PDA

View Full Version : Spb Mobile Shell edit - Halfway there - help needed!


aiondennis9000
29th October 2007, 11:42 PM
Who can help me retreive the password in this zip file and PM it to me. It contains a file index.xml which I need to edit.

I was succesfully able to adjust features in the Now Screen of Spb Mobile Shell through lockscreen.xml. Once I obtain the password needed to extract this file I will be able to adjust anything and everything. Hell we'd probably be able to cook something up based on it. :D

Thanks in advance.

aiondennis9000
30th October 2007, 04:53 PM
MMmh I think it will be a tough job. :( I found the encryption method used and it's a hefty mother. :eek: Anyone who can help me with a tool to extract based on this? Take a look.

+ /************************************************** *********************
+ * Update the encryption keys with the next byte of plain text
+ */
+ static int update_keys(unsigned long* pkeys,const unsigned long* pcrc_32_tab,int c)
+ {
+ (*(pkeys+0)) = CRC32((*(pkeys+0)), c);
+ (*(pkeys+1)) += (*(pkeys+0)) & 0xff;
+ (*(pkeys+1)) = (*(pkeys+1)) * 134775813L + 1;
+ {
+ register int keyshift = (int)((*(pkeys+1)) >> 24);
+ (*(pkeys+2)) = CRC32((*(pkeys+2)), keyshift);
+ }
+ return c;
+ }
+
+
+ /************************************************** *********************
+ * Initialize the encryption keys and the random header according to
+ * the given password.
+ */
+ static void init_keys(const char* passwd,unsigned long* pkeys,const unsigned long* pcrc_32_tab)
+ {
+ *(pkeys+0) = 305419896L;
+ *(pkeys+1) = 591751049L;
+ *(pkeys+2) = 878082192L;
+ while (*passwd != '\0') {
+ update_keys(pkeys,pcrc_32_tab,(int)*passwd);
+ passwd++;
+ }
+ }
+
+ #define zdecode(pkeys,pcrc_32_tab,c) \
+ (update_keys(pkeys,pcrc_32_tab,c ^= decrypt_byte(pkeys,pcrc_32_tab)))
+
+ #define zencode(pkeys,pcrc_32_tab,c,t) \
+ (t=decrypt_byte(pkeys,pcrc_32_tab), update_keys(pkeys,pcrc_32_tab,c), t^(c))
+
+ #ifdef INCLUDECRYPTINGCODE_IFCRYPTALLOWED
+
+ #define RAND_HEAD_LEN 12
+ /* "last resort" source for second part of crypt seed pattern */
+ # ifndef ZCR_SEED2
+ # define ZCR_SEED2 3141592654UL /* use PI as default pattern */
+ # endif
+
+ static int crypthead(passwd, buf, bufSize, pkeys, pcrc_32_tab, crcForCrypting)
+ const char *passwd; /* password string */
+ unsigned char *buf; /* where to write header */
+ int bufSize;
+ unsigned long* pkeys;
+ const unsigned long* pcrc_32_tab;
+ unsigned long crcForCrypting;
+ {
+ int n; /* index in random header */
+ int t; /* temporary */
+ int c; /* random byte */
+ unsigned char header[RAND_HEAD_LEN-2]; /* random header */
+ static unsigned calls = 0; /* ensure different random header each time */
+
+ if (bufSize<RAND_HEAD_LEN)
+ return 0;
+
+ /* First generate RAND_HEAD_LEN-2 random bytes. We encrypt the
+ * output of rand() to get less predictability, since rand() is
+ * often poorly implemented.
+ */
+ if (++calls == 1)
+ {
+ srand((unsigned)(time(NULL) ^ ZCR_SEED2));
+ }
+ init_keys(passwd, pkeys, pcrc_32_tab);
+ for (n = 0; n < RAND_HEAD_LEN-2; n++)
+ {
+ c = (rand() >> 7) & 0xff;
+ header[n] = (unsigned char)zencode(pkeys, pcrc_32_tab, c, t);
+ }
+ /* Encrypt random header (last two bytes is high word of crc) */
+ init_keys(passwd, pkeys, pcrc_32_tab);
+ for (n = 0; n < RAND_HEAD_LEN-2; n++)
+ {
+ buf[n] = (unsigned char)zencode(pkeys, pcrc_32_tab, header[n], t);
+ }
+ buf[n++] = zencode(pkeys, pcrc_32_tab, (int)(crcForCrypting >> 16) & 0xff, t);
+ buf[n++] = zencode(pkeys, pcrc_32_tab, (int)(crcForCrypting >> 24) & 0xff, t);
+ return n;
+ }
+
+ #endif

iggy
30th October 2007, 07:38 PM
Who can help me retreive the password in this zip file and PM it to me. It contains a file index.html which I need to edit.

I was succesfully able to adjust features in the Now Screen of Spb Mobile Shell through lockscreen.xml. Once I obtain the password needed to extract this file I will be able to adjust anything and everything. Hell we'd probably be able to cook something up based on it. :D

Thanks in advance.

Dude I am not a mod, but this is not legal since this App. is commercial, so this would not be allowed on this site. Mods, feel free to correct me if I am wrong.

blablum
30th October 2007, 08:48 PM
Window mobile is comercial and yet people here seem to be ok with building their own roms.
I think as long as he doesn't distribute it (or profit from it in any way) and spb doesn't actively complain, we also should be ok with it. That's just my opinion.

xplode
30th October 2007, 11:31 PM
Well this app is commercial but, it is free for trial usage

It is cool to customize the app, but remember, do not post serials or cracks here

ccc030
31st October 2007, 02:36 AM
and if he'll do a good job, maybe spb will offer him a good job too ;)

Well this app is commercial but, it is free for trial usage

It is cool to customize the app, but remember, do not post serials or cracks here

aiondennis9000
31st October 2007, 10:24 AM
Dude I am not a mod, but this is not legal since this App. is commercial, so this would not be allowed on this site. Mods, feel free to correct me if I am wrong.


It's not about hacking the thing. It's about making skins for the registered version. I hate the fact that the Now Screen shows stuff that in my opinion is useless. I wrote a nice new index.xml I want to replace it with.

aiondennis9000
31st October 2007, 10:26 AM
Well this app is commercial but, it is free for trial usage

It is cool to customize the app, but remember, do not post serials or cracks here


No serials no cracks. I just want to put my own index.xml in there to replace my Now screen.

duke_stix
31st October 2007, 10:45 AM
i support this entirely!

is there any way i can help?

ive been using spb mobile shell since the first beta releases were available and im really happy with it although yeah, it does show a bit of useless crap!

aiondennis9000
31st October 2007, 12:02 PM
i support this entirely!

is there any way i can help?

ive been using spb mobile shell since the first beta releases were available and im really happy with it although yeah, it does show a bit of useless crap!

Yeah. I hope you can reverse the encryption process. I'm not good at that stuff. What I can see is that it uses among other things the CRC32 of either the file or files to encrypt as one of the seeds in the routine.

If we start from there the encryption/decryption expert should be able to reverse the process.

fiftyclick
31st October 2007, 12:52 PM
Although yes, CRC is used for this encryption routine, it is not the hardest part to crack. Really, we need to get the password used. Before attempting to decode such a file brute force, it might just be easier to find the password itself. Where is this file used, and what files refer to it. I am assuming this zip file was just part of a larger program, as it is unlikely anyone would zip one tiny file and encrypt it. Is this in the CAB for SPB+?

duke_stix
31st October 2007, 06:28 PM
im working on the password for that zip file


where did you get that zip file from? any idea of the password length?

duke_stix
31st October 2007, 06:42 PM
im going to need a bit more info on that file


namely, what kind of file, type, where you got it from (i.e did you copy it straight off your phone) and if possible the original source

aiondennis9000
31st October 2007, 08:19 PM
im going to need a bit more info on that file


namely, what kind of file, type, where you got it from (i.e did you copy it straight off your phone) and if possible the original source


Hello duke. Check your PM's

aiondennis9000
17th November 2007, 11:33 AM
Hguys I'm back. I was out sick. Back on it though. :D