yashsingh1/xdaforums huggingface dataset:
[Venue Pro General] notebookgrail:
Short Answer - the command that i found out doesn't get to what we want. No dice.

Long Answer - Dug up and decompiled a lot of DLL's used by Dell and Qisda in DVP and dug some EM commands - all are the same ones all over the EM app. There is no specific one for Registry. And Dell has done the EM app half-baked. They must have stopped development effor for the EM somewhere around Feb 2011 becos of a directive from MS to not expose the OS.

Regarding File Explorer - that's already there in the EM App. In the Sorry Page, type 983 and it will take you there. Its more or less useless (only read only). They way they implemented is so convoluted. They are basically reading the folder/files, byte by byte and putting in a String Array and spitting out. If you end up in a folder with ton of files, you will forever loop (even if you come out of EM App).
[Venue Pro General] henry084:
http://dennisdel.com/?p=840

I have found (a little bit) how the registries are worked here, this one should be newer than the findings in February. I have tried read command and it works, but I have a bit problem with write command. Not sure if the input format is wrong or anything else.

For example: I would like to add a key in HKEY_Local_Machine\ABC\DEF with value KLM, string value "test".

According to the code suggestion, my understanding is: EM:REGISTRY_SET:ABC\DEF,LKM,REG_SZ,"test"2; then press Sync button.

Or should I just type test2? though it doesn't make much sense. Or add a comma between "test" and 2?

Each time they roll out new firmware, they should have ways to flash it into your hardware. If things cannot be done through EM, are there methods to dump the ROM and cook it in kitchen?

(I personally hope Dell would release new firmware the full language pack when Mango is available through Zune, so I don't need to find ways to add registry keys for additional display languages.....)
[Venue Pro General] notebookgrail:
That link you mentioned is old stuff. He basically explains how things work. In the Old FW, we had the set option(again not implemented) that used the EM command. Since it was not implemented, they removed that option in the new FW. I even tried to modify the new EM app with that Set option being enabled and tried. No dice. Trust me, bottomline - Dell didn't implement the registry Set feature. I have went far enough to confirm from the folks that work on this stuff in Dell.

There is one way to make it work - not thru the EM stuff, but thru C programming. All devices use the coredll.dll (an MS OS file) to do the fun stuff. Dell uses OurCOM.dll->QEMDriver.dll (or) QisdaEMService.dll->Coredll.dll

So if one can find a way to disassemble the coredll.dll and find the functions in it and take it from there - it may work. Again, you will run into security,etc.
[Venue Pro General] henry084:
See, understood.

But is there anyway to extract and read the file as you have mentioned?

These are:

1. OurCOM.dll (Set 1)

2. QEMDriver.dll (Set 1)

3. QisdaEMService.dll (Set 2)

4. Coredll.dll (Set 2)

(It is OK when we are able to copy them to our device)

That guy seemed have a way to look into the device inside and locate the files out, can we also do that?

I have found so far:

1. I have no way to edit the registry so far, for any keys available.

2. The functionality of the phone is normal, not totally locked due to locked registry. (!)

I think it is important since we will change the keys when we change the settings in our phones. That means we have to edit the keys through some specified layers and let the system regard the change is a kind of setting changes. We may have to find where the "lock" registry is and alter it through that layer, then we have what we want.

But may be as you said, we need deal with those 4 files in order to understand their lock mechanisms and perform an unlock.
[Venue Pro General] notebookgrail:
Here you go with the files. You can use IDA Disassembler and/or PE Explorer to look into those files. Remember that these files were extracted from the Mar 2011 EM update/Nodo Update.

View attachment corefiles.zip
[Venue Pro General] henry084:
Mar 2011 EM update, is it under the firmware version 212?

Anyway many thanks, I will try my best to understand what is inside first. I may seek help from other members who are interested later on, as I have something to do in this two weeks.

As I am not a programmer, what I only can do is to trace the logic of those DLLs and try to do something on the GUIs available so far, e.g. EM (but unfinished), or give advices. It would be nice if someone can brew a software which can bypass EM and make registry changes with the files you have provided.

I am sorry for my lousiness, but I hope we can work something out for this.
[Venue Pro General] notebookgrail:
FW 212 didn't update the EM(unless u were on .105 or prior to .20x
[Venue Pro General] Heathcliff74:
Do you know what the privilege level of the qemdriver is?

Can you try to read this string-values (not sure it exists):

KeyName: HKLM\Drivers\BuiltIn\QEMDriver

ValueName: AccountSid

It should return something like: SID_UDEVICE_ELEVATED or something.

Please let me know.

Heathcliff74
[Venue Pro General] Ephez:
I try this settup:

Path: HKLM\Drivers\BuiltIn\QEMDriver

Key: AccountSid

Type: DWORD (choice: DWORD, SZ, MULTI_SZ, BINARY)

Data: blank

and it reports "FALSE"...

I never succeed to read one value ...
[Venue Pro General] Heathcliff74:
The value I refer to is a string. So that would mean that you should select Type "SZ". I started the path with HKLM, bacause I thought that would let it refer to "HKEY_LOCAL_MACHINE". But I just looked at the EM tool in reflector and I believe that the "registry editor" in the EM app only reads and writes to the "HKEY_CURRENT_USER", while all important stuff is in "HKEY_LOCAL_MACHINE". Is there anybody who has made a registry editor (even a very basic one), that can write to the other registry hyves? Using OurCOM.dll it shouldn't be too hard.

Ciao,

Heathcliff74
[Venue Pro General] Ephez:
You can check this but I am not able to understand all about this....

http://dennisdel.com/?p=840

This man worked on DVP but I don't know how to code C# so i can't check this.

I retry to read the value with HKEY_LOCAL_MACHINE\Drivers\BuiltIn\QEMDriver

and it returns "FALSE" (with SZ)
[Venue Pro General] Heathcliff74:
I read that. The problem is that I don't have the time to start from scratch. If this guy, or someone else start making an app the is capable of basic read/write (like in the EM app), but now also being capable of using HKLM, that would help. It really isn't that difficult if you know your way with C# and reflector. If we can check the access-level of the QEM-driver, then we know what we can do and what we can't do.

Your test returns false, because the EM app expects a path like this: Drivers\BuiltIn\QEMDriver and then it adds HKCU in from of it (hard coded). But we need it from HKLM, so that's why it fails.

Heathcliff74
[Venue Pro General] henry084:
Hello Heathcliff74,

I will roll back to NoDo first and perform your request once, to see if the same value comes out as you expected.

Will post the result a moment later.
[Venue Pro General] henry084:
I have just tried it out, and the answer is also "FALSE", not sure if this one really exists.

Not long ago I have also tried other values, e.g. in HKLM\MUI\Available, key 0809 under SZ, and turns out "MUI\Available0809: is UK English". So I think the registry R/W should also read the values in HKLM. (cannot edit values though, also not sure if there are any privilege restrictions)

After then, I have sideloaded the Register Editor 1.1 by Julien Schapman through my dev account and took a look inside. I found there are no values in HKLM\Drivers\Buildin\QEMDriver, (Stated 0 subkeys, 0 values, and the directory is not blocked)
[Venue Pro General] Heathcliff74:
Ok. I don't have a Dell. I don't have the app. I don't know how it looks like. I can only see the code. So I hope I get this right. Try this:

- Click the button with "L_M"

- In the "Path" field type this: Drivers\BuiltIn\QEMDriver

- In the "Key" field type this: AccountSid

- In the "Type" field select "REG_SZ"

- Click on button "Get"

I'm not even sure the path in the registry is correct. This is just an educated guess. Please let me know the result. If it is correct, it will return something like "SID_UDEVICE_ELEVATED" or something.

Thanks,

Heathcliff74
[Venue Pro General] Ephez:
You want this test on Mango or Nodo?

I need to reflash my phone beacause I have a bug: I can't open any applications I don't know what it is but my phone is now useless just can make phone call calendar mail...

I test all of this features:
[Venue Pro General] henry084:
May be I have typed wrong in last try, by "Builtin" instead of "BuiltIn", but this doesn't affect the searching in Registry R/W and the result is "FALSE".

However, when I took a look into the Registry Editor and I have found there is also a directory called "QEM" instead of "QEMDriver", of which includes the key "AccountSid", but the value is "SID_UDEVICE_TCB" instead of "SID_UDEVICE_ELEVATED"
[Venue Pro General] henry084:
I think you may have to reset your phone.:(

I have tried out ##782# and dialed, said "Your phone is now unlocked", but still unable to change registry.
[Venue Pro General] raiderfan247365:
If I started a fund to get you one would you be willing to devote time? You would really love the phone!
[Venue Pro General] Ephez:
I reset my phone with a nodo backup but I loose my app I bought few and I can't install it without rebuy it, any help?
[Venue Pro General] Heathcliff74:
Wow. That opens up a whole lot of possibilities. Again, I don't have a Dell, so I can't be sure. But from what I see now with your results and the code I've seen, is that there is a lot possible on the DVP. As far as I can see the limitations are not in the driver, but in the EM app itself.

I must say that Dell has a very unique way of implementing their drivers. So it will take some time to figure out how it works. And I don't know when I have time to get to that, since I want to work on other thing too and I'm also struggling with some health-issues.

Can you tell me how you navigate to this "Registry Editor" you're showing? Is it just a browser or can you also add/edit values?

Ciao,

Heathcliff74
[Venue Pro General] henry084:
Just add back your Windows Live ID, click "Buy" again and you are done.

M$ keeps all your previous orders, so they will ask you if you would like to install it again as you have already bought them, don't worry.
[Venue Pro General] Heathcliff74:
Well, I appreciate the offer. If I would get the phone I would be willing to spend time on it. BUT... the problem is that when you buy me such a phone I would feel obligated to find a solution for you. And I can't promise I can find such solutions (although I think now it is possible). Also I would feel obligated to spend time on it and although I would want to spend time on it, I can't promise that I have the time for it. And it really wouldn't feel good when you've bought the phone for me and I can't give you back anything in return for whatever reason.

So I think it is best that I will do research for Dell devices in the future, like I did for HTC and LG. And when I got something wordy, you can hit my "Donate" button. But again, I can't promise anything.

Ciao,

Heathcliff74
[Venue Pro General] henry084:
I just downloaded the "Registry Editor 1.1.0.0" from the link below:

http://forum.touchxperience.com/viewtopic.php?f=20&t=593

I think he has also shared his software here in XDA.

I can use this browser to view and edit values on HTC 7 Trophy, but just be able to view on DVP. (As in photo)

My guess is there are some functions (*#XXX#) in order to unlock the registry edit function, but just a wild guess.

BTW, I have looked into HKCU, and found there is a key called "RegPersisted", not sure if it is related to the registry edit lock.

(Health comes first, without healthy body and mind cannot work anything out.)
[Venue Pro General] Heathcliff74:
Can you tell me what exactly happens when you try to edit a value in the EM tool? Any error-messages, etc.

Make sure you have the Path: HKEY_LOCAL_MACHINE\

And: Drivers\Display\Primary

And Key: bbp

Type: DWord

Data: 32

Then "Set"

Any error messages?

If you try to read the same value afterwards with "Get", what do you get?

Ciao,

Heathcliff74
[Venue Pro General] henry084:
You cannot even set a value in this register editor in EM, as there is no "SET" button. I can only try the "GET" button then, the result is of course "FALSE" as the key doesn't exist.

I have also tried the command "EM:REGISTRY_SET: Drivers\Display\Primary,BPP,REG_DWORD,20,2;" in "EM in EM", but no success.
[Venue Pro General] Heathcliff74:
Really weird. I downloaded EM.xap from another thread (don't remember where exactly). This version has GET and SET. Is it an older version with SET button? There is no place in the code where that button is enabled or disabled.

I attached the xap.
[Venue Pro General] henry084:
I have reinstalled the xap as you have attached. Originally it got error of 0x8103010B in WDPT's deployment tools, which implied the application is unsigned and cannot be deployed. However I have tried the XAP installer by the link below:

http://xdaforums.com/showthread.php?p=11168609

This one can perform the XAP signing, and I can deploy it into the DVP. The EM has been therefore overwritten.

However, I still cannot perform "SET" command after pressing "SET" button, though no (error) messages are shown.
[Venue Pro General] Heathcliff74:
Where can I find the ROM's you use to flash?

Ciao,

Heathcliff74
[Venue Pro General] Ephez:
I used a backup with zune! you want it? (9go)
[Venue Pro General] domineus:
no rom sadly...
[Venue Pro General] Heathcliff74:
The backups are encrypted with a device-specific key. So, I'm afraid that won't help.
[Venue Pro General] notebookgrail:
DVP doesn't support SET. Its not implemented in the Driver. And since no movement happened, Dell disabled that button in the next release(The original release had SET).
[Venue Pro General] raiderfan247365:
Gosh I thought this might really have been picking up steam :(

Maybe this helps, its the Japanese doing good things.

http://www.wpcentral.com/native-development-access-developers-homebrew
[Venue Pro General] raiderfan247365:
B

u

m

p

please
[Venue Pro General] domineus:
bumping for more information

on the new f/w it appears get = set

also as soon as a string value is designated (e.g dword, string, mzstring) is added to any registry key, the value won't stick

but not adding the specified key does set entries...go fig
[Venue Pro General] raiderfan247365:
soooo are you saying theres a chance. Gosh i wish i was smart
[Venue Pro General] domineus:
shrugs =(

I'll investigate
[Venue Pro General] notebookgrail:
Are you saying that the 2.12 FW does this?
[Venue Pro General] raiderfan247365:
I think he means the new firmware being rolled out with Mango, apparently it updates the EM app. I sent an email to Dell asking for their official stance on home brew and if they would supply the community with a stock rom flash utility :) I am sure it will get no where, but cant hurt to inquire....
[Venue Pro General] domineus:
I'll check I have the morning to before pharm stuff and check on grad status

but I initially meant em 1.12
[Venue Pro General] notebookgrail:
haha...I used all my channels for that...Mum was the answer. They answer to anything but homebrew.:mad:
[Venue Pro General] domineus:
sadly no shock

I'll see if i can upload the new em

mango makes it not too easy to do and since i can't change anything in the registry I can't install more than 3 apps...which would be helpful in mining em.xap

darn interop
[Venue Pro General] raiderfan247365:
Maybe roll back to nodo and install the new EM app? If even possible...Have you guys seen this http://xdaforums.com/showthread.php?t=1271962 if, we can deploy files onto the phone there has got to be a way to run provxmls once on the phone...But then again just cause you can do that with every other manufacturer phone, why would would Dell let us do anything cool :(
[Venue Pro General] domineus:
device came native with mango no rollback dice mang
[Venue Pro General] raiderfan247365:
Well I can so if I can test anything let me know :)
[Venue Pro General] domineus:
even if I did upload it

its unlikely it wouldn't work on nodo devices

just like prior to the update 1.10 em didn't work fully with the older firmware
[Venue Pro General] raiderfan247365:
just killing my dreams :)

thank you for the efforts
[Venue Pro General] raiderfan247365:
So I got a response back from Dell when asking them for developer support, it went as follows:

"Hi,

Thank you for contacting Dell Mobility.

We appreciate your suggestion in improving our product. Have are also currently working to further enhance the Engineering Mode and make the device more useful reliable and easy to use to the end user.

We will pass on your email to the development and see what could be the possible option explored in this area.

Regards

Bijal.

Dell Mobility

Lifeline: (800)308-3355

Email: mobilitysupport@dell.com"

Now this of course is just answer to shut me up. BUT, what if DELL does realize it needs developer and homebrew support???
[Venue Pro General] dilzo:
Lool so to sum it up they said "not gonna happen"
[Venue Pro General] Big-V:
##634#

Go to MMS settings

In internet & MMS setting page -> Data settings -> APN=internet2.voicestream.com

Apply setting and grandfather plan should be running again !
[Venue Pro General] Heathcliff74:
I just had a look at the EM app in the Mango update for DVP. It looks like it has a registry-set button. Is can anybody confirm that? (I don't have a DVP, so I can't be sure. I just had a look at the update package).

Ciao,

Heathcliff74
[Venue Pro General] MJCS:
I can confirm that the button is there but it is hidden/disabled. I also seem the be the one with the most experience in this so If you want me to try and run some commands I can.
[Venue Pro General] M3r71n0:
In the \Windows there is the EM.XAP but v1.0.0.

In this EM.XAP, the file EM.dll have the SET button.

There are the different EM.XAP in the phone?
[Venue Pro General] snailium:
Just got my DVP the other day, so I'm on the same boat now.

Seems the new EM doesn't have "Set" button, or it is hidden. See pic below.

Also tried create a new key with "Get" button, got "FALSE", no key created.
[Venue Pro General] notebookgrail:
Maybe someone should post this as a sticky for new folks. The DVP EM app never implemented the Set registry functionality. Initially the button was there, but the actual code to do the magic was never implemented. Later around April, Dell stopped development for that (due to MS direction) and removed (hidden) the SET button completely.
[Venue Pro General] Heathcliff74:
Could someone please try this version of the EM app and see if it works to set a registry value?? I think you have the biggest chance of success on Mango with the post-Mango-DVP-update.

I'm not sure if it should possible to create keys too, so please first try to set a value in an existing key.

If the app somehow fails, you can uninstall this app and reinstall the original (I believe that works with ##634#, right?)

Ciao,

Heathcliff74

EDIT: M3r71n0 tested this and it is not working due to Interop Lock. Stupid me! I will try to get another angle later on...
[Venue Pro General] M3r71n0:
Ciao Heathcliff74

for install xap is necessary INTEROP-UNLOCK

M3r71n0
[Venue Pro General] Heathcliff74:
Oh crap!! I didn't think of that :( This is going to be hard. Well, I'm gonna sleep on that and see if I come up with something tomorrow.

Thanks for testing!!

Heathcliff74
[Venue Pro General] MJCS:
I still think there is a loophole in background tasks that allows for interop access. the screenshot app does this.
[Venue Pro General] M3r71n0:
And if we tried with CONNECTION SETTING

In EM.xap there is MMS SETTING

MMS SETTING is different to CONNECTION SETTING, but they do the same thing. I creed write in regedit.
[Venue Pro General] snailium:
It seems the EM in EM mode has remote agent running. can anyone confirm that?

about remote agent: http://msdn.microsoft.com/en-us/library/microsoft.smartdevice.connectivity.remoteagent(v=VS.90).aspx

If remote agent is there, probably we can use remote process to send commands.
[Venue Pro General] MJCS:
Nice find. I can connect and I can send files but the windows directory is off limits. Ill let you know if I can hack something together
[Venue Pro General] MJCS:
RemoteAgent ra = device.GetRemoteAgent(new ObjectId("910DCB1B-487B-452b-87FC-73852B5A239C"));

connects to the remote agent. After that I cant find a valid service to start or to create a packet stream to.
[Venue Pro General] snailium:
Of course it won't allow file transfer through FileDeployer. I've tried before.

I'm going to decomp the EM, and try to figure out how to use remote agent/process.
[Venue Pro General] snailium:
I just tried the OOB button, and it RESET my phone. ohhhhhhh!!!!!!

Now I have to re-install everything.

The password is "qwertyui" without quotation mark by the way.
[Venue Pro General] MJCS:
Well if you searched first you would have known I already did that...I had a backup however :)
[Venue Pro General] M3r71n0:
Hey Boys

I was three nights to study EM (that of Mitch.)

I did not understand where it blocked the SET command in EM_in_EM

But I have come to a conclusion.

I have seen how the INTEROP-UNLOCK Heathcliff and installs a folder and file in the root unlock the phone.

After some testing I think you can do:

1) format the phone (so the application EM does not appear in WP7).

2) with an application similar to Heathcliff (which does not require INTEROP) create the same folder as the EM with the modified DLL;

The path is: \Applications\Install\E42CFC4F-BF09-4A73-865D-D517F8AE6AF9\Install\

3) Start EM with ##634# in order to install (this does not overwrite existing files);

4) Edit registry with new Registry R/W mod.

The point is that I no longer unlock ChevronWP7 (after reset) for one problem.

If someone can try waiting to solve my problem with chevron

Thanks
[Venue Pro General] Heathcliff74:
1. I think you can simply uninstall EM. You shouldn't have to format your phone.

3. Why do you think it won't overwrite the file? I think it does overwrite the file. Also, if it doesn't overwrite the file, it probably won't change the TaskHost ACL for this file either. And then the app would crash because it can't acxess the dll. So I don't think it's going to work. But it's worth giving it a shot. So I will try it kater today. I will let you know the results.

Ciao,

Heathcliff74
[Venue Pro General] M3r71n0:
1) If simply unistall EM don't remove the forlder and the file in \Application\Install..........

3) I tried replacing the files in another program and not overwrite them. So I believe that will not overwrite.

Tanks for all at all.
[Venue Pro General] M3r71n0:
In the EM there are two function that write on regedit.

EM-->RD Test-->WiFi-->Set Static IP

EM-->MMS Settings

Note the particular type of command to write Static IP

this.IEmToCom.sync("EM:WIFI_IP_CMD:1," + this.textBox_Gateway.Text + "," + this.textBox_IPaddress.Text + "," + this.textBox_SubnetMask.Text + ";", 1, false)

Maybe the REGESTRY_SET command in EM_in_EM is followed by ":1"

Soon I feel

---UPDATE---

Controlled. Nothing to do
[Venue Pro General] InvisibleKnight:
Maybe doesn't matter but THIS guy already tried few methods for iterop-unlock.

I'm posting it to sum things up a bit so we don't go through old stuff.

I suggest to post there about new not-working methods so newcomers don't (because they probably won't) have to read 10 pages of thread.