Firmware downgrade for LT27A950

Here is information about customize your D series firmware..:!:This forum is NOT FOR USER questions or problems but DEVELOPER.
Post Reply

richtoy
Posts: 9
Joined: Mon Aug 13, 2012 10:58 pm
Location: Maastrict

Firmware downgrade for LT27A950

Post by richtoy »

Hi,

My LT27A950 got an unexpected firmware upgrade to 1009 and now all my SamyGo stuff has stopped working :evil: . Worse still, the samygo hack I installed to remove DRM (drm_disable) appears to interfere with the new firmware.

Old firmware 1006 is still available here http://org.downloadcenter.samsung.com/d ... SMDEUC.exe so could somebody explain how I go about hacking the version numbers when it is on the USB stick so that is accepted by the monitor and installed over the newer firmware.

My last firmware was 1007 but I don't find a link to that version.

I also tried the DNS hack to see if a version was already available but there was nothing.

Thanks,
Richard

User avatar
juusso
SamyGO Moderator
Posts: 10125
Joined: Sun Mar 07, 2010 6:20 pm

Re: Firmware downgrade for LT27A950

Post by juusso »

if you have root, manual flashing is very dangerous, but possible. take care you have to check hashes and write at samygo tv session.
LE40B653T5W,UE40D6750,UE65Q8C
Have questions? Read SamyGO Wiki, Search on forum first!
FFB (v0.8), FFB for CI+ . Get root on: C series, D series, E series, F series, H series. rooting K series, exeDSP/exeTV patches[C/D/E/F/H]

DO NOT EVER INSTALL FIRMWARE UPGRADE

richtoy
Posts: 9
Joined: Mon Aug 13, 2012 10:58 pm
Location: Maastrict

Re: Firmware downgrade for LT27A950

Post by richtoy »

I had 1007 and it was rooted as described on the wiki.
When trying to watch catchup TV with one of the smart hub TV apps the app said that new firmware was required so somebody downloaded 1009 from the UK Samsung site and installed it from USB. This has broken the Samygo installation (app is there but no access)

Is it possible to change/edit firmware 1006 such that it can be loaded over 1009 to give me back the Samygo facilities? If so what must be changed? Is there a howto? I have fairly high linux skills.

richtoy
Posts: 9
Joined: Mon Aug 13, 2012 10:58 pm
Location: Maastrict

Re: Firmware downgrade for LT27A950

Post by richtoy »

Ok, I'm sort of partly back in business :geek:

I used a hacked version of the hospitality hack to get full root access back again. Once each image was made I duplicated one of the directories and called it T-GASMDEUC for my monitor.

So now I have ftp access and in /mtd_down/widgets/user/SamyGO/SamyGO/etc/init.d/service_name.init.dis the following: -

Code: Select all

Dad@Pluto ~
$ ftp 192.168.0.253
Connected to 192.168.0.253:21.
220 Operation successful
Name (192.168.0.253:21:Dad): root
230 Operation successful
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> cd /mtd_down/widgets/user/SamyGO/SamyGO/etc/init.d/
250 Operation successful
ftp> dir
200 Operation successful
150 Directory listing
-rwxr-xr-x    1 root     0              832 Nov  7  2011 01_01_catch_crap.init
-rwxr-xr-x    1 root     0              245 May 13  2012 01_01_serial_unlock.init
-rwxr-xr-x    1 root     0             2608 Apr  8  2011 01_03_hotplug.init.dis
-rwxr-xr-x    1 root     0              194 Jan  1  1980 01_04_pvr_drm_disable.init.dis
-rwxr-xr-x    1 root     0              803 Aug 26  2011 01_04_server_replacement.init
-rwxr-xr-x    1 root     0             1123 Mar 29  2011 01_05_hiddev.init
-rwxr-xr-x    1 root     0             4191 Jul 16  2011 02_04_replace_wifi_mod.init.dis
-rwxr-xr-x    1 root     0             2684 Mar 29  2011 02_04_vusb.init
-rwxr-xr-x    1 root     0             2352 Mar 29  2011 02_04_vusb.init.remi71
-rwxr-xr-x    1 root     0             2134 Sep  8  2013 02_04_vusb.vpvrimage.init
-rwxr-xr-x    1 root     0             1121 Nov 23  2010 02_10_wakelan.init.dis
-rwxr-xr-x    1 root     0              593 Mar 29  2011 03_01_fuse.init
-rwxr-xr-x    1 root     0             1029 Mar 29  2011 03_03_djmount.init.dis
-rwxr-xr-x    1 root     0             3373 Sep 18  2013 03_03_juuso_nfsmount.init
-rwxr-xr-x    1 root     0             2589 Mar 29  2011 03_03_nfsmount.init
-rwxr-xr-x    1 root     0             3119 Mar 29  2011 03_03_nfsmount.init.remi71
-rwxr-xr-x    1 root     0              445 Nov 10  2011 03_03_udpxy.init.dis
-rwxr-xr-x    1 root     0             2015 Dec  6  2010 04_04_fusesmb.init.dis
-rwxr-xr-x    1 root     0             1512 Sep 25  2011 04_04_httpfs.init.dis
-rwxr-xr-x    1 root     0             2488 Oct  2  2011 04_04_samba.init
-rwxr-xr-x    1 root     0             4500 Mar 29  2011 06_05_apache.init
-rwxr-xr-x    1 root     0             2262 Apr  8  2011 06_05_bb_httpd.init.dis
-rwxr-xr-x    1 root     0              671 Oct  2  2011 06_05_samba-server.init
-rwxr-xr-x    1 root     0             1140 Mar 29  2011 06_06_obexpush.init.dis
-rwxr-xr-x    1 root     0              599 Mar 29  2011 70_70_arfix-sh.init.dis
-rwxr-xr-x    1 root     0             4263 Sep  8  2013 80_80_record_to_nwshare.init
-rwxr-xr-x    1 root     0             4506 Mar 29  2011 80_80_record_to_nwshare.init.kayaweed
-rwxr-xr-x    1 root     0             4309 Mar 29  2011 80_80_record_to_nwshare.init.remi71
-rwxr-xr-x    1 root     0             1136 Mar 29  2011 90_90_injectso.init.dis
-rwxr-xr-x    1 root     0             2073 May 31  2011 90_90_loadGameMains.init.dis
-rwxr-xr-x    1 root     0              404 Sep 15  2013 99_99_ChannInfoON.init
-rwxr-xr-x    1 root     0              397 Sep 21  2013 99_99_InfoBannerDuration.init.dis
-rwxr-xr-x    1 root     0              399 Sep 23  2013 99_99_MPEGts.init
-rwxr-xr-x    1 root     0              402 Sep 18  2013 99_99_PVRAnyDev.init.dis
-rwxr-xr-x    1 root     0              405 Sep 15  2013 99_99_RCremap.init.dis
-rwxr-xr-x    1 root     0              417 Sep 15  2013 99_99_SleepTimer.init.dis
-rwxr-xr-x    1 root     0              690 Mar 29  2011 99_99_start_exeDSP.init.disabled_by_default_to_protect_the_innocent
-rwxr-xr-x    1 root     0             1452 Dec  8  2011 99_99_z_sendinfo.init
226 Operation successful
ftp> 
These files look like a combination of my original SamyGO Extensions plus new ones from my attempt to reinstall. Do the dates look ok? Should there be a 03_03_sshd.init or is that only for C series?

One thing I find strange is "194 Jan 1 1980 01_04_pvr_drm_disable.init.dis"

My reason for installing in the first place was to enable this and I did as I explained here viewtopic.php?f=39&t=5262#p38588 back in Jan 2013 but now I find it disabled :shock: Could the installation of the new firmware have disabled this?

I re-enabled the 01_04_pvr_drm_disable.init.dis & 06_05_bb_httpd.init.dis but after doing so neither appear to work; you go through the motions and start a recording but after a few seconds there world be a popup telling you that recording had failed :( and I when I point a browser at the monitor if just times out (IE says the connection is refused)

Now when I telnet to the monitor and do a "ls -l" I get :-
ls -l
's: invalid option -- '
VDLinux-BusyBox v1.14.3-VD Linux VDLinux.1.2.1.x (2011-01-18 10:51:51 KST) multi-call binary

Usage: ls [-1AacCdeFilnpLRrSsTtuvwxXhk] [filenames...]

List directory contents

Options:
-1 List in a single column
-A Don't list . and ..
-a Don't hide entries starting with .
-C List by columns
-c With -l: sort by ctime
--color[={always,never,auto}] Control coloring
-d List directory entries instead of contents
-e List full date and time
-F Append indicator (one of */=@|) to entries
-i List inode numbers
-l Long listing format
-n List numeric UIDs and GIDs instead of names
-p Append indicator (one of /=@|) to entries
-L List entries pointed to by symlinks
-R List subdirectories recursively
-r Sort in reverse order
-S Sort by file size
-s List the size of each file, in blocks
-T NUM Assume tabstop every NUM columns
-t With -l: sort by modification time
-u With -l: sort by access time
-v Sort by version
-w NUM Assume the terminal is NUM columns wide
-x List by lines
-X Sort by extension
-h List sizes in human readable format (1K 243M 2G)

Is this the busybox that I have enabled above?

What is the best way for me go forwards? By forwards I mean I would like the drm free recording to work.

Should I try to apply all of the latest SamyGo Extensions or investigate if there is a way to return to an older more friendly firmware?

Thanks
Richard

richtoy
Posts: 9
Joined: Mon Aug 13, 2012 10:58 pm
Location: Maastrict

What's this difference in the firmware contents

Post by richtoy »

I have two firmwares from the Samsung site for my monitor, T-GASMDEUC-1006.1 & T-GASMDEUC-1009.0

I can fully unpack T-GASMDEUC-1009.0 but T-GASMDEUC-1006.1 fails to unpack and when you look at the contents you see that T-GASMDEUC-1006.1 has 4 files starting with T-GENMDEUS1 that T-GASMDEUC-1009 does not have.

Can anybody explain why these files are only in the earlier firmware and what their purpose is?

Code: Select all

Dad@Pluto /cygdrive/c/Users/Dad/Desktop/Samsung Firmware
$ ls -lR ./T-GASMDEUC-100*
-rwx------+ 1 Dad None 88M Mar  1 21:49 ./T-GASMDEUC-1006.1.exe*
-rwx------+ 1 Dad None 90M Mar  1 21:39 ./T-GASMDEUC-1009.0.exe*

./T-GASMDEUC-1006.1:
total 12K
drwx------+ 1 Dad None 0 Mar  4 20:26 image/

./T-GASMDEUC-1006.1/image:
total 88M
-rwx------+ 1 Dad None 3.1M Sep 29  2011 Image.sec*
-rwx------+ 1 Dad None  132 Sep 29  2011 Image.sec.cmac*
-rwx------+ 1 Dad None  256 Sep 29  2011 Image.sec.cs*
-rwx------+ 1 Dad None  256 Sep 29  2011 Image.sec.vs*
-rwx------+ 1 Dad None   29 Apr  9  2011 T-GENMDEUS1.bin.crc*
-rwx------+ 1 Dad None  49K Apr  9  2011 T-GENMDEUS1.bin.sec*
-rwx------+ 1 Dad None  256 Apr  9  2011 T-GENMDEUS1.bin.sec.vs*
-rwx------+ 1 Dad None    5 Apr  9  2011 T-GENMDEUS1.ver*
-rwx------+ 1 Dad None  12M Sep 29  2011 appext.img.sec*
-rwx------+ 1 Dad None  132 Sep 29  2011 appext.img.sec.cmac*
-rwx------+ 1 Dad None  256 Sep 29  2011 appext.img.sec.cs*
-rwx------+ 1 Dad None  256 Sep 29  2011 appext.img.sec.vs*
-rwx------+ 1 Dad None  69M Sep 29  2011 exe.img.sec*
-rwx------+ 1 Dad None  132 Sep 29  2011 exe.img.sec.cmac*
-rwx------+ 1 Dad None  256 Sep 29  2011 exe.img.sec.cs*
-rwx------+ 1 Dad None  256 Sep 29  2011 exe.img.sec.vs*
-rwx------+ 1 Dad None   18 Sep 29  2011 info.txt*
-rwx------+ 1 Dad None    7 Sep 29  2011 major_version*
-rwx------+ 1 Dad None    6 Sep 29  2011 minor_version*
-rwx------+ 1 Dad None 4.5M Sep 29  2011 rootfs.img.sec*
-rwx------+ 1 Dad None  132 Sep 29  2011 rootfs.img.sec.cmac*
-rwx------+ 1 Dad None  256 Sep 29  2011 rootfs.img.sec.cs*
-rwx------+ 1 Dad None  256 Sep 29  2011 rootfs.img.sec.vs*
-rwx------+ 1 Dad None   89 Sep 29  2011 validinfo.txt*
-rwx------+ 1 Dad None   54 Sep 29  2011 version_info.txt*

./T-GASMDEUC-1009.0:
total 8.0K
drwx------+ 1 Dad None 0 Mar  4 20:26 image/

./T-GASMDEUC-1009.0/image:
total 89M
-rwx------+ 1 Dad None 3.1M Apr 16  2013 Image.sec*
-rwx------+ 1 Dad None  132 Apr 16  2013 Image.sec.cmac*
-rwx------+ 1 Dad None  256 Apr 16  2013 Image.sec.cs*
-rwx------+ 1 Dad None  256 Apr 16  2013 Image.sec.vs*
-rwx------+ 1 Dad None  13M Apr 16  2013 appext.img.sec*
-rwx------+ 1 Dad None  132 Apr 16  2013 appext.img.sec.cmac*
-rwx------+ 1 Dad None  256 Apr 16  2013 appext.img.sec.cs*
-rwx------+ 1 Dad None  256 Apr 16  2013 appext.img.sec.vs*
-rwx------+ 1 Dad None  69M Apr 16  2013 exe.img.sec*
-rwx------+ 1 Dad None  132 Apr 16  2013 exe.img.sec.cmac*
-rwx------+ 1 Dad None  256 Apr 16  2013 exe.img.sec.cs*
-rwx------+ 1 Dad None  256 Apr 16  2013 exe.img.sec.vs*
-rwx------+ 1 Dad None   18 Apr 16  2013 info.txt*
-rwx------+ 1 Dad None    7 Apr 16  2013 major_version*
-rwx------+ 1 Dad None    6 Apr 16  2013 minor_version*
-rwx------+ 1 Dad None 4.5M Apr 16  2013 rootfs.img.sec*
-rwx------+ 1 Dad None  132 Apr 16  2013 rootfs.img.sec.cmac*
-rwx------+ 1 Dad None  256 Apr 16  2013 rootfs.img.sec.cs*
-rwx------+ 1 Dad None  256 Apr 16  2013 rootfs.img.sec.vs*
-rwx------+ 1 Dad None   89 Apr 16  2013 validinfo.txt*
-rwx------+ 1 Dad None   54 Apr 16  2013 version_info.txt*

Dad@Pluto /cygdrive/c/Users/Dad/Desktop/Samsung Firmware
$ python ~/bin/SamyGO\ Firmware\ Patcher.py decrypt_all ./T-GASMDEUC-1009.0/
SamyGO Firmware Patcher v0.34 (c) 2010-2011 Erdem U. Altinyurt

                   -=BIG FAT WARNING!=-
            You can brick your TV with this tool!
Authors accept no responsibility about ANY DAMAGE on your devices!
         project home: http://www.SamyGO.tv

Firmware:  T-GASMDEUC v1009.0

AES Encrytped CI+ firmware detected.
Processing file appext.img.sec
secret key :  SHWJUH:85a045ae-2296-484c-b457-ede832fcfbe1-646390a3-105e-40aa-85f6-da3086c70111
Decrypting AES...
Decrypting with  XOR Key :  T-GASMDEUC
Crypto package found, using fast XOR engine.

Calculated CRC : 0x4444E181
CRC Validation passed

Processing file exe.img.sec
secret key :  SHWJUH:85a045ae-2296-484c-b457-ede832fcfbe1-646390a3-105e-40aa-85f6-da3086c70111
Decrypting AES...
Decrypting with  XOR Key :  T-GASMDEUC
Crypto package found, using fast XOR engine.

Calculated CRC : 0x95C51522
CRC Validation passed

Processing file Image.sec
secret key :  SHWJUH:85a045ae-2296-484c-b457-ede832fcfbe1-646390a3-105e-40aa-85f6-da3086c70111
Decrypting AES...
Decrypting with  XOR Key :  T-GASMDEUC
Crypto package found, using fast XOR engine.

Calculated CRC : 0xFF2F577
CRC Validation passed

Processing file rootfs.img.sec
secret key :  SHWJUH:85a045ae-2296-484c-b457-ede832fcfbe1-646390a3-105e-40aa-85f6-da3086c70111
Decrypting AES...
Decrypting with  XOR Key :  T-GASMDEUC
Crypto package found, using fast XOR engine.

Calculated CRC : 0xD6E3222D
CRC Validation passed


Dad@Pluto /cygdrive/c/Users/Dad/Desktop/Samsung Firmware
$ python ~/bin/SamyGO\ Firmware\ Patcher.py decrypt_all ./T-GASMDEUC-1006.1/
SamyGO Firmware Patcher v0.34 (c) 2010-2011 Erdem U. Altinyurt

                   -=BIG FAT WARNING!=-
            You can brick your TV with this tool!
Authors accept no responsibility about ANY DAMAGE on your devices!
         project home: http://www.SamyGO.tv

Firmware:  T-GASMDEUC v1006.1

AES Encrytped CI+ firmware detected.
Processing file appext.img.sec
secret key :  SHWJUH:85a045ae-2296-484c-b457-ede832fcfbe1-646390a3-105e-40aa-85f6-da3086c70111
Decrypting AES...
Decrypting with  XOR Key :  T-GASMDEUC
Crypto package found, using fast XOR engine.

Calculated CRC : 0x74E5195B
CRC Validation passed

Processing file exe.img.sec
secret key :  SHWJUH:85a045ae-2296-484c-b457-ede832fcfbe1-646390a3-105e-40aa-85f6-da3086c70111
Decrypting AES...
Decrypting with  XOR Key :  T-GASMDEUC
Crypto package found, using fast XOR engine.

Calculated CRC : 0x38283C3B
CRC Validation passed

Processing file Image.sec
secret key :  SHWJUH:85a045ae-2296-484c-b457-ede832fcfbe1-646390a3-105e-40aa-85f6-da3086c70111
Decrypting AES...
Decrypting with  XOR Key :  T-GASMDEUC
Crypto package found, using fast XOR engine.

Calculated CRC : 0xFF2F577
CRC Validation passed

Processing file rootfs.img.sec
secret key :  SHWJUH:85a045ae-2296-484c-b457-ede832fcfbe1-646390a3-105e-40aa-85f6-da3086c70111
Decrypting AES...
Decrypting with  XOR Key :  T-GASMDEUC
Crypto package found, using fast XOR engine.

Calculated CRC : 0x72723E59
CRC Validation passed

Processing file T-GENMDEUS1.bin.sec
secret key :  SHWJUH:85a045ae-2296-484c-b457-ede832fcfbe1-646390a3-105e-40aa-85f6-da3086c70111
Decrypting AES...
Decrypting with  XOR Key :  T-GASMDEUC
Crypto package found, using fast XOR engine.

Calculated CRC : 0x2CA075D0
Traceback (most recent call last):
  File "/home/Dad/bin/SamyGO Firmware Patcher.py", line 1295, in <module>
    DecryptAll( sys.argv[2] )
  File "/home/Dad/bin/SamyGO Firmware Patcher.py", line 1067, in DecryptAll
    ValidCRC = int(ValidCRC[CRCstart:CRCstart+8], 16)
ValueError: invalid literal for int() with base 16: '283c3b*0'

Dad@Pluto /cygdrive/c/Users/Dad/Desktop/Samsung Firmware
Thanks,
Richard

Post Reply

Return to “[D] Firmware”