[Utility] Qualcomm MBN Bootstage file loader for IDA Pro, builds and support - Galaxy S 4 i9505 Original Android Development

This is a small contribution by me to XDAdevs after a long time. It's an IDA Pro 32bit file loader plugin that loads files such-as sbl1.mbn, sbl2,mbn, sbl3.mbn, aboot.mbn(LK appsboot eg), tz.mbn(TrustZone firmware) and rpm.mbn
Just drag and drop the attached .ldw file into your %idadir%/loaders folder and open your file.
Alpha specific usage Before clicking OK in IDA click "Processor Options"->"Edit ARM Architecture options"-> Select ARMv7A&R. -> OK three times.
Current version: 0.1a
Alpha limitations/bugs:
Does not mark X.509 area, will be added.
Does not set ARM architecture to ARMv7-A&R, will be added.
Does not deterministically identify file type, will be fixed.
Enjoy. Versions for other IDA Pro versions are delivered on request as IDA Pro 6.1 is *ahem* the most common around these days.....
Project will be OPEN SOURCE when at least these 3 issues are resolved.
NOTE to moderators, I have self-reported my thread so it is moved to a more appropriate place, if applicable.

hmm, can you explain a little less technically what this thing is doing ?

saphirrot said:
hmm, can you explain a little less technically what this thing is doing ?
Click to expand...
Click to collapse
This is for hackers mostly. For those, who know what IDA Pro is.

saphirrot said:
hmm, can you explain a little less technically what this thing is doing ?
Click to expand...
Click to collapse
sorg said:
This is for hackers mostly. For those, who know what IDA Pro is.
Click to expand...
Click to collapse
it makes it easier for you to reverse
engineer the bootloader files.
Sent from my GT-I9505 using Tapatalk

nice
still needs some work, it overwrites all the other loaders not sure why.It thinks all files are ARM files.but good for an Alpha rel.

zadow said:
nice
still needs some work, it overwrites all the other loaders not sure why.I thinks all files are ARM files.but good for an Alpha rel.
Click to expand...
Click to collapse
Yes, that's what I meant by "deterministic file format identification". Since mbn files don't have a magic I am implementing different way of identification. Thank you for the feedback.

OMG thank you! Awesome AWESOME contribution!!!

MemoryController said:
Yes, that's what I meant by "deterministic file format identification". Since mbn files don't have a magic I am implementing different way of identification. Thank you for the feedback.
Click to expand...
Click to collapse
I am trying to decode my aboot.mbn file and I installed the free version of IDAPro and did as you said. Didn't work.

MemoryController said:
This is a small contribution by me to XDAdevs after a long time. It's an IDA Pro 32bit file loader plugin that loads files such-as sbl1.mbn, sbl2,mbn, sbl3.mbn, aboot.mbn(LK appsboot eg), tz.mbn(TrustZone firmware) and rpm.mbn
Click to expand...
Click to collapse
Thanks for this, I wondered if you'd consider open sourcing it at this point, or releasing a linux version of the loader.
I'm on Ida 6.6 - linux, and would like to utilize and possibly enhance it.
cheers

wow
Amazinggg !!
thank you very much

I can solve all 3 of the issues I believe. As I have all those solved using a python loader I made. But obviously it would be different in C++.
Sbl1 has a magic number and each partition has a specific flash code word in its header.
You can use sbl1's unique header to deterministically load bootloaders, for example if found not to be sbl1s magic number then parse the flash code word (aka image_id) number from the header and load the specific type of bootloader based on that.
Also you set the type to meta-arm, I believe this is already a function defined in idc coding guide.
You can use the image hdr to parse the certs as well using the relative offsets

Great job!
Thank you for making this helpfull script.

MemoryController said:
Does not mark X.509 area, will be added.
Does not set ARM architecture to ARMv7-A&R, will be added.
Does not deterministically identify file type, will be fixed.
...
Project will be OPEN SOURCE when at least these 3 issues are resolved.
Click to expand...
Click to collapse
Thanks for your contribution, your script is super helpful.
Have you had any luck resolving those 3 issues? Would you mind releasing the source even if you haven't? We're having some troubles with newer aboot images not being fully processed.
http://forum.xda-developers.com/showpost.php?p=64650482&postcount=5

Related

[DUMP] /system

If you already have this phone in hand, could you do a favor and drop me some files from /system, namely the video player and any other files/apks possible... RootExplorer might do the job, no root required (at least not on my phone).
Trying to port some apps/drivers, but since i dont own this phone - its proving to be difficult =)
Thanks for the help!
EDIT: Thanks to jimbob343 for /system dump. Hopefully with no objections, here it is:
http://www.mediafire.com/?uinwwjl0jhn ([email protected])
http://www.mediafire.com/?wtlqnyg3mqm ([email protected])
Maybe vegas i897 apk dump is useful? since it also runs TW 3.0 afaik.
forum.xda-developers.com/showthread.php?t=689310
frifox said:
If you already have this phone in hand, could you do a favor and drop me some files from /system, namely the video player and any other files/apks possible... RootExplorer might do the job, no root required (at least not on my phone).
Trying to port some apps/drivers, but since i dont own this phone - its proving to be difficult =)
Thanks for the help!
Click to expand...
Click to collapse
I'll can do that as soon as possible, but i'll have to wait my phones to arrive...
Or maybe you can download the source...
frifox said:
If you already have this phone in hand, could you do a favor and drop me some files from /system, namely the video player and any other files/apks possible... RootExplorer might do the job, no root required (at least not on my phone).
Trying to port some apps/drivers, but since i dont own this phone - its proving to be difficult =)
Thanks for the help!
Click to expand...
Click to collapse
can you recommend a file explorer to use and what exactly do you want me to copy
frifox said:
If you already have this phone in hand, could you do a favor and drop me some files from /system, namely the video player and any other files/apks possible... RootExplorer might do the job, no root required (at least not on my phone).
Trying to port some apps/drivers, but since i dont own this phone - its proving to be difficult =)
Thanks for the help!
Click to expand...
Click to collapse
The full /system folder rars to 147 mb or I can send you the seperate apks which total 77mb if you still need them.
Ive sent you a PM with the links anyways.
jimbob343 said:
Ive sent you a PM with the links anyways.
Click to expand...
Click to collapse
Could you make those public?
why not upload to multiupload.com so we can use it all
Thanks to jimbob343 for /system dump. Hopefully that will be enough to dig up some drivers/apps
Hopefully with no objections, here's the dump (130MB):
http://www.mediafire.com/?uinwwjl0jhn
frifox said:
Thanks to jimbob343 for /system dump. Hopefully that will be enough to dig up some drivers/apps
Hopefully with no objections, here's the dump (130MB):
http://www.mediafire.com/?uinwwjl0jhn
Click to expand...
Click to collapse
Thanks a lot!
Awesome! Thanks a lot. Waiting for a deodexed one now .
Deodexed framework: http://ul.to/6ocdh7
rolle3k said:
Deodexed framework: http://ul.to/6ocdh7
Click to expand...
Click to collapse
Deodexed? damn i'm so new to android.. thought i understood wm6.5 (rom building) pretty well.
I've downloaded it three times. Every time I received errors when I tried to unzip it using 7zip - error: Unsupported compression method.
Any suggestions?
shaneaus said:
I've downloaded it three times. Every time I received errors when I tried to unzip it using 7zip.
Any suggestions?
Click to expand...
Click to collapse
downloaded, extracted, no error... must be something on your side
What program are you using to open the file?
7z, probably same as you...
http://www.7-zip.org/
Well... This sucks...
I have downloaded it four times. I have tried WinRar and 7zip and both give the same error messages for all downloads: Unsupported compression method.
I downloaded the Framework and it opened up just fine.
Can someone post a separate d/l link for the dump? Maybe, on another service? Then I'll try again.
@frifox - thanks for your quick replies. Can't imagine what the issue is. MY IS provider has three data transfer rate plans and I'm on the third (second fastest of the four). And, it appeared to d/l pretty quick with no issues/interruptions.
might be good idea to try upgrading 7zip to the latest one... i used the max compression rate when packing the dump.
I'm using 4.65... Are you using the 9.15 beta?

Samsung firmware P1000XXJH3 for tablets

Firmware is for new tablet, on android 2.2, extracting system to view the beast.
http://samsung-firmware.webs.com/p1000.htm
I installed this on my sgs, the installation went fine, but it couldnt boot. All i got was a green screen... I looks like a normal pda.
qwas00 said:
I installed this on my sgs, the installation went fine, but it couldnt boot. All i got was a green screen... I looks like a normal pda.
Click to expand...
Click to collapse
I got some text flying in pretty high speed on my screen and nothing else.
Oh well was worth a try
It should be usable on SGS with some minor modifications like replacing the kernel (most likely). I'm experimenting with it as we speak (no promises)
<Obligatory what did you expect look + exasperated sigh here>
Well, would have been interesting if it worked.
Case_ said:
It should be usable on SGS with some minor modifications like replacing the kernel (most likely). I'm experimenting with it as we speak (no promises)
Click to expand...
Click to collapse
looking forward to it.
A new unified client with support of :
- yahoo
- msn
- icq
- email
- exchange
- gmail
Zinio reader for android, is a great ebook reader. Is available on ipad, mac and pc. Now on android. (www.zinio.com) nothing on the official site for availability on android
year !!
setenza01 ! i rely on you to make this firmware compatible on GS i9000
Case_ said:
It should be usable on SGS with some minor modifications like replacing the kernel (most likely). I'm experimenting with it as we speak (no promises)
Click to expand...
Click to collapse
I believe it's not that straight forward, need to take the driver into consideration.
setenza01 said:
A new unified client with support of :
- yahoo
- msn
- icq
- email
- exchange
- gmail
Zinio reader for android, is a great ebook reader. Is available on ipad, mac and pc. Now on android. (www.zinio.com) nothing on the official site for availability on android
Click to expand...
Click to collapse
Did you take the factoryfs.rfs file apart to get this knowledge? If so, how did you do that ?? ... (on a windows pc)
appelflap said:
Did you take the factoryfs.rfs file apart to get this knowledge? If so, how did you do that ?? ... (on a windows pc)
Click to expand...
Click to collapse
yes on factoryfs, no way on windows only on linux you can extract rfs
setenza01 said:
yes on factoryfs, no way on windows only on linux you can extract rfs
Click to expand...
Click to collapse
Ok, time to install linux on my PC
BTW, can you get you hands on the GPS files? It's a just a hunch, because there isn't nothing known yet about the GPS that's on the tab, but maybe it's the same one as on the Galaxy S.
Files that are interesting are:
From the directory system/etc:
gpsconf.etc and jupiter.xml
From the directory system/lib
libgps.so (and maybe other files containing the word gps, maybe libsecgps.so
From the directory system/bin/gpsd
glgps_samsungJupiter and the *.cer files
appelflap said:
Ok, time to install linux on my PC
BTW, can you get you hands on the GPS files? It's a just a hunch, because there isn't nothing known yet about the GPS that's on the tab, but maybe it's the same one as on the Galaxy S.
Files that are interesting are:
From the directory system/etc:
gpsconf.etc and jupiter.xml
From the directory system/lib
libgps.so (and maybe other files containing the word gps, maybe libsecgps.so
From the directory system/bin/gpsd
glgps_samsungJupiter and the *.cer files
Click to expand...
Click to collapse
Extracted the files you want here. You think if we replace files on Android 2.1 repair gps ?
setenza01 said:
Extracted the files you want here. You think if we replace files on Android 2.1 repair gps ?
Click to expand...
Click to collapse
Thanks!!
Don't know but I'm definitely going to try it. Case_ extracted the same files from the new Captivate fw rom, where they are working on a fix, and it did also work for the galaxy. (Of course this is a froyo rom, but anyway..)
I will report back.
Wow that would be great! but i don't think it is a software problem! but a driver/hardware related issue!
But that's just my point of view Great work anyways!
I´d be very grateful if you could upload the whole factoryfs (extracted)
appelflap said:
Thanks!!
Don't know but I'm definitely going to try it. Case_ extracted the same files from the new Captivate fw rom, where they are working on a fix, and it did also work for the galaxy. (Of course this is a froyo rom, but anyway..)
I will report back.
Click to expand...
Click to collapse
A no-go, the lib files are incompatible with the Galaxy. The Galaxy even doesn't boot anymore with these drivers. Thanks anyway, sentenza!
BackfireNL said:
Wow that would be great! but i don't think it is a software problem! but a driver/hardware related issue!
But that's just my point of view Great work anyways!
Click to expand...
Click to collapse
I don't know if you followed the latest discussion about the Captivate FW, but the weird thing is that the upperlimit of a maximum of 10 locked satellites was gone and the weird constraints was gone that there wasn't a lock possible on sats with a signal noise ratio < 20 . They did accomplished that only with a change of drivers.
But if all will be fixed in the end, is something we have to wait for.
@ appelflap
Did you try on 2.2 (JP3) or on 2.1?
Rickstur said:
@ appelflap
Did you try on 2.2 (JP3) or on 2.1?
Click to expand...
Click to collapse
On 2.1.. I'm now going to try it on JP3 ... BTW I'm trying also the new modem.bin from the tab fw on it and definitely going to try the kernel later on.

[WIP][XPOSED]Trying to find a Lollipop FIX

Hi guys, like you know xposed for Android 5 on our device break some system app like LGCover and LGWeather. This because the new Xposed use some binary built from the AOSP source that don't work with the above apks that contain an encrypted classes.dex ( AES128-CBC ).
Since decrypt that classes is quite impossible i started a different approach. So i looked inside the dalvik-cache where all the dex built by the compiler are stored.
Theese classes contains also the original classes.dex code.
example: /data/dalvik-cache/arm/[email protected] @....dex
Structure:
USELESS CODE
CLASSES.DEX ( that start with the magic dex.035 )
USELESS CODE
Header of the classes.dex
Offset.............Size...........Description
0x0................8................'Magic' value: "dex\n009\0"
0x8................4................Checksum
0xC...............20...............SHA-1 Signature
0x20..............4................Length of file in bytes ( in Little endian and hex value )
....
Getting that class is quite simple when you know how the dex header is formatted so i cut off the useless code and got the original classes.dex that can be decompiled with baksmali and used inside the apk.
Unfortunately this method doesn't work for the dex that were encrypted. Or at least, I'm missing the last step because there's something wrong with the code in this extrapolated class since the SHA1 signature appears to be wrong and consecutively also the Checksum are incorrect.
So, from my point of view we have 2 possible scenario:
1- the length of the classes that we can find in the header is wrong; ( most probable for me )
2- the code of the dex has been changed by the system.
Wish you can suggest me some ideas.
@suljo94 @P_Toti pls check this and tell me what you think. Tnx.
Skin1980 said:
methode 1
Click to expand...
Click to collapse
could you check if an system service is activated when the lgcover apk is called(to decrypt), if not the key might be saved in the app source code (might be obfuscated)
suljo94 said:
could you check if an system service is activated when the lgcover apk is called(to decrypt), if not the key might be saved in the app source code (might be obfuscated)
Click to expand...
Click to collapse
Yes probably the code is obfuscated... might try with Ida pro and a dedicated plugin
Sent from my SM-N910F using XDA Free mobile app
Skin1980 said:
Yes probably the code is obfuscated... might try with Ida pro and a dedicated plugin
Sent from my SM-N910F using XDA Free mobile app
Click to expand...
Click to collapse
I am sorry that I can't help(ffor now), this week is an vacation and I as a poor student have to work to pay off those expensive books
ontopic: @jcase said he would look into it in the other thread, maybe he found something intressting in the meanwhile
suljo94 said:
I am sorry that I can't help(ffor now), this week is an vacation and I as a poor student have to work to pay off those expensive books
ontopic: @jcase said he would look into it in the other thread, maybe he found something intressting in the meanwhile
Click to expand...
Click to collapse
Well... with @jcase all is possible !
Sent from my SM-N910F using XDA Free mobile app
Skin1980 said:
Well... with @jcase all is possible !
Sent from my SM-N910F using XDA Free mobile app
Click to expand...
Click to collapse
so I found a system service that gets called when the lgsmartcover app crashes to many times. the system restarts it together with lgcover. it is part of lgcover so I am hopping lg was so stupid to save the key in the same file as the encrypted container
suljo94 said:
I am sorry that I can't help(ffor now), this week is an vacation and I as a poor student have to work to pay off those expensive books
ontopic: @jcase said he would look into it in the other thread, maybe he found something intressting in the meanwhile
Click to expand...
Click to collapse
Skin1980 said:
Well... with @jcase all is possible !
Sent from my SM-N910F using XDA Free mobile app
Click to expand...
Click to collapse
Its just encrypted, easiest route is to snag from the cache and deodex as someone said above, if yall really need something to decrypt it ill look at again when i have time
jcase said:
Its just encrypted, easiest route is to snag from the cache and deodex as someone said above, if yall really need something to decrypt it ill look at again when i have time
Click to expand...
Click to collapse
Would be great... tnx a lot!
Sent from my SM-N910F using XDA Free mobile app
jcase said:
Its just encrypted, easiest route is to snag from the cache and deodex as someone said above, if yall really need something to decrypt it ill look at again when i have time
Click to expand...
Click to collapse
Could you tell us why the SHA1 signature is incorrect?
suljo94 said:
Could you tell us why the SHA1 signature is incorrect?
Click to expand...
Click to collapse
incorrect? Which sha1? in the siguatre, or in the dex header?
jcase said:
incorrect? Which sha1? in the siguatre, or in the dex header?
Click to expand...
Click to collapse
Dex header(see op)
suljo94 said:
Dex header(see op)
Click to expand...
Click to collapse
meh who cares, the sha1 doesnt matter, just fix the alder32 checksum, or correct them both.
suljo94 said:
Dex header(see op)
Click to expand...
Click to collapse
Probably the sha1 is added before the obfuscation method.
Sent from my SM-N910F using XDA Free mobile app
Skin1980 said:
Probably the sha1 is added before the obfuscation method.
Sent from my SM-N910F using XDA Free mobile app
Click to expand...
Click to collapse
did you salvage th whole classes.dex or just partially?
and is recalculating the sha1 and alder32 an option (if you salavaged it completely)
can we use dexguard for deobfuscation?
how did you open the file? I can't dex2jar it because it keeps saying that it isn't a dex file.
so many questions......
suljo94 said:
did you salvage th whole classes.dex or just partially?
and is recalculating the sha1 and alder32 an option (if you salavaged it completely)
can we use dexguard for deobfuscation?
how did you open the file? I can't dex2jar it because it keeps saying that it isn't a dex file.
so many questions......
Click to expand...
Click to collapse
try to look into the classes dex with an hex editor, it's encrypted and that's why you can't use tool like that on the original dex.
If you want play, this is the dex i extracted from the dalvik-cache of the LGweather apk:
https://mega.co.nz/#!DsRHQaBL!YInp8fsaRpzZ3dbHogbNytWZfzedF9Le_PndvnmhSQs
The software i tryed fail to decompile it but maybe you are more lucky
Skin1980 said:
try to look into the classes dex with an hex editor, it's encrypted and that's why you can't use tool like that on the original dex.
If you want play, this is the dex i extracted from the dalvik-cache of the LGweather apk:
https://mega.co.nz/#!DsRHQaBL!YInp8fsaRpzZ3dbHogbNytWZfzedF9Le_PndvnmhSQs
The software i tryed fail to decompile it but maybe you are more lucky
Click to expand...
Click to collapse
some surfing aroud caused me to find which file decrypts lgcover it is the libgalmond.so file
the colprit it contains some interesting code "adler inflation"
@jcase it has been 2 months and I tried a few things but since you know more about this could you please tell me how to get the correct adler32 checksum? maybe for lets say 1 of those cheap wines you like
suljo94 said:
some surfing aroud caused me to find which file decrypts lgcover it is the libgalmond.so file
the colprit it contains some interesting code "adler inflation"
@jcase it has been 2 months and I tried a few things but since you know more about this could you please tell me how to get the correct adler32 checksum? maybe for lets say 1 of those cheap wines you like
Click to expand...
Click to collapse
Tim Strazzere and I may be talking about it at qualcom next week, wait and see if our slides cover it.
jcase said:
Tim Strazzere and I may be talking about it at qualcom next week, wait and see if our slides cover it.
Click to expand...
Click to collapse
so I got the slides and I am starting to think that the problem could be that xposed links app_process32 to app_process32_xposed and that the shared library gets injected into the wrong file (app_process32)

[TOOL]SplashInjector[OP5]

SplashInjector​splash injector is a tool created by me based on the work done by @makers_mark . it is a basic command line interface but it gets the job done. it supports all oneplus devices so far except the oneplus x :crying: i can add support once someone gets me the logo.bin file from that device. The tool is pretty simple its based on the work here https://forum.xda-developers.com/oneplus-3/themes/mod-splash-screen-image-injector-t3441999 this is where i got this all from. i know it can be kinda hacky and only supports unix systems i think you can get it working by using git bash on windows. In its current state it can decode and encode all oneplus logo.bins (Including the OnePlus 5!) it can also pack flashable zips for you automatically. all you need to do is run the decode option edit the file you want in the output folder. Then you can run the encode command and it will pack it all back up. Then package it with the package command. Once again major credit to @makers_mark he did all the leg work. i just made it a little more friendly. lmk if there is any issues you find
Telegram: @ethanbanker if you need anything contact me here.
Now lets get to it
follow the instructions here located here
https://github.com/ethanbanker2428/SplashInjector
Updates:
1.52: Ok guys im not a windows expert...i barely use it so the tool does support windows now but it cant package files. it does give you all the tools and files you need to package one tho. you can use a tool such as this https://forum.xda-developers.com/android/software-hacking/tool-6-feb-android-flashable-zip-t3551772 this update also includes a completely revamped system. lmk about any bugs you find. for windows you need to install and use GIT bash. i also added a update function to easily update the tool. its simple but it works. heres my git again for you guys https://github.com/ethanbanker2428/SplashInjector
WARNING I AM NOT RESPONSIBLE FOR ANYTHING YOU DO. DO THIS AT YOUR OWN RISK
Excellent...... working great for OP5
Thanks
biohaz55 said:
Excellent...... working great for OP5
Thanks
Click to expand...
Click to collapse
Hi, I can't get it working on Windows. If I send you a PNG will you make me a zip?
Thanks! Here is the Windows binary and src for logoinjectorv1.52.
makers_mark said:
Thanks! Here is the Windows binary and src for logoinjectorv1.52.
Click to expand...
Click to collapse
thanks im gonna rebuild with the newest version and probably work on a windows version tonight :good:
Can you make a captain America one?
can u please make flashable zip i cannot get the method to flash . can u guide me please @bobglaus
freakzapster said:
can u please make flashable zip i cannot get the method to flash . can u guide me please @bobglaus
Click to expand...
Click to collapse
did u use option 3? package? that should make one after you edit the files
bobglaus said:
did u use option 3? package? that should make one after you edit the files
Click to expand...
Click to collapse
actually i dont know to edit files i am new to this thats why i am not understanding
freakzapster said:
actually i dont know to edit files i am new to this thats why i am not understanding
Click to expand...
Click to collapse
click the help option. i feel it explains it pretty well. to edit the png in the output folder use gimp or photoshop
Ok just an update windows support is finished and in the tool now. I'll push probably tomorrow it works and packs and unpacks fine just getting issues with packaging the zips. It corrupts them. Im gonna switch to 7zip and see if that works then I'll push
bobglaus said:
Ok just an update windows support is finished and in the tool now. I'll push probably tomorrow it works and packs and unpacks fine just getting issues with packaging the zips. It corrupts them. Im gonna switch to 7zip and see if that works then I'll push
Click to expand...
Click to collapse
Other option is to move the files to the output folder and ask the user to manually zip them, it's available on windows right click menu.
---------
I have a question, what's the BGR option for? I thought it was for op5 display but it only change the color of the pngs, so I switched it for RGB and now my logo looks good.
I share my mod, original was taken from CUSTOM BOOT LOGO PACK FOR OnePlus3.
badtzo said:
Other option is to move the files to the output folder and ask the user to manually zip them, it's available on windows right click menu.
---------
I have a question, what's the BGR option for? I thought it was for op5 display but it only change the color of the pngs, so I switched it for RGB and now my logo looks good.
I share my mod, original was taken from CUSTOM BOOT LOGO PACK FOR OnePlus3.
Click to expand...
Click to collapse
bgr does **** up the colors a bit or fixes it. its one of those things where you use it if you need it and you will know if you need it.
also update to anyone else that update will have to wait. im a perfectionist and im revamping the whole thing to alot cleaner code. windows should work tho and the oneplus x will be supported hopefully too
Update: Ok guys im not a windows expert...i barely use it so the tool does support windows now but it cant package files. it does give you all the tools and files you need to package one tho. you can use a tool such as this https://forum.xda-developers.com/android/software-hacking/tool-6-feb-android-flashable-zip-t3551772 this update also includes a completely revamped system. lmk about any bugs you find. for windows you need to install and use GIT bash. i also added a update function to easily update the tool. its simple but it works. heres my git again for you guys https://github.com/ethanbanker2428/SplashInjector
bobglaus said:
Update: Ok guys im not a windows expert...i barely use it so the tool does support windows now but it cant package files. it does give you all the tools and files you need to package one tho. you can use a tool such as this https://forum.xda-developers.com/android/software-hacking/tool-6-feb-android-flashable-zip-t3551772 this update also includes a completely revamped system. lmk about any bugs you find. for windows you need to install and use GIT bash. i also added a update function to easily update the tool. its simple but it works. heres my git again for you guys https://github.com/ethanbanker2428/SplashInjector
Click to expand...
Click to collapse
Hi, I created the zip but it won't flash in twrp. Is there a compression method to use? Using 7zip.
Bigs1985 said:
Hi, I created the zip but it won't flash in twrp. Is there a compression method to use? Using 7zip.
Click to expand...
Click to collapse
use the tool i linked in the post you qouted
bobglaus said:
use the tool i linked in the post you qouted
Click to expand...
Click to collapse
I thought it didn't package the zips correctly? Is that fixed?
Bigs1985 said:
I thought it didn't package the zips correctly? Is that fixed?
Click to expand...
Click to collapse
No this one https://forum.xda-developers.com/android/software-hacking/tool-6-feb-android-flashable-zip-t3551772
how can i pull LOGO.bin from my oneplus 5?
when i run:
adb shell dd if=/dev/block/sde17 of=/sdcard/partition/LOGO.bin
Click to expand...
Click to collapse
i get this error message:
dd: /dev/block/sde17: Permission denied
Click to expand...
Click to collapse
Please help
Thanks
spicemaster said:
how can i pull LOGO.bin from my oneplus 5?
when i run:
i get this error message:
Please help
Thanks
Click to expand...
Click to collapse
Of course you need root,The right command is
adb shell su -c dd if xxxx

[TOOL] [WINDOWS] Tissot Splash Maker (mod all 5 PNG's in splash.img)

Heya,
Here is a simple to use script to build splash.img from 5 PNG's. The 5 PNG's are:
Mi logo screen on locked bootloader
Fastboot image
Mi logo screen on unlocked bootloader
'System destroyed' image
'Please lock the bootloader' early splash.
Like the old script, there is still a size limit per splash. However there is an alternative mode or "hack" that lets you use a larger PNG for image #3, at the expense of rendering image #4 broken (and who cares about that one, right?).
Usage is simple - just download, replace the PNG's in "input" folder, and run the tool. If there are any errors it will say so, otherwise you will get a splash.img that you can flash in fastboot:
Code:
fastboot flash splash splash.img
The original input folder has all the stock images included.
Enjoy!
Download from GitHub (Press the green 'Clone or Download' button -> 'Download ZIP'.
AV Warning: Some security software might flag the EXE as suspicious. It's written in a language called AutoIt which is a common language for keyloggers and bots and stuff because it's super easy and awesome to do all kinds of stuff with it. Ignore it/exclude it, or you can compile the included .au3 source yourself if you don't trust it.
Bonus: pre-made splash IMG's included in repo. Flashable ZIP's attached, credits to @GokulNC for the ZIP template.
splash_rr.img - RR logo splash for seamless transition into RR boot animation
Thank you, you the man, could i ask you a linux version? if not no problem...
A Linux version would be great because I don't have any Windows device
Is it possible to completely skip the warning?
TioCareca said:
Thank you, you the man, could i ask you a linux version? if not no problem...
Click to expand...
Click to collapse
jigs4wkiller said:
A Linux version would be great because I don't have any Windows device
Click to expand...
Click to collapse
Impossible. Tool is written in AutoIt which is Windows-only. I hate Python lol. Of course anybody is free to rewrite a cross-plarform implementation, I just won't.
ProchyGaming said:
Is it possible to completely skip the warning?
Click to expand...
Click to collapse
No. Just replace it with the same image so you see no transition.
Even if you wipe splash partition, it doesn't make the boot any faster.
CosmicDan said:
No. Just replace it with the same image so you see no transition.
Even if you wipe splash partition, it doesn't make the boot any faster.
Click to expand...
Click to collapse
Ok, thanks for the info
@CosmicDan I don't have a window system. Could you make a splash image of OnePlus? You can take pngs of OnePlus 3. I hope its not much to ask.
CosmicDan said:
Impossible. Tool is written in AutoIt which is Windows-only. I hate Python lol. Of course anybody is free to rewrite a cross-plarform implementation, I just won't.
Click to expand...
Click to collapse
Ok thanks anyway and thank you for the tool...
brajesh.sharma87 said:
@CosmicDan I don't have a window system. Could you make a splash image of OnePlus? You can take pngs of OnePlus 3. I hope its not much to ask.
Click to expand...
Click to collapse
No lol. Other people with more time can make pre-made packs.
Someone volunteer please, I've got development to do.
I made this tool so people would NOT request special treatment from me. Try it in Wine or just get Windows in a VM like all serious people do or something, locking yourself to one OS is silly.
32 bit OS is non support?
CosmicDan said:
Impossible. Tool is written in AutoIt which is Windows-only. I hate Python lol. Of course anybody is free to rewrite a cross-plarform implementation, I just won't.
Click to expand...
Click to collapse
Maybe someone find a way to get it working with wine
jigs4wkiller said:
Maybe someone find a way to get it working with wine
Click to expand...
Click to collapse
well it works in wine, just freeze converting 2 image...
Edit: it do not freeze, just take time, it took me 30 minuts in wine, but all good, splash is changed and perfect...
TioCareca said:
well it works in wine, just freeze converting 2 image...
Edit: it do not freeze, just take time, it took me 30 minuts in wine, but all good, splash is changed and perfect...
Click to expand...
Click to collapse
Wow that's weird. I wonder why.
Maybe because I've included Windows version of Python 2.7. Did the "converting" part take longest? That calls the python binary + a script.
belyo said:
32 bit OS is non support?
Click to expand...
Click to collapse
Oh whoops. I'll compile it to an x86 binary. Re-download in about 10 minutes from now.
CosmicDan said:
Oh whoops. I'll compile it to an x86 binary. Re-download in about 10 minutes from now.
Click to expand...
Click to collapse
It worked fine. Thanks.:good:
Hi good day sir! Can yoou share the RR boot logo picture? So we can see it before flashing it
Edited:Ty for this already flashed it.!
CosmicDan said:
Wow that's weird. I wonder why.
Maybe because I've included Windows version of Python 2.7. Did the "converting" part take longest? That calls the python binary + a script.
Click to expand...
Click to collapse
Yes, i think it was because python is windows version, wine as to call two exe (the tool and python) the longer time is when processing RLE...
In the end all worked and that is what matter...
Just one question, whats the size limit of images?
TioCareca said:
Yes, i think it was because python is windows version, wine as to call two exe (the tool and python) the longer time is when processing RLE...
In the end all worked and that is what matter...
Just one question, whats the size limit of images?
Click to expand...
Click to collapse
If you check the .au3 file (source code), you can see a couple of arrays at the beginning that show the size limits in bytes. The first one is standard limit, the second array is with the larger 03 hack.
But this is the size limit of the RLE files. It's impossible to calculate the RLE size without actually converting it first. It's a very different (more basic) compression method than PNG and can't be predicted.
Hey dev please make for lineage os
Thanks before
panjivegency said:
Hey dev please make for lineage os
Thanks before
Click to expand...
Click to collapse
Make it yourself.
Is tool for windows?

Categories

Resources