Практическое применение полного доступа » Страница 87

''' IMEI Patcher by CODeRUS 1. port commontsy.dll and phonetsy.tsy using aRomAT 2. copy 2 files into some dir 3. call this function: patch_imei( dir, "123456789012345") where numbers is imei you want to get 4. now delete commontsy.dll 5. copy commontss.dll and phonetsy.tsy to c:\sys\bin and reboot -. if you want to change imei again just search in hex imei inside commontss.dll and change it Enjoy =) ''' import os, shutil, struct def patch_imei(aDir, aImei): def pack_bl(start, end): delta = end - start - 4 VH, off = divmod(abs(delta), 0x100000) VH = 0xf0 + 7*(delta<0) + VH*((delta>0)*2-1) HI, off = divmod(off, 0x1000) HI = abs(HI - 0xff*(delta<0)) Z, LO = divmod(off, 0x200) Z = 0xf8 + 7*(delta<0) + Z*((delta>0)*2-1) LO = abs(divmod(LO, 2)[0] - 0x100*(delta<0)) return HI*0x1000000+VH*0x10000+LO*0x100+Z acommontsy = aDir+"commontsy.dll" acommontss = aDir+"commontss.dll" aphonetsy = aDir+"phonetsy.tsy" try: os.remove(acommontss) except: pass shutil.copy(acommontsy, acommontss) commontss = open(acommontss, 'rb+') commontss.seek(0xb0) addr2 = struct.unpack('<L', commontss.read(4))[0] - 0x8000 + 0x9c commontss.seek(0) data = commontss.read() addr1 = data.find('\x02\x01\x12\x09\x00\x2A\x09\xDD') commontss.seek(addr1+0x10) data = commontss.read(6) commontss.seek(addr1+8) commontss.write(data) commontss.write(struct.pack('>L', pack_bl(addr1+0xe, addr2))) commontss.write('\xc0\x46\xc0\x46\xc0\x46') commontss.seek(addr2) commontss.write('\x10\xB5\x01\xA1\x10\xBD\x00\x00\x0F\x00\x00\x00') commontss.write(aImei) commontss.write('\x00') commontss.close() phonetsy = open(aphonetsy, 'rb+') data = phonetsy.read() phonetsy.seek(0) data = data.replace('commontsy','commontss') phonetsy.write(data) phonetsy.close() patch_imei("./", "000000000000000")