Database Develop

Restore original Android ID?

I'm currently on Cog 2.2 B7 and have been having some wifi issues. A little reading has me thinking maybe it's the Android ID. I'd like to find out what the original is or how the whole ID thing works in general.
I understand when I bought my phone it had an ID set. Is this actually tied to the phone? As in, if I revert to stock firmware will I have the original ID back? Is there any way to generate that ID without flashing back to stock?
I know how to change it just not sure how to find the original.
Thanks!
EDIT: It appears this is being answered in another thread.
http://forum.xda-developers.com/showthread.php?t=810967

If you flash to stock, the original ID will be back. So far there isn't a way to generate the original with any other rom other than stock.

Someone also told me that if you had an older Nandroid backup file of your 2.1 setup, you could use Notepad++ to view the datadata.img file and find it there buy doing a search for "android_id".
I flashed back to stock and then wrote it down to change via Terminal Emulator. However I also learned that once you make a TiBu of a 2.2 setup, if you had changed your ID number to be the correct one, it will restore it back, so you don't have to keep changing it.

android id has absolutely nothing to do with wifi.
That said, it well be good knowledge for you to know how to do it. Unfortunately, flashing back to a stock rom is the only way to get it, unless you have a nandroid back up from when you were running stock. Somewhere posted in mass of the cog thread someone posted a method for extracting you id right from the back up. If I find that post again I'll post a link to it here.

I was having issues with wifi as well after flashing to cog 2.2 beta 7.
The fix that worked for me was giving my captivate a static IP.
Go into advanced settings in wifi and enter these for static IP.
IP: 192.168.2.4
Gateway: 192.168.2.1
subnet mask: 255.255.255.0
dns 1: 192.168.2.1
dns 2: blank
before doing this I couldn't connect to my home wifi at all. Now it connects just fine.

Demented71 said:
Someone also told me that if you had an older Nandroid backup file of your 2.1 setup, you could use Notepad++ to view the datadata.img file and find it there buy doing a search for "android_id".
Click to expand...
Click to collapse
This worked for me, Hope it is the right ID.

What exactly its the android id used for and is it important that I make sure it's unique on my phone?
Sent from my SAMSUNG-SGH-I897 using XDA App

Demented71 said:
Someone also told me that if you had an older Nandroid backup file of your 2.1 setup, you could use Notepad++ to view the datadata.img file and find it there buy doing a search for "android_id".
Click to expand...
Click to collapse
I had a backup from cwm, so tried this method. However, there are many different values, not sure which ones correct. some are all capital alphabets, some just numbers. Anyone know how to read it correctly?

Try using unyaffs to get it off your old datadata.img:
I outline how here.

Help: Android ID question

Before my first flash, I installed Android ID and did a Save ID. I never located the backup file (to copy off to my PC), I did write down the Android ID value displayed in this app.
I have since did my one and only flash... to FF 1.5.
I just now went back into Android ID app and it reports a different ID than the one I had before.
I am not aware of any problems due to this.
What should I do? It looks like I could manually enter my original Android ID value in this app, and hit Change ID. Should I do this?
thanks!

sboltman said:
Before my first flash, I installed Android ID and did a Save ID. I never located the backup file (to copy off to my PC), I did write down the Android ID value displayed in this app.
I have since did my one and only flash... to FF 1.5.
I just now went back into Android ID app and it reports a different ID than the one I had before.
I am not aware of any problems due to this.
What should I do? It looks like I could manually enter my original Android ID value in this app, and hit Change ID. Should I do this?
thanks!
Click to expand...
Click to collapse
This belongs in Q&A but...yes you can do this. I do it everytime I flash. Some roms generate random id's when you boot up, others use the same across devices. You can change it to your stock ID using the app you mentioned.

If you have a ROM with the correct script (I know mine has it, and DG uses it) there's an update.id file on your SD card that will randomly generate a number the first time it boots up.
You should be able to change that in a text editor or whatever and put the one you want in.
Also. WRONG FORUM ZOMG

Easier unlock Samsung Galaxy Mini (and others)??

Following the unlock thread using method quoted below I eventually managed to unlock my samsung galaxy mini to all networks, however to newbies (me at the time) it was quite hard to follow. Also seemed that pulling the bml5 file all seemed like an unneccessary waste of time. I decided to unlock another sgm using method described below. However, I tried something different to look at the hex code within the file. Simply downloaded hex editor from android market (free) and jumped to the line where I'd found my own code and there it was!
Guys, just seems a little easier than using adb/terminal emulator to pull/push files between computer and phone when a lot of people may not have the competence or time to install adb shell etc etc. Any more views on this?
Of course phone must be rooted and sometimes the bml5 files isn't where they are supposed to be (different ROM's) and also it should be reminded that if you are using a custom mod (i.e. CM7 like me) you will be highly unlikely to be able to unlock the phone using the code you just found without first reverting back to stock rom. So back up your rom and data, flash back to 2.3.4 or whatever, unlock the phone and voila! Also, I will stress that you shouldn't be worried that once you have unlocked it and you decide to restore back to cm7 (or another preffered ROM), your phone SHOULD STILL BE UNLOCKED. I've had no issues with this. The hardest part is finding the right hex code line in the first place, but when you do find it, it should be 8 digits long (thats the right number isn't it?), it will be at the very end of the line on the right in its own separate little box, with blank spaces above it (no numbers/letters) and some more code underneath, but the code is in very plain view (you will know when you've found it)! Good luck!
At the end of the day, using hex editor on my phone saved me 20-30 mins (more for others perhaps) on unlocking the phone so I felt the need to share it!
Hope I've helped a few folks here. =)
Originally Posted by hexio
The bml5 method worked like a charm here. I'm writing to confirm it because the stl5 method bricked my first phone, which needed to be replaced, but with this new method everything went fine and I could unlock my (new) phone.
I used a slight variation to the methods explained here that might be of use to other Linux users like myself, so I'll explain it here. But all the credit goes to tweakradje, of course. Many thanks!
Phone details: Galaxy Europa (i5500) with stock Android 2.2 purchased recently.
PC details: Laptop with Ubuntu 11.04
Connection details: Standard wireless connection (wifi)
Steps:
1) Root the phone: I used Universal Androot
2) Install a SSH server from the market. I installed SSHDroid which is free (with ads)
3) Turn the phone into flight mode (not sure if necessary but I did it)
4) Turn on the ssh daemon with SSHDroid, allow root permissions.
5) Turn the wireless connection on and connect to the router, note the access details.
Now in the computer, connected to the same router.
6) Open a terminal, connect to the phone through SSH as root.
7) Once connected, run the command: cat /dev/bml5 > /sdcard/bml5.img
8) Copy the file to the computer. I used scp (copy over ssh) but any other method is good.
9) Use vi to view the file in the laptop.
10) Change to hexadecimal mode by pressing ESC :%!xxd
11) Press / and then enter the pattern ffff ffff ffff 3030 3030 3030
The code is there (8 digits) followed by 3 other sets of zeros.
Good luck!
Click to expand...
Click to collapse

Fraser1978 said:
Following the unlock thread using method quoted below I eventually managed to unlock my samsung galaxy mini to all networks, however to newbies (me at the time) it was quite hard to follow. Also seemed that pulling the bml5 file all seemed like an unneccessary waste of time. I decided to unlock another sgm using method described below. However, I tried something different to look at the hex code within the file. Simply downloaded hex editor from android market (free) and jumped to the line where I'd found my own code and there it was!
Guys, just seems a little easier than using adb/terminal emulator to pull/push files between computer and phone when a lot of people may not have the competence or time to install adb shell etc etc. Any more views on this?
Of course phone must be rooted and sometimes the bml5 files isn't where they are supposed to be (different ROM's) and also it should be reminded that if you are using a custom mod (i.e. CM7 like me) you will be highly unlikely to be able to unlock the phone using the code you just found without first reverting back to stock rom. So back up your rom and data, flash back to 2.3.4 or whatever, unlock the phone and voila! Also, I will stress that you shouldn't be worried that once you have unlocked it and you decide to restore back to cm7 (or another preffered ROM), your phone SHOULD STILL BE UNLOCKED. I've had no issues with this. The hardest part is finding the right hex code line in the first place, but when you do find it, it should be 8 digits long (thats the right number isn't it?), it will be at the very end of the line on the right in its own separate little box, with blank spaces above it (no numbers/letters) and some more code underneath, but the code is in very plain view (you will know when you've found it)! Good luck!
At the end of the day, using hex editor on my phone saved me 20-30 mins (more for others perhaps) on unlocking the phone so I felt the need to share it!
Hope I've helped a few folks here. =)
Click to expand...
Click to collapse
hi there does this really work for samsung europa?

albo_king said:
hi there does this really work for samsung europa?
Click to expand...
Click to collapse
Hey...Yes, as far as I am aware this method works perfectly for galaxy europa i5500
Good luck!

Fraser1978 said:
Hey...Yes, as far as I am aware this method works perfectly for galaxy europa i5500
Good luck!
Click to expand...
Click to collapse
so i need to root my phone first bro?

[XAP] [REQUEST] Can someone with an Ativ S upload DiagnosticTool_Sprint for me?

I am hoping that someone with an Ativ S can download the "DiagnosticTool_Sprint" from the Windows Phone store and upload it here. It is available if you set "oemId=htc" in fiddler. I think there are some hidden pages we can use to interop unlock HTC.
Link:
"DiagnosticTool_Sprint" for Windows Phone http://www.windowsphone.com/s?appid=e69a2877-59b8-43ed-898d-554fbc4b8b2b
Thanks!

To be clear, you are asking that somebody download this HTC app to their phone and install it, then use the MTP full file system access to extract the binaries for reverse engineering? Sounds like a plan, if I could persuade my phone to do the full file system access thing right now I would (away from home, on my Surface RT right now).

compu829 said:
I am hoping that someone with an Ativ S can download the "DiagnosticTool_Sprint" from the Windows Phone store and upload it here. It is available if you set "oemId=htc" in fiddler. I think there are some hidden pages we can use to interop unlock HTC.
Link:
"DiagnosticTool_Sprint" for Windows Phone http://www.windowsphone.com/s?appid=e69a2877-59b8-43ed-898d-554fbc4b8b2b
Thanks!
Click to expand...
Click to collapse
Hi
first to download this app we need someone with a sprint device to grab correct url using fiddler.
like this one:
Code:
http://marketplaceedgeservice....................os=8.0.10512.0&cc=us&lang=en-us&hw=268473858&moid=sfr-fr/
this way we can have correct hw & moid value & install on any device...

@GoodDayToDie yup. that is what I am asking for. Based on what @thals1992 saw when he was playing with this on his 8XT is that depending on what dial codes you put in, the same app loads with different pages.
@xboxmod the only thing that needs to be changed to enable downloading from the store is the oemId. It needs to be HTC. I was able to download it to my T-Mobile Branded 8x (which Sprint doesn't even sell) with no issues. (it's moID is "null" for some reason on my phone after applying GDR3 and hard resetting)

compu829 said:
@xboxmod the only thing that needs to be changed to enable downloading from the store is the oemId. It needs to be HTC. I was able to download it to my T-Mobile Branded 8x (which Sprint doesn't even sell) with no issues. (it's moID is "null" for some reason on my phone after applying GDR3 and hard resetting)
Click to expand...
Click to collapse
Thanks
"null" value was the trick.:good:

xboxmod said:
Thanks
"null" value was the trick.:good:
Click to expand...
Click to collapse
Were you able to get this off your Ativ? I'd love to start ripping into it.

compu829 said:
Were you able to get this off your Ativ? I'd love to start ripping into it.
Click to expand...
Click to collapse
I did manage to extract the DiagnosticTool_Sprint and it's now an unencrypted xap, the data.zip is all the files how I found them on my phone (with the exact path to the program and the appdata).

I will decompile The dlls and Look for hidden pages
Sent from my RM-821_eu_euro2_248 using Tapatalk

bruce142 said:
I did manage to extract the DiagnosticTool_Sprint and it's now an unencrypted xap, the data.zip is all the files how I found them on my phone (with the exact path to the program and the appdata).
Click to expand...
Click to collapse
Thanks!
@GoodDayToDie @xboxmod Apparently there is a capability called <!--Capability Name="ID_CAP_NVREADWRITE" /-->. Too bad it's commented out in their manifest :/ I wonder what it does? (besides the obvious, based on the name)
edit:
I was able to plug in my phone and Windows Updates decided to install drivers! I now have "HTC Diagnostic Interface (Com 6)", HTC NEMA Interface (Com 8)", "HTC USB Modem", and "HTC Remote NDIS-Based Device" (this one is currently Code 10.) Thanks Sprint! >

[WIP][HTC 8x][8.1]Fiddler2 Update Utility UEFI, BOOT Dumps & Templates[ExploitsFound]

[WIP][HTC 8x][8.1]Fiddler2 Update Utility UEFI, BOOT Dumps & Templates[ExploitsFound]
heres the story. i hex edit, spyder, leech, rip, hack all day everyday from my inseure server. always trying to break security on multiple platforms and remote locations. anyways my pc is just filthy. my devices probably have more imfections than a skid row street hooker. the is no exact explination on how this happened but all i know is a combination of a app\xap called webserver native access 0.4.3 , xenu url checker for pc and fiddler2 all running on the same ip and port [9999] started doing strange things. i fiddles when i typed in the address that webserver xap gave me while spyder crawling my phone with xenu,fiddler picked up lots of certificates while decoding system files.then o e after another probably 5 or 6 updates poped up on my phone. ive already had 3 windows 8.1 updates in the past. and wasnt aware of anything new. . also fiddler never picked up any remote link only local. strabge thing is i think rom updates for other devices got flashed to my phone. anyways the phone still works. im not sure the exact situation but the other day microsoft gave me a security signed symantic enterprise mobile code signig certificate when i made my store on the app studio website. i could of swore it was something of 250 dollar fee to get symantic to sign the cert for you. cant rember the process i went through a year or 2 ago when i need a cert signed. nice of mixrosoft the hook it upi guess. thats not enen the start with certs . i ripped hundreds of crt and crl from ruu's including qualcomm protected root ca's htc-cert , uefi keys, pulled from my device. anyways i had a dumb idea to install all of these onto my pc. what a dumb/smart mistake good happening. now i cam download all ota cabs with out going through proxy loops, and now have deeper access to htc and qualcomm based devices, it seems as the mpment i plug and windows phone with secure boot locked within minutes the device registery hive syncs with my servers hive and forcesthephone to disable uefi secure boot since my server isnt uefi compatible. i not if any sense is made here. ........soonyou will be seeing custom roms for htc8x fully flashable with out the use of a ycable. 2 jumps away from fullly rebuilding partitions from a 3.41 ruu . new roms will be a completely different platform. choice is in the air. right now my htc 8x is compiled from a mixture of windows phone 7 & 8, embedded compact 2013 and windows RT. strange thing is my device is based on gdr2..
my thumbs hurt from thping this on my nexus. sorry for the bad grammer and broken up sentences.
one last note anybody know wherr to get the OAK (OEM Adaptation Kit) layers and the 9600_POWERTOOLS with out having to sign up as an oem for microsoft.? I Have part of oak but only the portion for embedded compact 8
if anybody woild lit to join in be my guest. the more heads in this project the faster we break one of the most secure phones in the world. i will get everyone caught up wothin the soon on info. got to sort my files.
as of right now i think the ruu_signed.nbh is actually a .egisenx file extension which can be decrypted with edatasecurity by acer. once i find the framework software to install edatasecurity. i will give it a shot. in the mean time in anybody has an acer or gateway computer with that software installled on it already you could take a crack at. pick up any ruu_accord and 7z the exe file directly open the ruu_signed.nbh with a hex editoe without extracting the file and save the the nbh as a .egisenx file extension then proceed to attempt to decrypt. if it requires a password. i will provid some strings i pulled from the hexeditor. even beter if anybody has decrypting software that might work too.
also some of the htc 8x partitions arr encrypted SHK (SENTENIAL SKYNET) this is interensting i think this might be easier to crack.
softqare used so far in project accord
Revskills final release
Revskills 1.xx
qmi by revskillz
winrar good for converting damaged files
7zip good old extract to temp location
telerik justdecompile standalone version or visual studio extenson
webserver 0.4.3 or 0.5.0 .xap for wp8 winpone8 works on windows phone 8.1 also!
xenu url checker
fiddler2
winhttrack rip my phone like a website
010 editor with lots of custom scripts templates and syntex.
hhd hex editor is optional
hiew hex editor for the pros. still experimentig with this one.
lots of time.
cmd.exe and ecery damn xommand executible you can find that rips, strios, converts, merges, splits de/compress makes thing go backwards forward up down and flip around.
lots more fime
brew mp
win phone 7 tools.
OAK
osbuilder for wp7
basicly any file you can find that de/compiles that was made my microsoft mobile, embedded or ce department.
wak, wdk, hck 8.1 microsoft hardware tools
visual studio 2012 2013.
visual studio .net compiler 'rosylin'
lots of samples.
2014-05-24
RUU PARTITION RIPPING THE EASY WAY.
7zFM build 932 can directly open any file when using the options in the contex menu. just right click on the .ruu_signed.nbh highlight 7z open with arguement submenu and eithe choose # option or the #e option. both arguements work but with different outcomes. when 7z is done loading you will end of with a numbered liat of files some witj or without extensions. extensions as folowing .efi, .elf, .fat, .ntfs, .exe. all extenses with extensions open. the fat files are complete partitions. thw ntfs partition is metadata that is also embedded with in a file called boot.sdi located in one of the fat partitions. the exe files are normal MZ PE executable system32 applications. efi executable files are also located within the fat partitions. the elf files which strangely exist within the phones operating system can be extracted and read with a hex editor. strange that windows phone contains elf. considering Microsoft binary format is COFF/PE. DOWNLOADS WILL BE UP SOON FOR DEVELOPMENT. it is a possibility that the boot partition ripped form a accord_u_wwe was part of the updateos.wim. therr is refrence on how to add packages to the wim on the windows phone developer oem site.
an interesting experement done which worked on nokia ffu files. convert the nokia ffu to a vhd using winimage with fixed size settings. once completed. mount it with osfmount tool. none of the partitions show up nor are they mountable. so i proceded to generate a raw img from the vhd in osfmount which put out a raw img just over 7gb. jezuz the vhd was only just over 1gb. decided to mount the raw img using diskinternals linux reader and what do you know every partition showed up. even the secret one. most were still unable to open but boot uefi data and mainos. it did give me good insite on what to look for and discover within the windows phone lock filesystem.
There is a metadata file hidden deeply with MFT (MasterFileTable) called $Boot. this $Boot file header is R.NTFS.
i will get more in depth on thia later.
File system encryption used for the MAINOS is called RSDS mi. very hard maybe impossible to reverse engineer. I did find an explination in a .text file located inside of the file Liveupdate.exe located in The windows/system32 folder of my phone. the file gave vague instructions on how to compile an Fupdate.xml template which and be used to push update packages over wifi. more details layer.
Possibility to mount several partitions including mainos directly on my pc by minipulating binary regestery keys on windows 7. more soon.
Found these in my pc. Going to play around with them see what happens
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\WP8]
[HKEY_CURRENT_USER\Software\WP8\DL]
"MODE"=dword:d10ad121
"CSC"=hex:00,00,00,00
"SBL"=hex:00,00,00,00
"RPM"=hex:00,00,00,00
"UEFI"=hex:00,00,00,00
"ACPI"=hex:00,00,00,00
"MainOS"=hex:00,00,00,00
Click to expand...
Click to collapse
Diffrences in files located in the fat16 partitions cross refrenced branded and unbranded ruu's csv.cfg on the branded ruu has the radio build number defined while the unbranded ruu is blank 00 hex bytes through the entire csv.cfg file. RADIOVER.CFG unbranded ruu has anextra line IMEI line configured to 1 while the branded ruu is missing the imei line. my guess is with the imei 1 assignment with the unbranded ruu is once the device gets flashed with the original firmware it also gets assigned a new imei as well. just my guess. some insite would help on this.

Well, as the dev of NativeAccess I'm certainly very interested in what you found. My first guess is that you wandered into the section of the registry where the phone's certs are stored (yes, it's readable), although the format that the app returns them in isn't something that would normally be recognized as a certificate. Which means my *best* guess is that you wandered onto some certificate files stored on the phone in a readable directory, because the server app will let you download files
Everything from there is Really Weird though, and we'll need to investigate it more. I should spin up some VMs to try this... anyhow, getting additional updates to your phone is pretty weird, so let's start with that. Did you install those updates? What were their descriptions (i.e. what did they say was getting updated)? What are your current phone version strings (OS, Firmware, etc.) from Settings -> About -> More info (and do any of those look notably different than you expect)?
Installing certs ripped from RUUs onto your PC is... well, I would never have tried it on my main box, but now I really want to try it on a VM. Do you have the list of certs you installed anywhere handy? What ROMs did you rip them from, and where in those ROMs?
Deeper access into WP8 devices sounds *seriously* interesting! I don't have a modern HTC (only my old HD7, a WP7 device) but I could probably obtain one, at least temporarily, for research purposes. What registry hives do you think are synching (and why do you think it's a synch)? Is it actually turning off Secure Boot for real, or just causing the registry to report that it's off? (We can override the report value on Samsung WP8 phones, but that does no good.) If you've managed to turn off Secure Boot on HTC WP8 devices, you've probably just found the door to custom ROMs and possibly other fun hacks. Do you have any non-HTC WP8 devices you could test with too, to see if anything else interesting is happening?
Good luck cooking up those custom ROMs! That is unfortunately not my field at all, so I can't really help... but it would be pretty cool to have the ability to run RT instead of / in addition to WP! There's also a ton of tweaks and unlocks we can do if we have totally arbitrary access to the device and no pesky code signing enforcement getting in the way.

GoodDayToDie said:
Well, as the dev of NativeAccess I'm certainly very interested in what you found. My first guess is that you wandered into the section of the registry where the phone's certs are stored (yes, it's readable), although the format that the app returns them in isn't something that would normally be recognized as a certificate. Which means my *best* guess is that you wandered onto some certificate files stored on the phone in a readable directory, because the server app will let you download files
Everything from there is Really Weird though, and we'll need to investigate it more. I should spin up some VMs to try this... anyhow, getting additional updates to your phone is pretty weird, so let's start with that. Did you install those updates? What were their descriptions (i.e. what did they say was getting updated)? What are your current phone version strings (OS, Firmware, etc.) from Settings -> About -> More info (and do any of those look notably different than you expect)?
Installing certs ripped from RUUs onto your PC is... well, I would never have tried it on my main box, but now I really want to try it on a VM. Do you have the list of certs you installed anywhere handy? What ROMs did you rip them from, and where in those ROMs?
Deeper access into WP8 devices sounds *seriously* interesting! I don't have a modern HTC (only my old HD7, a WP7 device) but I could probably obtain one, at least temporarily, for research purposes. What registry hives do you think are synching (and why do you think it's a synch)? Is it actually turning off Secure Boot for real, or just causing the registry to report that it's off? (We can override the report value on Samsung WP8 phones, but that does no good.) If you've managed to turn off Secure Boot on HTC WP8 devices, you've probably just found the door to custom ROMs and possibly other fun hacks. Do you have any non-HTC WP8 devices you could test with too, to see if anything else interesting is happening?
Good luck cooking up those custom ROMs! That is unfortunately not my field at all, so I can't really help... but it would be pretty cool to have the ability to run RT instead of / in addition to WP! There's also a ton of tweaks and unlocks we can do if we have totally arbitrary access to the device and no pesky code signing enforcement getting in the way.
Click to expand...
Click to collapse
right now im hexediting ruus and they seem almost completely decrypted. its strange becUse a few weeks ago they were all scrambled.
i will postnmy findings on my website for every one to view
i rememersomeones post on possible certificates could bethekey to jailbreaking qindows phone 8. i think theymight beright

it said the updates i got stated they would further enchance my device. windows phone 8.1. funny.
i ripped certs from several ruu_accord_u and img_accord_u packages. i have 9 or 10 htc 8x ruu's stashed.
i installed the certs that had embedded htc_cert, qcom, qualcomm, symantic, uefi, and a few others i cant remember them all.
i have a lot to catch everybody up on. about 50gb of findings from accord ruu's and from files ripped from my phone. its a cluster **** of work.
uefi flashing
uefi disabling
source code
software lots of software refrences found.
wince800
winrt
qcomedk2 = edk2 part of the original dev kit ised to build flash dump reflash enable and disable uefi bios
certificates thousands of crl cer in every device. even the smallest file has a certificate. and i found their passwords
rsa-keys in the tesst faze
uefi keys
esn keeys
every partition size, format, offset and sector size.
port numbers and usages
every single registery key
.....
.....
keeps going on.

reserved

grilledcheesesandwich said:
reserved
Click to expand...
Click to collapse
reserved