Re: BD-E Debug Console [FOUND] + Setup Menu [FOUND]

Samsung's BluRay player related hacks.

oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-E Debug Console [FOUND] + Setup Menu [FOUND]

Post by oga83 »

Hello,

I've just receceived my BD-E8300, and the first thing I did was opening it ;)
I tried to locate the debug console signals as I did with my BD-D8900.
It seems that Samsung worked to hide them a little more :
I spent a few hours trying to find the signals with my oscilloscope... without any success :-(

The signals MUST be somewhere and I came to the point that the debug console might be disabled by default in the setup menu (which is surprising for a debug console that must be the first thing to work).
Unfortunately, I was not able to enter the setup menu. The KEY_FACTORY network method doesn't work anymore...
Firmware is up to date (1006).

Has anybody entered the E-series setup menu ?


Thanks
Last edited by oga83 on Thu Aug 09, 2012 1:50 pm, edited 3 times in total.
Denny
Official SamyGO Developer
Posts: 350
Joined: Thu Sep 30, 2010 12:18 pm
Location: Croatia

Re: BD-E Debug Console + Setup Menu

Post by Denny »

if you find out where exlink is, to enable TDM enter:

Code: Select all

20102011
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-E Debug Console + Setup Menu

Post by oga83 »

I did not find it yet...

- About the debug console :
I removed the heatsink to see if the signals were there. Some resistors under the heatsink, but still no signal...

- About the setup menu :
I started to objdump exeDSP to see if I could find something about it.

@Denny,
The magic code to start the debug menu on the console is still in the code :-)
" 26120b8 616e6420 21212100 32303038 39393939 and !!!.20089999"
It is used in <BdsDebug::t_Main()>
944d50: e30210c0 movw r1, #8384 ; 0x20c0 Pointer to string "20089999"
944d54: e3401261 movt r1, #609 ; 0x261
944d58: e0823000 add r3, r2, r0
944d5c: e1a00004 mov r0, r4
944d60: e5437041 strb r7, [r3, #-65]
944d64: ebfceab6 bl 87f844 <PCString::Diff(char const*, char const*)>
oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND YET]

Post by oga83 »

I found the debug port for the BD-E8X00 :D
I didn't see it the first time I checked the signals; that's why I thought it was well hidden; in fact it's not ;)

Image

I used a minijack connector that I placed in the cable holder hole.
The 100 ohms resistors on the connectors are not really necessary (already on the board), but it's just an aditional protection.
Image
Image

and here it goes !

Code: Select all

kernel.msgmni = ##### VDLinux Warning msg, Pid [58], comm :rc.local, VD forbids user to change unaligned access policy. (3)
64
VERSION         B-ECBHRDEUC-1006.1
DATE            2012-04-26
^^ : mallopt (M_MMAP_THRESHOLD, 4096) is called successfully.....
##### System Execution!!! #####

Code: Select all

20089999

====================================
      [ TOP Debug Menu]
------------------------------------
  1  : SubSystem Print On/Off
  2  : Platform Print Setting
  3  : TD Print Setting
  4  : Performance Print Setting
  5  : Sdal Print Setting
  6  : Sdal Trace Setting
  11 : TD Debug
  12 : SubSystem DBG
  13 : SubSystem Info Print
  14 : Optical SubSystem   DBG
  21 : Louvre Print Setting
------------------------------------
  70 : Jade Debug
  80 : PVR Debug
  81 : CSP debug
====================================
  99 : Exit
====================================
DBG> :
I'm still working on the debug menu...
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND Y

Post by juusso »

Wow, great findings, must have on wiki!

Now just check Is the shell input limited as on c and d series. Also how about (memory) registry write/read to patch memory...
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND YET]

Post by oga83 »

Thank you Juziz28 !

Yes, the console only accepts hexa :(
I didn't find anything to patch memory in TDM.
Also, no shell in TDM...
User avatar
julianbb
Posts: 163
Joined: Fri Dec 10, 2010 1:18 pm
Location: Romania

Re: Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND Y

Post by julianbb »

Great job Oliver !!!
"Everything is possible... The impossible just takes longer..." (Dan Brown)
oga83
Posts: 268
Joined: Sun Mar 18, 2012 10:11 pm
Location: France

Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND YET]

Post by oga83 »

I did not see at first sight, but /bin/sh can be ran from TDM (but with keyboard locked to hexa) :

Code: Select all

====================================
      [ TOP Debug Menu]
------------------------------------
  1  : SubSystem Print On/Off
  2  : Platform Print Setting
  3  : TD Print Setting
  4  : Performance Print Setting
  5  : Sdal Print Setting
  6  : Sdal Trace Setting
  11 : TD Debug
  12 : SubSystem DBG
  13 : SubSystem Info Print
  14 : Optical SubSystem   DBG
  21 : Louvre Print Setting
------------------------------------
  70 : Jade Debug
  80 : PVR Debug
  81 : CSP debug
====================================
  99 : Exit
====================================
DBG> 2

Input Start Level << : 0
Input End Level << : 0

====================================
     [Platform Debug List]
------------------------------------
  1. Basic Platform
  2. Advanced Platform
  3. Java
  4. Pharos
  5. Met Platform
  6. Shadow
------------------------------------
  99 : Exit
====================================
cmd> 2

====================================
     [Platform Debug List]
------------------------------------
  1 : USB HID Input Debug
  2 : DeviceManager Debug
  3 : ContentsManager Debug
  4 : Uniplayer Debug
  5 : InfoLink Debug
  6 : FullBrowser Debug
  7 : NetworkManager Debug
  8 : CherrySS Debug
  9 : NetworkSetup Debug
  10 : CMMLoginApp Debug
  11 : PVR Debug
  12 : MultiMedia Debug
  13 : MMPlayer Debug
  14 : CMPDivxApp Debug
  15 : CEC Debug
  16 : PSA Debug
  17 : FlashApps Debug
  18 : SWU Core
  19 : Cloning Debug
  20 : RM Debug
  21 : DMR Debug
  22 : DAE WebKit Debug
  23 : DAE Plugin WebKit Debug
  24 : WebServer Debug
  25 : RAStackApp Debug
  26 : Map Debug
  27 : DualTV Debug
  28 : DMRCore Debug
  29 : WidgetEngine Debug
  30 : SEF Debug
  31 : HasApi Debug
------------------------------------
  99 : Exit
====================================
cmd> 12

====================================
     [MultiMedia Debug Module]
------------------------------------
  1 : [OFF] MMBrowser     2 : [OFF] MMDOC         3 : [OFF] MMDevice
  4 : [OFF] MMPushVOD
====================================
 Debug Level = Fatal
====================================
 80 : All OFF
 81 : All ON
 82 : PMS ON/OFF
 85 : Set Debug Level
====================================
 10 : Lua Browser Debug
 11 : Lua Player Debug
 12 : Lua Recorder Debug
 13 : Lua Device Debug
 20 : Shell
------------------------------------
 99 : Exit
====================================
cmd> 20

VDLinux#>
VDLinux#>
VDLinux#>
User avatar
juusso
SamyGO Moderator
Posts: 10129
Joined: Sun Mar 07, 2010 6:20 pm

Re: Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND Y

Post by juusso »

Yes, same as C and D. Hope we can unlock this soon as for other series :-)
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE
User avatar
nobody
Posts: 182
Joined: Sat Nov 12, 2011 1:45 am

Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND YET]

Post by nobody »

It seems someone already did.

o.O

https://twitter.com/zibri/status/210166236267560960

Edit:
It seems he did also BD-D5300...
https://twitter.com/zibri/status/138045175741165568

I wonder why he didn't release anything and as I see he is banned from this forum.

Post Reply

Return to “BluRay Players”