SamyGo Firmware Patcher Script

[erdem_ua]

Most of people running away from firmware flashing due risk of bricking but you.

I don't inspect screen resizer hack. If it only changes content, not add code into exeDSP it's possible to support it in firmware patcher.
Needed to add this in todo list of firmware patcher.
How about to make a setup with "automated way"?

[den10]

Should I patch my firmware for the gdbtrick to work?
Which version should i download?

[erdem_ua]

Yup. Latest version is better.

[rivendell077]

Trying to apply the patch recent versions of T-MSX5DEUC and T-MSX5DAAC.

AES decryption goes through, but XOR description cannot find a key that starts with a "T-".

Any ideas? I tried to set the variable "keyData" to possible alternative values, but the decrypted file doesn't get the expected crc.

Or is it because the AES decryption doesn't happen properly at all?

[erdem_ua]

I will add this on this week but a question on my mind.
There is no low level hack for C/D series. Why do we want such a tool?

Anyway, I can place encrypt and decrypt functions to handle encryption problems.

[rivendell077]

I will add this on this week but a question on my mind.
There is no low level hack for C/D series. Why do we want such a tool?

Anyway, I can place encrypt and decrypt functions to handle encryption problems.

Thanks. I just want to study the img files. Looking forward the encrypt/decrypt functions.

In the meantime if you have time, do we know the answer to these?

1. Is the C series *.sec files need AES decryption followed by XOR decryption (just like CI+ devices in the B series)?

2. If yes, is the AES key still the same (A435HX:d3e90afc-0f09-4054-9bac-350cc8dfc901-7cee72ea-15ae-45ce-b0f5-611c4f8d4a71)?

3. I know the standard answer is "no". But anyway, do you think I may be able to replace T-MSX5DAAC with T-MSX5DEUC by messing around with version_info.txt and info.txt files? I am anyway going to take the full responsibility so please feel free to answer "may be". Perhaps carefully studying the img files may reveal something.

[erdem_ua]

1&2. No. Afaik C series similar but different ending keys "...........45ce-b0f5-00001abc2010"
3. Might be, you can try it if you could enter boot menu. Since I don't have C series HW, hard to tell. You can try with external USB firmware booting....

4. Where is the links to those firmwares? I couldn't find them on Samsung. Please leave original samsung links.

[ZeroZorro]

I'm very sorry...but i'm a little lost inhere! (big time)

When trying to patch the T-CHL5DEUC-2008.0 with SamyGO Firmware Patcher v0.24 everything goes well except the Telnet patch:

Applying Telnet Patch...
Searching %93
Oops!: "#Remove engine logging." string not found on image.
Probably this firmware is already patched.
Telnet Patch not applied.

I read some posts about problems with patching in Win7 but i can't find the ++ problem anymore in the 0.24 Patcher.py
What am i missing?

[csc]

Hello new to forum and have been bricking my tv and having a ball thanks
But patcher doesnt seem to work !00% on T-CHE6AUSC doesnt add lines to rc.local and doing so manually firmware flashed but wouldnt boot always booted to other partition.
I can turn on telnet and run samygo.sh from shell so i know functions are there it has to be lack of line in rc.local exedsp gets edited fine only thing I can assume is that T-CHE6AUSC uses squashfs on exe.img and others dont seem to or atlest can mount img.exe in hex editor and edite rc.local with others.
Any thoughts would be great
Any testing help no problem got the time and bricked this thing 3 times now and seems theres couple usbless options that work great infact seem faster on dump/restore.

UN55B6000 is model btw.
Thanks
c

[csc]

I got it well kinda i ran patcher it didn't patch rc.local as usuaul I decrypt it than manully edit to telnet than encrypt still no go after flash run samygo patcher again in linux same patched firmware I edited it askesd telnet/adv/none/ I chose a(adv) and it completed reflashed again and telnet came on not SamyGO.sh so i vi /mtd_exe/rc.local and telnet rc.local i manually edited is still there but this time booted ugly but worked I'll try now with other rc.local I edited to adv
thanks
c