Related
i wrote a new tool that you can use to read the rom image, it can be found at:
http://nah6.com/~itsme/bkondisk.zip
Code:
usage:
first copy bkondisk.exe to \windows on your device, then:
prun bkondisk [targetdir]
will save all partitions on all volumes in files on [targetdir]
prun bkondisk -v0 -p1 [targetdir]
will save a specific partition on [targetdir]
prun bkondisk -v0 -b0 -n1 \firstblock.img
will save the specified blocks to \firstblock.img
prun bkondisk -i
will only list disk info in the logfile "\bkondisk.log"
-v0 or -v1 to specify the volume
-p0, -p1, etc to specify a partition
-b0 etc to specify a starting block ( ignoring partioning )
-n32 specifies to read 32 blocks starting at the above block.
note: you DON'T need to put quotes around directories with spaces in it.
when no path is specified, files will be created in the root.
Thanks! I've got a couple of questions... it extracted the following files:
bk_00_0000.img
bk_02_0005.img
bk_03_0025.img
bk_06_0001.img
bk_08_0175.img
What do these files refer to (which one is the ROM, etc). Also, is there a way to write these backups back to the phone? It would be a great way to try out test roms and get back to my original T-Mobile ROM if necessary.
bk_00_0000.img - IPL : ONBL1 + ONBL2
bk_02_0005.img - GSM + splash + gsmdata + simlock + serialnrs
bk_03_0025.img - OS
bk_06_0001.img - SPL
bk_08_0175.img - userfilesystem
Is there a way to write them back to the phone? or is that not possible...
is it possible to get a .nbh files out of these files?
My idea would be to "glue" the 4 files together (bk_00 to bk_06) in one file, rename the file to RUU_signed.nbh and exchange the RUU_signed.nbh created by the RUU.exe in \Profiles\[user]\Local Settings\Temp\pftxx.tmp with this one and then run on the RUU.exe with the modified .nbh
for example in DOS:
copy /b bk_00_0000.img+bk_02_0005.img+bk_03_0025.img+bk_06_0001.img RUU_signed.nbh
Is it that simple?
EDIT:
Ok this easy way doesn't work.
RUU says "Error 238 - File read"
Maybe some kind of checksum is missing....
Three questions for itsme
1. Could these files be used to create a nbf file to flash from the sd card as a backup?
2. Would it be possible to modify sim/cid lock?
3. Are these files in raw (dump) format that could be edited in hex editor?
P.S. Thanks to your other posts (works) that helped me figure out the whole sd card flashing thing for the Dash.
Maybe this helps a little bit to get ideas.
I have been searching here for nights - this is what I found so far:
1. I think it's similar to the Hermes - nobody found a way till now - the first step is to modify a signed .nbh, deleting works but not adding a file:
Hermes - how to dump ROM
Hermes - new custom ROMs
Hermes - ROM cooking and Bootloader MFG 1.01
aChef ROM Utils
2. This is the way Imei-Check is CID-unlocking - investigated by pof:
Reverse Engineering the Herems imei-check unlocker
Maybe there is another way like Zone-MR is doing it for the Star100/Qtek 8500
Star100 Unlock procedure but here you have still to decryt/encrypt the block in my understanding and therefore you have to find out the key
3. I didn't find anything about this so far, but I think the information is anywhere at XDA-Developers
EDIT: here (nl)itsme wrote:
.... but i am still busy, have not had the time to look at creating a tool to convert a memdump to a updater file.
Click to expand...
Click to collapse
so I hope he will find the time to create this tool
P.S: @itsme and @pof: I also want to thank you very much - you are heroes!!!
mar11974 said:
1. Could these files be used to create a nbf file to flash from the sd card as a backup?
2. Would it be possible to modify sim/cid lock?
3. Are these files in raw (dump) format that could be edited in hex editor?
P.S. Thanks to your other posts (works) that helped me figure out the whole sd card flashing thing for the Dash.
Click to expand...
Click to collapse
I got different files ...
After running the tool I got :
bk_0__0000.img (IPL? Is it same as bk_00_0000.img?)
bk_02_0005.img (GSM + splash + gsmdata + simlock + serialnrs)
bk_03_0025.img (OS)
bk_06_0001.img (SPL)
bk_08_0185.img (?????)
I did not get bk_08_0175.img, though.
Hints?
On the other hand, is it possible to extract files out of IMG files?
Thanks.
Hi,
So i coulden't wait and had to try out JPC firmware. Personally i didn't like it at all, so i went back to JM7. 1 thing i did not like is my product code changed from XEN to KOR.
And here is how to fix that easly:
I tested this on 2.1 cause i was on JM7 when i found this out, but this works with JPC/JPH also.
this fix is for those who do not have (correct) .bak files in the /efs/ directory!
- First make sure you are ROOT and install a Terminal Emulator (can be found in the market)
- Now open the Terminal, enter ''su'' to gain root access
- Enter: cp /efs/nv_data.bin /sdcard/
- Connect you're SGS to the usb and download ''nv_data.bin'' to your computer
- Open ''nv_data.bin'' with notepad or wordpad and search for ''KOR'' change this to the product code matching your country (red marked text should be changed). Im dutch, so mine is XEN. The line looks like this:
Code:
ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿMP 0.800 ÿ[COLOR="Red"]KOR[/COLOR] GT-I9000HKD[COLOR="Red"]KOR[/COLOR]
- Now simply save your changes.
- Connect your SGS with usb, upload ''nv_data.bin'' to internal sdcard.
- Disconnect USB !
- Open Terminal Emulator and enter ''su''
- Now enter: cp /sdcard/nv_data.bin /efs/nv_data.bin
Also enter: rm -rf /efs/nv_data.bin.md5
- Close terminal, Reboot Phone. And Voila!!! Product Code restored!!
**IF YOUR SIMCARD DOESN'T WORK AFTER THIS, EXECUTE THE FOLLOWING**
- adb shell
- su
- busybox chown 1001:1001 /efs/nv_data.bin
- reboot
You can also do this from the Terminal Emulator if you don't have ADB on your PC! Like this:
-su
-chown 1001:1001 /efs/nv_data.bin
-reboot
I hope it's easy to follow my steps, it works guaranteed.
UPDATE - 13/09
Some people say you don't have to create a new md5, just remove the old one on the phone. kaffre and i tested this, the phone recreates the md5 file for you. So i've updated the steps in my tutorial, to make it even more easy!
UPDATE - 15/09
Simcard fix added. Thanks to tokinux
I`d suggest using a hex editor instead of any wordpad/notepad editor ...
Methyldioxide said:
Hi,
So i coulden't wait and had to try out JPC firmware. Personally i didn't like it at all, so i went back to JM7. 1 thing i did not like is my product code changed from XEN to KOR.
So f*ck that and here is how to fix that easly:
I tested this on 2.1 cause i was on JM7 when i found this out, but im 99% sure this works with JPC also.
- First make sure you are ROOT and install a Terminal Emulator (can be found in the market)
- Now open the Terminal, enter ''su'' to gain root access
- Enter: cp /efs/nv_data.bin /sdcard/
- Connect you're SGS to the usb and download ''nv_data.bin'' to your computer
- Open ''nv_data.bin'' with notepad or wordpad and search for ''KOR'' change this to the product code matching your country. Im dutch, so mine is XEN. The line looks like this:
Code:
ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿMP 0.800 ÿKOR GT-I9000HKDKOR
- Now simply save your changes.
- Download a md5 creator tool, i use MD5SUMMER
- Create a MD5 file using ''nv_data.bin" and save this as ''nv_data.bin.md5''
- Open ''nv_data.bin.md5'' with notepad and delete all the lines beside the line wich is similar to this one: 4ba37998243f14158884c5f464933398 (ofcourse your line of numbers is different ! ) Save the md5 file.
- Now your md5 file should be exactly 32bytes (this is the same size of the md5 file used by samsung, so please follow this step carefully)
- Connect your SGS with usb, upload ''nv_data.bin.md5'' and ''nv_data.bin'' to internal sdcard.
- Disconnect USB !
- Open Terminal Emulator and enter ''su''
- Now enter: cp /sdcard/nv_data.bin.md5 /efs/nv_data.bin.md5
cp /sdcard/nv_data.bin /efs/nv_data.bin
- Close terminal, Reboot Phone. And Voila!!! Product Code restored!!
I hope it's easy to follow my steps, it works guaranteed.
Click to expand...
Click to collapse
editing those files is there a risk of changing the IMEI in 004999010640000 ??
i think something similar happened to me and now i'm with XXXXXXX as product code and that fake IMEI.......
Narcissus85 said:
editing those files is there a risk of changing the IMEI in 004999010640000 ??
i think something similar happened to me and now i'm with XXXXXXX as product code and that fake IMEI.......
Click to expand...
Click to collapse
My imei did never change, also not after product code restore
For me it seems to be easier to do it with the *#272*hhmm#* solution.
Read about this here: http://forum.xda-developers.com/showthread.php?t=779580
Its doing also a hardreset.. so backup you data!
In case you dont want a hard-reset, this manual solution is much better! So Thx, Methyldioxide for your work and sharing with us!
Donald Nice said:
For me it seems to be easier to do it with the *#272*hhmm#* solution.
Read about this here: http://forum.xda-developers.com/showthread.php?t=779580
Its doing also a hardreset.. so backup you data!
In case you dont want a hard-reset, this manual solution is much better! So Thx, Methyldioxide for your work and sharing with us!
Click to expand...
Click to collapse
but his doesnt change the product code! i did it and still is KOR.
what is true is that putting the right csc is making my phone act like a normal one so at the end having a KOR phone gives me no problems at the moment...
Donald Nice said:
For me it seems to be easier to do it with the *#272*hhmm#* solution.
Read about this here: http://forum.xda-developers.com/showthread.php?t=779580
Its doing also a hardreset.. so backup you data!
In case you dont want a hard-reset, this manual solution is much better! So Thx, Methyldioxide for your work and sharing with us!
Click to expand...
Click to collapse
*#272*hhmm#* only changes the CSC settings indeed, not the actual product code. With warrenty this can be an issue. So i preffer my original product code
Did this actually change the product code or did your Galaxy S replace the changed nv_data.bin file from the backup .nv_data.bak file?
The default action is to use the bak file to write a new nv_data.bin if the original is missing or corrupt. If your original .nv_data.bak still had the original code in it this could be what happened.
I´ve copied my original nv_data.bin and nv_data.bin.md5 to my pc und used md5summer to check if the md5 hash stored in nv_data.bin.md5 is a normal md5 hash of the filesize.
The Hash generated with md5summer didn´t match!!!
Seems to be not an normal md5 hash of the filesize. There must be more.
If i do steps from OP the product code of my phone changes to XXXXXXXX.
Have used an Hex Editor and md5summer. Also tried WinMD5, same ****.
Aery said:
I´ve copied my original nv_data.bin and nv_data.bin.md5 to my pc und used md5summer to check if the md5 hash stored in nv_data.bin.md5 is a normal md5 hash of the filesize.
The Hash generated with md5summer didn´t match!!!
Seems to be not an normal md5 hash of the filesize. There must be more.
If i do steps from OP the product code of my phone changes to XXXXXXXX.
Have used an Hex Editor and md5summer. Also tried WinMD5, same ****.
Click to expand...
Click to collapse
You dont read proper, plz read the steps carefully and you will create the correct md5 hash. I think your problem is that you did not open nv_data.bin.md5 after you generated it and deleted all lines beside the HASH line. This all is stated clearly in my steps, and you shouldent have any issue.
EDIT: The nv_data.bin.md5 you generated should be exactly 32bytes! else you did not follow my steps properly
ghostgull said:
Did this actually change the product code or did your Galaxy S replace the changed nv_data.bin file from the backup .nv_data.bak file?
The default action is to use the bak file to write a new nv_data.bin if the original is missing or corrupt. If your original .nv_data.bak still had the original code in it this could be what happened.
Click to expand...
Click to collapse
Nope, i wish it was that easy for me This works only if you backup up your rom with Clockworks for example.
Methyldioxide said:
You dont read proper, plz read the steps carefully and you will create the correct md5 hash. I think your problem is that you did not open nv_data.bin.md5 after you generated it and deleted all lines beside the HASH line. This all is stated clearly in my steps, and you shouldent have any issue.
EDIT: The nv_data.bin.md5 you generated should be exactly 32bytes! else you did not follow my steps properly
Click to expand...
Click to collapse
I´ve much knowledge about computers, linux (running a lenny root server) and so on. I´m not stupid. ;-)
In nv_data.bin.md5 there is only the hash code and its 32 bytes.
Will try hashing the file under ubuntu or debian and report back. Maybe windows is doing **** here.
This is very crazy.
My original files:
nv_data.bin -> DBT
hash in nv_data.bin.md5 -> 3012f56623f1a296c1ecd33ee8f0819b
Hash of nv_data.bin (windows, md5summer) -> 1e44ea7702c0e6b603c01ef0bf5508b0
Hash of nv_data.bin (ubuntu, md5sum) -> 1e44ea7702c0e6b603c01ef0bf5508b0
With my original Files Product Code of Phone is DBT.
If i use the md5 Hash generated by md5summer, put it in nv_data.bin.md5 Phone says XXXXXXXX.
Pretty strange.
Aery said:
This is very crazy.
My original files:
nv_data.bin -> DBT
hash in nv_data.bin.md5 -> 3012f56623f1a296c1ecd33ee8f0819b
Hash of nv_data.bin (windows, md5summer) -> 1e44ea7702c0e6b603c01ef0bf5508b0
Hash of nv_data.bin (ubuntu, md5sum) -> 1e44ea7702c0e6b603c01ef0bf5508b0
With my original Files Product Code of Phone is DBT.
If i use the md5 Hash generated by md5summer, put it in nv_data.bin.md5 Phone says XXXXXXXX.
Pretty strange.
Click to expand...
Click to collapse
I've been looking to correctly generate the .md5 file as well. As you can see Samsung uses more than just the file contents for generating the MD5 hash. An interesting thing is that when the phone recreates the nv_data.bin file based on the .nv_data.bak file it also regenerated the md5 file. The hash in this file was different from the one in the backup (original and backup were exactly the same nv_data with the same product code). So I suspect at least the timestamp of the file is also taken into account. I already tried diffenent scenario's but did not manage to generate a correct hash yet.
Aery said:
This is very crazy.
My original files:
nv_data.bin -> DBT
hash in nv_data.bin.md5 -> 3012f56623f1a296c1ecd33ee8f0819b
Hash of nv_data.bin (windows, md5summer) -> 1e44ea7702c0e6b603c01ef0bf5508b0
Hash of nv_data.bin (ubuntu, md5sum) -> 1e44ea7702c0e6b603c01ef0bf5508b0
With my original Files Product Code of Phone is DBT.
If i use the md5 Hash generated by md5summer, put it in nv_data.bin.md5 Phone says XXXXXXXX.
Pretty strange.
Click to expand...
Click to collapse
i was talking about this in my post....check ur imei too...
THANKS
Using the steps in 1st post, I could change my Product code from KOR to INU after updating to JPC thro kies.
Thanks.
Its not working. cant generate a correct md5 file.
Is the Imei stored in the nv_data.bin too????
Imei is not on that file, but /efs/imei/bt.txt if i recall that correctly.
And my fix does work great, if you cannot create a correct md5 then it's prolly cause you do it wrong. I bet if you send me your modified file and i make the md5 for you it will work.
Sent from my GT-I9000 using XDA App
At that location there's the bluetooth mac aaddress.
I think your product code reverted to the original because you damaged your nv_data.bin and nv_data.bin.md5 files and the phone recreated them from the backup.
If you don't have backups don't try this.
Sent from my GT-I9000 using XDA App
Methyldioxide said:
Hi,
So i coulden't wait and had to try out JPC firmware. Personally i didn't like it at all, so i went back to JM7. 1 thing i did not like is my product code changed from XEN to KOR.
And here is how to fix that easly:
I tested this on 2.1 cause i was on JM7 when i found this out, but im 99% sure this works with JPC also.
- First make sure you are ROOT and install a Terminal Emulator (can be found in the market)
- Now open the Terminal, enter ''su'' to gain root access
- Enter: cp /efs/nv_data.bin /sdcard/
- Connect you're SGS to the usb and download ''nv_data.bin'' to your computer
- Open ''nv_data.bin'' with notepad or wordpad and search for ''KOR'' change this to the product code matching your country. Im dutch, so mine is XEN. The line looks like this:
Code:
ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿMP 0.800 ÿKOR GT-I9000HKDKOR
- Now simply save your changes.
- Download a md5 creator tool, i use MD5SUMMER
- Create a MD5 file using ''nv_data.bin" and save this as ''nv_data.bin.md5''
- Open ''nv_data.bin.md5'' with notepad and delete all the lines beside the line wich is similar to this one: 4ba37998243f14158884c5f464933398 (ofcourse your line of numbers is different ! ) Save the md5 file.
- Now your md5 file should be exactly 32bytes (this is the same size of the md5 file used by samsung, so please follow this step carefully)
- Connect your SGS with usb, upload ''nv_data.bin.md5'' and ''nv_data.bin'' to internal sdcard.
- Disconnect USB !
- Open Terminal Emulator and enter ''su''
- Now enter: cp /sdcard/nv_data.bin.md5 /efs/nv_data.bin.md5
cp /sdcard/nv_data.bin /efs/nv_data.bin
- Close terminal, Reboot Phone. And Voila!!! Product Code restored!!
I hope it's easy to follow my steps, it works guaranteed.
Click to expand...
Click to collapse
I did it!!!!
but, if I can , there's a small error,you 've to correct the red line ''nv_data.bin.md5'' in "nv_data.md5" .... this worked for me....
very helpfull guide, greetings mate
can anyone pls suggest any good app to open password protected zip and rar files ?
I'm guessing you don't know the password in question?
Depending on the strength of the password, you could be at this for months, if not years.
Since RAR 2.0 your forced to use brute force. And this can be processor intensive. I doubt you'd find anything that will run on the DHD.
Try looking --> Here and do it from your computer.
no I know the password, I just need an app which can open password protected .zip and .rar files
If you know the password, could you not open it on your PC and re-zip it unprotected.
I can but still I need an app which can do it on my DHD, like opening from email attachment a password protected .zip or .rar
I personally don't know of an app that will do it.
Your only option now is to start trawling the Android Market, luckily they have just released the web based Market. Give it a try --> Here
"UnRar Free" (or the PRO version if you buy it) will do this for you.
Desperate for Password
Hi,
Can I pls get the password for the I9003DXKF1 file I downloaded...or at least get help on how to get it...badly need to switch phone back to Froyo...please...really need your help since u know it...
Is that a Samsung Galaxy firmware? You'd have better luck asking in the relevant device forum. Where did you download it from? What took you there? Etc..
Sadly we at XDA do not have crystal balls to answer the vaguest of questions.
saj2001ind said:
can anyone pls suggest any good app to open password protected zip and rar files ?
Click to expand...
Click to collapse
Search for ArchiDroid in the market and it will do your job... It extracts password-protected RAR, ZIP, TAR, GZIP, BZIP2 and 7zip files... amazingly it is free... Unrar didn't work for me but this one works like a charm
if downloaded from http://www.sammobile.com
google search sammobile password and READ !!!!!
## = samfirm------------
# = samsu----------------
* = Incomplete firmware before flashing your device always check our forum!
I may b late but incase anybody else is searching for a result I found one... unrar works wen u pay for it maybe but not the free version, and archidroid does nothing. The one I found to work most efficiently was Archiver hope it helps
Password Recovery Software
naga1982 said:
Search for ArchiDroid in the market and it will do your job... It extracts password-protected RAR, ZIP, TAR, GZIP, BZIP2 and 7zip files... amazingly it is free... Unrar didn't work for me but this one works like a charm
Click to expand...
Click to collapse
There are so many Password Recovery Software are available which you can try your self.
where ?
Where can I download archidroid ?
are you kidding me ?
Forget rar password
vaibhav.pandey said:
There are so many Password Recovery Software are available which you can try your self.
Click to expand...
Click to collapse
How can i open a rar file i forgot password is it possible
On pc use winrar, on android there's an app called rar with all the functionalities of winrar. And it's free but comes with some ads
Hello xda-developers
I'm not really sure if it's already mentioned here on the forums, but today I found out that provxml-files which where written as .rgu and translated by "rgu-2-xml" don't work for Windows Phone 7. The output file is saved as ANSI file. After updating to Mango I tried a "Developer Unlock.xml" file but it didn't work. Well, all the procedure back and again but now with a UNICODE file After right-clicking the (ANSI) xml-file, "edit" and re-saving it as UNICODE file I noticed that the size of the file increased I tried the provxml-Method again and it worked! Not sure if I'm the only one with this solution and like I already said: not sure if it's already said here Please let me know if it helped you
you unlock your device on Mango build?
hd2leo_fusion said:
you unlock your device on Mango build?
Click to expand...
Click to collapse
The provxml method works on Mango as well.
Yes, I unlocked Mango But for me there are still some unanswered questions about provxml =/ Does a provxml file only work once on Omnia 7?
experience7 said:
Yes, I unlocked Mango But for me there are still some unanswered questions about provxml =/ Does a provxml file only work once on Omnia 7?
Click to expand...
Click to collapse
Ηow you will run provxml on omnia ...
I was under the impression that provxm works only with htc connection setup ...
And yes after the appl (connection setup) finish the 1rst run its deleting the provxml file.
You can also use it on Samsung devices Here is the thread where I found it: http://forum.xda-developers.com/showthread.php?t=1152422
Yes, with Connection Setup on HTC it will be deleted - but what about the GPRS Manager used for Samsung devices? After executing a command (xml-file) in the GPRS Manager, it's still there ^^ Even if I restart the app or the whole phone -> After opening the GPRS Manager again, all the entries seem to stay there
EDIT: Okay, tested it again and it seems like you can apply the xml's as often as you want with GPRS Manager I flashed a older ROM so my phone was on 7004 again I unlocked using ChevronWP7 and installed WP7 root tools. I created a file which switches the Internet Explorer's search provider to Google Well, after execution I first opened IE9, pressed search and yup.. google.com came up - then, just to be sure I opened WP7 root tools and took a look at the SearchScopes in registry. They were changed to Google, so the xml really worked. Then I manually wrote everything back to default. I opened the Internet Explorer, pressed the search button and Bing came up.. so everything's like before. I applied the "Google Search.xml" again and.. yes, it worked: Same effect like above: Registry was changed, IE9 search is now google.com
Well so at the end I can say that this is really useful for switches like in my example. I created several switches like "Enable instant resuming.xml", "Disable instant resuming.xml", "Enable lockscreen never option.xml", "Use Bing (default) search.xml", "Use Google search.xml", ... Wow, Mango with fast resuming apps is wonderful!
experience7
All of my rgu's that I've converted using xboxmods tool rgu2xml have worked just fine on my hd7.
It does kinda suck that HTC connection setup deletes the provxml everytime
Sent from my HD7 using XDA Windows Phone 7 App
Hm.. yes, maybe on HTC (with HTC connection setup) it's enough to convert them. On my Omnia 7 i had to open the provxml files, and resave them as UNICODE ".xml" files It's nice that GPRS Manager on Samsung devices doesn't delete the .xml files
Thank you for this! I was wondering why Connection Setup-applied ProvXML wasn't working. This will hopefully do it.
I've come up with a way to chain provxml files. I don't yet know if it works - it depends on how the deletion after processing the CustClear file is implemented - but it has the potential to allow you to store a "working copy" ProvXML file in My Documents as a txt file (which you can open and edit with Word), and then every time you use Connection Setup, it copies your "working copy" file to \Windows, renaming it as it does. This should make further modifications easier; just copy the XML from a website or app, paste it into Word, and run Connection Setup twice (once to copy your edited file, once to process it).
If it works, I'll post the file.
OK, I couldn't get the chaining to work. It's still in the file, just commented out, in case anybody else wants to experiment.
Oh, and I added some very convenient (if you deal with things like I do all day) registry tweaks. Open .LOG files as though they were .txt (great for attachments) and add an expansion for the , key similar to the one that the . key has.
THis really help me, That's the reason why my unlock.xml didn't worked in 7712 back then. I thought it was the 7712.
minori_aoi said:
THis really help me, That's the reason why my unlock.xml didn't worked in 7712 back then. I thought it was the 7712.
Click to expand...
Click to collapse
I'm trying to keep my HD7 unlock after updating to 7712 but the many times I tried, the Connection Setup will not run after 7712 update. If you can share the file and method with steps you used, that would be appreciated.
I don't know why your HTC connection setup didn't start after the update But maybe you did something wrong.. Okay, let's go through the steps together
Well, for Samsung devices you need a .xml file (GPRS connection manager handles with .xml files).
And on your HD7 you need an .provxml file (HTC connection setup handles with .provxml files).
Okay, first step is to be developer unlocked on NoDo - I think you are, right? [If you want to test it: Just try to sideload an app. If it works your phone is unlocked.. else it's not.]
Now uninstall HTC connection setup and install it again. Do not sideload any app found in the internet - just install the official app from the marketplace.
The next step is to get the right .provxml file. You don't need to do the following steps: I've already attached one which works. But just that you can follow me: Basically the file has to apply the following changes:
1) Developer unlock
Code:
[HKEY_LOCAL_MACHINE\Comm\Security\LVMod]
"DeveloperUnlockState"=dword:1
2) Prevent from relock
Code:
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg]
"PortalUrlProd"=""
"PortalUrlInt"=""
3) Maximum sideloaded apps
Code:
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg\Install]
"MaxUnsignedApp"=dword:7fffffff
And to create a this file we need to open Notepad:
Code:
REGEDIT4
[HKEY_LOCAL_MACHINE\Comm\Security\LVMod]
"DeveloperUnlockState"=dword:1
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg]
"PortalUrlProd"=""
"PortalUrlInt"=""
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg\Install]
"MaxUnsignedApp"=dword:7fffffff
Simply save this file as a .rgu file.
Then you need the tool "rgu-2-xml.exe" which converts the .rgu to a .provxml file. I've also attached this tool.
Okay, the generated file has now to be in the "Windows" directory of your phone. You can use the "WP7 mass storage" trick to get the file to your device - just search here on xda-developers. After you've copied the file to your device it will be stored in "\My Documents\Zune\Content\0400\...". Now you need a file explorer for HD7. I'm not sure if you're already using a tool but TouchXplorer should do the job. Open your tool on the phone and navigate to the folder above. There should be several folders.. just browse through them and look for a file which has got a short name and another file ending as our file (CustClear.provxml). Check the file size - it has to be the same on PC and your phone. If it's the same file rename it to "CustClear.provxml" again. Then move the file to the "Windows" folder on your HD7. The file has got the right name and is on the right place.. let's go on:
Now don't start the HTC connection setup!
Be sure to update to the highest build available at the moment. It's Mango v7720. There are tutorials here on xda-developers.com on how to update to v7720 Run HTC connection setup only if you can see that your phone is running v7720. You can see this under settings > about > more information.
Then you should be developer unlocked and sideloading apps should work again.
If anyone finds a mistake in those instructions please tell me! Thanks
And please tell me if it worked
Thanks for this but I don't need it now as as I had solved my problem.
After 7403 update, I uninstalled Connection Setup and re-installed again.
Nonetheless, I will PDF your instructions and download the 3 files to try out and learn this. Thank you very much for providing the detailed instructions. I'm sure it might be useful for some others.
experience7 said:
I don't know why your HTC connection setup didn't start after the update But maybe you did something wrong.. Okay, let's go through the steps together
Well, for Samsung devices you need a .xml file (GPRS connection manager handles with .xml files).
And on your HD7 you need an .provxml file (HTC connection setup handles with .provxml files).
Okay, first step is to be developer unlocked on NoDo - I think you are, right? [If you want to test it: Just try to sideload an app. If it works your phone is unlocked.. else it's not.]
Now uninstall HTC connection setup and install it again. Do not sideload any app found in the internet - just install the official app from the marketplace.
The next step is to get the right .provxml file. You don't need to do the following steps: I've already attached one which works. But just that you can follow me: Basically the file has to apply the following changes:
1) Developer unlock
Code:
[HKEY_LOCAL_MACHINE\Comm\Security\LVMod]
"DeveloperUnlockState"=dword:1
2) Prevent from relock
Code:
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg]
"PortalUrlProd"=""
"PortalUrlInt"=""
3) Maximum sideloaded apps
Code:
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg\Install]
"MaxUnsignedApp"=dword:7fffffff
And to create a this file we need to open Notepad:
Code:
REGEDIT4
[HKEY_LOCAL_MACHINE\Comm\Security\LVMod]
"DeveloperUnlockState"=dword:1
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg]
"PortalUrlProd"=""
"PortalUrlInt"=""
[HKEY_LOCAL_MACHINE\Software\Microsoft\DeviceReg\Install]
"MaxUnsignedApp"=dword:7fffffff
Simply save this file as a .rgu file.
Then you need the tool "rgu-2-xml.exe" which converts the .rgu to a .provxml file. I've also attached this tool.
Okay, the generated file has now to be in the "Windows" directory of your phone. You can use the "WP7 mass storage" trick to get the file to your device - just search here on xda-developers. After you've copied the file to your device it will be stored in "\My Documents\Zune\Content\0400\...". Now you need a file explorer for HD7. I'm not sure if you're already using a tool but TouchXplorer should do the job. Open your tool on the phone and navigate to the folder above. There should be several folders.. just browse through them and look for a file which has got a short name and another file ending as our file (CustClear.provxml). Check the file size - it has to be the same on PC and your phone. If it's the same file rename it to "CustClear.provxml" again. Then move the file to the "Windows" folder on your HD7. The file has got the right name and is on the right place.. let's go on:
Now don't start the HTC connection setup!
Be sure to update to the highest build available at the moment. It's Mango v7720. There are tutorials here on xda-developers.com on how to update to v7720 Run HTC connection setup only if you can see that your phone is running v7720. You can see this under settings > about > more information.
Then you should be developer unlocked and sideloading apps should work again.
If anyone finds a mistake in those instructions please tell me! Thanks
And please tell me if it worked
Click to expand...
Click to collapse
Is it possible to enable a custom notification sound via a reg edit in the omnia 7 running 7720 chevron unlocked? Maybe someone can make a prov file and instructions...
Well, maybe it's possible but I'm not really sure what you mean But I'm aware of provxml's capabilities, how to build them and how to set up the phone, so maybe I can help you
Thanks... I read somewhere that with a registry key we can change the path of the notification sound... This way we dont need to overwrite the original .wav... I believe this might be the only way to do it in mango since homebrew is blocked...
Need to check the registry key thread for this one, since i dont really know much about this...
Dehydration Hack
I have used this method to unlock and remove the side load limit on my HD7 and it works great. I am unsure how to create a file to turn the dehydration hack on and then off again after I have updated all the way to 7720. I used the HTC Connection setup once I fully updated, I have touch explorer I just have no clue what to do for the dehydration can anybody help me?
On HTC devices you can't create a simple switch to enable / disable the dehydration hack because once you've ran the HTC connection setup the provxml files will be deleted. But if you don't want to switch that often between on / off you can use this tool:
http://forum.xda-developers.com/showthread.php?t=907971
You'll have to create two .rgu files:
First one contains this:
Code:
REGEDIT4
[HKEY_LOCAL_MACHINE\Software\Microsoft\TaskHost]
"DehydrateOnPause"=dword:0
Second one contains this:
Code:
REGEDIT4
[HKEY_LOCAL_MACHINE\Software\Microsoft\TaskHost]
"DehydrateOnPause"=dword:3
Then you have to convert them to .provxml files. Put the first one in a folder called "Enable dehydration hack" and the second one into a folder called "Disable dehydration hack". This way you can't mess it up
Then use the tool mentioned above to deploy the .provxml which contains the setting you want to have on your phone - then finally run the HTC connection setup
For example you've enabled the dehydration: To disable it again you have to put the CustClear.provxml from "Disable dehydration hack" into the XAP file from xboxmod and deploy this XAP to your device. Then run HTC connection setup again and the changes will be applied - Dehydration hack will be turned off
Please tell me if it worked for you / helped you,
experience7
experience7 said:
On HTC devices you can't create a simple switch to enable / disable the dehydration hack because once you've ran the HTC connection setup the provxml files will be deleted. But if you don't want to switch that often between on / off you can use this tool:
http://forum.xda-developers.com/showthread.php?t=907971
You'll have to create two .rgu files:
First one contains this:
Code:
REGEDIT4
[HKEY_LOCAL_MACHINE\Software\Microsoft\TaskHost]
"DehydrateOnPause"=dword:0
Second one contains this:
Code:
[HKEY_LOCAL_MACHINE\Software\Microsoft\TaskHost]
"DehydrateOnPause"=dword:3
Then you have to convert them to .provxml files. Put the first one in a folder called "Enable dehydration hack" and the second one into a folder called "Disable dehydration hack". This way you can't mess it up
Then use the tool mentioned above to deploy the .provxml which contains the setting you want to have on your phone - then finally run the HTC connection setup
For example you've enabled the dehydration: To disable it again you have to put the CustClear.provxml from "Disable dehydration hack" into the XAP file from xboxmod and deploy this XAP to your device. Then run HTC connection setup again and the changes will be applied - Dehydration hack will be turned off
Please tell me if it worked for you / helped you,
experience7
Click to expand...
Click to collapse
Should be
Code:
[HKEY_LOCAL_MACHINE\Software\Microsoft\TaskHost]
"DehydrateOnPause"=dword:0
Hi everyone
you know that a big problem of upgrading using multiloader is that all of applications and our data will be deleted due to a firmware upgrade
*This method is found by mylove90 so all credits goes to him
special thanks to mylove90, adfree, and everyone who have helped this developement
Upgrading using this method is by using "PFS" file like kies upgrades
1. first you should prepare two firmwares, one is the firmware which is installed on your phone and the second is the firmware you want to upgrade to
2. Then you need to extract files of the new and the old firmware so download Trix, Select input file (You can make PFS file from a mix between FFS , ShpApp , CSC (Not Rcrs compressed part)) but just FFS is enough
then go to "scripts" tab and select "fs_shell.trx" and add it then run the script and ...
3.then download Winmerge (google it!) its an open source application which compares two files or folders with one click
then compare the new firmware folder and old firmware folder
then in view tab choose the files we want for upgrading
4. the files which are needed are "Different files" and "Unique files" from new firmware, so copy them to a new folder
also the "unique files" from old firmware must be deleted so "copy path names" and change path names to the correct pattern ex:"/appex/sys/blabla"
5. we can delete these files during PFS upgrade by adding the file paths to "/debug/PfsDeleteList.txt" file which we'll include it in our PFS
5. every thing is done
now just download wave_remarker and in FW view select "open dump" and select the files which we put into a new folder!
make a new folder named "debug" and put a txt file named "PfsDeleteList.txt" which contains the path of files which should be deleted during pfs upgrade
then save file as PFS
6. open multiloader and first check "boot change" and flash the new firmware's boot files
then again flash other firmware files (which does not contain FFS, CSC, shpapp (just the files which you extracted)) and includes pfs file
*note that no checkboxes in this level should be checked in multiloader
Thanks I will test this method
I have some questions from who have made this method
when i try dumping just FFS and making pfs of that in flashing it says error: shpapp write
when i try dumping FFS and Shpapp it says error: csc wite
when i try dumping FFS and shpapp and csc it says error: pfs write
edit
for deleting extra files i try putting all file paths into pfsdeletelist.txt
should i use _CSC_FsDeletelist.ini for some of them?
Sorry
I got no clue what you did wrong
Never tested the update from bada 1.2 to 2.0
Best Regards
when i tried bada 2 to bada 2 upgrade
everything was ok but at the end it says CMD_USB_LOCK fail
i could successfully turn my phone on but after some seconds a blue screen appears and it says:
platform "so" checking is failed
Platform "so" modification is detected!!!
Then you didn't edit the file handling .so signatures to add in it new signatures
You can find such a file in the data folder with .so files
It is named : GeneralSoInfo.so.sig
Edit it with Notepad++ only
If you don't know WTH you are doing please just stop !
Best Regards
Its not ever easy.
Depend really exact on Firmwareversion and what you want or what you did...
NOT TRY if you need data on your handset.
At your own risk.
platform "so" checking is failed
Platform "so" modification is detected!!!
Click to expand...
Click to collapse
This is ""standard"" Error message...
I have seen this also during my database experiments...
DB2 folder...
Or some spxxfing thingies...
More infos possible. If you play with Debug Level MID or HIGH...
Then you got if luck Blue Screen with additional infos, what goes wrong...
Feel free to learn.
Your handset will not explode, BUT again.
Security since XXJL2 is improved... since bada 2.0 higher.
All mistakes or Errors made by oyu leads to Security fail...
So you can loss data.
Backup before all you can.
Good luck.
Best Regards
mylove90 said:
Then you didn't edit the file handling .so signatures to add in it new signatures
You can find such a file in the data folder with .so files
It is named : GeneralSoInfo.so.sig
Edit it with Notepad++ only
If you don't know WTH you are doing please just stop !
Best Regards
Click to expand...
Click to collapse
adfree said:
Its not ever easy.
Depend really exact on Firmwareversion and what you want or what you did...
NOT TRY if you need data on your handset.
At your own risk.
This is ""standard"" Error message...
I have seen this also during my database experiments...
DB2 folder...
Or some spxxfing thingies...
More infos possible. If you play with Debug Level MID or HIGH...
Then you got if luck Blue Screen with additional infos, what goes wrong...
Feel free to learn.
Your handset will not explode, BUT again.
Security since XXJL2 is improved... since bada 2.0 higher.
All mistakes or Errors made by oyu leads to Security fail...
So you can loss data.
Backup before all you can.
Good luck.
Best Regards
Click to expand...
Click to collapse
I havent touched .so files ever
but as this is a custom rum which i want to upgrade to maybe the problem is here
so i try upgrading to another fw
in learning these things nothing else is important for me
i have backup of my apps that are important for me
so i try everything with your help
I havent touched .so files ever
Click to expand...
Click to collapse
This Error message is for wide range of Security issues...
Only if you enable Debug Level to see Blue Screens for more details...
Example for Blue Screen is attached...
1.
Post your Blue Screen...
Maybe we can help you...
2.
Or upload your files.
MAYBE someone has time to check...
Maybe with password and password only via PM, to prevent noobs to kill their handsets...
3.
To add any other Apps is not good idea... also leads to fail...
Security HIGH
Best Regards
Now i have full flashed to another rom so i dont have that bluescreen to post it for you
but bluescreen is showing just that 2 lines i wrote
first of all i'll try another fw to upgrade to
maybe the problem was with this fw
if again i failed, i'll try to upload my files (cuz my internet speed is very low!!)
Oh WTF i think i've found the problem
when i make a pfs using wave remarker then i add it into multiloader, it writes s8500 in front of pfs
but my device is s8530
how can i solve this problem
i havent seen such settings in wave remarker
i myself found a solution for this and made a correct pfs
but again multiloader says CMD_USB_LOCK fail
I think the best way for me is to make a video of what i do yes?
and someone do me a favor and kindly check whats my fault
I'll make a video in the next days
but again multiloader says CMD_USB_LOCK fail
Click to expand...
Click to collapse
Depend what you did... you could ignore this from Multiloader...
I see this Info often if I play with my modified apps_compressed... or do other stuff. Then Autorestart not work with Multiloader...
Try to press ON OFF... (hold Button to force Restart)
At your own risk.
Not during Bootloader write.
Best Regards
I have encountered this error while using modified apps_compressed and rebooting was fine
but in this case when i try to reboot i see the blue screen or the handset stops on the first screen:
"WAVE 2 S8530"
"WAVE 2 S8530"
Click to expand...
Click to collapse
apps_compressed is PROTECTED by Bootloader...
It checks Integrity...
For easier handle unsecdload.fota...
This is only for S8500 available.
For S8530 you can't easy use modified apps_compressed... WITHOUT dataloss.
As you have to flash more then once ...
So all data is erased... before handset can start proper...
Best Regards
adfree said:
apps_compressed is PROTECTED by Bootloader...
It checks Integrity...
For easier handle unsecdload.fota...
This is only for S8500 available.
For S8530 you can't easy use modified apps_compressed... WITHOUT dataloss.
As you have to flash more then once ...
So all data is erased... before handset can start proper...
Best Regards
Click to expand...
Click to collapse
Thank you but you didnt understand what i mean !!
i said i see this error while editing apps_compressed too
but in this case i'm not doing that but again i see this error
this is the video of all i do:
http://dolphintest.co.cc/video.rar
i want to make a pfs for upgrading from JPKA1 to XXKL6
here i encounter error: pfs write
if you can't understand a part, mention here
Please check the video so we can solve my problem!!
video is just 10 mins so it doesnt take so much time
JPKA1
Click to expand...
Click to collapse
XXKL6
Click to expand...
Click to collapse
This is bada 2.0... I'm sure, I used often...
But is JPKA1 not bada 1.x
You can't mix bada 1 with bada 2...
Please correct me, if I'm wrong.
Best Regards
yes your right
but why we can't upgrade from bada 1.2 to bada 2?
by the way i've tried bada 1.2 to bada 1.2 upgrade and bada 2 to bada 2 upgrade but same problems
but why we can't upgrade from bada 1.2 to bada 2?
Click to expand...
Click to collapse
Samsung did some funny things...
"New" Bootloader, new Memory Map...
Compare adresses in Multiloader... so NOT same position...
So major changes... maybe not impossible for Samsung to convert some...
Anyway. Its Security reason and to have "clean new" OS.
Maybe also to clean all Spoofer...
I have not seen whole Video...
No idea yet.
Maybe someone else...
Best Regards