the pain of decrypting recordings on that weird H6600

[Lordbyte]

Uhmm, I think sectroyer wants you to deduce and to break barriers for yourself .. sectroyer thrives on teaching actually, more
than solving any specific problem .. At least thats my experience.

So, Here is my suggestion ..

Get Putty .. Its a telnet-client, and we need it to "talk" to the TV.

1. Connect the TV using Putty. It might be on port 23, 1023 or 2023 .. Find it .. Scan it .. just ... get connected.
2. Do one last attempt using the PVRDecoder, with its NetCat-monitor open, so you can see the commands the PVRDecoder is sending.
3. Copy the command that crashes the TV .. it should be a long command-string referencing the .so in question.
4. Reset TV and get experimenting using Putty and the copied commands ...
5. Come tell us what it took to make it work, and we can all learn something .. and the PVRDecoder can "learn" how to handle your TV.

[blendstylez]

i salute you lordbyte, thats somethang i can work with! thank you!

btw i know basic linux bash syntax, fine at dos commands, pretty good at php, css, html, mysql and basic at C pragramming, i am fine with windows network enviroment..and also macintosh a little
i of course know putty, but my linux skills are a little rusty..

seems like all of this is not really helping me with this topic here :/ but i try!

i'll keep in touch with you here!

here the netcat log

SpoilerShow

Code: Select all

(23) ---> hexdump -C -n 8 /dtv/usb/sdb1/CONTENTS/20151125055343.srf > /mtd_rwcommon/PVRDecoder.msg
(23) <--- 00000000  47 00 55 9a 2c 6c aa 0c                           |G.U.,l..| | 00000008

/mtd_rwcommon/samyGOso -d -A -l /mtd_rwcommon/libUnDRM.so /dtv/usb/sdb1/CONTENTS/20151125055343.srf
(23) ---> /mtd_rwcommon/samyGOso -d -A -l /mtd_rwcommon/libUnDRM.so /dtv/usb/sdb1/CONTENTS/20151125055343.srf > /mtd_rwcommon/PVRDecoder.msg
(23) ---> hexdump -C -n 8 /dtv/usb/sdb1/CONTENTS/20151118191608.srf > /mtd_rwcommon/PVRDecoder.msg

is this a command i shell experiment with?

Code: Select all

/mtd_rwcommon/samyGOso -d -A -I /mtd_rwcommon/libUnDRM.so /dtv/usb/sda1/CONTENTS/20151125055343.srf > /mtd_rwcommon/PVRDecoder.msg

which variables are the ones i should play with?

putty is working fine with the command:

Code: Select all

/mtd_rwcommon/samyGOso -d -A -l /mtd_rwcommon/libUnDRM.so /dtv/usb/sda1/CONTENTS/20151125055343.srf > /mtd_rwcommon/PVRDecoder.msg

what would be the next step?
PVRdecoder doesn't proceed to the next step..so..lordbyte can u tell?

[Lordbyte]

When you execute "anything" >/mtd_rwcommon/PVRDecoder.msg it means that the result of "anything" can be found in
/mtd_rwcommon/PVRDecoder.msg

Its a text-file containing the textual output of the command ... I believe the linux-gurus calls it a "redirect".

Anyway .. You may try the command without redirect for a less convoluted approach ...

ie. try (in Putty):
/mtd_rwcommon/samyGOso -d -A -l /mtd_rwcommon/libUnDRM.so /dtv/usb/sda1/CONTENTS/20151125055343.srf

You can ignore the "hexdump" thing ... Thats just me trying to figure out if the file in question is DRM-protected or not.

And now to the very strange thing I see MISSING in the log.

The "magic value is not where it is supposed to be

The command should be:
/mtd_rwcommon/samyGOso -d -A -l /mtd_rwcommon/libUnDRM.so /dtv/usb/sda1/CONTENTS/20151125055343.srf 1
or
/mtd_rwcommon/samyGOso -d -A -l /mtd_rwcommon/libUnDRM.so /dtv/usb/sda1/CONTENTS/20151125055343.srf 5
or
/mtd_rwcommon/samyGOso -d -A -l /mtd_rwcommon/libUnDRM.so /dtv/usb/sda1/CONTENTS/20151125055343.srf N
(where N is the magic value between 1-3600)

Could you check log in newest version ... My sourcecode is quite clear on this point

[blendstylez]

check..> redirect i use to call it pipe strange that i didn't reconize it by myself :/
hmk that output is library injection completed!

interessting that u mention the magic value..i saw that the slider is just missing in the newest version u sent me..
or lets say it is NOW missing..as i last tried your beta version, i saw another method of choosing the magic value..but now it is just gone O_O


anyway in putty the command is executed without any problems at all

SpoilerShow

Code: Select all

/mnt # /mtd_rwcommon/samyGOso -d -A -l /mtd_rwcommon/libUnDRM.so /dtv/usb/sda1/C
ONTENTS/20151125055343.srf 1
samyGOso v1.2.4 (c) bugficks 2013, sectroyer 2014
Injecting '/mtd_rwcommon/libUnDRM.so' resident: '0'
mprotect: 0x4227c020
dlopen: 0x424a0d80
dlclose: 0x424a0e14
dlsymaddr: 0x424a0e78
pc=42324eec lr=42324ed0 sp=be0a7150 fp=daa5498
r0=daa549c r1=80
r2=1 r3=0
stack: 0xbe087000-0xbe0a8000 length = 135168
executing injection code at 0xbe0a6fec
library injection completed!

i could do the whole process manualy via putty, if you tell me the steps i need for it, right?

[Lordbyte]

That screenshot of settings is from a very old version, isent it ?!
Never mind that now ... You got the recording decoded and retrieved from TV now then ?

When the command completed it actually dident

It spawned a process that use the TV hardware to decode the file you served as parameter.
The process maintain a log in /dtv .. the progress of the decoding is listed in that log, and the PVRDecoder
keeps retrieving that log. The log is parsed, and thusly the PVRDecoder knows when the decoder on TV is done,
and will then retrieve the decoded file (in serialized mode .. if not in serialized mode, the retrieval starts as soon as log in /dtv indicates the decoder has decoded the first few blocks).

Go read the log in /dtv and then retrieve the decoded .ts file, store it on your NAS, and delete it from TV, so that your storage media on TV
dosent run full

[blendstylez]

ok, maybe i mixed up those zip files..sry for that..
i now got your beta version, but this version cant verify telnet access? the other version still can! (latest public)

thanks for explaining the process to me, i keep understanding more and more! i appreciate that a lot!

i allready tried to copy that srf file renamed it to .ts and could not play it :/

that log file says:

SpoilerShow

Code: Select all

[UnDRM] SamyGO UnDRM v0.4.4 - (c) sectroyer 2014
[UnDRM] Debug time: 6464.
[UnDRM] Input file: /dtv/usb/sda1/CONTENTS/20151125055343.srf
[UnDRM] Output file: /dtv/usb/sda1/CONTENTS/20151125055343.ts
[UnDRM] Setting buffCounter to: 1.
[UnDRM] _ZN17CPVRSecureFileMgrC2Ev [0x365d130].
[UnDRM] _ZN17CPVRSecureFileMgr4OpenERKSs [0x365d748].
[UnDRM] _ZN17CPVRSecureFileMgr4ReadEPPv [0x365d4ec].
[UnDRM] _ZN17CPVRSecureFileMgr5CloseEv [0x365d664].
[UnDRM] _ZNSsC1EPKcRKSaIcE [0x15c5fdc].
[UnDRM] _ZN17PVRAppTZInterfaceC2Ev [0x3776fcc].
[UnDRM] _ZN17PVRAppTZInterface6CreateEv [0x3777644].
[UnDRM] dlsym '_ZN17PVRAppTZInterface10ConvertKeyEjPhPjS0_' failed.
[UnDRM] Error openning input file: /dtv/usb/sda1/CONTENTS/20151125055343.srf
[UnDRM] Library unloaded.

dlsym '_ZN17PVRAppTZInterface10ConvertKeyEjPhPjS0_' failed.
[UnDRM] Error openning input file: /dtv/usb/sda1/CONTENTS/20151125055343.srf
why is this happening?

Go read the log in /dtv and then retrieve the decoded .ts file, store it on your NAS, and delete it from TV, so that your storage media on TV
dosent run full

there is no .ts file and don't worry the test file is a ~ 40mb file

[Lordbyte]

dlsym '_ZN17PVRAppTZInterface10ConvertKeyEjPhPjS0_' failed.
[UnDRM] Error openning input file: /dtv/usb/sda1/CONTENTS/20151125055343.srf

why is this happening?

I have absolutely no clue ..

Only sectroyer have a chance to guide you here ..

[Lordbyte]

i now got your beta version, but this version cant verify telnet access? the other version still can! (latest public)

Try checking "Force NetCat mode" in Settings -> Other
Still cannot connect with newest beta ?

[blendstylez]

jep, that netcat force was the cause...now it connected successfully!
on this version (v.1.8.4.61) how can i open the net cat window here? no entry under tools anymore?

but thank you very very much so far Lordbyte! u made a big change for me!
thanks for your time and effort!!

dlsym '_ZN17PVRAppTZInterface10ConvertKeyEjPhPjS0_' failed.
[UnDRM] Error openning input file: /dtv/usb/sda1/CONTENTS/20151125055343.srf

why is this happening?

I have absolutely no clue ..

Only sectroyer have a chance to guide you here ..

@sectroyer
what u say? any idea how to troubleshoot?

[Lordbyte]

Correct, - Its actually only ment to be visible in situations like this .. hehe

So, you need to open RegEdit.exe, and add this key :

[HKEY_CURRENT_USER\SOFTWARE\SamyGOPVRDecoder]
"ENABLENETCATMONITOR"=dword:00000001

That should fix it.