Search found 65 matches

by mamaich
Mon Dec 27, 2010 2:06 am
Forum: [C] General
Topic: [SOLVED] LE40C550 pvr ?? - answer is: no PVR.
Replies: 9
Views: 5347

Re: LE40C550 pvr ??

I was able to activate some of PVR/TimeShift menus on C550 via patching CAppUtil::FlagSupportRecordingSpec and similar functions in exeDSP memory. PVR does not work at all. Function CPVRWrapper::GetDevTotal returns zero recording devices. So I assume that we don't have necessary hardware (or at leas...
by mamaich
Mon Dec 20, 2010 3:17 am
Forum: [C] Firmware
Topic: exeDSP reverse engeneering
Replies: 17
Views: 8256

Re: exeDSP reverse engeneering

As IDA 5.50 has a bug in MIPS - it assumes that $gp has the same value in all functions in the whole program, while this is incorrect for huge apps like exeDSP Here http://www.multiupload.com/YN3GIQUV4M I've uploaded modified IdaPython scripts that would manually fix operands and add xrefs in functi...
by mamaich
Mon Dec 20, 2010 2:57 am
Forum: [C] Firmware
Topic: exeDSP reverse engeneering
Replies: 17
Views: 8256

Re: exeDSP reverse engeneering

My unordered TODO list: 1. Change the loader code so that it would not require keypress to activate. 2. Change the "power" button (DtvKillChild function) so that it would terminate the whole program tree (so you can run scripts from menu, and it would kill a program executed by /bin/sh, and not only...
by mamaich
Mon Dec 20, 2010 2:34 am
Forum: [C] Firmware
Topic: exeDSP reverse engeneering
Replies: 17
Views: 8256

Re: exeDSP reverse engeneering

as I've promised - here is source code of my loader: http://www.multiupload.com/Z4UX7ZHS78 and source code of my SDL port - http://www.multiupload.com/DPQ0IZ614S For keyboard to work in SDL - you need to start a program that uses it from a custom menu created by "loader". This would hook all necessa...
by mamaich
Thu Dec 16, 2010 3:33 am
Forum: [C] Firmware
Topic: exeDSP reverse engeneering
Replies: 17
Views: 8256

Re: exeDSP reverse engeneering

erdem_ua wrote:Good. Will you release source codes too?
Yes, of course. I plan to play with TV this weekend (fix SDL keyboard, etc), and then I'll publish sources.
by mamaich
Wed Dec 15, 2010 12:48 am
Forum: [C] Firmware
Topic: exeDSP reverse engeneering
Replies: 17
Views: 8256

Re: exeDSP reverse engeneering

I've made a tool that hooks HDMI button on remote, displays my own menu and allows launching of custom applications from USB drive. If I'll have time - it may grow to something really powerful :) http://www.multiupload.com/4V3GP4YP93 This would work only on TV sets with T-TDT5DEUC firmware (big endi...
by mamaich
Mon Dec 13, 2010 10:37 am
Forum: [C] Firmware
Topic: exeDSP reverse engeneering
Replies: 17
Views: 8256

Re: exeDSP reverse engeneering

I have written a (very limited) Trident framebuffer interface for the SDL library, only to later realize that it is painfully slow to draw things on screen.. I've compiled it too. Speed is not so bad as you are telling. SDL example "testpalette" gave 54.94 fps, "testblitspeed" gave 83 fps, "testspr...
by mamaich
Sat Dec 11, 2010 4:12 am
Forum: [C] Firmware
Topic: exeDSP reverse engeneering
Replies: 17
Views: 8256

Re: exeDSP reverse engeneering

Did you manage to get more information about the framebuffer? (e.g. how to activate the hardware acceleration) After incorrect editing of scripts in /mtd_rwarea partition I've got non-working USB. Only yesterday I've found a way to format /mtd_rwarea, so now I have a working USB and can continue my...
by mamaich
Sat Dec 11, 2010 3:59 am
Forum: [C] General
Topic: Hacking TV over Hotel mode (most C series models)
Replies: 288
Views: 222096

Re: Hack for C550 and other C models

Finally i've managed to format /mtd_rwarea on my C550 without sending TV to service, it restored USB functionality and I could make another (probably more simple) instruction of C550 hack via Hotel Mode. If your USB have stopped working Make Ex-link cable and connect to TV enter commands folowing by...
by mamaich
Mon Dec 06, 2010 1:34 pm
Forum: [C] Firmware
Topic: TOP Debug menu for C models via ExLink
Replies: 25
Views: 26176

Re: Top Debug Menu for C models via exlink

cyberdemon79 wrote:petergrey found a way to patch the character checking routine in memory using direct memory writes and only numbers.
A very clever idea, but unfortunately we on C5xx don't have physical memory editor, at least I was unable to find such menu items.

Go to advanced search