Database Users

Why doesn't this mute the incomming call ring?

After looking around I thought that this would stop the incomming call ring, but it doesn't.
Any suggestions please?
#include "StdAfx.h"
#include <Mmsystem.h>
int WINAPI WinMain( HINSTANCE hInstance,
HINSTANCE hPrevInstance,
LPTSTR lpCmdLine,
int nCmdShow)
{
HWAVEOUT hwo;
MMRESULT result = 0;
static WAVEFORMATEX wmTemp;
wmTemp.wFormatTag = WAVE_FORMAT_PCM;
wmTemp.nChannels = 1;
wmTemp.nSamplesPerSec = 8000 * 1000;
wmTemp.wBitsPerSample = 8;
wmTemp.nBlockAlign = wmTemp.nChannels * wmTemp.wBitsPerSample / 8;
wmTemp.nAvgBytesPerSec = wmTemp.nSamplesPerSec * wmTemp.nBlockAlign;
wmTemp.cbSize = 0;
result = waveOutOpen(&hwo, (UINT) WAVE_MAPPER, &wmTemp, 0, 0, CALLBACK_NULL);
result = waveOutSetVolume(hwo, 0);
waveOutClose(hwo);
return 0;
}

It seems that the Phone application doesn't use wave audio to play the file (strange as the ring tone is a wav file), or it is played exclusivly, Synchronously.
Any ideas?

All you need is to change the value of the registry value:
[HKCU\ControlPanel\SoundCategories\Ring\InitVol]
0=Mute 5=MAx ring volume
Enjoy :twisted:

Server Application problem

Using vb.net i have created an application which listens on TCP port 85 for incoming connections via telnet, reads a line of text (until ascii 13) and then parses that line (phone number, ascii 9, sms message, ascii 13) and sends it as an sms....
I have two small problems:
1: i am unable to work out if the sms was sent ok or not, i do not know how to get the return code from the send sms function into a useable format...
2: all this works fine (apart from the above) it parses the line, and sends the sms (i know it sends as it delivers to my other phone, but i need to have it print the result to the socket) but ONLY over the USB connection on 169.254.x.x, and not if i change the listening IP to 192.168.0.12 (this is a static ip the device is always assigned by my dhcp server) i cannot connect to the server. I would like to use this wirelessly as that way i can forward the port using my router and therefore access the sms on the phone from an external server without needing my laptop to be switched on!
I have included my code below... excuse the sloppiness, i only started using vb.net today, but any help in trying to acheive what i am attempting would be much appreciated!
Code:
Imports System.Runtime.InteropServices
Imports interopserv = System.Runtime.InteropServices
Imports System
Imports System.IO
Imports System.Net
Imports System.Net.Sockets
Imports System.Text
Imports Microsoft.VisualBasic
Public Enum SMS_ADDRESS_TYPE
SMSAT_UNKNOWN = 0
SMSAT_INTERNATIONAL
SMSAT_NATIONAL
SMSAT_NETWORKSPECIFIC
SMSAT_SUBSCRIBER
SMSAT_ALPHANUMERIC
SMSAT_ABBREVIATED
End Enum 'SMS_ADDRESS_TYPE
Public Structure PhoneAddress
'/ <summary>The address type.</summary>
Public AddressType As SMS_ADDRESS_TYPE
'/ <summary>The phone number in string format.</summary>
Public Address() As Char
End Structure 'PhoneAddress
Public Class SMS
Private Shared SMS_MSGTYPE_TEXT As String = "Microsoft Text SMS Protocol"
Private Shared SMS_MODE_SEND As Long = &H2
Private Shared SMS_OPTION_DELIVERY_NONE As Long = &H0
Private Shared SMS_OPTION_DELIVERY_NO_RETRY As Long = &H1
Private Shared PS_MESSAGE_OPTION_NONE As Long = &H0
Public Shared Function StrToByteArray(ByVal str As String) As Byte()
Dim encoding As New System.Text.ASCIIEncoding()
Return encoding.GetBytes(str)
End Function 'StrToByteArray
Private Enum SMS_DATA_ENCODING
SMSDE_OPTIMAL = 0
SMSDE_GSM
SMSDE_UCS2
End Enum 'SMS_DATA_ENCODING
Public Enum PROVIDER_SPECIFIC_MESSAGE_CLASS
PS_MESSAGE_CLASS0 = 0
PS_MESSAGE_CLASS1
PS_MESSAGE_CLASS2
PS_MESSAGE_CLASS3
End Enum 'PROVIDER_SPECIFIC_MESSAGE_CLASS
Private Enum PROVIDER_SPECIFIC_REPLACE_OPTION
PSRO_NONE = 0
PSRO_REPLACE_TYPE1
PSRO_REPLACE_TYPE2
PSRO_REPLACE_TYPE3
PSRO_REPLACE_TYPE4
PSRO_REPLACE_TYPE5
PSRO_REPLACE_TYPE6
PSRO_REPLACE_TYPE7
PSRO_RETURN_CALL
PSRO_DEPERSONALIZATION
End Enum 'PROVIDER_SPECIFIC_REPLACE_OPTION
Private Structure TEXT_PROVIDER_SPECIFIC_DATA
Public dwMessageOptions As Long
Public psMessageClass As PROVIDER_SPECIFIC_MESSAGE_CLASS
Public psReplaceOption As PROVIDER_SPECIFIC_REPLACE_OPTION
End Structure 'TEXT_PROVIDER_SPECIFIC_DATA
<System.Runtime.InteropServices.DllImport("sms.dll")> _
Private Shared Function SmsOpen(ByVal ptsMessageProtocol As [String], _
ByVal dwMessageModes As Int32, _
ByRef psmshHandle As IntPtr, _
ByVal phMessageAvailableEvent As IntPtr) As IntPtr
End Function
<System.Runtime.InteropServices.DllImport("sms.dll")> _
Private Shared Function SmsSendMessage(ByVal smshHandle As IntPtr, _
ByVal psmsaSMSCAddress As Int32, _
ByVal psmsaDestinationAddress As IntPtr, _
ByVal pstValidityPeriod As Int32, _
ByVal pbData As IntPtr, _
ByVal dwDataSize As Int32, _
ByVal pbProviderSpecificData() As Byte, _
ByVal dwProviderSpecificDataSize As Int32, _
ByVal smsdeDataEncoding As Int32, _
ByVal dwOptions As Int32, _
ByVal psmsmidMessageID As Int32) As IntPtr
End Function
<System.Runtime.InteropServices.DllImport("sms.dll")> _
Private Shared Function SmsClose(ByVal smshHandle As IntPtr) As IntPtr
End Function
<StructLayout(LayoutKind.Sequential)> _
Public Structure MsgSize
Public MsgSz As Int32
End Structure
<StructLayout(LayoutKind.Sequential)> _
Public Structure ProviderDataSize
Public ProvDataSize As Int32
End Structure
Public Shared Function SendMessage(ByVal sPhoneNumber As String, ByVal sMessage As String) As Integer
Dim retVal As IntPtr = IntPtr.Zero
Dim smsHandle As IntPtr = IntPtr.Zero
Dim smsProviderData As IntPtr = IntPtr.Zero
Dim smsMessage As IntPtr = IntPtr.Zero
Dim msgresult As Int32
Dim ProvData(12) As Byte
Try
retVal = SmsOpen(SMS_MSGTYPE_TEXT, SMS_MODE_SEND, smsHandle, IntPtr.Zero)
If retVal.ToInt32 <> 0 Then
Throw New Exception("Could not open SMS.")
End If
'Set address structure
Dim smsatAddressType As Byte() = BitConverter.GetBytes(SMS_ADDRESS_TYPE.SMSAT_UNKNOWN)
Dim ptsAddress As Byte() = System.Text.Encoding.Unicode.GetBytes(sPhoneNumber)
Dim smsAddressTag(smsatAddressType.Length + ptsAddress.Length) As Byte
Array.Copy(smsatAddressType, 0, smsAddressTag, 0, smsatAddressType.Length)
Array.Copy(ptsAddress, 0, smsAddressTag, smsatAddressType.Length, ptsAddress.Length)
Dim smsAddress As IntPtr = Marshal.AllocHLocal(smsAddressTag.Length)
System.Runtime.InteropServices.Marshal.Copy(smsAddressTag, 0, smsAddress, smsAddressTag.Length)
'Set message
Dim smsMessageTag As Byte() = System.Text.Encoding.Unicode.GetBytes(sMessage)
smsMessage = Marshal.AllocHLocal(smsMessageTag.Length)
System.Runtime.InteropServices.Marshal.Copy(smsMessageTag, 0, smsMessage, smsMessageTag.Length)
retVal = SmsSendMessage(smsHandle, 0, smsAddress, 0, smsMessage, smsMessageTag.Length, _
ProvData, 12, SMS_DATA_ENCODING.SMSDE_OPTIMAL, SMS_OPTION_DELIVERY_NONE, 0)
msgresult = retVal.ToInt32
'Stream.Write(StrToByteArray(retVal), 0, retVal.Length)
Catch ex As Exception
MessageBox.Show(ex.Message)
End Try
Try
retVal = SmsClose(smsHandle)
Catch ex As Exception
MessageBox.Show(ex.Message)
End Try
Return msgresult
End Function
End Class 'SMS
Public Class MyTcpListener
Public Shared Function StrToByteArray(ByVal str As String) As Byte()
Dim encoding As New System.Text.ASCIIEncoding()
Return encoding.GetBytes(str)
End Function 'StrToByteArray
Public Shared Sub Main()
Dim server As TcpListener
server = Nothing
Try
' Set the TcpListener on port 13000.
Dim port As Int32 = 85
Dim localAddr As IPAddress = IPAddress.Parse("0.0.0.0")
server = New TcpListener(localAddr, port)
' Start listening for client requests.
server.Start()
' Buffer for reading data
Dim bytes(1024) As Byte
Dim data As String = Nothing
' Enter the listening loop.
While True
Console.Write("Waiting for a connection... ")
' Perform a blocking call to accept requests.
' You could also user server.AcceptSocket() here.
Dim client As TcpClient = server.AcceptTcpClient()
Console.WriteLine("Connected!")
data = Nothing
' Get a stream object for reading and writing
Dim stream As NetworkStream = client.GetStream()
Dim i As Integer
Dim c As Char
Dim smeg As Char
Dim values(4) As String
'Dim msg As String
Dim j As String
i = stream.ReadByte()
While (i <> 1)
c = Microsoft.VisualBasic.ChrW(i)
data = data & c
i = stream.ReadByte()
End While
Dim mSep As String
mSep = "---------"
smeg = Microsoft.VisualBasic.ChrW(9)
values = data.Split(smeg)
stream.Write(StrToByteArray(values(0)), 0, values(0).Length)
stream.Write(StrToByteArray(mSep), 0, mSep.Length)
stream.Write(StrToByteArray(values(1)), 0, values(1).Length)
Dim result As Int32
result = SMS.SendMessage(values(0), values(1))
stream.Write(StrToByteArray(Microsoft.VisualBasic.ChrW(result)), 0, 1)
' Shutdown and end connection
client.Close()
stream.Close()
End While
Catch e As SocketException
Console.WriteLine("SocketException: {0}", e)
Finally
server.Stop()
End Try
Console.WriteLine(ControlChars.Cr + "Hit enter to continue....")
'Console.Read()
End Sub 'Main
End Class 'MyTcpListener

Utility to adjust the brightness. NEED HELP!

The question is as follows. Write a utility that when you start with the parameters governing the brightness of the screen.
For example
backlight.exe-up / / brightness, plus 1 point
backlight.exe-down / / brightness minus 1 point
Found in the forum code for the proposed Sorg'om PhoneAlarm, may help:
Code:
int batt = 5; //яркость от батареи 0...7
int ext = 7; //яркость от внешнего источника 0...7
HANDLE h = CreateFile(L"BKL1:", GENERIC_READ, 0, 0, 0, 0, 0);
if(h)
{
BYTE InBuf[8] = {2, 0, 0, 0, 0, 0, 0, 0};
DWORD Res = 0;
if(batt>7) batt = 7;
if(ext>7) ext = 7;
if(batt>=0)
{
HKEY key;
if(ERROR_SUCCESS == RegOpenKeyEx(HKEY_LOCAL_MACHINE, L"ControlPanel\\AsusSettings\\Backlight", 0, 0, &key))
{
RegSetValueEx(key, L"BatteryPower", 0, REG_DWORD, (BYTE*)&batt, 4);
RegCloseKey(key);
}
InBuf[4] = batt;
InBuf[6] = 0;
DeviceIoControl(h, 0xA201A004, InBuf, 8, NULL, 0, &Res, NULL);
}
if(ext>=0)
{
HKEY key;
if(ERROR_SUCCESS == RegOpenKeyEx(HKEY_LOCAL_MACHINE, L"ControlPanel\\AsusSettings\\Backlight", 0, 0, &key))
{
RegSetValueEx(key, L"ExternalPower", 0, REG_DWORD, (BYTE*)&ext, 4);
RegCloseKey(key);
}
InBuf[4] = ext;
InBuf[6] = 1;
DeviceIoControl(h, 0xA201A004, InBuf, 8, NULL, 0, &Res, NULL);
}
CloseHandle(h);
}
Driving should only illumination from the batteries.
All this is necessary to control it from WisbarAdvanced Desktop.
In programming, I am a bit up my street, but not that much ... therefore, care and ask.
Translated from Russian by Google.

Anyone with an Incredible willing to help debug an issue?

I have an app on the market called "103.7 The Buzz - Sports Talk". When people start the stream on the Incredible, it just loops after a few seconds/minutes.
I don't have access to an Incredible. Would anyone be willing to download it, verify that it loops and send me a logcat?
I have a Captivate and would be willing to help anyone else troubleshoot any issues they might have with that particular phone.
Thanks in advance!

Seems to be working fine for me on an Incredible running FRF91. I hit play and it started playing right away, kept going without issues.
I did notice that if I stopped it, it still displayed the buffer size, but when I start it again it clears it all.
I do see lots of getCurrentPosition in the log. I've attached a segment of the start of it.
Code:
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 0
V/MediaPlayerService( 69): [1] isPlaying: 1
V/MediaPlayerService( 69): getDuration
V/MediaPlayerService( 69): [1] getDuration = 39768
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 0
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 0
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 0
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 0
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 0
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
I/MediaPlayer( 1078): MediaPlayer handleMessage what=5
I/MediaPlayer( 1078): MediaPlayer handleMessage what=1
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 52
I/AudioHardwareQSD( 69): AUDIO_START: start kernel pcm_out driver.
W/AudioFlinger( 69): write blocked for 213 msecs, 2 delayed writes, thread 0x155c0
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 313
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 444
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 549
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 705
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 862
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 993
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 993
V/MediaPlayerService( 69): [1] isPlaying: 1
V/MediaPlayerService( 69): getCurrentPosition
V/MediaPlayerService( 69): [1] getCurrentPosition = 1123

[R&D][USB][MSM8905] Identification of USB interfaces

I need help to identify USB interfaces of MSM8905 (Snapdragon 205) device (Nokia 8110 4G) running KaiOS (Boot 2 Gecko aka FirefoxOS clone, uses many Android features such as ADB).
Here are the interfaces I have found so far, details follow:
Vendorroduct 0x18d1:d001 - adb sideload
Vendorroduct 0x05c6:0xf003 - MTP storage access
Vendorroduct 0x05c6:0xf00e - USB tethering
Vendorroduct 0x05c6:0x9092 - generic interface
adb sideload from recovery
I managed to switch the device to the Recovery mode (middle key up + power, then again power) - no ADB interface present, but there is an "Apply update from ADB" option and after this it presents this interface:
Code:
ugen7.2: <QUALCOMM Nokia 8110 4G> at usbus7, cfg=0 md=HOST spd=HIGH (480Mbps) pwr=ON (500mA)
bLength = 0x0012
bDescriptorType = 0x0001
bcdUSB = 0x0200
bDeviceClass = 0x0000 <Probed by interface class>
bDeviceSubClass = 0x0000
bDeviceProtocol = 0x0000
bMaxPacketSize0 = 0x0040
idVendor = 0x18d1
idProduct = 0xd001
bcdDevice = 0x0310
iManufacturer = 0x0001 <QUALCOMM>
iProduct = 0x0002 <Nokia 8110 4G>
iSerialNumber = 0x0003 <99887766>
bNumConfigurations = 0x0001
Configuration index 0
bLength = 0x0009
bDescriptorType = 0x0002
wTotalLength = 0x0020
bNumInterfaces = 0x0001
bConfigurationValue = 0x0001
iConfiguration = 0x0000 <no string>
bmAttributes = 0x0080
bMaxPower = 0x00fa
Interface 0
bLength = 0x0009
bDescriptorType = 0x0004
bInterfaceNumber = 0x0000
bAlternateSetting = 0x0000
bNumEndpoints = 0x0002
bInterfaceClass = 0x00ff <Vendor specific>
bInterfaceSubClass = 0x0042
bInterfaceProtocol = 0x0001
iInterface = 0x0004 <ADB Interface>
Endpoint 0
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0001 <OUT>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Endpoint 1
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0081 <IN>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Indeed, adb seems to see the device.
Unfortunately, I cannot seem to be able to switch to the fastboot interface (this seems to be possible on a very similar Reliance JioPhone) - there is no option in the recovery menu to do this and other middle buttons do not seem to work as expected.
MTP storage interface
When switching USB storage access one gets MTP device like this:
Code:
bLength = 0x0012
bDescriptorType = 0x0001
bcdUSB = 0x0200
bDeviceClass = 0x0000 <Probed by interface class>
bDeviceSubClass = 0x0000
bDeviceProtocol = 0x0000
bMaxPacketSize0 = 0x0040
idVendor = 0x05c6
idProduct = 0xf003
bcdDevice = 0x0310
iManufacturer = 0x0001 <Android>
iProduct = 0x0002 <Android>
iSerialNumber = 0x0003 <99887766>
bNumConfigurations = 0x0001
Configuration index 0
bLength = 0x0009
bDescriptorType = 0x0002
wTotalLength = 0x0027
bNumInterfaces = 0x0001
bConfigurationValue = 0x0001
iConfiguration = 0x0000 <no string>
bmAttributes = 0x0080
bMaxPower = 0x00fa
Interface 0
bLength = 0x0009
bDescriptorType = 0x0004
bInterfaceNumber = 0x0000
bAlternateSetting = 0x0000
bNumEndpoints = 0x0003
bInterfaceClass = 0x00ff <Vendor specific>
bInterfaceSubClass = 0x00ff
bInterfaceProtocol = 0x0000
iInterface = 0x0006 <MTP>
Endpoint 0
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0081 <IN>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Endpoint 1
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0001 <OUT>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Endpoint 2
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0082 <IN>
bmAttributes = 0x0003 <INTERRUPT>
wMaxPacketSize = 0x001c
bInterval = 0x0006
bRefresh = 0x0000
bSynchAddress = 0x0000
This appears to work as a expected.
USB tethering interface
When switching USB tethering on
Code:
ugen7.2: <Android Android> at usbus7, cfg=0 md=HOST spd=HIGH (480Mbps) pwr=ON (500mA)
bLength = 0x0012
bDescriptorType = 0x0001
bcdUSB = 0x0200
bDeviceClass = 0x0000 <Probed by interface class>
bDeviceSubClass = 0x0000
bDeviceProtocol = 0x0000
bMaxPacketSize0 = 0x0040
idVendor = 0x05c6
idProduct = 0xf00e
bcdDevice = 0x0310
iManufacturer = 0x0001 <Android>
iProduct = 0x0002 <Android>
iSerialNumber = 0x0003 <99887766>
bNumConfigurations = 0x0001
Configuration index 0
bLength = 0x0009
bDescriptorType = 0x0002
wTotalLength = 0x004b
bNumInterfaces = 0x0002
bConfigurationValue = 0x0001
iConfiguration = 0x0000 <no string>
bmAttributes = 0x0080
bMaxPower = 0x00fa
Additional Descriptor
bLength = 0x08
bDescriptorType = 0x0b
bDescriptorSubType = 0x00
RAW dump:
0x00 | 0x08, 0x0b, 0x00, 0x02, 0xe0, 0x01, 0x03, 0x08
Interface 0
bLength = 0x0009
bDescriptorType = 0x0004
bInterfaceNumber = 0x0000
bAlternateSetting = 0x0000
bNumEndpoints = 0x0001
bInterfaceClass = 0x00e0 <Wireless controller>
bInterfaceSubClass = 0x0001
bInterfaceProtocol = 0x0003
iInterface = 0x0006 <RNDIS Communications Control>
Additional Descriptor
bLength = 0x05
bDescriptorType = 0x24
bDescriptorSubType = 0x00
RAW dump:
0x00 | 0x05, 0x24, 0x00, 0x10, 0x01
Additional Descriptor
bLength = 0x05
bDescriptorType = 0x24
bDescriptorSubType = 0x01
RAW dump:
0x00 | 0x05, 0x24, 0x01, 0x00, 0x01
Additional Descriptor
bLength = 0x04
bDescriptorType = 0x24
bDescriptorSubType = 0x02
RAW dump:
0x00 | 0x04, 0x24, 0x02, 0x00
Additional Descriptor
bLength = 0x05
bDescriptorType = 0x24
bDescriptorSubType = 0x06
RAW dump:
0x00 | 0x05, 0x24, 0x06, 0x00, 0x01
Endpoint 0
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0082 <IN>
bmAttributes = 0x0003 <INTERRUPT>
wMaxPacketSize = 0x0008
bInterval = 0x0009
bRefresh = 0x0000
bSynchAddress = 0x0000
Interface 1
bLength = 0x0009
bDescriptorType = 0x0004
bInterfaceNumber = 0x0001
bAlternateSetting = 0x0000
bNumEndpoints = 0x0002
bInterfaceClass = 0x000a <CDC-data>
bInterfaceSubClass = 0x0000
bInterfaceProtocol = 0x0000
iInterface = 0x0007 <RNDIS Ethernet Data>
Endpoint 0
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0081 <IN>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Endpoint 1
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0001 <OUT>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
One of those interfaces gets detected as the RNDIS interfaces and gives me Ethernet.
Default interfaces
If neither tethering not storage is enabled, the device presents itself as a set of 3 interfaces:
Code:
ugen7.2: <Android Android> at usbus7, cfg=0 md=HOST spd=HIGH (480Mbps) pwr=ON
bLength = 0x0012
bDescriptorType = 0x0001
bcdUSB = 0x0200
bDeviceClass = 0x0000 <Probed by interface class>
bDeviceSubClass = 0x0000
bDeviceProtocol = 0x0000
bMaxPacketSize0 = 0x0040
idVendor = 0x05c6
idProduct = 0x9092
bcdDevice = 0x0310
iManufacturer = 0x0001 <Android>
iProduct = 0x0002 <Android>
iSerialNumber = 0x0003 <99887766>
bNumConfigurations = 0x0001
Configuration index 0
bLength = 0x0009
bDescriptorType = 0x0002
wTotalLength = 0x006f
bNumInterfaces = 0x0003
bConfigurationValue = 0x0001
iConfiguration = 0x0000 <no string>
bmAttributes = 0x0080
bMaxPower = 0x00fa
Interface 0
bLength = 0x0009
bDescriptorType = 0x0004
bInterfaceNumber = 0x0000
bAlternateSetting = 0x0000
bNumEndpoints = 0x0002
bInterfaceClass = 0x00ff <Vendor specific>
bInterfaceSubClass = 0x00ff
bInterfaceProtocol = 0x00ff
iInterface = 0x0000 <no string>
Endpoint 0
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0081 <IN>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Endpoint 1
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0001 <OUT>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Interface 1
bLength = 0x0009
bDescriptorType = 0x0004
bInterfaceNumber = 0x0001
bAlternateSetting = 0x0000
bNumEndpoints = 0x0003
bInterfaceClass = 0x00ff <Vendor specific>
bInterfaceSubClass = 0x0000
bInterfaceProtocol = 0x0000
iInterface = 0x0000 <no string>
Additional Descriptor
bLength = 0x05
bDescriptorType = 0x24
bDescriptorSubType = 0x00
RAW dump:
0x00 | 0x05, 0x24, 0x00, 0x10, 0x01
Additional Descriptor
bLength = 0x05
bDescriptorType = 0x24
bDescriptorSubType = 0x01
RAW dump:
0x00 | 0x05, 0x24, 0x01, 0x00, 0x00
Additional Descriptor
bLength = 0x04
bDescriptorType = 0x24
bDescriptorSubType = 0x02
RAW dump:
0x00 | 0x04, 0x24, 0x02, 0x02
Additional Descriptor
bLength = 0x05
bDescriptorType = 0x24
bDescriptorSubType = 0x06
RAW dump:
0x00 | 0x05, 0x24, 0x06, 0x00, 0x00
Endpoint 0
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0083 <IN>
bmAttributes = 0x0003 <INTERRUPT>
wMaxPacketSize = 0x000a
bInterval = 0x0009
bRefresh = 0x0000
bSynchAddress = 0x0000
Endpoint 1
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0082 <IN>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Endpoint 2
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0002 <OUT>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Interface 2
bLength = 0x0009
bDescriptorType = 0x0004
bInterfaceNumber = 0x0002
bAlternateSetting = 0x0000
bNumEndpoints = 0x0003
bInterfaceClass = 0x00ff <Vendor specific>
bInterfaceSubClass = 0x00ff
bInterfaceProtocol = 0x00ff
iInterface = 0x0000 <no string>
Endpoint 0
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0085 <IN>
bmAttributes = 0x0003 <INTERRUPT>
wMaxPacketSize = 0x0008
bInterval = 0x0009
bRefresh = 0x0000
bSynchAddress = 0x0000
Endpoint 1
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0084 <IN>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Endpoint 2
bLength = 0x0007
bDescriptorType = 0x0005
bEndpointAddress = 0x0003 <OUT>
bmAttributes = 0x0002 <BULK>
wMaxPacketSize = 0x0200
bInterval = 0x0000
bRefresh = 0x0000
bSynchAddress = 0x0000
Those look like proprietary interfaces. I have hacked adb to force it to talk to those endpoints with its protocol, but there is no reply after two initial packets.
I have been reading excellent posts from like MSM8960 Info, Architecture and Bootloader(s) by @E:V:A and [R&D][QUALCOMM] Using QDL, EHostDL and DIAG interfaces & feature by @SouL Shadow and I suspect those are proprietary interfaces used by QPST.
My questions:
Are those product:vendor numbers something new?
Are my guesses correct? If yes, which interface should I try poke with HDLC packets?