ReportEventBatch with a whole bunch of info on the phone.
The User Agent being used for all of these communications is as follows: Windows-Mobile-Device-Update-Agent
If this dll it is fetching is unsigned, I wonder if we could have some fun....I am also wondering what happens if we develop and sign an xap with Microsoft's certificate if it will allow us to do more things within the OS.

Sign with Microsoft's private key? If you have access this then your about to become very popular
Sent from my Arc using xda app-developers app

Hmm, the 5_UssDetection seems to be a normal PE32 .dll. Not .NET compiled. I don't see any COM Imports/Exports for it so finding this out may be a little difficult. I haven't used any tools like IDA though, just a normal PE explorer program.
This is good information though. I wonder if GoodDayToDie may have some further input?

Nice find. I've been monitoring phone traffic myself but hadn't caught this exchange yet.
The fact that it checks external cert files is very interesting. Typically, I would expect this to be using "certificate pinning" where the public key of the signing cert is stored internally in the software, and no other signature is trusted (even if it chains to a CA that is installed on the phone and would normally be trusted). MS does use pinning in a number of places; for example, this is how the original ChevronWP7 Unlocker was broken, and is used when adding a Microsoft account to the phone or when that account is updating. However, I figure there's an excellent chance that pinning is *not* being used in at least one place where it really should be (this can be tested using tools like Fiddler or Burp, which have the ability to intercept SSL traffic using a cert that chains to a cert installed in the phone's trusted authorities store).
If pinning isn't being used, it may be possible to modify/create our own detection DLL, then create our own CA cert, install the public key on the phone, use the private key to sign an intermediate cert (that we also create, and have the private key for), and use the intermediate cert to sign our customized DLL. If necessary, we could even intercept the lookups that the phone performs and control what is returned (assuming the lookups are actually over HTTP, or at least unpinned HTTPS).
The probability that the file is unsigned isn't even worth considering; it's quite likely that Microsoft is using a mandatory signing level on WP8 for all executable code. Unfortunately, if they are doing that, it's also likely that it's set to require a cert which chains to the MS root cert (this is how Windows RT is by default), which is effectively a form of system-wide cert pinning. However, if you want to check, signtool in the Visual Studio Command Prompt can dump authenticode certs on a file.
Reverse engineering the detection DLL is quite possibly worthwhile even if we can't modify it, too; it'll provide insight into the update process, which is one of the best places to mess with a system. It runs with high privileges and explicitly is capable of modifying system code.

That sounds quite enticing! I wish I knew x86/ARM assembly :/. I'll see what the sign tool outputs in VS

It feels great to see that you're here GoodDayToDie You helped out a lot on WinPho 7 for HD2 (a device I'll soon repurchase).
Hopefully there'll be some advancements on the "jailbreaking" of Windows Phone 8

I would be surprised if WP8 wasn't using the same code signing requirements as Windows RT.
As far as hijacking that dll goes, unless we can find an immediate privileged code execution exploit in it all it's most likely to do would be to give us write abilities to the FS, and there's a huge 'if' attached to that. That would be a big step if possible, though.
Something that would be interesting to check is if an EXE compiled for Windows RT (cdb, for example) would be capable of running on WP8. If MS used the same signing certificates it may be possible to put enough of Windows RT's dependencies on WP8 to allow it to run a simple console application. Obviously we wouldn't have any console windows or the sort, but it should be possible to capture output if it worked.
We have a decrypted OS dump around somewhere, right? It should be simple to check if they use the same signatures.

Good call on checking the signatures. I'd also like to take a look at reverse engineering the OEM apps again; even if they don't give us a device-agnostic hack directly, they may reveal interesting things about the WP8 app model internals and also may give device-specific breaks which can be used to gain the knowledge we need for crafting device-agnostic ones.
Slightly off-topic:
The zipview exploit still (sort of) works. Hard to believe, but I bet MS just recompiled the program for NT's Win32 and didn't bother with it beyond that. Decent chance that the same holds for the XAP installer, though I haven't tried yet. However, A) the filesystem layout has changed, so write-only access is even more poking blind than it used to be, and B) zipview may be running with lower privileges than it used to. On a simple test ZIP (attached for your testing pleasure), I can open files and create directories up to three levels above the zip root, but no further. Trying to open a file in a folder directly higher than that gives a "cannot extract to a read-only location" error, and trying to open a file inside a subfolder above the third level up gives a generic error message (probably due to failing to create the folder).
Also, I got wired tethering working on my Ativ S today. I'll create a post about doing that if nobody else has done so yet (it was almost identical to the WP7 Samsung devices, the only hard part being finding the right 64-bit drivers). WindowBreak didn't work, though (the folder that it extracts at is above the permissions cutoff, which makes me suspect zipview can't write to the drive root) and I don't think the subcomponent of the Diagnostics app works the same, either (a lot of the diagnostics codes have changed; we should learn the new ones).I don't even know if WP8 understands provxml (it's historically a CE feature, not an NT one), although I found references in the Diag app to provxml being "ready".

Here's what I came up with for a file list from some rudimentary (and possibly inaccurate) parsing of a .ffu: http://pastebin.com/hX6qJQeA
Got that from RM820_1232.2109.1242.1001_RETAIL_nam_usa_100_01_95122.ffu.

Great, thanks for that! Looks like provxml is definitely still here, and that's probably good. I'll bet they changed some things though, to make it more NT-ish (support for proper ACLs, for example). I should review those included provxml files for a look at how the phone is currently configured. Lots of potentially interesting .REG files too. I'll have to try some more things here!

No problem. All I did was pull out all text inside '<DevicePath>' tags inside one of the FFUs for the AT&T Lumia 920.
From looking at the FFU it appears to be a collection of CAB archives (or packages) encapsulated in some proprietary format. WP7.x tools don't work on them, sadly.
Edit: I'm blind sometimes, there is a tool to mount them and it does work.
More edit: Different signatures.
More more edit: Windows RT refuses to run the WP8 binaries without a jailbreak.

Hmm... but with jailbreak, do the binaries run? I mean, they're NT Win32-based PE binaries compiled for THUMB2 architecture, so I'm sure they can at least be executed, but do they actually run or do this simply error out or crash immediately?
It would be interesting to compare the certificate chains of RT and WP8 binaries. As far as I know, the default restriction level on RT should allow anything that chains to the Microsoft root Authenticode cert to run, which means either that we misunderstand that restriction or that the WP8 signatures chain to a completely different cert. I'm guessing it's the latter, but that does surprise me. I could understand if RT used the "Windows" signing level and WP8 binaries wouldn't work; despite having Windows in the name, using the Win32 API, and running on the NT kernel, the Windows Phone team is separate from the Windows team and quite likely has its own signing keys. I would think that an OS which accepts Office and DevDiv/Tools signatures (unless Office and the debuggers were re-signed by the Windows team? I haven't checked) would accept Windows Phone signatures too.

GoodDayToDie said:
Hmm... but with jailbreak, do the binaries run? I mean, they're NT Win32-based PE binaries compiled for THUMB2 architecture, so I'm sure they can at least be executed, but do they actually run or do this simply error out or crash immediately?
It would be interesting to compare the certificate chains of RT and WP8 binaries. As far as I know, the default restriction level on RT should allow anything that chains to the Microsoft root Authenticode cert to run, which means either that we misunderstand that restriction or that the WP8 signatures chain to a completely different cert. I'm guessing it's the latter, but that does surprise me. I could understand if RT used the "Windows" signing level and WP8 binaries wouldn't work; despite having Windows in the name, using the Win32 API, and running on the NT kernel, the Windows Phone team is separate from the Windows team and quite likely has its own signing keys. I would think that an OS which accepts Office and DevDiv/Tools signatures (unless Office and the debuggers were re-signed by the Windows team? I haven't checked) would accept Windows Phone signatures too.
Click to expand...
Click to collapse
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
As far as running, some have given me console output, but I haven't gotten a single GUI one to start. I've been considering on looking to see how complex the UI is to see if I can write some sort of WP8->Win32 translation layer. There are just so few WP8 xaps floating around that it's not really worth looking into, though.

I don't expect the GUI to work; the whole model (with the Back history and all that) is going to rely on stuff not found on Windows Client. Cool that you're able to get some CLI apps to work (which is funny in and of itself; WP8 doesn't support a terminal interface). This is only post-jailbreak though? That still seems weird, since the signatures chain to the MS root CA. Very weird. I'll poke around myself once I download a ROM to explore (busy with work at present).

I haven't really found any to work, per se, I've just gotten console output, generally in the form of an error message or a help prompt. I can't recall which files exactly I had tried with, though. I mostly just poked through system32.

GoodDayToDie said:
I don't expect the GUI to work; the whole model (with the Back history and all that) is going to rely on stuff not found on Windows Client. Cool that you're able to get some CLI apps to work (which is funny in and of itself; WP8 doesn't support a terminal interface). This is only post-jailbreak though? That still seems weird, since the signatures chain to the MS root CA. Very weird. I'll poke around myself once I download a ROM to explore (busy with work at present).
Click to expand...
Click to collapse
the GUI classes of windows phone are not compatible with the standard .Net library or windows RT. The only way to get them running is through some sort of virtual machine. Some MSFT guys confirmed this a few months back at a training course about W8 RT.
Basically, it is kinda difficult to have WP8 apps show any GUI at all outside of their WP8 runtime.

netham45 said:
Here's what I came up with for a file list from some rudimentary (and possibly inaccurate) parsing of a .ffu: http://pastebin.com/hX6qJQeA
Got that from RM820_1232.2109.1242.1001_RETAIL_nam_usa_100_01_95122.ffu.
Click to expand...
Click to collapse
In regards to the file "MMOS.wim", has anyone managed to extract it/analyze it?
I couldn't find anything about it online. I am able to mount the file to a virtual disk and view its contents, but I am not able to view/read/extract any of these files from the drive. Trying to copy any file from the drive gives a system error/exception message that I have never seen before.
Are the files inside of "MMOS.wim" even useful?
---------- Post added at 12:13 PM ---------- Previous post was at 11:22 AM ----------
mcosmin222 said:
the GUI classes of windows phone are not compatible with the standard .Net library or windows RT. The only way to get them running is through some sort of virtual machine. Some MSFT guys confirmed this a few months back at a training course about W8 RT.
Basically, it is kinda difficult to have WP8 apps show any GUI at all outside of their WP8 runtime.
Click to expand...
Click to collapse
Not difficult, more like impossible lol.
The entire native UI is very independent. It is best described as one single app that has multiple pages. The start menu is a page, settings app is a page, office 365 is a page, etc.
These different pages all cross-reference resources from each other and can modify each other. However, they are all compiled separately. Each "page" contains it's own resources and GUI markup in a dll, along with native code to interact with the markup. This native code can also call functions and access resources from other "page" dll's. There are no compiler dependencies between the "pages" when being created, only during actual runtime.
Things are very "coupled" by this model on purpose. Changing code/functionality in the startmenu.dll could potentially break everything. It is designed so that you cannot target and modify a specific element or feature without updating code in other areas of the system.
Basically, you need full access and understanding of the gui layouts/code to modify it.
The only reasonable possibility is the ability to modify the markup code (think XAML) to change layouts and visuals. But even that possibility is made difficult since the markup is compiled. However, no information is lost during the compilation, meaning that the markup can be decompiled back to its original form.
Windows 8/RT uses DUI (DirectUI), a similar framework, for all of it's native GUI elements.
Windows Phone 7/8 uses UIX/Splash.
Asking a former Microsoft employee about UIX/Splash is like asking a former U.S. government agent about Area 51. They seriously fear for their lives.

I would avoid using the word impossible as of yet. With a layer of emulation above RT the thing should "run".
It might be possible to have an app compliant with the app store requirements (as in not require jailbreak) on RT to emulate the WP8 GUI model, but that would imply interpreting the XAML code and emulate it JVM style, but it would be a lot of work.
I wonder if the WP8 emulators would prove to be of any use...

mcosmin222 said:
I would avoid using the word impossible as of yet. With a layer of emulation above RT the thing should "run".
It might be possible to have an app compliant with the app store requirements (as in not require jailbreak) on RT to emulate the WP8 GUI model, but that would imply interpreting the XAML code and emulate it JVM style, but it would be a lot of work.
I wonder if the WP8 emulators would prove to be of any use...
Click to expand...
Click to collapse
My GUI post was in regards to the native GUI. I didn't realize that you were talking about WP8 apps running on Windows RT. I thought you meant the other way around lol.
Couldn't this potentially be pointless? Microsoft Job posting was looking for developers interested on deploying .appx on Windows Phone I believe. So that means they are going to make .appx the universal model for all platforms and not .xap in the future. With that said, they might be stopping .xap development completely in the future.
Who would develop an .xap for Windows Phone when you can develop .appx and have it work on Windows Phone + Windows RT + Windows 8 + Xbox?
Just some thoughts. I think trying to get .XAP running on Windows RT is pointless to pursue right now, since the time researching would be better spent in other areas of development.

Im not sure how they are going to make appx run on WP8. The WinRT model is obviously tuned towards bigger screens. How would you use a charms bar on WP8? In fact, how would you use any of the W8 stuff on WP8?
I think a lot of people would like to run emulated WP8 apps on their tablets, since some apps have not been ported yet.
While I do agree this is kinda pointless, it's a nice way of learning new stuff.