This is a my program for viewing of bada firmware.
This source code
This source code
Last edited:
Simple tool for viewing of Bada firmware
- Thread starter ho1od
- Start date
tried it with simple test
dumped a ShpApp file then save it to another location
and here is the surprise
i did a hash check between both files and they didn't match!!!!!!!
have the same size same name differs in dates and differs in hash check
i think you have to work on your beta app more
keep the good work
and by the way the UI is more simple than trix so i pet it will beat it when it is finished
dumped a ShpApp file then save it to another location
and here is the surprise
i did a hash check between both files and they didn't match!!!!!!!
have the same size same name differs in dates and differs in hash check
i think you have to work on your beta app more
keep the good work
and by the way the UI is more simple than trix so i pet it will beat it when it is finished
Thank you for the test
Hash should be different. Programs use different ways to sort the directory
The file will be correct
ok adfree you are so right
i can't argue with you off course
who am i to do it?
sorry but i just wanted to tell the app maker about that maybe he can try to improve that point
MD5 Hash is only "mandatory" for Multiloader. But you can also disable MD5...
NO MD5 Hash needed.
Important is only that structure of created files is valid and content files are not corrupt...
But for instance sort Order from A to Z or from 1-10 or versa vi is not important.
I mean position from content files in created files like FFS...
Example, 3 files:
1
2
3
Second attempt with different sort order:
3
2
1
Both created files are valid, but MD5 differs, NOT equal...
Generally. Hashes like MD5... if only 1 Byte is different. Then Hash complete different.
Sorry, bad english description but I hope you understand what I mean...
Forget MD5.
Anyway. Thank you for testing mylove90.
Best Regards
NO MD5 Hash needed.
Important is only that structure of created files is valid and content files are not corrupt...
But for instance sort Order from A to Z or from 1-10 or versa vi is not important.
I mean position from content files in created files like FFS...
Example, 3 files:
1
2
3
Second attempt with different sort order:
3
2
1
Both created files are valid, but MD5 differs, NOT equal...
Generally. Hashes like MD5... if only 1 Byte is different. Then Hash complete different.
Sorry, bad english description but I hope you understand what I mean...
Forget MD5.
Anyway. Thank you for testing mylove90.
Best Regards
Multiloader does not check the MD5 hash, it checks the signature on the offset 440 bytes from the end of the file. My program calculates and corrects the signature.
Last edited:
New version 0.0.1
New features:
Added drag and drop files to the dump
Added drag and drop files to add the firmware
Added preview ini, txt, xml, jpg, png files
The program can be downloaded in the first post
New features:
Added drag and drop files to the dump
Added drag and drop files to add the firmware
Added preview ini, txt, xml, jpg, png files
The program can be downloaded in the first post
@ ho1od
Maybe if you have time. You could integrate also RC2.
The Adresses for RAW Pics from S8500 are floating around here.
For the others smaller bada we could little bit research... also S8530 have little differences. But Algo should be the same...
http://xdaforums.com/showpost.php?p=11919036&postcount=24
Thanx in advance.
Minimum support for RC2 could be change Value for Debug Level...
0 1 or 2
Best Regards
Maybe if you have time. You could integrate also RC2.
The Adresses for RAW Pics from S8500 are floating around here.
For the others smaller bada we could little bit research... also S8530 have little differences. But Algo should be the same...
http://xdaforums.com/showpost.php?p=11919036&postcount=24
Thanx in advance.
Minimum support for RC2 could be change Value for Debug Level...
0 1 or 2
Best Regards
Meanwhile for XXJB6
http://xdaforums.com/showpost.php?p=11070379&postcount=5
To extract *.img take an while...
I do it for every Frame from 48 + 1 Pics... via WinHex.
Best Regards
http://xdaforums.com/showpost.php?p=11070379&postcount=5
To extract *.img take an while...
I do it for every Frame from 48 + 1 Pics... via WinHex.
Best Regards
Update v 0.0.2
New features:
View images in a file RC2
Replacing images in this file. The file must be BMP 24bpp format
Change debug level
The program can be downloaded in the first post
New features:
View images in a file RC2
Replacing images in this file. The file must be BMP 24bpp format
Change debug level
The program can be downloaded in the first post
I used your tool to create a custom SHPApp.app file. But I think multiloader checks the MD5 hash and does not enable me to upload it to the phone. I have read adfree's post on disabling it but I couldn't understand him. So if you could help me in detail, I would be grateful.
Thanks.
Thanks.
I tested the program and flash the modified files via multiloader V5.64. Everything works fine. Upload your file and give me a link, I'll check it
PS. Signature at end of file, it is not MD5 hash, this is another hash function. I disassemble it from multiloader and inserted into the program. The file is signed correctly
Last edited:
One doubt. Will I have to extract and recompile using your software itself? Because I had extracted the software earlier using trix. So maybe that's making your software not sign it correctly? Also I don't see how I can extract amss and csc files with your software. When I select on your AMSS and CSC tabs, there's nothing. I can't find the fie button which is there on the FFS, PFS and SHPAPP tab.
Similar threads
Top Liked Posts
-
There are no posts matching your filters.
-
12bada 2.0 has enabled signature checking. as we know last 0x10 bytes of encrypted data are stored in footer at offset 0x198. Next 0x40 bytes is rsa signature taken from sha1 hash of 0x160 bytes (in footer 0x48-0x1A7).
No chance to generate valid signature but we can reverse this pattern and modify encrypted data to pass rsa1 signature check
3 things needs to be done to pass BL security:
1. rsa signature needs to be valid (in footer)
2. last 0x10 bytes of encrypted data must be equal to 0x10 bytes at footer offset 0x198
3. last 0x10 bytes of decrypted data must be equal to 0x10 bytes of seed key (FF FF FF FF ...)
attached routines does that - encrypted apps pass BL security checks and we can download it to phone with no problems. We lose 0x10 bytes of nand apps space but who cares?
regards,
Bartek
