yashsingh1/xdaforums huggingface dataset:
[Bada Software and Hacking General] adfree:
../SHP3/AppSvc/Drm/service/DrmSvcAPI.cpp(232)
PshSvcDrmIsDrmFile: This file(/User/Theme/Install/IdleWallpaper.qmg) is not Drm because pDrmFileInfo == NULL

I can see this in WinComm if I play with Themes...

Somewhere I saw qmg.dcf... forgotten where...

Best Regards

Edit 1.

(DRM_ENGINE_EMERALD)[File Path] ../SHP3/AppSvc/Drm/OMADRM/Engine/Emerald/util/Drm2MediaObject.cpp(121)
(DRM_ENGINE_EMERALD)[Statement] Check failed (m_hFile) return 0
(DRM_ENGINE_EMERALD)[File Path] ../SHP3/AppSvc/Drm/OMADRM/Engine/Emerald/content/Drm2DCFControl.cpp(140)
(DRM_ENGINE_EMERALD)[Statement] Check failed (pParserObj) return MDCF_RESULT_INTERNAL_ERROR
(DRM_ENGINE_EMERALD)[File Path] ../SHP3/AppSvc/Drm/OMADRM/DrmManager/Emerald/Drm2SvcInternal.cpp(303)
(DRM_ENGINE_EMERALD)[Statement] Try catched(res == MDCF_RESULT_SUCCESS)
Drm2GetFileAttributes : drm (failed).
[Bada Software and Hacking General] adfree:
Space Z...

No idea why main.swf is not encrypted... :confused:

This is funny... maybe later helpfull.

Best Regards
[Bada Software and Hacking General] adfree:
:laugh:

AES for Themes and ...

:laugh: :D :angel:

Big thanx rafaelvasconcelos

:good:

Best Regards
[HTC EVO 3D] Evo-3D:
My 3VO has three devices assigned to it, but only one is ever active. I used to be able to use one bluetooth device, then when it runs down, switch, all while not disrupting the call. Now if I switch devices, the call is still active, the switch happens, but I cannot communicate (no voice or sound). To make matters worse, in my X5 I'm having connectivity issues. I would be connected to the car, then every 3 mins it would unconnect and reconnect seconds later. I even went as far as removing the X5 from my list, and still the problem persists.

I will confirm that I have all devices charged, very near the proximity of the phone, and have not DLed any software that would cause an issue.

As I said before, I used to be able to switch devices and not lose the call, now something has changed. I can be on a call and activate a bluetooth device and have it transfer to the bluetooth, no problem, but if I am on the bluetooth, I have to drop the call, switch, then call back.
[HTC EVO 3D] Evo-3D:
I've noticed that if I make a three way call I cannot make another one without dropping the original call and starting over. To make matters worse, if I get a call while I'm already on the phone, the same issue happens, along with the same result if I need to make a 3-way call.

Any solution to this?
[HTC EVO 3D] franky_402:
Its a sprint issue afaik
[HTC EVO 3D] Evo-3D:
So it's not just me?
[HTC EVO 3D] Countryazhell:
And I thought it me just hating sense and not knowing hoe to use it.
[HTC EVO 3D] damagethem:
did you guys hit up a dev or anything with the issue?
[Xperia Play Q&A, Help & Troubleshooting] b4d5h0t:
Hi all, ive just rooted my xperia play and removed quite alot of bloatware after reading lots of how to guides from all you guys :-) i used doomlords 1click zergrush method without a problem thanks ;-) so far so good ...except i cant get rid of the star battalion icon after uninstalling and even deleting the back up, same goes for live ware manager anyone know any tricks how to get rid of them properly? Everything else i removed went ok, id also like to get rid of latitude and places but without harming google maps is this possible?

Any help much appreciated

Cheers

I used the free titanium backup to remove my bloatware.
[Xperia Play Q&A, Help & Troubleshooting] sonicfreak360:
Well latitude is stuck with maps, but try rebooting and installing sd maid to get rid of the remaining data created my the apps!
[Xperia Play Q&A, Help & Troubleshooting] b4d5h0t:
Cheers ill try that. I just installed root uninstaller which took care of live ware manager and star battalion which for some reason titanium back up was struggling with removing... Just places and lattitude to get shot of now :-)

What about if i completely removed my preinstalled google maps hopefully along with places and latitude and then reinstalling the market version? Anyone tryed this

Or has anyone removed google maps and if so does it remove places and latitude?

Wow its great having the phone with just what i want on it, it seems alot faster too :-)
[Xperia Play Q&A, Help & Troubleshooting] sonicfreak360:
Nah, market version of maps doesn't change :-\
[Xperia Play Q&A, Help & Troubleshooting] jacklebott:
Removing google maps does remove places and latitude, because they're all the same app. It's all or none, but if you use LauncherPro you can hide places and latitude from the drawer

By the way, this is the wrong thread to be posting questions. Just a reminder
[Xperia Play Q&A, Help & Troubleshooting] sonicfreak360:
You forgot to mention adw launcher and go launcher ex! Try em all :-)
[Xperia Play Q&A, Help & Troubleshooting] b4d5h0t:
Nice info on the launchers ill give them a try, sorry if this threads in the wrong section feel free to move it if u want.

Thanks for all the info :-)
[Galaxy S II Q&A, Help & Troubleshooting] pileot:
Im having interesting issues with getting ADB to work...

I believe i have the android SDK installed properly, i can go to the command prompt and do ADB devices no problem, however my phone does not show up. Other guides online said to make sure debugging is on, which it is, but still nothing. Can anyone suggest what i may be missing? have any of you had this problem and know how to fix it?
[Galaxy S II Q&A, Help & Troubleshooting] peachpuff:
Try typing "adb fork-server server" then open another window and try connecting with adb again.
[Galaxy S II Q&A, Help & Troubleshooting] Vlad the Cat:
Had the same problem. Install Kies and let it download the needed USB drivers; helped me !

[%s] XDA APP SO TASTY WITH MY SLOW INTERNET OMNOMNOM

If i helped you, im sure its not too hard to waste 1 click over that litte pretty "Thanks" Button.
[Milestone XT720 General] dj008:
Hi sorry to put up another thread I could not find another one like this

So Im in a bit of trouble here so I broke the volume rocker for my milestone xt720, no biggie. I can use apps to control volume and stuff. but is there any other way to enter in bootloader / navigate in open recovery.

Any help would be greatly apperciated

Thanks:confused:
[Milestone XT720 General] 3rdstring:
IIRC there was an option to reboot into Open Recovery in Dexter's OpenRecovery.apk. Also the expanded power menus in Mioze's & Fjfalcon's CM builds also include this functionality & there is an EPM (extended power menu) patch for Brianlili's Bravo.

HTH
[Milestone XT720 General] dj008:
I managed to go the moize7a bootrecovery but i cannot navigate innit becase the volume rocker is broker any way around this? How can i navigate there? Also forgot to mention that im on brainl lees rom and i went in bootloader it says fastboot mode and the phone does not show up in rsdlite
[Milestone XT720 General] shungun:
Can you try

adb reboot bootloader

from AndroidSdk\tools folder in your command prompt.

Do not disconnect your phone.

This should make your phone show up in RSDlite. flash a 2.1 rom

and if you are still under warranty bring it back to the moto guys :)
[HTC EVO 3D] remf4i:
can someone please tell me where to find viruses eternity sense 3.5 rom
[HTC EVO 3D] ktrotter11:
try infectedrom.com, may be donor access only..so dont get mad if its locked
[HTC EVO 3D] kpsingh:
you have to setup svn to get the roms to flash properly if you have that done let me know i can repost with the svn link. hope this helps dont forget to pop my thanks cherry lol.
[Galaxy Note GT-N7000 General] Raptor1956:
I'm looking to buy a Note pretty soon and since it looks like there won't be an official release in the USA any time soon it looks like I'l have to import one. My major concern with this is what to do if there is a problem and want to return it. I see that some appear to have issues with the display and with any new device there's always the concern that they haven't got all the bugs worked out so being an early adopter caries with it some defect risks. So, what's the deal with importing from Germany or the UK and are there any sellers to stay away from or prefer?

Thanks,

Brian
[Galaxy Note GT-N7000 General] mike2518:
same concern here. i am really close to buying from either from clove or handtech, both UK retailers. do they provide any kind of warranty/satisfaction guarantee? also, what about the manufacturer warrany? do these brand new phones not come with a Samsung warranty? thx
[Galaxy Note GT-N7000 General] Twohothardware:
They are EU phones so come with a Samsung 2 year international warranty which doesn't include the US. Handtec and I'm sure probably Clove as well cover the phone for the full 2 years. If you need warranty service you ship it back to them in the UK and they handle the repair through Samsung for you.
[Galaxy Note GT-N7000 General] pr0t0c0l:
Hello,

I am also looking for note and my condition is same they don't provide any manufacturer warranty.

So I am concerned about the quality, I also doubt that it could be refurbished or korean copy of the cell phone

Sellers are saying that the import it from Indonesia. Also they are saying that its genuine and will connect via samsung Kies as well so I am thinking to go for it.

What will you suggest?

Buy the way did you purchased the cell?

Thanks
[Samsung Galaxy S (4G Model)] kkoshko1:
Does anyone know a good subscription or a way to stream music from spotify, on the edge network. I live in a 4g area... but i work in edge area. Unfortunately T-Mobile has no 3g, but streaming on edge sucks always stopping pissing ne off ! Anyone know of a solution other than downloading songs to my phone or Pandora?

Thanks mates
[Samsung Galaxy S (4G Model)] HB66:
there are some apps that let you stream music, i stream some of my music from audiogalaxy http://www.audiogalaxy.com/, app https://market.android.com/details?id=com.audiogalaxy, you just make your home pc a music server. i have a media server that is on all the time np for me.
[Samsung Galaxy S (4G Model)] ericmpanda:
Use doods music streamer turn on offline cacheing to auto
[Samsung Galaxy S (4G Model)] kkoshko1:
Cool ill check it out thanks guys!
[Bada Software and Hacking General] adfree:
SecretKey.key

:confused:

Any idea what this is for?

Searched little bit through folder Security...

Found in S8500XPKJ1.

Best Regards
[Bada Software and Hacking General] Rebellos:
For quick insight:

Main function is SpkiDispatch , it does create this file by calling SpkiSaveMasterSecretKey, together with that key it does create directories

"/Security/Log/"

"/Security/Log/Cert/"

"/Security/CM"

SpkiSaveMasterSecretKey does use functions

SecFrameGetIMEI

SpkiBase64Decode

SecCrDecodeRSAPublicKeyEx

Whole "Spki" functions family seems to be related with OS certificate manager. And yeah, looks like it is based on IMEI, or does include IMEI itself.

//edit:

Oh yes, string which is hardcoded into APPS and is being decoded by Base64 during runtime (probably kind of init state of the key) is
[Bada Software and Hacking General] duxxyuk:
from the looks of that string - I think you're looking at ... ahem wait for it ... a secret key -- or perhaps one half of a public/private key pair. Something that AES128 would be perfect for... good luck cracking that one.
[Bada Software and Hacking General] adfree:
Compared between S8500 and S8530... both on KJ1:

535730310093C300064D4F42494C45C5000431303234C60080

Something human readable like this:

SW01 MOBILEÅ 1024

So first 25 Bytes are for header...

Then 128 Bytes...

Hmmm... 128 Bytes could be RSA 1024 encrypted... :confused:

Best Regards
[Bada Software and Hacking General] adfree:
Factory Production Mode

This seems interesting... for me...

Tested on XXJEB...

If I play with Developer Commands... for instance:

> *> cmd="[B]CheckFPM[/B]"
> DevGetHomeDLFlag : Address(0x1dcc0000) flag(0xffffffff)
> RbmCHCheckHomeDLFlag : FLAG value=0x8,result=0
> *> return value = -1 (0xFFFFFFFF)

> *> cmd="[B]EnableFPM[/B]"
> DevGetHomeDLFlag : Address(0x1dcc0000) flag(0xffffffff)
> DevSetHomeDLFlag : Address(0x1dcc0000) flag(0x0000fff7)
> DevGetHomeDLFlag : Address(0x1dcc0000) flag(0x0000fff7)
> RbmCHEnableHomeDLFlag : FLAG value=0xfff7,result=1
> *> return value = 1 (0x00000001)

and...

Result is, after next Boot Wave starts with this funny Screen blue, then green... known by wrong key combination...

If I have changed to Qualcomm before... I can also write NV items via QPST...

Maybe here are more funny Flags possible... Check in JTAG dump at 0x1DCC0000...

Best Regards
[Bada Software and Hacking General] adfree:
I have found reason, how Wave checks "valid" apps_compressed.bin... also Boot...

Multiloader or every Flashing action writes own 512 Byte Info Block...

You can find them in 512 MB Full dump... from JTAG or from Ram Dump eXtractor:

http://xdaforums.com/showpost.php?p=39658811&postcount=23

Search for this HEX value...

3412CDAB02000000

Now you can see your PC name... and your Country too...

your own IP address is also stored...

The other data are from last 1024 Bytes from boot_loader.mbn and apps_compressed.bin... parts of it... later more...

Sometimes I can see this... no idea yet why... or what:

Init Case 2

or

C#O#D#E Set

Hmmm... if I see this about Code... searching for and I find this in Boot...

Samsung:UNLOCK-KEY:/Security/Disabled
Fixed one for Samsung 3G platform. This string should be long ecnough maximum length is 128 bytes
[B]A#D#D#R[/B] Set C#O#D#E Set

Hmmm, will try later... :D

Anyway, with this I have solved my BIG problem after M210S Firmware... :cool:

For now only with JTAG possible, but maybe later other solution... for instance via FOTA...

Best Regards
[Bada Software and Hacking General] adfree:
gHostInfo.pComputerName =
gHostInfo.pIP =
gHostInfo.pLocation = Germany
gHostInfo.pToolVer =
gHostInfo.uDatePC =
Nand Read ECC count 0, Retry total count 0

=================================

BootDebugBuffNandWrite

=================================

Taken from S8000 Jet dump...

Here more clear what Multiloader writes from your private data...

Best Regards
[Bada Software and Hacking General] adfree:
I'm trying to remove this from MultiLoader V5.67.exe...

Found in .exe

GetLocaleInfo
GetComputerName

Leads to kernel32.dll ...

Maybe I can find something else...

GetDateFormat crashes Multiloader... :o

Also

GetCalendarInfoA

To change into Set... I think its dangerous not to kill my Windows... :D

Best Regards

Edit 1.

GetComputerNameW for Unicode instead GetComputerNameA :D :cool:

Now Multiloader only writes first Character of your Computername... :angel:
[Bada Software and Hacking General] adfree:
Back to the Info Block with 512 Byte....

With Command PrtSecBoot

> SecBoot : slot num(2), mass production(0), verSecurity(2), slot age(3)

> SecBoot : invalid binary key detected

> SecBoot : slot age(3) Usb Version("S8530+XX+LA1"), usb age(1), Usb Creation time stamp "42/01/05 10:05"

> SecBoot : Code Version(""), code age(1), Code Creation time stamp ""

> SecBoot : Code Download device time("00/01/01 00:00:GMT"), host PC time("43/06/06 15:23:GMT")

> SecBoot : Used Downloading Tool is FastMultiLoader 0 5.6.7

> SecBoot : Download hostname("[COLOR="Red"][B]yourPCname[/B][/COLOR]"), location("Germany"), ip(1x3.1x3.9.xx)

> SecBoot : SysInfo change device time("00/01/01 00:00:GMT"), host PC time("00/01/01 00:00:GMT"), tool ver(""), change Method(0), age(0)

In this Info Block are stored 2 RSA 512 Signatures from Boot and 1 from apps_compressed.bin... from apps_c the second RSA 512 Sig... see here:

http://xdaforums.com/showpost.php?p=38088383&postcount=68

I was able to try few things...

I can manipulate

But tried to find

:confused:

Here I can see Init Case 2... so this should be position for ... also:

C#O#D#E Set

I think this is set, if Unlock via Code... in theory...

A#D#D#R

:confused: :confused:

No idea yet...

Maybe in this Info Block it is possible to complete disable Security check...

Best Regards
[Bada Software and Hacking General] adfree:
Little progress...

I am able to erase/overwrite address in 512 MB OneNAND manually via sending Commands...

http://xdaforums.com/showpost.php?p=42919458&postcount=31

For now only 2000+ Bytes in FOTA area tested...

7E02EE[B]00005009[/B]8000...
7E00DD[B]00005009[/B]0008...

0x9500000 from XXLA1 S8530...

Later I hope I can erase this damn Info Block to repair my S8530 with M210S Firmware... without JTAG...

Best Regards
[Bada Software and Hacking General] adfree:
1.

How to find IMEI in JTAG dump?

1.1

Where is EFS address ... :confused:

2.

Contains sysinfo IMEI ?

2.1

How to find sysinfo in JTAG dump? :confused:

bada 1.x if Wave alive... in Security folder...

Then it is possible to search for in dump...

But it seems not on every Firmware on same position...

sysinfo is 6560 Bytes (19A0 HEX ) ...

Will do few tests with XXJL2... maybe laaaaaater I can identify IMEI and/or sysinfo in strange unkown JTAG dumps...

Best Regards

Edit 1.

For study maybe this:

S8500_Full512MB_IMEI_38178104728484_NandEC50_Alive

Test 1.

Search by text + Unicode... (if IMEI is correct in name...)

14 Digits instead 15...

Test 2.

Converting into NV item 550 Format...

083A...

Edit 2.

Maybe little progress... to find sysinfo in dump...

Found Header before... but there is no unique Header... with Joker between 3000 or 0 hits...

Different positions maybe "randomly" or apps_compressed Version specific...

To be sure I'm now downloading XXJF5 to compare with dump...
[Bada Software and Hacking General] adfree:
Strange...

I have remove sysinfo from my own JTAG dump, written back dump...

sysinfo restored or rebuild or copied from somewhere else? :confused:

Because 1:1 same...

Next attempt, to remove "Info Block" from 1FFC5000...

This is so strange... :o

Best Regards
[Bada Software and Hacking General] adfree:
http://xdaforums.com/showpost.php?p=43436279&postcount=6

I'm using now this as template...

Changed only at 1FFC5000...

Then flash complete XXJL2 for compare...

Result is working S8500...

sysinfo is generated different...

And Imiation_IMEI.dat file is different...

Now will try to check few "INFO Blocks"... and compare results...

if sysinfo and/or Imiation_IMEI.dat will be different..

Best Regards
[Bada Software and Hacking General] adfree:
:o

Sometimes my brain works slooow... :o

1.

IMEI is stored in Format used in QC handsets 15 + years... :rolleyes:

Near "MP" ... Hardwareversion...

1.1

Header of EFS seems:

ABEFCDAB

So address is:

0x1E700000

In older Firmware where Hardwareversion is PV... instead MP 2.000 or MP 1.000

Here I will check later again with open eyes... to find IMEI.

For now I will do some tests with replace ... to fully start foreign JTAG dumps to learn more about sysinfo...

Best Regards
[Bada Software and Hacking General] adfree:
Tested with S8500 and S8530 JTAG dumps... (on S8500)...

Attached PFS contain sysinfo and Imiation_IMEI.dat...

This force apps_compressed.bin to start with IM.. not active...

If NAND/Header Info at 0x1FFC5000 will be removed/deleted...

With RIFF JTAG for instance erase 0x1FFC 0000 to end...

For repair and educational purpose... only.

How to decrypt sysinfo?

:confused:

Whole file ?

Parts of it ?

Best Regards
[Bada Software and Hacking General] adfree:
Little progress...

https://code.google.com/p/badadroid/source/browse/trunk/FOTA

100 years later I am able to compile these examples... :D :o

Easy under Windows 7 tested with FASMARM:

http://xdaforums.com/showpost.php?p=46788023&postcount=35

I have tried with XXJEE Boot... because I need bada 1 for find sysinfo for my studies...

Very interesting. :cool:

In syssec.uniqueKey.bin I have found now S/N ...

S/N is also on Label under battery... before Samsung killed Service via Kies. It was also helpfull to download Firmware...

I was ever wondering, why I am not able to find S/N... :o

Anyway. These FOTA examples helps me to increase my little brain.

For now tested only these:

[B]dump[/B]_netlock_info.fota
[B]dump[/B]_unique_keys.fota
nv_[B]dump[/B].fota

Next will be write_netlock_info.ASM...

Maybe this is what I think...

Yes, I know about FLOCK. But I need this for my JTAG Fullflash journey ... and for my little brain to understand how this work...

Btw.

I have no device here with SIM or Netlock... :rolleyes:

To look into decrypted sysinfo and see the SHA1 Hashes is also possible via these FOTAs...

Thanx. :cool:

Best Regards
[Bada Software and Hacking General] adfree:
Few tests later...

It seems I have to play with DEcrypted sysinfo...

http://xdaforums.com/showpost.php?p=47851350&postcount=49

First test failed with write_netlock_info.ASM before...

I have used DEcrypted Version, but nothing happens...

Maybe again my fault... anyway... tiny little step forward.

1 Goal is to identify sysinfo in JTAG dump... but here I need encrypted sysinfo...

Best Regards
[Bada Software and Hacking General] adfree:
Aha...

The reason is not only IMEI, because normally you can find IMEI in JTAG dump, but it seems Wave can not find anymore correct sysinfo... if fulldump from other Wave is flashed via JTAG.

http://xdaforums.com/showpost.php?p=47851350&postcount=49

Result is working handset without IMEI... but this no problem...

Will check if now S/N is my or also gone with the other FOTAs...

But now I can flash 512 MB Fulldump WITHOUT modification of this file...

Then restore/rebuild sysinfo via bterm + correct FOTA...

Later more.

Best Regards
[Bada Software and Hacking General] adfree:
"Strange"...

sysinfo contain more then 1 or 2 SHA1 Hashes...

The others looks like "not available/not active" or something...

I have no handset with Lock... :o

I have only compared few DEcrypted sysinfo...

Simple copy and Paste not activate the Locks... :confused:

Later more...

Best Regards
[Bada Software and Hacking General] adfree:
Interesting...

Unique Key known from Header Info...

Stored in 512 MB OneNAND...

Is written into MBR (512 Byte) of moviNAND...

http://xdaforums.com/showpost.php?p=49989727&postcount=68

If OneNAND is full erased, by JTAG RIFF for instance... Then text instead number:

PRODUCTCODEINVALID

Hmmmm, maybe this helps me later to restore sysinfo from JTAG dumps...

Best Regards
[Galaxy S I9000 Q&A, Help & Troubleshooting] alexanderct:
Hello XDAers,

I've been trying to get flash h264 videos from vimeo to play.

Came from simplicity rom, recently did a wipe flash of mintberry miui 1.11.4. no playback on both roms which leaves me scratching my head. playback worked previously for me on simplicity 0.4.

yes i have flash, no i didnt oc/uv for the test,

had divx.apk in the roms that need it - suggested by d0ggy of simplicity rom

please try this link and tell me: http://vimeo.com/31155800

EDIT: new test video if anyone wants to help me confirm that its not just my i9000 thats not working: http://vimeo.com/32055159

1. does it playback

2. what rom you are using

3. which browser
[Galaxy S I9000 Q&A, Help & Troubleshooting] 4rm45:
Stock browser, Darky's JVT Resurrection

Playback is perfect
[Galaxy S I9000 Q&A, Help & Troubleshooting] alexanderct:
update

ok i just flashed jvt STOCK and it doesn't work.

tested default browser, stock flash player and updated flash player... any insight guys?

friend's i9000 has no issues either on stock or lidroid 2.3.5

this problem seems to only be experienced by me on vimeo videos!

EDIT: some videos work such as the test video posted originally:http://vimeo.com/31155800

this one does not work however: http://vimeo.com/32055159

pics of it not working attached
[Nexus S Q&A, Help & Troubleshooting] Rally187:
When i first came from my evo to the nexus the first thing i noticed was how the screen had a yellow tint. that was easy enough to solve but one thing that i cannot figure out is how to make dark images look better all my wallpapers look like they are blown way up and look like ****. Attached is an example of what im talking about has anyone had this problem, anyone know how to fix this?
[Nexus S Q&A, Help & Troubleshooting] jaestreetss:
Voodoo control
[Nexus S Q&A, Help & Troubleshooting] Rally187:
i used that to fix the yellow tint issue i was having but i dont know what settings are going to help with what ever that is.
[Nexus S Q&A, Help & Troubleshooting] Bruce lee roy:
LCD resolution