Hi All,
Guess im the 1st..
pic
http://i26.tinypic.com/2aa0zgo.jpg
dump
http://www.megaupload.com/?d=34BB7N97
Mick
Hi All,
Guess im the 1st..
pic
http://i26.tinypic.com/2aa0zgo.jpg
dump
http://www.megaupload.com/?d=34BB7N97
Mick
hehehehe
excellent work
Well done matey, i have one gathering dust in the loft so wait and see what can be done
One of the interesting things is that the main EXE (TV2ClientCE.exe) is written in C#
so if you upload it to remotesoft salamander.. it will decompile it back to its original source code. This means it could be made into a very nice HD freeview / mediacentre box.
ive also got one of these gathering dust (its plugged in and used maybe once a month) so im going to keep my eye on this and help out if i can
OK..
box now boots unsigned code, and has a webserver running and ftp server
I also have remote debugging running under visual studio.
The main app is written in c#, and the epg is all XML / HTML and gifs / jpegs etc.
I decompiled the main app using reflector, back to source code, but it doesn't recompile due to errors.
Any C# experts ??
Cheers
Mick
Just picked one of these up on fleabay for £26 just 'incase'......
Mind you it must be worth that just for the 160gb HD
Just use enough water to cover your vegetables,the same goes for when you're having a bath....
just thought I'd have a little play about while bored...
using System;
using System.Collections.Generic;
using System.ComponentModel;
using System.Data;
using System.Drawing;
using System.Text;
using System.Windows.Forms;
using System.Runtime.InteropServices;
namespace Devicetest
{
public partial class Form1 : Form
{
public Form1()
{
InitializeComponent();
TV2Engine_SetLED(TV2LED.Recording, TV2LEDmode.Blink);
TV2Engine_SetLED(TV2LED.IrReceive, TV2LEDmode.On);
TV2Engine_SetLED(TV2LED.On, TV2LEDmode.Blink);
TV2Engine_SetLED(TV2LED.Messages, TV2LEDmode.On);
TV2Engine_SetVolume(65535, false);
TV2Engine_PlayUISound(@"\Hard Disk\test.wav");
while (true)
{
}
}
public enum TV2LED : uint
{
Connected = 0,
HiDef = 4,
IrReceive = 5,
Max = 6,
Messages = 6,
On = 3,
Recording = 2,
Standby = 1
}
public enum TV2LEDmode : uint
{
Blink = 2,
Off = 0,
On = 1
}
[DllImport("TV2Engine.dll", CharSet=CharSet.Auto)]
public static extern bool TV2Engine_PlayUISound(string fileName);
[DllImport("TV2Engine.dll")]
private static extern void TV2Engine_SetLED(TV2LED led, TV2LEDmode mode);
[DllImport("TV2Engine.dll")]
private static extern void TV2Engine_SetVolume(int volume, [MarshalAs(UnmanagedType.U1)] bool mute);
private void Form1_Load(object sender, EventArgs e)
{
}
}
}
I made all the lights come on and flash on the front.. but couldnt get the sound to play
never mind.. at least it did something
http://img87.imageshack.us/img87/49/dsc01224lz4.jpg
Mick
Last edited by is0-mick; 29th April 2008 at 11:45 PM.
Keep it up m8 am following this one I have a couple of these sat here still unpacked
oooh... This is excellent news!
Fingers crossed it won't be long until my unused, unloved BT Box becomes a fully working home media centre!!... I can but hope!
I now have a working modchip, so the box will boot unsigned code stand alone
Just need a C# expert to help me get the decompiled code to recompile!
and C# experts about???
Mick
Good work
Grabbed one off of ebay for 12 quid on the back of your efforts.
So are you booting with a modded version of the dump from the 1st post now?
I take it the stuff at the start of the boot.sig file is the required signing?
Did C years ago, no idea about C# though.
This thread gets more interesting by the day.Just wished I could help out with the C#.
Just use enough water to cover your vegetables,the same goes for when you're having a bath....
maybe if you post in the programming sectiion mate, just a little post saying any c experts please look at this thread bla bla bla, an idea maybe? as i know i only saw this thread by chance i have no intrest in the box was just being nosey as dont normally look around here, give it a go!
already have cheers...
@doughboy :
The chip jtags the box, changes some bytes in ram to bypass the sig check.. then continues execut1on of the code.
The flash is signed and encrypted and cant be altered as the CPU has a pre-bootloader onboard (bit like the xbox360).
I have been doing some work over at www.t-hack.com which is the germans equivelant of our box.
Mick
Social Networking Bookmarks