.rc1 Editing

22 views
Skip to first unread message

Ian Boys

unread,
Jul 19, 2010, 10:56:37 AM7/19/10
to Eternity Firmware
Essentially, here is what I did:

1: Load the .rc1 into a hex editor
2: Find the first instance of "435753"
3: The '43' is the beginning of the block
4: Search for the next instance of "435753"
5: The value right before the 43 is the last value in the block
5: Copy the block into a new file, save as a .swf
6: Continue the exact same process with the next block, and the next,
and the next... (I found 16 blocks, total, when I did it)


Now, per the tutorial that I followed, the next step is loading
the .swfs into a resource-ripper, where you can allegedly access all
images used as icons,. menu headers,. etc on the phone, edit them,
save as a .swf again, then combine with all of the .swfs into a
reconstructed .rc1. I could not get any resources rippers working, so
for all I know, the work is all there in the files I generated, just
not visible. The tutorial uses software called 'Trillix'.

Here's a link to the tutorial that I used :
http://darkforestgroup.com/forum/index.php?topic=2929.0

Hope someone else can get further than I did with this one! I know
what we want is there, and I think this is how we'll get it...

I'll load all the files I extracted, as well.

Ian Boys

unread,
Jul 19, 2010, 11:07:08 AM7/19/10
to Eternity Firmware
The offset is, per the program I used, A92A39 with 16 bytes per row,
for a total of 6291455 bytes (yikes). I might be a good idea if you
verified this, though, as this isn't exactly my area of expertise.

Jason C.

unread,
Jul 19, 2010, 2:26:04 PM7/19/10
to Eternity Firmware
The next step is to find a reference to that location in the beginning
of the file.

It may be written as 2A4A (which in the file would be 4A 2A) (Thats
0xA29A30/1024 btw, But that points at A92800.

A92A30 + 09

rekcah

unread,
Jul 22, 2010, 5:17:52 PM7/22/10
to Eternity Firmware
I tried this a couple of months ago with no luck. I was able to
extract the swf files and open them with Trillix. I changed some
icons and saved the swf file and reconstruced the rc1 flashed and
there was no change.

The only icons I found were the camera functions and the gray/
transparent buttons at the bottom of the screen.

Jason C.

unread,
Jul 22, 2010, 5:19:53 PM7/22/10
to Eternity Firmware
Rekcah, was it you that wrote the RBM file extractor?

If so, Do you mind if i GPL it and add it to the firmware project? I
made a crapload of updates to the source, But the source specifies no
license. The project cannot contain code that is not GPLv3, So i
cannot include it without the authors permission.

rekcah

unread,
Jul 22, 2010, 5:37:07 PM7/22/10
to Eternity Firmware
No It wasn't me. It was 'WB3000' on samsung-eternity.com forums.
here is link to WB3000 profile
http://www.samsung-eternity.com/index.php?action=profile;u=22510

Jason C.

unread,
Jul 22, 2010, 5:38:40 PM7/22/10
to Eternity Firmware
Alright, If i can't get ahold of him i'll just re-write the code and
GPL my version, I hate to re-invent the wheel though, im doing enough
of that already!

On Jul 22, 5:37 pm, rekcah <sansae...@gmail.com> wrote:
> No It wasn't me.  It was 'WB3000' on samsung-eternity.com forums.
> here is link to WB3000 profilehttp://www.samsung-eternity.com/index.php?action=profile;u=22510
Reply all
Reply to author
Forward
0 new messages