Interop.RIMRADIOCOM.dll help

[arom]

Hi all,

this is my first post. I registered because I think this is one of the bests forums I´ve seen about content (topics, manuals, services and software its what I can say) and also because I need some help with a project wich it´s development was very helped and also this idea was developed thanks to a thread spoken here: http://forum.gsmhosting.com/vbb/f83/...1/#post5537657 and Blackberry MEP + IMEI reader [Archive] - GSM-Forum so thanks a lot and congratz.

I´m developing an information extraction tool in C# for bb or blackberry based on the Interop.RIMRADIOCOM.dll v1.3.0.0 which comes with the MFI Multi-loader v2.0.1.3 and seems to recollect a lot of interesting objects for interesting doings. I know this software is used to flash the BB and then, atleast to network free the phone. (I don´t know if it also frees the phone completely neither it´s technical definition).

When I try to connect to the bb, it throws the following ex´s message:

Exception: Unable to open channel 'Caltask Secure'. COM Error: 0x80040008. Cann
ot reconnect to radio. The Device may be password enabled, please make sure the password is correct. Cannot connect to radio.

The code is what follows:

 
IConnect connect = new RIMRadioObjClass();
IDisconnect disconnect = new RIMRadioObjClass();
IReconnect reconnect = new RIMRadioObjClass();
IReadIMEI imei = new RIMRadioObjClass();
IReadBootromVersion bootroom_version = new RIMRadioObjClass();
string str="";
try {
Console.Write("You have 10 secs to connect the bb\n");
connect.Execute("USB", 10000, 19000);
//reconnect.Execute(1000);
imei.Execute(out str);
Console.Write("IMEI: " + str);
Console.ReadKey();
} catch (Exception ex) {
Console.Write("Exception: " + ex.Message);
Console.ReadKey();
}

As you can see, I´m trying to extract the IMEI, but I also want to extract the MFI. Can anybody tell me what the MFI is? LOL

The phone is not password enabled and as I read in the thread I mentioned before, I also removed the IT policy, so, which can be the problem? Thanks.

P.D: I complain using other programming languages and the win32api.

[arom]

Hi again.

I´ve solved the connection problem just upgrading the MML with the .exe with comes in the package.

Here is the new error:

Exception: GSM Radio not connected.  Cannot access ID.  Cannot read IMEI.

And here the new code:

IConnection connection = newRIMRadioObjClass();
IReadIMEI imei = newRIMRadioObjClass();
IReadBootromVersion bootroom_version = newRIMRadioObjClass();
string str="";
try {
Console.Write("You have 10 secs to connect the bb\n");
connection.Connect("USB", 10000, 19000, "0001");
//reconnect.Execute(1000);
imei.Execute(out str);
Console.Write("IMEI: " + str);
Console.Read();
} catch (Exception ex) {
Console.Write("Exception: " + ex.Message);
Console.ReadKey();
}

When I press some key it appears the desktop and I can see that GSM radio is on. Does anyone know what should I do? Thanks.

[arom]

Sorry, what is missing.

[arom]

Sorry, the connection problem is not fixed. I can´t read the bootroom version.

[arom]

Well, it seems it connects but I can´t execute any action. It says an error, now I´m reading the thread I posted at first to see if I can see something to write in for fixing it.

[arom]

Hi again, as follows is the new code:

IConnection connection = newRIMRadioObjClass();
IReadIMEI imei = newRIMRadioObjClass();
IReadBootromVersion bootroom_version = newRIMRadioObjClass();
string str="";
try {
Console.Write("Connect device\n");
connection.Connect("USB", 90000, 19000, "eses");
switch (connection.GetStatus())
{
caseConnectionStatus.CONN_STATUS_CONNECTED:
bootroom_version.Execute(out str);
Console.Write("BOOTROOM Version: " + str + "\n");
imei.Execute(out str);
Console.Write("IMEI: " + str + "\n");
Console.Read();
break;
caseConnectionStatus.CONN_STATUS_LIMITED:
Console.Write("Limited status connection.\n");
break;
default:
break;
}
} catch (Exception ex) {
Console.Write("Exception: " + ex.Message);
Console.ReadKey();
}

It says me on the console: Limited status connection. So I know by experience that I can't get the IMEI, neither bootroom version, and I guess not so much more information. Can anyone help me to solve this status or just to explain me why this is happening? Does it has a solution by using the DLL I'm using? I looked up for IT Policies but it hasn't any. I've tested some IMEI and MEP readers some days ago and it really works.

Any help would be appreciated.

P.D: I'm trying to reinstall the policy.bin into the device again but...

[Celhack]

Which model of blackberry are you trying to connect?

[arom]

Thanks for the reply.

I'm trying to connect an 8520 device.

[arom]

Hello? can anyone help me ?

[philzfog16]

u carnt change imei on 8520 the latest one u can do is old 9000

[arom]

Thanks for the info but I wanted to code an information extraction tool for bb, generic if possible. You know, extract: IMEI, bootroom version, MEP, and so on... The problem I have is that I can't neither to extract the IMEI and I know it is possible because I've tried another tools which does the mission. How can I extract information with or without the Interop.RIMRADIOCOMLib.dll ? I've read about using win32api but I don't know I can extract so much more info with another tool because as I saw that DLL is well developed, so... I think I'm missing something in the code... does anyone know anything else? Any help would be appreciated.

[arom]

Well, I'll tell you the true. I downloaded MML time ago and first I saw after inspect it was that there are more MFI files than models supported in the configuration. The first I thougth was that maybe they didn't publish that configuration because of an interest, so I decided to cover the rest of models by myself if possible for free blackberries and lucrate myself and them who are near to me. If any1 wants to collaborate, he/she is welcomed.

At the momment, I'm learning the objects of the MML's dlls to find a reference of productID and MFI for configure the MML and after to try flash it. Some of the questions that stucks me, are:
What an/the MFI is? And also, does it has something in familiar with bootimage or bootroom...?
What's about the MEP?
how can I extract the bytecode and understand it? What's MEP?
What's about productID? can it be extracted also with the MML's FM?
....

[Celhack]

Well, I can tell you that you begin with a new security model. If you want to play with bootrom you need an old model like 8300, 8100 etc. because mml you are using 2.0.1.3 dont support 8520 bootrom.

[hyber_99]

Originally Posted by arom

Well, I'll tell you the true. I downloaded MML time ago and first I saw after inspect it was that there are more MFI files than models supported in the configuration. The first I thougth was that maybe they didn't publish that configuration because of an interest, so I decided to cover the rest of models by myself if possible for free blackberries and lucrate myself and them who are near to me. If any1 wants to collaborate, he/she is welcomed.

At the momment, I'm learning the objects of the MML's dlls to find a reference of productID and MFI for configure the MML and after to try flash it. Some of the questions that stucks me, are:
What an/the MFI is? And also, does it has something in familiar with bootimage or bootroom...?
What's about the MEP?
how can I extract the bytecode and understand it? What's MEP?
What's about productID? can it be extracted also with the MML's FM?
....

but if you´re using old mml as @Celhack said.
you couldn´t work with new security, because old mml 2.0.1.3 works with old cfp.
and the old cpf supports only old security.

[arom]

I've installed MML 4.11 and I can confirm it does support last BB models as I can see in the Configuration.xmlz. The problem is that it is need a fake RIM server for to emulate the authorization processes because as I've read the BBAuthManager asks for processes auths to a RIM server, so the hack consists in to emulate a fake server for authorize the processes which will let us to flash the BB with a FREE MFI.

What I couldn't do is a software wich extracts information neither bytecode like product id or the NVM. It stills tells me: Limited connection status. But I guess it is need to set the BB in some privileged mode maybe nuking the BB, but the problem is that I've no blackberry now, so any new security device or donation would be appreciatted.

Also, any help/progress of the method mentioned before or a different one would be interesting and appreciatted.