Esign won’t work

[Blockr22]

Describe the issue

I tried latest version from https://esign.yyyue.xyz/
But it crashes & won’t open. My main goal is to inject tweaks into decrypted IPA’s. I m not sure if live container can already do that & if yes, how ?
I see tweak section in live container itself but can’t figure out what to do there.
Therefore i was trying esign but it wont work.

Instructions to reproduce

Just install from above link & try for yourself

What version of LiveContainer are you using?

2.1.2

Other

No response

[khanhduytran0]

Esign is not a supported installation method. LiveContainer requires the get-task-allow entitlement for both JIT and JIT-less which is only available to developer certificates.

[khanhduytran0]

In other hand, the esign app itself, when running in LiveContainer, unknowingly exits itself and I have yet to figure out why.
(pretty sure you meant this instead of that above comment, was reading it too fast)

[Blockr22]

Yes, esign exits itself. And would be great if it can work. Thnx.

[ivoidcat]

+1

[fredystar200]

+1

[Cyosai]

+1, agree

[hugeBlack]

Well, I managed to make ESign run in LiveContainer by directly modifying its binary. Not sure whether the modification will cause any problem since signing seems to be working correctly

It seems that ESign did some check in its _MOD_INIT_FUNC, which fails in LiveContainer. So I changed its flag of __mod_init_func section so these initializers are skipped and ESign can launch.

Here's a script to perform the patch:

Open a shell in the same directory as the ESign ipa, make sure its name is esign_5.0.2_unsigned.ipa
Run the script and you'll find the patched ipa named esign_5.0.2_patched.ipa

tar -xf esign_5.0.2_unsigned.ipa
cd Payload/ESign.app/
FILE="ESign"
PATTERN="5f5f6d6f645f696e69745f66756e63"
OFFSET=64
NEW_BYTE="ff"
echo "Patching"
MATCH_OFFSET=$(xxd -p "$FILE" | tr -d '\n' | grep -bo "$PATTERN" | head -n 1 | cut -d: -f1)
ACTUAL_OFFSET=$((MATCH_OFFSET / 2 + OFFSET))
printf "\\x$NEW_BYTE" | dd of="$FILE" bs=1 seek="$ACTUAL_OFFSET" count=1 conv=notrunc status=none
echo Patch Done! Packaging...
cd ../../
tar -cf esign_5.0.2_patched.ipa Payload/
rm -r Payload
echo Done!

[Cyosai]

hugeBlack, thank you so much for investigating this issue and fixing it!)

[xsmashx88x]

Well, I managed to make ESign run in LiveContainer by directly modifying its binary. Not sure whether the modification will cause any problem since signing seems to be working correctly

It seems that ESign did some check in its _MOD_INIT_FUNC, which fails in LiveContainer. So I changed its flag of __mod_init_func section so these initializers are skipped and ESign can launch.

Here's a script to perform the patch:

Open a shell in the same directory as the ESign ipa, make sure its name is esign_5.0.2_unsigned.ipa Run the script and you'll find the patched ipa named esign_5.0.2_patched.ipa

tar -xf esign_5.0.2_unsigned.ipa
cd Payload/ESign.app/
FILE="ESign"
PATTERN="5f5f6d6f645f696e69745f66756e63"
OFFSET=64
NEW_BYTE="ff"
echo "Patching"
MATCH_OFFSET=$(xxd -p "$FILE" | tr -d '\n' | grep -bo "$PATTERN" | head -n 1 | cut -d: -f1)
ACTUAL_OFFSET=$((MATCH_OFFSET / 2 + OFFSET))
printf "\\x$NEW_BYTE" | dd of="$FILE" bs=1 seek="$ACTUAL_OFFSET" count=1 conv=notrunc status=none
echo Patch Done! Packaging...
cd ../../
tar -cf esign_5.0.2_patched.ipa Payload/
rm -r Payload
echo Done!

no chance you can post the ipa here eh?

[UzawaReisaQwQ]

Thanks to @hugeBlack for providing the script, but it seems that it cannot be used in CloudStudio's online environment. I have made some modifications myself, as follows:

echo "Extracting IPA..."
unzip -q esign_5.0.2_unsigned.ipa -d esign_unpacked || { echo "Failed to extract IPA"; exit 1; }
cd esign_unpacked/Payload/ESign.app/ || { echo "Target directory not found"; exit 1; }
FILE="ESign"
PATTERN="5f5f6d6f645f696e69745f66756e63"
OFFSET=64
NEW_BYTE="ff"
echo "Patching"
MATCH_OFFSET=$(xxd -p "$FILE" | tr -d '\n' | grep -bo "$PATTERN" | head -n 1 | cut -d: -f1)
if [ -z "$MATCH_OFFSET" ]; then
    echo "Pattern not found in the file."
    exit 1
fi
ACTUAL_OFFSET=$((MATCH_OFFSET / 2 + OFFSET))
printf "\\x$NEW_BYTE" | dd of="$FILE" bs=1 seek="$ACTUAL_OFFSET" count=1 conv=notrunc status=none
echo "Patch Done!"
echo "Packaging..."
cd ../../
zip -qr esign_5.0.2_patched.ipa Payload || { echo "Failed to package IPA"; exit 1; }
rm -rf esign_unpacked
echo "Done!"

This is the latest version of ESign IPA file that I have patched. Remember to remove the. zip suffix:

esign_5.0.2_patched.ipa.zip