Poor mans registry monitor? - General Topics

You can use Active Sync as a kind of registry monitor.
Dont know what it monitors exactly. Perhaps someone can tell.
This is what you do.
On you PC create 2 values:
[HKCU\Software\Microsoft\Windows CE Services]
"RapiLogPath"="C:\TEMP"
"RapiVerbose"=dword:00000001 or 0 or 2
This creates WCESMgr.exe_XXXX.Log files in that directory
when connected through active sync.
Example of the output:
WCESMgr.exe,CeRapiInit[Ex],8413147,0,0,Start,
WCESMgr.exe,,8413147,0,0,CEAPI,1242324,1346454851,842083401,0x32333234
WCESMgr.exe,CeSyncTimeToPc,8414619,1472,1472,CEAPI,29425124,1346454851,959589449,0x31353234
WCESMgr.exe,CeProcessConfig,8415470,2323,821,CEAPI,25884384,1346454851,892480585,0x33343838
WCESMgr.exe,CeProcessConfig,8415811,2664,321,CEAPI,25884380,1346454851,892480585,0x33343838
WCESMgr.exe,CeProcessConfig,8415921,2774,110,CEAPI,25884476,1346454851,892480585,0x34343838
WCESMgr.exe,CeRegCreateKeyEx,8416071,2924,150,CEAPI,25882160,1346454851,892480585,0x31323838
Click to expand...
Click to collapse
Not very useful at the moment but perhaps someone can make sense of it?
Cheers

For $29, you can pick up TorchSoft Registry Workshop that can not only compare registries on your desktop PC, but also your Windows Mobile device via ActiveSync!
http://www.torchsoft.com/en/rw_information.html
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Multiple undo and redo. The undo history can be saved to disk and reloaded at startup.
Search and replace registry keys, values and data with super fast search algorithm. On a typical PC, you can search the entire registry in about ten seconds!
Compare registry between computers and/or REG files with super fast speed.
Connect mobile device (Pocket PC, SmartPhone, etc.) registry via ActiveSync. new!
Cut, copy and paste registry keys and values.
Drag and drop to move or copy registry keys and values.
Edit REG files in the same way as editing system registry.
Backup and restore registry (Windows NT4/2K/XP/2003 only).
Defragment registry with preview (Windows NT4/2K/XP/2003 only).
Easy and flexible Favorites management.
Quickly browse registry with address bar, bookmarks and visitation history.
Support of linkage aware ability. You can use context menu to navigate to referenced key, open containing folder or open URL if the key or value contains a ProgID, ClassID, folder, file path or URL.
Allow to open multiple local registry windows.
Allow to open secure registry keys when running under the administrator privilege.
Edit binary data in BYTE, WORD or DWORD format.
Support of version 5 REG files with Windows 98/ME/NT4.

tweakradje said:
Not very useful at the moment but perhaps someone can make sense of it?
Click to expand...
Click to collapse
It is just a log of RAPI functions with what looks like call parameters.
For the non programmers among us:
RAPI (Remote Application Programming Interface) is a set of functions ActiveSync provides that let you execute a set of functions (APIs) on the device from your PC.
As a registry monitor this has two major issues:
a) It only sees changes triggered from the PC, but any cab installation does changes internally.
b) Part of the log tweakradje quoted looked to me like a list of argument addresses instead of the parameters them selves, so unless there is another setting for logging, you can't actually see the strings being sent, so you don't know which keys and values were altered.
Still, it is an interesting discovery and someone will probably find a use for it.
Side note: On WM5 devices, phone edition in particular, security was tightened so registry access via RAPI is now blocked (except I think for reading certain keys).

Related

Weird error on every soft reset. Damaged autostart item?

Please help, this is very annoying. Each time I do a soft reset and the Machine boots up again I get the error:
The file "" cannot be opened. Either it is not signed with a trusted certificate or one of its components cannot be found. You might need to reinstall or restore this file
Click to expand...
Click to collapse
I suspect some damaged autostart item causing this, since it says << file "" >>. I checked the Windows/AutoStart folder and could not find anything suspicious. What other ways do exist in WM5 to autostart programs ? I have to find that entry... it's really annoying.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Following registry key check you must:
HKEY_LOCAL_MACHINE\Init
To desktop Run key equivalent it is.
I could not find any suspicious entry under HKEY_LOCAL_MACHINE\Init.
However I checked out HKEY_LOCAL_MACHINE\Services\ in the belive that these are system services loaded on startup (?). I noticed one strange anomaly: All the services listed there have a string value named "DLL" that has a path to a dll assigned to it. The service "Trusted" however has an empty DLL string value. Could this be the cause? Could someone else check if they have the path HKEY_LOCAL_MACHINE\Services\Trusted on their Prophet and if there is a value assigned to the DLL string ?
Hmm, didn't know about that one, but now that you mention it, here's what I have under HKLM\Services\Trusted:
PushRouter pushrouter.dll
SIMInit siminit.dll
SIMToolkit simtkit.dll
WSPPush wsppush.dll
Push mail is on so I guess that's why they are there. No key named 'DLL' though. I think it will be safe to remove the empty entry, but you should back up your data just in case.
P.S. Any links in your startup folder? The link may look normal but could have a bad string inside cosing the problem. Just a thought.
Here is what's in my Startup folder:
CapNotify.lnk: 32#"\Windows\CapNotify.exe"
custTDYTSK.exe
GamePad.exe
HomeZone Core: 36#"\Windows\V2R\Homezone\HomeZone.exe"
HomeZone Display: 44#"\Windows\V2R\Homezone\HZDisplayDataSMP.exe"
Init_Tray.lnk: 39#"\Windows\Init_Tray.exe"
PhotoContacts.lnk: 51#"\Programme\Photo Contacts PRO\PhotoContacts.exe" "-silent"
poutlook.lnk: 21#:MSPOUTLOOK
sddaemon.lnk 58#"\Windows\sddaemon.exe"
Services.lnk: 26#"\windows\spbservices.exe"
Removing the Bluetooth gamepad driver from the autostart did the trick. It was written for WM2003 and apparently generates this error on WM5. However starting the driver after the device is fully loaded does not generate the error, so I'm going with this. Thanks for your help.

CAB to install Office Mobile 6.1 onto your storage card (free up some device memory)

I wanted to free up more device memory, but the Office6.1 CABs (I could find) would only install to the device. So I edited the CAB I had, to give you the choice (device or storage card).
It seems to work OK. The shortcuts, on the start menu, weren't pointing to the new location... but I think I have fixed that. Not sure what happens on non-english devices.
The only bugbear I have found is, hitting the new button in Word generates an error. I think it is because the default template is in the wrong place. So if anyone can shed some light on that, I would be grateful. It's not a biggie tho' I just created a document called "blank.doc" and open that instead.
I'm sure someone will come along now and say, "there is already a CAB that does this".... but I did spend two days looking for one!
Here it is,
MSOffice2007onStorageCard.zip
so this will extract the files from my device including the corresponding templates and place on storage card for use?
or is this the full MSoffice2007 install that allows you to save to storage card?
Sorry, my bad.
you will have to uninstall your office 2007 suite and reinstall, using this CAB.
HTH
=====
I think the problem with Word not opening the new file is because I neglected to make the CAB change the registry entries for the office programs in their new locations. I just tried to start a random DOC file from File Explorer and got the same error (but can open it from inside Word). Same problem with Excel and PP too. Harrumph!
Which keys do I need to change?
=====
Changed the file associations for documents and workbooks by hand using Total Commander... it's a kludge for the problem above, works tho'.
Still can't get the 'New' button to do its job in word mind.
How do you un-install the office suite?....doesn't allow me to delete the files individually. And active sync doesn't give me the option to un-install either.
Start\Settings\System\Remove Programs
I am running CRCinAU's WM6.1 ROM, not sure if Office is uninstallable on other ROMs... so YMMV.
Hang on a mo... I am editing registry entries in the CAB. I will upload a new version in a few minutes.
Hang on a mo... I am editing registry entries in the CAB. I will upload a new version in a few minutes.
=====EDIT=====
Dammandblast - I screwed up the registry entries... it's late, bed is calling me.
The file above will work, but you need to point the file associations in the new direction.
I will get back to this at a civilised hour.
Found a CAB that does the job properly, on this thread
Here it is,
PDACorner_Office2007.CAB
I have a Mio A701.
Not every costume ROM have Office inside.
So this is a solution.
Thank you very much gadgetuk437.
Thanks to mainsail too, who gives me the link of this page
in our new MIO A701 COMMUNITY here:
http://www.a701.org/Forum/
How do you edit a .cab file?
Great Info, can't wait to try it
Well, as gadgetuk437 said i take this ERROR when i try to open a new Word document:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Any solution on that???
how to remove this soft from pcm?
Request CAB. to install office Mobile6.1
Dear alll,
I bought the used ASUS M530W and found that the mobile office is able to view only.
Is there anyone able to send me the link or cab file of this office mobile?
-email removed-
thank you

A much more advanced RMVB codec is out!

You may remember my previous article on playing back RMVB (RealMedia Variable Bitrate) videos on Windows Mobile. Back then, the only hack available was pretty much useless: it only ran on Marvell (ex-Intel) Xscale CPU's and delivered a really inferior performance (very low video speed, useless for watching anything).
A brand new version has just been released, which works much faster and, according to other reports, other (not only Xscale) platforms too. You can download it HERE, from the first post (do NOT download the CAB file in the fourth post, it won't work!). Copy the contents of the ZIP file on a storage card or a directory on your handset. Fire up File Explorer on your mobile and make sure "Show all files" is enabled. It's disabled by default; enable it by tap-and-holding an empty area anywhere – for example, at the bottom of any listing – and selecting "Show all files" from the context menu. Then, select all the files and Copy them (either the context menu or Menu / Edit / Copy). Go to \Windows on your mobile and select Menu / Edit / Paste your files to this directory. Alternatively, you can just copy the files via an ActiveSync connection; for example, via Total Commander's WinCE FS plug-in.
Now, you'll still need to import the registry file, rmvb.reg, into the Registry. If you have a REGEDIT 4-compliant, import-capable registry editor on your handset, you can do this directly. If you, on the other hand, only have a REGEDIT 5-compliant one (like Resco File Explorer or SOTI's Pocket Controller on your desktop computer), you'll need THIS file I've created for you instead of the one coming with the original distribution. (Please see my Registry Editor bible for more info.)
NOTE: unlike with the previous and, in other respects, much inferior plug-in, this one has some compatibility problems: it just displays "The parameter is incorrect" with some of the videos; for example, the hotel_california _ra5.1_640x480_30s.rmvb test video I used in my previous article (and this one too):
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Other users have also reported this problem. Also note that many users have also reported audio/video synchronization problems.
I hate having to remember people still encode their stuff in RMVB. Thanks for your drivers!
rmvb is still the most popular format in taiwan/china!
daniel_1983x said:
rmvb is still the most popular format in taiwan/china!
Click to expand...
Click to collapse
Why don't they switch to H.264 / HE-AACv2? It's far superior in every respect...
Great Job!
Thanks for your job, man! It works fine for me.
I'm using a Tytn II with a Qualcomm (R) 7200 processor - 420Mhz.
on Xperia X1 - video ok - audio lag
I have instaled it on Xperia , and with sktools imported and registered reg file .
medida player can run rmvb files , but audio is about 5 seg out of sinc.
the file I tested was about 55 M ( 644x360 )
any solution to play beter that files ?
Thanks..
Work fine on my Omnia II.. but it's impossible to use de forward and backward functions.. :/

[Q] Phone hacked/unauthorised access?

Hi XDA,
So I've have my Milestone 2 for two days and installed only a handful of apps from the Market.
However I just noticed my data usage is ~350MB with most of that usage from "Gallery" - as listed in Data Manager in Settings.
Looking in the Gallery app and there were about 6 images of chinese characters from websites like sina.cn that I didn't put there.
And their creation date was from a day ago at 4:34am :/
Any ideas and/or suggestions?
Thanks!
PS: Stuffed up original thread; this is not "[Resolved]"
bump
Can anyone shed any light or advice?
Another bump...
Can someone suggest somewhere else this might be better asked if this is not the ideal place (Questions & Answers)?
Firewall your phone
Firewall your phone;
Airscanner Mobile Firewall
A Full-Strength Personal Firewall for Your Windows Mobile/Pocket PC handheld. Airscanner Mobile Firewall for Windows Mobile Pocket PC is a low-level, bi- directional, packet filtering firewall that examines all incoming and outgoing TCP/IP traffic. This personal firewall ensures that data is permitted based on access control lists that you select from a set of predefined filters, or from filters that you create yourself. The firewall parses packets as they come in (or go out) on the wire or over the air, and it matches the data against a rule set of ports and IP addresses, URLs, etc. Unlike some other products, Airscanner Mobile Firewall is not a simple port blocker or application port monitor. It is a true, full strength NDIS firewall powered by a custom-written packet driver for Windows CE .NET.
Direct Download LiNK;
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Q: What is this kind of picture?
A: It's a 2D barcode.
In general, 2D barcodes can encode more data than 1D barcodes of the same size and can encode the same amount of data in much less space.
Q: How can I use this picture on my phone?
A: Go to i-nigma.mobi on your mobile. I-nigma will automatically identify your handset type, download and install i-nigma. Replace .mobi with .com to goto their main website for more info
Hope this helps,
A Full-Strength Personal Firewall for Your Windows Mobile/Pocket PC handheld.
Click to expand...
Click to collapse
Until now I was sure that a Milestone 2 is running Android.
cobo_, search the market for droidwall or similar. I don't think that it has same features as Win products but maybe it's useful for you to avoid such things in the future. For your actual request: sorry, no clue.
stepsch said:
Until now I was sure that a Milestone 2 is running Android.
cobo_, search the market for droidwall or similar. I don't think that it has same features as Win products but maybe it's useful for you to avoid such things in the future. For your actual request: sorry, no clue.
Click to expand...
Click to collapse
Thanks stepsch, I had no idea there were firewall-type apps for Android
I'll definately give DroidWall a look at.

Changing the icons and graphics applications

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Google's operating system, unlike implemented in other platforms, is strongly oriented to the user, making it easy to perform tasks in other systems are complicated or completely impossible.
Such is the case of modification of applications developed by other users, for which there are tools that allow both the treated and recompiling, but of course, to modify the resulting code must have some computer knowledge.
However, any user can change the visual appearance of your applications without having prior knowledge and without being root, resulting, in general, extremely simple to modify the background of your widgets, for example.
To do this you simply need to know how Google organizes the information in an application.
Android applications are recognized for having the extent apk, English Package System Android. Apk files (like jar files, java standard derived) contain all the information on the application, ie the same code, resources used, the list of permissions required to run, and digital signature associated with it, which prevents a change, and is checked every time we make an update.
Although initially it may seem complicated, it really is not, as a apk file is organized internally as a zip container, so that stored data can be obtained with almost all the pressure reducers on the market, although it is recommended WinRar program use, which makes the whole process.
The images and descriptions of the various screens of Android are in res directory, which is structured as follows:
Subdirectories layout and layout-*: The files are of type xml, although they are compiled, so are not directly modifiable and need to decompile the application to change them. These files contain the description of the elements of the different screens of the application,
Xml subdirectory: this subdirectory files are also compiled xml type, and include information on the configuration screens of the application,
Drawable drawable-subdirectories and *: Depending on the programmer, you'll find both compiled xml files as images (usually png files 9.png type).
The png files are files 9.png extensible, and find more information here, while the png files are a type of images you can edit with any editor.
Image
Once all the changes, you only have to insert the apk files modified in the application, for which, if you use WinRar, keep in mind that graphics files should be inserted disabling compression, while for the rest file must indicate the type of normal compression.
To finish, you need to download a utility to sign the new application you can install once signed, but first uninstall the original application.

Categories

Resources