ZerooX — open-source library modification and replacement
Publisher: The Third Act (THE THIRD ACT LLC)
Contact: Hello@the-3rdact.com

Permission

The publisher permits modification of covered open-source components,
recombination or relinking of the application with those components, and reverse
engineering to debug those modifications, under their applicable licenses.
The original copyright notices and open-source license conditions apply.
These software permissions grant no access to institution accounts or content.

Source materials

Download https://zerox.169.58.251.188.sslip.io/software/native-sources-v1.tar
SHA256: e846786b1455a95753285d2460402869ac4f8635d9e8d67fc0e8ec37bc4c22a1
Size: 135434240 bytes.

The source package covers Android libmpv vendor v1.1.7 default and iOS libmpv
vendor v0.6.0 ios-universal-video-default. Extract the outer TAR, then the
appropriate vendor recipe archive and pinned component archives. The manifests
identify versions and archive hashes. Preserve the included patches, build
configuration, cross files, license texts and native build logs.

The Android recipe uses pinned Git references. Its source archive hashes record
the collected files. The Darwin lock and FreeType libpng wrap hashes were checked
against the collected source archives. Use local extracted source trees in place
of network downloads when rebuilding. Follow the vendor's target/default-flavor
build scripts and apply its patches, including 16 KB alignment patches. Android
dependency information specifies NDK 25.2.9519653; the vendor bundling script
names NDK 27.3.13750724 for stripping. The Darwin device build logs record Xcode
14.3.1, Clang 14.0.3, Meson 1.2.1 and Ninja 1.11.1. Build tools themselves remain
available under their vendors' terms. No application source is needed merely to
replace an interface-compatible dynamically linked library.

Android

1. Obtain a replacement-ready universal APK for your ZerooX version from the
   publisher. A store AAB is an input for generating APKs, not an installable
   file. If using split APKs, obtain the matching complete set and sign every
   split consistently. A universal APK is simpler for this route.
2. Rebuild the default-flavor libmpv.so for the device ABI (armeabi-v7a,
   arm64-v8a or x86_64). Its FFmpeg dependencies are statically included inside
   libmpv.so; modify and rebuild that shared library as a whole. Keep the same
   libmpv public interface and dependency names, matching ABI/API settings and
   native load-segment alignment. Preserve libmediakitandroidhelper.so unless
   deliberately rebuilding the matching helper from its provided source.
3. In a copy of the APK, replace lib/<ABI>/libmpv.so with your compatible
   rebuilt library. Preserve every other member and each member's compression
   method; native libraries stored uncompressed must remain uncompressed.
   Remove stale META-INF JAR signature files (.SF, .RSA, .DSA, .EC and signature
   MANIFEST.MF). Repacking also discards the original APK signing block.
4. With Android SDK Build Tools, align and sign in this order:

   zipalign -P 16 -f 4 modified-unsigned.apk modified-aligned.apk
   apksigner sign --ks YOUR-OWN-KEYSTORE --out modified-signed.apk modified-aligned.apk
   apksigner verify --verbose --print-certs modified-signed.apk
   zipalign -c -P 16 4 modified-signed.apk

   Use your own signing certificate. Keep your private key and passwords private.
5. Install through the device's permitted APK installation route. A different
   certificate cannot update the publisher-signed package in place. Back up
   needed data, uninstall that package when necessary, and install your signed
   build. This may erase its local saved data; obtain valid account credentials
   again from your institution. Your own certificate does not grant service
   access. Verify playback with content you are entitled to use.

iOS

1. Obtain the unencrypted, replacement-ready application materials matching
   your version from the publisher. Contact the address above with the platform
   and app version. Do not send account credentials. Do not bypass store
   encryption or platform security to obtain these materials.
2. Build modified ARM64 device frameworks with the supplied Darwin default
   vendor recipe, preserving public interfaces, framework names, install names
   and compatible deployment targets. Mpv and its FFmpeg/support dependencies
   are dynamically linked frameworks. Replace the affected framework binaries
   in the application copy and keep its corresponding dependencies together.
3. Use your own Apple development/distribution identity and an appropriate
   device provisioning profile under Apple's terms. Remove the former
   provisioning profile and signatures. Configure the bundle identifier,
   application-identifier and keychain-access-group entitlements for your own
   team/profile; a changed keychain group has separate saved credentials. Do
   not use the publisher's private signing keys or profiles.
4. Sign the nested frameworks and then the application with your own identity.
   Embed your profile where required. Verify signatures and provisioned
   entitlements. An ad-hoc signature can check local packaging but does not
   authorize installation on a physical iOS device. Install with a permitted
   development/distribution route for that profile and test authorized media.

Different devices and platform distribution routes have different installation
requirements. If your delivered copy does not permit library replacement or you
need corresponding application object materials/installation assistance for
your permitted recombination, contact Hello@the-3rdact.com. These materials are
provided to exercise open-source rights; no institutional content is required.

License texts: https://zerox.169.58.251.188.sslip.io/software/licenses.txt

العربية

تسمح The Third Act (THE THIRD ACT LLC) بتعديل المكوّنات المفتوحة المصدر
المشمولة وإعادة ربط التطبيق بها، وبالهندسة العكسية اللازمة لتصحيح تلك
التعديلات، وفق تراخيصها الأصلية. تتوفر المصادر ومواد البناء والرخص دون
تسجيل الدخول أو رسوم إضافية من صفحة تراخيص البرامج:
https://zerox.169.58.251.188.sslip.io/software?lang=ar

تحتاج النسخة المعدّلة إلى مكتبات متوافقة مع الجهاز وتوقيع وتركيب مسموح بهما
حسب المنصة، باستخدام مفاتيحك وصلاحياتك أنت. لا تمنح حقوق تعديل البرامج
صلاحية الوصول إلى حسابات المؤسسة أو محتواها. لطلب نسخة قابلة لاستبدال
المكتبات أو مواد إعادة الربط أو المساعدة في التركيب، راسل
Hello@the-3rdact.com واذكر نوع الجهاز ونسخة التطبيق دون إرسال كلمات المرور.