2008-9-22 08:13
zyyzhc
==破解手机权限(免去签名烦恼)和S60三版补丁汇总==
[color=blue][size=7]因为S60三版补丁需要破解手机,所以在一楼提供破解手机的方法,[color=red]使用该方法以后所有软件都免签名了[/color][/size][/color]
[size=7][color=blue]二楼是补丁汇总[/color][/size]
[size=3][color=blue][/color][/size]
[size=3][color=blue][/color][/size]
[size=3][color=blue]1.安装[attach]3010953[/attach]到C盘
[/color][/size][size=3][color=blue]2,手机与电脑连接,选择PC套件模式。打开PC套件,选择连接[b]。(有提供pc SUITE)[/b]
[attach]3010954[/attach]
[attach]3010955[/attach]
[attach]3010956[/attach]
[attach]3010958[/attach]
[attach]3010959[/attach]
[attach]3010960[/attach]
3, 在手机上打开TRK,手机提示“是否启动蓝牙”,选择“否”。操作“选项”》“settings”,在“Commection”选项中选择“US B”。按“返回”,“选项”》“connect”
[/color][/size]
[size=3][color=blue]4.,:在电脑上解压并打开[attach]3010957[/attach][/color][/size]
[b][size=4][color=#ff0000] 选择NEXT
[img]http://attimg.dospy.com/img/day_080528/20080528_5e368e2cbe65e26e3149ZqpQnbCZC7iw.jpg[/img]
[size=4][color=red][b] 选择NEXT[/b][/color][/size]
[img]http://attimg.dospy.com/img/day_080528/20080528_4a7ad19816402c85b3832WjCcngS0SHi.jpg[/img]
[img]http://attimg.dospy.com/img/day_080528/20080528_dc338ec4aca2f2ba0742YiYqYcj4tq84.jpg[/img][/color][/size][/b]
[size=3][color=blue][b]5,上部就是在手机上安装了手机破解权限,其中[/b]运行SecMan,“选项”》“Install Root Certificate”,导入BiNPDA根证书成功。
[/color][color=red][/color][/size]
[size=3][color=red]"Turn Plat security OFF"此选项将会关闭权限检验,即破解你的手机。
[/color][/size][size=3][color=red]" Install Root certificate " 导入BiNPDA根证书,以后在安装签入了BiNPDA根证书的软件时不用自己签名。[/color][/size]
[align=left][size=3][color=red]" Restore Default " 移除根证书和权限,让你的手机恢复破解前的状态。[/color][/size][/align][size=3][color=red]" Uninstall Secman " 卸载程序[/color][/size]
[size=3][color=red]6,开启破解状态,[color=magenta]将[attach]3010961[/attach]压缩包里的installserver.exe拷贝到c:\sys\bin目录,既是以后装软件都不需要签名了(要用文件管理器才行哦,) [/color][/color][/size]
[attach]3010962[/attach]
[size=3][color=#ff00ff][/color][/size]
[attach]3010963[/attach]
[size=3][color=#ff00ff][/color][/size]
[[i] 本帖最后由 zyyzhc 于 2008-11-13 15:15 编辑 [/i]]
2008-9-22 08:13
zyyzhc
[color=darkgreen] [/color][size=5][color=red] S60第三版补丁汇总贴[/color][/size]
[color=darkgreen]前言:自从破解了第三版的系统,可以操作的东西多了很多,其中一个重要的东西就是补丁的出现,可以实现一些系统没有的功能,去掉系统的限制,增强手机的可玩性。由于nokia的限制,升级的flash存在校验,修改升级文件有可能导致机子刷机后开启不了,多亏有了zorn,fca00000,leftup等大师,开发出rompatcher补丁应用工具,就不用修改升级文件了。
注意: 由于s60版本机型的不同,补丁不一定适用于所有机型。一、在帖子下面下载补丁应用工具rompatcher:下载:RomPatcher汉化版By segalgx(Mr&fp1).sisx软件:
rompatcher版本:2080618作者:Zorn汉化:segalgx支持Mr,FP1机子!引用:直装版,支持开机自动加载补丁,签了binpda的根证书,手机需要破解,替换了根证书,或者用修改版的installserver.exe具体[/color][color=blue][size=5]参考一楼方法[/size]
[/color][size=4][color=red][/color][/size]
[size=4][color=red]二、补丁(rompatcher)补丁以rmp为后缀,放到e:\patches目录,在rompatcher中应用
[/color][/size][size=3][color=blue]01,待机模式下不显示日历,搜索,代办事项等by Alberto Bilheteria[/color][/size]
待机模式下不显示日历,搜索,代办事项等by Alberto Bilheteria
当我们手机“当前待机模式”选择为开启时,桌面有快捷方式,还有显示日历、搜索等,
补丁作用是去掉这个显示。如果你已经开启的待机模式,先要关闭,启用补丁后,再开启待机模式。
使用:手机需要安装rompatcher,把rmp的补丁文件放到e:\patches目录,运行软件,开启补丁注意:MR(prefp1)的机子可能不支持(N73等)
[attach]3011006[/attach]
2 [attach]3011014[/attach]点击下载
[size=3][color=blue]02,修改手机版本显示信息[/color][/size]
手机需先安装rompatcher,补丁文件放到手机e:\patches要先破解
手机有关版本的信息文件是z:\resource\versions目录下的几个文本文件,
待机时按*#0000#显示的信息引用:;修改系统显示信息1(sw.txt);感谢fca00000、zorn
还有leftup等;By segalgx;6120c 测试通过;把z:\resource\versions\sw.txt复制到e:\resource\versions目录,
自行修改文件内容SnR:sys\bin\sysutil.dll:5A003A005C007200650073006F0075007200630065005C00760065007200730069006F006E0073005C00730077002E00740078007400:45003A005C007200650073006F0075007200630065005C00760065007200730069006F006E0073005C00730077002E00740078007400引用:;
修改系统显示信息2(model.txt);感谢fca00000、zorn还有leftup等;
By segalgx;6120c 测试通过;把z:\resource\versions\model.txt复制到e:\resource\versions目录,自行修改文件内容SnR:sys\bin\phone.exe:5A003A005C007200650073006F0075007200630065005C00760065007200730069006F006E00730
[attach]3011008[/attach]
[img]http://bbs.dospy.com/images/attachicons/rar.gif[/img] [url=http://bbs.dospy.com/attachment.php?aid=3003599]修改手机版本信息.rar[/url] (659 Bytes) 点击下载
[size=3][color=blue]03.改变手机默认指令Key Combinations Patch[/color][/size]
[size=3][color=#0000ff][/color][/size]
改变手机默认指令Key Combinations Patch 1.0
原作:CODeRUS改变手机默认的一些指令,比如查询系统版本,IMEI,格机等指令输入的代码
手机需安装rompatcher引用:;*** Key Combinations Patch 1.0 ***;*** Change key combination for show info ***; Author: CODeRUS; Released by: CODeRUS; Date: 2008.05.03; Thanks to -=ZoRn=- for his wonderful ROMPatcher*** phrig for making this changes . ; Firmware: tested on 6290 . Might work on preFP1+FP1;将*#0000#改成*#1234#,1234可以自行修改(unicode格式)SnR:sys\bin\phoneparser.dll:2A002300300030003000300023:2A002300310032003300340023;将*#06#改成*#00#SnR:sys\bin\phoneparser.dll:2A0023003000360023:2A0023003000300023;将*#7780#改成*#6661#SnR:sys\bin\phoneparser.dll:2A002300370037003800300023:2A002300360036003600310023;将*#7370#改成*#6662#SnR:sys\bin\phoneparser.dll:2A002300370033003700300023:2A002300360036003600320023;将*#2820#改成*#8888#SnR:sys\bin\phoneparser.dll:2A002300320038003200300023:2A002300380038003800380023;将*#92702689#改成*#12345678#SnR:sys\bin\phoneparser.dll:2A0023003900320037003000320036003800390023:2A0023003100320033003400350036003700380023
*#06#IMEI码,也就是我们所说的手机串号。
*#0000#手机版本信息,显示后一共会出现3行信息,第一行是手机软件当前版本,目前最新版本是V21版,第二行是此版本软件发行日期,第三行是手机型号代码。
*#7370#恢复出厂设置(软格机),这个命令一般是在手机处于错误或系统垃圾过多的情况下使用格机命令,
格机前可以通过第三方软件或6600PC套件备份一下你的名片夹或需要的资料,格机时一定要保持电量充足,
不要带充电器格机,格机时只显示“NOKIA”字样还有亮屏幕,没格完千万不要强迫关机和拔电池,
以免造成严重后果,格机完成后重新输入时间,再恢复你的名片夹和资料就可以了,格机可以恢复一切原始设置,
将C:盘内容全部清空,再写入新的系统信息,注意的是此格机不影响储存卡的内容。
*#7780#恢复出厂设置,等同于功能表——工具——设置——手机设置——常规——原厂设定,注意此命令仅是恢复设置,不同于格机,恢复后名片夹、图片、文档等全部依然存在,只是设置还原了,有些朋友因设置错误而不知如何改回来就可以使用这个命令了。
1.改变手机默认指令[img]http://bbs.dospy.com/images/attachicons/rar.gif[/img] [url=http://bbs.dospy.com/attachment.php?aid=3003629]combinations path 1.0.rar[/url] (613 Bytes) 点击下载
2.[img]http://bbs.dospy.com/images/attachicons/zip.gif[/img] [url=http://bbs.dospy.com/attachment.php?aid=3003630]keycombpatch_360.zip[/url] (786 Bytes) 点击下载
[size=3][color=blue]04,破解JAVA midlets权限[/color][/size]
破解java midlets权限很早的一个补丁。手机没有java程序,没有测试,不过应该是没问题的!
作者:Fca00000,hannan123,还有zorn、leftup等对破解贡献的人补丁作用:解除java程序的限制,使java程序拥有高权限,应用补丁后,java程序读写用户数据,联网等不再会提示
1、手机安装了rompatcher
。2、生成自己的c2z通用补丁,放到e:\patches目录,用rompatcher加载《补丁-通用文件到C盘补丁(C2Z)by FCA00000(2008-5-11)》
3、把[img]http://bbs.dospy.com/images/attachicons/zip.gif[/img] [url=http://bbs.dospy.com/attachment.php?aid=3003676]java .zip[/url] (2.65 KB) 附件的文件解压放到c:\System\data\midp2\security\policy\,如果没有该目录,自己新建一个。
提速标题:[补丁]通用文件到C盘补丁(C2Z)by FCA00000(2008-5-11)手机需安装rompatcherPS:新版的rompatcher支持rmp补丁文件中包含多个补丁语句的,所以c2z程序生成的3个补丁文件可以集成1个PS2:有些机子直接支持优先读取C盘文件的,像N82等使用:-拷贝z:\sys\bin\EFSrv.dll到c2z.exe目录,运行c2z.exe,就会在当前目录生成rmp补丁的,复制出来拷贝到e:\patches下补丁作用:使手机优先读取C盘的一些文件,比如txt,mbm等c2z. Version 2008.05.07This program makes a patch for Symbian S60v3 phones, to be used with ROMPatcher.The purpose of this patch is to force the phone to use files in C: before the same file in Z:For example, if you havec:\resource\apps\About.r01then it will take precedence overz:\resource\apps\About.r01This is usefull to fake Symbian so that it takes your own file, before the original one.As files in C: are read+write, you can modify them.To run it:using a hacked phone, extractz:\sys\bin\EFSrv.dlland copy to the a PC folder where you have c2z.exeand run c2z.exe-拷贝z:\sys\bin\EFSrv.dll到c2z.exe目录,运行c2z.exe,生成3个rmp补丁文件(自己可以将代码复制粘贴到一个补丁文件中),拷贝到手机e:\patches目录,运行rompatcher,启用补丁It will generate 3 files :c2z1.rmp, c2z2.rmp, c2z3.rmpTransfer those files to your mobile e:\Patchesand start ROMPatcherLoad them, in exactly the same order.Q & A<img src="./images/smilies/mad.gif" border="0" smilieid="11" alt=":Q" />: Why 3 files?A: because ROMPatcher doesn’t allow 1 file with 3 patches.Q: Do I need to copy EFSrv.dll back to the mobile?A: NoQ: how can I check it works?A:1) copy z:\resource\apps\About.r01 to your PC1.1) if you use a non-english phone, use the correct About.r?? file2) using a Hexadecimal editor, change any word, for example ’Nokia’ into ’FCA00’3) copy into your phone at c:\resource\apps\About.r014) start the application tools-About5) you should see your modified textQ: which files can be overriden?A: At least *.RSC , *.MBM, *.INI, *.R??, *.TXT--能够替换的一些文件,rsc,mbm,ini,txt等文件。Q: which files can NOT be overriden?A: at least:1) those that are in ROM. Remember that Z:*** ROM is not exactly the same.2) those that are loaded using the UID instead of the name. This includes many *.DLL*** *.EXEQ: which are the risks?A: as for the patch, very little. Reseting the phone will unload the patch*** everything goes back to normal.But some applications already search in C: before Z: so if you copy a wrong file into C: , that app might crash.This happens even without this patch. If the app is critical, reformating the phone is the only solution.
有些程序已经是优先读取C盘的文件,如果放了一个错误的文件在C盘,软件会出错,当这个软件是一些重要的软件(比如开机需要的),出错可能导致手机开不了,只能格机。这个跟补丁是无关的Q: After patching, I can not format my MMC card.A: yes. The patch needs new code, so I reused the are in RFormat::OpenIf you need to format your MMC card, disable the patch. Or just reset the phone*** don’t enable the patchQ: after restart, the patch doesn’t work any moreA: true. You need to use ROMPatcher again*** enable them.Q: I transfered z:\System\data\Wsini.ini to C: , modified it,*** my changes are not applied.A: Some files are read*** stored into memory before the GUI starts, so it’s too late to patch them. No workaround yet.Some files are loaded in a different way, that the patch can not handle.Examples: z:\resource\versions\sw.txt or z:\system\data\swipolicy.iniQ: is there any way to know which files are overrided?A: not yet. If/when I make an upgrade of this patch, it would be possible.Q: my phone is slower.A: One reason is that phone needs to search in 2 drives. Another reason is that C: might be slower than Z<img src="./images/smilies/mad.gif" border="0" smilieid="11" alt=":Q" />: what is the benefit of this patch?A: several:1) you can change icons for existing Symbian applications2) Same, for resources (texts*** so)3) change sounds, for example \System\Sounds\Digital\CamMojaveCapture3.wav4) change INI files--改变图标,资源文件,声音文件,配置文件Q: What if there is any problem?A: send me your EFSrv.dll*** your phone model*** version.Q: Do you take any responsability if my phone explodes?A: Let me see ... No
[img]http://bbs.dospy.com/images/attachicons/rar.gif[/img] [url=http://bbs.dospy.com/attachment.php?aid=3003702]c2j .rar[/url] (20.3 KB)
[size=3][color=blue]05,改变长按0键快捷方式
[/color][/size]
改变长按0键快捷方式注意:手机需安装rompatcher,具体搜索一下论坛使用,
解压[img]http://bbs.dospy.com/images/attachicons/rar.gif[/img] [url=http://bbs.dospy.com/attachment.php?aid=3003706]0_shortcut.rar[/url] (1.04 KB) 附件的补丁,解压放到e:\patches,运行rompatcher应用。; *** ChangeBrowserOnKey0 1.0 ***; *** Change Browser On Key ’0’ ***;改变长按0键快捷方式; Author: fca00000 , fca00000-at-yahoo-dot-es; Date: 2008.06.01; Firmware: tested on N80 v 5.0719.02 . Might work on preFP1+FP1; N80测试通过; When phone is in the StandBy screen, pressing key ’0’ opens the default browser.;待机下,手机默认长按0键为自带浏览器; With this patch, you can open any other application.;通过这个补丁,你可以改为自己想要的快捷方式; You need to know its UID. Then, swap bytes to little-indian to get xxDIUxxx. In other words: 0x12345678 becomes 78563412;你要知道软件的UID(可以通过文件管理器查看的到),注意高地位要互换,比如查到的是0x12345678,补丁中要用78563412; For example:; FExplorer UID = 0xE00012DF therefore xxDIUxxx=DF1200E0;比如Fexplorer UID=0xE12DF,补丁中要改为DF1200E0; Calculator UID = 0x10005902 therefore xxDIUxxx=02590010; OperaMini UID = 0x101D3166 therefore xxDIUxxx=66311D10 In this case, be aware that it takes some time (5 seconds) to open.; OperaMini的UID=0X101D3166,补丁中要改为66311D10,启动这个可能要的时间长点。; then, the patch becomes:; SnR:sys\bin\phone.exe:398D00100000000000000000:xxDIUxxx0000000000000000; SnR:sys\bin\phone.exe:398D00100100000035000000:xxDIUxxx0100000035000000; As far as I know, nothing is broken. But I decline all responsability, of course.; Anyway, here it is. Enjoy; end of ChangeBrowserOnKey0;想自定义,改变加粗字体部份代码为你想要的程序的UID(注意高地位互换),补丁默认使用UCWEB6SnR:sys\bin\phone.exe:398D00100000000000000000:8F9900A00000000000000000SnR:sys\bin\phone.exe:398D00100100000035000000:8F9900A00100000035000000;end
[size=4][color=red]三、其他修改(无需rompatcher)[/color][/size]
[size=3][color=blue][/color][/size]
[size=3][color=blue]1,开机声音修改[/color][/size]
更改你的手机开机声音 ONLY FOR
更改你的手机开机声音 ONLY FOR HACKED Phones更改你的手机开机声音 ONLY FOR HACKED PhonesFIRST OF ALL YOU NEED HACKED phone 9.X1.unrar pack there you will find 101F8763.txt*** Startup.mp32.put 101F8763 to С:/private/10202be9/101F8763.txt (maybe you will need to *** new folder 10202be9)3.put Startup.mp3 to E:\\Sounds\\Simple\\Startup.mp34.that’s all now turn off you phone*** turn onyou will have new start-up sound. you may edit Startup.mp3 file but remember it must not be longer than 10 sec !!!if it doesn’t work on you phone ,you may change manually1.go to Z:/private/10202be9/*** copy 101F8763.txt2.put it С:/private/10202be9/101F8763.txt3.edit 101F8763.txtyou will find there[Main] remember only change Z:\\Data\\Startup_tone.aac to E:\\Sounds\\Simple\\Startup.mp30x1 int 1 0 cap_rd=alwayspass cap_wr=alwaysfail0x2 int 6 0 cap_rd=alwayspass cap_wr=alwaysfail0x3 string "Z:\\Data\\Startup_tone.aac" 0 cap_rd=alwayspass cap_wr=alwaysfail*** so on4.put Startup.mp3 to E:\\Sounds\\Simple\\Startup.mp3ONLY FOR HACKED Phones中文引自七楼1.第一步,当然是把手机XX先啦2.解压下面的文件,里面会有2个文件,C里面有101F8763.txt,E里面有Startup.mp33.把101F8763放进:/private/10202be9/101F8763.txt(如果没有,自己建立一个10202be9文件夹)4.把Startup.mp3放进E:\\Sounds\\Simple\\Startup.mp3那就大功告成,现在把手机重开试试看,声音是不是改变了??你也可以自己自定义启动声音,但长度不能超过10秒引用:如果以上的方法不行,你也许需要改变一些东西1.去Z:/private/10202be9/然后复制101F8763.txt 这个文件2.放进C:/private/10202be9/101F8763.txt3.编辑101F8763.txt ,做以下的更改更换Z:\\Data\\Startup_tone.aac 去 E:\\Sounds\\Simple\\Startup.mp30x1 int 1 0 cap_rd=alwayspass cap_wr=alwaysfail0x2 int 6 0 cap_rd=alwayspass cap_wr=alwaysfail0x3 string "Z:\\Data\\Startup_tone.aac" 0 cap_rd=alwayspass cap_wr=alwaysfail*** so on4.最后把Startup.mp3放去E:\\Sounds\\Simple\\Startup.mp3
[img]http://bbs.dospy.com/images/attachicons/rar.gif[/img] [url=http://bbs.dospy.com/attachment.php?aid=3003773]start.rar[/url] (56.62 KB)
[size=4][color=red]四[/color][/size]
[attach]3011005[/attach]
点击下载补丁应用工具rompatcher:[attach]3011004[/attach]
rompatcher版本:2080618作者:Zorn汉化:segalgx支持Mr,FP1机子
[[i] 本帖最后由 zyyzhc 于 2008-9-22 09:00 编辑 [/i]]
2008-9-22 09:13
kalagoooo
补丁汇总还是很不错哒
一开始还以为是PY 平台的 [s:26]
2008-9-22 11:46
JayET
强~很好用
2008-9-22 15:48
87967603
*** 作者被禁止或删除 内容自动屏蔽 ***
2008-9-22 16:12
zyyzhc
[quote]原帖由 [i]87967603[/i] 于 2008-9-22 15:48 发表 [url=http://bbs.dospy.com/redirect.php?goto=findpost&pid=28103690&ptid=2072509][img]http://bbs.dospy.com/images/common/back.gif[/img][/url]
没明白 好难啊```嘿嘿```我破解了N G 是不是权限也破解了啊/? [/quote]
是否深度破解了?
2008-9-23 13:01
baichi523
挺好的 回来试试
2008-9-23 14:42
恋爱ing℡
怎么没人顶啊 我来顶起
2008-10-12 11:22
塞班混混之冰冰
一直想破解。。顶起
2008-10-12 11:30
塞班混混之冰冰
我都是一路顺利破解完了。。。为什么安装还提示权限不够呢?
2008-10-12 11:56
zyyzhc
要导入binpda跟证书,在seaman中导入
2008-10-12 12:07
塞班混混之冰冰
终于搞定了。。哈哈。。原来是忘了一步剪切。。。
2008-10-12 22:02
20052591
貌似太复杂了,头晕了
2008-10-13 17:36
41771244
[yct04] 汗啊,老大,我第一步需要安装的软件都说权限不够
2008-10-13 17:41
zyyzhc
第一步骤是不需要签名的,你再安装试试,不行就签名安装
2008-10-13 17:45
41771244
哦,我刚才签名了才不得的。PC SUIT用诺基亚的可以没有?你提供的需要更新,但是又更新不得
2008-10-13 17:49
41771244
看错了,[s:21]
2008-10-13 17:56
zyyzhc
可以了没有?
2008-10-13 18:50
紫色蜗牛
顶了 顶了 这个必须顶 好东西
2008-10-13 20:42
41771244
[yct27] 装软件花了好久,到最后一步了,可是没有发现c:\sys\bin
2008-10-13 20:44
zyyzhc
回复 #20 41771244 的帖子
自己新建一个呗
2008-10-13 20:54
41771244
从电脑那复制installserver.exe进c:\sys\bin 可以不可以啊,文件管理器那我找不到,只能复制到根目录那
2008-10-13 20:57
zyyzhc
回复 #22 41771244 的帖子
复制到储存卡 在用X-PLORE的移动功能移动到c:\sys\bin文件夹下就可以了
2008-10-13 21:07
41771244
[yct27] 但是X-PLORE显示不出c:\sys\bin
2008-10-13 21:14
zyyzhc
开启破解状态,然后进入xplore……菜单……工具……设置……显示隐藏文件打勾,显示系统文件和文件夹打勾就可以了
2008-10-13 21:32
ammilin
太复杂了,智能机小白呆看ing
2008-10-13 21:38
41771244
"Turn Plat security OFF"此选项将会关闭权限检验,即破解你的手机。
" Install Root certificate " 导入BiNPDA根证书,以后在安装签入了BiNPDA根证书的软件时不用自己签名。
" Restore Default " 移除根证书和权限,让你的手机恢复破解前的状态。
" Uninstall Secman " 卸载程序 这部分还要不要做啊[yct05]
2008-10-13 21:43
41771244
"Turn Plat security OFF"此选项将会关闭权限检验,即破解你的手机。
" Install Root certificate " 导入BiNPDA根证书,以后在安装签入了BiNPDA根证书的软件时不用自己签名。
" Restore Default " 移除根证书和权限,让你的手机恢复破解前的状态。
" Uninstall Secman " 卸载程序 这部分还要不要做啊[yct05]
2008-10-13 21:44
zyyzhc
做这个" Install Root certificate " 导入BiNPDA根证书,以后在安装签入了BiNPDA根证书的软件时不用自己签名。
再这个"Turn Plat security OFF"此选项将会关闭权限检验,即破解你的手机。
、
2008-10-13 21:49
41771244
[yct50] 感谢老大的教导啊,终于成功完成所有步骤了[yct06]
页:
[1]
2
3
4
5
Powered by Discuz! Archiver 5.5.0
© 2001-2006 Comsenz Inc.