Initial commit

README.md

@@ -0,0 +1,5 @@
+Sony RIC Defeat - Flashable zip
+===================
+
+A flashable zip to defeat Sony RIC protection, based on the [loadable kernel module by MohammadAG](https://github.com/MohammadAG/wp_mod)
+Module crc patching code can be found [here](https://github.com/dosomder/modulecrcpatch)

RICDefeat/META-INF/com/google/android/updater-script

@@ -0,0 +1,73 @@
+ui_print(" ");ui_print(" ");
+ui_print("===========================================");
+ui_print("|                                         |");
+ui_print("|         *** Sony RIC Defeat ***         |");
+ui_print("|                                         |");
+ui_print("|            Created by zxz0O0            |");
+ui_print("|       Kernel module by MohammadAG       |");
+ui_print("|                                         |");
+ui_print("===========================================");
+
+ui_print("");
+show_progress(1.000000, 0);
+
+ui_print("Extracting files...");
+package_extract_file("utils/modulecrcpatch", "/tmp/modulecrcpatch");
+package_extract_file("utils/busybox", "/tmp/busybox");
+package_extract_file("utils/installmount.sh", "/tmp/installmount.sh");
+package_extract_file("wp_mod.ko", "/tmp/wp_mod.ko");
+set_perm(0, 0, 0755, "/tmp/modulecrcpatch");
+set_perm(0, 0, 0755, "/tmp/busybox");
+set_perm(0, 0, 0755, "/tmp/installmount.sh");
+set_perm(0, 0, 0644, "/tmp/wp_mod.ko");
+mount("ext4", "EMMC", "/dev/block/platform/msm_sdcc.1/by-name/System", "/System");
+mount("ext4", "EMMC", "/dev/block/platform/msm_sdcc.1/by-name/system", "/system");
+set_progress(0.300000);
+
+ui_print("Patching kernel module");
+if
+	run_program("/tmp/busybox", "ls", "/system/lib/modules/scsi_wait_scan.ko") != "0"
+then
+	if
+		run_program("/tmp/busybox", "ls", "/System/lib/modules/scsi_wait_scan.ko") != "0"
+	then
+		abort("Error finding scsi module");
+	else
+		set_progress(0.400000);
+		if
+			run_program("/tmp/modulecrcpatch", "/System/lib/modules/scsi_wait_scan.ko", "/tmp/wp_mod.ko") != "0"
+		then
+			abort("Error patching kernel module");
+		else
+			set_progress(0.600000);
+			run_program("/tmp/busybox", "cp", "/tmp/wp_mod.ko", "/System/lib/modules/wp_mod.ko");
+			set_progress(0.700000);
+			ui_print("Installing mount hook");
+			assert(run_program("/tmp/installmount.sh", "System") == "0");
+			set_progress(0.800000);
+		endif;
+	endif;
+else
+	set_progress(0.400000);
+	if
+		#todo: dynamically check for kernel modules to read crc
+		run_program("/tmp/modulecrcpatch", "/system/lib/modules/scsi_wait_scan.ko", "/tmp/wp_mod.ko") != "0"
+	then
+		abort("Error patching kernel module");
+	else
+		set_progress(0.600000);
+		run_program("/tmp/busybox", "cp", "/tmp/wp_mod.ko", "/system/lib/modules/wp_mod.ko");
+		set_progress(0.700000);
+		ui_print("Installing mount hook");
+		assert(run_program("/tmp/installmount.sh", "system") == "0");
+		set_progress(0.800000);
+	endif;
+endif;
+
+set_progress(0.900000);
+ui_print("Cleaning up...");
+unmount("/system");
+unmount("/System");
+
+set_progress(1.000000);
+ui_print("Finished!");

RICDefeat/utils/installmount.sh

@@ -0,0 +1,23 @@
+#!/sbin/sh
+
+system=$1
+
+echo "#!/$system/bin/sh" > /tmp/mount.sh
+echo 'mod_loaded=`lsmod | grep wp_mod`' >> /tmp/mount.sh
+echo 'if [ "$mod_loaded" = "" ]; then' >> /tmp/mount.sh
+echo "	insmod /$system/lib/modules/wp_mod.ko" >> /tmp/mount.sh
+echo "fi" >> /tmp/mount.sh
+echo "/$system/bin/stock/mount \"\$@\"" >> /tmp/mount.sh
+
+if [ ! -f /$system/bin/stock/mount ]
+then
+	echo "Stock mount does not exist. Creating dir and link"
+	mkdir /$system/bin/stock
+	chmod 755 /$system/bin/stock
+	ln -s /$system/bin/toolbox /$system/bin/stock/mount
+fi
+rm /$system/bin/mount
+cp /tmp/mount.sh /$system/bin/mount
+chmod 755 /$system/bin/mount
+
+echo "Installing of mount.sh finished"

tools/create.bat

@@ -0,0 +1,4 @@
+@echo off
+7z.exe a ..\RICDefeat_.zip ..\RICDefeat\*
+java.exe -Xmx1024m -jar signapk.jar -w testkey.x509.pem testkey.pk8 ..\RICDefeat_.zip ..\RICDefeat.zip
+del ..\RICDefeat_.zip

tools/testkey.x509.pem

@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----