Sachup: Firmware Grabber

**xsacha** · 07-26-2012, 10:18 AM

Hey guys.

I have reverse-engineered a lot of the internal tools used on your Blackberry 10 device. I now present you with my findings, a firmware grabber application called Sachup and an application (.bar) side-loader and operating system+radio installer Sachibar:

Update! 17th May 2013
Download here. [Windows]
Download here. [Linux 64-bit, requires Qt]

Autoloaders
To create autoloaders from debrick images, download CAP 3.10 here.
In Sachup choose Mode 'Debrick'. Grab the two 'Debrick' files from Sachup. Extract them (using 7-zip). Then, in a command prompt window:

Code:

cap create os.signed radio.signed myautoloader.exe

Input: OS and Radio .signed files extracted from the debrick OS and Radio .bar files.
Output: myautoloader.exe (a full autoloader for that firmware).

Capture.JPG
Sachup Firmware Grabber (17th May)

Capture2.JPG
Sachibar Application and Firmware Installer (17th May)

Changelog
Updates (17th May)
* You can now sideload apps as well! Just drag and drop apps and they will install on to your device with a nice 'installer'.
* Can detect debrick radio packages now. Minor bug fix.
* Sachibar now installs radio too
* Updated Sachup country + carrier
Updates (15th May)
* Improvements to Drag n' Drop and file selection in Sachibar. Should be able to select folders and drag properly now on all platforms.
Updates (9th May)
* Fixed numerous bugs: Tabs and enters no longer affect input. Minimum size is now sane. Spacing stretches when resized. Variant text updates when device is changed.
* Removed Current OS and PIN as they weren't being used.
Updates (4th May)
* Sachup UI is now scalable when resized (suggested by graymatter).
* Sachibar is now included.
* Sachibar can detect firmware better now.
* Added link for CAP (to create autoloader apps, thanks ofutur).

**SifJar** · 07-26-2012, 11:16 AM

I can't seem to get it to work. I have all the boxes filled the exact way you do in the screenshot:

but clicking "Scan" does nothing. (I tried other stuff too, I tried with my PB's PIN and serial, along with it's version [2.1.0.560], changed device to PB and tried both "update" and "debrick", but nothing worked). Any ideas what could be wrong?

**kretch** · 07-26-2012, 11:21 AM

Don't want to sound dumb here but....... I am.

How do you use this????

1 - Downloaded
2 - Extracted zip file to a folder
3 - Dbl click on Sachup.exe file
4 - Window opens
5 - I put in all playbook data
6 - Push Scan button

Nothing happens.

Do I need to be running this with other software??

Don't understand this "Note: Only production server currently works. The other servers are using an outdated version of the API."

**xsacha** · 07-26-2012, 11:32 AM

Not sure why it isn't working for you guys. It's quite a simple app.
Should be able to press Scan with default settings and you should see the 386 update.

**SifJar** · 07-26-2012, 11:45 AM

Now getting a "Server did not respond as expected [99]" error. (Using the updated version from the first post)

**antiRIM** · 07-26-2012, 11:45 AM

Umm.. I had to add it to my list on my firewall.. Now its working

Edit, it only launched

**xsacha** · 07-26-2012, 11:47 AM

Originally Posted by SifJar

Now getting a "Server did not respond as expected [99]" error. (Using the updated version from the first post)

Yeah I added error messages. Thought that would be a good start

Error 99 is "Network transport error". Meaningless to me still.

So, get Windows to allow that app in Firewall I suppose.

**SifJar** · 07-26-2012, 12:09 PM

I think I've added it to the firewall now (going through the control panel crashes when I click to add another program, so I ran "Windows Firewall with Advanced Security" and added a new "inbound rule" (which seems to be what has happened for any other apps I have allowed in the firewall, which have always triggered little pop ups when I run them to ask if I want to allow them), but I'm still getting the same error. I'm guessing I probably haven't got it done properly, I'll keep fiddling with it.

EDIT: I tried completely disabling my firewall temporarily, still got the error

**kretch** · 07-26-2012, 12:14 PM

Can you run this in Windows 7?

**xsacha** · 07-26-2012, 12:51 PM

Well I only have Windows 7 so I'd suppose so.

I can make a Linux version if someone wants.

**Sith_Apprentice** · 07-26-2012, 01:43 PM

Originally Posted by SifJar

I think I've added it to the firewall now (going through the control panel crashes when I click to add another program, so I ran "Windows Firewall with Advanced Security" and added a new "inbound rule" (which seems to be what has happened for any other apps I have allowed in the firewall, which have always triggered little pop ups when I run them to ask if I want to allow them), but I'm still getting the same error. I'm guessing I probably haven't got it done properly, I'll keep fiddling with it.

EDIT: I tried completely disabling my firewall temporarily, still got the error

do you only have a local windows firewall (do you use any other firewalls software wise?) or do you have a network/hardware firewall as well SifJar?

**SifJar** · 07-26-2012, 02:20 PM

Originally Posted by Sith_Apprentice

do you only have a local windows firewall (do you use any other firewalls software wise?) or do you have a network/hardware firewall as well SifJar?

Only Windows. Unless my router has a firewall, but I don't think so. No other app has ever had any problems, and I've only ever allowed apps in the Windows firewall.

I guess it's not really a particularly big deal, I was just wanting to try it out, I don't have any real reason to actually use it.

**kretch** · 07-26-2012, 02:55 PM

Can't get it to run... Do you have to have any other software installed or running like java or IE or chrome running?
Changed firewall in and out, ran as admin. still will not run. Do not get any errors and the update window never appears.

I guess I'm to much of a dumbass.

.

**Gerii** · 07-26-2012, 03:23 PM

You have forgotten some DLL of Qt, I just copied all DLLs from my Qt SDK installation and it works now.

Edit: It's libeay32.dll and ssleay32.dll.

**kretch** · 07-26-2012, 04:30 PM

Copied libeay32.dll and ssleay32.dll did it for me.

Thanks

**SifJar** · 07-26-2012, 04:54 PM

I'll try that then

EDIT: Actually, can anyone post those DLLs? Don't want to have to download the huge Qt SDK which I probably won't ever use just to get them. I did find two DLLs by those names, but they didn't fix it so I guess they weren't the right ones...

EDIT: Progress? I installed OpenSSL, now it appears to do nothing for a while after pressing "Scan" and then after a while comes up with the same error as before but now with a [2] instead of a [99]

**xsacha** · 07-26-2012, 07:14 PM

Ok, I have packed those 2 DLLs with the app. Sorry about that. I often have that issue because depends.exe doesn't seem to tell me about those post-run libs.

**SCrid2000** · 07-26-2012, 10:38 PM

Freaking. Awesome.

Edit: Hmmm, no 4G PB downloads?

I was gonna try to load one onto the Dev Alpha.
Edit #2: why does the DA update list a com.qnx.coreos.qcfm.os.winchester.sdk file? Isn't Winchester the 4G PlayBook?

Edit #3: would love to see this combined with installation

**xsacha** · 07-26-2012, 10:49 PM

Originally Posted by SCrid2000

Freaking. Awesome.

Edit: Hmmm, no 4G PB downloads?

I was gonna try to load one onto the Dev Alpha.
Edit #2: why does the DA update list a com.qnx.coreos.qcfm.os.winchester.sdk file? Isn't Winchester the 4G PlayBook?

1. Yeah the new API only has Dev Alpha firmware files right now. And only on Production server.

2. Well the BB10 firmware actually isn't designed for the Dev Alpha. Not sure if you noticed but all the graphics/UI are still 1024x600.
The Dev Alpha firmware (with the new keyboard, new UI etc) is still not given to devs.
So yeah we're actually using a limited winchester firmware on our colt.

**SCrid2000** · 07-26-2012, 11:02 PM

Originally Posted by xsacha

1. Yeah the new API only has Dev Alpha firmware files right now. And only on Production server.

2. Well the BB10 firmware actually isn't designed for the Dev Alpha. Not sure if you noticed but all the graphics/UI are still 1024x600.
The Dev Alpha firmware (with the new keyboard, new UI etc) is still not given to devs.
So yeah we're actually using a limited winchester firmware on our colt.

Yeah, I noticed that on rev6 (clock, icon names, etc). And from talking to some RIM employees, I know that the internal BB10 is much nicer than what the DA is running.
Makes sense. So how about question number 3?

**xsacha** · 07-26-2012, 11:06 PM

Use Dingleberry for installation of course :P

**SCrid2000** · 07-26-2012, 11:41 PM

Originally Posted by xsacha

Use Dingleberry for installation of course :P

Well yeah, but I was thinking there might be an all in one program lol.

**lawguyman** · 07-28-2012, 06:35 AM

Does this work with Playbook?

Even if I enter an older OS (with all of the other data from a PlayBook) it shows that no upgrades are available and no debricks are available.

I get a "success" message from two of the three servers. CSE Beta returns a Server did not respond as expected error.