Copy apk signature - Hero, G2 Touch Android Development

Hi,
Does anyone know if it possible to extract/copy an APK's signature and how?
I have noticed all CERT.RSA files in APK's signed with the same key are very similar, apart from the last few bytes, so i am thinking there must be a way.
Ne0

from my understanding it is not possible, as it would ridicule the whole process of signing the apk in the first place. then again i am everything else than an expert on this topic...

One would have to ask the question as to why you would want to do this in the first place?
Regards,
Dave

foxmeister said:
One would have to ask the question as to why you would want to do this in the first place?
Regards,
Dave
Click to expand...
Click to collapse
that's the thing. if it was possible there would be no reason to sign the app in the first place. it is signed so you can make sure who the dev is (or that the dev is the same as the one who made the previous version). if you could extract and reuse that signature, where's the meaning in signing it at all?
and there are only two obvious reasons one would want to do that: he lost his key, or he wants to fake the source of an aop...

kendong2 said:
that's the thing. if it was possible there would be no reason to sign the app in the first place. it is signed so you can make sure who the dev is (or that the dev is the same as the one who made the previous version). if you could extract and reuse that signature, where's the meaning in signing it at all?
and there are only two obvious reasons one would want to do that: he lost his key, or he wants to fake the source of an aop...
Click to expand...
Click to collapse
Personally, I would be interested if there was a way to do it, because I would like to update a system app on my phone using a modified apk (in my case I use android 12 that comes with Samsung files 13 and I would like to update it to the version 14 which is only supposed to be compatible with android 13. I changed the min SDK requirement and resigned the v14 apk but because the signature is different, the app just won’t update).

Related

[ROM] Official G2/DZ shipped ROMs

Now,I have collected most original/official RUU.exe files for Desire Z and
Vision/G2 TMOUS zip files for the Users,Devs or Mods.
Uploaded all to "shipped-roms.com":
LINK http://shipped-roms.com/index.php?category=android&model=Vision
So we have all files collectively and don`t need to look for it.
Files which are available:
RUU_Vision_HTC_WWE_1.82.405.1_R_Radio_12.28e.60.140f_26.04.02.17_M2_SF_release_168383_signed.exe
RUU_Vision_Orange_FR-B2B_1.85.73.2_Radio_12.28e.60.140f_26.04.02.17_M2_SF_release_170528_signed.exe
RUU_Vision_HTC_ARA_1.83.415.2_Radio_12.28e.60.140f_26.04.02.17_M2_SF_release_168396_signed.exe
RUU_Vision_Hutch_AUS_1.85.861.3_Radio_12.28h.60.140f_26.06.02.27_M_release_172438_signed.exe
RUU_Vision_BellMobility_WWE_1.34.666.1_Radio_12.28b.60.140e_26.03.02.18_M2_release_154437_signed.exe
RUU_Vision_HTC_WWE_1.72.405.2_R_Radio_12.28e.60.140f_26.04.02.17_M2_SF_release_163285_signed.exe
RUU_Vision_HTC_WWE_1.72.405.2_Radio_12.28e.60.140f_26.04.02.17_M2_release_160660_signed.exe
PC10IMG_Vision_TMOUS_1.19.531.1_Radio_12.21.60.09b_26.02.01.15_M2_release_149459_signed.zip
Vision_TMOUS_1.12.531.0_Radio_12.18.60.05P_26.01.00.17_M2_144460.zip
RUU_Vision_hTC_Asia_WWE_1.34.707.3_Radio_12.28b.60 .140e_26.03.02.18_M3_release_154628_signed.exe
RUU_Vision_HTC_Egypt_1.72.466.4_Radio_12.28e.60.140f_26.04.02.17_M2_release_160882_signed.exe
RUU_Vision_HTC_WWE_1.34.405.5_Radio_12.28b.60.140e_26.03.02.26_M_release_155556_signed.exe
RUU_Vision_HTC_WWE_1.22.405.1_Radio_12.26.60.1301_26.02.00.24_M2_release_151197_signed.exe
RUU_Vision_HTC_WWE_1.31.405.1_Radio_12.28a.60.140e_26.03.02.08_M_release_153504_signed.exe
RUU_Vision_HTC_WWE_1.34.405.4_Radio_12.28b.60.140e_26.03.02.24_M_release_155297_signed.exe
RUU_Vision_hTC_Asia_HK_CHT_1.34.708.3_Radio_12.28b .60.140e_26.03.02.18_M2_release_154602_signed.exe
RUU_Vision_hTC_Asia_India_1.34.720.3_Radio_12.28b. 60.140e_26.03.02.18_M2_release_154620_signed.exe
RUU_Vision_hTC_Asia_TW_1.34.709.3_Radio_12.28b.60. 140e_26.03.02.18_M2_release_154597_signed.exe
RUU_Vision_HTC_WWE_1.34.405.3_Radio_12.28b.60.140e_26.03.02.18_M2_release_154596_signed.exe
Click to expand...
Click to collapse
Theres no place like 127.0.0.1
Jobehonda said:
Theres no place like 127.0.0.1
Click to expand...
Click to collapse
everybody has 127.0.0.1
I guess he wants to use it as placeholder for the real IP...
I know garbage i was making a reference to theres no place like "home" or in this sense, 127.0.0.1 i didnt have the heart to tell him any other way. lol
http://www.thinkgeek.com/tshirts-apparel/unisex/generic/5d6a/
Hm,using this programm:
http://downstairs.dnsalias.net/homeftpserver.html
How you can get access,have done something wrong
How'd you host the files on my own computer
Also you need to give us an IP address we can access outside of your LAN, dont give us a number starting with 127, 10, or 192, those are all local. I recommend DynDNS or No-IP for dynamic IP updaters. if you need help PM me
I PM'd you
Test again:
Server: gani.dyndns-home.com
Port: 21 (if needed)
UPDATE:
All files now available at "shipped-roms.com".
Missed
RUU_Vision_HTC_WWE_1.34.405.3_Radio_12.28b.60.140e_26.03.02.18_M2_release_154596_signed.exe
Now added too
Deserves a bump.
Thanks, I've been using this thread quite often (I stupidly delete ROM's after I extracted stuff I need so I need to re-download them once the extraction business is on again... ). Having to look for it on page 3 or 4 is horrible so here we go, I get it back on the front page.
Link no longer works.
Link from first post? (shipped-roms.com)
I have no problems!
Can someone please explain to me and I'm sure others would appreciate, what is all the wwe ruu tmous stuff mean. I look at that list and barely have a clue what I should be flashing if I want the latest, what belongs to what provider etc. Also if your s off aren't there quite a few of these that if you flash you will semi brick?
I have tried finding a breakdown of all this info and had no such luck. If someone does not feel like explaining all that can u just tell me the latest tmobile released rom and if its safe to flash with s off and eng bootloader? Thank u.
Sent from my HTC Vision using XDA Premium App
does anyone here have the original belgian rom RUU?
Either 1.72.1100.x or 1.83.1100.x
I just got a replacement G2 and noticed i have a version number not listed in this thread
I have:
1.22.531.5 CL277427
Wondering before i root, if I can make an image or copy the rom into a zip file for anyone???
xsteven77x said:
Can someone please explain to me and I'm sure others would appreciate, what is all the wwe ruu tmous stuff mean.
Click to expand...
Click to collapse
WWE = World Wide English (?), means about as much as "global release". A version of a ROM which is released to one could say "unbranded" devices coming from HTC directly, intended for worldwide use. No G2, no Vodafone, just pure HTC.
RUU = Rom Update Utility, a Windows OS executable file which flashes a ROM onto your device, partially or fully. A so called "official RUU" is usually a ROM updater coming from HTC, still in it's untouched state, unmodified, means no root pre-included, no locks removed, no traps defused, just pure HTC.
TMOUS = T-Mobile USA. Questions?
I look at that list and barely have a clue what I should be flashing if I want the latest
Click to expand...
Click to collapse
Technically quite incorret but it will do as an explanation: we all have the same devices, they are just distinguishable by the software put on them. Since the hardware is the same, all devices worldwide will run every "Vision" ROM there is. So basically, as normal in IT, take the one with the highest number and youre good to go 1.34 is older than 1.72 is older than 1.84 is older than (...). The stuff after 1.34.xxx is for the "release/sales region" a ROM is intended for. 405 for example is more or less western europe, so ROMs released for the german/austrian/swiss/whatever market are 1.xx.405.z ROMs.
what belongs to what provider etc.
Click to expand...
Click to collapse
Doesn't matter, a Vision is a Vision. A "provider ROM" just means it will have some provider specific junk loaded as opposed to a "clean" HTC ROM. Exception: G2 vs DesireZ. G2 is "pure" Android (with T-Mo junk) where as DesireZ get Sense from HTC.
Also if your s off aren't there quite a few of these that if you flash you will semi brick?
Click to expand...
Click to collapse
Semi brick? If you got a semi brick unbrick it by flasing something which works. Beauty of flashing HTC devices. Ever heard of locked Motorola bootloaders? A pain in the hole, and very much at that...
...and if its safe to flash with s off and eng bootloader?
Click to expand...
Click to collapse
S-OFF and ENG Bootloader means your device is basically (very stupid things to do excluded) bomb proof. In this combination there is almost always a way to get it back to a working state. One thing I would consider: I'd take a modified, pre-rooted ROM, an "official" ROM might close a loophole used to root and crack and hack the device.
Mikey1022 said:
Wondering before i root, if I can make an image or copy the rom into a zip file for anyone???
Click to expand...
Click to collapse
You'd need a custom recovery for that. And without ROOT you can't load a custom recovery. Hmm... you could temp-root, put recovery on, factory reset (wipe temp root stuff off device), pull a backup, and then perm-root. This way you'd get a quite clean backup. Anyone disagree?
I'm not able to download a single file, either download never starts or it just stops randomly at any point during the download have not been able to download more than 50mb
This may be obvious but which country is AUS as in RUU_Vision_Hutch_AUS_1.85.861.3_Radio_12.28h.60.14 0f_26.06.02.27_M_release_172438_signed.exe ?
Australia....
Desire Z - with XDA Premium
Thank you, ok so what is XDA premium?

[Q] Making Beta Package

hi
good day
my new friend is a developer
he made an app and wants to publish a beta for tests
so is there any idea on how to make a small package for testing like darijoa from badanation.de did it??
http://www.badanation.de/topic.php?t=3966&page=1
P.S: i am not a developer so i'll just deliver data
Thanks in Advance
With bada SDK...
There is an option to make package... so only "Binary" is included instead Source Code.
If no one is faster, I will make an Screenshot... sooon.
Best Regards
What's the problem? You just need to replace the application in the "\App\" folder on his own and edit the "\App\App.cfg". Darijoa installer is just part of the Bada SDK with skillfully written bat-file.
hahahahahaha
Xenon do you expect from me to understand this??
my friend is just a new bada developer who needed some help
he knows C/C++ but didn't study the bada SDK
i didn't believe him when he told me that he wrote an app just 4 days after downloading SDK (thats too fast for me)
anyway i'll tell him what adfree said and what you said too
Thanks for helping guys
XDA rocks
Hi Guys
adfree/Xenon, is there any way to install any app [without having certificate to this application] by Darijoa bat file? If I'm installing original app with cert, for example Voluntas, installation goes well. But I was tryin' something different - I put MyExplorer app in "App" folder, changed strings in config file. When I tried to install this app using this method, my phone says "Error 0108" - no certificate to myExplorer. Is there any way to install ANY application using this method? Is there any option to create certificate to application what I didn't created?
If you don't know what, I wanted to, I thought to create new spoof method for people using JL2 firmware. After this f*****n' Samsung Apps update, only way to run "non-free" games is to reflash their phones [downgrade to JK1 for example]. Not everybody want to do this
Btw, Xenon, good work with sp.so protection
adfree, good job with all U R doing
Best regards,
wxtester
I am sure Adfree has absolutely no interest in supporting a new "****ing" method of spoofing.
Btw, with that **** you are not damaging Samsung, but small developer groups and freelancers like us.
@wxtester
This installation method is only available for applications signed by developers certificate. And so by this way is possible to install only one application. Create a certificate - a task nearly impossible. Possible way to solve - edit apps_сompressed.bin, so I'm hope for success in the holod's QMD packing, this will open a new stage in the creation of custom firmwares.

Gruessle -> Kaiser Froyo Rom

06/16/2011
The screenshots are not important. This is not a theme!
You can install a theme from here, for example if you like.
The theme it comes with is the:
Go Louncher Classical Theme (The new version of it)
The software installed is also not important, because you can remove it.
Google Market is installed, and you can install what ever you like, just like on your computer.
https://market.android.com
This is the actual Android Froyo operating system for the HTC Kaiser
So, stop asking me for screenshots and software installed, it's not relevant.
And the how to install guide is been posted here
Bug reports are welcome, other then that, I don't wont to hear from you.
Don't post a thank you either, there is a bottom for that, and you can also vote on the poll up there, but install and test it first!
Again Bug reports only, please!​
I been working on this for 3 days straight, and figure I'll share what I got.
Everything seems to be working, except the camera is blurry, but that seams to be the norm.
Included is the rom, radio and kernel
ROM: 2.2.1
Kernel: 2.6.25
Radio: KAISER 1.70.19.09
Panel: 2
Key Map: US Normal
Resolution: 240x320
Storage: Nand & Nand
Most everything is installed in userspace and can be uninstalled or upgraded.
Oh got GO Launcher EX installed (Also in user space)
Credits:
I stole ideas from, and used following tools:
Makers of atools
Makers of NBH creator
HTC Flasher
kallt_kaffe
Krazy-Killa
dzo (dzo's posts wore a big help. just wish he would answer his own questions after he found the solution)
n2rjt
and many more.
@todo
Resize NAND partitions to the smaller system size
Original post and download Links are posted on my blog:
http://press.pzzazz.net
Can you write something more about this? Is this your system and kernel(compiled yourself)? Any changes?
MaRekRM said:
Can you write something more about this? Is this your system and kernel(compiled yourself)? Any changes?
Click to expand...
Click to collapse
Yeah witch apps are include. Some yours tweaks or etc... ???
MaRekRM said:
Can you write something more about this? Is this your system and kernel(compiled yourself)? Any changes?
Click to expand...
Click to collapse
That sounds like a trick question.
Yes, at first I compiled everything my self but then to resolve bugs, I looked at other systems and basically stole stuff from them to fix my bugs. In other words, I can't take all the credit, it was a community effort.
Neo2SHYAlien said:
Yeah witch apps are include. Some yours tweaks or etc... ???
Click to expand...
Click to collapse
I removed most everything from the system and installed it in user space. So the system is very lean. You can uninstall what you don't like.
how is the rom?just waiting to see
gruessle ...!! thanks for your efforts in getting this done... I been looking from long time to install Android on my HTC TyTN II. However i was not able to get the proper build...
can you share the screenshots of the build which you provided as well some steps at high level on installing this..
Thanks in advance.
Please, I don't really understand how to go upgrade this. I find it hard to do. Is everything needed packaged in this download, or please can u list things needed to change to android. I'll appreciate your response.
tundelogic said:
Please, I don't really understand how to go upgrade this. I find it hard to do. Is everything needed packaged in this download, or please can u list things needed to change to android. I'll appreciate your response.
Click to expand...
Click to collapse
here is the howto
http://forum.xda-developers.com/showthread.php?t=680518
kkp said:
gruessle ...!! thanks for your efforts in getting this done... I been looking from long time to install Android on my HTC TyTN II. However i was not able to get the proper build...
can you share the screenshots of the build which you provided as well some steps at high level on installing this..
Thanks in advance.
Click to expand...
Click to collapse
The screenshots are not important.
This is not a theme.
You can install a theme from here, for example if you like:
http://golauncher.goforandroid.com/category/themes/
The theme it comes with is the:
Go Louncher Classical Theme (The new version of it)
The software installed is also not important, because you can remove it.
Google Market is installed, and you can install what ever you like, just like on your computer.
https://market.android.com/
This is the actual android froyo operating system.
Anyone else having trouble getting the kernel to install?
I get to 33% and the phone reboots...
Radio installed fine even though I was already using 1.70.19.09, just to be sure I installed everything in the package.
Installed HardSPL 3.34 and a WinMo 6.1 rom (custom) to see whats wrong. Installed L1q1d's kernel and goes right in like it should.
Checked .NBH with NBHCreator and only found 1 thing wrong: kernel set to Eclair instead of Froyo. Changed to Froyo and saved, attempted reflash and still won't go in...
;(Losted);
I also tried to install this kernel but I can't. Flashing in hardspl after few second give folowing error:
00018003
Os Fail
Update Terminate
UPDATE Fail.
Changing parameters in atools not helping. Every another kernel is flashing without problems so it's not phone fault
Gruessle, thanks for your efforts! I want to try your rom but being a noob waiting for more comprehensive list of known errors before flashing it to my kaiser.
Ok, quick "bug report":
After working with the kernel pack multiple times I have come to the conclusion that there might be a bug in the actual kernel file itself, throwing a code back to HardSPL and RUU (how I install).
I first noticed a problem in that the kernel was originally set up for a Polaris and had no resolution set. The size of the file should be unimportant as Scoot's newer kernel is in the order of 3.2-3.3MB in size (with the RIL patch installed it gets even larger), this one is 3,099KB, and l1q1d's is almost always 3,092KB.
The second issue I noticed is with the Froyo package itself... It's split up into many files (open the package in 7zip and you'll see what I mean). Normally, the packer has the files all listed inside the .tgz file, this one has the files inside many other files.
I have thus not installed the system on either phone because (correct me if I'm wrong), the kernel contains the basic directories for where everything is installed, and if I were to try and install this package on say, l1q1d's kernel, the phone would most likely crash because the files would not be found, including /system.
If ANYONE wants to dig deeper into this problem, feel free to message me. Personally, I think we've about finished getting all we can from the Kaiser, and much respect goes out to those who have done all the work in the past, but there's always that glimmer of hope that someone will find a way to pack this into a working rom installable through RUU or HardSPL.
I have one last thing to say:
Gruessle, please do your homework BEFORE posting things like this. There are people out there who still depend on this phone to operate as it is their only phone. I Personally cannot afford to go spend $100-200 on a replacement phone if this one goes down (thats why I have 2 of them). If you post something that does not work on the platform that you say it will, please correct it or move it to the proper forum.
BTW, I call shenannegans on one of the 5-star votes... just sayin'.
Your kernel have fake ;/ . rom works great ;D
sorry for bad english;p
PoXFreak said:
Ok, quick "bug report":
After working with the kernel pack multiple times I have come to the conclusion that there might be a bug in the actual kernel file itself, throwing a code back to HardSPL and RUU (how I install).
I first noticed a problem in that the kernel was originally set up for a Polaris and had no resolution set. The size of the file should be unimportant as Scoot's newer kernel is in the order of 3.2-3.3MB in size (with the RIL patch installed it gets even larger), this one is 3,099KB, and l1q1d's is almost always 3,092KB.
The second issue I noticed is with the Froyo package itself... It's split up into many files (open the package in 7zip and you'll see what I mean). Normally, the packer has the files all listed inside the .tgz file, this one has the files inside many other files.
I have thus not installed the system on either phone because (correct me if I'm wrong), the kernel contains the basic directories for where everything is installed, and if I were to try and install this package on say, l1q1d's kernel, the phone would most likely crash because the files would not be found, including /system.
If ANYONE wants to dig deeper into this problem, feel free to message me. Personally, I think we've about finished getting all we can from the Kaiser, and much respect goes out to those who have done all the work in the past, but there's always that glimmer of hope that someone will find a way to pack this into a working rom installable through RUU or HardSPL.
I have one last thing to say:
Gruessle, please do your homework BEFORE posting things like this. There are people out there who still depend on this phone to operate as it is their only phone. I Personally cannot afford to go spend $100-200 on a replacement phone if this one goes down (thats why I have 2 of them). If you post something that does not work on the platform that you say it will, please correct it or move it to the proper forum.
Click to expand...
Click to collapse
1) The kernel doesn't care where you place the files. Right now I use a debian system with Ferora and Gentoo in a chroot. Both work fine with the Debian kernel.
In other words, if you have a kernel that works for you then use that it should work with the rest of the installation.
2) I don't get what you mean with files are "split up into many files", I am just guessing but you must be extracting it wrong. Maybe it's a windows thing, I haven't used windows in 15 years so I wouldn't be able to help you with that.
3) I have included everything you need to duplicate what I got, which works for me, and it appears to work for others too. Now i don't use that phone much, and there might be bugs I am unaware of, but don't tell me it doesn't work at all, just because you can't get it to work.
barmalini said:
Gruessle, thanks for your efforts! I want to try your rom but being a noob waiting for more comprehensive list of known errors before flashing it to my kaiser.
Click to expand...
Click to collapse
barmalini, it appears that a few people have trouble installing the Kernel, but the ROM seams to work for everybody as far as I can tell.
According to my server records the files have been downloaded over 200 times and I have yet to hear a complain about the ROM.
So I would say try to install the Kernel, but if you can't still use the ROM with a Kernel that works for you.
If you have trouble installing from windows you can also try a live CD from debian or knoppix. I installed everything from a Debian system. (Knoppix is based on Debian)
If you don't know what a live CD is then go here for info:
http://wiki.debian.org/LiveCD
PoXFreak said:
Installed HardSPL 3.34 and a WinMo 6.1 rom (custom) to see whats wrong. Installed L1q1d's kernel and goes right in like it should.
Checked .NBH with NBHCreator and only found 1 thing wrong: kernel set to Eclair instead of Froyo. Changed to Froyo and saved, attempted reflash and still won't go in...
;(Losted);
Click to expand...
Click to collapse
PoXFreak,
you are not the only one having trouble, installing the ROM it appears.
I am wondering, are you also using Microsoft Windows to install the ROM?
If so can you try again with Linux, because it worked fine for me.
If you don't have Linux you can use a Live CD
Also if you can't get it to work, try the ROM with a Kernel that works for you.
Please report, I will check back.

[minnow for whale]USB Video Out Dev&Dig (Status:success)

We all remember at the MIX10 Joe Belfiore projects his phone onto the big screen. Even on the recent XBOX show he did that again.
http://www.youtube.com/watch?v=9IA28wRWAI8
http://www.youtube.com/watch?v=uCDXaJh4bwE
this kind of video out is through micro-usb, normal type one. You can find Joe is using a Lumia 800 in his hand in the XBOX video.
I asked him through twitter and received an answer of "Special Software build".
I did some research and dig into the register keys. Found something.
This is a special driver that only shared inside the MS and normally won't be out anytime soon.
...
(Deleted because they are no longer of any means)
...
----Update on 2012.Feb 9 China Time----
marsrogers said:
Big Step Forward, since the DFT Rom released, the exe can be run in WP7.
One thing I need now is if someone can build an app for me, which calls the changeusbprofile.exe under /windows
Things here is I'm using the Opera mini launcher to call it, but the path is under /application, not under /Windows, and the result is my computer can not detect the phone when the phone reboots. I think this may relates to the path I call.
I'm not a typical tech-man, so I need help here. Thanks!
Click to expand...
Click to collapse
----Update on 2012.Feb 9 23:00 China Shanghai Time----
Today I really thank @GoodDayToDie and @ultrashot for helping so many.
@ultrashot sent me a xap app that does the job, calling the changusbprofile.exe in Windows folder. Although result is the same with yesterday, but now I am more sure that we are one more step closer to our destination. I'll wait my new micro usb cables to arrive and then I'll make a second try. Thank you again!!! Can't reach here without you kind people~~~
----Update on 2012.Feb 10 19:22 China Shanghai Time----
I removed the attachments because the project is now on special stage. I will put them back after the feature works, or after I can't make it work. Either way, I will put them back~~~Don't worry.
----Update on 2012.Feb 12 15:22 China Shanghai Time----
Complete failure....
New cable arrived and still my computer can't recognize the phone in usb video out mode...I changed a computer and till the same...
Will think about next steps...if I can't make figure it out next week, I shall put everything at present stage onto here.
----Update on 2012.Feb 14 10:22 China Shanghai Time----
Think it over, and think there is still a hill in front of us. The changeusbprofile.exe seems just to be a toggle, like a shortcut. But the real port of usb video out hasn't been enabled. On my samsung focus, I checked the *#7284# in Diagnosis Mode before and after I ran the changeusbprofile. The thing changes from Zun to Tethering, while it's not the real tethering mode. I think the changeusbprofile is just doing a job like changing usb mode from zune to tethering or to Diag mode. So that's to say, we haven't really seen the iceberg yet. I'll keep finding and hoping that anyone can get any help on this. This may requires me to dig some post in Windows Mobile age, since some parts between the two system are same.
And I contacted the kind secret person, and get the news that the usb cable doesn't really matters. Any short cables should serve the job. So our attention should move back onto the phone again.
----Update on 2012.Feb 15 15:13 China Shanghai Time----
I figured it out~The changeusbprofile changes the value in Registry Local_Machine/Drivers/USB/FunctionDrivers, DefaultClientDriver=CompositeFn to UFN_VIDSTREAM_CLASS. Every value change here points to a folder in FunctionDrivers.
in Samsung Focus, it is like below:
/CompositeFn;
/CompositeFn_QCOM;
/CompositeFn_SAMSUNG;(This is the one when we choose Diag Mode in Diagnosis App *#7284#)
/MtpClientDrvUsb;
/Samsung_USBSER_Modemlink;
/Serial_Class;
/Serial_Class_Diag_Qcom;
/Serial_Class_Nmea_Qcom;
/Serial_Class_Trace_Qcom;
/USBSER_Class;
/USBSER_Modemlink_Qcom;
There is no UFN_VIDSTREAM_CLASS folder here, so that explains why the changeusbprofile works well while it is no use at all...
Next step, I will try looking for the Setting in Asus E600, if I can find someone who has this device. Maybe Samsung Taylor will do the same.
If you can help, don't hesitate~~
----Update on 2012.Mar 3 15:13 China Shanghai Time----
marsrogers said:
Updated some info
I looked into the Key name, UFN_VIDSTREAM_CLASS, which is very unique way to name.
This belongs to a USB function Driver, and the only thing I saw similar is a UFN_PRINTER_CLASS, which is in Wince 6.0
http://msdn.microsoft.com/en-us/library/ee483856(v=winembedded.60).aspx
And you may check this
http://msdn.microsoft.com/en-us/library/ee485691(v=winembedded.60).aspx
So I'm still waiting for somebody who can offer any help on this. I talked with Mr. Yang Zhongke, who invented RecX prototype, fiinix optimized that, but not the inventor.
His way is not quite efficient and seems can't go further. But he will do some work for this in a foreseeable future.
Any one has a Asus E600, plz contact me, will keep your name secret.
Thanks!~
Click to expand...
Click to collapse
----Update on 2012.Mar 6 1:02 China Shanghai Time----
Project suspended, cuz according to a source, WP8 will have Remote desktop support.
"The ability to take screenshots (via Remote Desktop, no less) will be a feature of Windows Phone 8. I don't see anything changing before that."
Click to expand...
Click to collapse
"Only that you will be able to remote desktop into the Phone, which should allow you to create videos and/or screenshots from a PC."
Click to expand...
Click to collapse
The source is quite trustful, and I have no reason to doubt that.
So just be patient, and it will come. No need for this project to keep going.
At last, use my words in the email I talked with the source.
Me:Really puzzled why MS doesn't release such a cool and convenient feature. Haven't they realized that when people use this feature, they are promoting WP7 for free...(Actually I've promoted in this way for Android as a "side effect" in the company I work in for three months and as a result more than 20 Samsung Galaxy SII were added during this period. Google and Samsung should thank me...)
Click to expand...
Click to collapse
---Update on 2012.August 17 14:21 China Shanghai Time---
A very kind man has sent me the 7003 LG Panther ROM, which has the necessary file, and we successfully got them out. But I just lost my sell phone, so it may take some time to buy a new WP7 Samsung focus. Maybe next week. Very close to the final line. God bless us. Cheers.
Click to expand...
Click to collapse
Good luck!~
--Update on 2012.August 20 22:37 China Shanghai Time--
I tried to make it work while it still failed. The computer recognised my cellphone as WM7VIDSTREAM while the PC side app still does n't work.
I think this could be related to that the PC side app is for mango and the cellphone side is grabbed from 7003. I uploaded the VSD folder which contains what I think are the everything we need for now.
If anyone wants to build an rom, now it's the time.
Click to expand...
Click to collapse
--Update on 2012.August 23 17:42 China Shanghai Time--
One friend, who you will know someday later, gave me a home-make cab which includes the pkg file from Microsoft. Right now it is not for public for now. But it is successful.
Although I started this project, but as it always be, not a technique project but a sociology one. So there are many things and many people's benefit to consider. So just wait for some time, it is there when it is there.
For technique part, the pkg file includes as same as the VSD.rar in the attachment.
Cheers
Click to expand...
Click to collapse
--Update on 2012.August 28 19:43 China Shanghai Time--
Check here, you have what you want. http://forum.xda-developers.com/showthread.php?t=1856509
This is a long story, and finally it ended beautifully.
"Always be closing"--Glengarry Glen Ross (1992)
To me? Yeah, this project closed.
Regards,
marsrogers
Click to expand...
Click to collapse
Well, I can tell you a little about the thing you found (good investigation, by the way!)
First off, that's a module - it's kind of like a file (and shows up in the filesystem) but is baked into the ROM and can't be opened, much less modified, like a normal file.
There are tools that are supposed to be able to re-assemble modules, such as recmod. I haven't been able to get them to work, but maybe I'm just doing it wrong. In theory, it should be possible to create a "normal" DLL out of the components of a module.
The next trick is getting that rebuilt DLL onto the phone. This can be done pretty easily on Samsung, and is possible on interop-unlocked HTC, but on LG/Toshiba/Fujitsu/Dell/Nokia we don't currently have a way.
After that, you'll need to "install" the driver. Now, there's a registry entry for doing this. The problem is, I only know that the entry is required - I don't know if it's sufficient, or if there's also a database or something that must be updated. In any case, any phone where we can put a file into the Windows folder, we can also do registry editing.
Then there's the thing of actually getting the UI for this feature (the Settings "app" to control it). It's vaguely possible that the retail ROMs include it, but this is doubtful, so you'll probably need to pull it out of that old ROM. It's probably an EXE, so it's unlokely you can make a XAP for it - instead, you'll need to install it into the phone directly, including putting in the registry entried to launch it (this is a guess, I've never tried).
It's worth noting here that it's probably *WAY* easier to just pull that feature out of your old ROM and bake it into a custom ROM. This should be pretty straightforward, however, then it's only useful on custom ROMs, which in turn are only possible on HTC phones (right now).
GoodDayToDie said:
Well, I can tell you a little about the thing you found (good investigation, by the way!)
First off, that's a module - it's kind of like a file ...
Click to expand...
Click to collapse
Thanks for your reply. I did something with the recmod, but the dll it packed is only 1kb, apparently it's not useful. I guess it is because there is no imageinfo.bin inside the dll folder. I used some tools recommended by Da_G who started to try modding WP7 on the first day. Like nbsplit.exe to creat a IMGFS.bin, and use xidump to dump it. Just like what they have done before, I got the dll folders as same as I got at the beginning.
You may be right for the part that it's rather easier to build a new rom. There are tools to repack the whole IMGFS from files while I didn't find any good ways to pack a specific folder.
May ask more people all over the world (thx to the internet) cuz I just moved from android. In android, I use cygwin to pack the Odin Tar files, but it's totally different of course.
Anyway, doing this research is just for fun~ All is because MS is moving too slow...not to mention the NFC function I already have for a year on my Nexus S~~
Thank U again!~
This would be awesome good luck
Really a good find! Found that reg entry some time ago but I didn't care about it...Now that you bring up that thing again I also think that this could be very useful (even if you want it just for fun and not for business purposes). But note that the DLL file doesn't have to be in the /windows folder. It could be somewhere different, too.
@-WP7User-: That's an interesting idea, and might enable this to work on LG phones (where we have registry but not filesystem control). The registry value that speicies the path to the driver binary only ever gives the file name (example:
[HKLM\Drivers\Builtin\HTCFileUtility]
Dll="HTCFileUtility.dll")
However, it might work to specify a full path instead of just a relative one (relative to the \Windows folder, one must assume, since that's where the files in question are located).
However, there's still the issue of actually getting the phone to load the driver correctly. Just adding or editing the registry value for Drivers\Builtin didn't work for me - it did something (the driver stopped working when I chancged the value for an existing driver) - I wasn't able to make a user-added DLL work (even a different version of an official driver).
any news on this?
The old Recmod doesn't work on WP7 files. I believe there is a patched version for WP7 floating around XDA somewhere. Have to check my files, could of swore I downloaded it once.
EDIT: Here you go.
I have get the source code for creating the dcTNONE_ANALOGTV.dll, they are .c file and .def file.
My Problem is I don't know how to build them.
And I have got the changeusbmode.exe and the xml file with it. Figuring an idea to put them in.
marsrogers said:
I have get the source code for creating the dcTNONE_ANALOGTV.dll, they are .c file and .def file.
My Problem is I don't know how to build them.
And I have got the changeusbmode.exe and the xml file with it. Figuring an idea to put them in.
Click to expand...
Click to collapse
Download the FixRecMod.exe above I posted. Drag the dctNONE_analogtv.dll folder with the "s000 s001 s002 s003 s004" files in it over the exe. Now you'll find the actual DLL file inside the folder. Any problems, just upload the folder & I'll do it for you.
drkfngthdragnlrd said:
Download the FixRecMod.exe above I posted. Drag the dctNONE_analogtv.dll folder with the "s000 s001 s002 s003 s004" files in it over the exe. Now you'll find the actual DLL file inside the folder. Any problems, just upload the folder & I'll do it for you.
Click to expand...
Click to collapse
I have made the dll successfully. But when I put the dll into the /Windows folder in my Samsung Focus, nothing happened even after a reboot.
And another interesting thing is in WP7 Root Tools, when exploring the /Windows folder, all single file has a "ROM Module" or "ROM File" written blew, but the files I moved in has nothing written under it.
I tried to check the usb mode in diagnosis *#7248#, still there are three options to choose, nothing new.
I personally don't see the future of this project for now.
However, You have done a lot to help, it's very kind of you, thank you so much!
marsrogers said:
I have made the dll successfully. But when I put the dll into the /Windows folder in my Samsung Focus, nothing happened even after a reboot.
And another interesting thing is in WP7 Root Tools, when exploring the /Windows folder, all single file has a "ROM Module" or "ROM File" written blew, but the files I moved in has nothing written under it.
I tried to check the usb mode in diagnosis *#7248#, still there are three options to choose, nothing new.
I personally don't see the future of this project for now.
However, You have done a lot to help, it's very kind of you, thank you so much!
Click to expand...
Click to collapse
It wouldn't have ROM FILE/MODULE under it as it wasn't cooked in. You probably need some registry for it to work. Also, try opening the DLL in PEexplorer & checking to see it it has a cert attached.
Example of a DLL/EXE with a cert;
Gonna cook it into my rom and try it out...Do you have an idea which reg entry it could need?
I think of something for the settings page. Because if you haven't got a settings page for it, how can you activate it?
And maybe another entry which points it to the DLL file...?
-WP7User- said:
Gonna cook it into my rom and try it out...Do you have an idea which reg entry it could need?
I think of something for the settings page. Because if you haven't got a settings page for it, how can you activate it?
And maybe another entry which points it to the DLL file...?
Click to expand...
Click to collapse
Next weekend I may upload the dcTNONE_ANALOGTV.dll folder which I found in the leaked ROM for HTC Surround even before the WP7 was officially to public, the source code which is .c and .def for it, which is to remove some limits for QSD8250 CPU, and the changeusbprofile.exe and changeusbprofile.xml from Asus E600 (the only dev phone has the display mirror feather in 7720 for now)someone Mr X, who I am very grateful to gave me.
I ain't major in this level of computing techs, so I think in order to make the project alive, it's better to share what I have to those who has the ability to do it. Let them holding in my hand is a great waste at present stage.
The QSD8250 is a very old cpu, so there should be no problem with NDA.
P.S
There should be a manual installed usb driver on PC and a client application on PC but I don't have them right now. If you have friends or friend's friend who is a dev, holding a e600 dev phone, try ask them to share something, appreciated.
drkfngthdragnlrd said:
It wouldn't have ROM FILE/MODULE under it as it wasn't cooked in. You probably need some registry for it to work. Also, try opening the DLL in PEexplorer & checking to see it it has a cert attached.
Example of a DLL/EXE with a cert;
http://i105.photobucket.com/albums/m240/drkfngthdragnlrd/Untitled-31.png
Click to expand...
Click to collapse
I've uploaded all my files so you can make the check yourself.
After all I'm major in management not IT techniques so I don't want to pull the path down.
Thank You for the help you offered!~~~
Thanks for uploading your files. But it seems like I can't find the reg key...
There isn't a single reg entry which points to the uploaded .dll. At least not in the official Mango Update for the HD7.
But if you post the whole entry, I could try to cook the .dll into my rom and see what happens.
-WP7User- said:
Thanks for uploading your files. But it seems like I can't find the reg key...
There isn't a single reg entry which points to the uploaded .dll. At least not in the official Mango Update for the HD7.
But if you post the whole entry, I could try to cook the .dll into my rom and see what happens.
Click to expand...
Click to collapse
has this registry something to do With that ? :
Local Machine\Drivers\Display\TV\
PanelDLL=string:"dcTNONE_ANALOGTV.dll"
-WP7User- said:
Thanks for uploading your files. But it seems like I can't find the reg key...
There isn't a single reg entry which points to the uploaded .dll. At least not in the official Mango Update for the HD7.
But if you post the whole entry, I could try to cook the .dll into my rom and see what happens.
Click to expand...
Click to collapse
Just like @tessut posted. It's it. And I think you'd better try to build the dcTNONE_ANALOGTV.dll yourself from the source, it should be more reliable than using fixedRecmod. I can't do that cuz there seems to need many head files that do not exist in computer even I have vs2010...
Sent from my SGH-i937 using XDA Windows Phone 7 App
Okay, if someone wants to try that, too: The exact reg key (just copy and paste) is
[HKEY_LOCAL_MACHINE\Drivers\Display\TV]
"PanelDLL"=string:"dcTNONE_ANALOGTV.dll"
Didn't flash the rom on my device yet, but that's soon going to happen
The dctNONE_analogtv.dll is in the windows folder, the changeusbprofile.exe and .xml are in there, too. I hope it works!
EDIT: Didn't work at all...The ChangeUSBProfile.exe didn't get installed (although I'm 100% sure that it is there and of course in the right folder). Wasn't there a license xml around or something? Because normally a Windows Phone 7 App needs a license file to get installed when starting the phone for the first time. Don't know if this applies to .exe files though.
Has someone got an idea?
-WP7User- said:
EDIT: Didn't work at all...The ChangeUSBProfile.exe didn't get installed (although I'm 100% sure that it is there and of course in the right folder). Wasn't there a license xml around or something? Because normally a Windows Phone 7 App needs a license file to get installed when starting the phone for the first time. Don't know if this applies to .exe files though.
Has someone got an idea?
Click to expand...
Click to collapse
Thanks for the work! Is it possible if we extract the official .cab update file to get a licence and patch it to the exe?
I used a PE Explorer to open the changusbprofile.exe and found a license called"Windows Mobile TCB signing cert" in it.
Another thing is I used a way to open .exe in IE (use IE in WP7 to open this thread and download the usbvideoout.zip and you can have the chance to open changeusbprofile.exe directly) but it failed in Mango. Maybe we should try this in 7004 because this is really an old file. Or we should find a .cab file that contains a exe file in it and this .cab must be announced after mango update.

[DECOMPILE] Bootloader Unlocker

Hey,
since im one of the few people that cant get OTAs or unlock bootloader I decided to decompile the unlock apk.
I used dex2jar.
So I now have some Jasmin code (which look to me like assembler) of which I don't understand most. Though looking through the code for things i do understand I found that in "com/asus/unlock/s.j" it says:
Code:
L0:
new java/io/FileOutputStream
dup
ldc "/dev/block/mmcblk0p3"
invokespecial java/io/FileOutputStream/<init>(Ljava/lang/String;)V
astore 10
L1:
aload 10
aload 3
invokevirtual java/io/FileOutputStream/write([B)V
new java/io/FileOutputStream
dup
ldc "/dev/block/mmcblk0p4"
invokespecial java/io/FileOutputStream/<init>(Ljava/lang/String;)V
astore 9
which looks to me like its writing raw data from mmcblk0p3 to mmcblk0p4...
So I was wondering 2 things:
1. does anyone know what is on mmcblk0p3?
and 2. is there someone on this forum who understands Jasmin code better than me and could look at the file?
PS: i attached the Jasmin code to this post if thats against the forum rules please take it down.
EDIT:
ok jsut tryed to dd mmcblk0p3 to mmcblk0p4... nothing happens
Obviously code shows it writes to blk0p3 and blk0p4 some magic (I guess there's a hash done on serial number, and passed to bootloader).
Once rebooting, the bootloader probably checks this magic, and proceed to unlock if the magic is valid (hence the "Unlock Check Failed" some people got).
Two things to do to make it work:
- Know what is written, how to calculate it
- Know where exactly it is written in p3 and p4
I am here to learn.
This post is more suitable for Q&A. This section is for development not for questions of development.
Please have your post moved to the correct location. Thank you
tomween1 said:
This post is more suitable for Q&A. This section is for development not for questions of development.
Please have your post moved to the correct location. Thank you
Click to expand...
Click to collapse
how is this not development?
I'm trying to hack/mod the unlocker apk to unlock all devices... sure its not ready yet but i thought the dev forums are for developers (and wanna be devs - like me) to talk about how to solve problems.
I think its OK on development too. Im asking for xplod/nebkat help to see if we can go further on this.
BierLiebHaber said:
how is this not development?
I'm trying to hack/mod the unlocker apk to unlock all devices... sure its not ready yet but i thought the dev forums are for developers (and wanna be devs - like me) to talk about how to solve problems.
Click to expand...
Click to collapse
I don't see a problem with it, but I'm assuming the person who does was referencing the fact that in many device forums (especially ones with large numbers of users) the rule for the android development section is "if you didn't make it, it doesn't belong here." Which isn't a bad idea considering there isn't a dedicated roms or tweaks section.
TXKSSnapper said:
I don't see a problem with it, but I'm assuming the person who does was referencing the fact that in many device forums (especially ones with large numbers of users) the rule for the android development section is "if you didn't make it, it doesn't belong here." Which isn't a bad idea considering there isn't a dedicated roms or tweaks section.
Click to expand...
Click to collapse
Yes sir
Here are the decompiled java code zip files created with dex2jar and then jad and jd-gui. They're not perfect and not everything could be decompiled, but it should make the program a lot easier to read
hmm after looking at the code for ages and trying to recompile it i always get a "wrong sinature" on the transformer (yes i did sign it)... i dont know and cant/wont work on it anymore since i got the ota's today at 3am and was able to unlock the bootloader
so i guess its a waiting game for anyone who cant get ota's/unlock
BierLiebHaber said:
hmm after looking at the code for ages and trying to recompile it i always get a "wrong sinature" on the transformer (yes i did sign it)... i dont know and cant/wont work on it anymore since i got the ota's today at 3am and was able to unlock the bootloader
so i guess its a waiting game for anyone who cant get ota's/unlock
Click to expand...
Click to collapse
It won't work by compiling it as-is since the obfuscated/undecompilable bytecode resulted as comments in the code (which as it turned out is the part we actually need).
You get "Wrong signature" when installing the app? You probably miscompiled it (or didn't sign it properly). Anyway, as I said above, it won't work as-is.
XpLoDWilD said:
It won't work by compiling it as-is since the obfuscated/undecompilable bytecode resulted as comments in the code (which as it turned out is the part we actually need).
You get "Wrong signature" when installing the app? You probably miscompiled it (or didn't sign it properly). Anyway, as I said above, it won't work as-is.
Click to expand...
Click to collapse
I'm not sure if you're referring to the Java code or the smali code. If you're referring to the latter, I was able to decompile the unlock tool, recompile it, and sign it and it ran in the Android SDK emulator (obviously, with no effect though)
XpLoDWilD said:
It won't work by compiling it as-is since the obfuscated/undecompilable bytecode resulted as comments in the code (which as it turned out is the part we actually need).
You get "Wrong signature" when installing the app? You probably miscompiled it (or didn't sign it properly). Anyway, as I said above, it won't work as-is.
Click to expand...
Click to collapse
i compiled the jasmin code so there were no comments (since it was all byte code)
and i guess i did sign it wrong but i used SignApk (which works for all the cwm zips if created) maybe i have to create/use a special key to sign it?
edit: also i didn't get "wrong signature" when installing i only got it when i tried to install it over the existing install (if i tried to install after factory reset it only said "The app was not installed" )
this apk need to be signed with the same key as the system, test signing it will not
work.
it also submits the device serial number to ASUS looks like
Code:
https://mdm.asus.com/DMServer/DeviceState
the unlock code is probably in the server response.
untermensch said:
this apk need to be signed with the same key as the system, test signing it will not
work.
it also submits the device serial number to ASUS looks like
Code:
https://mdm.asus.com/DMServer/DeviceState
the unlock code is probably in the server response.
Click to expand...
Click to collapse
I don't know if running it on a real tablet is any different from the emulator, but why wouldn't a test key work?
I was able to run the (modified) tool in the emulator by doing this:
1. Extract apk with apktool
Code:
apktool decode UnLock_Device_App_V7.apk
2. Open res/raw/keystore.bks with Portcecle and delete the certificate.
3. Modify smali code
4. Rebuild apk with apktool
Code:
apktool build UnLock_Device_App_V7/ modified.apk
5. Create signing key
[code]keytool -genkey -v -keystore testkey.keystore -alias testalias -keyalg RSA -keysize 2048 -validity 10000
6. Sign apk
Code:
jarsigner -verbose -sigalg MD5withRSA -digestalg SHA1 -keystore testkey.keystore modified.apk testalias
---------- Post added at 04:47 PM ---------- Previous post was at 04:43 PM ----------
Does anyone know how to skip the EULA portion of the tool? The checkbox doesn't show up in the emulator. I don't have an ASUS tablet yet, but I do have have an environment ready to sniff the traffic between the tool and the ASUS server.
I'm thinking of replacing /sys/devices/platform/cardhu_misc/cardhu_chipid in i.smali with different text files and seeing the response from the ASUS server.
Android wont allow the requested permissions, unless the apk is signed with the ASUS
key or you sign the rest of the ROM with the test key, unless something has changed
since froyo.
untermensch said:
Android wont allow the requested permissions, unless the apk is signed with the ASUS
key or you sign the rest of the ROM with the test key, unless something has changed
since froyo.
Click to expand...
Click to collapse
Ahh, I see. I didn't know that.
you may get around that by odex-ing your changed code and installing
along side the unmodified APK, it has been at least a year since I hacked Android
so I don't quite remember what worked and what didn't work. I seem to
remember that APK's installed in /system/app were trusted regardless of the signing
here is my mmcblk0p3 post unlock
Tracing the code with random (but expected length values), I'm getting URLs, like:
https://mdm.asus.com/DMServer/Devic...H=RkNGOTRFNTBGNzI1N0M5NTE2RkYyNTgxNjcxMUQyMkI
there are also 2 variables
&ACTION=...
&STATUS=...
that I can't figure out. No matter what I send to the ASUS server, I always get the "104" reply.
---------- Post added at 07:05 PM ---------- Previous post was at 07:05 PM ----------
untermensch said:
here is my mmcblk0p3 post unlock
Click to expand...
Click to collapse
Thanks! I'll see what I can find in it.
EDIT: The hexdump of the partition is attached (EDIT: removed). I see a whole bunch of \x00 bytes and \xFF bytes and some sort of ASCII table. The interesting stuff seems to be at offset E000. I'm not sure what that is for. I'd need to compare it to an mmcblk0p3 partition from a TF300T that's not unlocked.
EDIT2: Would you also mind posting your mmcblk0p4 partition too?

Categories

Resources