CDMA TREO 800W 中文短信初步探索以及请求K版支招

KING

原帖由 surf98 于 2009-6-5 11:36 发表
SW:TREO800W-1.03-SPNT
; W" U  }; |) _8 F4 v) X3 I  Z+ VOS: Windows Mobile 6.1 Professional CEOS 5.2.19216
1 g; [) o1 i& Q, O5 eRadio:116
7 _( l8 }4 N+ j3 D9 G" ~HW: Zeppelin-A
3 e- u' W/ }' ]8 _应该是正式版吧。
我是使用从800w DUMP出的原TIL签名再覆盖进去，正常工作。K版是不是用修改了的TIL覆盖 ...

3 `: Q/ u" E- f4 a3 L/ ?. G
) `8 R1 |/ w! B; A9 R开始就是用没有修改过的TIL试的，就是不能用，别说修改过的了。

2 Q) o& z2 m7 Q- T& t5 ?

原帖由 surf98 于 2009-6-5 11:40 发表
另外，我FAKE了TIL，将API调用记录入日志。发现一个奇怪的问题，使用原系统的文件，IOCTL_READMSG 和 IOCTL_SENDMSG并不走TIL，难道800W的短信没有经过TIL？
3 K9 P$ Z+ K. a2 S9 K0 ~我使用了其他机型的messaging.exe替换掉了800W默认的，发 ...

# d& y4 d  Y' m
! N0 o& l* A7 d4 G6 S这个我测试过，恢复了WM6.1系统自带的短信程序，打开了UNICODE开关，收发短信还是一样的情况。
- {5 ^# ]% y1 j6 ^
% @7 j$ A7 Z* n' q0 \另外，短信是TIL处理的，这点可以百分百肯定。说说你是如何测试的？可能你的方法不合理或者，没有找到关键的地方。

jacky0123

技术贴很好很强大~帮顶了~

kkggkk

原帖由 lfc0859 于 2009-6-1 18:53 发表
# a$ g' u4 X. ?3 h0 J  V# l照着搜索到的方法，不只我不能上网，还有N多TERO友也上不了网哟

是啊，这个问题比短信更重要更紧迫啊。

surf98

我写了一个假的TIL，去调用真实的TIL，当调用TIL的API时，写入日志。K版可以参考附件。（特别注意：：此包目前跟中文短信没有任何关系，请新手不要盲目尝试。）

% ~# O! m/ W  ]$ f3 }需先安装certs.cab（因为我是用SDK的开发特权签名签的），再安装那个TIL800W，安装完成后，自动重启。日志记入设备根目录下TelephonyLogs.txt。经过监视，发现只有RIL_IOControl函数被调用，所以现在日志里只详细记录了这个函数的调用情况。其中，dwCode参数是标志IOCTL函数的，以下是简要列表：（我自始至终没有跟踪到 dwCode 0x3000110也就是 RIL_Readmsg的调用）

- W  I4 ]' U, Q' D5 B# a6 k
/ ?( m8 S$ l( n8 V% ] IOCTL_RIL_REGISTERWITHCPM 0x03000004  ; -
IOCTL_RIL_EMERGENCYSTATUS 0x03000008  ; -
IOCTL_RIL_INITNOTIFICATIONS 0x03000010  ; "%s%x"
1 ^1 i" x9 s9 D/ ^" R) N7 C IOCTL_RIL_GETNEXTNOTIFICATION 0x03000014  ; -
RIL_GetSerialPortStatistics  IOCTL_RIL_GETSERIALPORTSTATISTICS 0x03000018 0x0010 ; -
RIL_GetSubscriberNumbers  IOCTL_RIL_GETSUBSCRIBERNUMBERS 0x0300001c  ; "AT+CNUM\r"
# R9 B- I4 W+ N+ [RIL_GetOperatorList  IOCTL_RIL_GETOPERATORLIST 0x03000020  ; "AT+COPS=?\r"
; {8 O3 J/ |% j8 HRIL_GetPreferredOperatorList  IOCTL_RIL_GETPREFERREDOPERATORLIST 0x03000024  ; "AT+CPOL=,%u;+CPOL?\r"
RIL_AddPreferredOperator  IOCTL_RIL_ADDPREFERREDOPERATOR 0x03000028 0x004c ; "AT+CPOL=," ; "AT+CPOL=%u,"
RIL_RemovePreferredOperator  IOCTL_RIL_REMOVEPREFERREDOPERATOR 0x0300002c 0x0004 ; "AT+CPOL=%u\r"
5 {8 x: Y: P, ARIL_GetCurrentOperator  IOCTL_RIL_GETCURRENTOPERATOR 0x03000030  ; "AT+COPS=3,%u;+COPS?\r"
RIL_RegisterOnNetwork  IOCTL_RIL_REGISTERONNETWORK 0x03000034 0x004c ; "AT+COPS=%u"
RIL_UnregisterFromNetwork  IOCTL_RIL_UNREGISTERFROMNETWORK 0x03000038  ; "AT+COPS=2\r"
RIL_GetRegistrationStatus  IOCTL_RIL_GETREGISTRATIONSTATUS 0x0300003c  ; "AT+CREG?\r"
& S, `6 v  F+ q  0x03000040  ?  
RIL_GetCallerIdSettings  IOCTL_RIL_GETCALLERIDSETTINGS 0x03000044  ; "AT+CLIP?\r"
RIL_SetCallerIdStatus  IOCTL_RIL_SETCALLERIDSTATUS 0x03000048 0x0004 ; "AT+CLIP=%d\r"
RIL_GetHideIdSettings  IOCTL_RIL_GETHIDEIDSETTINGS 0x0300004c  ; "AT+CLIR?\r"
, [% `# c( L" P1 Q" H( S# N: H) w- WRIL_SetHideIdStatus  IOCTL_RIL_SETHIDEIDSTATUS 0x03000050  ; "AT+CLIR=%u\r"
RIL_GetDialedIdSettings  IOCTL_RIL_GETDIALEDIDSETTINGS 0x03000054  ; "AT+COLP?\r"
" b( @, [; D' F' I. BRIL_SetDialedIdStatus  IOCTL_RIL_SETDIALEDIDSTATUS 0x03000058 0x0004 ; "AT+COLP=%d\r"
+ l, T7 g* K9 m; Z$ GRIL_GetClosedGroupSettings  IOCTL_RIL_GETCLOSEDGROUPSETTINGS 0x0300005c  ; "AT+CCUG?\r"
6 h+ {- J/ P, b' I3 ZRIL_SetClosedGroupSettings  IOCTL_RIL_SETCLOSEDGROUPSETTINGS 0x03000060 0x0014 ; "AT+CCUG=%u"
2 G* ^9 B# ^& \. {( X% |1 ?RIL_GetCallForwardingSettings  IOCTL_RIL_GETCALLFORWARDINGSETTINGS 0x03000064 0x0008 ; "AT" ; "D##%s" ; "D*#%s" ; "D*%s" ; "%s**%u#" ; "D#%s" ; "%s#"
RIL_AddCallForwarding  IOCTL_RIL_ADDCALLFORWARDING 0x03000068 0x0434 ; "AT" "AT" ; "+CCFC=%u,3,\"%s\",%u,%u"
9 K+ w" H! {* L) C* u: J) t" [RIL_RemoveCallForwarding  IOCTL_RIL_REMOVECALLFORWARDING 0x0300006c 0x0008 ; "AT" ; "D##%s" ; "D*#%s" ; "D*%s" ; "%s**%u#" ; "D#%s" ; "%s#"
: i7 N9 w4 h$ S3 e, v: XRIL_SetCallForwardingStatus  IOCTL_RIL_SETCALLFORWARDINGSTATUS 0x03000070 0x000c ; "AT" "AT" ; "+CCFC=%u,%u,,,%u"
RIL_GetCallWaitingSettings  IOCTL_RIL_GETCALLWAITINGSETTINGS 0x03000074 0x0004 ; "AT+CCWA=1,2\r" ; "AT+CCWA=1,2,%u\r"
- B# q" o# m! ^( b3 f7 QRIL_SetCallWaitingStatus  IOCTL_RIL_SETCALLWAITINGSTATUS 0x03000078 0x0008 ; "ATD%c43#" ; "ATD%c43*%u#"
5 R7 {, l, |2 H) wRIL_SendSupServiceData  IOCTL_RIL_SENDSUPSERVICEDATA 0x0300007c ?  ; "ATD%s\r"
9 J6 |, C# Y" x" Z# Q3 BRIL_CancelSupServiceDataSession  IOCTL_RIL_CANCELSUPSERVICEDATASESSION 0x03000080  ; "AT+CUSD=2\r"
RIL_Dial  IOCTL_RIL_DIAL 0x03000084 0x0108 ; "AT+CBST=%u,%u,%u\r" ; "AT+CBST=71,0,1\r" ; "ATA\r" ; "AT+CBST=7,0,1\r"  
RIL_Answer  IOCTL_RIL_ANSWER 0x03000088  ; "ATA\r"
9 M0 m4 ^& y+ XRIL_Hangup  IOCTL_RIL_HANGUP 0x0300008c  ; "at%%talk=%d,%x\r" ; "ATH\r"
RIL_SendDTMF  IOCTL_RIL_SENDDTMF 0x03000090 0x0104 ; "AT" ; "\r" ; "+VTS=%c;"
RIL_SetDTMFMonitoring  IOCTL_RIL_SETDTMFMONITORING 0x03000094 0x0004 ; -
) b( J  N. z1 O& f  0x03000098  ?  
7 T3 u5 H8 H( ]6 K# Z* y  0x0300009c  ?  
RIL_GetCallList  IOCTL_RIL_GETCALLLIST 0x030000a0  ; "AT+CLCC\r"
2 s5 _- v" o. `5 Y! ERIL_ManageCalls  IOCTL_RIL_MANAGECALLS 0x030000a4 0x0008 ; "AT+CHLD=0\r" ; "AT+CHLD=1\r" ; "AT\r" ; "AT+CHLD=1%u\r" ; "AT+CHLD=2\r" ; "AT+CHLD=2%u\r" ; "AT+CHLD=3\r" ; "AT+CHLD=4\r" ; "AT+CHLD=5\r"
, U  k# B5 H' `4 ORIL_TransferCall  IOCTL_RIL_TRANSFERCALL 0x030000a8 0x0420 ; "AT+CTFR=\"%s\",%u"
RIL_GetLineStatus  IOCTL_RIL_GETLINESTATUS 0x030000ac  ; "AT+CPAS\r"
RIL_GetAudioGain  IOCTL_RIL_GETAUDIOGAIN 0x030000b0  ; "AT\r"
RIL_SetAudioGain  IOCTL_RIL_SETAUDIOGAIN 0x030000b4  ; "$AU=%u" ; "$AD=%u" ; "AT"
* Y! C5 B/ y( F. wRIL_GetAudioDevices  IOCTL_RIL_GETAUDIODEVICES 0x030000b8  ; -
' K/ B' v( d+ j4 |1 @6 ^RIL_SetAudioDevices  IOCTL_RIL_SETAUDIODEVICES 0x030000bc 0x0010 ; DeviceIoControl("WAV1:", 0x001d000c, {0, 0x65, 0, ?1, 0}, 0x14}, 0x14, sp+0x18, 0x14, sp+0x10, 0)
1 s; r) d/ m0 @8 lRIL_GetAudioMuting  IOCTL_RIL_GETAUDIOMUTING 0x030000c0  ; "AT+CMUT?\r"
RIL_SetAudioMuting  IOCTL_RIL_SETAUDIOMUTING 0x030000c4 0x0004 ; "AT+CMUT=%u\r"
RIL_GetHSCSDOptions  IOCTL_RIL_GETHSCSDOPTIONS 0x030000c8  ; "AT+CHST?;+CHSN?;+CHSU?\r"
RIL_SetHSCSDOptions  IOCTL_RIL_SETHSCSDOPTIONS 0x030000cc 0x0024 ; "AT+CHST=" ; ";+CHSU=%u" ; ";+CHSN="
- Q( N  V6 H4 c  HRIL_GetHSCSDCallSettings  IOCTL_RIL_GETHSCSDCALLSETTINGS 0x030000d0  ; "AT+CHSC\r"
( H1 @$ e3 W* q, e$ hRIL_GetDataCompression  IOCTL_RIL_GETDATACOMPRESSION 0x030000d4  ; "AT+DS?\r"
+ {9 t/ ^4 W& ]2 G: J% V. uRIL_SetDataCompression  IOCTL_RIL_SETDATACOMPRESSION 0x030000d8 0x0000 ; "AT+DS="
; C# u7 a- K" r- Q& }$ l! T7 TRIL_GetErrorCorrection  IOCTL_RIL_GETERRORCORRECTION 0x030000dc  ; "AT+ES?\r"
' T( H+ @9 K& p, F+ aRIL_SetErrorCorrection  IOCTL_RIL_SETERRORCORRECTION 0x030000e0 0x0014 ; "AT+ES="
5 s0 W! [4 u; BRIL_GetBearerServiceOptions  IOCTL_RIL_GETBEARERSERVICEOPTIONS 0x030000e4  ; "AT+CBST?\r"
3 u2 J2 J- R% ^) E/ O& PRIL_SetBearerServiceOptions  IOCTL_RIL_SETBEARERSERVICEOPTIONS 0x030000e8 0x0014 ; "AT+CBST="
RIL_GetRLPOptions  IOCTL_RIL_GETRLPOPTIONS 0x030000ec  ; "AT+CRLP?\r"
RIL_SetRLPOptions  IOCTL_RIL_SETRLPOPTIONS 0x030000f0  ; "AT+CRLP="
RIL_GetMsgServiceOptions  IOCTL_RIL_GETMSGSERVICEOPTIONS 0x030000f4  ; "AT+CSMS?;+CPMS?\r"
" F  @$ X1 j$ d. C+ gRIL_SetMsgServiceOptions  IOCTL_RIL_SETMSGSERVICEOPTIONS 0x030000f8 0x0034 ; "+CPMS=" ; "+CSMS=%u" ; "AT"
RIL_GetMsgConfig  IOCTL_RIL_GETMSGCONFIG 0x030000fc  ; "AT+CSCA?\r"
RIL_SetMsgConfig  IOCTL_RIL_SETMSGCONFIG 0x03000100 0x0218 ; ";+CSAS\r" ; "+CSCA=\"%s\",%u" ; "AT"
" G& g( d6 D2 D" h/ r, K  0x03000104  ?  
( g6 S9 A0 B2 l  0x03000108  ?  
5 O/ Q/ u- C6 B& M  0x0300010c  ?  
3 x# _) _/ W, x. _7 N+ IRIL_ReadMsg  IOCTL_RIL_READMSG 0x03000110 0x0004 ; "AT+CMGR=%u\r"
RIL_DeleteMsg  IOCTL_RIL_DELETEMSG 0x03000114 0x0004 ; "AT+CMGD=%u\r"
RIL_WriteMsg  IOCTL_RIL_WRITEMSG 0x03000118 0x0688 ; "AT+CMGW=%u,%u\r%s"
RIL_SendMsg  IOCTL_RIL_SENDMSG 0x0300011c 0x0688 ; "CMGC" ; "AT+CMMS=1;+%s=%u\r%s" ; "CMGS" ; "AT+%s=%u\r%s"
" v, b+ |8 [3 c! t/ @* J! bRIL_SendStoredMsg  IOCTL_RIL_SENDSTOREDMSG 0x03000120 0x0008 ; "AT+CMSS=%u\r" ; "AT+CMMS=1;+CMSS=%u\r"
RIL_SendMsgAcknowledgement  IOCTL_RIL_SENDMSGACKNOWLEDGEMENT 0x03000124 0x0004 ; "AT+CNMA=%u\r"
RIL_GetUserIdentity  IOCTL_RIL_GETUSERIDENTITY 0x03000128  ; "AT+CIMI\r"
* R' ~# h1 \! _# N6 M+ v0 A. CRIL_GetPhoneLockedState  IOCTL_RIL_GETPHONELOCKEDSTATE 0x0300012c  ; "AT+CPIN?\r"
: K" A9 \+ N0 X* a! l/ j. r; z8 ^, WRIL_UnlockPhone  IOCTL_RIL_UNLOCKPHONE 0x03000130 0x0204 ; "AT+CPIN=\"%s\""
' O& v; z( R" d6 sRIL_GetLockingStatus  IOCTL_RIL_GETLOCKINGSTATUS 0x03000134 0x0108 ; "AT+CLCK=\"%s\",2,\"%s\"\r" ; "AT+CLCK=\"%s\",2\r"
RIL_SetLockingStatus  IOCTL_RIL_SETLOCKINGSTATUS 0x03000138 0x010c ; "AT+CLCK=\"%s\",%u,\"%s\"\r" ; "AT+CLCK=\"%s\",%u\r"
0 [0 ~: J' J2 P! t" {( b6 URIL_ChangeLockingPassword  IOCTL_RIL_CHANGELOCKINGPASSWORD 0x0300013c 0x0208 ; "AT+CPWD=\"%s\",\"%s\",\"%s\"\r" ; "ATD**05%s*%s*%s*%s#\r"
RIL_GetCallBarringStatus  IOCTL_RIL_GETCALLBARRINGSTATUS 0x03000140 0x010c ; "ATD*#%u" ; "ATD*%u" ; "%s*%u#" ; "%s*%s" ; "ATD#%u" ; "%s#" ; "AT+CLCK=\"%s\",2"
' w" P/ q! s% a7 k& kRIL_SetCallBarringStatus  IOCTL_RIL_SETCALLBARRINGSTATUS 0x03000144 0x0110 ; "ATD*#%u" ; "ATD*%u" ; "%s*%u#" ; "%s*%s" ; "ATD#%u" ; "%s#" ; "AT+CLCK=\"%s\",%u"
0 X/ V( ~9 J) `. e- S& m- r+ Q* @% ~RIL_ChangeCallBarringPassword  IOCTL_RIL_CHANGECALLBARRINGPASSWORD 0x03000148 0x0204 ; "ATD*03*330*%s*%s*%s#\r" ; "AT+CPWD=\"%s\",\"%s\",\"%s\"\r"
  a1 t- y& h3 G' v7 Q% v; GRIL_GetEquipmentInfo  IOCTL_RIL_GETEQUIPMENTINFO 0x0300014c  ; "AT%CGMI;%CGMN;%CGMR;%CGSN\r"
- I0 m1 {, U) x0 Q' e5 LRIL_GetEquipmentState  IOCTL_RIL_GETEQUIPMENTSTATE 0x03000150  ; "AT+CFUN?\r"
) [, k, Z  Q3 d' @: g* o: mRIL_SetEquipmentState  IOCTL_RIL_SETEQUIPMENTSTATE 0x03000154  ; "AT%%SATC=1,FFFFFF7F00000010;+CFUN=%u\r" ; "AT+CFUN=%u\r"
% ]. s( P, W5 O' bRIL_GetPhonebookOptions  IOCTL_RIL_GETPHONEBOOKOPTIONS 0x03000158  ; "AT+CPBS?\r"
RIL_SetPhonebookOptions  IOCTL_RIL_SETPHONEBOOKOPTIONS 0x0300015c 0x0014 ; "AT+CPBS=\"%s\"\r"
RIL_ReadPhonebookEntries  IOCTL_RIL_READPHONEBOOKENTRIES 0x03000160 0x0008 ; "AT+CPBR=%u,%u\r"
8 y3 e0 \0 u( z" GRIL_WritePhonebookEntry  IOCTL_RIL_WRITEPHONEBOOKENTRY 0x03000164 0x041c ; "AT+CPBW=,\"%s\",%u" ; "AT+CPBW=%u,\"%s\",%u"
RIL_DeletePhonebookEntry  IOCTL_RIL_DELETEPHONEBOOKENTRY 0x03000168 0x0004 ; "AT+CPBW=%u\r"
  0x0300016c  ?  
RIL_SendSimCmd  IOCTL_RIL_SENDSIMCMD 0x03000170 ?  ; -
$ O% X/ A8 s7 c% w3 P" l: K& CRIL_SendRestrictedSimCmd  IOCTL_RIL_SENDRESTRICTEDSIMCMD 0x03000174 ?  ; "AT+CRSM=%u"
RIL_GetSimRecordStatus  IOCTL_RIL_GETSIMRECORDSTATUS 0x03000178 0x0004 ; "AT+CRSM=%u"
' I+ o4 Z# n+ B; C7 K* [RIL_GetSimToolkitProfile  IOCTL_RIL_GETSIMTOOLKITPROFILE 0x0300017c  ; "AT%SATC?\r"
  @$ t' i6 }# l$ D0 Z( vRIL_SetSimToolkitProfile  IOCTL_RIL_SETSIMTOOLKITPROFILE 0x03000180 ?  ; ";+CFUN=1\r" ; "AT%SATC=1,"
RIL_SendSimToolkitEnvelopeCmd  IOCTL_RIL_SENDSIMTOOLKITENVELOPECMD 0x03000184 ?  ; "AT%SATE="
2 e8 Q! ]: _/ e4 F5 K, H* o% s' [- LRIL_FetchSimToolkitCmd  IOCTL_RIL_FETCHSIMTOOLKITCMD 0x03000188  ; -
1 B2 J- p( a8 k7 J; `% }6 L# K& nRIL_SendSimToolkitCmdResponse  IOCTL_RIL_SENDSIMTOOLKITCMDRESPONSE 0x0300018c ?  ; "AT%SATR="
RIL_TerminateSimToolkitSession  IOCTL_RIL_TERMINATESIMTOOLKITSESSION 0x03000190 0x0004 ; "AT%%SATT=%u\r"
# `2 A& i+ C! u4 L! QRIL_GetCostInfo  IOCTL_RIL_GETCOSTINFO 0x03000194  ; "AT+CAOC=0;+CACM?;+CAMM?;+CPUC?\r"
RIL_SetCostInfo  IOCTL_RIL_SETCOSTINFO 0x03000198 0x031c ; "+CPUC=\"%s\",\"%u.%.4u\"" ; "+CAMM=%u" ; "+CACM=" ; "AT"
4 ^1 o6 s/ D. `1 T" F% K: b% ERIL_GetSignalQuality  IOCTL_RIL_GETSIGNALQUALITY 0x0300019c  ; "AT\r" ; "AT+CSQ\r"
! q7 S" C: a! r5 y. b: QRIL_GetCellTowerInfo  IOCTL_RIL_GETCELLTOWERINFO 0x030001a0  ; -
RIL_DevSpecific  IOCTL_RIL_DEVSPECIFIC 0x030001a4  ; "AT$V0\r" ; "AT%SIDCNT\r" ; "AT%SIDCLN\r" ; "AT%%SID=%u\r" ; "AT%SIDCHK\r" ; "AT%%SID?%u\r" ; "AT%SIDLCK?\r" ; "AT%%SIDLCK=0,%s\r" ; "AT%%SIDLCK=1,%s\r" ; "AT%%talk?%u\r" ; "AT%%CHGDUAL\r" ; "AT%%CHG1900\r" ; "AT%%CHG900\r" ; "AT%BAND\r" ; "AT%EMINIT\r" ; "AT%EMEXIT\r" ; "AT%EMREAD\r" ; "AT%%CPRIM=\"CST\",\"CONFIG L1_PARAMS=<0,%X"... ; "AT%%L1T=1\r" ; "CellBroadCastMessageRoute" ; "AT%%CGPPP=%u\r" ; "AT%CNTGID\r" ; "AT%CLNGID\r" ; "AT%%GID=%s\r" ; "AT%%CHKGID?%s\r" ; "AT%%GID?%u\r" ; "AT%LCKGID?\r" ; "AT%%LCKGID=0,%s\r" ; "AT%%LCKGID=1,%s\r" ; "AT%LCKGID=?\r"
RIL_GetDevCaps  IOCTL_RIL_GETDEVCAPS 0x030001a8 0x0004 ; "AT+VTD=?\r" ; "AT+CHLD=?\r" ; "AT+CBST=?\r" ; "AT+CRLP=?\r" ; "AT+CFUN=?\r" ; "AT+CPBS=?\r" ; "AT+CPBR=?\r" ; "AT+CPBF=?\r" ; "AT+CSMS=?\r" ; "AT+CPMS=?\r" ; "AT+CMGL=?\r" ; "AT+CPOL=?\r" ; "AT+CLCK=?\r" ; "AT+CPWD=?\r" ; "AT+CCFC=?\r" ; "AT+CHSD;+CHSN=?\r" ; "AT+CGCLASS=?\r" ; "AT+CGDCONT=?\r" ; "AT+CGQREQ=?\r" ; "AT+CGQMIN=?\r" ; "AT+CGSMS=?\r" ; "AT+DS=?\r" ; "AT+ES=?\r"
RIL_GetHideConnectedIdSettings  IOCTL_RIL_GETHIDECONNECTEDIDSETTINGS 0x030001ac  ; -
$ L. b2 f$ p# M$ x+ IRIL_SetHideConnectedIdStatus  IOCTL_RIL_SETHIDECONNECTEDIDSTATUS 0x030001b0  ; -
  0x030001b4  ?  
  0x030001b8  ?  
  0x030001bc  ?  
! b$ E  [. r$ X4 ^) p  0x030001c0  ?  
0 u& }0 P$ B" V8 |RIL_GetCCBSStatus  IOCTL_RIL_GETCCBSSTATUS 0x030001c4 0x0004 ; -
: n+ k& h2 m! }  L% a) e- D  bRIL_ClearCCBSRegistration  IOCTL_RIL_CLEARCCBSREGISTRATION 0x030001c8 0x0004 ; -
/ d7 G1 n! O! u" y; }2 IRIL_GetSystemTime  IOCTL_RIL_GETSYSTEMTIME 0x030001cc  ; -
RIL_GetGPRSContextList  IOCTL_RIL_GETGPRSCONTEXTLIST 0x030001d0  ; "AT+CGDCONT?\r"
RIL_SetGPRSContext  IOCTL_RIL_SETGPRSCONTEXT 0x030001d4 ?  ; "AT+CGDCONT=%u,"
( `  D5 q& r5 i' a3 {! P: s  ^RIL_DeleteGPRSContext  IOCTL_RIL_DELETEGPRSCONTEXT 0x030001d8 0x0004 ; "AT+CGDCONT=%u\r"
5 g1 r1 s* o) V6 i; [# YRIL_GetRequestedQualityOfServiceList  IOCTL_RIL_GETREQUESTEDQUALITYOFSERVICELIST 0x030001dc  ; "AT+CGQREQ?\r"
9 j! I2 {( q# b; ~- [RIL_SetRequestedQualityOfService  IOCTL_RIL_SETREQUESTEDQUALITYOFSERVICE 0x030001e0 0x0020 ; "AT%s=%u," ; "+CGQREQ"
7 s! b$ \8 F0 I5 CRIL_DeleteRequestedQualityOfService  IOCTL_RIL_DELETEREQUESTEDQUALITYOFSERVICE 0x030001e4 0x0004 ; "AT%s=%u\r" ; "+CGQREQ"
3 ?9 A$ K  H5 n! O3 ]) iRIL_GetMinimumQualityOfServiceList  IOCTL_RIL_GETMINIMUMQUALITYOFSERVICELIST 0x030001e8  ; "AT+CGQMIN?\r"
/ F9 U/ }4 v" E& e: A3 L5 Q" tRIL_SetMinimumQualityOfService  IOCTL_RIL_SETMINIMUMQUALITYOFSERVICE 0x030001ec 0x0020 ; "AT%s=%u," ; "+CGQMIN"
RIL_DeleteMinimumQualityOfService  IOCTL_RIL_DELETEMINIMUMQUALITYOFSERVICE 0x030001f0 0x0004 ; "AT%s=%u\r" ; "+CGQMIN"
' `6 b% R* ^  M$ iRIL_SetGPRSAttached  IOCTL_RIL_SETGPRSATTACHED 0x030001f4 0x0004 ; "AT+CGATT=%u\r"
RIL_GetGPRSAttached  IOCTL_RIL_GETGPRSATTACHED 0x030001f8  ; "AT+CGATT?\r"
RIL_SetGPRSContextActivated  IOCTL_RIL_SETGPRSCONTEXTACTIVATED 0x030001fc 0x0008 ; "AT+CGACT=%u,%u\r"
RIL_GetGPRSContextActivatedList  IOCTL_RIL_GETGPRSCONTEXTACTIVATEDLIST 0x03000200  ; "AT+CGACT?\r"
RIL_EnterGPRSDataMode  IOCTL_RIL_ENTERGPRSDATAMODE 0x03000204 ?  ; "ATD*99#\r"
RIL_GetGPRSAddress  IOCTL_RIL_GETGPRSADDRESS 0x03000208 0x0004 ; "AT+CGPADDR=%u\r"
RIL_GPRSAnswer  IOCTL_RIL_GPRSANSWER 0x0300020c ?  ; "AT+CGANS=%u,"
RIL_GetGPRSRegistrationStatus  IOCTL_RIL_GETGPRSREGISTRATIONSTATUS 0x03000210  ; "AT+CGREG?\r"
7 B) {3 Y4 l4 l  nRIL_GetGPRSClass  IOCTL_RIL_GETGPRSCLASS 0x03000214  ; "AT+CGCLASS?\r"
8 A# l$ i' _, I" eRIL_SetGPRSClass  IOCTL_RIL_SETGPRSCLASS 0x03000218 0x0004 ; "AT+CGCLASS=\"%s\"\r"
RIL_GetMOSMSService  IOCTL_RIL_GETMOSMSSERVICE 0x0300021c  ; "AT+CGSMS?\r"
- g1 @% _- ?% Z4 DRIL_SetMOSMSService  IOCTL_RIL_SETMOSMSSERVICE 0x03000220  ; "AT+CGSMS=%u\r"
RIL_GetDriverVersion  IOCTL_RIL_GETDRIVERVERSION 0x03000224 0x0004 ; -
$ r5 q0 w- }2 A4 R! w; c0 M1 d3 [1 cRIL_GetCellBroadcastMsgConfig  IOCTL_RIL_GETCBMSGCONFIG 0x03000228  ; "AT+CSCB?\r"
  i. ^7 i1 Q* p- e6 C* lRIL_SetCellBroadcastMsgConfig  IOCTL_RIL_SETCBMSGCONFIG 0x0300022c ?  ; "AT+CNMI=2,2,2,1,0\r" ; ";+CSAS\r" ; "AT+CSCB=%d"
9 p1 |6 q5 {0 }: f& h4 ERIL_GetCurrentAddressId  IOCTL_RIL_GETCURRENTADDRESSID 0x03000230  ; "AT%ALS?\r"
RIL_SetCurrentAddressId  IOCTL_RIL_SETCURRENTADDRESSID 0x03000234 0x0004 ; "AT%%ALS=%u\r"
7 Z* x4 ~1 O+ e1 S4 Z  F IOCTL_RIL_GETLASTERROR 0x03000238
3 h' c7 o6 G5 a; W0 G/ _' M, [ IOCTL_RIL_GETPACKETBYTECOUNT 0x0300023c
IOCTL_RIL_RESETPACKETBYTECOUNT 0x03000240
IOCTL_RIL_GETCURRENTSYSTEMTYPE 0x03000248
$ p0 f$ V" }' _0 g1 t3 a IOCTL_RIL_SENDFLASH 0x0300024c
' P/ m0 k$ a4 v* G  m( [& U) ]  z IOCTL_RIL_GETROAMINGMODE 0x03000250
) b+ l2 I" ]1 p) ^ IOCTL_RIL_SETROAMINGMODE 0x03000254
( {6 h' k, S5 A% k IOCTL_RIL_GETPREFERREDPRIVACYMODE 0x03000258
IOCTL_RIL_SETPREFERREDPRIVACYMODE 0x0300025c
$ p% y3 @( E9 G* k IOCTL_RIL_GETCURRENTPRIVACYSTATUS 0x03000260
5 X3 I( ]) m7 l IOCTL_RIL_SENDAKEY 0x03000264
& ]  Q  z7 {& ?# @/ S IOCTL_RIL_GETALLOPERATORSLIST 0x03000268
IOCTL_RIL_REGISTER_AT_LOGGING 0x0300026c
6 q, r  u/ W( F" P IOCTL_RIL_ATCOMMAND_LOGFILE 0x03000270
+ X$ I" \' U7 [7 w' ^) |: _ IOCTL_RIL_NDIS_RECEIVEPACKETDONE 0x03000274
7 s/ c) P+ P+ i/ \. z3 p& n IOCTL_RIL_NDIS_SENDPACKET 0x03000278
IOCTL_RIL_NDIS_SETGPRSCONTEXTACTIVATED 0x0300027c
IOCTL_RIL_GETCURRENTLOCATIONSTATUS 0x03000280
+ M7 |% [4 `: \; j, ^4 D: n0 }! L2 r IOCTL_RIL_GETCURRENTROAMINGSTATUS 0x03000284
/ `. z! h) j# |$ Y) v! j# W IOCTL_RIL_GETATR 0x03000288
9 B* B' b: i( i+ ^  x IOCTL_RIL_SENDSIMTOOLKITEVENTDOWNLOAD 0x0300028c
IOCTL_RIL_GETSERIALPORTHANDLEFROMCONTEXTID 0x03000290
  0x03000900  ; "AT#%02X%s%02X\r" ; "%s%02X"
" P  H, f8 r; A2 @' S3 l
! `# ~6 }! ~4 W% L! h
8 X9 K* W( ]: b
9 X4 x0 ]) {2 F0 ^

原帖由 KING 于 2009-6-5 12:26 发表


2 w, [' |7 m9 K# n2 b9 q* S开始就是用没有修改过的TIL试的，就是不能用，别说修改过的了。
% s- c" l8 ~( U3 t
! @! f. g. c& h8 V. j5 z. `. |

这个我测试过，恢复了WM6.1系统自带的短信程序，打开了UNICODE开关，收发短信还是一样的情况。
# b3 G* f3 G3 A' R6 N
另外，短信是TIL处理的，这点可以百分百 ...

[ 本帖最后由 surf98 于 2009-6-29 13:57 编辑 ]

KING

这个方法很好，以前也有过这样的想法，曾经和snow探讨过。对了你这个Til可以正常工作吗？
) K  j# t1 @8 s

RIL_ReadMsg  IOCTL_RIL_READMSG 0x03000110 0x0004 ; "AT+CMGR=%u\r"
2 j2 n) b9 ?; K: @RIL_DeleteMsg  IOCTL_RIL_DELETEMSG 0x03000114 0x0004 ; "AT+CMGD=%u\r"
- h; E. i/ ?( m$ H+ S( ~& w% I: FRIL_WriteMsg  IOCTL_RIL_WRITEMSG 0x03000118 0x0688 ; "AT+CMGW=%u,%u\r%s"
1 L4 @8 x8 S6 D! dRIL_SendMsg  IOCTL_RIL_SENDMSG 0x0300011c 0x0688 ; "CMGC" ; "AT+CMMS=1;+%s=%u\r%s" ; "CMGS" ; "AT+%s=%u\r%s"
RIL_SendStoredMsg  IOCTL_RIL_SENDSTOREDMSG 0x03000120 0x0008 ; "AT+CMSS=%u\r" ; "AT+CMMS=1;+CMSS=%u\r"

: w  e% o; x$ f- ?1 s7 M
你注意看这里，这几个都是GSM机型的标准AT指令，CDMA机器好像不支持的。这里跟踪不到，也很正常。

surf98

RIL_Readmsg 这个应该是通用的。多数IOCTL message都是通用的，只是有的在CDMA里没有实现，有的在GSM里面没有实现。
比如，下面这些是GSM的RIL驱动没有实现的，像SENDAKEY这种典型的CDMA特性。
$ ?9 l* c! ~$ rUNSUPPORTED(RILDrv_SetDTMFMonitoring, (DWORD, BOOL));
. q- e4 N, k+ Z+ P8 C, X2 t3 MUNSUPPORTED(RILDrv_GetAudioDevices, (DWORD));
UNSUPPORTED(RILDrv_FetchSimToolkitCmd, (DWORD));
UNSUPPORTED(RILDrv_GetCCBSStatus, (DWORD, DWORD));
UNSUPPORTED(RILDrv_ClearCCBSRegistration, (DWORD, DWORD));
UNSUPPORTED(RILDrv_GetSystemTime, (DWORD));
$ |8 F5 o- P, N6 R, E% H& `UNSUPPORTED(RILDrv_GetPacketByteCount, (DWORD));
UNSUPPORTED(RILDrv_ResetPacketByteCount, (DWORD));
UNSUPPORTED(RILDrv_SendFlash, (DWORD, RILADDRESS));
UNSUPPORTED(RILDrv_GetRoamingMode, (DWORD));
2 Y* [- e3 Q0 z5 ~) ~, l# {UNSUPPORTED(RILDrv_SetRoamingMode, (DWORD, DWORD));
UNSUPPORTED(RILDrv_GetPreferredPrivacyMode, (DWORD));
UNSUPPORTED(RILDrv_SetPreferredPrivacyMode, (DWORD, DWORD));
1 K) l/ {* c8 ]8 C4 m! V# {UNSUPPORTED(RILDrv_GetCurrentPrivacyStatus, (DWORD));
' _( q3 h( H( a- Q( c1 ?4 e' ]UNSUPPORTED(RILDrv_GetCurrentLocationStatus, (DWORD));
UNSUPPORTED(RILDrv_GetCurrentRoamingStatus, (DWORD));
/ D4 P: O' a, \8 e' xUNSUPPORTED(RILDrv_SendAKey, (DWORD, LPCSTR));
AT指令那确实是GSM的标准的，事实上我们用不到，也跟踪不到。我们只需要IOCTL_RIL_*那些消息的DWORD值。
这个TIL可以正常工作，我已使用两天进行测试。

我已经对照PB 6的源码，IOCTL这几个值是对的，除非CDMA 使用了另外一套常量值，我觉得这种可能性很小。
  F4 S; a. f5 D  J
[ 本帖最后由 surf98 于 2009-6-5 22:08 编辑 ]

ooo000

哈哈哈。。。猴子说。。有点希望了。。

johnsoncui

老K说：革命尚未成功，同志仍需努力啊！

lfc0859

照着楼主提供的图片，用QPST弄了一下，晕，还是上不了网哟 55555555  给个QCN备份嘛

liyuson

上网问题一直无法解决，这个更关键啊。这个问题，也请大师研究啊。

lfc0859

没进展啦呀

derf

认真读了一遍，每个字都认识，就是加在一块看不懂了，呵呵。弟兄们加油。

风月无极

隐身会员

技术贴一定要顶

okwsh

沉了，顶上来，希望有突破性的发展。

KK_Dog

最近正好在接触RIL相关的一些东西，不过CDMA没碰过，随便瞎说下。
RIL_ReadMsg是读存储在SIM卡上的短信，现在的手机基本都不会把短信存SIM卡上了。常见的是通过Notify来截获短信的。你既然都做了RIL的hook层了应该可以这样做
截获 IOCTL_RIL_GETNEXTNOTIFICATION （0x0300004 ) ，这时的 pBufOut 中内容是一个通知结构，定义如下：
! U! T- L) q; U# [typedef struct rildrvnotification_tag {
. m4 s% ]; G  J+ C2 S; r$ ~    DWORD cbSize;
7 M2 M5 O' |) u0 t# ^% E% P$ p    DWORD cbSizeNeeded;
- C& n5 B3 {) j  a. E    DWORD dwCode;
    HRESULT hrCmdID;
+ ?' a2 X3 m- p  g; u0 H" I    BYTE pbData[];
} RILDRVNOTIFICATION, *LPRILDRVNOTIFICATION;
: V. G1 |) ^8 W. t2 K5 n3 ?5 _注意 pbData不是一定存在的，有可能整个pBufOut只有16字节，前4个数据一定存在。
其中 dwCode 是 RIL 的通知代码，可以在ril.h中找到各定义，你关心的应该是 RIL_NOTIFY_MESSAGE(0x00020001)。这时pbData为一个RILMESSAGE结构，可以从该结构中获得各种信息，信息类型、编码格式等等。大多数的RIL只会在Notify中通知Incoming的信息，如果想处理发出的信息，关注IOCTL_RIL_SENDMSG，这时的pBufIn也是指向一个RILMESSAGE结构。
# }% F& U- d& b" `$ G如果是因为上层RIL Proxy或者tmail等出了问题不支持中文短信，你可以用你的RIL wrapper驱动替换原有的，就像你测试时做的一样，然后屏蔽所有RIL_NOTIFY_MESSAGE，自己将RILMESSAGE内容解码后直接写入系统收件箱。
  K& S- {0 Q) t+ l0 E3 p
8 G# o* t' I. C. G0 ?- a, g& `查资料google过来，特地注册账号回复

sammydeng

纯粹的人力支持，对于这些技术，真的不懂了

hanjing_168

顶起来！希望早日解决啊

Treo800W_C

一些Ap和Modem的通讯并没有走AT cmd，而是自定义的一套数据交换标示。不同版本都不一样的，Ap ROM和Modem 的Firmware一定要对应起来。

yglaotu

牛人们,捎带着把Palm Pre的中文短信发送也一并解决了吧.