[HOT] D series firmware with u-boot included. Official!
Re: [HOT] D series firmware with u-boot included. Official!
My TV UE55D7000LS downgraded to 1015 from DNS 149.154.159.134 which is displayed as 1090, how upgraded and which firmware?
Re: [HOT] D series firmware with u-boot included. Official!
I have two questions...
1 is this T-GAP8DEUC-1028.0 is arm or mips?
2 can i flash it on C series? or is possible to flash only onboot and uboot so i can get access to uboot?
1 is this T-GAP8DEUC-1028.0 is arm or mips?
2 can i flash it on C series? or is possible to flash only onboot and uboot so i can get access to uboot?
Re: [HOT] D series firmware with u-boot included. Official!
no no, this is strongly for D series with firmware T-GAP[8]deuc
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]
DO NOT EVER INSTALL FIRMWARE UPGRADE
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]
DO NOT EVER INSTALL FIRMWARE UPGRADE
Re: [HOT] D series firmware with u-boot included. Official!
just tested for fun :
files are okey and can be manual flashed!...
network not implemented...
usb buggy, noone usb found , maybee it needs some fix ...
files are okey and can be manual flashed!...
Code: Select all
U-Boot 2009.03 (Jan 27 2011 - 19:13:24)
SDP1002 #14950593 Operation clock
arm clock : 800.000 Mhz
ddr clock : 000.000 Mhz
peri clock : 050.000 Mhz
DRAM: 128 MB
env_relocate_spec : FlexOneNAND
crc is 0 not 3fe63ebc 67bc0008
wanning : Default environment
In: serial
Out: serial
Err: serial
Net: No ethernet found.
Hit any key to stop autoboot: 0
GENOA-P # help
? - alias for 'help'
base - print or set address offset
bbm - bbm - BBM sub-system
boot - boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
cmp - memory compare
cp - memory copy
crc32 - checksum calculation
crc32n - several checksum calculation
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls - list files in a directory (default /)
go - start application at address 'addr'
help - print online help
loop - infinite loop on address range
md - memory display
mm - memory modify (auto-incrementing)
mtest - simple RAM test
mw - memory write (fill)
nm - memory modify (constant address)
printenv- print environment variables
rarpboot- boot image via network using RARP/TFTP protocol
reboot - reboot
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - saveenv - save environment variables to persistent storage
sdpmem - setup memory info for kernel booting
setenv - set environment variables
tftpboot- boot image via network using TFTP protocol
toggle - toggle
usb - USB sub-system
usbboot - boot from USB device
version - print monitor version
GENOA-P #
usb buggy, noone usb found , maybee it needs some fix ...
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
Re: [HOT] D series firmware with u-boot included. Official!
How flash this manually???Denny wrote:just tested for fun :
files are okey and can be manual flashed!...
network not implemented...Code: Select all
U-Boot 2009.03 (Jan 27 2011 - 19:13:24) SDP1002 #14950593 Operation clock arm clock : 800.000 Mhz ddr clock : 000.000 Mhz peri clock : 050.000 Mhz DRAM: 128 MB env_relocate_spec : FlexOneNAND crc is 0 not 3fe63ebc 67bc0008 wanning : Default environment In: serial Out: serial Err: serial Net: No ethernet found. Hit any key to stop autoboot: 0 GENOA-P # help ? - alias for 'help' base - print or set address offset bbm - bbm - BBM sub-system boot - boot default, i.e., run 'bootcmd' bootd - boot default, i.e., run 'bootcmd' bootm - boot application image from memory bootp - boot image via network using BOOTP/TFTP protocol cmp - memory compare cp - memory copy crc32 - checksum calculation crc32n - several checksum calculation fatinfo - print information about filesystem fatload - load binary file from a dos filesystem fatls - list files in a directory (default /) go - start application at address 'addr' help - print online help loop - infinite loop on address range md - memory display mm - memory modify (auto-incrementing) mtest - simple RAM test mw - memory write (fill) nm - memory modify (constant address) printenv- print environment variables rarpboot- boot image via network using RARP/TFTP protocol reboot - reboot reset - Perform RESET of the CPU run - run commands in an environment variable saveenv - saveenv - save environment variables to persistent storage sdpmem - setup memory info for kernel booting setenv - set environment variables tftpboot- boot image via network using TFTP protocol toggle - toggle usb - USB sub-system usbboot - boot from USB device version - print monitor version GENOA-P #
usb buggy, noone usb found , maybee it needs some fix ...
I wanto to try these on my c series so i can get access to uboot...
And another question how i can dump the onboot and uboot of my c series tv ?
please reply (denny i read from your signature that you have one c series tv so maybe you can help me and answer my questions)
thx
Mk?
Re: [HOT] D series firmware with u-boot included. Official!
dont try to flash it to c serie , it is for d serie!How flash this manually???
I wanto to try these on my c series so i can get access to uboot...
And another question how i can dump the onboot and uboot of my c series tv ?
please reply (denny i read from your signature that you have one c series tv so maybe you can help me and answer my questions)
thx
Mk?
to flash manual i use bml.restore application located in device
at C serie , /dev/bml0/1 is onboot, uboot is blank and located at /dev/bml0/2
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
Re: [HOT] D series firmware with u-boot included. Official!
I know i dump bml0/1 (onboot) bml0/2(u-boot) bml0/3 (uboot_env.bin) and bml0/2 is empty then uboot_env.bin has in it T-Valdeuc following by ff... so do you think that if i compile uboot and then flash it bml0/2 with bml.restore i get access to uboot? i need to calculate right hash before reflashing bml0/2? or maybe i can try to modify uboot_env.bin?Denny wrote:dont try to flash it to c serie , it is for d serie!How flash this manually???
I wanto to try these on my c series so i can get access to uboot...
And another question how i can dump the onboot and uboot of my c series tv ?
please reply (denny i read from your signature that you have one c series tv so maybe you can help me and answer my questions)
thx
Mk?
to flash manual i use bml.restore application located in device
at C serie , /dev/bml0/1 is onboot, uboot is blank and located at /dev/bml0/2
damn samsung why the don't release uboot stuff for c series arghh
Re: [HOT] D series firmware with u-boot included. Official!
i like your question! , so must answerI know i dump bml0/1 (onboot) bml0/2(u-boot) bml0/3 (uboot_env.bin) and bml0/2 is empty then uboot_env.bin has in it T-Valdeuc following by ff... so do you think that if i compile uboot and then flash it bml0/2 with bml.restore i get access to uboot? i need to calculate right hash before reflashing bml0/2? or maybe i can try to modify uboot_env.bin?
damn samsung why the don't release uboot stuff for c series arghh
ok, what you think is not posible to do, even you get full source of u-boot or onboot because the onboot loader will not jump you into u-boot parition.
but!!
it is posible to build own boot strategy if you understand how Loader work, a bit more of ARM Assembler and C .
as onboot is not posible to reflash as it use locked 1st sector of flash, there is no posibility to let onboot start u-boot parition direct, the only way is to do a 2nd stage loader whitch will be flashed to working kernel parition (like kernel is prepared, with hashes calculated and stored in right places), from this 2nd stage loader (onboot2 or u-boot or u-boot-derivate) you may load your own kernel from where you want(serial/exlink, mmc, flash or usb) if you also include needed drivers.
if that loaded kernel (your own build) have network drivers, usb drivers etc... you may also mount rootfs from nfs or usb or even default from flash.
to do this by safe way, you need posibility to change boot parition or to swap between parition 0 and 1(kernel and rootfs) , that in case you make some fault, you can boot working parition to recover 2nd stage loader and continue develop of the 2nd stage loader until you think you finish.
now to missing sam?s GPL stuff that you will need, basicly all functions are inside of ram loaded, you just need to catch them by defining ram adress and you can use these functions without to have C code by jumping into memory address direct.
this is general posible to do with all devices where verification of kernel is known.
you still want to do it ?
Denny - 데니 - 丹尼 (card2000)
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
UE55C8000 UE55D8000 UE32D6510 BD-C9600 3xDM8000
Reversing HW Demux Drivers and API from Samsung´s TV
Re: [HOT] D series firmware with u-boot included. Official!
Thanks for your answer.Denny wrote:<...>
You say that onboot is locked is this related with the option OTP lock of service menu? Because i was playing with my tv service menu and i find this option after i press the button otp lock the tv restarts i do some research and i find that this otp lock is a write protection system...
On the TD menu instead i find some boot options but i don't know what there are for
Code: Select all
==============================
[ TDsSystem Debug Menu ]
------------------------------
1 : Set RTC
2 : Get RTC
[u] [b]3 : Get Boot Status [/b][/u]
4 : Set SubMicom Protection
5 : Set Watchdog
6 : Get Watchdog
7 : Set OSD Position
8 : Set OSD Mute
9 : Dependency debug
10 : Zigbee Auto Test
11 : System Monitor Debug
12 : internet tset debug
[u][b] 13 : Get SecureBoot Certification[/b][/u]
14 : Touch Slide On/Off
------------------------------
99 : Exit Debug
------------------------------
TDsSystem>: 3
[u][b][BootFromMicom]Get Boot Status : 0
Success... Boot Status : 0 [/b][/u]
==============================
[ TDsSystem Debug Menu ]
------------------------------
1 : Set RTC
2 : Get RTC
3 : Get Boot Status
4 : Set SubMicom Protection
5 : Set Watchdog
6 : Get Watchdog
7 : Set OSD Position
8 : Set OSD Mute
9 : Dependency debug
10 : Zigbee Auto Test
11 : System Monitor Debug
12 : internet tset debug
13 : Get SecureBoot Certification
14 : Touch Slide On/Off
------------------------------
99 : Exit Debug
------------------------------
[u][b]TDsSystem>: 13
SecureBoot Certification Success[/b][/u]
====================================
[ SsPlatform Debug Menu]
------------------------------------
1 [u][b] : GetBootState [/b][/u]
2 : GetPowerState
3 : SetTimer
4 : SetOption
5 : GetOption
6 : SetAppState
7 : GetSystemInfo
8 : GetDisplayInfo
9 : Auto Wall Mount Debug
10 : GetBootParam
11 : Get Open Source License Files List
12 : Get Country List
13 : Set Auto Stand Power On/Off
14 : Set Panel Slide Key On/Off
====================================
99 : Exit
====================================
[u][b]DBG> : 1
BootState Read... BOOT_STATE_MASTER[/b][/u]
====================================
====================================
[ SsPlatform Debug Menu]
------------------------------------
1 : GetBootState
2 : GetPowerState
3 : SetTimer
4 : SetOption
5 : GetOption
6 : SetAppState
7 : GetSystemInfo
8 : GetDisplayInfo
9 : Auto Wall Mount Debug
10 : GetBootParam
11 : Get Open Source License Files List
12 : Get Country List
13 : Set Auto Stand Power On/Off
14 : Set Panel Slide Key On/Off
====================================
99 : Exit
====================================
DBG> : [M_DTV/Debugging] 1441 : TCDVBSIManager::m_OnDVBTOTSection timeOffset = 120, timeOfchangeFlag = 0, nextTimeOffset = 60, localOffset = 120 newTimeOffset
10
[u][b]BootParam Read... OPTION_BOOT_PARAM_NORMAL[/b][/u]
-
- Posts: 21
- Joined: Sat Jan 05, 2013 5:57 pm
Re: [HOT] D series firmware with u-boot included. Official!
working on UA40D6960MW?
TNX
TNX