Customize your firmware - Bada Software and Hacking General

For Bada 2.0
To enable (or disable) some fonction directly from firmware.
Extract CSC with tool (WaveRemaker), go to CSC\SystemFS\Settings\PreConfiguration\Default\NV
Open nv_original.ini
To change browser's user agent add this command: NV_SI_UAGENT=the user agent you want to use
Exemple:
NV_SI_UAGENT=Mozilla/5.0 (Linux; U; Android 4.0.3; fr-fr; GT-I9000 Build/IML74K) AppleWebKit/535.7 (KHTML, like Gecko) CrMo/16.0.912.75 Mobile Safari/535.7
You also can active others, like:
- Battery percentage => NV_SI_BATTERY_PERCENTAGE_ENABLE =1
- Disable Mode vibrate => NV_SI_MODE_VIBRATE=0
etc.
The file after looks like that
#Version
Version=1
#NvId
NV_SI_ADM_PRE_CONFIGURATION=0
NV_SI_MODE_VIBRATE=0
NV_SI_BATTERY_PERCENTAGE_ENABLE =1
NV_SI_UAGENT=Mozilla/5.0 (Linux; U; Android 4.0.3; fr-fr; GT-I9000 Build/IML74K) AppleWebKit/535.7 (KHTML, like Gecko) CrMo/16.0.912.75 Mobile Safari/535.7
Click to expand...
Click to collapse
After modifying, rebuild the CSC and flash your wave.
There are a lot of other things, to see all actions, plug your wave to computor, run Stune and open Settings/Default/NV/nv_default.ini
If you find interresting things, thanks for making your feedback

What works?
- NV_SI_MODE_VIBRATE=0
Vibrate is disabled
- NV_SI_BATTERY_PERCENTAGE_ENABLE =1
Battery % is enabled
- NV_SI_PHONE_SLEEP=600
Backlight time (15s, 30s by default, 60s, 180s, 600s)
- NV_SI_UAGENT=
Browser user agent you want
- NV_SI_NETWORK_DATA_ROAMING=1
Roaming is enabled
- NV_SI_USE_PACKET_DATA_ENABLE=1
Packet data is enabled
- NV_SI_MOTION_SHAKE=0
- NV_SI_MOTION_TILT=0
-NV_SI_MOTION_TURN_OVER=0
- NV_SI_MOTION_SHAKE=0
Motions are disabled because I never use them lol
- NV_SI_LCD_CONTRAST=13
To adjust brightness, 15 by default (set 5 on wave). If you want 3, put 13, etc
Some other interesting do not work (Fake call, light sensor, Wifidirect, etc)
Is there a list of all NV_SI available??

NV_SI
Here's a complete list of NV_SI items.

"After modifying, rebuild the CSC and flash your wave."
Is the 'rebuild' just saving the file as uncompressed CSC?
Can I then choose the new CSC file when flashing or is there something else I need to do before flashing?
Thanks!

http://forum.xda-developers.com/showpost.php?p=22256801&postcount=231
Maybe Font path... for easier Fontchange...
Code:
NV_SI_FONT_TYPE_DEFAULT_FILE=/SystemCSC/Font/Samsung font.ttf
NV_SI_FONT_TYPE_FILE=/SystemCSC/Font/Samsung font.ttf
Maybe Product Code change...
Not tried yet.
But I think their are few more usefull settings possible.
As some differences in bada 2.0 Firmware... since bada 1.x...
Best Regards

I wonder if it is possible to update this thing without losing any data
I already tried with Stune with no success
Can anyone post possible paths of such a file ?
Maybe i missed one of those
Thanks in Advance
Best Regards
Edit : I see these files only
/Settings/Default/NV/nv_default.ini
/SystemFS/Settings/PreConfiguration/Default/NV/nv_original.ini
/NV/nv_default.ini
I remember a table of NV items with addresses posted on another thread i'll look into it
Edit 2 : NV items table posted by Rebellos
Here : http://forum.xda-developers.com/showpost.php?p=21377672&postcount=10
And Here : http://forum.xda-developers.com/showpost.php?p=19746682&postcount=28
Edit 3 : NV items addresses in hex-decimal format are attached for faster investigation

NV/nv_default.ini
This is hidden folder...
NV means NV items. You can also reach them, if you know ID via Qualcomm Tools.
But this config list seems easier.
Yes, in theory maybe with Multiloader it could be to flash only such text file to change NV item.
But no idea how...
I'm new to Samsung.
Only 1 year experience.
Maybe someone else has experience with Qualcomm models from Samsung and know how to change NV items in other way, without dataloss and without Qualcomm Tools...
Best Regards
Edit 1.
No idea if possible to change this file... with effect and no dataloss... never tried
NV/nv_default.ini
---------- Post added at 09:48 AM ---------- Previous post was at 09:11 AM ----------
NV_SI_OPERATOR_SALES_CODE=KOR
I am not sure as I have very often flashed then used Preconfig...
Sometimes it seems. Product Code is changed from Firmware Flashing...
Maybe it is possible to use Multiloader in this case, to change Product Code...
Need to be confirmed.
Best Regards

congratulations very good idea.
http://forum.xda-developers.com/showthread.php?t=1505302:D

adfree said:
http://forum.xda-developers.com/showpost.php?p=22256801&postcount=231
Maybe Font path... for easier Fontchange...
Code:
NV_SI_FONT_TYPE_DEFAULT_FILE=/SystemCSC/Font/Samsung font.ttf
NV_SI_FONT_TYPE_FILE=/SystemCSC/Font/Samsung font.ttf
Maybe Product Code change...
Not tried yet.
But I think their are few more usefull settings possible.
As some differences in bada 2.0 Firmware... since bada 1.x...
Best Regards
Click to expand...
Click to collapse
It is working, I changed to choco cokie font
Interesting: NV_SI_ANYKEY_LCD_ON=1 it works!!!
Themes not work, is changed on adjust, but no apply...
NV_SI_THEME_DEFAULT_FILE=/AppEx/Sys/Theme/Default theme.smt
NV_SI_THEME_USE_FILE=/AppEx/Sys/Theme/Default theme.smt
regards
aluke

NV_SI_LIGHT_SENSOR_ACTIVE=0
Click to expand...
Click to collapse
Is there a light sensor !
NV_SI_DATE_START_YEAR=2011
Click to expand...
Click to collapse
Nice when the phone ask for the date
NV_SI_DEVICE_NAME=Samsung Wave
Click to expand...
Click to collapse
Useful for Bluetooth , Modem & DLNA names
NV_SI_FAKE_CALL_VOICE=0
NV_SI_FAKE_CALL_TIMER=10
NV_SI_FAKE_CALL=0
Click to expand...
Click to collapse
Maybe possible to revive this option ?!
Sorry No time to test today
Best Regards

mylove90 said:
Is there a light sensor !
Click to expand...
Click to collapse
of course.. the s8600 got one

NV_SI_KJAVA_RUNNING_MIDLET_COUNT=5
NV_SI_JAVA_DEFAULT_MIDLET_COUNT=5
5 JAVA program running at the same time
full flash
translation by Google

If I set "NV_SI_PHONE_SLEEP=8" would it work?

josephpatrick said:
If I set "NV_SI_PHONE_SLEEP=8" would it work?
Click to expand...
Click to collapse
Yes, normally it should work since it is you who makes the restrictions.

Soxix said:
Yes, normally it should work since it is you who makes the restrictions.
Click to expand...
Click to collapse
It works but I need to figure out a way to list 8 secs in the menu as well because in case I switch to 15secs I do not have the option to switch back to 8secs. Any thoughts?

josephpatrick said:
It works but I need to figure out a way to list 8 secs in the menu as well because in case I switch to 15secs I do not have the option to switch back to 8secs. Any thoughts?
Click to expand...
Click to collapse
Just don't change of settings
Or you will have to add a setting to the concerned file of the settings menu.
And I have no idea how to do this. I even wonder whether it is possible...

How to delete operator name on notification bar?

Very good.
Thanx lasentenza
I will now use these:
Code:
NV_SI_BATTERY_PERCENTAGE_ENABLE =1
NV_SI_PHONE_SLEEP=600
NV_SI_MODE_VIBRATE=0
Maybe someone found more usefull settings?
And maybe someone know how to flash this with Multiloader?
I mean only the NV items ?
Maybe as ETC in Multiloader?
nv_original.ini
Best Regards

NV items edit with a flash to overwrite old files doesn't change NV items for real
It just replace the files with newer ones
Sorry you have to do a full flash with newer CSC file to get it working
Best Regards

Found on S8530NELH2 but why 1.0 and GT-S8500
NV_SI_UAGENT=SAMSUNG-GT-S8500/1.0 Bada/1.0 Dolfin/2.0 NexPlayer/3.0 SMM-MMS/1.2.0 profile/MIDP-2.1 configuration/CLDC-1.1 OPN-B
NV_SI_SETTING_SAMSUNG_APPS_UPDATE_NOTIFY=packet

Related

[REQ] Push Internet Cab?

Guys
Anyone got a cab to add Push Internet functionality to the Touch HD (possibly from a Touch Diamond 2 port?) for use on the native Manila?
I'd be really interested to use this.
Thanks
I don't think it is possible, because it is totally a new manila.
ok- but there might be another way to perform this without using a new rom....I just don't want to flash a non-official rom.....no specific reason other than I have concerns.
im sorry but i dont quit understand.. whats push internet?? i know push email such as exchange or bis/bes but i never heard of push internet...
Wiggz said:
ok- but there might be another way to perform this without using a new rom....I just don't want to flash a non-official rom.....no specific reason other than I have concerns.
Click to expand...
Click to collapse
You need to use new ROM look at my sig
Push Internet is possible with tweaking Reg (In new manila)
(Set Value data to 1)
HKEY_LOCAL_MACHINE\Software\HTC\Manila\InternetPush
(Set Value data to 1)
HKEY_LOCAL_MACHINE\Software\HTC\PushInternetEngine
Cheers for the info Kaon but I'm not looking to flash a new ROM. Anyone have any ideas how to achieve similar results with a Stock ROM (albeit maybe with a diff app?)
@ Richbenson: Push Internet is basically a timed poll of selected internet sites that allows you to load up the cached version rather than the live version....so for example you could set BBC.co.uk to be "pushed" to your device every 15minutes and your device would launch that version of the internet site when you went on that website.
ooo ok... thanks
MrKaon said:
You need to use new ROM look at my sig
Push Internet is possible with tweaking Reg (In new manila)
(Set Value data to 1)
HKEY_LOCAL_MACHINE\Software\HTC\Manila\InternetPush
(Set Value data to 1)
HKEY_LOCAL_MACHINE\Software\HTC\PushInternetEngine
Click to expand...
Click to collapse
Can this ROM applied to Diamond?
MrKaon said:
You need to use new ROM look at my sig
Push Internet is possible with tweaking Reg (In new manila)
(Set Value data to 1)
HKEY_LOCAL_MACHINE\Software\HTC\Manila\InternetPush
(Set Value data to 1)
HKEY_LOCAL_MACHINE\Software\HTC\PushInternetEngine
Click to expand...
Click to collapse
when i enter these values, i get a error: cannot access the address: file://localhost/obnc/program...etc
atleast before i entered these values i could load the 'push pages' as if they were normal bookmarks - which i am currently trying to solve as well
ssimon989 said:
when i enter these values, i get a error: cannot access the address: file://localhost/obnc/program...etc
atleast before i entered these values i could load the 'push pages' as if they were normal bookmarks - which i am currently trying to solve as well
Click to expand...
Click to collapse
what kind of rom do you use? it would be much easier to support you with some information ;-)

Internal menu

http://wenku.baidu.com/view/e27ca2c66137ee06eff91876.html
After reading this I tried Code:
*#7092463*#
Several nice Settings, infos... and tests.
Like Touchscreentest with Coordinates, look weird Pic...
Bad. Not every Firmware support this Code.
JI5 for instance no chance... Reason I think is here:
http://forum.xda-developers.com/showthread.php?t=895526
We should more investigate this file...
I saw for S8000 they were also lucky to find new Code...
http://code.google.com/p/jetdroid/wiki/JetBootloader
I think this menu is active, only other Code needed for higher Firmware...
Best Regards
It seems not the Firmware Version is mandatory...
.. it seems this menu is locked...
I compared 2 Waves with same Firmware.
First no success. Second success... but after several Flashs I lost access to Internal menu.
Now after playing with AT commands... it is back.
It seems we can unblock... I have only no idea how exactly I've unblocked Internal menu.
Best Regards
Rsrc2_S8500(Low).rc2
Rsrc2_S8500(Mid).rc2 ----> it seems this can access Internal menu
It seems *.RC2 is the Block for Internal menu.
Compare both files, you see only 1 Byte difference.
Maybe this means something like, Low Security, Middle Security... maybe there are higher Settings possible...
I will check this.
Best Regards
how come this menu exists on wave 525 regardless of firmware?
hmm, I think I'm missing something here. In all the firmwares I've downloaded not once have I seen a Rsrc2_S8500(Mid).rc2.
Can you upload yours or otherwise let us know where we can get one from please.
Also can you tell us which firmware you're running please?
Cheers in advance,
D.
you can make yours as MID or even High with Wave remaker
http://forum.xda-developers.com/showthread.php?t=1028714
Don't forget to give a thanks to ho1od
Enter Code into handset:
Code:
[B]*#33284*#[/B]
= Debug Level (Low, Midle, High)
Best Regards
adfree said:
Enter Code into handset:
Code:
[B]*#33284*#[/B]
= Debug Level (Low, Midle, High)
Best Regards
Click to expand...
Click to collapse
Cheers Adfree - that's exactly what I was looking for ... I'm gonna try figure out decent keymaps for the android port
9600 Baud and check the setting UE Awake...
Ok...
Volume + = 0x54
Volume - = 0x55
Call = 0x50
Home = 0x53
Hangup = 0x51
Camera Halfpress = 0x8e
Camera Fullpress = 0x8d
Standby = 8f
now... how to change these into values for the s3c-keypad.kl file...
duxxyuk said:
now... how to change these into values for the s3c-keypad.kl file...
Click to expand...
Click to collapse
sorry to be off topic...
but...
the Android kernel interpets things differently, you can look at the kernel dmesg log when pressing the buttons if you want to see what is attached where, but some keys don't work from fota loader yet, people not interested in the dev side (like fixing fota or kernel issues instead of trying to install android apps) should wait for a proper release.
Not sure if before... but Backup and Restore seems possible on KK5...
Searching for folder where it is stored...
Best Regards
adfree said:
Not sure if before... but Backup and Restore seems possible on KK5...
Searching for folder where it is stored...
Best Regards
Click to expand...
Click to collapse
Thanks adfree
in before firmwares backup and restore works with kies but i dont know is it
available with phone or no .
can you please tell me how can i access to this menu ? i want to test it with other firmwares
Normally the answer is in this Thread...
Anyway.
Menu is blocked if not on Debug Level Mid or High... So first step:
*#33284*#
Later set back to Low to prevent Bluescreens.
Second step is:
*#7092463*#
Then:
4 Module Setting
11 Sync
At the moment no idea where Backupfile is stored...
In WinComm I saw this:
Code:
SmlBackupRestoreDebugHistoryResult: Cannot make config file!(/User/Mass/SmlMgr/_LastBnRHistory.txt)
I will deeper research...
Please remember. At your own risk. No idea if sideeffects...
Best Regards
any try to restoring failed
the error is : Restoring fail ( Manifest error or no Manifest ! )
---------- Post added at 12:30 PM ---------- Previous post was at 12:18 PM ----------
with stune :
User > SyncML
there is some *.cfg files
what is your idea is them backup files ?
Code:
+[059]=> [622.092]Packaging Start[/Media/_SamsungBnR_/Message.bk]
+[060]=> [622.109]Packaging Finish[/Media/_SamsungBnR_/Message.bk]:[Success]
+[061]=> [622.147]Packaging Start[/Media/_SamsungBnR_/MusicSetting.bk]
+[062]=> [622.166]Packaging Finish[/Media/_SamsungBnR_/MusicSetting.bk]:[Success]
I was able to create folder:
/User/Mass/SmlMgr/
Then file is written after Backup _LastBnRHistory.txt
Maybe I am blind, can't find yet folder /Media/_SamsungBnR_/
Maybe hidden or I am blind...
At the moment toooo lazy to backup again all files and searching for *.bk extension...
Maybe later more...
About Restore...
Success, but I have nothing installed yet and no SD card...
with stune :
User > SyncML
there is some *.cfg files
see below image :
there is some *.cfg files
Click to expand...
Click to collapse
Strange, I thought they are for FOTA...
I'll update to bada 1.0 and check again...
Maybe then more success to find *.bk files...
Best Regards
XXKL6 on my S8530 shows me Total Heap Mem.
245.760K
This seems 40 MB more then on bada 1.2...
Will check S8500...
Best Regards
adfree said:
XXKL6 on my S8530 shows me Total Heap Mem.
245.760K
This seems 40 MB more then on bada 1.2...
Will check S8500...
Best Regards
Click to expand...
Click to collapse
I can confirm this number in S8500... in XXKK7, 245.760 K... It seems that S8500 and S8530 are identical in memory issues..
Cheers!
Maybe we can find this info from S8600, S7250 and so on...
S8600 should have "more"... maybe...
Best Regards
that's right adfree, my s8600 show me more!

AT Commands + other kind of Commands

In amss.bin you can find several AT Commands...
Few short tested by me:
AT+DEVEXTMEMINSCHK?
Hmmm. returns only 2
No idea, I thought something for Memory...
AT+USERMEM
Returns 0k or maybe okay
AT+HEADERINFOSHOW?
Shows for instance the Memory name...
MemoryName:KAC007021M(S8500)
Btw... This is exact what we can read on Application Processor Chip.
1 hint that RAM is integrated with S5PC110 Processor...
Best Regards
TRY at your own risk. I have no idea what could happen.
s8500 support several types of at commands.
First type is common at commands set (70 commands), including AT+CPIN, AT+CMGR etc
the second (samsung specific, 171 commands) has many useful commands like etc
s8500 support 293 at commands (including common commands like AT+CPIN, AT+CMGR, and samsung specific like AT+IMEITEST, AT+CPU also)
complete list in attachment.
Do not use if you do not know what the command is for
AT+PRODUCTCODE?
Result:
AT+PRODUCTCODE? +PRODUCTCODE: GT-S8500BAADBT
If I enter:
AT+PRODCODE
Result:
Invalid Parameter
Hmmm. I'm not up to date in using AT commands.
Is it maybe possible to change Product Code via AT Command?
How is the correct Syntax for AT+PRODCODE ?
There are more interesting Commands.
Best Regards
P.S.:
I was only in Kies Mode, maybe other results in Debug Mode possible...
AT+DEVCONINFO
MN(GT-S8500);BASE(GT-S8500);VER(S8500XXKK7/S8500OXAKK7);HIDVER(S8500XXKK7/S8500OXAKK7);PRD(GT-S8500BAADBT);SN();IMEI(3xxxxxx3);PN();TZVER(20111025);CON(AT,MTP);HVID(Osp:2097153,IntSys:2097154);LOCK(NONE);LIMIT(FALSE)
Oh, not realized before... few changes...
On previous bada 1.x... looks like this:
MN(GT-S8530);VER(S8530XXJL2/S8530OXFJK3);HIDVER(S8530XXJL2/S8530OXFJK3);PRD(GT-S8530BAASEB)
MN should be manufacturer I think... this is very funny text string.
Best Regards
Edit 1.
My fault... MN is Model Name...
Ooh, this reminds me of the days when I had a SonyEricsson T68 and K750.... Good ol days ... One thing missing from those days .. Our samsung wave telephones don't do the Bluetooth HID protocol...
How do you send these commands?
Can you post output from:
AT+DGLOCK
AT+LVOFLOCK
AT+DETALOCK
?
How do you send these commands?
Click to expand...
Click to collapse
You can choose... there are hundrets of Tools, or write your own Terminal...
Few Tools I've used for this...
Revskills very often...
WinComm
QuB...
.
.
AT+DGLOCK
AT+LVOFLOCK
AT+DETALOCK
Click to expand...
Click to collapse
I'm little wimpy old man as you know...
But as I have 0 info about this... I'm scared to lock something and brick my handset...
No idea how to unlock ...
I'll investigate more...
Google research etc. and report later more... I'll try to be on the safer site...
About DELTA files/FOTA...
http://www.megaupload.com/?d=Z53R1IVX
I have upload few of S8500.
Maybe we find Commands or way to install manually these *.cfg Deltas...
Maybe AT Command also work...
Best Regards
Edit 1.:
Found this... untested yet:
Code:
AT+FOTALOC
AT+FOTAREADY
AT+FOTASTART
Edit 2...
Or maybe more such DEV Commands...
GetFotaEngineVer
Get FOTA Engine Version
Edit 3...
Maybe for Update... beter search for something like this:
SML_DM_FUMO_STATE
Or SCOMO
SCOMO Download Complete go to ui event 1...
SCOMO...Warning!!!! Delta Over Size
DownloadAndUpdate...org.openmobilealliance.dm.firmwareupdate.devicerequest
http://www.openmobilealliance.org/t...ram/docs/ets/oma-ets-fumo-v1_0-20061215-c.pdf
I'm sure LVOFLOCK gets level of lock - doesn't overwrite anything
The same about DETALOCK (detailed lock)
Just don't remember what was the code for DGLOCK, so don't use it for now if u're scared. You won't find these in google I think, these are Samsung specific, maybe only Mocha specific.
//edit:
Btw, many of AT commands goes to AMSS, but only what AMSS do is calling Mocha function in AP corresponding to AT command and returning result. For eg LVOFLOCK make AMSS invoke Bada function (also accessible from QuB) GetLevelOfLock and get it's return value. Can you compare result of these 2 maybe?
http://electronix.ru/forum/index.php?act=attach&type=post&id=46875
Tested by me...
AT+FOTALOC?
: Others
This seems location... folder... Others
AT+FOTAREADY?
COPYRETRY
But AT+FOTASTART seems correct...
Handset reboots... like if I delete *.cfg files...
Hmmmmmmmmm.
Will log with WinComm... maybe then more info...
Best Regards
At+preconfig=2,tmb
at+lvoflock=1,0
at+factrst=0,1
at+lvoflock=0,0
600 pages FOTA OTA Command with explain :
http://www.scribd.com/doc/63560940/47/FOTA-Commands
http://www.google.fr/url?sa=t&rct=j...sg=AFQjCNFTQzBSwRrZg82TEZSOleqClg4dbA&cad=rja
AT+FOTASTART 2400258.cfg
Error...
AT+FOTASTART after Download of package, not start downloaded update.
Maybe wrong syntax or FOTA of Qualcomm part only... amss.bin...
I can't see anything with WinComm... maybe next try with QXDM... if amss related...
@ Tigrouzen
Many thanx for helpfull Links.
Best Regards
adfree said:
AT+FOTASTART 2400258.cfg
Error...
AT+FOTASTART after Download of package, not start downloaded update.
Maybe wrong syntax or FOTA of Qualcomm part only... amss.bin...
I can't see anything with WinComm... maybe next try with QXDM... if amss related...
@ Tigrouzen
Many thanx for helpfull Links.
Best Regards
Click to expand...
Click to collapse
But i remember some time Samsung change this thing like not AT+FOTAUIMODE but
AT&FOTAUIMODE
Now its work but no Carrier
In our wave AT+CPIN doesnt work but AT&CPIN works
Code:
AT+FOTALOC?
AT+FOTAREADY?
AT+FOTASTART
Short tried on bada 1.0... JE7 Firmware...
All 3 output was Error...
Okay, not included in amss...
2400258.cfg also as text String in apps_compressed...
Will play little bit with Delta... then move to XXJL2...
Best Regards
Little progress...
AT+DEVCONINFO
Code:
MN(GT-S8600);VER(S8600XXKJC/S8600DBTKJ4);HIDVER(S8600XXKJC/S8600DBTKJ4)...
My S8500...
Best Regards
Did you get S8600 fw on your S8500 !!!!
Man this JTAG playing could kill your phone
Best Regards
Nah, he got FW ID from S8600 on S8500, while S8600 ShpApp & RC may be possible to run on S8500 and vice versa, rather no way about other things. ;P
"DEVCONINFO"="MN(GT-S8600);BASE(GT-S7250);VER(S8600XXKK5/S8600DBTKL1);HIDVER(S8600XXKK5/S8600DBTKL1);PRD(GT-S8600HKADBT)
Click to expand...
Click to collapse
Many thanx to S8600 user for nice info.
Best Regards
AT+SECUKEY +SECUKEY:"DXDxxxxxxxxxxxx=="
OK
AT+AUTHKEY +AUTHKEY:FAIL
OK
AT+DEVAUTH +DEVAUTH:SUCCESS
OK
AT+CERTKEY +CERTKEY:"X5Mxxxxxxxxxxx=="
OK
AT+PASSWORDINPUT +PASSWORDINPUT:SUCCESS
OK
Found Commands in WsSyncml.so, see here:
http://forum.xda-developers.com/showpost.php?p=21541765&postcount=4
No idea yet, what it is.
Best Regards
b.kubica said:
complete list in attachment.
Click to expand...
Click to collapse
Nice post b.kubica
Are you aware of the Qualcomm commands?
AT+CLAC lists these extra commands:
$QCSIMSTAT
$QCCNMI
$QCCLR
$QCDMG - Diagnostic Mode initiation.
$QCDMR - Diagnostic Mode (Baud) Rate. at$qcdmr=? shows available baud rates, at$qcdmr? shows current baud rate
$QCDNSP
$QCDNSS
$QCTER
$QCSLOT
$QCPINSTAT
$QCPDPP - Packet Data Protocol authentication Parameters - see w w w . shapeshifter . se/2008/04/30/list-of-at-commands/
$QCPDPLT
$QCPWRDN
$QCDGEN
$BREW
$QCSYSMODE
$QCCTM
$SUSBC
$NWMDCHNG
$SHPSLEEP
Not sure what they do. All I've found so far is at$qcsysmode restarts the phone with what looks like a file list coming out on the serial port. BREW is the Qualcomm application language.
Does AT_OWANCALL exist in the ROM? That is sometimes used to set up UMTS/HSDPA connections.

SmartChinaRes MT6260 and MT6261 Language and MediaEditor

I have developed a Language and Media Editor for MT6261 and MT6260 based Smartwatches
ProgrammFetaures:
Supporting MT6260 to MT6261A Baseband
Edit Languages
Supporting Crypted Language Packs
Online Translation
Export and Import Dictionary
Create Custom Dictionary
Change Images and Sound Files
Supporting all MIF Versions and Packs
I am searching Beta Testers.
Everybody who is interested please cantact me: [email protected]
Thanks
What Links?
hey, i want to develop complete rom along with some better features let me know if your enviroment works well.
SmartChinaRes
Hi,
Yes my solution is working well. What do you want to change in Firmware.
Send me your Firmware or Link to Download
Thanks
OXA
can i test it ?
---------- Post added at 10:28 PM ---------- Previous post was at 10:27 PM ----------
oxatools said:
I have developed a Language and Media Editor for MT6261 and MT6260 based Smartwatches
ProgrammFetaures:
Supporting MT6260 to MT6261A Baseband
Edit Languages
Supporting Crypted Language Packs
Online Translation
Export and Import Dictionary
Create Custom Dictionary
Change Images and Sound Files
Supporting all MIF Versions and Packs
I am searching Beta Testers.
Everybody who is interested please cantact me: [email protected]
Thanks
Click to expand...
Click to collapse
can i test it ?
me lo mandi che ko testo
mhd 12 said:
can i test it ?
---------- Post added at 10:28 PM ---------- Previous post was at 10:27 PM ----------
can i test it ?
Click to expand...
Click to collapse
me lo mandi che ko testo
Can you give it for free
can i get download of this software for free
i wont distribute it
This is truly awesome!
Is the knowledge you earned available somewhere or just in your code? I'm excited with RE-ing MTK incl. 2502 though didn't do much myself.
Excellent! I've got Xiaomi Mi Bunny Watch Q - and struggling with it's firmware - already managed to edit MCC/MNC and activate it outside mainland China with ANY cellular operator (with 2G support)
But still have some problems - biggest is Chinese time on watch screen. Less important are Chinese voice prompts ("calling to grandmother" / "father is calling to you" / "successful internet connection")
My fullflash is attachment! If you can - please share your tool with me - would like to sniff through my firmware and try to modify it
Thank you!
FlamingPumpkin said:
Excellent! I've got Xiaomi Mi Bunny Watch Q - and struggling with it's firmware - already managed to edit MCC/MNC and activate it outside mainland China with ANY cellular operator (with 2G support)
But still have some problems - biggest is Chinese time on watch screen. Less important are Chinese voice prompts ("calling to grandmother" / "father is calling to you" / "successful internet connection")
My fullflash is attachment! If you can - please share your tool with me - would like to sniff through my firmware and try to modify it
Thank you!
Click to expand...
Click to collapse
mt6261_apn list editing
FlamingPumpkin said:
Excellent! I've got Xiaomi Mi Bunny Watch Q - and struggling with it's firmware - already managed to edit MCC/MNC and activate it outside mainland China with ANY cellular operator (with 2G support)
But still have some problems - biggest is Chinese time on watch screen. Less important are Chinese voice prompts ("calling to grandmother" / "father is calling to you" / "successful internet connection")
My fullflash is attachment! If you can - please share your tool with me - would like to sniff through my firmware and try to modify it
Thank you!
Click to expand...
Click to collapse
the time or and time_zone in watch is set in mvram_ef_chache_byte_lid
Hi i can be a beta tester of your program
My profile 4pda: http://4pda.ru/forum/index.php?showuser=2249797
No_Russian_Translate.zip - HONGYU60M_BT_11B_PCB01_GSM_MT6260_S00.MX6-60D-3029TN-YDT-DC0821-ZH-V06_637-20180728
With_Russian_Translate.zip - HONGYU60M_BT_11B_PCB01_GSM_MT6260_S00.MX7-COB-DZ09-9307BOE-QCY-DC0821-HYBR-V01_537-20180926
View attachment No_Russian_Translate.zip
View attachment With_Russian_Translate.zip
Hello,
This is a good news you implement this tool.:good:
Could I try it to do some changes on my smartwatch?
Could you send me it in MP?
Thanks a lot,
Helium45b
I hope OP is still reading this thread. In any case I will tag oxatools. I found out my DZ09 watch is SPD. I see mocor and spd6531 to be exact. How? when I plug it in turned on, there is a third option - pc connecting. The other 2 options were udisk and charging. When I click pc connecting there was a pop up that said it needs to install serial scsi drivers. And then finally I see ports in device manager. they are
SPRD SMCC AT interface1 com4
SPRD SMCC AT interface2 com7
SPRD DIAG com3
I have been using the flash tool for this smartwatch but nothing is happening. Can you tell me how to use your tool for this watch? I would like to see if it has wifi or gps and also add video capability and voice commands. Yeah sure. But you never know your tool might do all those in this $10 watch. LOL.
This is the third thread I posted this on. All I need is guidance what is the proper tool to use for this SPRD watch?
This is what I see on *#3646633#
software platform version - mocor_12c
HW version - sc6531_bar
chip type - sc6531
actually there is a lot of list option on this code. I see
IQ mode
Para set
App set
Like over 10 option list and when you click those options theres a lot of sub menus too.
asianbyuti said:
I hope OP is still reading this thread. In any case I will tag oxatools. I found out my DZ09 watch is SPD. I see mocor and spd6531 to be exact. How? when I plug it in turned on, there is a third option - pc connecting. The other 2 options were udisk and charging. When I click pc connecting there was a pop up that said it needs to install serial scsi drivers. And then finally I see ports in device manager. they are
SPRD SMCC AT interface1 com4
SPRD SMCC AT interface2 com7
SPRD DIAG com3
I have been using the flash tool for this smartwatch but nothing is happening. Can you tell me how to use your tool for this watch? I would like to see if it has wifi or gps and also add video capability and voice commands. Yeah sure. But you never know your tool might do all those in this $10 watch. LOL.
This is the third thread I posted this on. All I need is guidance what is the proper tool to use for this SPRD watch?
Click to expand...
Click to collapse
Hi,
Sorry my tool is only working with Mediatek MT6260 and MT6261 Chips not with Spreadtrum
Did you try with this flashtool versions?
https://spdflashtool.com/
OXA
oxatools said:
Hi,
Sorry my tool is only working with Mediatek MT6260 and MT6261 Chips not with Spreadtrum
Did you try with this flashtool versions?
https://spdflashtool.com/
OXA
Click to expand...
Click to collapse
Oh thanks. Ok I will look into it.
Testing
Hello! How can I participate in testing your program? I would like to fix in my device the translation of some items, creating inconvenience in the work. None of the tools found on the network work with my phone's firmware files correctly. Perhaps the program developed by You will appear in paid access?
https //yadi.sk/d/3gFYGtEXKMnFbQ
noformatc said:
Hello! How can I participate in testing your program? I would like to fix in my device the translation of some items, creating inconvenience in the work. None of the tools found on the network work with my phone's firmware files correctly. Perhaps the program developed by You will appear in paid access?
https //yadi.sk/d/3gFYGtEXKMnFbQ
Click to expand...
Click to collapse
Hi,
My Program is not for selling sorry. To much work inside.
Here comes the Resources of your firmware
Download-Link
https://we.tl/t-AHRETIoTuS
if you want to change any of them please tell me
For better working with firmware can you send me a fullflash backup
Thanks
OXA
if you want to change any of them please tell me
For better working with firmware can you send me a fullflash backup
Thanks
OXA[/QUOTE]
Hello! Thank you for responding. I replaced the main menu icons in "resources", I will be grateful if you embed them in the firmware. But it would be more interesting and useful to change the translation of some menu items, because the translated names simply do not fit on the screen and it is not clear what you do when you click. Is it possible to carry out such a thing?
https //yadi.sk/d/o_nuCxWdM0zbwg
Hi,
I'm interested in adding Hebrew fonts to Q50 (G36S) watch so that it can display messages I send in Hebrew.
Is it possible?

[Lumia 830][Custom ROM][Redstone2 feature2] Fall Creators Update 10.0.15254.158

Only for Samsung eMMC chip devices!​
It is all about laziness, get Fall Creators Update straight on Denim each time you want it. Read the WPI FAQ before it.
Variant: CV GB
System: Windows 10 Mobile Fall Creators Update
System version: 10.0.15254.158 (upgradeable)
Reduced OOBE
Included LED notification and Continuum libraries (import registry req.)
Enable SIMAddress Book And Export)
Enable Uhs and HS200
Volume limit disabled
Enable static IP
Base 02177.00000.15184.36007 ROM req (for Custom ROM only not unlocking).
Get it from Lumiafirmware as 059W5D2
or
[Lumia 830][Stock ROM][DENIM][FINAL] 02177.00000.15184.36007 CV EU
Unlock bootloader and flash it. No reset req. Enjoy
Download
Source
What happens if flashed to a non-Samsung eMMC device?
Thanks for sharing by the way...I almost want to get another 830 now.
It won't brick the Lumia, size of partition is slightly different in every eMMC from other OEMs so missing baits will stop WPI from carry on.
Thank you, with flashing EFIESP.bin i unbricked my lumia530.
I hope someone does the same for l1020
18 months ago we did it...
http://www.windowsmania.pl/romy-315/
djtonka said:
Only for Samsung eMMC chip devices!​
It is all about laziness, get Fall Creators Update straight on Denim each time you want it. Read the WPI FAQ before it.
Variant: CV GB
System: Windows 10 Mobile Fall Creators Update
System version: 10.0.15254.158 (upgradeable)
Reduced OOBE
Included LED notification and Continuum libraries (import registry req.)
Enable SIMAddress Book And Export)
Enable Uhs and HS200
Volume limit disabled
Enable static IP
Base 02177.00000.15184.36007 ROM req (for Custom ROM only not unlocking).
Get it from Lumiafirmware as 059W5D2
or
[Lumia 830][Stock ROM][DENIM][FINAL] 02177.00000.15184.36007 CV EU
Unlock bootloader and flash it. No reset req. Enjoy
Download
Source
Click to expand...
Click to collapse
I used a custom ROM
Well done working flash
After flashing the phone for about 1 hour, it remains on the Windows icon
Is everything all right?
You mean stuck?
djtonka said:
You mean stuck?
Click to expand...
Click to collapse
It stuck on the startup window
djtonka said:
You mean stuck?
Click to expand...
Click to collapse
Do you have no answer ???
Take the SD card out first
[/COLOR]
djtonka said:
You mean stuck?
Click to expand...
Click to collapse
I do not have any memory cards
I used this method. I downloaded the files and flashed with wp
My phone's product code differs from these files. Is there any problem?
entezar3323 said:
[/COLOR]
...
My phone's product code differs from these files. Is there any problem?
Click to expand...
Click to collapse
Go back to the first post and read it again!
:laugh:
entezar3323 said:
[/COLOR]
...My phone's product code differs from these files. Is there any problem?
Click to expand...
Click to collapse
Go back to first post and read it again!
Go back to the first post and read it again!
Go back to first post and read it again!
Thank you for customizing this ROM
I installed this ROM after trying hard
But it works well
thank you again
@djtonka
"Enable static IP" you have registry keys for that, Tweak with InteropTools not working.
It is already active even in OBBE
titi66200 said:
@djtonka
"Enable static IP" you have registry keys for that, Tweak with InteropTools not working.
Click to expand...
Click to collapse
There are two WiFi settings pages in Windows 10 Mobile 1703+. One is visible, the second is hidden and can be started from Interop Tools Applications menu.
The tweak 'static IP' works only with the hidden page.

Categories

Resources