[Q] Question about apps_compressed.bin - Bada Software and Hacking General

Hi,
Is there any tool to compress apps compressed.bin and also for editing the file?
I know wave remaker can decompress and winhex is used for reading the bin, but are there any other tools

What exactly you expect to do?
Their are no Pictures to extract or to replace...
If you know what ELF, Binary, IDA and HEX Editor is and you have some ARM knowledge...
Then you have all incredients.
Only Compression Algo is missing...
Best Regards

adfree said:
What exactly you expect to do?
Their are no Pictures to extract or to replace...
If you know what ELF, Binary, IDA and HEX Editor is and you have some ARM knowledge...
Then you have all incredients.
Only Compression Algo is missing...
Best Regards
Click to expand...
Click to collapse
I had some knowledge of Hex Editor,Elf when I was using my old sony phone, but I forgot most of it now. I am ready to learn, could provide me the materials to start

old thread but...
decompress app (well, only a part of it) >> rebuild QMG >> phone works
tested

Related

How to Change Bitmap in Software Keyboard?

All the nordic user wich have åä and ö in there keyboard often uses "scandivaisktastatur5.cab" (se attached file) to replace the orginal software keyboard in a WM6 ROM. Tho its very ugly and has the old WM5 design I would like to change the bmp picture in the dll:s inside the cab. How do I do that? I can extract the Cab file, and replace the bmp file in the dll:s but how do I make a Cab out of it again? I have tried to change the BMP picture inside the dll and then copy the dll file in the windows directory (where the dll files are extracted by the cab file) but that will not work. Can anybody help pleas??
Hi
I have already tried what you suggests with no luck. This is what I did:
1) Extracted the dll from the cab
2) Extracted the bmp from the dll with resource hacker
3) Edited the bmp in Photoshop (see the attachment)
4) Inserted the new bmp into the dll with resource hacker
5) Replaced the original dll in the cab with the new one
6) Installed the cab
...and it did not work. Maybe it has something to do with signing of the dll or something, I don't know. If someone wants to try another shot, feel free to us the attached keyboard skin.
Regards,
PK
You would have to sign this dll etc, and even then it may not work - if you cook your own rom it might, but have a look at the new app that came out recently to change the Wait cursor. See how that's been signed and the certificates it uses, with an mui file. A similar technique may help here.
V
paalkr said:
Hi
I have already tried what you suggests with no luck. This is what I did:
1) Extracted the dll from the cab
2) Extracted the bmp from the dll with resource hacker
3) Edited the bmp in Photoshop (see attachment)
4) Inserted the new bmp into the dll with resource hacker
5) Exchanged the original dll in the cab with the new one
6) Installed the cab
...and it did not work. Maybe it has something to do with signing of the dll or something, I don't know. If someone wants to try another shot, feel free to us the attached keyboard skin.
Regards,
PK
Click to expand...
Click to collapse
Okaj...I did the similar thing.....but i guess that you need sign it with a certificate...I hav watched a little on that maybe making your own root certficate and sign the Dll with it, but it seams to be very complicated :-(
vijay555 said:
You would have to sign this dll etc, and even then it may not work - if you cook your own rom it might, but have a look at the new app that came out recently to change the Wait cursor. See how that's been signed and the certificates it uses, with an mui file. A similar technique may help here.
V
Click to expand...
Click to collapse
Do you have a link to that??
Found this
http://forum.xda-developers.com/showthread.php?t=321236
So someone know what his doing....i must be possible to do a nordic keyboard them
vijay555 said:
You would have to sign this dll etc, and even then it may not work - if you cook your own rom it might, but have a look at the new app that came out recently to change the Wait cursor. See how that's been signed and the certificates it uses, with an mui file. A similar technique may help here.
V
Click to expand...
Click to collapse
Hi
Thanks for the info Vijay! BTW: I use many of the free tools you have developed for the XDA's! Thanks for the effort!
The wait cursor thing was done on WM5, right? Could we use the same certificates or does WM6 need others?
Regards,
PK
uffe6 said:
Found this
http://forum.xda-developers.com/showthread.php?t=321236
So someone know what his doing....i must be possible to do a nordic keyboard them
Click to expand...
Click to collapse
Hi!
I don't think the German keyboard is excactly the same thing as we try to achieve. the German one installs as an separate SIP. The SkandinaviskTastatur.cab changes the inbuilt default keyboard SIP, but there is definitely possible to learn something from the German one.
Regards,
PK

[Q] ROM Cooking: .RGU VS .PROVXML

Hi everyone,
I'm wondering about the differences between these files, since they are both used to modify registry. Well PROVXML files seems to be more powerful with file management.
Which one is better to use ?
Quick:
provxml is not only for change registry.
For file operations too.
And .provxml writes in the registry after .rgu, so if you want to change something for sure, you should use .provxml
maxstegi said:
And .provxml writes in the registry after .rgu, so if you want to change something for sure, you should use .provxml
Click to expand...
Click to collapse
Wow this is a very good point you mentionned here ... i did not know in which order the information is written into the registry. Thank you man !
But what about the order these files are dumped into the final registry ... Is it by package name ?
For example, i have in my cooking OEM:
- PACKAGE_Diamond_A
----mxipupdate_A.provxml
- PACKAGE_Diamond_B
----mxipupdate_B.provxml
What will be the result if these two packages write at the same location different value?
Will the value be the A one or B one ?
Saw something like: *_100.provxml, *_200.provxml ...

TriX - extract, decompress files, folders from Firmware files

We can extract with TriX.
http://forum.xda-developers.com/showpost.php?p=10481771&postcount=31
Big thanx to b.kubica
Now its time to analyze, compare some results... to identify important files...
As example I've uploaded extracted files from T-Mobile Firmware:
ShpApp.app
CSC_S8500_Tmobile_DTM.csc
FactoryFs_S8500_Tmobile.ffs
90 MB compressed:
http://www.megaupload.com/?d=TIS9WFZO
Best Regards
I wish more users would investigate Firmware with TriX.
Here little Video Tutorial how easy it is.
Best Regards
P.S.:
I will add this week Video for building files too. But its very simple.
i would like to play with this trix software. where i could get it. nevermind i will take a look on the link in first post. One more thing i want to ask, if i change any setting in ini files, and put it back to the phone using stune, the changed setting donot take effect. is there any way to avoid this. Like i had find the setting where samsung has put a limit on multitasking of java app to a max of 3 app. i have changed it to four but it didnt work. since i have installed many app i dont want to reset my phone. is there any way??
http://nokix.sourceforge.net/trix/howto.htm
...i dont want to reset my phone.
Click to expand...
Click to collapse
I know and I understand.
But Security is not easy to bypass or to disable with sTune...
Depend on exact file you play with sTune.
But except following:
1.
Wave has Security to prevent easy changes like:
Writeprotections (no replace nor delete possible)
Directories are most NOT delete able...
2.
Few *.ini files are stored double/twice... in User and SystemFS folder.
Shadow Backup to prevent change...
3.
Some *.ini files stores Data in database files...
This is the reason why I investigate time in Firmware files. Here are *.ini files not protected.
Flashing modified *.FFS, *.PFS, *.CSC or *.APP higher chance to bypass Security and successfully change Settings.
Best Regards
how i can instal trix ....it gives to me always error...
You have to use version 0.9 and fs_shell.trx script for bada.
Reference package, all files included
Okay. As many users seems to have problems with TriX.
Attached is nearly complete TriX. Tested with XP SP3.
Here are all files correct in position.
Please post results/problems with other Windows Version.
Best Regards
Here you are
Dont work under Windows 7 x64 .
first problem was easy. Add missed dll'd
MSVCR100.dll
MSVCP100.dll
second is more problematic.
" _invalid_parameter_noinfo_noreturn in library MSVCR100.dll "
Even compatibility with Windows XP SP3 wont work.
MSVCR100.dll
MSVCP100.dll
Click to expand...
Click to collapse
These are missing Microsoft Visual C++ 2010 Redistributable Package (x86)
I used this package for my XP:
http://www.microsoft.com/downloads/...5e-6de6-4d3a-a423-37bf0912db84&displaylang=en
Not sure if also success under Windows 7.
Best Regards
I use trix on windows seven 64 bits and it works.
Adfree is right need to install Microsoft Visual C++ 2010 Redistributable Package for 32 bits
ok...thanks..I'll try-.....
ok!!
perfect!!!
thanks..thakns...
I nedd the last information...
which script I?ve to use with shad app?
You have to use fs_shell.trx for pfs, ffs, csc and app files.
lasentenza said:
You have to use fs_shell.trx for pfs, ffs, csc and app files.
Click to expand...
Click to collapse
ok.change only for amms...perfect...thank you very much..
Sorry, don't understand??
The amms file is not usable with trix
okk.ok...sorry...
I've a problem..I want to erase 3 system widget...
but now i've invisible icon..
how can I take off then?
In csc?
Which one?
You have to modify PshIdleWidgetList.ini (the file appear twice)on CSC and WidgetDefault.ini on FFS
lasentenza said:
Which one?
You have to modify PshIdleWidgetList.ini (the file appear twice)on CSC and WidgetDefault.ini on FFS
Click to expand...
Click to collapse
I don't rember...I'll see...and tell you later...
thanks very big!!
IO've change it..but nothing change..how can restore the original widget?
i don't rember...in csc?
I have a question for ask you, Mr. Adfree
I would like to know aside from .csc .ffs. .pfs .app that we can modify
Can we make not full fw to full fw?
example 1.2 Asia (not full fw) in Samfrimware.com
Thank you Mr. Adfree ^^
http://nokix.sourceforge.net/trix/bada/
New Version can decompress bada 2.0 apps_compressed.bin.
http://forum.xda-developers.com/showpost.php?p=18687896&postcount=231
Thanx.
Best Regards

Rsrc_S8500_xxx.RC1

At the moment only Questions... hopefully soon few answers.
1.
What kind of files are in this package ?
I can remember few Pictures...
2.
Any Tool exists to extract files from *.RC1 ? Maybe from other models as example.
TriX not find anything... seems other structure. No DCB:
Thanx in advance.
Best Regards
afaik there's no tools to extract S8500's rc1..
I discovered something about the fileformat of S8500's rc1...just few things, but I can't continue the work at the moment because I'm very busy with a university programming project
it doesn't use the DCB structure, but it has a structure (of course, you'll say ) it's just more complex than DCB
I found few parts of ZIP...
Seems few files can be found via sTune...
First try to overwrite some Bytes at Start with FF leads to nearly blank screen at PIN Input Screen...
But I mixed my T-Mobile Branding with JI5 RC1 and now I know why I never found f. Icons.
Best Regards
Don't know if this can help, but for the Samsung Star I built an utility for the extraction of the resources inside the RC1 files of the firmware (well only images and swf files actually, and in "strange" ways - I think that Samsung forged the headers of the files included inside the RC1).
www megaupload com / ?d=P3W8NJV0
It can also replace the resources found.
I've testested with the firmware posted here and it works with the CSC, FFS and APP files. I haven't any RC1 file for the Wave to test.
C# sources included.
HTH.
Regards,
Sebastiano
sebamix said:
www megaupload com / ?d=P3W8NJV0
Click to expand...
Click to collapse
the link is not correct.
ho1od said:
the link is not correct.
Click to expand...
Click to collapse
Hi, just add the dots and remove the spaces... I haven't enought posts to publish links...
Thanks!
RC1 seems most encrypted/compressed...
As no complete filenames visible...
Best Regards
I found some things...just miss the filenames and some more...
Check out bada SDK...
Rsrc_bada_S8500.rc1.org
Language pack should be enough. But very funny to see all other files from Simulator...
Best Regards
adfree said:
I found few parts of ZIP...
Seems few files can be found via sTune...
First try to overwrite some Bytes at Start with FF leads to nearly blank screen at PIN Input Screen...
But I mixed my T-Mobile Branding with JI5 RC1 and now I know why I never found f. Icons.
Best Regards
Click to expand...
Click to collapse
Adfree,
When you mixed T-Mobile Branding with JI5 RC1 do you remember if you have all languages on display and keyboard?
When you mixed T-Mobile Branding with JI5 RC1 do you remember if you have all languages on display and keyboard?
Click to expand...
Click to collapse
Languages are in CSC file... the first 7 MB... also QMD compressed, but...
See here:
http://forum.xda-developers.com/showthread.php?t=984482
All Languages seems not possible.
Depend on CSC package between 4 and 20 Languages... Need to check again...
Best Regards
Yes I saw this post but don't understand How you can open .csc with this tools
Edit: ok I read a second time it's ok now
Thanks Ad
Now WaveRemaker can extract all files from RC1:
http://forum.xda-developers.com/showpost.php?p=14272780&postcount=97
Other ways to make folder System (content of RC1 file) visible:
http://forum.xda-developers.com/showpost.php?p=12901077&postcount=23
or
http://forum.xda-developers.com/showpost.php?p=14272780&postcount=97
Any Tool where you can sent Command FmSecure Off.
Hopefully we find Tool or solution to see *.rbm files... 32 Bit graphic...
Best Regards
What is the .rbm?
System\Rsrc\Bmp\Black
Maybe this means Resource Bitmap
QuB can handle at the moment only 16 bit public... but here few extracted files:
http://rk-team.net/showthread.php?43-S8500-work-with-QuB&p=434&viewfull=1#post434
Best Regards
adfree said:
System\Rsrc\Bmp\Black
Maybe this means Resource Bitmap
QuB can handle at the moment only 16 bit public...
Click to expand...
Click to collapse
You have 16 bpp .rbm file?
I can decompress and compress any RBM files for Broadcomm... Can you sent me some files from Wave?
MAy be i can add this RBM too )))
Привет!
Ты их уже разжимал, но в ручную. http://rk-team.net/showthread.php?43-S8500-work-with-QuB&p=432&viewfull=1#post432
Разве?
ну тогда норм
будет поддержка))
Как дела с запаковкой RC1?
P.S. Sorry for Russian...

SystemCSC\String Language Texts, Fonts, Keyboard, etc.

SystemCSC\String
This folder includes our Texts... btw. this is the compressed 7 MB part at start of *.CSC files.
With Editor hard to read, but today I found something.
See Screenshots.
Maybe we can find usefull infos...
Admin.rsr
Yes, Codes are not new... but maybe other usefull infos in other files.
Tool is attached.
GeeXtractor ... 2005
Best Regards
adfree said:
SystemCSC\String
This folder includes our Texts... btw. this is the compressed 7 MB part at start of *.CSC files.
With Editor hard to read, but today I found something.
See Screenshots.
Maybe we can find usefull infos...
Admin.rsr
Yes, Codes are not new... but maybe other usefull infos in other files.
Tool is attached.
GeeXtractor ... 2005
Best Regards
Click to expand...
Click to collapse
adfree...
Does tool give you access to admin settings? I am trying to disable AMR half rate (5.90kb/s) voice codec on my Wave so it only makes calls using AMR full rate (12.2kb/s). Have you found anything related to voice codecs?
The only Audio menu I know... is under:
*#197328640#
[5] Audio
Never tried, never investigated further.
Sorry.
Best Regards
SystemCSC\String
Click to expand...
Click to collapse
so where is that in an extracted "by trix"firmware files
@ mylove90
Check your handset with sTune for instance...
TriX NOT extract this CSC part.
Best Regards
adfree, thank you, you are one of the few who is doing something in process of bada-hacking .
Is it possible to pack changed .rsr files back in the CSC? If yes, then how? What is this method of packaging - QMD?
Thanks again!
It may be useful tool: Qualcomm & Broadcom MultiManager. It is for Samsung Star, but allows you to conveniently edit the .rsr files and decrypt firmware files without PSAS.
Xenоn
1000 x thanx.
Very usefull Tool.
I'm not able to use RC1 part and not smart enough to open RBM files...
This would be very great. If it can show 32 Bit Pictures...
Is it possible to pack changed .rsr files back in the CSC? If yes, then how? What is this method of packaging - QMD?
Click to expand...
Click to collapse
JB6 uses IMRC ... "same" like QMD...
RC1 and first 7 MB of CSC are Images. Mounted into RAM as Image.
Boot-> Decrypt + Decompress and only hold in RAM
NOT written into moviNAND...
So only encrypted and correct compressed QMD file is only chance to change something...
Maybe one day we could remove this protection...
I have no idea if QuB Fullversion can rebuild valid QMD files...
We should ask the Developer...
Best Regards
How to open RBM files?
Attached from S8500...
With GeeXtractor I see Resolution Color Depth... 32 Bit... but how to open this with QuB.
rk-team.net seems home of QuB.
Thanx in advance.
Best Regards
Edit:
Found newer Version... RBM now open, but seems no 32 Bit support yet.
http://rk-team.net/showthread.php?11-%CD%EE%E2%FB%E5-%E2%E5%F0%F1%E8%E8-QuB
I've registered to QuB home.
JB6 uses IMRC ... "same" like QMD...
Click to expand...
Click to collapse
Sorry, but I don't understand very well what it means... This ia a method of encoding? But, if I understand correctly modify the first 7 mb of CSC today is impossible, because we can not decrypt/encrypt this file?
I found Samsung GeeXtractor 0.7i with english interface, but still doesn't open 32 bit rbm file.
And maybe you find usefull another tool for samsung handsets, BinEdit - hex editor, ARM disassembler/debugger and many more for ARM-processor code. I found Deutch lang file, you're from Germany, right?
P.S. About QuB, "trial vesion, full version" - it's only joke from developer, QuB_public_v.0.3_001_beta is the full version and the other does not exist
P.P.S.And sorry for my bad English, please
@ Xenоn
Thank you very much again. I've started Thread about QuB:
http://forum.xda-developers.com/showthread.php?t=1010761
BinEdit I was not able to start... no idea yet...
English Version of GeeXtractor is nice.
Best Regards
any idea of how to modify rsr files???
can some one upload strings folder from XXJL2???
i am working on Arabic bada 1.2 as it didn't arrive until now
thanks in advance
p.s : just forget it
Only "trial version" is a joke...
But this vesion is "Public"..
As you understand i have "private" version with many features ( RSR editor and RBM editor for example) ))
With time some functions from private move to public )))
mylove90 said:
any idea of how to modify rsr files???
can some one upload strings folder from XXJL2???
i am working on Arabic bada 1.2 as it didn't arrive until now
thanks in advance
p.s : just forget it
Click to expand...
Click to collapse
hi
is this possible to copy the string folder from kc1 and paste it into XXJID or other 1.2 ?
RusEm said:
Only "trial version" is a joke...
But this vesion is "Public"..
As you understand i have "private" version with many features ( RSR editor and RBM editor for example) ))
With time some functions from private move to public )))
Click to expand...
Click to collapse
... @ RuEm is also possible to have the settings used on Wave-GT8500 ... thanks by psycoy
WaveRemaker can handle also CSC QMD part like RC1... at this time only cut before extract...
QMD is Header... End of file is before CDABCDAB
So we could study/compare some CSC ...
Best Regards
I'm missing such posts, where someone tried to edit *.rsr files and post results...
Maybe toooo hard task to start...
Absoulute beginning:
Or in which Firmware are most languages included.
I will count... in my T-Mobile I have 12 supported Languages.
Will add soon which one...
This is bada 1.0
On my S8530 KD6... bada 2.0 I see 11...
How many in bada SDK 2.x
I can count 50
I'll try to upload soon *.rsr files... maybe they are complete... from SDK.
Best Regards
For study... here is first part of S8600 CSC with arabic Language.
Warning!Caution!
For study/research...
You need to know what you do...
Best Regards
Hmmmm...
for instance Admin.rsr from S8530 KD6 (bada 2.0) and from S8500 JL2 (bada 1.2) is same. KJ1 also... and also bada SDK 2.0
Admin.rsr from S8600 is different...
So it seems useless for S8500/S8530...
Best Regards
adfree said:
For study... here is first part of S8600 CSC with arabic Language.
Warning!Caution!
For study/research...
You need to know what you do...
Best Regards
Click to expand...
Click to collapse
I tried to overwrite QMD in XPKJ1 CSC and then flash that file to the phone
I know that this probably won't work but strange thing that i got hash check error in multiloader so i wasn't able to even test this
there was a 5 mb difference between old and newer CSC
Any ideas how to disable this check ?!
Best Regards
I have insert from QMD to 0xCDABCDAB...
So you have remove from start and 1024 Byte from end...
Now see carefully... if smaller then KJ1, then maybe fill with FFFFFF difference, to have same size...
Then read this:
http://forum.xda-developers.com/showpost.php?p=10499359&postcount=36
Maybe this time 2 x...
Minimum at end of whole file and as you can see, uploaded QMD part ends also like complete Firmwarefile...
Best Regards

Categories

Resources