Re: BD-E Debug Console [FOUND] + Setup Menu [FOUND]
Re: BD-E Debug Console [FOUND] + Setup Menu [FOUND]
Hello,
I've just receceived my BD-E8300, and the first thing I did was opening it
I tried to locate the debug console signals as I did with my BD-D8900.
It seems that Samsung worked to hide them a little more :
I spent a few hours trying to find the signals with my oscilloscope... without any success
The signals MUST be somewhere and I came to the point that the debug console might be disabled by default in the setup menu (which is surprising for a debug console that must be the first thing to work).
Unfortunately, I was not able to enter the setup menu. The KEY_FACTORY network method doesn't work anymore...
Firmware is up to date (1006).
Has anybody entered the E-series setup menu ?
Thanks
I've just receceived my BD-E8300, and the first thing I did was opening it
I tried to locate the debug console signals as I did with my BD-D8900.
It seems that Samsung worked to hide them a little more :
I spent a few hours trying to find the signals with my oscilloscope... without any success
The signals MUST be somewhere and I came to the point that the debug console might be disabled by default in the setup menu (which is surprising for a debug console that must be the first thing to work).
Unfortunately, I was not able to enter the setup menu. The KEY_FACTORY network method doesn't work anymore...
Firmware is up to date (1006).
Has anybody entered the E-series setup menu ?
Thanks
Last edited by oga83 on Thu Aug 09, 2012 1:50 pm, edited 3 times in total.
Re: BD-E Debug Console + Setup Menu
if you find out where exlink is, to enable TDM enter:
Code: Select all
20102011
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
Re: BD-E Debug Console + Setup Menu
I did not find it yet...
- About the debug console :
I removed the heatsink to see if the signals were there. Some resistors under the heatsink, but still no signal...
- About the setup menu :
I started to objdump exeDSP to see if I could find something about it.
@Denny,
The magic code to start the debug menu on the console is still in the code
" 26120b8 616e6420 21212100 32303038 39393939 and !!!.20089999"
It is used in <BdsDebug::t_Main()>
944d50: e30210c0 movw r1, #8384 ; 0x20c0 Pointer to string "20089999"
944d54: e3401261 movt r1, #609 ; 0x261
944d58: e0823000 add r3, r2, r0
944d5c: e1a00004 mov r0, r4
944d60: e5437041 strb r7, [r3, #-65]
944d64: ebfceab6 bl 87f844 <PCString::Diff(char const*, char const*)>
- About the debug console :
I removed the heatsink to see if the signals were there. Some resistors under the heatsink, but still no signal...
- About the setup menu :
I started to objdump exeDSP to see if I could find something about it.
@Denny,
The magic code to start the debug menu on the console is still in the code
" 26120b8 616e6420 21212100 32303038 39393939 and !!!.20089999"
It is used in <BdsDebug::t_Main()>
944d50: e30210c0 movw r1, #8384 ; 0x20c0 Pointer to string "20089999"
944d54: e3401261 movt r1, #609 ; 0x261
944d58: e0823000 add r3, r2, r0
944d5c: e1a00004 mov r0, r4
944d60: e5437041 strb r7, [r3, #-65]
944d64: ebfceab6 bl 87f844 <PCString::Diff(char const*, char const*)>
Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND YET]
I found the debug port for the BD-E8X00
I didn't see it the first time I checked the signals; that's why I thought it was well hidden; in fact it's not
I used a minijack connector that I placed in the cable holder hole.
The 100 ohms resistors on the connectors are not really necessary (already on the board), but it's just an aditional protection.
and here it goes !
I'm still working on the debug menu...
I didn't see it the first time I checked the signals; that's why I thought it was well hidden; in fact it's not
I used a minijack connector that I placed in the cable holder hole.
The 100 ohms resistors on the connectors are not really necessary (already on the board), but it's just an aditional protection.
and here it goes !
Code: Select all
kernel.msgmni = ##### VDLinux Warning msg, Pid [58], comm :rc.local, VD forbids user to change unaligned access policy. (3)
64
VERSION B-ECBHRDEUC-1006.1
DATE 2012-04-26
^^ : mallopt (M_MMAP_THRESHOLD, 4096) is called successfully.....
##### System Execution!!! #####
Code: Select all
20089999
====================================
[ TOP Debug Menu]
------------------------------------
1 : SubSystem Print On/Off
2 : Platform Print Setting
3 : TD Print Setting
4 : Performance Print Setting
5 : Sdal Print Setting
6 : Sdal Trace Setting
11 : TD Debug
12 : SubSystem DBG
13 : SubSystem Info Print
14 : Optical SubSystem DBG
21 : Louvre Print Setting
------------------------------------
70 : Jade Debug
80 : PVR Debug
81 : CSP debug
====================================
99 : Exit
====================================
DBG> :
Re: Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND Y
Wow, great findings, must have on wiki!
Now just check Is the shell input limited as on c and d series. Also how about (memory) registry write/read to patch memory...
Now just check Is the shell input limited as on c and d series. Also how about (memory) registry write/read to patch memory...
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]
DO NOT EVER INSTALL FIRMWARE UPGRADE
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]
DO NOT EVER INSTALL FIRMWARE UPGRADE
Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND YET]
Thank you Juziz28 !
Yes, the console only accepts hexa
I didn't find anything to patch memory in TDM.
Also, no shell in TDM...
Yes, the console only accepts hexa
I didn't find anything to patch memory in TDM.
Also, no shell in TDM...
Re: Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND Y
Great job Oliver !!!
"Everything is possible... The impossible just takes longer..." (Dan Brown)
Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND YET]
I did not see at first sight, but /bin/sh can be ran from TDM (but with keyboard locked to hexa) :
Code: Select all
====================================
[ TOP Debug Menu]
------------------------------------
1 : SubSystem Print On/Off
2 : Platform Print Setting
3 : TD Print Setting
4 : Performance Print Setting
5 : Sdal Print Setting
6 : Sdal Trace Setting
11 : TD Debug
12 : SubSystem DBG
13 : SubSystem Info Print
14 : Optical SubSystem DBG
21 : Louvre Print Setting
------------------------------------
70 : Jade Debug
80 : PVR Debug
81 : CSP debug
====================================
99 : Exit
====================================
DBG> 2
Input Start Level << : 0
Input End Level << : 0
====================================
[Platform Debug List]
------------------------------------
1. Basic Platform
2. Advanced Platform
3. Java
4. Pharos
5. Met Platform
6. Shadow
------------------------------------
99 : Exit
====================================
cmd> 2
====================================
[Platform Debug List]
------------------------------------
1 : USB HID Input Debug
2 : DeviceManager Debug
3 : ContentsManager Debug
4 : Uniplayer Debug
5 : InfoLink Debug
6 : FullBrowser Debug
7 : NetworkManager Debug
8 : CherrySS Debug
9 : NetworkSetup Debug
10 : CMMLoginApp Debug
11 : PVR Debug
12 : MultiMedia Debug
13 : MMPlayer Debug
14 : CMPDivxApp Debug
15 : CEC Debug
16 : PSA Debug
17 : FlashApps Debug
18 : SWU Core
19 : Cloning Debug
20 : RM Debug
21 : DMR Debug
22 : DAE WebKit Debug
23 : DAE Plugin WebKit Debug
24 : WebServer Debug
25 : RAStackApp Debug
26 : Map Debug
27 : DualTV Debug
28 : DMRCore Debug
29 : WidgetEngine Debug
30 : SEF Debug
31 : HasApi Debug
------------------------------------
99 : Exit
====================================
cmd> 12
====================================
[MultiMedia Debug Module]
------------------------------------
1 : [OFF] MMBrowser 2 : [OFF] MMDOC 3 : [OFF] MMDevice
4 : [OFF] MMPushVOD
====================================
Debug Level = Fatal
====================================
80 : All OFF
81 : All ON
82 : PMS ON/OFF
85 : Set Debug Level
====================================
10 : Lua Browser Debug
11 : Lua Player Debug
12 : Lua Recorder Debug
13 : Lua Device Debug
20 : Shell
------------------------------------
99 : Exit
====================================
cmd> 20
VDLinux#>
VDLinux#>
VDLinux#>
Re: Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND Y
Yes, same as C and D. Hope we can unlock this soon as for other series
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]
DO NOT EVER INSTALL FIRMWARE UPGRADE
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]
DO NOT EVER INSTALL FIRMWARE UPGRADE
Re: BD-E Debug Console [FOUND] + Setup Menu [NOT FOUND YET]
It seems someone already did.
o.O
https://twitter.com/zibri/status/210166236267560960
Edit:
It seems he did also BD-D5300...
https://twitter.com/zibri/status/138045175741165568
I wonder why he didn't release anything and as I see he is banned from this forum.
o.O
https://twitter.com/zibri/status/210166236267560960
Edit:
It seems he did also BD-D5300...
https://twitter.com/zibri/status/138045175741165568
I wonder why he didn't release anything and as I see he is banned from this forum.