SamyGO

zoelechat wrote:What do you need exactly? exeAPP+exeTV (=exeDSP)? MST? non-MST?

i need everything you could post for probabbly non-MST (T-FXPDEUC???) or other if you dont have ,thnx

hi ,for my developer purposes (idont have F tv ) i am looking for some F series firmware dumps i prefer arm(my samsung C tv have arm) because of ida+hexarm decompiler if somebody want to share with me pm me link thnx

sectroyer:
no problem
btw> do you know FW where have authuld some "symbols" ?

there is no problem using these 'symbols' on another fw just make signatures or use bindiff

decrypt use this http://sourceforge.net/p/samygo/code/HE ... Patcher.py
then exe.img is fat16 image mount in linux and extract exedsp

t-valdeuc 0000 is downgrade fw already on wiki -> http://wiki.samygo.tv/index.php5/How_to ... C_firmware
in t-valdeuc 1XXX fw are some function names too at least 1008.3

imho at least fw T-valdeuc 0000 have these 'symbols' - function names etc. of course there is no debug symbols both are striped on arm and mips - tested mips fw T-MSX6DEUC_2001.0

Confirmed. I was able to find functions in same places :) Just in one window I open C MIPS find function copy name and in second window I find same place in C ARM rename some "sub_xxxxx" to correct name and voila :) Of course you still have to make it dynamic but that's another storry ;) ...

robert wrote:What tool did you use to decompile the upgrade.msd file?

output of binwalk IMHO

i have no problem with debuggin my tv ue40c8000(IDA+ gdbserver on TV, gdb over ssh works too ) i am working on vulnerable .png which crash libpng -> no exploit for now -> i think i could do that because we have souce code of libpng and possible dump of C,D,E firmware , hard part is only write exploi...