Page 3 of 4

Re: [SOLVED] Kinda Bricked my TV

Posted: Tue Oct 11, 2011 7:31 pm
by juusso
I'm talking about petergreys patcher for 9115. Did you checked code again?

Re: [SOLVED] Kinda Bricked my TV

Posted: Tue Oct 11, 2011 8:08 pm
by dasilverpaladin
yes,

i run the patcher to get my 9115 magicthing
on 2006 = nothing
and after updating to
on 2007 = nothing
petergreys key "946375272" doesnt work

Code: Select all

# ./patcher /dev/mem ./patch.ini patch2 patch
PATCHING prints out magic number for emergency.sh
Searching memory for byte pattern of size 0x10:
Found at 0x1e59b88: Write successful
Search finished
patched: 1 time(s)

Re: [SOLVED] Kinda Bricked my TV

Posted: Tue Oct 11, 2011 9:20 pm
by erdem_ua
dasilverpaladin wrote:petergreys key "946375272" doesnt work
I missed petergrey... Where is he?

Re: [SOLVED] Kinda Bricked my TV

Posted: Tue Oct 11, 2011 9:40 pm
by dasilverpaladin
forum.samygo.tv/viewtopic.php?t=717#p6146

Re: executing custom script on CI+

Posted: Sat Oct 15, 2011 11:30 pm
by erdem_ua
I mean he is not enter forum anymore :)

Re: executing custom script on CI+

Posted: Sun Oct 16, 2011 5:31 am
by juusso
Yes, he doesnt work with TV s anymore, but we have some indirect communication.

Re: executing custom script on CI+

Posted: Sun Oct 16, 2011 8:09 am
by erdem_ua
Than send salutations from me. Indirectly :-)

Re: executing custom script on CI+

Posted: Sun Oct 16, 2011 5:46 pm
by langerhans
Okay, here ist Mr. "indirect communication" :D
I checked how the patcher works, you can see it from my output here:

Code: Select all

# cd /dtv/usb/sdb1/
# chmod +X patcher
# ./patcher /dev/mem ./patch.ini patch2 patch
PATCHING prints out magic number for emergency.sh
Searching memory for byte pattern of size 0x10:
Found at 0x2faaf00: Write successful
Search finished
patched: 1 time(s)
# exit
========== DEBUG MAIN ============
[cut out menu, slect EXIT here]
==============================
Select> 100

==============================
 [ TD Debug Menu ]
------------------------------
 0x01  : TDc Debug
 0x02  : TDi Debug

 0x03  : SDAL Debug
 0x04  : spI Debug
 0x05  : Sequence Test
 0x06  : OTP Create
------------------------------
 0x99  : Exit Debug
------------------------------
TD>: 0x9115
 Version_file : SWU_T-CHL5CIPDEUC_002008_I02_EK000DK000_100115

 : 1
 0x944135080 : (null) <----- My magic Number

==============================
 [ TD Debug Menu ]
------------------------------
 0x01  : TDc Debug
 0x02  : TDi Debug

 0x03  : SDAL Debug
 0x04  : spI Debug
 0x05  : Sequence Test
 0x06  : OTP Create
------------------------------
 0x99  : Exit Debug
------------------------------
TD>:
After that reboot TV, go back to TD Debug,m enter 9115, enter your number and voila: emergency.sh gets executed:

Code: Select all

TD>: 0x9115
 Version_file : SWU_T-CHL5CIPDEUC_002008_I02_EK000DK000_100115

 : 944135080
/dtv/usb/sda1/emergency.sh: /dtv/usb/sda1/emergency.sh: 3: /dtv/usb/sda/patcher: not found <----- I know, I was too lazy. Just showing that it will work :)
Please note: Exectute patches AFTER Authuld checks your TV or it will fail the kernel check due to the patch and shutdown TV.
To sum it up: Run patcher via shell, exit back to TD Debug, type 9115, enter anything at the prompt, TV print magic number.

EDIT: Okay, this patch.ini just works on B550 Kernel. Need to find right bytes for B650 now...

Re: executing custom script on CI+

Posted: Mon Oct 17, 2011 8:46 pm
by langerhans
Okay, after disassembling, comparing and analyzing this is what I think is the right patch for B650 exeDSP juuso sent me.

Code: Select all

0610A0E198089FE55808F9EB23FFFFEA
Change the Value for Modified to this in patch.ini patch2 and try it like I said in my last post.

Re: executing custom script on CI+

Posted: Tue Oct 18, 2011 2:40 am
by dasilverpaladin
Tried it, but doesnt work

Code: Select all

[ patch2 ]
Description = prints out magic number for emergency.sh
Original = 060050E125FFFF1A000057E323FFFF1A
Modified = 0610A0E198089FE55808F9EB23FFFFEA

Code: Select all

# ./patcher /dev/mem ./patch.ini patch2 patch
PATCHING prints out magic number for emergency.sh
Searching memory for byte pattern of size 0x10:
Found at 0x17c9b88: Write successful
Search finished
patched: 1 time(s)

Code: Select all

==============================
 [ TD Debug Menu ]
------------------------------
 0x01  : TDc Debug 
 0x02  : TDi Debug  

 0x03  : SDAL Debug 
 0x04  : spI Debug
 0x05  : Sequence Test  
 0x06  : OTP Create  
------------------------------
 0x99  : Exit Debug 
------------------------------
TD>: 0x9115
 Version_file : SWU_T-CHLCIPDEUC_002007_I02_EK000DK000_100114
 
 : 1

==============================
 [ TD Debug Menu ]
------------------------------
 0x01  : TDc Debug 
what i can see on ex link while the patch is running and searching

Code: Select all

156 (0): ERROR: Event queue full
157 (0): ERROR: Event queue full
158 (0): ERROR: Event queue full
159 (0): ERROR: Event queue full
160 (0): ERROR: Event queue full
161 (0): ERROR: Event queue full
162 (0): ERROR: Event queue full
163 (0): ERROR: Event queue full
164 (0): ERROR: Event queue full
165 (0): ERROR: Event queue full
166 (0): ERROR: Event queue full
167 (0): ERROR: Event queue full
168 (0): ERROR: Event queue full
169 (0): ERROR: Event queue full
170 (0): ERROR: Event queue full
171 (0): ERROR: Event queue full
172 (0): ERROR: Event queue full
173 (0): ERROR: Event queue full
174 (0): ERROR: Event queue full
dont know if it`s normal, maybe some kind of restriction?