yashsingh1/xdaforums huggingface dataset:
[Bada Software and Hacking General] Tigrouzen:
Yes off course its differente, its intersting to play with Bada 1.2, but the futur its Bada 2.0 and application to came's for Bada 2.0, also all designer works for bada 2 Theme, then i dont think its intersting to investigated for Ho1od and B.kubica on this way...

---------- Post added at 01:30 AM ---------- Previous post was at 01:24 AM ----------

You seems's change extension name ?

Wich version you could change adress because its verry intersting, i want test some nand for Android !!!

I use 5.65.
[Bada Software and Hacking General] b.kubica:
from fmtBADA.c:

unsigned int decomp_ver[][4] =
{
// firmware qmd ver start addr max length
{ S8500v12 | BADA_APPS, 0x03050000, 0x01100000, 0x03500000 },
{ S8500v12 | BADA_RSRC1, 0x04070000, 0x04800000, 0x06F00000 },
{ S8500v12 | BADA_RSRCS, 0x04070000, 0x0B700000, 0x00F00000 },

{ S8530v12 | BADA_APPS, 0x03050000, 0x01300000, 0x03500000 },
{ S8530v12 | BADA_RSRC1, 0x04070000, 0x04A00000, 0x05000000 },
{ S8530v12 | BADA_RSRCS, 0x04070000, 0x09A00000, 0x00F00000 },

{ S8500v20 | BADA_APPS, 0x04020000, 0x01100000, 0x02000000 },
{ S8500v20 | BADA_RSRC1, 0x05020000, 0x05D00000, 0x05A00000 },
{ S8500v20 | BADA_RSRCS, 0x05020000, 0x03A00000, 0x02300000 },

{ S8530v20 | BADA_APPS, 0x04020000, 0x01300000, 0x02000000 },
{ S8530v20 | BADA_RSRC1, 0x05020000, 0x03600000, 0x04100000 },
{ S8530v20 | BADA_RSRCS, 0x05020000, 0x07700000, 0x01E00000 },

{ S8600 | BADA_APPS, 0x04020000, 0x08000000, 0x02000000 },
{ S8600 | BADA_RSRC1, 0x05020000, 0x0A200000, 0x03200000 },
{ S8600 | BADA_RSRCS, 0x05020000, 0x0D400000, 0x02800000 },

{ S7250D | BADA_APPS, 0x04020000, 0x00E00000, 0x01F00000 },
{ S7250D | BADA_RSRC1, 0x05020000, 0x02F00000, 0x01E00000 },
{ S7250D | BADA_RSRCS, 0x05020000, 0x04D00000, 0x01C00000 },

{ 0, 0, 0 }
};

means bada 1.2:

S8500 - max length 0x06F00000 = 111MB

S8530 - max length 0x05000000 = 80MB

is that clear for you now?
[Bada Software and Hacking General] ho1od:
update 0.2.3

Only for test

Added Editing text files (.txt .sig .ini .xml .js .html .htm .css .cfg .store)

Supported by copying, cutting, deleting, pasting, saving

Added syntax highlighting for .xml html files
[Bada Software and Hacking General] cdanthien:
I have problem with .csc file and load .csc file into multiloader.

I've dump file .csc with wave remarker, edit some files and save completed. But i did not saw notice "file is signed" as file .app and .ffs. After that, when I chosen file .csc in multiloader 5.65, it's say "can not load csc binary".

Pls, help me fix the error above.

Thank in advance
[Bada Software and Hacking General] ho1od:
Upload it CSC file, plz.
[Bada Software and Hacking General] civil.scholar:
you can sign your modified file manuelly .

go to utils tab and select sign file then choose your file and sign it
[Bada Software and Hacking General] kafkamd:
rbm view is correct when ؟
[Bada Software and Hacking General] ho1od:
ASAP.............
[Bada Software and Hacking General] :
I edit ShpApp.app & FactoryFs.ffs files with Wave Re-maker.
[Bada Software and Hacking General] ho1od:
QMG compression is very similar to the compression of QMD. I think soon completed yet decompression program :)
[Bada Software and Hacking General] adfree:
:o

I hope then my S8500 is alive again and ready for action...

Short tested Wave_Remaker with S8530 Firmware.

http://xdaforums.com/showthread.php?t=1396930

Seems to run. :cool:

Thanx.

Best Regards
[Bada Software and Hacking General] Michsior:
Hi!

I have one problem. When I'm loading edited .rc1 it into my 533 it work great, but when i do this with edited .rc1 for 723, MultiLoader is saying:

NAK_INVALID_LEN 0

What should i do?
[Bada Software and Hacking General] KrazyKong:
Is QMG the .img format of the poweron/poweroff images on the Wave 8500?
[Bada Software and Hacking General] xator91:
Thanks friend, you're great!! :D
[Bada Software and Hacking General] astrotom:
So that does mean that files extracted with trix can't be recompiled with your software?
[Bada Software and Hacking General] ho1od:
Yes, you can recompile them
[Bada Software and Hacking General] b.kubica:
TriX generate valid checksum :)

btw, that hash is just md5 aligned to 64 bytes, that's all

http://xdaforums.com/showpost.php?p=10506092&postcount=38

// generate md5 hash, remaining bytes needs to be zeroed
crypto_generate_md5 ( dst->data, ALIGN_BY ( src->length, 0x40 ), md5 );
[Bada Software and Hacking General] astrotom:
I just now tested and can confirm that files extracted by trix can't be signed with your app. It used to be stuck at save running and never showed the popup box saying "File is signed". But when I extracted and recompiled usin gyour software, it worked! Thanks a lot for the software :) I feel this tool is more easier than trix. Hope you implement csc, amss and rc2 features as soon as possible.
[Bada Software and Hacking General] lasentenza:
You are saying that we would be able to modify amms file?? :eek:
[Bada Software and Hacking General] ho1od:
b.kubica

Thank you very much for your reply and thank you for your program.

Yes you are right It was my mistake.
[Bada Software and Hacking General] ho1od:
not modify, extract only ELF files
[Bada Software and Hacking General] b.kubica:
TriX can do that ;]
[Bada Software and Hacking General] lasentenza:
Wich version? wich script? :eek:
[Bada Software and Hacking General] ho1od:
Do you have any ideas on how extract the files from .RC1 ?
[Bada Software and Hacking General] adfree:
RC1 is folder System on Wave... see here:

http://xdaforums.com/showpost.php?p=12532416&postcount=14

If you need study decompressed RC1... download language packs from bada SDK.

http://xdaforums.com/showpost.php?p=11169144&postcount=10

Best Regards
[Bada Software and Hacking General] lasentenza:
Hi adfree,

SDK is a little hard to use if you don't have the knowledge... like me :D
[Bada Software and Hacking General] adfree:
http://developer.bada.com/apis/docs/commonpage.do?menu=MC01041000

For RC1 study look into these Language packs... you will find:

Rsrc_bada_S8500.rc1.org

and

CSC.rcs.org (first 7 MB of CSC file) in Win32_Bin.img

Both are compressed via QMD... IMRC was older Algo... for instance in XXJB6...

Best Regards
[Bada Software and Hacking General] astrotom:
You can only change the modem name right now in amss.bin using trix. Use the change_modem_name.trx script.
[Bada Software and Hacking General] b.kubica:
a bit OT but...

yes indeed, for now only simple change modem name script for amss is done but what for do you want to modify amss? If you've some idea just analyze code and patch it - just like that simple script did
[Bada Software and Hacking General] lasentenza:
It depends, do you know what is present in amss file??
[Bada Software and Hacking General] xator91:
Hi ho1od, when change the primary image on RC2 and save the file at "Debug0 or 1 or 2" i have this error:

Error:

Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you clock Quit, the application will close immediately.

The format of the specified path is not supported.

If i clic continue, the Wave Remaker create a RC2 file with 132kb dimension.

Why? The file is BMP 24bpp
[Bada Software and Hacking General] ho1od:
Thank you for your feedback. This is my fault.

Here is a corrected version
[Bada Software and Hacking General] spacks:
Hello Ho1od.

Thanks for this wonderful tool. It's easy to use. Simplier than Trix.

Please can you rectify the error of all files being saved as .pfs by default?

Example, if you save "ShpApp.app" it comes out as ShpApp.pfs.

Same with when you save xxxx.ffs file, it comes out as xxxx.pfs.

Thanks and kudos to your hardwork.
[Bada Software and Hacking General] ho1od:
.img is not QMG, it lz16 compression, I think
[Bada Software and Hacking General] KrazyKong:
Oh ok. Still holding out hope someday we can actually view these .img files.
[Bada Software and Hacking General] b.kubica:
img decompression is few lines of code (if 99 is still few ;)

in attachement

r0 - pointer to start of data (skip first 0x10 bytes)

r1 - not used

r2 - dst
[Bada Software and Hacking General] KrazyKong:
Bobby, well done :). ho1od any chance of this code being implemented into Wave Remaker then?
[Bada Software and Hacking General] ho1od:
Well, I'll add viewing IMG this weekend.

thank you b.kubica
[Bada Software and Hacking General] ho1od:
update 0.2.4

Only for test

Added view .img

View only pics 800x480 (WaveI, WaveII, WaveIII)

thank you b.kubica
[Bada Software and Hacking General] civil.scholar:
@ho1od

please check the attached pic :

64b of windows 7

firmware : xxkk7
[Bada Software and Hacking General] ho1od:
Please give a link to this CSC
[Bada Software and Hacking General] KrazyKong:
I'm getting the same error. I'm running XP SP3 with all the .NET Framework versions from 1.0, 2.0, 3.0, 3.5 and 4.0 all updated with the latest Windows Updates.

What version of firmware did you test this on ho1od? I'll download that and try it at my end.

We're close, so very close :). Maybe once it's all working, we could code in a file export feature perhaps? Say exporting to .BMP or .JPG. Would it be possible to import .JPG/.BMP into .IMG at some point?

I've tried out the QMG feature. I select a file, then am asked to save that file (what format is it saving or exporting as?), and it also crashes.

Makes me wonder if we need some C++ and VS runtimes just like the .NET Framework ones.
[Bada Software and Hacking General] ho1od:
Sorry i fix it
[Bada Software and Hacking General] KrazyKong:
Hmm I'm getting an error that's stopping Wave Remaker from even starting now :(
[Bada Software and Hacking General] adfree:
QMG is not fully implemented yet.

NOT working.

But IMG is now possible to view (decode/decompress).

Tested successfully with Wave_Remaker_NEW_0_2_4.rar

Tested on XP 32 ...

Thank you. :cool:

Best Regards
[Bada Software and Hacking General] ho1od:
QMG is for developing, it's NOT work. I'm working on it :) ( decompression and compression )
[Bada Software and Hacking General] ho1od:
update 0.2.4.1

Only for test

Added bug fix

Added view .img any size (800x480, 400x320, 320x240)
[Bada Software and Hacking General] Rebellos:
Try to grab newest .NET Framework from MS site. May solve problem.
[Bada Software and Hacking General] KrazyKong:
It's working great so far :). Can see the .IMG files finally after well over a year of wanting to see them.

Now that we can see these .IMG files, would you be able to add an export to .bmp/.jpg for us? Also, is it possible to now start thinking of an import to .IMG from .bmp/.jpg?

Lastly, would it be possible to view .IMG files outside of a firmware file (.CSC, .FFS etc.). So let's say I have some extracted .IMG files, how best to view them. Drag and drop into the first 2 panes of your app where you can drag firmware files, or maybe a button/feature on the Utils tab?

This tool is turning out to be amazing, so thank you ho1od for all your wonderful work, and a Merry Christmas to you :)

0.2.4.1 is working for me fine. I have all versions of .NET Framework installed, and all the Windows updates applied. So if it's just .NET Framework I am covered for that part. Was only wondering if I had needed any extras like the C++ Runtimes (2003,2005,2008,2010?) and or one of all of the various VS runtimes too.
[Bada Software and Hacking General] ho1od:
update 0.2.4.2

Only for test

Added Save any images from firmware to .bmp, .png, .jpeg formats
[Bada Software and Hacking General] KrazyKong:
ho1od, again great work.

If you click the save image as, then try to cancel, the save as dialog box will pop up about 25 odd times. Each time you click cancel, it will pop right back up again.

Now if you actually do go ahead and save a file, it will also pop up 25+ times. At first I think oh cool, you can save all the files in one go, but it saves the same file over and over.

So a few things to look at, but got me thinking if we could add a feature where you save the first .img file and it will then go and save the rest of the files from whatever folder you are in, and auto name them to the same name in the rom. Thus the only different would be if you saved the image sequence as a bmp/png or jpg.
[Bada Software and Hacking General] ho1od:
Well. LZ16 compression is very simple, I'll do it.
[Bada Software and Hacking General] panther7:
GJ

@ho1od Good job with this tool. Thumb up!

But, i have some suggestions for CSC and languages:

1) Export all rsr files to txt files (and back -> import)

1.1) It would be good, selected language can be export (all rsr and import also)

2) [CRITICAL] Fix import newlines in txt file, eg.:

IDS_XXX_XXX
blablabla
hm, blabla

IDS_XXX2_HM
blablabla

3) [CRITICAL] Fix Save dialog "Are you sure?" repetion, in v0.2.3 it was works correctly
[Bada Software and Hacking General] ho1od:
Thank you for your feedback. I'll fix it
[Bada Software and Hacking General] panther7:
next:

4) import/export *.img files (from csc)

5) import/export/edit images in rc2

6) "fast" save file (no Save as... and no search opened/edited file)

Edit:

7) worse image compression in .Rc2 view -> Change Image, fix it

Edit2:

8) add number lines in csc (rsr edit)

9) add adding IDS lines in csc

10) adding multiline strings to csc (rsr) don't work via clipboard (ctrl+c, ctrl+v)
[Bada Software and Hacking General] ho1od:
I have finished writing a program compression .img
[Bada Software and Hacking General] ho1od:
update 0.2.5

Only for test

Added convert BMP24bpp to .img (only 800x480)

Many bug fix
[Bada Software and Hacking General] KrazyKong:
ho1od, nice update to Wave Remaker :). Am playing around with the BMP to IMG function now.

One thing I noted, is if you export an .IMG to .BMP from Wave Remaker, then turn around and import or use the "BMP to IMG Comp" feature on the Utils tab, it won't let you. Opening the exported .BMP in Photoshop and then saving it out as a 24bpp image solves the problem. It's not really a hassle, just an observation.
[Bada Software and Hacking General] ho1od:
The next release will be supported by import from files of any format( BMP, PNG, JPG, - 24bppRGB, 32bppRGB, 32bppARGB)
[Bada Software and Hacking General] ho1od:
update 0.2.6

Only for test

Added Encode/Decode from/into any format(bmp, png, jpg 24bppRGB, 32bppRGB, 32bppARGB)

Added Batch encoding/decoding from/into folder

Added Play img files from folder
[Bada Software and Hacking General] panther7:
@ho1od GJ, suggest: In Open Dump and Open in popup Play, please add selected actual dir (or last) where is wave remaker app.
[Bada Software and Hacking General] ho1od:
Ок. Next release
[Bada Software and Hacking General] Darktrooper1991:
Thanks could use that
[Bada Software and Hacking General] KrazyKong:
Awesome. This little utility is fast becoming the greatest tool ever for Wave users.

ho1od, I'm loving the play .img feature. Any chance in the future we could get an export to .avi or .flv on the play window as well?

Also can we get an export .img function. Right now you can individually save out each .img file, would be nice to select the "Image" or "ImageBattery" folder and then in one click be able to export out all the .img files that are contained in the selected folder.

Hmm, possible future ideas... what about a simple audio player so we can hear the .wav and .mp3 files contained in the firmware files. And an import audio feature where you can import .ogg files (which are contained in all the Android roms) to .mp3. These aren't that important really in the grand scheme of things, but would be nice all the same.
[Bada Software and Hacking General] Rebellos:
For this one I'd recommend using FMOD library to you ho1od - it's awesome easy to use and works great with really any filetype. Much better than to struggle with SoundPlayer. The only disadvantage is additional +500KB for fmod dll.

Abit more problematic is converting to mp3 - FMOD doesn't output anything than raw WAVE stream AFAIM, so you'd have to use some mp3 encoder.
[Bada Software and Hacking General] adfree:
Maybe its better if users learn to use more then 1 Tool.

To prevent 1 click solutions...

There are 1000+ FREE Tools in Internet available to convert Pics in Vid and versa vi... called Video Converter. :)

Same for MP3 or Waves... I mean Sound files...

Wave_Remaker is the best for crypto and compression related functions/features...

Please.

ho1od work really hard.

Big thanx to ho1od. :cool:

But maybe priority is more for decompress for instance QMG Pictures. :cool:

And then *.rsr files are editable.

Then we can more modify our handsets. :D :cool:

Instead waste his time and energy to make again Sound/Video player.... :(

Best Regards

---------- Post added at 04:52 AM ---------- Previous post was at 04:40 AM ----------

Maybe one day if more then 2 Developer.

I mean ho1od and b.kubica (TriX and many more nice stuff) ...

and then I can't remember more active Developer for Wave_Remaker. :(

Maybe 1 day possible to add plug ins or something like this...

Or if someone could provide source code to easier implement features in Wave_Remaker.

Not only hey ho1od.

Do this or do that.

Also I wished...

If it is okay for ho1od.

Wave_Remaker can also work with other Samsung handsets... not all features.

But few of them like decrypt, decompress and so...

Maybe its okay to create compatibility list, where other handsets tested successfully...

Bootloader and apps_compressed also in other Samsung handsets... :)

Thanx for reading.

Best Regards
[Bada Software and Hacking General] panther7:
@ho1od Edited suggestion list (for 0.2.6)

Export all rsr files to txt files (and back -> import)

It would be good, selected language can be export (all rsr and import also)

Save all, e.g.:

langs_folder/<lang_id_folder>/Admin.txt

langs_folder/<lang_id_folder>/AppTimer.txt

...

Save selected langs

Import lang folder (as 1.1.) or only one lang (<lang_id_folder>/), replace lang in rsr if exists

[FIXED] Fix import newlines in txt file

[FIXED] Fix Save dialog "Are you sure?" repetion, in v0.2.3 it was works correctly

[ADDED] import/export *.img files (from csc)

import/export/edit images in rc2

quick save file (no Save as... and no search opened/edited file)

worse image compression in .Rc2 view -> Change Image, fix it (preview)

[ADDED] add number lines in csc (rsr edit)

add adding IDS lines in csc

[NO NEED] adding multiline strings to csc (rsr) don't work via clipboard (ctrl+c, ctrl+v)

In Open Dump and Open in popup Play, please add selected actual dir (or last) where is wave remaker app.

Only proposal - In CSC change ID languages for names (full list)
[Bada Software and Hacking General] ho1od:
I can not promise

I can not promise

What is the name of the file, which way?

Only BMP 24bpp

Why? You can not add new IDS in the core

The same language have different IDs in different CSC
[Bada Software and Hacking General] panther7:
It's a pity, I think it would be a very good feature. If you send me source codes, i can look it.

I don't understand your question. I think, that if you open some file and you want save it, you must save as... and search opened file. But with "Save" feature you save as actual open/edit file.

Ok, but imported bmp is 24bpp (out of Photoshop). After was imported image have worse quality than orginial, see preview

Yes, i understand, but if i updating csc for new FW, which have e.g. 2 new lines. But it is not necesary, only proposal and good feature. ;)

Really? I don't think so. ID must (should be) same for all:

ID = 1 => ENGLISH,

ID = 2 => DEUTSCH, ...

ID = 17 => CZECH
[Bada Software and Hacking General] ho1od:
if you open a dump?

But OK, I'll do it

Upon conversion of 24bpp to 16bpp is a loss of quality

short rgb16_value = (short) (((red >> 3) << 11) | ((green >> 2) << 5) | (blue >> 3));

REALLY :) look Arabic or Chinese CSC
[Bada Software and Hacking General] panther7:
I checked S8530ZCKI2_S8530OZHKI2_CHN FW (Bada 1.2, 2.0 I am not found) and CSC have include languages ID 1, 31 and 40. If you look to full list (offset +2) than 1 = ENGLISH, 31 = CHINESE_S and 40 = KOREAN and it is correctly. ;)
[Bada Software and Hacking General] b.kubica:
not even close ;)

bada 1.2 OZSKG1

lang id 1 2 3 4 5. Included langiages - ENGLISH, CHINESE_S, CHINESE_T, CHINESE_T_TAIWAN, KOREAN
[Bada Software and Hacking General] panther7:
@b.kubica Ok, hence Samsung is mad and he don't know what doing. :eek:
[Bada Software and Hacking General] mylove90:
Every part in Samsung do it in its own way

For instance Arabic team do it just like Europe so the same IDs

But you can see that china got different stuff

Wave Remaker is for all users around the world so we can be stupid like Samsung :D

Best Regards
[Bada Software and Hacking General] KrazyKong:
ho1od, still hoping you might get the chance to add an export to .avi/.flv option to the play .img function.

As well as being able to select a folder and then exporting all the .img files contained in that folder. I guess an import folder would be neat as well. That way changing over to a new boot animation doesn't involved individually clicking 50 files to export, then re-import.

As for the built in audio player that was only a suggestion and I realize it's most likely not high up on the projected todo list, or possible list of things to do.
[Bada Software and Hacking General] ho1od:
Import from the folder there is always

You can import all files BMP or all PNG or all JPG
[Bada Software and Hacking General] ho1od:
I've finished viewing the RBM

Now only 16bpp LZ16 compressed
[Bada Software and Hacking General] panther7:
This feature is unnecessary, you can export all images to bmp/jpg/png files and with 3rd tool convert do video/flash format
[Bada Software and Hacking General] ho1od:
I've finished viewing the RBM 32bpp LZ32 compressed

Next step decompression RLE16 and QMG
[Bada Software and Hacking General] gilkzxc:
if it will save a CSC as non-compress when i flash my phone with it it will be compress?

ps i can't belive i turnd into a noob
[Bada Software and Hacking General] b.kubica:
bada 2.0 has enabled signature checking. as we know last 0x10 bytes of encrypted data are stored in footer at offset 0x198. Next 0x40 bytes is rsa signature taken from sha1 hash of 0x160 bytes (in footer 0x48-0x1A7).

No chance to generate valid signature but we can reverse this pattern and modify encrypted data to pass rsa1 signature check :)

3 things needs to be done to pass BL security:

1. rsa signature needs to be valid (in footer)

2. last 0x10 bytes of encrypted data must be equal to 0x10 bytes at footer offset 0x198

3. last 0x10 bytes of decrypted data must be equal to 0x10 bytes of seed key (FF FF FF FF ...)

attached routines does that - encrypted apps pass BL security checks and we can download it to phone with no problems. We lose 0x10 bytes of nand apps space but who cares? :)

regards,

Bartek
[Bada Software and Hacking General] mylove90:
Great Job :)

Let's try dangerous stuff :D

You rock b.kubica

Best Regards

P.S : ho1od integrate this please :)
[Bada Software and Hacking General] ho1od:
Samsung will go mad. :) You're the best!
[Bada Software and Hacking General] pcoruganti:
Adding Polaris Office

any idea how to add Polaris office to bada 2.0 without flashing the whole firmware? Thanks in advance..
[Bada Software and Hacking General] chetto106:
Just flashing. It's not in SamsungApps
[Bada Software and Hacking General] ho1od:
update 0.2.7

Only for test

Attention. Do not change the bootloader. Your phone may be die. Only for experts. Sorry.

Added Bug fix

Added b.kubica hack of seed encription (thank you very much) tested !!!!!!!

Added view .rbm files (only 16 & 32 bpp compression mode 2 (bada1.2))
[Bada Software and Hacking General] tapan15in:
Nice and awesome work k.kubica :)