Started by is0-mick, 15. May 2008, 21:32
This stuff was a very long time ago.Maybe they ditched this stuff, or the box you are trying is not running windows CE and is running the linux version?Mick
It's a silver box running Windows CE. It has not been chipped or modified in anyway. So this must mean a modified box is required to get tv2remotekeys.exe running and ready to accept commands on port 8082.
The only other way I can think of to get tv2remotekeys.exe running on an unmodified box is to make use of the Windows CE Autorun facility and have an .exe on a usb stick that is set to run "C:\Windows\tv2remotekeys.exe". When I plug a usb stick into the BT Vision box, its light flashes, so Windows CE is reading it looking for an autorun. In fact, one of my USB sticks makes the BT Vision box freeze until I remove it.
Or if I could get back into the secret menu and run the Ajax/CSS test and make it load a specially crafted gif/jpg to execute custom code.
I'm not even sure WinCE implements Autorun...
When a memory card is inserted into a Windows Mobile / Windows CE device, the OS automatically looks in a certain folder for a program named Autorun.exe. If that program is found, then it is immediately run. The folder in which the OS looks is going to depend on what type of processor the device has. For an overwhelming majority of Windows Mobile devices, that folder will be "/2577". Here is a table of the possible folder names for other Windows CE devices:Processor Folder NameARM 720 1824Arm 820 2080ARM 920 2336ARM 7TDMI 70001Hitachi SH3 10003Hitachi SH3E 10004Hitachi SH4 10005Motorola 821 821SH3 103SH4 104Strongarm 2577
Well, that's easy... According to http://msdn.microsoft.com/en-us/library/aa453696.aspx the folder for MIPS CPUs is 4000...The problem is... I'm quite sure the autorun functionality is implemented by the Windows shell (explorer.exe or whatever they use on Windows Mobile) And the STB isn't running the shell