HSECT2 no effect... Please help - Shift General

I used Hsect2 a while ago to turn off WIFI and BT. Since then I have not been able to
turn them back on.
I checked the installation of IOPERM.SYS. there is no problem. So I reinstalled Windows Vista and started all new. Still, the devices are not coming up anymore.
I then installed some cab files in SnapVue to test compatibility and guess what, SnapVue is stuck at the Windows Mobile bootscreen
I tried to use ECshift and Hsect2 to get into the bootloader mode and hard reset
SV.
But it doesnt work.
The EC of my shift doesnt react to my commands, neither in Bash nor in DOS BOX

- Is your touchscreen working?
- Is your vista installation from the recovery partition or a new installation from a vista DVD? (I ask because I've seen some of your posts asking for a recovery partition and drivers).
- Can you post a screenshot of your device manager?

pof said:
- Is your touchscreen working?
- Is your vista installation from the recovery partition or a new installation from a vista DVD? (I ask because I've seen some of your posts asking for a recovery partition and drivers).
- Can you post a screenshot of your device manager?
Click to expand...
Click to collapse
Hey Pof...
my installation is not from the recovery partition. It was not possible, since the XVista.wim is broken.
My touchscreen is not working either.
Which point in the device manager do you want to see?
No exclamation marks.

Most probably you have installed a driver which is blocking i/o port access to 0x250-0x251, 0x68 and 0x6c. Those are the i/o ports used by the touchscreen and EC Controller. Check for properties of the device drivers you have installed and remove those "taking" these ports.
If that does not help, to make sure the EC controller is not really screwed you have two options:
a) find someone willing to share his recovery partition with you
b) install Linux and try if the EC Controller and the touchscreen are responsive there.

pof said:
Most probably you have installed a driver which is blocking i/o port access to 0x250-0x251, 0x68 and 0x6c. Those are the i/o ports used by the touchscreen and EC Controller. Check for properties of the device drivers you have installed and remove those "taking" these ports.
If that does not help, to make sure the EC controller is not really screwed you have two options:
a) find someone willing to share his recovery partition with you
b) install Linux and try if the EC Controller and the touchscreen are responsive there.
Click to expand...
Click to collapse
I will get right on it and install ubuntu.
I opened a fast FTP (100mbit up and down), its permanent. If someone want to upload Shift images and stuff, no problem. Have a few TB free

pof said:
Most probably you have installed a driver which is blocking i/o port access to 0x250-0x251, 0x68 and 0x6c. Those are the i/o ports used by the touchscreen and EC Controller. Check for properties of the device drivers you have installed and remove those "taking" these ports.
If that does not help, to make sure the EC controller is not really screwed you have two options:
a) find someone willing to share his recovery partition with you
b) install Linux and try if the EC Controller and the touchscreen are responsive there.
Click to expand...
Click to collapse
0x250-0x251 and 0x68-0x6c are used by Intel 82801GBM ICH-M LPC Interface.
I uninstalled it and disabled the device. ECshift says " Cant open EC"

err... you have disabled the LPC (low pin count) bus, which connects "legacy" I/O devices to the CPU. You should better keep it, otherwise it won't be possible to have I/O access to the EC controller.

pof said:
err... you have disabled the LPC (low pin count) bus, which connects "legacy" I/O devices to the CPU. You should better keep it, otherwise it won't be possible to have I/O access to the EC controller.
Click to expand...
Click to collapse
thats what I thought. I was under the impression that the guys using XP cannot get their touchscreen working, because the LPC shows up as "Unknown Device"
I guess I better wipe the disk and try ubuntu. See what happens.

I had some time tonight to install Ubuntu. Now I could activate everything again and I will keep ubuntu for a while.
However, I still cannot hard reset SnapVue

aquasesh said:
However, I still cannot hard reset SnapVue
Click to expand...
Click to collapse
I haven't found the EC values for hard reset yet, that's why hsect2 doesn't have this option. I will not have much time during this week, but it's on my TO-DO list

pof, is there a way to increase the frequency of the touchscreen? Its very slow and jerky, the cursor jumps while dragging.
I tried playing with TouchKit, but nothing much changed.

aquasesh said:
pof, is there a way to increase the frequency of the touchscreen? Its very slow and jerky, the cursor jumps while dragging.
I tried playing with TouchKit, but nothing much changed.
Click to expand...
Click to collapse
install a kernel debugger in vista (ie: syser) and figure out the correct initialization values to change the irq triggering speed. It's also on my TO-DO list

pof said:
install a kernel debugger in vista (ie: syser) and figure out the correct initialization values to change the irq triggering speed. It's also on my TO-DO list
Click to expand...
Click to collapse
Pau, your to-do list is very long.
But I am really thankful and I know everyone else appreciates your hard work.
I will donate some money, since I cannot buy you SERVECA

Thanks, we spell it "cerveza"

aquasesh said:
However, I still cannot hard reset SnapVue
Click to expand...
Click to collapse
Just had a thought:
Put it in bootloader mode (hsect2 -b) and then use HTCFlasher to connect to the bootloader Cmd prompt. There just type "task 28" and hit enter.
This will do a Hard Reset on SnapVue

pof said:
Just had a thought:
Put it in bootloader mode (hsect2 -b) and then use HTCFlasher to connect to the bootloader Cmd prompt. There just type "task 28" and hit enter.
This will do a Hard Reset on SnapVue
Click to expand...
Click to collapse
Thanks for the advice. Now I really owe you one.
Worked perfect.
Now, Linux is just a little slow.

aquasesh said:
Thanks for the advice. Now I really owe you one.
Worked perfect.
Now, Linux is just a little slow.
Click to expand...
Click to collapse
heh, I'd have to kill you for not reading - you said you tried ecshift and my ecshift thread describes how to do task 28!

pof said:
I haven't found the EC values for hard reset yet, that's why hsect2 doesn't have this option. I will not have much time during this week, but it's on my TO-DO list
Click to expand...
Click to collapse
I have two different ioctl's to do it, neither works.
one was taken from vistadiag - then tested and it is broken in vistadiag too.. this one would not hard reset though if WM is not fully booting as it sends the COLDBOOT string to the WM side EC driver.
the other is from the htc official software (don't know if this one hard resets if WM is not booting, but I doubt it as I didn't find anything in the SPL that'd look for a GPIO or anything, the normal hard reset function is simply edited out of the SPL, you only have task 28). that doesn't work either. I checked in debugger and my ioctl params are correct, but I must be missing something because this htc software definitely isn't broken.

I also looked at the software that HTC published in the support site to hard reset windows mobile. From the DLL disassembly I found the IOCTL which also didn't work in my tests, so I tried to do some brute-forcing with this code (look at hsect2 source code for the defines of wsio() macro and EC_PORT_INIT).
Code:
void ClearWMStorage()
{
int len = 0xc;
int checklen = 0xe;
int clearstorage = 0x80;
int i,checksum;
int total = 0;
/* the initial value should be something between 0xa and 0x29 */
//int val = 0x0; // switches to CE and asks for PIN (does it work always?)
//int val = 0x1 to 0x9; // does nothing
//int val = 0xa; // hangs EC controller
//int val = 0xb to 0xf; // does nothing
// issued a soft-reset after trying 0xc - nothing changed
//int val = 0x10 to 0x1f; // does nothing
// issued a soft-reset after trying 0x1f - nothing changed
//int val = 0x20 to 0x2f; // does nothing
// issued a soft-reset after trying 0x2f - nothing changed
int val = 0x0;
wsio(0x20, len); // mov byte ptr [esp+44h+var_44]
wsio(0x21, checklen);
wsio(0x22, clearstorage);
for (i = 0; i < 8; i++) {
wsio(0x23+i, val+i);
total += val+i;
}
checksum = 0x200 - (len + checklen + clearstorage + total);
wsio(0x2b, checksum);
outb_p (0xa1,EC_PORT_INIT);
}
However after trying al possible values I'm still unable to hard reset WinCE. I think we must be missing something obvious here, but don't know what

cmonex said:
heh, I'd have to kill you for not reading - you said you tried ecshift and my ecshift thread describes how to do task 28!
Click to expand...
Click to collapse
Dont kill me...pleeeease...Actually, I tried ecshift, but it gave me an error and couldnt establish a connection to SnapVue.
Sadly, I didnt try it under linux...only XP and Vista...

Related

DllMain not run in windows mobile 5.0

It's seems DllMain won't run when a dll loaded by LoadLibrary in wm5.0.
The dll is very simple,complied by vs 2005 beta2,just a MessageBox in dllmain
I load this dll in another process,using the api loadlibrary,In windows mobile 5.0 ppc emulator,no dialog box appear,but you can see that dll.dll had been loaded with remote file viewer.In Pocket PC 2003 SE emulator,every thing is ok
anybody has any idea about it?
Thanks
dll.cpp
#include "stdafx.h"
#include <windows.h>
#include <commctrl.h>
BOOL APIENTRY DllMain( HANDLE hModule,
DWORD ul_reason_for_call,
LPVOID lpReserved
)
{
MessageBox(NULL,L"11",L"22",0);
return TRUE;
}
Hi,
There is no default entry point in a DLL. You are doing everything fine except you need to load the module (function) you want to call. I cant remember off hand the details but its LoadModule.
Look thought the documentation for calling a function in a dll some more.
Paul
psneddon said:
Hi,
There is no default entry point in a DLL. You are doing everything fine except you need to load the module (function) you want to call. I cant remember off hand the details but its LoadModule.
Look thought the documentation for calling a function in a dll some more.
Paul
Click to expand...
Click to collapse
Thanks for your reply.
I don't want to call any function,excep the default entry point DllMain when loading library.
There should be default entry point in the dll I complied,because in wm2003,everything is ok(Messagebox appears when loading or unloading library)
DllMain worked in my programs in 2K5. Maybe your messagebox appears behind today window? I never tried MessageBox in DLLs, but CreateFile worked fine.
oh right. Maybe I'm wrong - i always thought DLL's didnt have default entry points - I need to get reading the SDK's more
Paul
mamaich said:
DllMain worked in my programs in 2K5. Maybe your messagebox appears behind today window? I never tried MessageBox in DLLs, but CreateFile worked fine.
Click to expand...
Click to collapse
hi mamaich,what device are you using?Emulator?
I've tried in another way:return TRUE or FALSE in DllMain,then check whether the dll is loaded with remote process viewer.
In wm5.0 emulator,DllMain's return value is ingored,the dll is always loaded.And in wm2003 emulator,dll can be loaded only if DllMain's return value is TRUE
I've compiled the DLL with eVC4 and run it on XDA2 with WM5. That DLL was a part of a rather large project.
Maybe VS2005 produces incorrect DLLs?
mamaich said:
I've compiled the DLL with eVC4 and run it on XDA2 with WM5. That DLL was a part of a rather large project.
Maybe VS2005 produces incorrect DLLs?
Click to expand...
Click to collapse
The dll should be ok,it works well on ppc2003's emulator.I have also tried the dll produced by evc4.0.
Seems it's my fault,I got it work on wm emulator now
Thanks for all
I found it,dllmain not run just because the dll export no function.after add a not used fuction,MessageBox appear when loading

IDA Pro 5 Demo and WM5 Problems

I have been trying to get the new demo version of IDA to connect to my WM5 Qtek S200 with no luck.
When I click on attach it sends across wince_remote_arm.dll
then I get cannot invoke server.
If I add the reg key in HKLM\Security\Policies\Policies then it will connect and immediatly kill the ActiveSync connection and I have to unplug/replug in the USB cable. It also displays the following message.
irs_recv:An existing connection was forcibly closed by the remote host.
I can however debug .net apps and do the usual active sync transfer files etc.
Anyone have any thoughts on what to try?
Thanks
Pete
I think you have to enable RAPI, there is a cab for it on the forums or on the FTP, search for it, I think it is enable_rapi.cab.
^^ exactly... just run it on the device and it will connect
I have tried the above cab file and unfortunately still no luck.
It still dies when connecting, and the green activesync icon changes to grey and the "irs_recv:An existing connection was forcibly closed by the remote host." messagebox is displayed.
Strangely I can get it to connect to and debug the emulator.
Anyone have any other suggestions.
Thanks
Pete
I use full version of IDA (you can find it on chinese warez sites), ARM debugger extracted from demo version of IDA, cert.SPCS.cab, EnableRapi.cab, and HKLM\Init\RequireCertMods=0.
IDA connects and works.
mamaich said:
I use full version of IDA (you can find it on chinese warez sites), ARM debugger extracted from demo version of IDA, cert.SPCS.cab, EnableRapi.cab, and HKLM\Init\RequireCertMods=0.
IDA connects and works.
Click to expand...
Click to collapse
Uhhmm... which site exactly? And why doesn't it containt the debugger?
i have the same error "irs_recv...." anyone found a solution for it ?
Guybrush said:
i have the same error "irs_recv...." anyone found a solution for it ?
Click to expand...
Click to collapse
Solution is 2 posts upper.
I tried... Installed cert_SPCS.cab, EnableRapi.cab changed registry value but always same message
can you give me your security policies values under
HKLM/Security/Policies/Policies/
Thanks in advance.
I'm trying to run the IDA debugger on a Cingular 8125. It gives me the exact same error.
I have these values in the registry:
HKLM/init/BootVars/RequireCertMod = 0
HKLM/Security/Policies/Policies/00001001 = 1
HKLM/Security/Policies/Policies/00001005 = 40
HKLM/Security/Policies/Policies/00001017 = 144
I've installed EnableRapi.cab and Cert_SPCS.cab, but it still doesn't work.
Has anyone found a solution for this?
Same for me
I did all the same actions but it still doesn't work
Anyone?????
I think the problem is a result of some incompatibility of ida's debugger dll under OMAP 850 cpu...Therefore I use m$ deviceemulator which is VERY slow.
I had problems aswell with my devices... And after this last post.. i tried a WM device without a OMAP 850.. And it worked fine for me... on every OMAP850 device i tried .. i get the same error as you guys have reported..
So I must agree with george that OMAP850 is the problem
sashje, the problem is in IDA debugger's CPU detection routines. I've even reported this to IDA "support" but they paid no attention to my words.
Datarescue
you must download CE Debugger for windows ce if have it you must test another version of it you can download directly from datarescue
accepted, as far as I know even the latest versions of IDA 5 are bundled with an old ARM remote debugger dated from 2005...I bet that presently there is no such working version with OMAP CPU, but I would take my words back if only you could have pointed out the links for the downloads you meant.
if u changed your WM to unofficial WM
if u have any problem with pointers and breakpoints
if u have any connection error
you should test another version of CE Debugger On IDA PRO 5(my current version)
i have this problem with my device(Axim X30)
i changed CE debugger and work truth now
if you want some version of CE debugger i can give u
please use private messages
thanks
regards
accepted, your axim has Intel PXA270 (at 624MHz). We are speaking about Texas Instruments OMAP CPU problems lately here - so your remarks are quite incompetent. There is no version of this arm ida remote debugger dll that can work with OMAP CPU. If you have one (I'm sure you don't) please share it with all of us.
Texas Instruments
oh man i am sorry
i don't read carefully
IDA PRO do not support OMAP and only support ARm version
only support ARM(CE debugger)
sorry again

replace gwes.exe

Who can assists me replacing the gwes.exe on a Toshiba G500 smartphone?
I was so silly to buy this phone instead of trusting in htc's
No updates available from Toshiba, no helpfull email replies.
Many applications are not working due to gwes.exe error.
Toshiba just replies : no this software and the other asked doesn't run on G500.
So i have to help myself to get the most out of the misery.
On the phone is WM5 with AKU 3.2
Does someone have the files gwes.exe and gwes.exe.0407.mui from another WM5 release and can upload them.
How can i replace them? Due to the fact that gwes is running in the background i can't delete or rename it.
Also the files in the windows dirctory are protected.
Who can help me?
xda-graphite said:
Who can assists me replacing the gwes.exe on a Toshiba G500 smartphone?
I was so silly to buy this phone instead of trusting in htc's
No updates available from Toshiba, no helpfull email replies.
Many applications are not working due to gwes.exe error.
Toshiba just replies : no this software and the other asked doesn't run on G500.
So i have to help myself to get the most out of the misery.
On the phone is WM5 with AKU 3.2
Does someone have the files gwes.exe and gwes.exe.0407.mui from another WM5 release and can upload them.
How can i replace them? Due to the fact that gwes is running in the background i can't delete or rename it.
Also the files in the windows dirctory are protected.
Who can help me?
Click to expand...
Click to collapse
Sell your Toshiba, and buy a HTC.
xda-graphite said:
Who can assists me replacing the gwes.exe on a Toshiba G500 smartphone?
I was so silly to buy this phone instead of trusting in htc's
No updates available from Toshiba, no helpfull email replies.
Many applications are not working due to gwes.exe error.
Toshiba just replies : no this software and the other asked doesn't run on G500.
So i have to help myself to get the most out of the misery.
On the phone is WM5 with AKU 3.2
Does someone have the files gwes.exe and gwes.exe.0407.mui from another WM5 release and can upload them.
How can i replace them? Due to the fact that gwes is running in the background i can't delete or rename it.
Also the files in the windows dirctory are protected.
Who can help me?
Click to expand...
Click to collapse
Hi,
I don't know what you can do replacing such files, ( I think you must first make a dump of the rom, reconstruct it with the new files and then repack an flash again ) anyway you can try to extract gwes.exe and gwes.exe.0407.mui from the localized emulator on Microsoft web site... search with google for that if you don't have the link, I don't remember it now...
Really hope this help
Do you try to do a hardreset?
Surely you could use pput from ITSUTILS to drop the replacement files in, and then do a soft reset?
As for the files themselves, you'll just have to hope someone sends them to you
a majority of these errors was not caused by gwes.exe itself, i think. if you installed any software recently, uninstall them and try again
Hey guys, thank You for Your help. Never expected this resonance after the first reply
@[email protected]
you can try to extract gwes.exe and gwes.exe.0407.mui from the localized emulator on Microsoft web site...
Click to expand...
Click to collapse
just extracted it from WM5, but complete crash after replace
@THEVK
Do you try to do a hardreset?
Click to expand...
Click to collapse
a few times with no success
@Aquilo
Surely you could use pput from ITSUTILS to drop the replacement files in, and then do a soft reset?
Click to expand...
Click to collapse
just replaced the files with pput, but after soft reset complete crash of the phone.
@dandycheung
a majority of these errors was not caused by gwes.exe itself, i think. if you installed any software recently, uninstall them and try again
Click to expand...
Click to collapse
after a hardreset just installed tomtom -> crash
TomTom 5.21 / 5.20 both worked on my old xda graphite with WM5 but with another AKU version, i think 2.xx (don'T know bc. it's in the cellphone-heaven)
Don't know further, i have no ideas, maybe you guys
sell this and DO NOT buy htc!
gwes.exe is device dependant, so your phone wil never work with another device's version.
gwes.exe is device dependant, so your phone wil never work with another device's version.
Click to expand...
Click to collapse
no. it's device independent, but can have different components.
Also you can't replace it directly.
just extracted it from WM5, but complete crash after replace
Click to expand...
Click to collapse
it contains relocations. Do you fix it?
Also it must be signed.
Maybe this is interesting for someone:
left software button + power on
RUU update!
Waiting USB Connection ......
connecting usb cable
Updating
Receive call + power on
Factory update!
udc_enable
usb connect
Error occured, usbdev ep0 stalled!
and on Windows -> Driver installer -> TFW USB Download DR/V -> no driver found
(1 + power on) or (vol + power on)
PB Update!
Connecting...
INFO: Trying to initialize USB RNDIS...
HostMINIlnit:: !!
Rndis:: initialization: with addr=0
Rndis:: initialization!
Rndis:: Get MAC address yyyy,yyyy,yyyy
Rndis:: initialization: Fail!
ERROR: Failed to initialize Bulverde Rnd is USB Ethernet controller.
ERROR: Failed to detect and initialize Ethernet controller.
usb connection + 1 + battery connect
PB Update!
Connecting...
INFO: Trying to initialize USB RNDIS...
HostMINIlnit:: !!
Rndis:: initialization: with addr=0
Rndis:: initialization!
Rndis:: PDDInit Success!
Rndis:: Get MAC address XXXX,XXXX,XXXX
xxxx -> maybe device specific numbers
.
.
and on Windows -> Driver installer -> Microsoft RNDIS KITL for Intel PXA27x no driver found
.
.
Rndis:: initialization: Fail!
ERROR: Failed to initialize Bulverde Rnd is USB Ethernet controller.
ERROR: Failed to detect and initialize Ethernet controller.
4 + power on
KITL Enable...
Cellphone remains in "Toshiba Startscreen"
* + power on
SDCard update!
.
.
TFW Windows Mobile PDA SW DOwnload!
Initilization T-FLASH Card... SD Card CMD: Card Response timed out: 0x2142Initlization card fail!
Initilization T-FLASH Card... SD Card CMD: Card Response timed out: 0x2142Initlization card fail!
with MiniSD Card in slot:
* + power on
SDCard update!
Sectors per cluster: 32
First FAT Sector: 98
FatSectors: 31
First Dir sector: 160
First Data Sect : 192
Root DIR Entry Count: 512
...Dirctoy listing...
Search root dir fail!
fat search sector: Fail (fat_locate)
Find file fail!
Open file Error
Upgrade Fail!
0 + power on
------------------------
Xloader Version: MDOC4(mcp25) V1.00
Eboot Version: Eboot-1.02-00
(1) Download with USB_RNDIS
(2) Boot from IPL KITL enable
(3) Boot from IPL KITL disable (default)
(4) Test Key Value
(5) Test Memory
(6) Run ULDR. default FALSE
(7) Clean Reboot
(8) Abnormal Reboot
(9) Goto Sleep
----------from oallog------------
-----------------------------
Enter your selection:
This is your bootloader menu. All devices have some version of it.
Though all manufacturers put an option to upgrade in to their devices (just in case and for internal test purposes) few bother actually releasing updates.
There is no way to just replace gwes.exe and have the system working. What you need is a whole new ROM, so unless you can find someone cooking one I guess you are out of luck.
Thanks levenum,
i agree, there is no way just replacing it.
Just spoke to Toshiba support.
I asked for a hardware reset -> he searched and searched -> and told me "on this phone no way to do a hardware reset"
I ask myself WHO is working on toshiba support?
Why couldn't he say: press "0" + power on and then press 7
Does somebody know how to backup the rom e.g. on sd-card.
Flashing from sd card is possible with * + power on, but i don't know the filename the phone is requiring, and dont have one. Maybe after rom-dump the file will be known.
Toshiba also upgrades the G900 modell only by sending it in. There is no rom-update on the net. Maybe if someone tries (and knows) to backup the G900 rom maybe there is a chance to kook to WM6 for the G500.
Toshiba G500 Call outgoing problem
Toshiba G500 Call outgoing problem.But Idid formeted it "Format user partition" system. After have same problem & all incoming call ok.
any 1 will can give me solution for this problem ?

Deep IAT Hooking

Hi,
I've been porting a large number of linux based programs to the Gizmondo (CE 4.2 device).
One of the main issues is the broken c-runtime of CE, specifically the lack of current dir support (not to mention no posix layer ). At any rate I wanted to be able to hook fopen etc. to call my own functions which would handle current dir.
To do this I thought I'd make some nice and easy IAT hooking code, that was until I discovered how complex this was on CE (relative to Win32 that is).
After much head scratching and looking at the stellar work of those such as mamaich, itsme etc. I finally managed to get it right.
I hope this is useful to someone (I searched this board, but couldn't find any code, though I do remember someone asking how to do it) and have attached a zip file with the hooking code. In order to use this you will need to provide your own undoc.h with the relevant kernel struct and function definitions for your wince flavour.
Once again, I stand on the shoulders of giants, without whom this would not have been possible
Enjoy
-(e)
Beatiful~
You are genius~
Thank you.
Wow~
You are so beautiful~ ^_____^
Thank you.
I just wanted to start asking questions here... sweetlilmre, THANK YOU VERY MUCH!!!
excellent job~
thank you
Does anybody have undoc.h created for windows mobile 6 (wince 5.x)? If not, where should I look for the undocumented type info?
Hi~ JKingDev
I have ever created undoc.h with referencing "private" directroty.
"private" directory is installed with Platform builder. ( I used Platform Builder 5.0 )
If PB is installed, then C:\WINCE500\PUBLIC and C:\WINCE500\PRIVATE is created.
( I don't know Window Mobile 6.0 environment. )
p.s :
If you can translate KOREAN, then visit http://www.digipine.com/programming/1310.
This site has attached file "WinCE_ARM_Hook.zip". ( bottom side )
It is not my post, maybe it is posted by "jung cheulwon".
Hi all,
first of all, thank you sweetlilmre for posting this.
Your solution works perfectly fine for platforms based on Win CE 5, e.g. Win Mobile 6.1 and Win Mobile 6.5.3.
However it does unfortunately not work on Win CE 6 and Win CE 7.
I assume that this is due to changes in the memory architecture of Win CE 6 and higher.
Does anyone have a clue on how to port the "Deep IAT Hooking" solution on Win CE 6 and Win CE 7?
Some techical details on what i have tried so far...
Code:
[INDENT]
PROC WINAPI DeepHookImportedFunction(
LPCWSTR pwszModuleToHook, // Module to intercept calls to
LPCWSTR pwszFunctionToHook, // Function to intercept calls to
PROC pfnNewProc, // New function (replaces old function)
LPWSTR* ppwszExcludeList // List of module names to exclude from the hook
) {
PROC pfnOriginalProc;
PIMAGE_IMPORT_DESCRIPTOR pImportDesc;
PIMAGE_THUNK_DATA pThunk;
PPROCESS pProcess;
struct info inf;
PMODULE pmods;
LPVOID baseptr;
BOOL bHooked = FALSE;
SetKMode(TRUE);
// Get current process struct from KData
pProcess = KData.pCurPrc;
// Get process import descriptor
[B][COLOR="Red"]inf = pProcess->e32.e32_unit[IMP];[/COLOR][/B]
[/INDENT]
The program crashes (at the red marked spot) when i try to access the member
Code:
pProcess->e32
.
This is because the structure
Code:
pProcess
is filled up by the value zero only.
This happens quite early in the implementation, therefore i didn't proceed very far. I still hope that somebody can help me out with this case.
Kind regards

SD Card not working on XP?

Hello everybody,
Is it possible that the SD Card's are not working on XP?
I have an entry in my device manager. But if I insert a SD Card it wont work.
Regards,
CodeX2k
XP on the shift reads my smaller cards, 1gb and 4gb, but not my 16gb sdhc. There is an XP sdhc patch available from microsoft, but it made no difference on my shift.
Mine reads 16.
Only after hibernate/sleep I often loose any sd card and I get an error in my device manager.
Huib
Stupid me!
Did not see the XP!
Apologizes pls
Stupid me!
Did not see the XP!
Apologizes pls
Huib
Right now I can't test if the smaller cards are working. I only have a 16GB SDHC Class 6 with me in my holidays...
Did anyone get SDHC Cards working on XP?
I have the same problem when I installed the XP, SD slot won't read 16G,
But 16G SD card works with my USB card reader. Touch screen also won't work so gave up XP, restored Vista.
Only things won't work for me on XP are SDHC, Resolution Change and the HTC Utility all others works just fine ahhh and Touchscreen Calibration.
Hi @all
***EDIT***
I test now some other drivers, and see: It is really necessary, that you really right update the sdbus driver. I use this one:
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-67470
and force this driver to update, then if you want to update this driver normally, then the device manger tells you, that no other driver is newer than the installed.
But: I install again from scratch and test a little bit.
I think it is really related to the sdio driver problem when you want to install the WLAN.
But i´m not really shure, it is the right driver.
later more ;-)
*** old ***
SDHC don´t work to by my side. (test with 8GB kensigton) Normal SD e.g. 512MB Cards works.
I comparing the drivers with a other Notebook and i See, on HTC Shift the Driver is originaly from Microsoft build date 10-01-2002. My other Notebook has an driver from 2006 and from company O2Micro.
maybe that´s the Problem. Anybody knows what is the manufacturer of the SD Card Slot?
Can anybody send me the *.inf files from a Vista installed machine? Or have a look to the devicemanager of Vista, which driver is installed?
Additional I See: the driver sdbus.sys located in c:\windows\system32\drivers is the Version 6.0.5308.17 (with SP3) and is newer than the SDHC Hotfix that you can download from Microsoft...
Hmm. crazy..
see here the Microsoft Hofix link: (BTW: there a other hotfixes for SDHC Issues downloadable from MS too)
http://support.microsoft.com/kb/923293/en-us
It doesn't appear to be limited just to the Shift: http://forum.xda-developers.com/showthread.php?t=366570
It appears that the hotfix won't work and even the sp3 unless there's a specific fix/driver for the Shift, since Shift is not supported with XP officially, there wouldn't be one from HTC.
P.S. 16GB doesn't work on mine either. Still, not enough to make me go back to the ultra-slow Vista
Hi Doni,
thank you, really interesting. As I install a blank Windows XP SP3 from CD on shift (without additional drivers) , my Kingston 8GB SDHC Card works. (the first time I inserting my SDHC I become a blue screen) but after restart it works.
I think, the SD Card Reader device of Shift is a standard product, that build into other PC´s too, only the way to find out that that´s is the problem
I have some backup´s from my installation and can go back, so I will try it, at which time it has works..
see
http://forum.xda-developers.com/showthread.php?t=438820
###edit: ###
I test it with fallback to my older backups.
SDHC works, before I Installed the SDBUS.sys driver that is needed to become WLAN functionality. So I think, we must look for a other sdbus.sys driver (file) ?
I'm assuming then that WLAN doesn't work with the SP3 sdbus.sys, right? And the version that does, doesn't work for SDHC. Nice I suppose we need one that does both.
Hi Doni,
i have searched some hours for a solution.
to track the problem was a Everun UMPC http://www.raondigital.com/fnt_english/ev01.asp
essential, where we have stolen the sdbus.sys driver.
If you go there to the support and driver download you see, there is only the "sdbus.sys".
Really interesting, "how to" the normal user can change this file
normally is in a driver package (*.sys) always a *.inf file included, what I missed.
When you change only the *.sys file, maybe you can have problems with it, sometimes, there a difficult or other settings stored in Registry to control this driver.
And this is the problem I´m think. We need an officical *.inf (maybe installed) file from a Raon Everun UMPC.
I install at the moment Vista on shift to fetch the SD Bus settings from Vista side, maybe I become like Jesus and see the holy spirit.. (sorry, only joking)
I think the sdbus drivers of WXP-SP3 are ok, but you need some registry tweaks to control that right. Maybe the *.inf from Vista tell it me.
BTW: I don´t need the sdbus.sys from RAON within my precomiled WXP TPC SP3. WLAN works with the original sdbus.sys as well.
And that´s it: I try this way. Next week I´m on a Business trip, long time in lonesome hotels with long nights..
Always with a 16GB USB Stick and Acronis on it to recover. What need a man more in the City Jungle?
))
bg Joy
BTW:
WXP SP3 Driver Version 6.0.4069.5 from 2008-10-01 (Y-M-D) (sdbus.sys 6.0.4069.5512 (080413-2111)
Vista (org HTC) Version 6.0.6000.16478 from 2006-06-21 6.0.6000.16478 (vista_gdr.070427-1615)
Vista with SP1 Version 6.0.6000.18000 from 2006-06-21 6.0.6001.18000 (longhorn_rtm.080118-1840)
if you use that in a *.inf file
(make a new inf file with texteditor and copy lines above into it)
than you can install the raeon sdbus.sys driver
normally without windows safe mode...
;Copyright (c) 2002 Microsoft Corporation
[Version]
Signature="$Windows NT$"
Class=SDHost
ClassGUID={a0a588a4-c46f-4b37-b7ea-c82fe89870c6}
Provider=%Msft%
;LayoutFile=layout.inf
;DriverVer=10/01/2002,6.0.4069.1
DriverVer=06/28/2006,6.0.5308.17
;
; Information for installing the SD class
;
[ClassInstall32]
AddReg=ClassAddReg
CopyFiles = ClassCopyFiles
[ClassAddReg]
HKLM,System\CurrentControlSet\Control\CoDeviceInstallers,{a0a588a4-c46f-4b37-b7ea-c82fe89870c6},0x00010008, "sdhcinst.dll,SdClassCoInstaller"
HKR,,,,%SDClassName%
HKR,,Icon,,"2"
HKR,,Installer32,%REG_SZ%,"sdhcinst.dll,SdClassInstall"
HKR,,NoInstallClass,,1
[ClassCopyFiles]
sdhcinst.dll
;
; List of manufacturers and devices
;
[Manufacturer]
%Generic%=Generic
%TED%=TED
%TI%=TI
%Toshiba%=Toshiba
[ControlFlags]
ExcludeFromSelect=PCI\cc_080500
ExcludeFromSelect=PCI\cc_080501
ExcludeFromSelect=PCI\VEN_1679&DEV_3000
ExcludeFromSelect=PCI\VEN_104c&DEV_ac9f
ExcludeFromSelect=PCI\VEN_1179&DEV_0805
[Generic]
%PCI\CC_080500.DeviceDesc%=SDHost,PCI\CC_080500
%PCI\CC_080501.DeviceDesc%=SDHost,PCI\CC_080501
[TED]
%PCI\VEN_1679&DEV_3000.DeviceDesc%=SDHost, PCI\VEN_1679&DEV_3000
[TI]
%PCI\VEN_104c&DEV_ac9f.DeviceDesc%=SDHost, PCI\VEN_104c&DEV_ac9f
[Toshiba]
%PCI\VEN_1179&DEV_0805.DeviceDesc%=SDHost, PCI\VEN_1179&DEV_0805
[sdbus_Service_Inst]
ServiceType = %SERVICE_KERNEL_DRIVER%
StartType = %SERVICE_DEMAND_START%
ErrorControl = %SERVICE_ERROR_NORMAL%
ServiceBinary = %12%\sdbus.sys
LoadOrderGroup = System Bus Extender
AddReg = SDBUSServiceReg
[SDBUSLocationReg]
HKR,,UINumberDescFormat,,%SDBUSSlot%
[SDBUSReg]
HKR,,Driver,,"sdbus.sys"
[SDBUSServiceReg]
HKR,Parameters,SdCmdFlags,1, 06,01, 09,19, 0A,19, 0D,11, \
10,01, 11,01, 12,01, 18,05, 19,05, \
19,01, 1A,01, 1B,01, 1C,01, \
20,05, 21,05, 26,05, \
2A,01, \
34,02, 35,02, \
37,01, 38,01, \
22,01, 23,05, 24,01, 25,01
HKR,Parameters,SdAppCmdFlags,1, 06,01, 0D,01, 16,01, 17,01, 33,01, \
12,01, 19,01, 1A,01, 26,01, 2B,01, \
2C,01, 2D,01, 2E,01, 2F,01, 30,01, 31,01
[CSCopyFiles]
sdbus.sys
[DestinationDirs]
ClassCopyFiles=11
CSCopyFiles=12
[SourceDisksNames.x86]
0=%Desc_x860%
[SourceDisksNames.ia64]
[SourceDisksFiles.x86]
sdbus.sys=0
[SourceDisksFiles.ia64]
;
; Standard host controller
;
[SDHost]
CopyFiles=CSCopyFiles
AddReg=SDBUSReg
[SDHost.Services]
AddService = sdbus, 2, sdbus_Service_Inst
[SDHost.HW]
AddReg=SDBUSLocationReg
[Strings]
SDClassName="Secure Digital host controllers"
;
; Manufacturer name strings
;
Generic="SDA Standard Compliant SD Host Controller Vendor"
Msft="Microsoft"
TED="Tokyo Electron Device"
TI="Texas Instruments"
Toshiba="Toshiba"
Desc_x860= "XPPRO"
;
; Device Decription strings
;
PCI\VEN_104c&DEV_ac9f.DeviceDesc="Texas Instruments Secure Digital host controller"
PCI\VEN_1679&DEV_3000.DeviceDesc="Tokyo Electron SD Standard host controller"
PCI\VEN_1179&DEV_0805.DeviceDesc="Toshiba Secure Digital host controller"
PCI\CC_080500.DeviceDesc="SDA Standard Compliant SD Host Controller"
PCI\CC_080501.DeviceDesc="SDA Standard Compliant SD Host Controller"
;
;
;
SDBUSSlot = "SD Host Slot %1!u!"
SERVICE_KERNEL_DRIVER = 1
SERVICE_BOOT_START = 0
SERVICE_SYSTEM_START = 1
SERVICE_DEMAND_START = 3
SERVICE_ERROR_NORMAL = 1
SERVICE_ERROR_IGNORE = 0
REG_EXPAND_SZ = 0x00020000
REG_DWORD = 0x00010001
REG_SZ = 0x00000000
took some doing but i have both wifi and sd working with some swaping of drivers install process will post more detail later
Ciberycebyte, can you post how you made possible to work with both SD cards (includins SDHC with more than 2GB) and wireless.
Can you post the drivers you used?
Thanks!
It works now check out my patch if you are interested
The patch
unapproachable2kx said:
It works now check out my patch if you are interested
Click to expand...
Click to collapse
Hi Unapproachable, where can I find your patch, please? Would you please put up a link to it or attache it here in the theread? Thank you!
EDIT: I've found it! For those interested the patch <SDIO_Fix_01a.zip> can be downloaded from the thread SHDC & Wifi XP Fix located at http://forum.xda-developers.com/showthread.php?t=691208
Great thing Unapproachable2kx, thank you! I'll test it asap and report back.
Unapproachable2kx, is this patch still in the alpha state or is it pretty final?
Hi Unapproachable2kx!
I have tested your patch and I have inconsistent results. This means that I got wifi working (it used to work also before the test) and I got SDHC working once without problems for several insertions and wifi connect-disconnect cycles.
But after reboot and several other reboots the system was self-resetting and restarting when inserting the SDHC card (8GB Kingston). So after 6-7 such auto-resets I gave up using the SD card.
It is good to know for those who want to go that way that even if the wifi is on, the wifi icon doesn't show up in the task bar, so to make it visible you have to disconnect it and reconnect it with the .bat scripts (buttons).
Actually it seems to me that one can get the same results as installing the patch by doing an update of the wifi Marvell driver (which will go from the ionitial version 8.75.500.624 to the latest version 8.75.813.830) via internet (wifi connected) by using the appropriate Update button in the Hardware Manager. After that you have to replace in c:\Windows\System32\Drivers the sdbus.sys used in the wifi installation process (6.0.5308.17) with the initial Win XP SP3 6.0.4069.5512 (if you copied and saved it during the installation). For this replacement no Safe mode appears to be necessary. The same game with stopping and restarting the wifi board is necessary.
Any other's experience please?
joy.d said:
if you use that in a *.inf file
(make a new inf file with texteditor and copy lines above into it)
than you can install the raeon sdbus.sys driver
normally without windows safe mode...
;Copyright (c) 2002 Microsoft Corporation
[Version]
Signature="$Windows NT$"
Class=SDHost
ClassGUID={a0a588a4-c46f-4b37-b7ea-c82fe89870c6}
Provider=%Msft%
;LayoutFile=layout.inf
;DriverVer=10/01/2002,6.0.4069.1
DriverVer=06/28/2006,6.0.5308.17
.....................................................
Click to expand...
Click to collapse
Hi joy.d, wonderful thing if working stable.
What is the purpose of getting this new *.inf file, are you trying to replace the initial sdbus.inf file? If so could we start from that one and do only the changes?
Could you please be so kind to attache your *.inf file here in this forum? How did you named it? How to proceed further with it?
What sdbus.sys file did you use, the 4069 or the 5308 version?
Many thanks!

Categories

Resources