yashsingh1/xdaforums huggingface dataset:
[Windows RT Development and Hacking] Myriachan:
So I know pretty much how my jailbreak is going to work from end to end, except with regard to PatchGuard. I don't need to burn my "Holy Grail" exploit in order to release a jailbreak, but it means that I have to deal with PatchGuard.

In Windows 8.1, Microsoft modified the kernel and ci.dll so that PatchGuard protects the signing enforcement mode variables. This means that if you modify the variables that were modified by 8.0's jailbreak, some random time in the next hour from that point, your system will bugcheck (bluescreen) because PatchGuard detected something tampering with the kernel. It is very obvious that the addition of these variables to PatchGuard's protected list was a deliberate attack against the RT jailbreak, because there is little other reason to care about enforcing these variables' integrity after startup.

I need to get around PatchGuard somehow. PatchGuard itself is designed to be an obfuscated mess, deliberately difficult to modify in a stable manner. It does a lot of nasty tricks, things that you would typically find in copy protection systems. Obviously, disabling it would be nice, but quite difficult. So is stopping it from bugchecking.

I can load kernel drivers, so I know of a way in which I can hook parts of the system that would not anger PatchGuard such that arbitrary unsigned DLLs and drivers could be loaded without hassle. For things like the lockdown in WinDbg, VBScript and PowerShell, I can hook NtQuerySystemInformation in the user-mode ntdll.dll and intercept the request to check the lockdown setting. Even though the system lockdown state would still be active, as long as user mode programs don't know about it, it won't be enforced. (The kernel doesn't care at all.)

However, this leaves one thing to be desired: executing ARM code. I already know how we can patch the kernel so that ARM code can execute without the CPU being switched back to Thumb2 all the time. However, patching the kernel definitely will get PatchGuard's attention, so there's no way to pull that off without defeating PatchGuard.

The optimal solution is definitely to defeat PatchGuard, but I don't know how. I'm not an expert in the field of low-level NT kernel stuff.
[Windows RT Development and Hacking] windowsrtc:
please release your jailbreak so that other people can help you.
[Windows RT Development and Hacking] kitor:
If i got it correctly, it will BSOD in a hour of running, so releasing it to public is not a good idea. Maybe via PM to other devs, but that depends on OP.
[Windows RT Development and Hacking] windowsrtc:
why not change the variables back after you launch your unsigned exe?
[Windows RT Development and Hacking] hisoft:
I think about doing this too. Can we discard hacked? If it can done. Will it have problem with running unsigned exe? And did we know exactly when did PatchGuard notice about hack?
[Windows RT Development and Hacking] bfosterjr:
Perhaps I'm missing something, ... why do you want to do this? The reason I ask is because this seems to be your motivation for wanting to "defeat" patch guard.

WRT simply running native applications/driver - If you can successfully load a driver, even once, then there are a few easy ways to support this without a patch guard defeat.

Cheers!
[Windows RT Development and Hacking] Myriachan:
That it's currently impossible to execute ARM code reliably on Windows RT is a major reason that Firefox hasn't been ported. Fixing that would require patching two context-switch routines in ntoskrnl.exe.

You're right that there are various ways of loading unsigned executables and drivers once the initial driver is bootstrapped. ci.dll and ntoskrnl.exe have so many variables that aren't protected by PatchGuard that this is pretty much inevitable. Ironically, removing the lockdown from WinDbg, PowerShell and VBScript is actually harder than running unsigned code when using this attack.

Defeating PatchGuard would be the optimal experience for users.
[Windows RT Development and Hacking] bfosterjr:
Actually, I don't agree. There is no hard requirement for ARM code that I can see. The major reason for a lack of FF port is that the native RT community is too small to get behind the port to sort out re-writing parts of the code base. There is also the large build system/process that needs to be shifted to VS. Throw in the lack of a public RT 8.1 JB.. and there is little motivation for this community to invest the time/effort in making FF work.

Don't get me wrong, FF will likely come to RT (even 8.1) eventually.. but I don't see the lack of ARM code being the roadblock. Its time and effort along with a new JB.
[Windows RT Development and Hacking] SixSixSevenSeven:
The javascript JIT engine is to ARMv7 not THUMB_2 though.
[Windows RT Development and Hacking] bfosterjr:
I gathered as much. I'm suggesting a re-write of that as part of the port.

Cheers!
[Windows RT Development and Hacking] GoodDayToDie:
Possible, but not easy. The result would likely be significantly less efficient... but better than no JIT at all. It substantially increases the effort required for porting, though.

As for PatchGuard... I don't know as much about it as I'd like, but the fact that it only checks periodically suggests something that we can anticipate and head off, assuming we can get our own drivers loaded... hmm. This is a pretty "out there" solution, but is there any chance that the version of PG from RT8.0 could be substituted in? That may assume a greater degree of encapsulation of PG functionality than is actually warranted, but it does seem to me that, if we can't modify it, we might be able to just replace (or possibly remove) it. Another option: rather than modifying the value itself, modify the code that checks it? I mean, if they were smart, that's under PG as well, but it *might* not be. Either bypassing the check for the values, or the signature check, or just spoofing the signature check, or taking it a level even further and replacing the whole loader function with a clone that lacks the check (which allows the original to remain intact, aside from however the shim is injected).

Any which way, a lot of binary RE... ick, but that's life.
[Windows RT Development and Hacking] netham45:
A few ideas:

1) Put a memory read breakpoint on the memory addresses you wish to change, check the context reading it and change it to what it should be if it's PatchGuard, and what you want if it's not.

2) Hook BugCheck to make it just return if PatchGuard calls it (I seem to recall reading something about PG wiping the stack/any context before calling BugCheck, so this may not work)

3) Forcibly enable Debug mode VIA setting the required kernel flag/calling the proper function (kdStartDebugger? something like that; I had found it at one point) to enable the debugger. I have no idea if PG will sense this on pre-existing threads or not, but if it does then it should shut itself down.

4) Check if THIS approach works in 8.1 (I suspect not, since it was published for 8.0 previews)

5) (This would work for g_ciOptions, but not patching the interrupt handlers), hook the usermode function that queries the state of the signing, make it call a driver that changes the bit back, check, then call the driver to set it to default again. You would only get a BSoD if you were really unlucky and PatchGuard happened to run during the 30ms that the flag was changed.

I'd like to play with some of these ideas, but without access to the current prototype (hint hint), and not having a PC I want to upgrade to 8.1 right now, it's difficult.
[Windows RT Development and Hacking] Myriachan:
1. You can't set a read breakpoint because PatchGuard is also checking the contents of the interrupt vectors/registers. It would notice that someone is using the hardware breakpoints before it tried to read kernel memory.

2. Yes, PatchGuard overwrites KeBugCheckEx with a pristine copy among other tricks.

3. PatchGuard knows that the debugger was not enabled at boot, and will not allow it to be enabled. It will bugcheck if you try to enable it.

4. It's possible that the approach where you look for the self-decryption code at the beginning of the DPC handlers would work.

5. There is a better way, closely related to how I'm writing my installation program, to allow unsigned PEs to load. It would escape PatchGuard's notice. A user-mode hook would be required in order to neuter wldp.dll, though, since ntoskrnl.exe would still tell programs that the current policy was locked down.

I think I can do everything I need to do except execute ARM code reliably without harassing PatchGuard.

Melissa
[Windows RT Development and Hacking] sahack:
As a plain user, I have a question:

Why do we have to use ARM Instruction Set? Isn't just Thumb-2 okay? I thought other part of Windows all runs with Thumb-2 fine.
[Windows RT Development and Hacking] netham45:
There is a lot of software that we would like to port over that is written in arm assembly. We would have to rewrite it to THUMB-2 to use it on Windows RT, though. Porting software is (relatively) easy, rewriting it is difficult.
[Windows RT Development and Hacking] SixSixSevenSeven:
Common one that needs the ARM instruction set would be a javascript engine. V8 which is the javascript JIT used in chrome only has x86 and ARMv7 versions available, it doesn't have a THUMB_2 version. Although V8 itself can compile for THUMB2, that is only the JIT'er itself, it will only ever JIT to the full instruction set. So to port chrome we wouldnt be able to use V8, there might be a way to get it to compile using the windows javascript engine (which is slower than V8 but perfectly fine) or something but its still a significant obstacle.

The same applies to quite a few other softwares.

Then as netham says, we have software written in arm assembly which people have requested, thats great but it takes alot of effort to rewrite it in thumb2 assembly.

If you have software which can indeed compile for thumb2 and function on thumb2, yeah thats great. But there is some which doesnt.
[Windows RT Development and Hacking] sahack:
Okay... I used to think that only JIT compilers and media decoders needed that...

But that gives another question.... Were we able to let the CPU stay in ARM mode in Windows RT 8.0?

(And if PatchGuard checks periodically, is it possible to just reset its timer once in a while?)
[Windows RT Development and Hacking] SixSixSevenSeven:
First question, no.

Second question, thats what the thread is discussing although your suggestion is perhaps worth a look into (if myriachan hasnt already)
[Windows RT Development and Hacking] Myriachan:
Sure, you could reset the timer on PatchGuard continuously, if you can find all its timers and perfectly distinguish them from those that were created by legitimate drivers. That's the harder part, unfortunately. =/
[Verizon HTC Droid Incredible 4G LTE] Linch89:
whenever my phone is turned off and i charge it the phone will immediately power on in recovery mode. its been doing this since s-off/htcdev unlock on multiple roms and recoveries. is anyone else experiencing this?
[Verizon HTC Droid Incredible 4G LTE] mdmower:
It is a known issue. HTC's charge mode is actually a low power mode of recovery. Since I use a stock kernel in my recoveries, the phone tries to boot into this low power state, then realizes the requisite charge-mode init and resources aren't available. This has actually been resolved in the CM device tree, but with CM's kernel there is no option to mount external sdcard over USB. (I haven't released any of these builds) So, it's a pick your poison kind of thing.
[Samsung Galaxy Grand Quattro] Rohit Shrothrium:
Guys list of games that works perfect for our ph

Zombie highway

Dark night rises

Asphalt 7,8

NFS MW,HP

Guys plz try these games from net or play store some r paid and others u know wat u guys can do abt dat so all the best
[Samsung Galaxy Grand Quattro] scool54:
gaming

ya i tersted many games such as

nfs mw

pvz 2

nova 3

iron man 3

Asphalt 8

FIFA 14

shadowgun and many more:laugh:

but dark night rises gave some graphical issue....... NJOY Gaming guys
[Samsung Galaxy Grand Quattro] coolkoushik07:
our phone has graphic issue. Many games showing low graphics. In real racing3 there is a huge graphic issue and also in The amazing spiderman game sometime graphic lag arises/////;)
[Samsung Galaxy Grand Quattro] scool54:
gaming

why don't u try Adrenaline™ Boost...its was very helpful for me......try and u will get the result....also nova 3 is very heavy games of 2.2gb which ran smoothly without any lag as compared to my friends lava q800 in which it takes ages to load.......
[Samsung Galaxy Grand Quattro] coolkoushik07:
Games are not lagging in speed but lagging in graphics. I mean grahics quality is very low and sometimes doesnot display objects like in amazing spider man sometume it shoes red line instead of lamp posts and in real racing3 no object in the mirror..

---------- Post added at 12:09 PM ---------- Previous post was at 12:06 PM ----------

Even in my previous micromax canvas 3d, these games were having lil lag in speed but graphic quality was better than quattro. May be cause of mtk chipset and powervr sgx gpu.
[Samsung Galaxy Grand Quattro] KayDe2797:
Is fifa 14 lagging on yours !!??? Coz in mine, it lags a lot !!!
[Samsung Galaxy Grand Quattro] coolkoushik07:
Ya its a bit slow but not a big problem as its not getting stuck..
[Samsung Galaxy Grand Quattro] Jasi2169:
Yup u got the point i got it for Rs17,200 when it launched

but at this amount Adreno 203 wtf ?

Sony have Adreno 305 at this range maybe at less yea

yup dats why our games lags in graphics ,RAM is pretty good also Quad core processor

A big drawback in NBA 2K13 :mad:
[Samsung Galaxy Grand Quattro] coolkoushik07:
I bought it in 16k and micromax phones those are priced 10k are better in graphics than our quattro. By the way the only thing I found good is the after sale service. Samsung is the best company to provide the best after sale service and thats the reason I choose samsung over others. As a compare my canvas 3d got touch screen problem and I sent it to service and after a month passed, its still there. If it was samsung, hopefully it should get repaired within a week. Thats the difference where comes mind satisfaction.
[Samsung Galaxy Grand Quattro] scool54:
But what abt the processors..... Its quad core snapdragon.....

Press thx if i helped u....
[Samsung Galaxy Grand Quattro] coolkoushik07:
Its quad core but the quality is not so good cause its cortex a5 which is a bit backdated and the modern dual core processors are as same as this quad core.
[Samsung Galaxy Grand Quattro] yash.raj022:
nova 3 link please
[Samsung Galaxy Grand Quattro] coolkoushik07:
Sorry man. Posting paid app is against the xda rule. Buy it to support the developer or search in google.. I am downloading game data via torrent now.
[Samsung Galaxy Grand Quattro] KayDe2797:
Graphical issues fixed in TASM !!!

I figured out that der is a way to fix pink graphical issues in the amazing spiderman game !!!!

Just dowload the two files and put them in /sdcard0/gameloft/games/GloftAMHM/

And then u'll be free of graphical bug !!!

And u'll notice better graphics and greater light reflections !!!!!

https://docs.google.com/file/d/0BzA061yuxfIyRkRkcnBEVDRDbTA/edit?pli=1

https://www.dropbox.com/s/vzs8kt9a71ekvyq/config_android_lowphone.xml
[Samsung Galaxy Grand Quattro] coolkoushik07:
Its sound cool but what have u done to get rid of that graphic issue? And do u know how to improove graphic issue in real racing 3?
[Samsung Galaxy Grand Quattro] KayDe2797:
Yes I tried it in TASM and it worked out flawlessly!!!!

And talking abt real racing 3.....I'll tell you in the evening coz first I've got to download it!!!!
[Samsung Galaxy Grand Quattro] coolkoushik07:
There is a problem in mirror reflector. There are no images in mirror in real racing3. It will be great if u r able to make that mirror working.
[Samsung Galaxy Grand Quattro] KayDe2797:
QUOTE=coolkoushik07;48119849]There is a problem in mirror reflector. There are no images in mirror in real racing3. It will be great if u r able to make that mirror working.

Umm...did u tried using this app!!!! In my friend's cell I tried this app and it flashed out all the bugs coming in this game!!!!

My suggestion would be....try this app hopefully it'll help ya!!!

https://play.google.com/store/apps/...ganic&utm_term=real+racing+3+graphics+problem
[Samsung Galaxy Grand Quattro] coolkoushik07:
It doesnt work. Pink graphical issue still there after copying those file. By the way what i found is u have used avg phones config as lowphone config which just increase graphic setting in game but our phone is not capable enough to process well graphics so the issue still remain and another file which is config of s3 is of no need for quattro as its onpy applicabale to s3. By the way some graphics effect increased but pink graphics issue still remain there.
[Ubuntu Touch General] stereo111:
Here it is! Stable release of ubuntu touch, here you can find brief summary about it.

link: www . omgubuntu.co.uk/2013/10/ubuntu-touch-ready-prime-time (erase spacebars)

As for me, it's a good system for phone, but it offers only basic features and couple of bugs I have aleready fund (nothing big). Assuming that it can be installed only by advanced nexus users....it does not seem to be a good deal. But I hope new updates will make it much better :)
[Ubuntu Touch General] edd89:
s2 support?

does it support galaxy s2?or let me rephrase it, is this version of ubuntu you mentioned supports Galaxy S2 GT-I9100??
[Ubuntu Touch General] nikwen:
No, the official (and stable) versions are for Nexus devices only.

Look for a port in the S2 forums. ;)
[Ubuntu Touch General] LPTJared:
Now I can compile on the go! lol
[Ubuntu Touch General] moparfreak426:
Port to d2vzw..... Please!

Sent from my SCH-I535 using Xparent Skyblue Tapatalk 2
[Ubuntu Touch General] qnc:
What bugs did you find? I installed in on my nexus 4, but found it too basic for me and the data on wifi was kind of laggy.
[Ubuntu Touch General] michaelmab88:
I wasn't able to launch into desktop mode when connected to the slimport to hdmi adaptor.
[Ubuntu Touch General] Chuckatron:
that feature wont be supported until spring of next year
[Ubuntu Touch General] Saurabh Shah:
Yeah kinda laggy on nexus 4
[Android Q&A, Help & Troubleshooting] Danialonline:
I need help to know with my SAMSUNG- GT-18552 as when calling to another iphone holder i can see and hear him clearly but he cannot hear or see me though my camera settings with Tango is fine.Neither can we communicate on Viber at times,we are both connected thru wi-fi,and it shows excellent coverage on my hand set,i have also uninstalled battery saver paid service by Norton as requested at the time of installing Viber.Pl.help
[Android Q&A, Help & Troubleshooting] Viber Team:
Hi,

I'm an official rep. from Viber. I'm here to help :)

Could you please clarify what the problem is exactly when using Viber with your friend?

Please note that it could be that the network you are connected to is blocking Viber's traffic.

1. First, please try uninstalling and reinstalling Viber when connecting to a few different WiFi networks (in order to pinpoint the source of the problem). What are the results?

2. Also, please make sure the following ports are enabled ("forwarded") on your routers or firewalls:

TCP: 5242 + 4244

UDP: 5243 + 9785

(if you are not sure how to enable ports, you may contact your router manufacturer or your Internet Service Provider)
[Micromax A110] prasanthaffe:
i formated my flash in canvas 2 using sp tools but now i dont knw to install new os please help..when i connect my device to computer and again use sp tools for flashing but the device is not recoganised also installed driver plz help....
[Micromax A110] shaditya:
Drivers

Try these drivers instead of the ones you are using. Uninstall current drivers, reboot, install the provided drivers.
[One (M7) Q&A, Help & Troubleshooting] HGWW:
Just updated to the long awaited 4.3 but after the update has completed I cant seem to find any of my pictures or music or movies or files on my phone. The space is still occupied but there are no where to be found. Anyone else have a similar issue or have any suggestion as to how I can get back my pics or stuff? All my apps are still installed but my files are no where to be found.

Any help would be appreciated.
[Micromax A116] salaigeethan666:
http://xdaforums.com/showthread.php?t=2340858

Stock Camera Backup - Download.
[Micromax A116] rakeshjoyal:
Where is the link ???
[Micromax A116] salaigeethan666:
it's there, marked as original thread :)
[Micromax A116] ImBridge:
Does this camera improve the quality of photograph ?
[Verizon Samsung Galaxy S III] GoodVibrant-ions:
I've searched and looked around a lot. Can someone point me to a thread with the process to go back to a stock rooted jellybean Rom? Thanks in advance.
[Verizon Samsung Galaxy S III] BadUsername:
http://xdaforums.com/showthread.php?t=1762709

Section 5, everything you need is there.

Edit: just realized I didn't really answer your question. You could use that method and reroot.

Here's an mb1 stock rooted image:

http://xdaforums.com/showthread.php?t=1984436

there's none that I know of for mf1
[Galaxy Note 10.1 Accessories] Nikorasu:
Got it from Aliexpress for $30+. :victory:
[Galaxy Note 10.1 Accessories] Nikorasu:
Fyi, my Note n8010 status is custom with root.

I'm running stock Germany mh2, with Boeffla kernel.
[Galaxy Note 10.1 Accessories] fizan:
Do you have a link to the exact product? Thanks.
[Galaxy Note 10.1 Accessories] Nikorasu:
Ordered this:

http://www.aliexpress.com/item/Mult...isplay-dongle-Miracast-dongle/1230147002.html

But he sent this:

http://www.aliexpress.com/item/Mult...FI-display-dongle-S-Miracast/1284987622.html?

Not sure what the difference are.
[Galaxy Note 10.1 Accessories] fizan:
Thanks I'll check them out. Did u face any significant lag while browsing or streaming videos?
[Galaxy Note 10.1 Accessories] Nikorasu:
Not really. As shown in the pics in first post,I have one showing both the note and tv with a stop watch app, the lag is around 100ms.

Using MX player hardware mode, video only shows on tv but and subs only showing on note.

Using software mode, video and subs showing on both.

Using stock video player, it automatically becomes DLNA mode instead of mirroring. Good thing is DLNA mode is fullscreen while mirror mode is not.
[Galaxy Note 10.1 Accessories] kcrudup:
This is encouraging- I've been able to get the ASCD to work with a rooted kernel but would like an alternate dongle that doesn't cost $80 that I can use on the road with.

So looking around on Amazon I've ordered one of these. (I don't know when I'll get to review it, though- as it must literally be coming via "Slow boat from China" as Amazon estimates I'll get it between 3-6 weeks from now!)
[Galaxy Note 10.1 Accessories] Nikorasu:
I think they are the same products with different packaging.

What's ASCD?
[Galaxy Note 10.1 Accessories] kcrudup:
The All-Share Cast Dongle (the Samsung one).
[Galaxy Note 10.1 Accessories] babydollnyroch:
audio/video lag

I have the ASCD and use it with my rooted S4 just fine except for one thing. When I sgare netflix or any video there is a noticeable lag in the audio and when the actors/actresses actually speak so its like a bad old karate movie where the mouths just never match up. Any suggestions as no one else here has reported a lag like this. Thanks
[Galaxy Note 10.1 Accessories] kcrudup:
Yeah, two things to try:

- you're going to have to get the ASCD closer to your Note; what you're describing sounds like a low-bitrate connection

- Try a different video player; I haven't tried using NF with the ASCD, but I do know while the Archos Video Player will have that same audio/video sync issue, the Dice Player (for example) doesn't (I think it depends on the output method the App uses).