yashsingh1/xdaforums huggingface dataset:
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update : Version 3.51

---------------------

- Crypto Bugfixes solved

- Com Port Bugfixes solved

Added QMAT 3.51 manual to download page :)

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update : 3.52

-------------

What's new ?

1. Added SHA2 crypto search algos (SHA224 and SHA256)

2. Added SHA2 (SHA224 and SHA256) and MD5 hash generation

3. Some Bugfixes

4. HTC Security Generator for all newer HTC models (reverse genned) :

SPL and radio (works with Diamond !!)

Note : For Copy'n'Paste .. do not use MTTY, but Putty !!!

See new manual for further details ....

Enjoy !

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] tom_codon:
nice one..!

Thanks
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version : 3.54

------------------

Updates :

- Added SHA-256 from HTC

- Improved RSA Decryption ... now better readable

- Added function to reverse byte strings for RSA Decryption

- Bugfixes

Cya,

Viper BJK

Update:

Small SHA2 bugfix
[Touch Diamond, MDA Compact IV ROM Development] asksaravana:
Good information. thanks
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version : 3.6

------------------

Updates :

- Added NBH Generator Tool

=> you can add any device to devlist.xml

=> you can sign rom files either using pvk file or using dummy signature

- Added NBH Dump Tool

=> Remove Signatures function or

=> Extract any part you wish or

=> Extract all files from nbh

=> Show infos about nbh file

=> Add new deviceparts (typeinfo) to nbhtype.xml

- Added publickeys as XML

=> add any public key to publickeys.xml

- Added tool to fix radio.nb checksum :)

Bugfixes :

- Fixed NBH Signature extraction

- Fixed RSA Function

For the design of NBH Tools, I was strictly influenced by Olipro's work :)

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] qtek_metanol:
This is a real work....!!!!

thx for this great program
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update : 3.61

-------------

What is new ?

-------------

After being fed up with buggy Putty + Mtty, I implemented

HTC Bootloader AT Command Interface. (see picture below)

Also I was missing a good copy paste function for my hex editor.

Why wasn't it working before ?

=> HTC Bootloader isn't able to take more than one byte sent.

So :

- Implemented HTC Bootloader AT Command Tool (works also for other ones)

- Several severe bugfixes (like Display fixes)

- Fixed RSA Decryption bug (Pubkeys loaded incorrectly from xml)

What will be next ?

------------------

As I'm a Vista user (sic!) I also use the really old Activesync driver.

But this one lacks of high-speed transfer, so I'm going to implement a solution

for newer HTC phones and newer OS, as Micros*** changed to WinUSB Interface (which is better imho than virtual com port).

So :

- Will implement REAL Usb interface, no virtual serial port use

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Small update :

--------------

WinUSB is now fully implemented !

It really works like a charm, much faster than putty or mtty, and really stable.

mb command runs like hell :)

Even better, you can break off USB connection and continue seconds after reading out bytes .... this is big news :)

So ... Vista Users, use new WMDC drivers, forget about old activesync one.

And as for the XP users, download WinUSB runtimes now :)

Bad to say, but of course WinUSB won't work with old activesync.

I'm going to implement now a logfunction for binary data, so it can be used with pdump. Once I understand how "autodownload" works, I will implement it also so that my tool can replace mtty.

If there are any wishes what should be implemented, say so :)

Of course I will open source for WinUSB connection for those who want to port their tools.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update 3.70

------------

What is new ?

--------------

- Big bugfixes

- Added new WinUSB and Serial Interface for HTC Bootloader (with binary log AND pdump support)

- Added partition tool to show MORE info

- Complete new Serial interface

- Added feature to use different bootloader commands for nand reading

- Added feature to read different sizes for nand reading

- Fixed radio.nb extraction

- Fixed radio.nb checksum calculation

- etc. ..... see Manual 3.7 for complete introduction

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update 3.71

------------

Sorry for that one ... WinUSB didn't work due to memory leak.

Fixed ....

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update 3.72

------------

What's new ?

-------------

- Included HTC Security Decoder in AT Command Interface

(easier to use)

- Fixed USB / SER Problems

- HTCE/HTCS were not displayed correctly

- Fixed Display Scroll Problems in AT Command Interface

Enjoy !

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update 3.73 *Speed release !*

------------

As someone really needed this func, the following was added :

- htc at command interface bytelog can now be any filename (select log file)

- You can send any data to encapsulate, for example you want to send bytes 0x00 0x01 0x02 and 0x03 .... enter "00010203", press encap button and

bytes will be send using correct HTC "HTCS....HTCE" encap

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
- removed -
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update 3.74 *Special Edition for CMonex* :)

------------------------------------------

News :

- Added function to upload files in encapsulated header :)

- Bugfixes

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
News :

-------

3.74 has a lot of bugs in it, so sorry for that.

Download of my tool is atm not possible, I'm looking for another hoster.

New version 3.75 will be soon out, adding several bugfixes and nvitems support for HTC. Also, beginning with 3.75, my software will be shareware.

People that already donated 15 EUR will of course get source and registration key as usual for free.

Expect news soon.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] swtos:
ThanX Alot for this GREAT Tool !

Keep up your Good Work !
[Touch Diamond, MDA Compact IV ROM Development] alncool:
Is it possible to upload this tool on the board ? I have a forbidden acces to the google code page ... :'(
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Sorry, I will upload the new version of the tool as soon as my new domain is up and running. Of course I can also upload it to the board.

As I changed my software to shareware license I am no longer allowed to host it on google.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Small update :

--------------

New version will take some time, sorry for that.

I'm going to host my software now on my own, as google's policy does not allow to host shareware.

Stay tuned :)

What will be included in new version :

--------------------------------------

- Cryptosearch uses now xml database

- Cryptosearch is also able to find algos in big endian

- Added several new algos

- For registered people, GSM/ECSD/GEA3 A3/A8/A5.1/A5.2/A5.3 keygen will be included

Unregistered version will still be free to use, but may only be run 10 minutes each session.

Cya,

Viper BJK

P.S.: If there is a need for A-Key (CDMA) calculation, I will add that too.
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Another update :

----------------

New website is almost done. I hope I can release the next version this week.

The Network Calculator has been expanded and will include :

-------------------------------------

TDMA :

GSM A5-1

GSM A5-2

GSM A5-3

3G ECSD

GEA3 - GPRS

3G SNOW

3G UEA2

3G UIA2

GSM A3/A8 COMP128 V1

GSM A3/A8 COMP128 V2

GSM A3/A8 COMP128 V3

3G Milenage

3G Milenage Resync

CDMA :

CAVE (all specs)

-------------------------------------

Update :

I've reversed complete Comp128 V2 and Comp128 V3 algorithms.

Due to respect to global gsm providers and knowing that

almost all gsm providers use comp128V2, I will only

release the sources of my tool including these algorithms to

proven gsm providers and members of gsm/3gpp group.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Small update :

--------------

Last few steps are going to be done for the next release.

I only need to implement a few missing cave functions, then the new software

release will hit the public.

A lot of sleepless nights have been done to implement missing algorithms like comp128 v2 and v3 and cave and to implement cryptosearch features like big endian search (this one really rules !), but also a lot of unusual cryptoalgos.

The network calculators will be available to registered users and are a real gem for network engineers, as more than just the standard things can be calculated.

Stay tuned for the next release, hopefully available at the end of this week.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update :

---------

Tool is now being beta tested by some reversers. As soon all bad bugs are fixed *hopefully none*, tool will be released.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update :

--------

Some betatester bugs were found and are now fixed. Also I implemented the essential network calculations also for CAVE, so that the network calculator features the following functions :

TDMA (GSM/UMTS) :

--------------------

GSM A5-1

GSM A5-2

GSM A5-3

3G ECSD

GEA3 - GPRS

3G SNOW

3G UEA2

3G UIA2

GSM A3/A8 COMP128 V1

GSM A3/A8 COMP128 V2

GSM A3/A8 COMP128 V3

3G Milenage

3G Milenage Resync

CDMA :

-------

CAVE

CAVE Authentication

CAVE CMEA

CAVE EMEA

CAVE EMEA_NF

CAVE Wireless Residential Extension

CAVE Datakey / Look Up Table / Mask

CAVE DTC / DCCH

CAVE KSG

CAVE Long Block

CAVE Short Block

CAVE Enhanced Message

CAVE Enhanced Voice Privacy

CAVE Enhanced Data Mask

Also I did heavily update the cryptosearch and algorithms.

As these features are implemented now, I'm now waiting for the comments of the betatesters and their bugs to be fixed. Once they're done (this week for sure), I will release the new version of my tool you've all been waiting for such a long time.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] yjlee168:
me too. from taiwan to log in. help needed... thx.
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
yjlee .... solution for downloading will be available soon :)

http://www.revskills.de/downloads/QMATManual.pdf

This is the manual for the new upcoming version :)

Stay tuned ... beta testing is almost done :)

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.75 out !

----------------------

After quite a lot of sleepless nights, I proudly present the new version 3.75.

What's new ?

-------------

- Tool is now shareware. Without registration, it will only run 10 minutes each session, new network calculator and flashing is only available to registered users. Registration costs 15 EUR and will be used for further development of the software.

- Network calculator (TDMA and CDMA) for encryption/decryption and authentication calculations (registered users only)

- NV Items Dumper for HTC Dumps

- Crypto Search supports also big endian search and new algos can be added to crypto.xml

- Extraction now also works for globe phones

- Several bugfixes and much much more to mention ... see manual :)

Cya and enjoy,

Viper BJK

P.S.: For downloading of the software, see my signature
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.76 out

---------------------

News :

- Com port bugfixes

- Bootloader bugfixes, Special Bootloader now supports lengths

- Added Imei calculation to Network Calculator

- Added Get SimSecure Button for Benq Mobile Repair Support

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.77 out

--------------------

News :

-------

- Internal fileextraction is now universal. Just add the right

memory offset and device to filesys.xml.

- Implemented rudimentary EFS

(Directory browsing) ..... backup and restore tool will soon be added :)

- Added support of Globe WTPH 1090

- Bugfixes

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
News :

-------

After implementing VERY rudimentary EFS support, I did now implement full EFS Reading support ...... and .... it is even faster than BitPim and will offer more info :)

Next steps will be to include "Read File", "Write File", "Create Directory", "Remove Directory" and of course very fast Backup / Restore Functions.

So stay tuned ... as my tool will become a real professional Software for any QC work :)

I'm also thinking about adding reverser tools like automatic memory search. If there is any need for any feature, please go to http://forum.revskills.de.

Good ideas will be rewarded with a free registration :)

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New features that might be added :

- EFS Browser (being implemented right now)

- BRT and QC NVItems Dumper

- NVItems Editor

- CDMA NAM Updater

- HTC mtty download feature (lnb/lnbs)

- Add support for Huawei E220 (unlock / read EFS etc.)

- Add support for Globe Phones

- JTAG interface

What do you think should be added or would be useful ?
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
It seems as I've got to do a large step forward with my tool.

I never really thought about fixing memory leaks ... but now, developing the

EFS Tool, I really had to.

189 MB memory allocation in under 5 sec ... that was way too much.

36 MB wasn't even better ... now it's 0 bytes memory leak :)

See image how EFS Tool already looks like in actual development version.

Cya,

Viper BJK

Update :

It's very fast, and it seems regarding download of files, it is even much faster than BitPim.

Also it is able to read files that BitPim can't :)
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Some of you always said parts of QMAT are unstable.

Yes, you were right. Tonight I found a solution to an issue I always wanted to have fixed. Normally I had to call the ComPort Interface Class by searching it via FindWindow. Of course that one didn't always succeed.

Now, thanks to C. Petzold (that Microsoft Guy) I realized there is a better way to do so : GetParent().

Also I improved a lot in new version.

EFS Browser is almost done, only few functions are missing.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.80 out

--------------------

What's new :

- Fixed Com Port memory leaks (much more stable now, and faster)

- FULL EFS2 (Embedded Filesystem) Support for all QC mobiles > Brew 3.x

(offers more standard features than BitPim like set attributes and remote

links and can even read damaged files)

- Updated Manual , now with Example usage

- Fixed a lot of bugfixes and memory leaks

What will be next :

------------------

- HTC LNB/s support

- Backup / Restore whole directories to EFS as ZIP

- QC Jtag interface

Cya,

Viper BJK

P.S.:

Thanks to all that registered and donated so far, making this tool possible
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update : Version 3.81

---------------------

Some people could not start the program. Issue fixed.

Sorry for that.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Update 3.82 *HotFix*

---------------------

EFS Changes :

--------------

- Some strange behaviour occured when removing files.

Fixed that to work now.

- When a Directory is empty, File Menu cannot be reached.

Now you can select a Directory and upload a file via the Directory Menu.

Cya,

Viper BJK

P.S.:

Thanks for the error reports ! :) And sorry for so much updates lately.

But I try to release bugfixes as soon as possible :)
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Sometimes com port handling really is no fun at all :)

For the implementation of HTC lnb command, I had to rewrite complete serial thread handling.

So stay tuned for more news soon :)

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] cr2:
Can somebody post the 3.74 source here ?
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
For Source please request at http://revskills.de.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Small update :

--------------

Currently I'm heavily implementing severe changes in my software.

Some features that will be added in next version released soon :

- Complete redesign of menu GUI for better understanding

- Function search (search for typical QC functions with wildcards in binary files) with

editable database

- lnb support for HTC (currently, serial port supported only)

- Complete rewrite of HTC AT command (now better handling of USB and serial)

- Cut Tool (cut x bytes every x bytes starting from offset x)

- EFS Browsing fixes

I'm also thinking about a IDA plugin to implement my tool to IDA for debugging and function retrieval.

Cya,

Viper BJK

P.S.:

Reversing my software and/or republishing it without permission (also buggy versions) is no good behaviour.

Using code segments of my tool for pure unlocking purposes without ever having registered my software at all and making money out of my hard work ... well .... think about it if it really helps in further development of this tool.

I won't support any unlocking at all, and my software was never intended to do so.
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.90 out

--------------------

What's new :

-------------

- Complete redesign of menu GUI for better understanding

- Function search (search for typical QC functions with wildcards in binary files)

with editable database and wildcard support

- lnb support for HTC (currently, serial port supported only)

- Complete rewrite of AT command interface (now better handling of USB and

serial)

- Cut Tool (cut x bytes every x bytes starting from offset x)

- EFS Browsing fixes

- etc ...

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.91 out

---------------------

Added important com port hotfix (increased timeouts)

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] cr2:
Can you tell exactly how the pre-3.75 code was licensed ?

Since it was already hosted at google, i doubt that republishing these specific versions "is no good behaviour".

I'm not interested myself in any unlocking, windows software, shareware et al.

All CPU technical data gathered by me is full-disclosure, as you can see from wiki.

And the source code is all GPL (mostly linux kernel and haret)
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Pre 3.74 code is still in the public. It is no longer hosted at google due to license reasons. It was hosted under the license of GPLv3.

No good behaviour means :

Spreading a version that is known to be buggy which even bricks phones just to avoid registration, although the only limitation to the old version is the usage of 10 minutes per session, the old functions are still for free.

Or :

Reversing the software, using code parts without naming the author and using it against the author's will for unlocking purposes.

Asking for implementations, for example in order to port it to linux is just fine, and I am always happy in helping other people as long as the knowledge is in fair usage and respects the work of mobile companies and engineering divisions.

Due to the fact that security heavily increases and even small exploits vanish to make modding possible, I cannot release everything to the public .... otherwise there would be no more modding anymore in the future.

Just to get it straight why my software is now shareware and no open source anymore :

I hoped that donations would help me in further development of my tool, as I had to buy (and still have) a lot of hardware, software and licenses.

In fact, donations never exceeded 30 Euros in 2 years.

But a lot of people used my open source for their unlocking tools and made a lot of money.

Comparing the functions of my tool to competitors (that want for less features more than 100 bucks), I think the price of 15 Euro is fair.

If it isn't, please let me know.

I'm still a man of the community and will help in every aspect except unlocking, and will of course help other reversers as much as I can.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.92 out

--------------------

What's new ?

-------------

1. Com port fixes :

- Changing tab will allow to change com port

- Stable write (no more crashes)

2. GUI improvements

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.93 out

--------------------

What's new ?

-------------

- Added several com port fixes

- Added better recognition of NVItems

- Added display one single NVItem

- Added easy NVItem Write Interface

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.94

----------------

Speed update

- Improved byte cutter also to cut first signatures

- Byte Cutter fixes

Cya,

Viper BJK

P.S.: If there is a need for CDMA functions like min/nam/esn/prl etc ... please let me know.
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.95 - STABLE :)

----------------------------

- Added several new crypto algorithms

- Fixed EFS Browser Write

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] crusher:
lol mister BJK..

any chance to get the old buggy source code?

that was gpled.

or if anyone downloaded it in time, I would be thankful for that.
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
Just tell me what you want to do :) Maybe I can help.

It was hosted under the license of GPLv3, but never was published as such.

That's why I've taken off the source and the tool from Google.

For the better understand what GPL really is, go to http://www.gnu.org/licenses/gpl-3.0.html.

Just as it is published under the license of GPL doesn't mean that the source code is for free

or that you may just use parts of the source code for your own work without permission or

copyright tags.

Sorry that this "GPL" is making so much trouble ... :D

But releasing it under GPLv3 does only make sense if there are people who

contribute to the code. I might release it again for public if I get the feeling that this really happens. But as long the code is just copy'n'pasted into other tools ... sorry ... that doesn't help this community at all.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.96 out

--------------------

What's new ?

-------------

- Bugfixes

- Improved Function scan

- Improved algorithm scan

- Add baudrate selection for CDMA phones

- Added new Code Tab in Com Tool :

- Send SPC and SP,

- Read several codes and passwords, like SPC, SP, fieldtest codes, PPP

passwords, etc.

- Get IMEI+IMSI from WCDMA and GSM + LAI/LAC/PLMN info

- Added general way to find SP in firmware for MSM6250/6280

etc.

Cya,

Viper BJK
[Touch Diamond, MDA Compact IV ROM Development] viperbjk:
New version 3.97 out

--------------------

News :

-------

- Added Diag Mode enabler for some mobiles

- Added Bootloader enabler for ZTE

- Added several functions to function.xml

Cya,

Viper BJK