http://www.t-hack.com/wiki/api.php?action=feedcontributions&feedformat=atom&user=Dans34 2026-05-06T23:13:24Z User contributions MediaWiki 1.18.2 http://www.t-hack.com/wiki/index.php?title=BT_Vision_DIT9719/05 2012-04-07T11:49:29Z

<p>Dans34: </p> <hr /> <div>{{todo}}<br /> = Original SW =<br /> Open TCP Ports:&lt;br/&gt;<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Port<br /> ! Protocal<br /> ! Comment<br /> |-<br /> | 8080<br /> | HTTP<br /> | blank page<br /> <br /> |}<br /> <br /> = General HW Information =<br /> ==Storage Media==<br /> • Hard Disk Capacity: 160 GB<br /> ==Connectivity==<br /> • Terrestrial antenna interface: RF in, IEC 169-2, RF<br /> out, (bypass) IEC 169-2&lt;br&gt;<br /> • Video Output - Digital: HDMI&lt;br&gt;<br /> • TV scart out: Audio L/R, CVBS, RGB, PAL, Fast<br /> blanking&lt;br&gt;<br /> • VCR scart out: Audio L/R, CVBS, Fast blanking,<br /> RGB, Slow blanking, Y/C&lt;br&gt;<br /> • VCR scart in: Audio L/R, CVBS, Fast blanking,<br /> RGB, Slow blanking&lt;br&gt;<br /> • Video Output - Analogue: S-Video (on Hosiden)&lt;br&gt;<br /> • Audio Output - Analogue: 2x Audio L/R (red/<br /> white cinch)&lt;br&gt;<br /> • Audio Output - Digital: AC3 over S/PDIF<br /> (Optical), Optical (TOSLINK)&lt;br&gt;<br /> • USB: 2 x USB 2.0, 1 x USB 2.0, USB 2.0 Master&lt;br&gt;<br /> • Network connections: RJ45&lt;br&gt;<br /> <br /> ==System Specifications==<br /> • CPU speed: 266 MHz &lt;br&gt;<br /> • Video graphics: 64 MB SDRAM&lt;br&gt;<br /> • Flash memory size: 64 MB, 16 MB &lt;br&gt;<br /> • Ram size: 64 MB &lt;br&gt;<br /> <br /> <br /> ==USB==<br /> The usb ports can be activated with a changed config file. usb driver is included in the kernel. If you add a storage device, it shows up as &quot;Hard Drive3&quot; in the WinCE system, but it cannot be accessed by the IPTV application.<br /> <br /> =Relevant ICs =<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! IC<br /> ! Vendor<br /> ! Description <br /> ! Datasheet <br /> |-<br /> | STV6413D <br /> | ST Microelectronics<br /> | Audio/Video Switch Matrix<br /> | [http://www.alldatasheet.com/datasheet-pdf/pdf/85768/STMICROELECTRONICS/STV6413D.html Link]<br /> |-<br /> | SIL9002CSU<br /> | Silicon Image<br /> | Unknown (Probably Something HDMI releated)<br /> | N/A<br /> |-<br /> | HYB25DC256160CE X4<br /> | QIMODA<br /> | 256 Mbit Double-Data-Rate SDRAM<br /> | [http://www.datasheetdir.com/HYB25DC256160CE-+DDR2-SDRAM Link]<br /> |-<br /> | TDA10046 X2<br /> | Philips Semiconductors/NXP <br /> | A DSP-based DVB-T Demodulator <br /> | N/A<br /> |-<br /> | SMP8634LF <br /> | Sigma Designs<br /> | Secure Media Processor™<br /> | [http://www.sigmadesigns.com/products.php?id=59 Link]<br /> |}<br /> <br /> <br /> =Gallery=<br /> &lt;gallery&gt;<br /> <br /> &lt;/gallery&gt;<br /> <br /> [[Category:BTVision]][[Category:Hardware]][[Category:WinCe]][[category:EN]][[category:InfoFromForum]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=BT_Vision_DIT9719/05 2012-04-07T11:38:35Z

<p>Dans34: </p> <hr /> <div>{{todo}}<br /> = Original SW =<br /> Open TCP Ports:&lt;br/&gt;<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Port<br /> ! Protocal<br /> ! Comment<br /> |-<br /> | 8080<br /> | HTTP<br /> | blank page<br /> <br /> |}<br /> <br /> = General HW Information =<br /> The device has the following connectors on the front:&lt;br/&gt;<br /> + Viewing Card Slot x2&lt;br/&gt;<br /> + USB Slot<br /> <br /> <br /> On the back side there are these Connectors:&lt;br/&gt;<br /> + AC Power&lt;br/&gt;<br /> + LAN &lt;br/&gt;<br /> + USB&lt;br/&gt;<br /> + SCART 1 (TV)&lt;br/&gt;<br /> + SCART 2 (AUX)&lt;br/&gt;<br /> + HDMI&lt;br/&gt;<br /> + analog Audio Out L,R (Chinch)&lt;br/&gt;<br /> + dig. Audio Out (SPDIF, optical)&lt;br/&gt;<br /> + S-Video Out &lt;br/&gt;<br /> + RF Out&lt;br/&gt;<br /> + RF In&lt;br/&gt;<br /> <br /> ==USB==<br /> The usb ports can be activated with a changed config file. usb driver is included in the kernel. If you add a storage device, it shows up as &quot;Hard Drive3&quot; in the WinCE system, but it cannot be accessed by the IPTV application.<br /> <br /> =Relevant ICs =<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! IC<br /> ! Vendor<br /> ! Description <br /> ! Datasheet <br /> |-<br /> | STV6413D <br /> | ST Microelectronics<br /> | Audio/Video Switch Matrix<br /> | [http://www.alldatasheet.com/datasheet-pdf/pdf/85768/STMICROELECTRONICS/STV6413D.html Link]<br /> |-<br /> | SIL9002CSU<br /> | Silicon Image<br /> | Unknown (Probably Something HDMI releated)<br /> | N/A<br /> |-<br /> | HYB25DC256160CE X4<br /> | QIMODA<br /> | 256 Mbit Double-Data-Rate SDRAM<br /> | [http://www.datasheetdir.com/HYB25DC256160CE-+DDR2-SDRAM Link]<br /> |-<br /> | TDA10046 X2<br /> | Philips Semiconductors/NXP <br /> | A DSP-based DVB-T Demodulator <br /> | N/A<br /> |-<br /> | SMP8634LF <br /> | Sigma Designs<br /> | Secure Media Processor™<br /> | [http://www.sigmadesigns.com/products.php?id=59 Link]<br /> |}<br /> <br /> <br /> =Gallery=<br /> &lt;gallery&gt;<br /> <br /> &lt;/gallery&gt;<br /> <br /> [[Category:BTVision]][[Category:Hardware]][[Category:WinCe]][[category:EN]][[category:InfoFromForum]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Category:InfoFromForum 2012-04-04T14:03:31Z

<p>Dans34: Created page with &quot;Information Copied from the Forum&quot;</p> <hr /> <div>Information Copied from the Forum</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=BT_Vision_DIT9719/05 2012-04-04T13:00:52Z

<p>Dans34: /* Original SW */</p> <hr /> <div>{{todo}}<br /> = Original SW =<br /> Open TCP Ports:&lt;br/&gt;<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Port<br /> ! Protocal<br /> ! Comment<br /> |-<br /> | 8080<br /> | HTTP<br /> | blank page<br /> <br /> |}<br /> <br /> = General HW Information =<br /> The device has the following connectors on the front:&lt;br/&gt;<br /> + Viewing Card Slot x2&lt;br/&gt;<br /> + USB Slot<br /> <br /> <br /> On the back side there are these Connectors:&lt;br/&gt;<br /> + AC Power&lt;br/&gt;<br /> + LAN &lt;br/&gt;<br /> + USB&lt;br/&gt;<br /> + SCART 1 (TV)&lt;br/&gt;<br /> + SCART 2 (AUX)&lt;br/&gt;<br /> + HDMI&lt;br/&gt;<br /> + analog Audio Out L,R (Chinch)&lt;br/&gt;<br /> + dig. Audio Out (SPDIF, optical)&lt;br/&gt;<br /> + S-Video Out &lt;br/&gt;<br /> + RF Out&lt;br/&gt;<br /> + RF In&lt;br/&gt;<br /> <br /> =Relevant ICs =<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! IC<br /> ! Vendor<br /> ! Description <br /> ! Datasheet <br /> |-<br /> | STV6413D <br /> | ST Microelectronics<br /> | Audio/Video Switch Matrix<br /> | [http://www.alldatasheet.com/datasheet-pdf/pdf/85768/STMICROELECTRONICS/STV6413D.html Link]<br /> |-<br /> | SIL9002CSU<br /> | Silicon Image<br /> | Unknown (Probably Something HDMI releated)<br /> | N/A<br /> |-<br /> | HYB25DC256160CE X4<br /> | QIMODA<br /> | 256 Mbit Double-Data-Rate SDRAM<br /> | [http://www.datasheetdir.com/HYB25DC256160CE-+DDR2-SDRAM Link]<br /> |-<br /> | TDA10046 X2<br /> | Philips Semiconductors/NXP <br /> | A DSP-based DVB-T Demodulator <br /> | N/A<br /> |-<br /> | SMP8634LF <br /> | Sigma Designs<br /> | Secure Media Processor™<br /> | [http://www.sigmadesigns.com/products.php?id=59 Link]<br /> |}<br /> <br /> <br /> =Gallery=<br /> &lt;gallery&gt;<br /> <br /> &lt;/gallery&gt;<br /> <br /> [[Category:BTVision]][[Category:Hardware]][[Category:WinCe]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=BT_Vision_DIT9719/05 2012-04-04T13:00:35Z

<p>Dans34: </p> <hr /> <div>{{todo}}<br /> = Original SW =<br /> Open TCP Ports:&lt;br/&gt;<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Port<br /> ! Protocall<br /> ! Comment<br /> |-<br /> | 8080<br /> | HTTP<br /> | blank page<br /> <br /> |}<br /> = General HW Information =<br /> The device has the following connectors on the front:&lt;br/&gt;<br /> + Viewing Card Slot x2&lt;br/&gt;<br /> + USB Slot<br /> <br /> <br /> On the back side there are these Connectors:&lt;br/&gt;<br /> + AC Power&lt;br/&gt;<br /> + LAN &lt;br/&gt;<br /> + USB&lt;br/&gt;<br /> + SCART 1 (TV)&lt;br/&gt;<br /> + SCART 2 (AUX)&lt;br/&gt;<br /> + HDMI&lt;br/&gt;<br /> + analog Audio Out L,R (Chinch)&lt;br/&gt;<br /> + dig. Audio Out (SPDIF, optical)&lt;br/&gt;<br /> + S-Video Out &lt;br/&gt;<br /> + RF Out&lt;br/&gt;<br /> + RF In&lt;br/&gt;<br /> <br /> =Relevant ICs =<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! IC<br /> ! Vendor<br /> ! Description <br /> ! Datasheet <br /> |-<br /> | STV6413D <br /> | ST Microelectronics<br /> | Audio/Video Switch Matrix<br /> | [http://www.alldatasheet.com/datasheet-pdf/pdf/85768/STMICROELECTRONICS/STV6413D.html Link]<br /> |-<br /> | SIL9002CSU<br /> | Silicon Image<br /> | Unknown (Probably Something HDMI releated)<br /> | N/A<br /> |-<br /> | HYB25DC256160CE X4<br /> | QIMODA<br /> | 256 Mbit Double-Data-Rate SDRAM<br /> | [http://www.datasheetdir.com/HYB25DC256160CE-+DDR2-SDRAM Link]<br /> |-<br /> | TDA10046 X2<br /> | Philips Semiconductors/NXP <br /> | A DSP-based DVB-T Demodulator <br /> | N/A<br /> |-<br /> | SMP8634LF <br /> | Sigma Designs<br /> | Secure Media Processor™<br /> | [http://www.sigmadesigns.com/products.php?id=59 Link]<br /> |}<br /> <br /> <br /> =Gallery=<br /> &lt;gallery&gt;<br /> <br /> &lt;/gallery&gt;<br /> <br /> [[Category:BTVision]][[Category:Hardware]][[Category:WinCe]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=BT_Vision_DIT9719/05 2012-04-03T20:29:42Z

<p>Dans34: </p> <hr /> <div>{{todo}}<br /> = Original SW =<br /> Open TCP Ports:&lt;br/&gt;<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Port<br /> ! Protocall<br /> ! Comment<br /> |-<br /> | 8080<br /> | HTTP<br /> | blank page<br /> <br /> |}<br /> = General HW Information =<br /> The device has the following connectors on the front:&lt;br/&gt;<br /> + Viewing Card Slot x2&lt;br/&gt;<br /> + USB Slot<br /> <br /> <br /> On the back side there are these Connectors:&lt;br/&gt;<br /> + AC Power&lt;br/&gt;<br /> + LAN &lt;br/&gt;<br /> + USB&lt;br/&gt;<br /> + SCART 1 (TV)&lt;br/&gt;<br /> + SCART 2 (AUX)&lt;br/&gt;<br /> + HDMI&lt;br/&gt;<br /> + analog Audio Out L,R (Chinch)&lt;br/&gt;<br /> + dig. Audio Out (SPDIF, optical)&lt;br/&gt;<br /> + S-Video Out &lt;br/&gt;<br /> + RF Out&lt;br/&gt;<br /> + RF In&lt;br/&gt;<br /> <br /> =Relevant ICs =<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! IC<br /> ! Vendor<br /> ! Description <br /> ! Datasheet <br /> |-<br /> | todo<br /> | todo<br /> | todo<br /> | todo<br /> |}<br /> <br /> <br /> =Gallery=<br /> &lt;gallery&gt;<br /> <br /> &lt;/gallery&gt;<br /> <br /> [[Category:BTVision]][[Category:Hardware]][[Category:WinCe]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=BT_Vision_DIT9719/05 2012-04-03T20:28:15Z

<p>Dans34: Created page with &quot;{{todo}} = Original SW = Open TCP Ports:&lt;br/&gt; {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot; ! Port ! Protocall ! Comment |- | 8080 | HTTP | blank page |} = General HW Informa...&quot;</p> <hr /> <div>{{todo}}<br /> = Original SW =<br /> Open TCP Ports:&lt;br/&gt;<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Port<br /> ! Protocall<br /> ! Comment<br /> |-<br /> | 8080<br /> | HTTP<br /> | blank page<br /> <br /> |}<br /> = General HW Information =<br /> The device has the following connectors on the front:&lt;br/&gt;<br /> + Viewing Card Slot x2&lt;br/&gt;<br /> + USB Slot<br /> <br /> <br /> On the back side there are these Connectors:&lt;br/&gt;<br /> + AC Power&lt;br/&gt;<br /> + LAN &lt;br/&gt;<br /> + USB&lt;br/&gt;<br /> + SCART 1 (TV)&lt;br/&gt;<br /> + SCART 2 (AUX)&lt;br/&gt;<br /> + HDMI&lt;br/&gt;<br /> + analog Audio Out L,R (Chinch)&lt;br/&gt;<br /> + dig. Audio Out (SPDIF, optical)&lt;br/&gt;<br /> + S-Video Out &lt;br/&gt;<br /> + RF Out&lt;br/&gt;<br /> + RF In&lt;br/&gt;<br /> <br /> =Relevant ICs =<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! IC<br /> ! Vendor<br /> ! Description <br /> ! Datasheet <br /> |-<br /> | todo<br /> | todo<br /> | todo<br /> | todo<br /> |}<br /> <br /> <br /> [[Category:BTVision]][[Category:Hardware]][[Category:WinCe]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Template:Todo 2012-04-03T20:27:36Z

<p>Dans34: Created page with &quot;{|cellpadding=0 cellspacing=0 align=center width=500px style=&quot;border:solid gold 2px&quot; |width=10px style=&quot;background-color: gold; padding: 0px&quot;| |style=&quot;padding:3px&quot;|This articl...&quot;</p> <hr /> <div>{|cellpadding=0 cellspacing=0 align=center width=500px style=&quot;border:solid gold 2px&quot;<br /> |width=10px style=&quot;background-color: gold; padding: 0px&quot;|<br /> |style=&quot;padding:3px&quot;|This article is '''Under Construction''' and may contain factual errors or omissions&lt;br&gt;Please report this article to its editor if you feel that it doesn't meet the community standards<br /> |}</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=BT_Vision_Box_40823 2012-04-03T20:26:08Z

<p>Dans34: </p> <hr /> <div>This (I think it's the actual?) BT Vision Box is different to the other ones described here. It does not use an SMP-IC but a Broadcom 7405. On the device I can't find a Modelnumber or Revision code, but on the board there is the code 40823 and the manufacturing date Sept 2009.<br /> <br /> = Original SW =<br /> Open TCP Ports:&lt;br/&gt;<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Port<br /> ! Proto<br /> ! comment<br /> |-<br /> | 8080<br /> | HTTP<br /> | sends no webinterface, just blank page<br /> |-<br /> | 53208<br /> | ???<br /> | do you have any idea?<br /> |}<br /> ----<br /> <br /> = General HW Information =<br /> The device has the following connectors on the front:&lt;br/&gt;<br /> + Viewing Card Slot&lt;br/&gt;<br /> + USB Slot<br /> <br /> <br /> On the back side there are these Connectors:&lt;br/&gt;<br /> + AC Power&lt;br/&gt;<br /> + LAN &lt;br/&gt;<br /> + USB&lt;br/&gt;<br /> + SCART 1 (TV)&lt;br/&gt;<br /> + SCART 2 (AUX)&lt;br/&gt;<br /> + HDMI&lt;br/&gt;<br /> + analog Audio Out L,R (Chinch)&lt;br/&gt;<br /> + dig. Audio Out (SPDIF, optical)&lt;br/&gt;<br /> + S-Video Out &lt;br/&gt;<br /> + RF Out&lt;br/&gt;<br /> + RF In&lt;br/&gt;<br /> <br /> Inside the box: &lt;br/&gt;<br /> + SATA for HDD (and a second SATA-Interface with no assembled Connector)&lt;br/&gt;<br /> <br /> ----<br /> <br /> = Relevant ICs =<br /> {| cellpadding=&quot;3&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! IC<br /> ! Vendor<br /> ! Description <br /> ! Datasheet <br /> |-<br /> | BCM7405<br /> | Broadcom<br /> | Multiformat HD Digital Video/Audio SoC for Satellite, IP and Cable STBs with Picture-in-Picture<br /> | [http://www.broadcom.com/products/IPTV/IPTV-Solutions/BCM7405 N/A]<br /> |-<br /> | S29GL128P<br /> | Spansion<br /> | Spansion GL NOR Flash Memory - 128MB<br /> | [http://www.spansion.com/Support/Datasheets/S29GL-P_00.pdf pdf]<br /> |-<br /> | BCM7405<br /> | Broadcom<br /> | Multiformat HD Digital Video/Audio SoC for Satellite, IP and Cable STBs with Picture-in-Picture<br /> | tbd<br /> |-<br /> | EDE5116AJBG 8E-E ( 4 on the board )<br /> | Elpida<br /> | 512Mbit DDR2 SDRAM<br /> | [http://www.elpida.com/eolpdfs/E1044E40_EOL.pdf pdf]<br /> |-<br /> | TDA10048AN ( 2 on the board )<br /> | NXP<br /> | A DSP-based DVB-T Demodulator<br /> | tbd<br /> |-<br /> | STV6417<br /> | ST<br /> | Audio/video switch and 6-channel SD video filter<br /> | [http://www.st.com/internet/imag_video/product/174515.jsp link ]<br /> |}<br /> <br /> ----<br /> <br /> = Pictures =<br /> I was not able to upload pictures to this wiki (Error: &quot;Could not create directory &quot;public/2/26&quot;.&quot;) - So here some links: &lt;br/&gt;<br /> PCB Top: [http://img513.imageshack.us/img513/8554/40823top.jpg small]&lt;br/&gt;<br /> PCB Bottom: [http://img202.imageshack.us/img202/4159/40823btm.jpg small]&lt;br/&gt;<br /> PCB SATA: [http://img856.imageshack.us/img856/7913/satam.jpg small] &lt;br/&gt;<br /> IC BCM7405: [http://img249.imageshack.us/img249/9278/bcm7405.jpg small] &lt;br/&gt;<br /> <br /> I will upload these pics in higher resolution if the wiki-upload-function does it again.<br /> <br /> <br /> [[Category:BTVision]][[Category:Hardware]][[Category:WinCe]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Main_Page 2012-04-03T20:02:49Z

<p>Dans34: Changed protection level for &quot;Main Page&quot; ([move=sysop] (indefinite))</p> <hr /> <div>__NOTOC__<br /> &lt;!-- = '''Registering''' = --&gt;<br /> &lt;!-- Style Stolen.. ahem I mean borrowed from Wikipedia Homepage --&gt;<br /> {| style=&quot;margin:4px 0 0 0; width:100%; border:1px solid #F2CECE; background:#FFF5F5; vertical-align:top; &quot;<br /> | class=&quot;MainPageBG&quot; style=&quot;width:100%; border:1px color:#000;&quot;|<br /> {| style=&quot;vertical-align:top; background:#FFF5F5; color:#000; width:100%&quot;<br /> ! style=&quot;padding:2px&quot; | &lt;h1 id=&quot;mp-tfp-h2&quot; style=&quot;margin:3px; background:#F2CECE; font-size:120%; font-weight:bold; border:1px solid #BFA3A3; text-align:left; color:#000; padding:0.2em 0.4em&quot;&gt;Welcome to the wiki of t-hack.com&lt;/h1&gt;<br /> |-<br /> | style=&quot;color:#000;padding: 2px&quot; | &lt;div id=&quot;mp-tfp&quot;&gt;<br /> T-hack.com has been founded at the 14. December 2007, to invent/improve the software on X300T/X301T and similar boxes, like DIT9719 / KISS KMM / BT Vision/ Bluewin TV-Box /V-BOX / VIP 1216. <br /> &lt;br&gt;&lt;br&gt;<br /> '''Due to severe abuse, all users will now need to contact An Administrator via PM to get a Wiki account before they can contribute.'''<br /> &lt;br /&gt;&lt;br&gt;<br /> &lt;STRIKE&gt;'''You are able to upload files with following extension (max file size 100MB):<br /> png, gif, jpg, jpeg, zip, rar, pdf, ace'''&lt;/STRIKE&gt;<br /> &lt;/div&gt;<br /> |}<br /> |}<br /> <br /> <br /> <br /> Visit the [http://www.t-hack.com/forum t-hack-Board]<br /> <br /> == Status quo (May 2009)==<br /> &lt;div style=&quot;margin:0;background-color:#ff0000;font-family:sans-serif;font-size:120%;font-weight:bold;border:1px solid;text-align:left;color:#000;padding-left:0.4em;padding-top:0.2em;padding-bottom:0.2em; width:10%;&quot;&gt;[http://www.t-hack.com/forum/index.php?topic=252.0 How-To (English)]&lt;/div&gt;<br /> <br /> '''Linux'''<br /> * You can boot linux&lt;STRIKE&gt;, but the microcodes can't (yet) be loaded . So unfortunaly you won't have an Image and sound.&lt;/STRIKE&gt;&lt;span style=&quot;color:green&quot;&gt;'''Video &amp; Audio available now'''&lt;/span&gt;<br /> <br /> '''Windows CE'''<br /> * Its possible to compile and run own native as well as .NET-based applications on the box. Also its possible to debug it with MSVC2005 &amp; MSVC2008 (MSVC = Microsoft Visual Studio).<br /> <br /> '''You can run any Code on the box''' but you need a Modchip or an external PC to patch the security-features. Soldering is required! Also you've to connect the internal HD to a PC for software-modifications once.<br /> <br /> &lt;!-- = '''Registering''' = --&gt;<br /> &lt;!-- Style Stolen.. ahem I mean borrowed from Wikipedia Homepage --&gt;<br /> {| style=&quot;margin:4px 0 0 0; width:100%; border:1px solid #F2CECE; background:#FFF5F5; vertical-align:top; &quot;<br /> | class=&quot;MainPageBG&quot; style=&quot;width:100%; border:1px color:#000;&quot;|<br /> {| style=&quot;vertical-align:top; background:#FFF5F5; color:#000; width:100%&quot;<br /> ! style=&quot;padding:2px&quot; | &lt;h1 id=&quot;mp-tfp-h2&quot; style=&quot;margin:3px; background:#F2CECE; font-size:120%; font-weight:bold; border:1px solid #BFA3A3; text-align:left; color:#000; padding:0.2em 0.4em&quot;&gt;Willkommen zum Wiki von t-hack.com&lt;/h1&gt;<br /> |-<br /> | style=&quot;color:#000;padding: 2px&quot; | &lt;div id=&quot;mp-tfp&quot;&gt;<br /> Das t-hack.com - Projekt wurde am 14. Dezember 2007 ins Leben gerufen, um eine alternative Software für die Multimedia-Box X300T bzw. X301T und baugleiche Boxen zu entwickeln bzw. die originale zu verbessern ;)<br /> &lt;br&gt;&lt;br&gt;<br /> '''Das Wiki ist zum Schutz vor Spambots nur von registrierten Usern nutzbar.'''<br /> &lt;br /&gt;&lt;br&gt;<br /> &lt;STRIKE&gt;''''Es ist möglich folgende Dateitypen hochzuladen (max Dateigröße 100MB):<br /> png, gif, jpg, jpeg, zip, rar, pdf, ace'''&lt;/STRIKE&gt;<br /> &lt;/div&gt;<br /> |}<br /> |}<br /> Besuchen Sie auch das [http://www.t-hack.com/forum t-hack-Forum]<br /> <br /> <br /> == Momentaner Status (Mai 2009)==<br /> <br /> &lt;div style=&quot;margin:0;background-color:#ff0000;font-family:sans-serif;font-size:120%;font-weight:bold;border:1px solid;text-align:left;color:#000;padding-left:0.4em;padding-top:0.2em;padding-bottom:0.2em; width:10%;&quot;&gt;[http://www.t-hack.com/forum/index.php?topic=244.0 How-To (Deutsch)]&lt;/div&gt;<br /> <br /> '''Linux'''<br /> * Linux kann auf der Box gebootet werden&lt;STRIKE&gt;, da aber immer noch keine Microcodes geladen werden können, macht das wenig Sinn (Keine Ausgabe von Bild/Ton möglich).&lt;/STRIKE&gt;&lt;span style=&quot;color:green&quot;&gt;'''Nun gibts Audio &amp; Video :)'''&lt;/span&gt;<br /> <br /> '''Windows CE'''<br /> * Es ist möglich eigene native Anwendungen als auch .net-basierende Anwendungen auf der Box auszuführen und mit MSVC2005 &amp; MSVC2008 (MSVC = Microsoft Visual Studio) zu debuggen.<br /> <br /> Konkret heisst das : &lt;b&gt;Beliebigen, eigenen Code auf der Box ausführen ist möglich!&lt;/b&gt;<br /> <br /> Erforderlich ist ein Modchip oder ein zusätzlicher Rechner (zum Patchen), &lt;u&gt;jegliche&lt;/u&gt; Modifikation setzt das Löten an der Box und das zumindest einmalige Ausbauen der Festplatte voraus!<br /> <br /> {| cellpadding=&quot;10&quot;<br /> | valign=&quot;top&quot; width=&quot;30%&quot;|<br /> <br /> == Hardware ==<br /> *[[Picture|Hardware Images]]<br /> *[[Schematic/Boardlayout]]<br /> *[[hardware-versions]]<br /> *[[SMP8634]]<br /> *[[eJTAG|eJTAG on PCB]]<br /> *[[eJTAG on SMP]]<br /> *[[UART0|Serial Debug Port]]<br /> *[[Display]]<br /> *[[X300t_tuner| X300t Tuner]]<br /> *[[BT_Vision_Box_40823]]<br /> <br /> == Additional smp8634 / tango2 stuff==<br /> *[[A_detailed_look_at_the_boot_process| A detailed look at the boot process]]<br /> *[[XRPC| The WinCE way of making XRPC calls]]<br /> *[[Xrpc_call_list| XRPC list including descriptions]]<br /> *[[Smp8634_certificate_stuff| Smp8634 certificate information]]<br /> *[[Common_pitfalls_when_working_with_smp_based_devices|Common pitfalls when working with smp based devices]]<br /> <br /> ==Linux==<br /> * How Sigma's [[RUA]] Package works<br /> *[[Toolchain]]<br /> *[[Toolchain_new]]<br /> *[[Howto boot Linux]]<br /> *[[Setup NFS-Root-Filesystem]]<br /> *IPTV-fähiger Router mit [[fli4l]]<br /> **[[Grundinformationen]]<br /> **[[Wir legen los]]<br /> **[[Konfiguration anpassen]]<br /> **[[Wichtige Links]]<br /> **[[ein Wort in eigener Sache]]<br /> *[[some additional output regarding Linux]]<br /> *[[Dvi.bin]]<br /> | valign=&quot;top&quot; width=&quot;30%&quot;|<br /> <br /> ==Software==<br /> *[[Boot Process]]<br /> **[[Bootloader]]<br /> ***[[pictures inside bootloader]]<br /> *[[Tools]]<br /> **[[Dump X300T Bootloader]]<br /> **[[Disable X300T Signature Check]]<br /> **[[Upload YAMON]]<br /> **[[NK.BIN_toolset]]<br /> **[[MakeNK]]<br /> **[[Download Update Files]]<br /> **[[NK.BIN Patcher]]<br /> **[[Debug Files for remote debugging]]<br /> *[[Bootstrap-Message]]<br /> *[[HDD-Layout]]<br /> *[[Network-Bootstrap]]<br /> *[[TV2ClientCE.exe]]<br /> *[[BooterCE.exe]]<br /> *[[TFTP]]<br /> *[[ATmega88]]<br /> *[[A_closer_look_at_TV2Engine_MacrovisionEnable|A closer look at TV2Engine_MacrovisionEnable]]<br /> *[[Smp8634_certificate_stuff]]<br /> <br /> ==WinCE==<br /> *[[Disable TrustModel]]<br /> <br /> | valign=&quot;top&quot; width=&quot;30%&quot;|<br /> ==Links/Information==<br /> *[[Bootlog??|Bootlog of Beta X300T]]<br /> *[[x300tBeta|Flash dump of Beta X300T]]<br /> *[[Workaround, damit mehrere Settopboxen im Netz sind und die Timeshift-Funktion erhalten bleibt]]<br /> *[[PKG.DIR]]<br /> *[[NK.BIN]]<br /> *[[Media:131008_AN.zip|x300t client&lt;-&gt;server xml communication dump]]<br /> <br /> ==Pirelli STB HY100 (aka IP100)==<br /> *[[UART0 output]]<br /> *[[Pictures]]<br /> *[[Firmware Aufbau Arcor]]<br /> <br /> ==Netbox 8160==<br /> <br /> *[[Netbox 8160 presentation]]<br /> <br /> ==Other SMP based boxes==<br /> *[[SMP_Boxes]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=EJTAG 2012-04-03T19:54:14Z

<p>Dans34: </p> <hr /> <div>== JTAG on the SMP863x ==<br /> <br /> eJTAG is a debug interface specified bei MIPS. it is an extension of the standard JTAG specification.<br /> <br /> Since the SMP863x CPU has a MIPS core, it also has a JTAG port :) But it is deactivated by default :(<br /> <br /> In case of the X300T there is a eJTAG connector and also a jumper to activate the eJTAG, as shown in the image below. The jumper can be permanently shorted. For DIT9719 PCB follow [[DIT9719 PCB]].<br /> <br /> Only the pins TDI, TDO, TMS, TCK and GND are needed to make the interface work.<br /> <br /> eJTAG Pinout of the X300T<br /> [[image:Pinout.jpg|300px|eJTAG Pinout of the X300T]]<br /> <br /> == How to get an Interface ==<br /> <br /> The easiest solution to use the eJTAG interface is to build an unbuffered DLC5 JTAG interface found below.<br /> <br /> If you decide to buy a JTAG interface you should be aware the the 14pin header of most JTAG interfaces use a different pinout then the eJTAG.<br /> So you might have to fix the cable to correct the pinout.<br /> <br /> <br /> <br /> == DLC5 JTAG ==<br /> [[image:JTAGunbuffered.png]] [[image:DLC5-Sample.JPG|right|thumb|300px|my cable]]<br /> <br /> or<br /> <br /> [[Image:Wrt jtag-kabel schaltung.gif]]<br /> <br /> ;Advantage<br /> * easy to build <br /> * very cheap<br /> * no power supply needed<br /> <br /> ;Disadvantage<br /> * interface cable has to be rather short to avoid transmission errors. 10-20cm is probably the maximum length. shorter == better<br /> <br /> == Wiggler Clone JTAG ==<br /> An alternative is to use a Wiggler-Clone .. (the original Wiggler interface cost 150$)<br /> <br /> [[image:Wiggler.png]]<br /> <br /> ;Advantage<br /> * interface cable can be a bit longer .. probably 30-50cm, but also in this case, shorter == better<br /> * Macraigor software can be used<br /> * the target systems CPU is protected by the buffer<br /> <br /> ;Disadvantage<br /> * more complicated to build<br /> * more expensive but still cheap<br /> <br /> [[category:Hardware]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Hardware-versions 2012-04-03T19:54:06Z

<p>Dans34: </p> <hr /> <div>=== X300T ===<br /> &quot;NO&quot; means that jtag has to be enabled on the chip because the pcb trace is missing, it does NOT mean that there is no jtag available!&lt;br&gt;<br /> &quot;NO&quot; bedeutet nur das das JTAG am Prozessor selber aktviert werden muss weil die entsprechende Leiterbahn auf der Platine fehlt, nicht das kein JTAG vorhanden ist !<br /> <br /> {| cellpadding=&quot;5&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Box Revision <br /> ! Date <br /> ! SMP Revision <br /> ! Bootloader Version <br /> ! JTAG works <br /> ! reported by<br /> |-<br /> | Rev 05 <br /> | U7 <br /> | Rev A <br /> | 1039 <br /> | YES <br /> | Asgard <br /> |-<br /> | Rev 05 <br /> | U8 <br /> | Rev A <br /> | 1039 <br /> | YES <br /> | Sumo <br /> |-<br /> | Rev 05 <br /> | U10 <br /> | Rev A C0 <br /> | 1051 <br /> | YES <br /> | mce2222 <br /> |-<br /> | Rev 05 <br /> | U10 <br /> | Rev A C0 <br /> | 1051 <br /> | YES <br /> | guteseite <br /> |-<br /> | Rev 0D <br /> | U11 <br /> | Rev A C0 <br /> | 1051 <br /> | NO <br /> | guteseite <br /> |-<br /> | Rev 0D <br /> | U12 <br /> | Rev A C0 <br /> | 1051 <br /> | NO <br /> | Karlheinz <br /> |-<br /> | Rev 0H <br /> | V01 <br /> | Rev B <br /> | 1051 <br /> | NO <br /> | JimRaynor/Hoernchen<br /> |-<br /> | Rev 0J <br /> | ?? <br /> | Rev B <br /> | 1051 <br /> | NO <br /> | Paul <br /> |-<br /> | Rev 0L <br /> | ?? <br /> | Rev B <br /> | 1051 <br /> | NO <br /> | smplasma <br /> |}<br /> <br /> === X301T ===<br /> <br /> {| cellpadding=&quot;5&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Box Revision <br /> ! Date <br /> ! SMP Revision <br /> ! Bootloader Version <br /> ! JTAG works <br /> ! reported by<br /> |-<br /> | ??<br /> | ??<br /> | Rev B<br /> | 1053<br /> | NO<br /> | Kapacity<br /> |-<br /> | Rev 0E<br /> | V10<br /> | Rev B<br /> | 1053<br /> | NO<br /> | Hoernchen<br /> |-<br /> | Rev 0H<br /> | W1<br /> | ??<br /> | 1.1053<br /> | ??<br /> | Zeuge<br /> |}<br /> <br /> === Philips DIT9719 ===<br /> <br /> {| cellpadding=&quot;5&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Box Revision <br /> ! Date <br /> ! SMP Revision <br /> ! Bootloader Version <br /> ! JTAG works <br /> ! reported by<br /> |-<br /> | 05<br /> | Dec 2006<br /> | 0711 Rev B<br /> | 1527<br /> | Yes<br /> | ??<br /> |-<br /> | 05_L3<br /> | Dec 2007<br /> | 0750 Rev B <br /> | 1527<br /> | Yes<br /> | redband<br /> |}<br /> <br /> === Philips DIT7421 ===<br /> <br /> {| cellpadding=&quot;5&quot; cellspacing=&quot;0&quot; border=&quot;1&quot;<br /> ! Box Revision <br /> ! Date <br /> ! SMP Revision <br /> ! Bootloader Version <br /> ! JTAG works <br /> ! reported by<br /> |-<br /> | 05<br /> | Jan 2008<br /> | Rev B <br /> | ??<br /> | Yes<br /> | is0-mick &amp; Verg0<br /> |}<br /> <br /> * JTAG will also work if 10k resistor packs are omitted with the JTAG modification by is0-mick<br /> * http://www.t-hack.com/forum/index.php?topic=380.0<br /> [[category:Hardware]][[category:EN]][[category:DE]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=SMP8634 2012-04-03T19:54:02Z

<p>Dans34: </p> <hr /> <div>=== SMP8634 ===<br /> <br /> This is the CPU of the box. Manufacturer is SigmaDesigns.<br /> <br /> It is a powerful MIPS based CPU (4KCe core) with hardware acceleration for h.264, mpeg2 and vc1. <br /> <br /> The SMP also includes a security co processor ([[XPU]]) that makes this chip very interesting for any DRM application, as all private keys are stored inside the CPU.It is not possible to get those private keys out :(<br /> <br /> The [[XPU]] has AES en/decryption in hardware.<br /> <br /> === SDK ===<br /> <br /> There is a Linux SDK and a WindowsCE BSP. Both are confidential and currently not leaked.<br /> <br /> The X300T uses a stripped down version of the WindowsCE BSP.<br /> [[category:Hardware]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Schematic/Boardlayout 2012-04-03T19:53:06Z

<p>Dans34: </p> <hr /> <div>[[Image:Boardstruktur.jpg|thumb|750px|Board-Layout]]<br /> <br /> '''Anschlüsse'''<br /> <br /> *J1 zum Frontpanel<br /> <br /> *J2 vom Netzteil<br /> <br /> *J3 IDE<br /> <br /> *J4 UART0<br /> <br /> *J5 JTAG / UART1<br /> <br /> *J6 Mini-PCI für W-LAN unbestückt<br /> <br /> *J8 interne USB zur Front<br /> <br /> *J10 SPI Tuner interface<br /> <br /> *J11 SPI Tuner interface<br /> <br /> *J14 evtl. LAN/USB/??? (an der Rückseite neben J13 (Composite/SVideo))<br /> ** Nur zwei Pins, also weder LAN noch USB. [[User:Plenkk|Plenkk]] 11:35, 4 February 2008 (CET)<br /> <br /> <br /> *BT1 Batterie<br /> <br /> <br /> *JP1 Jumper / open:UART1 / short: JTAG<br /> <br /> *JP2 Jumper / short: enable netboot<br /> <br /> <br /> *U6 ???<br /> <br /> *U7 Prozessor Sigma Design SMP8634LF<br /> <br /> *U8-U11 Speicher Infineon HYB 25DC 256 160CE-5<br /> <br /> *U12(A) Flash MX29LV800CBTC-70G (Bios/Firmware)<br /> <br /> *U13(A) unbestückt vermutlich Flash-Erweiterung<br /> <br /> *U16 RTL 8201CP<br /> <br /> *U17 Silicon Image SN9002C5U (HDMI)<br /> <br /> *U19 AKM AK4702VQ (Video, Scard etc.)<br /> <br /> <br /> *SW1 reset?<br /> <br /> <br /> [[Image:Pinout.jpg|thumb|100px|left|J4/J5 Pinout]]<br /> <br /> [[Image:Kmm3210_schema.gif|thumb|450px|left|Funktions Schema]]<br /> <br /> [[category:Hardware]][[category:DE]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Hardware_Images 2012-04-03T19:52:35Z

<p>Dans34: </p> <hr /> <div>==Unknown Box==<br /> &lt;gallery&gt;<br /> Image:IMG 2239.JPG<br /> Image:IMG 2241.JPG<br /> Image:IMG 2242.JPG<br /> Image:IMG 2245.JPG<br /> Image:IMG 2246.JPG<br /> Image:JP_1_without_connection.JPG<br /> Image:X300-jtag-rev05.jpg<br /> Image:IMG 2247.JPG<br /> Image:IMG 2249.JPG<br /> Image:IMG 2250.JPG<br /> Image:IMG 2251.JPG<br /> Image:IMG 2252.JPG<br /> Image:Backside_JP_1.jpg<br /> Image:IMG 2253.JPG<br /> Image:IMG 2255.JPG<br /> Image:IMG 2256.JPG<br /> Image:IMG 2257.JPG<br /> Image:IMG 2261.JPG<br /> Image:JP2.JPG<br /> <br /> &lt;/gallery&gt;<br /> <br /> <br /> ==BT Vision==<br /> ===DIT9719===<br /> <br /> &lt;gallery&gt;<br /> Image:100_1155.JPG | Top View Of Board<br /> Image:Solderpoints.jpg<br /> &lt;/gallery&gt;<br /> <br /> <br /> ==Pirelli STB==<br /> === HY100===<br /> <br /> &lt;gallery&gt;<br /> Image:Cardr1.jpg|card reader<br /> Image:Pirelli_front.jpg|front view<br /> Image:Cardr2.jpg|card reader<br /> Image:Pirelli_top1.jpg|top view 1<br /> Image:Pirelli_top2.jpg|top view 2<br /> Image:Pirelli_bottom.jpg|bottom view 1<br /> Image:Pirelli_bottom2.jpg|bottom view 2<br /> Image:Pirelli_uart.jpg|uart0 pins<br /> Image:Pirelli-uart1.jpg|uart1 pins<br /> Image:pirelli_jtag_soldering.jpg|jtag lines soldered bga<br /> Image:Jtag enable.JPG|jtag enable<br /> <br /> <br /> &lt;/gallery&gt;<br /> <br /> [[category:Hardware]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Smp8634_certificate_stuff 2012-04-03T19:51:51Z

<p>Dans34: </p> <hr /> <div>The 8 bit CertificateType undicates the certificate type<br /> <br /> == Cert Types ==<br /> &lt;pre&gt;<br /> 0: cpuBootloader(zboot), cpuzone<br /> 1: cpucode, cpuzone, used to sign cpukernels and applications<br /> 2: xtask1, xpuzone, used to develop and release SDK DRM implementations<br /> 3: video microcode, protected risczone, used by Sigma Designs only<br /> 4: audio microcode, protected risczone, used by Sigma Designs only<br /> 5: transport demuxmicrocode, protected risczone, used by Sigma only<br /> 6: irqhandler running on xpu, xpuzone, used by Sigma Designs only<br /> 7: xtask2, xpuzone, used for Sigma Designs DRM implementations.<br /> 8: xtask3, xpuzone<br /> 9: xtask4, xpuzone<br /> 0xff: xosupdate<br /> &lt;/pre&gt;<br /> <br /> <br /> The Certificate 0&lt; ID &lt; 2048 is a ID which uniquely identifies each Certificate issued by Sigma Designs&lt;br&gt;<br /> == Known CertIDs so far, payload encrypted unless noted otherwise==<br /> &lt;pre&gt;<br /> 0000 Production video ucode<br /> 0001 Production audio ucode<br /> 0002 Production demux ucode<br /> 0003 Production irqhandler<br /> 0004 Production DRM xtask2<br /> 0004 Production xos update<br /> 0009 cpu bootloader (zboot), cpu zone)<br /> 000a cpu code, cpu zone (cpu kernels and applications))<br /> 000b cpu bootloader (zboot), cpu zone, not encrypted<br /> 000c cpu code, cpu zone (cpu kernels and applications), not encrypted<br /> <br /> 0003 Developer video ucode<br /> 0004 Developer audio ucode<br /> 0005 Developer demux ucode<br /> 0006 Developer irqhandler<br /> 000a cpu bootloader (zboot), cpu zone)<br /> 000b cpu code, cpu zone (cpu kernels and applications)<br /> 001a cpu bootloader (zboot), cpu zone), not encrypted<br /> 001b cpu code, cpu zone (cpu kernels and applications), not encrypted<br /> &lt;/pre&gt;<br /> <br /> [[Category:Hardware]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=TV2Engine_MacrovisionEnable 2012-04-03T19:51:36Z

<p>Dans34: </p> <hr /> <div>So, TV2Engine_MacrovisionEnable sounds quite interesting. Lets take a look at what it does:&lt;br&gt;<br /> &lt;pre&gt;<br /> tv2engine.dll :Function TV2Engine_MacrovisionEnable(bool val)<br /> &lt;/pre&gt;<br /> calls <br /> &lt;pre&gt;<br /> coredll.dll: ExtEscape(GetDC(0), 0x186A9, 4, &amp;val, 0, 0)<br /> &lt;/pre&gt;<br /> So, how does ExtEscape in coredll.dll call the real function ? Let's take a look at the wince source.... Shit. Still no idea.<br /> But wait ! The MSDN [http://msdn.microsoft.com/en-us/library/aa931067.aspx says]&lt;br&gt;<br /> &quot;This function allows applications to access capabilities of a particular device that are not available through the graphics display interface (GDI). The device capabilities this function accesses must be implemented by an OEM.&quot;&lt;br&gt;<br /> What might our display driver be ? (hint: ask the wince registry) - it's shareddisplay.dll. So coredll calls DrvEscape in shareddisplay.dll, so it should be easy to find it, but the driver exports only DrvEnableDriver ! A search for 0x186A9 returns no results either.&lt;br&gt;<br /> So, what does DrvEnableDriver do ? [http://msdn.microsoft.com/en-us/library/aa447741.aspx MSDN]again: &quot;[...]It fills a DRVENABLEDATA structure with the driver version number and calling addresses of functions supported by the driver.&quot;&lt;br&gt;<br /> [http://msdn.microsoft.com/en-us/library/aa447740.aspx DRVENABLEDATA]... functions... Oh, look ! The second last entry is DrvEscape. That's quite convenient.&lt;br&gt;<br /> After a small stub&lt;br&gt;<br /> [[Image:Drv1.png]]&lt;br&gt;<br /> the sub starts to load and store the functions referenced by pEngCallbacks, but then there is a suspiscious looking memcpy :&lt;br&gt;<br /> [[Image:Drv2.png]]&lt;br&gt;<br /> So, what's at memcopy's source address ? Looks like a function table:&lt;br&gt;<br /> [[Image:Drv3.png]]&lt;br&gt;<br /> Finally ! The real DrvEscape&lt;br&gt;<br /> [[Image:Drv4.png]]&lt;br&gt;<br /> The left side is not important, we know our argument is not 0x8 (= QUERYESCSUPPORT), but it's not 0x183a (= DRVESC_GETGAMMAVALUE) or 0x1839 (= DRVESC_SETGAMMAVALUE) either so.. damn it !&lt;br&gt;<br /> Another jump ! Obviously $a0 is a pointer to another function table. Like the MSDN says, &quot;dhpdev [in] Handle to the device that is getting the DrvEscape call.&quot;&lt;br&gt;<br /> DHPDEV is a unknown driver-specific struct, but [http://msdn.microsoft.com/en-us/library/aa932470.aspx DrvEnablePDEV] will return a DHPDEV struct, so let's take a look at DrvEnablePDEV, which is the first entry in the DRVENABLEDATA struct.&lt;br&gt;<br /> We know the function will return DHPDEV, so $v0 = DHPDEV. Let's follow $v0 !&lt;br&gt;<br /> [[Image:Drv5.png]]&lt;br&gt;<br /> If the function succeeds it returns $6, so obviously DHPDEV is $s6, and $s6 is the return value of our fist sub, so lets look at the first sub:&lt;br&gt;<br /> [[Image:Drv6.png]]&lt;br&gt;<br /> Obviously DHPDEV can't be 0x7b, so it has to be the return value of the sub.&lt;br&gt;<br /> [[Image:Drv7.png]]&lt;br&gt;<br /> &lt;pre&gt;<br /> new unsigned int[0x4c]<br /> &lt;/pre&gt;<br /> looks like the birth of a new DHPDEV struct, the sub gets the newly created array as $a0, so it's going to fill it with values.&lt;br&gt;<br /> [[Image:Drv8.png]]&lt;br&gt;<br /> YES!! The address gets stored at DHPDEV[0], so it has to be the address of our function table !&lt;br&gt;<br /> [[Image:Drv9.png]]&lt;br&gt;<br /> The jump is to address+0x40, so we finally found the function which handles our 0x186A9.&lt;br&gt;<br /> [[Image:Drv10.png]]&lt;br&gt;<br /> Ahem. This function does... nothing !&lt;br&gt;<br /> &lt;nowiki&gt;:(&lt;/nowiki&gt;&lt;br&gt;<br /> <br /> [[category:WinCe]][[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=ATmega88 2012-04-03T19:51:24Z

<p>Dans34: </p> <hr /> <div>The front display has an ATmega88 processor.<br /> <br /> It is possible to dump the flash and eeprom very easy, because there is no lock set.<br /> I used an AVR Dragon. I soldered some wires to J3 and connect them with my Dragon.<br /> <br /> Here are the settings I used in AVR Studio.<br /> <br /> [[Image:atmega88-fuses.png]]<br /> <br /> [[Image:atmega88-locks.png]]<br /> <br /> [[Image:atmega88-signature.png]]<br /> <br /> <br /> [[Category:Hardware]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=TFTP 2012-04-03T19:51:10Z

<p>Dans34: </p> <hr /> <div>it is possible to enable the network boot by setting the jumper JP2.<br /> <br /> Then a DRA file will be downloaded from a TFTP server at 192.168.1.200 or 0.0.0.0 ... this is hardcoded in the rom.<br /> <br /> To use a custom DRA file, the signature check has to be patch as well, so this seems to be no better than<br /> the regular boot method.<br /> <br /> <br /> More info:&lt;br&gt;<br /> http://www.t-hack.com/forum/index.php?topic=64.0 (in German)<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=BooterCE.exe 2012-04-03T19:50:59Z

<p>Dans34: </p> <hr /> <div>The BooterCE.exe is the first application that is started after the WinCE Kernel is initialized. It is a C# Application and handles the hardware initialization and also verifies the integrity of the MS IPTV application files.<br /> <br /> If there is any problem with the signature files or the hashes of any file on the first partition, a reboot will be initated, which will result in the Desaster-Recovery after some reboots.<br /> <br /> If all files are OK, the main IPTV application is started.<br /> <br /> <br /> == Replacement for BooterCE ==<br /> <br /> A replacement for the BooterCE without signature checks is now available '''[[BooterCEreplacement|here]]'''.<br /> <br /> ----<br /> <br /> It has a builtin HTTP Server listening on port 8000.<br /> A FTP Server listening on port 21 (any user/password is accepted).<br /> It searches the \Hard Disk\win\ folder for these remote-debugging files:<br /> <br /> * clientshutdown.exe<br /> * ConmanClient2.exe<br /> * DeviceAgentTransport.dll<br /> * eDbgTL.dll<br /> * TcpConnectionA.dll<br /> <br /> if they exist, they will be copied to the \windows folder and ConmanClient2.exe is started.<br /> This allows remote debugging connections from Visual Studio.<br /> <br /> the &quot;CoreConOverrideSecurity&quot; flag is also set in the registry, so that debug connections are accepted at any time<br /> <br /> [[category:WinCe]][[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=TV2ClientCE.exe 2012-04-03T19:50:14Z

<p>Dans34: </p> <hr /> <div>The main IPTV application is called TV2ClientCE.exe<br /> it was located at \Hard Disk\TV2ClientCE\TV2ClientCE.exe up to version 1.1.3981<br /> <br /> now it is located in the NK.BIN at \windows\TV2ClientCE.exe to add some confusion there is still a dummy file at the old location, but that is not used.<br /> <br /> <br /> == Configuration ==<br /> <br /> there are a lot of [[TV2ClientCE_args|commandline parameters]] to configure the TV2ClientCE application.<br /> <br /> an alternative to the commandline parameters is an xml configuration file located at \Hard Disk\TV2ClientCE\Content\tv2config.xml<br /> <br /> the [[TV2ClientCE_xml|xml config]] file can also contain the commandline parameters.<br /> <br /> == DLL imports ==<br /> &lt;pre&gt;<br /> FastAES_dll.dll bool marshal ( unsigned int8) CBCModeDec (native int core, uint8[] IV, uint8[] _in, uint32 iOff, uint8[] _out, uint32 oOff, uint32 blkCnt)<br /> FastAES_dll.dll bool marshal ( unsigned int8) CBCModeEnc (native int core, uint8[] IV, uint8[] _in, uint32 iOff, uint8[] _out, uint32 oOff, uint32 blkCnt)<br /> FastAES_dll.dll bool marshal ( unsigned int8) ComputeOMAC1 (native int core, uint8[] pIn, uint32 offset, uint32 nLen, uint8[] pOut)<br /> FastAES_dll.dll bool marshal ( unsigned int8) CtrModeDec (native int core, uint8[] counter, uint8[] _in, uint8[] _out, uint32 msgLen, uint32 offset)<br /> FastAES_dll.dll bool marshal ( unsigned int8) CtrModeEnc (native int core, uint8[] counter, uint8[] _in, uint8[] _out, uint32 msgLen, uint32 offset)<br /> FastAES_dll.dll bool marshal ( unsigned int8) DecBlk (native int core, uint8[] in_blk, uint8[] out_blk)<br /> FastAES_dll.dll bool marshal ( unsigned int8) ECBModeDec (native int core, uint8[] _in, uint8[] _out, uint32 msgLen)<br /> FastAES_dll.dll bool marshal ( unsigned int8) ECBModeEnc (native int core, uint8[] _in, uint8[] _out, uint32 msgLen)<br /> FastAES_dll.dll bool marshal ( unsigned int8) EncBlk (native int core, uint8[] in_blk, uint8[] out_blk)<br /> FastAES_dll.dll bool marshal ( unsigned int8) LoadKeyIntoCore (native int core, uint8[] in_key, uint32 klen)<br /> FastAES_dll.dll native int MakeAESCore ()<br /> FastAES_dll.dll void DestroyAESCore (native int core)<br /> MSCOREE2_0.dll string EE_GetCallStack (uint32 ThreadID, native int pWString, uint32 WcharRemaining)<br /> MSCOREE2_0.dll string palBoundedHeap_Initialize (uint32 softMax, uint32 hardMax)<br /> MSCOREE2_0.dll void GC_ReleaseMemory (valuetype Microsoft.TV2.TV2Engine/GCType 'type')<br /> MSCOREE2_0.dll void GC_SetCustomTriggerValues (uint32 collectionTrigger, int32 compactionTrigger)<br /> MSCOREE2_0.dll void PerfMonitor_ExitModule ()<br /> MSCOREE2_0.dll void PerfMonitor_SetEnabledFlags (uint32 'flags')<br /> MSCOREE2_0.dll void PerfMonitor_SetLogFileName (string pwszApp)<br /> TV2Engine.dll bool TV2Engine_GetNetworkAccessRequest ()<br /> TV2Engine.dll bool marshal ( bool) CloseHandle (native int hObject)<br /> TV2Engine.dll bool marshal ( bool) FlushFileBuffers (native int hFile)<br /> TV2Engine.dll bool marshal ( bool) GetNTPTimeEx (valuetype Microsoft.TV2.TV2NTP/GetTimeExRawData&amp; data)<br /> TV2Engine.dll bool marshal ( bool) ReadFile (native int hFile, uint8* lpBuffer, uint32 nBufferOffset, uint32 nNumberOfBytesToRead, [out] uint32&amp; lpNumberOfBytesRead)<br /> TV2Engine.dll bool marshal ( bool) SetEndOfFile (native int hFile)<br /> TV2Engine.dll bool marshal ( bool) TV2Engine_NetworkSetProfile (valuetype Microsoft.TV2.TV2Engine/NetworkProfile profile)<br /> TV2Engine.dll bool marshal ( bool) TV2Engine_RFMod_GetInfo ([in][out] uint32[] channelRangeVectors, [out] uint32&amp; channel, [out] bool&amp; marshal ( bool) enabled)<br /> TV2Engine.dll bool marshal ( bool) WriteFile (native int hFile, uint8* lpBuffer, uint32 nBufferOffset, uint32 nNumberOfBytesToWrite, [out] uint32&amp; lpNumberOfBytesWritten)<br /> TV2Engine.dll bool marshal ( unsigned int8) TV2AVEngine_SetAccountSessionKey (uint8[] key, int32 keyLength)<br /> TV2Engine.dll bool marshal ( unsigned int8) TV2Engine_AVDiag_IsStreamActive (string pipeId)<br /> TV2Engine.dll bool marshal ( unsigned int8) TV2Engine_AVDiag_IsStreamActive (string pipeId, [out] int32&amp; DRMErrors, [out] int32&amp; DecodeErrors, [out] int32&amp; DiscontinuityCount)<br /> TV2Engine.dll bool marshal ( unsigned int8) TV2Engine_AVDiag_RetrieveDiags (string pipeId, [out] char[] marshal ( unsigned int16[4096]) data, int32 dataLen)<br /> TV2Engine.dll bool marshal ( unsigned int8) TV2Engine_AVDiag_RetrieveTunerDiags (string pipeId, [out] char[] marshal ( unsigned int16[4096]) data, int32 dataLen)<br /> TV2Engine.dll bool marshal ( unsigned int8) TV2Engine_GetDiskSpaceInfo (string path, uint64&amp; total, uint64&amp; free)<br /> TV2Engine.dll bool marshal ( unsigned int8) TV2Engine_InitializeHelp2 ()<br /> TV2Engine.dll bool marshal ( unsigned int8) TV2Engine_InternetCheckConnection (string ip_addr)<br /> TV2Engine.dll bool marshal ( unsigned int8) TV2Engine_PlayUISound (string fileName, bool exclusive)<br /> TV2Engine.dll int32 TV2AVEngine_ProcessCommand (uint8[] command, uint32 commandLength, uint8[] result, uint32 resultLength, int32 timeout)<br /> TV2Engine.dll int32 TV2AVEngine_SendCC (uint32 id, int32 address, int32 port, uint8[] data, uint32 dataLength)<br /> TV2Engine.dll int32 TV2Engine_AddDumpToList (string file)<br /> TV2Engine.dll int32 TV2Engine_GetAdapterInfo (uint8[] ipAddr, int32 ipLen, uint8[] subnet, int32 subnetLen, uint8[] gateway, int32 gatewayLen, uint8[] dnsaddr, int32 dnsaddrLen, uint8[] macaddr, int32 macLen, int32&amp; leaseleft)<br /> TV2Engine.dll int32 TV2Engine_GetCapabilities (uint32 capability, [out] uint32&amp; 'value')<br /> TV2Engine.dll int32 TV2Engine_GetCertificate (uint8[] data, uint32&amp; length)<br /> TV2Engine.dll int32 TV2Engine_GetCpuUsage ([in][out] int32[] buffer, int32 bufferLength, bool marshal ( unsigned int8) UseLock)<br /> TV2Engine.dll int32 TV2Engine_GetDHCPAddress (uint8[] pDHCPAddress, int32 pOutBufLen)<br /> TV2Engine.dll int32 TV2Engine_GetDNSServerAddress (uint8[] pDNSServerAddress, int32 pOutBufLen)<br /> TV2Engine.dll int32 TV2Engine_GetDiscoveryServiceAddress (uint8[] pDiscoveryAddress, int32 iOutBufLen)<br /> TV2Engine.dll int32 TV2Engine_GetDisplayDiags (valuetype Microsoft.TV2.DISPLAY_DIAGS&amp; displayDiags)<br /> TV2Engine.dll int32 TV2Engine_GetEthernetDriverInfo (int32&amp; crc_count, int32&amp; dropped_packets, int32&amp; throughput, int32&amp; traffic_in, int32&amp; traffic_out)<br /> TV2Engine.dll int32 TV2Engine_GetFileVersion (uint64&amp; version)<br /> TV2Engine.dll int32 TV2Engine_GetGatewayAddress (uint8[] pGatewayAddress, int32 pOutBufLen)<br /> TV2Engine.dll int32 TV2Engine_GetMacAddress (uint8[] pMacAddress, int32 pOutBufLen)<br /> TV2Engine.dll int32 TV2Engine_GetSMP863XCrashData (uint8[] b_SMP863XCrashData, int32 len)<br /> TV2Engine.dll int32 TV2Engine_GetSTBType (uint8[] b_type, int32 len)<br /> TV2Engine.dll int32 TV2Engine_GetSysMem ()<br /> TV2Engine.dll int32 TV2Engine_GetVidMem ()<br /> TV2Engine.dll int32 TV2Engine_InitNetwork ()<br /> TV2Engine.dll int32 TV2Engine_LoadHal ()<br /> TV2Engine.dll int32 TV2Engine_PowerManagement_SetState (uint8 marshal ( unsigned int8) state)<br /> TV2Engine.dll int32 TV2Engine_RsaVaultDecrypt (uint8[] pbInput, uint32 cbInput, uint8[] pbOutput, uint32&amp; pcbOutput, uint32 dwFlags)<br /> TV2Engine.dll int32 TV2Engine_RsaVaultEncrypt (uint8[] pbInput, uint32 cbInput, uint8[] pbOutput, uint32&amp; pcbOutput, uint32 dwFlags)<br /> TV2Engine.dll int32 TV2Engine_RsaVaultSVerifySignature (uint8[] pbPlain, uint32 cbPlain, uint8[] pbSignature, uint32 cbSignature)<br /> TV2Engine.dll int32 TV2Engine_RsaVaultSign (uint8[] pbInput, uint32 cbInput, uint8[] pbOutput, uint32&amp; pcbOutput)<br /> TV2Engine.dll int32 TV2Engine_RsaVaultSign2 (uint8[] pbInput, uint32 cbInput, uint8[] pbOutput, uint32&amp; pcbOutput)<br /> TV2Engine.dll int32 TV2Engine_SendDumps ()<br /> TV2Engine.dll int32 TV2Engine_SetTime (valuetype Microsoft.TV2.SystemTime stime)<br /> TV2Engine.dll int32 TV2Engine_SetVideoOutputMode (uint32&amp; mode)<br /> TV2Engine.dll int32 TV2Engine_SupportsScreenMode (int32 screenMode)<br /> TV2Engine.dll int32 TV2Engine_XrayCollect (uint8[] buffer, int32 len)<br /> TV2Engine.dll int32 TV2Engine_XrayConnect (uint8[] addr, int32 port)<br /> TV2Engine.dll int32 TV2Engine_XrayConnected ()<br /> TV2Engine.dll int32 TV2Engine_XrayGetId (string name, string 'type')<br /> TV2Engine.dll int32 TV2Engine_XrayHandleNativeCommand (string cmd, string cmdline)<br /> TV2Engine.dll int32 TV2Engine_XrayRead (uint8[] buffer, int32 offset, int32 count, int32 length)<br /> TV2Engine.dll int32 TV2Engine_XraySendAllProperties ()<br /> TV2Engine.dll int32 TV2Engine_XraySetIntValue (int32 id, int32 valueData)<br /> TV2Engine.dll int32 TV2Engine_XraySetStringValue (int32 id, string valueData)<br /> TV2Engine.dll int32 TV2Engine_XraySetValueData (int32 id, uint8[] data, int32 offset, int32 len, bool marshal ( unsigned int8) prefixLength)<br /> TV2Engine.dll int32 TV2Engine_XrayUpdatesEnabled (int32 id)<br /> TV2Engine.dll int32 TV2Engine_XrayWrite (uint8[] buffer, int32 offset, int32 count)<br /> TV2Engine.dll native int CreateFile (string lpFileName, uint32 dwDesiredAccess, uint32 dwShareMode, native int lpSecurityAttributes, uint32 dwCreationDisposition, uint32 dwFlagsAndAttributes, native int hTemplateFile)<br /> TV2Engine.dll native int GetCurrentThreadHandle ()<br /> TV2Engine.dll uint32 GetFileSize (native int hFile, [out] uint32&amp; lpFileSizeHigh)<br /> TV2Engine.dll uint32 SetFilePointer (native int hFile, int32 lDistanceToMove, int32&amp; lpDistanceToMoveHigh, uint32 dwMoveMethod)<br /> TV2Engine.dll uint32 TV2AVEngine_CreateTunerSession (uint8[] pipeId)<br /> TV2Engine.dll uint32 TV2AVEngine_QueryCC ([out] int32&amp; 'type', uint8[] result, uint32 resultLength, [out] uint32&amp; length, int32 timeout)<br /> TV2Engine.dll uint32 TV2Engine_CodePitch ()<br /> TV2Engine.dll uint32 TV2Engine_GetBoxVendor ()<br /> TV2Engine.dll uint32 TV2Engine_GetCPUSpeed ()<br /> TV2Engine.dll uint32 TV2Engine_GetManagedHeapSize ()<br /> TV2Engine.dll uint32 TV2Engine_GetReleaseTracingMaximumCharacterCount ()<br /> TV2Engine.dll uint32 TV2Engine_PowerManagement_SetPowerRequirement ()<br /> TV2Engine.dll uint32 TV2Engine_ScaleImage (uint8[] imageData, uint32 imageDataLen, uint32 width, uint32 height, uint8[] outImageData)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_AddBoundaryKeyToDRMContext (native int ctx, uint8[] protID, uint8[] data, uint32 len)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_AddSessionKeyToDRMContext (native int ctx, uint8[] id, uint8[] data, uint32 len)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_CreateDRMContext (native int&amp; pOutCtx, string dbgName)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_CreateMessageSignature (uint8[] message, uint32 messageLen, uint8[] signature, uint32&amp; pSignatureLen, valuetype Microsoft.TV2.Security.TV2SecureCore/HashType hashType, valuetype Microsoft.TV2.Security.TV2SecureCore/SignatureScheme signatureScheme)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_CreateOMAC1SignatureKeyProvided (uint8[] message, uint32 messageOffset, uint32 messageLen, uint8[] signature, uint32&amp; signatureLen, uint8[] key, uint32 keyLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_DRMGetPublicCert (uint8[] myPubCert, uint32&amp; pPubCertBufLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_DRMPrepareBoundaryKey (uint8[] keyID)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_DRMPrepareSessionKey (uint8[] keyID)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_DRMVerifyOMAC1Signature (uint8[] keyID, uint8[] message, uint32 messageLen, uint8[] signature, uint32 signatureLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_DecryptMessage (uint8[] message, uint32 messageOffset, uint32 messageLen, uint8[] key, uint32 keyLen, uint8[] iv, valuetype Microsoft.TV2.Security.TV2SecureCore/CipherMode mode, uint8[] decryptedMessage, uint32 decryptedMessageOffset, uint32&amp; decryptedMessageLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_Deinit ()<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_DestroyDRMContext (native int ctx)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_EncryptMessage (uint8[] message, uint32 messageOffset, uint32 messageLen, uint8[] key, uint32 keyLen, uint8[] iv, valuetype Microsoft.TV2.Security.TV2SecureCore/CipherMode mode, uint8[] encryptedMessage, uint32 encryptedMessageOffset, uint32&amp; encryptedMessageLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_FlushBoundaryKeyFromDRMContext (native int ctx, uint8[] keyID)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_FlushSessionKeyFromDRMContext (native int ctx, uint8[] keyID)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_GetDeviceId (class [mscorlib]System.Text.StringBuilder deviceId, uint32&amp; maxDeviceIdLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_GetNonAVCert (uint8[] myPubCert, uint32&amp; pPubCertBufLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_GetNonAVModulusLengthInBytes ([out] uint32&amp; len)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_GetRandomNumber (uint8[] buffer, uint32 bufferLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_Init (uint8[] diagBuffer, int32 diagBufferLen, bool marshal ( unsigned int8) bServerAuth)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_LoadPublicKey (uint8[] cert, uint32 certLen, uint8[] chain, uint32 chainLen, native int&amp; publicKey)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_RSADecryptMessage (uint8[] message, uint32 messageLen, uint8[] decryptedMessage, uint32&amp; decryptedMessageLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_RSAEncryptMessage (uint8[] message, uint32 messageLen, uint8[] encryptedMessage, uint32&amp; encryptedMessageLen, native int publicKeyRegisterIndex)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_UnloadPublicKey (native int publicKey)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_VerifyMessageSignature (uint8[] message, uint32 messageLen, uint8[] signature, uint32 signatureLen, valuetype Microsoft.TV2.Security.TV2SecureCore/HashType hashType, valuetype Microsoft.TV2.Security.TV2SecureCore/SignatureScheme signatureScheme, native int publicKeyRegisterIndex)<br /> TV2Engine.dll valuetype Microsoft.TV2.Security.TV2SecureCore/ErrorCode TV2SecureCore_VerifyOMAC1SignatureKeyProvided (uint8[] message, uint32 messageLen, uint8[] signature, uint32 signatureLen, uint8[] key, uint32 keyLen)<br /> TV2Engine.dll valuetype Microsoft.TV2.TV2EngineError TV2Engine_Create ()<br /> TV2Engine.dll valuetype Microsoft.TV2.TV2EngineError TV2Engine_InitAVConfig (valuetype Microsoft.TV2.AV.AVEngine/AVEngineParams&amp; p)<br /> TV2Engine.dll valuetype Microsoft.TV2.TV2EngineError TV2Engine_InitializeNTP (uint32 NtpServer)<br /> TV2Engine.dll void CloseThreadHandle (native int h)<br /> TV2Engine.dll void TV2AVEngine_DeleteTunerSession (uint32 handle)<br /> TV2Engine.dll void TV2AVEngine_Detune (uint32 handle, bool marshal ( unsigned int8) forceDetune, bool marshal ( unsigned int8) teardownPicture)<br /> TV2Engine.dll void TV2AVEngine_DisplayIFrame (uint32 handle, uint8[] address, uint8[] length)<br /> TV2Engine.dll void TV2AVEngine_GetCurrentMediaTime (uint32 handle, bool marshal ( unsigned int8) smooth, [out] uint64&amp; ntp)<br /> TV2Engine.dll void TV2AVEngine_GetNormalPlayTime (uint32 handle, bool marshal ( unsigned int8) smooth, [out] uint64&amp; npt)<br /> TV2Engine.dll void TV2AVEngine_KeyDown (string pipeId, int32 key)<br /> TV2Engine.dll void TV2AVEngine_Pause (uint32 handle)<br /> TV2Engine.dll void TV2AVEngine_PauseLive (uint32 handle, uint8[] url)<br /> TV2Engine.dll void TV2AVEngine_PipeOwnsAudio (string pipeId)<br /> TV2Engine.dll void TV2AVEngine_Play (uint32 handle)<br /> TV2Engine.dll void TV2AVEngine_PlayComponent (uint32 handle, uint8[] component, int32 pid)<br /> TV2Engine.dll void TV2AVEngine_SendTune (uint32 id, int32 'type', uint8[] data, uint32 dataLength)<br /> TV2Engine.dll void TV2AVEngine_SetAccessControl (uint32 handle, bool marshal ( unsigned int8) video, [out] uint64&amp; videoStartTime, [out] uint64&amp; videoEndTime, bool marshal ( unsigned int8) audio, [out] uint64&amp; audioStartTime, [out] uint64&amp; audioEndTime)<br /> TV2Engine.dll void TV2AVEngine_SetAudioLanguage (uint32 handle, int32 iso639LanguageCode, int32 'type', int32 pid)<br /> TV2Engine.dll void TV2AVEngine_SetCCChannel (uint32 handle, int32 cc608, int32 cc708)<br /> TV2Engine.dll void TV2AVEngine_SetSAPSelection (uint32 handle, bool marshal ( unsigned int8) useSap)<br /> TV2Engine.dll void TV2AVEngine_SetSubtitleLanguage (uint32 handle, int32 iso639LanguageCode, int32 'type', int32 pid)<br /> TV2Engine.dll void TV2AVEngine_Step (uint32 handle, int32 direction)<br /> TV2Engine.dll void TV2AVEngine_StopComponent (uint32 handle, uint8[] component)<br /> TV2Engine.dll void TV2AVEngine_ToggleSDOnlyTuneFlag ()<br /> TV2Engine.dll void TV2AVEngine_Tune (uint32 handle, uint32 mediaTransportId, uint8[] url, int32 action, int32[] timings)<br /> TV2Engine.dll void TV2AVEngine_TuneRefresh (uint32 handle, uint8[] url)<br /> TV2Engine.dll void TV2Engine_AVDiag_RegisterCallback (class Microsoft.TV2.AV.AVEngineDiagnostics/AVDiagCallback callback)<br /> TV2Engine.dll void TV2Engine_AVDiag_UnregisterCallback (class Microsoft.TV2.AV.AVEngineDiagnostics/AVDiagCallback callback)<br /> TV2Engine.dll void TV2Engine_AddReleaseTracingData (string data, uint32 length)<br /> TV2Engine.dll void TV2Engine_CELOG (string fileName)<br /> TV2Engine.dll void TV2Engine_ClientUpgradeRemoveFile ()<br /> TV2Engine.dll void TV2Engine_Crash ()<br /> TV2Engine.dll void TV2Engine_Destroy ()<br /> TV2Engine.dll void TV2Engine_DispatchEvent (string eventstring)<br /> TV2Engine.dll void TV2Engine_EndBatch (uint8[] buffer, int32 len)<br /> TV2Engine.dll void TV2Engine_FormatVolume (string patth)<br /> TV2Engine.dll void TV2Engine_GetHeapInfo ([out] valuetype Microsoft.TV2.HeapInfo&amp; info)<br /> TV2Engine.dll void TV2Engine_GetNTPTime (uint64&amp; time)<br /> TV2Engine.dll void TV2Engine_GetReleaseTracingData ([out] char[] data, uint32 dataLength, [out] uint32&amp; charsWritten)<br /> TV2Engine.dll void TV2Engine_GetThreadTimes ([in][out] valuetype Microsoft.TV2.TV2Engine/ThreadInfo[0...,0...] threads, int32 length, bool marshal ( unsigned int8) UseLock)<br /> TV2Engine.dll void TV2Engine_GetTime (valuetype Microsoft.TV2.SystemTime&amp; stime)<br /> TV2Engine.dll void TV2Engine_InitGraphics (valuetype Microsoft.TV2.CompositorParams&amp; cp)<br /> TV2Engine.dll void TV2Engine_LogCrash (string crashlogDir)<br /> TV2Engine.dll void TV2Engine_MacrovisionEnable (bool marshal ( unsigned int8) enable)<br /> TV2Engine.dll void TV2Engine_ManagedOOMCrash (int64 totalAllocatedMemory, string ex, string stack)<br /> TV2Engine.dll void TV2Engine_NoScavengeDvr ()<br /> TV2Engine.dll void TV2Engine_PowerManagement_ReleasePowerRequirement (uint32 hPower)<br /> TV2Engine.dll void TV2Engine_QueryPerformanceCounter (int64&amp; counter)<br /> TV2Engine.dll void TV2Engine_QueryPerformanceFrequency (int64&amp; frequency)<br /> TV2Engine.dll void TV2Engine_RFMod_Disable ()<br /> TV2Engine.dll void TV2Engine_RFMod_Enable ()<br /> TV2Engine.dll void TV2Engine_RFMod_SetChannel (uint32 channel)<br /> TV2Engine.dll void TV2Engine_RegisterForGCStats ()<br /> TV2Engine.dll void TV2Engine_RestartBox ()<br /> TV2Engine.dll void TV2Engine_SCART_DisableVCRLoopThru (bool marshal ( unsigned int8) bDisableLoopThru)<br /> TV2Engine.dll void TV2Engine_ScanVolume (string patth)<br /> TV2Engine.dll void TV2Engine_SetDiskReservedSpace (uint32 diskSizeInMegabytes)<br /> TV2Engine.dll void TV2Engine_SetFileAttributes (string fileName, int32 attributes)<br /> TV2Engine.dll void TV2Engine_SetLED (valuetype Microsoft.TV2.TV2LED led, uint32 mode)<br /> TV2Engine.dll void TV2Engine_SetRadioFrequencyRemoteHomeId (int32 homeId)<br /> TV2Engine.dll void TV2Engine_SetThreadPriority (uint32 priority)<br /> TV2Engine.dll void TV2Engine_SetTimeZone (valuetype Microsoft.TV2.TimeZoneInfo&amp; tzi, string StandardName, string DaylightName)<br /> TV2Engine.dll void TV2Engine_SetVolume (int32 volume, bool marshal ( unsigned int8) mute)<br /> TV2Engine.dll void TV2Engine_StartMonitorHardDisk ()<br /> TV2Engine.dll void TV2Engine_TVEnable (bool marshal ( unsigned int8) enable)<br /> TV2Engine.dll void TV2Engine_TickleWatchdog ()<br /> TV2Engine.dll void TV2Engine_TracerEvent (uint32 'type')<br /> TV2Engine.dll void TV2Engine_TracerEvent4 (uint32 'type', uint32 p0, uint32 p1, uint32 p2, uint32 p3)<br /> TV2Engine.dll void TV2Engine_TracerPrintMessage (string message)<br /> TV2Engine.dll void TV2Engine_TriggerOSCapture ()<br /> TV2Engine.dll void TV2Engine_UnMountFileSystem ()<br /> TV2Engine.dll void TV2Engine_WSEnable (bool marshal ( unsigned int8) enable)<br /> TV2Engine.dll void TV2Engine_XrayDisconnect ()<br /> TV2Engine.dll void TV2Engine_XrayEnableUpdates (int32 id, bool marshal ( unsigned int8) enable)<br /> coredll.dll bool SendMessage (native int hWnd, uint32 Msg, native int wParam, valuetype Microsoft.TV2.UI.TasmanPage/Win32/COPYDATASTRUCT_String&amp; lParam)<br /> coredll.dll bool marshal ( bool) AddFontResource (string lpszFilename)<br /> coredll.dll bool marshal ( bool) CryptAcquireContext ([out] native int&amp; phProv, string pszContainer, string pszProvider, uint32 dwProvType, uint32 dwFlags)<br /> coredll.dll bool marshal ( bool) CryptAcquireContext (native int&amp; phProv, string pszContainer, string pszProvider, uint32 dwProvType, uint32 dwFlags)<br /> coredll.dll bool marshal ( bool) CryptCreateHash (native int hProv, uint32 Algid, native int hKey, uint32 dwFlags, native int&amp; phHash)<br /> coredll.dll bool marshal ( bool) CryptDecrypt (native int hKey, native int hHash, bool marshal ( bool) 'final', uint32 dwFlags, uint8[] pbData, uint32&amp; pdwDataLen)<br /> coredll.dll bool marshal ( bool) CryptDestroyHash (native int hHash)<br /> coredll.dll bool marshal ( bool) CryptDestroyKey (native int hKey)<br /> coredll.dll bool marshal ( bool) CryptDuplicateKey (native int hKey, native int pvReserved, uint32 dwFlags, [out] native int&amp; hDupKey)<br /> coredll.dll bool marshal ( bool) CryptEncrypt (native int hKey, native int hHash, bool marshal ( bool) 'final', uint32 dwFlags, uint8[] pbData, uint32&amp; pdwDataLen, uint32 dwBufLen)<br /> coredll.dll bool marshal ( bool) CryptExportKey (native int hKey, native int hExpKey, uint32 dwBlobType, uint32 dwFlags, uint8[] pbData, uint32&amp; pdwDataLen)<br /> coredll.dll bool marshal ( bool) CryptGenKey (native int hProv, uint32 algid, uint32 dwFlags, [out] native int&amp; hKey)<br /> coredll.dll bool marshal ( bool) CryptGenRandom (native int hProv, int32 dwLen, uint8[] pbBuffer)<br /> coredll.dll bool marshal ( bool) CryptGenRandom (native int hProv, uint32 dwLen, uint8[] pbBuffer)<br /> coredll.dll bool marshal ( bool) CryptGetHashParam (native int hHash, uint32 dwParam, uint8[] pbData, uint32&amp; pdwDataLen, uint32 dwFlags)<br /> coredll.dll bool marshal ( bool) CryptGetKeyParam (native int hKey, uint32 dwParam, uint32&amp; pbData, uint32&amp; pdwDataLen, uint32 dwFlags)<br /> coredll.dll bool marshal ( bool) CryptGetProvParam (native int hCryptProv, valuetype Microsoft.TV2.Crypto.CryptoLib/CryptGetProvParamType dwParam, uint8[] pvData, int32&amp; pcbData, uint32 dwFlags)<br /> coredll.dll bool marshal ( bool) CryptGetUserKey (native int hProv, uint32 dwKeySpec, native int&amp; phUserKey)<br /> coredll.dll bool marshal ( bool) CryptHashData (native int hHash, uint8[] pbData, uint32 dwDataLen, uint32 dwFlags)<br /> coredll.dll bool marshal ( bool) CryptHashSessionKey (native int hHash, native int hKey, uint32 dwFlags)<br /> coredll.dll bool marshal ( bool) CryptImportKey (native int hProv, uint8[] pbData, uint32 dwDataLen, native int hPubKey, uint32 dwFlags, native int&amp; phKey)<br /> coredll.dll bool marshal ( bool) CryptReleaseContext (native int hProv, uint32 dwFlags)<br /> coredll.dll bool marshal ( bool) CryptSignHash (native int hHash, uint32 dwKeySpec, string sDescription, uint32 dwFlags, uint8[] pbSignature, uint32&amp; pdwSigLen)<br /> coredll.dll bool marshal ( bool) CryptVerifySignature (native int hHash, uint8[] pbSignature, uint32 dwSigLen, native int hPubKey, string sDescription, uint32 dwFlags)<br /> coredll.dll bool marshal ( bool) DestroyWindow (native int hwnd)<br /> coredll.dll bool marshal ( bool) GetThreadTimes (native int threadHandle, [out] valuetype Microsoft.TV2.TV2Thread/FILETIME&amp; createTime, [out] valuetype Microsoft.TV2.TV2Thread/FILETIME&amp; exitTime, [out] valuetype Microsoft.TV2.TV2Thread/FILETIME&amp; kernelTime, [out] valuetype Microsoft.TV2.TV2Thread/FILETIME&amp; userTime)<br /> coredll.dll bool marshal ( bool) KillTimer (native int hwnd, native uint nIDEvent)<br /> coredll.dll bool marshal ( bool) PeekMessage (class Microsoft.TV2.NativeMethods.Win32API/MSG msg, native int hwnd, uint32 nMsgFilterMin, uint32 nMsgFilterMax, uint32 wRemoveMsg)<br /> coredll.dll bool marshal ( bool) PostMessage (native int hWnd, uint32 Msg, native int wParam, native int lParam)<br /> coredll.dll bool marshal ( bool) RemoveFontResource (string lpszFilename)<br /> coredll.dll bool marshal ( bool) SendMessage (native int hWnd, uint32 Msg, native int wParam, native int lParam)<br /> coredll.dll bool marshal ( bool) SetForegroundWindow (native int hWnd)<br /> coredll.dll bool marshal ( bool) TranslateMessage (class Microsoft.TV2.NativeMethods.Win32API/MSG msg)<br /> coredll.dll int32 BitBlt (native int hdcDest, int32 xDest, int32 yDest, int32 wDest, int32 hDest, native int hdcSource, int32 xSrc, int32 ySrc, int32 RasterOp)<br /> coredll.dll int32 CeGetThreadPriority (native int h)<br /> coredll.dll int32 FormatMessage (int32 dwFlags, native int&amp; lpSource, int32 dwMessageId, int32 dwLanguageId, string&amp; lpBuffer, int32 nSize, native int Arguments)<br /> coredll.dll int32 GetClientRect (native int hWnd, uint8[] lpRect)<br /> coredll.dll int32 GetIdleTime ()<br /> coredll.dll int32 GetMessage (class Microsoft.TV2.NativeMethods.Win32API/MSG msg, native int hwnd, uint32 nMsgFilterMin, uint32 nMsgFilterMax)<br /> coredll.dll int32 GetSystemMetrics (int32 Coordinate)<br /> coredll.dll int32 SetWindowPos (native int hWnd, native int hWndAfter, int32 left, int32 top, int32 width, int32 height, uint32 'flags')<br /> coredll.dll native int CreateCompatibleDC (native int hdc)<br /> coredll.dll native int CreateDIBSection (native int hdc, native int hdr, uint32 colors, native int&amp; pBits, native int hFile, uint32 offset)<br /> coredll.dll native int CreateWindowEx (uint32 dwExStyle, string stClassName, string stTitle, uint32 dwStyle, int32 x, int32 y, int32 w, int32 h, native int hwndParent, native int hmenu, native int hinst, native int pvParam)<br /> coredll.dll native int DefWindowProc (native int hwnd, uint32 uMsg, native int wParam, native int lParam)<br /> coredll.dll native int DeleteDC (native int hDc)<br /> coredll.dll native int DeleteObject (native int hDc)<br /> coredll.dll native int DispatchMessage (class Microsoft.TV2.NativeMethods.Win32API/MSG msg)<br /> coredll.dll native int FindWindow (string inWindowClass, string inWindowName)<br /> coredll.dll native int GetDC (native int ptr)<br /> coredll.dll native int GetDesktopWindow ()<br /> coredll.dll native int GetModuleHandle (string stModuleName)<br /> coredll.dll native int GetStockObject (int32 nObject)<br /> coredll.dll native int LoadCursor (native int hinstance, int32 nCursorName)<br /> coredll.dll native int LocalAlloc (uint32 uFlags, int32 uBytes)<br /> coredll.dll native int LocalFree (native int hMem)<br /> coredll.dll native int LocalReAlloc (native int hMem, int32 uBytes, uint32 uFlags)<br /> coredll.dll native int ReleaseDC (native int hWnd, native int hDc)<br /> coredll.dll native int SelectObject (native int hdc, native int bmp)<br /> coredll.dll native int SendMessage (native int hWnd, uint32 msg, native int wParam, native int lParam)<br /> coredll.dll native int SendMessageTimeout (native int windowHandle, uint32 msg, native int wParam, native int lParam, valuetype Microsoft.TV2.UI.TasmanPage/Win32/SendMessageTimeoutFlags 'flags', uint32 timeout, [out] native int&amp; result)<br /> coredll.dll native uint SetTimer (native int hwnd, uint32 nIDEvent, uint32 uElapse, native int lpTimerFunc)<br /> coredll.dll uint32 LocalSize (native int hMem)<br /> coredll.dll uint32 MapVirtualKey (uint32 uCode, uint32 uMapType)<br /> coredll.dll uint32 RegisterWindowMessage (string name)<br /> coredll.dll void GlobalMemoryStatus (valuetype Microsoft.TV2.UI.MEMORYSTATUS&amp; buf)<br /> coredll.dll void PostQuitMessage (int32 nExitCode)<br /> crypt32.dll bool CertSetCertificateContextProperty (native int pCertContext, uint32 dwPropId, uint32 dwFlags, native int pvData)<br /> crypt32.dll bool marshal ( bool) CertAddCertificateContextToStore (native int hCertStore, native int pCertContext, valuetype Microsoft.TV2.Crypto.CertLib/CertStoreAddType dwAddDisposition, native int ppStoreContext)<br /> crypt32.dll bool marshal ( bool) CertAddCertificateContextToStore (native int hCertStore, native int pCertContext, valuetype Microsoft.TV2.Crypto.CertLib/CertStoreAddType dwAddDisposition, native int&amp; ppStoreContext)<br /> crypt32.dll bool marshal ( bool) CertAddSerializedElementToStore (native int hCertStore, uint8[] pbElement, uint32 cbElement, valuetype Microsoft.TV2.Crypto.CertLib/CertStoreAddType dwAddDisposition, uint32 dwFlags, uint32 dwContextTypeFlags, uint32&amp; pdwContextType, native int&amp; ppvContext)<br /> crypt32.dll bool marshal ( bool) CertCloseStore (native int hCertStore, uint32 dwFlags)<br /> crypt32.dll bool marshal ( bool) CertFreeCertificateContext (native int pCertContext)<br /> crypt32.dll bool marshal ( bool) CertGetCertificateChain (valuetype Microsoft.TV2.Crypto.CertLib/HCertChainEngine hChainEngine, native int pCertContext, native int pTime, native int hAdditionalStore, class Microsoft.TV2.Crypto.CertChainPara pChainPara, uint32 dwFlags, native int pvReserved, [out] class Microsoft.TV2.Crypto.CertChainContext&amp; ppChainContext)<br /> crypt32.dll bool marshal ( bool) CertGetCertificateChain (valuetype Microsoft.TV2.Crypto.CertLib/HCertChainEngine hChainEngine, native int pCertContext, native int pTime, native int hAdditionalStore, class Microsoft.TV2.Crypto.CertChainPara pChainPara, uint32 dwFlags, native int pvReserved, [out] native int&amp; ppChainContext)<br /> crypt32.dll bool marshal ( bool) CertGetCertificateContextProperty (native int pCertContext, uint32 dwPropId, uint8[] pvData, uint32&amp; pcbData)<br /> crypt32.dll bool marshal ( bool) CertGetEnhancedKeyUsage (native int pCertContext, uint32 dwFlags, native int pUsage, uint32&amp; pcbUsage)<br /> crypt32.dll bool marshal ( bool) CertSaveStore (native int hCertStore, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwMsgAndCertEncodingType, valuetype Microsoft.TV2.Crypto.CertLib/SaveAsType dwSaveAs, valuetype Microsoft.TV2.Crypto.CertLib/SaveToType dwSaveTo, native int pvSaveToPara, uint32 dwFlags)<br /> crypt32.dll bool marshal ( bool) CertSaveStore (native int hCertStore, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwMsgAndCertEncodingType, valuetype Microsoft.TV2.Crypto.CertLib/SaveAsType dwSaveAs, valuetype Microsoft.TV2.Crypto.CertLib/SaveToType dwSaveTo, string pvSaveToPara, uint32 dwFlags)<br /> crypt32.dll bool marshal ( bool) CertSaveStore (native int hCertStore, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwMsgAndCertEncodingType, valuetype Microsoft.TV2.Crypto.CertLib/SaveAsType dwSaveAs, valuetype Microsoft.TV2.Crypto.CertLib/SaveToType dwSaveTo, valuetype Microsoft.TV2.Crypto.UnsafeDataBlob pvSaveToPara, uint32 dwFlags)<br /> crypt32.dll bool marshal ( bool) CertSerializeCertificateStoreElement (native int pCertContext, uint32 dwFlags, native int pbElement, uint32&amp; pcbElement)<br /> crypt32.dll bool marshal ( bool) CertSerializeCertificateStoreElement (native int pCertContext, uint32 dwFlags, uint8[] pbElement, uint32&amp; pcbElement)<br /> crypt32.dll bool marshal ( bool) CertVerifyCertificateChainPolicy (uint32 pszPolicyOID, class Microsoft.TV2.Crypto.CertChainContext pChainContext, class Microsoft.TV2.Crypto.CertChainPolicyPara pPolicyPara, class Microsoft.TV2.Crypto.CertChainPolicyStatus pPolicyStatus)<br /> crypt32.dll bool marshal ( bool) CertVerifyCertificateChainPolicy (uint32 pszPolicyOID, class Microsoft.TV2.Crypto.CertChainContext pChainContext, class Microsoft.TV2.Crypto.CertChainPolicyPara pPolicyPara, class Microsoft.TV2.Crypto.CertChainPolicyStatus&amp; pPolicyStatus)<br /> crypt32.dll bool marshal ( bool) CryptAcquireCertificatePrivateKey (native int pCertContext, uint32 dwFlags, native int pReserved, native int&amp; phCryptProv, uint32&amp; pdwKeySpec, bool&amp; marshal ( bool) pfCallerFreeProv)<br /> crypt32.dll bool marshal ( bool) CryptDecodeObjectEx (uint32 dwCertEncodingType, native int lpszStructType, uint8[] pbEncoded, uint32 cbEncoded, uint32 dwFlags, native int pDecodePara, native int pvStructInfo, uint32&amp; pcbStructInfo)<br /> crypt32.dll bool marshal ( bool) CryptEncodeObjectEx (uint32 dwCertEncodingType, native int lpszStructType, native int pvStructInfo, uint32 dwFlags, native int pEncodePara, native int pvEncoded, uint32&amp; pcbEncoded)<br /> crypt32.dll bool marshal ( bool) CryptEncodeObjectEx (uint32 dwCertEncodingType, native int lpszStructType, uint8[] pbEncoded, uint32 cbEncoded, uint32 dwFlags, native int pDecodePara, native int pvStructInfo, uint32&amp; pcbStructInfo)<br /> crypt32.dll bool marshal ( bool) CryptExportPublicKeyInfoEx (native int hCryptProv, uint32 dwKeySpec, uint32 dwCertEncodingType, native int pszPublicKeyObjIdPtr, uint32 dwFlags, native int pvAuxInfo, native int pInfo, uint32&amp; pcbInfo)<br /> crypt32.dll bool marshal ( bool) CryptImportPublicKeyInfoEx (native int hCryptProv, uint32 dwCertEncodingType, class Microsoft.TV2.Crypto.CertPublicKeyInfo pInfo, uint32 aiKeyAlg, uint32 dwFlags, native int pvAuxInfo, [out] native int&amp; phKey)<br /> crypt32.dll bool marshal ( bool) CryptImportPublicKeyInfoEx (native int hCryptProv, uint32 dwCertEncodingType, uint8[] pInfo, uint32 aiKeyAlg, uint32 dwFlags, native int pvAuxInfo, [out] native int&amp; phKey)<br /> crypt32.dll bool marshal ( bool) CryptSignAndEncodeCertificate (native int hCryptProv, uint32 dwKeySpec, uint32 dwCertEncodingType, native int lpszStructType, native int pvStructInfo, native int pSignatureAlgorithm, native int pvHashAuxInfo, uint8[] pbEncoded, uint32&amp; cbEncoded)<br /> crypt32.dll native int CertCreateCertificateContext (valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwCertEncodingType, uint8[] pbCertEncoded, uint32 cbCertEncoded)<br /> crypt32.dll native int CertCreateContext (valuetype Microsoft.TV2.Crypto.CertLib/CertificateStoreContextType dwContextType, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwEncodingType, uint8[] pbEncoded, uint32 cbEncoded, valuetype Microsoft.TV2.Crypto.CertLib/CertificateCreateContextType dwFlags, native int pCreatePara)<br /> crypt32.dll native int CertDeleteCertificateFromStore (native int pCertContext)<br /> crypt32.dll native int CertDuplicateCertificateContext (native int pCertContext)<br /> crypt32.dll native int CertEnumCertificatesInStore (native int hCertStore, native int pPrevCertContext)<br /> crypt32.dll native int CertFindCertificateInStore (native int hCertStore, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwCertEncodingType, uint32 dwFindFlags, uint32 dwFindType, native int pvFindPara, native int pPrevCertContext)<br /> crypt32.dll native int CertFindCertificateInStore (native int hCertStore, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwCertEncodingType, uint32 dwFindFlags, valuetype Microsoft.TV2.Crypto.CertLib/CertificateFindType dwFindType, class Microsoft.TV2.Crypto.CtlUsage pvFindPara, native int pPrevCertContext)<br /> crypt32.dll native int CertFindCertificateInStore (native int hCertStore, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwCertEncodingType, uint32 dwFindFlags, valuetype Microsoft.TV2.Crypto.CertLib/CertificateFindType dwFindType, native int pvFindPara, native int pPrevCertContext)<br /> crypt32.dll native int CertFindCertificateInStore (native int hCertStore, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwCertEncodingType, uint32 dwFindFlags, valuetype Microsoft.TV2.Crypto.CertLib/CertificateFindType dwFindType, string pvFindPara, native int pPrevCertContext)<br /> crypt32.dll native int CertFindCertificateInStore (native int hCertStore, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwCertEncodingType, uint32 dwFindFlags, valuetype Microsoft.TV2.Crypto.CertLib/CertificateFindType dwFindType, uint32&amp; pvFindPara, native int pPrevCertContext)<br /> crypt32.dll native int CertFindCertificateInStore (native int hCertStore, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwCertEncodingType, uint32 dwFindFlags, valuetype Microsoft.TV2.Crypto.CertLib/CertificateFindType dwFindType, valuetype Microsoft.TV2.Crypto.UnsafeHashBlob&amp; 'blob', native int pPrevCertContext)<br /> crypt32.dll native int CertGetIssuerCertificateFromStore (native int hCertStore, native int pSubjectContext, native int pPrevIssuerContext, uint32&amp; pdwFlags)<br /> crypt32.dll native int CertOpenStore (uint32 lpszStoreProvider, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwMsgAndEncodingType, native int hCryptProv, valuetype Microsoft.TV2.Crypto.CertLib/CertStoreOpenType dwFlags, native int pvPara)<br /> crypt32.dll native int CertOpenStore (uint32 lpszStoreProvider, valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwMsgAndEncodingType, native int hCryptProv, valuetype Microsoft.TV2.Crypto.CertLib/CertStoreOpenType dwFlags, string pvPara)<br /> crypt32.dll native int CertOpenSystemStore (native int hCSP, string pszSubsystemProtocol)<br /> crypt32.dll native int PFXImportCertStore (valuetype Microsoft.TV2.Crypto.UnsafeDataBlob&amp; pPFX, string szPassword, uint32 dwFlags)<br /> crypt32.dll uint32 CertGetNameString (native int pCertContext, valuetype Microsoft.TV2.Crypto.CertLib/CertificateNameType dwType, valuetype Microsoft.TV2.Crypto.CertLib/CertificateNameFlags dwFlags, native int pvTypePara, class [mscorlib]System.Text.StringBuilder pszNameString, uint32 cchNameString)<br /> crypt32.dll uint32 CertGetNameString (native int pCertContext, valuetype Microsoft.TV2.Crypto.CertLib/CertificateNameType dwType, valuetype Microsoft.TV2.Crypto.CertLib/CertificateNameFlags dwFlags, uint32&amp; pvTypePara, class [mscorlib]System.Text.StringBuilder pszNameString, uint32 cchNameString)<br /> crypt32.dll uint32 CertGetNameString (native int pCertContext, valuetype Microsoft.TV2.Crypto.CertLib/CertificateNameType dwType, valuetype Microsoft.TV2.Crypto.CertLib/CertificateNameFlags dwFlags, uint8[] pvTypePara, class [mscorlib]System.Text.StringBuilder pszNameString, uint32 cchNameString)<br /> crypt32.dll uint32 CertNameToStr (valuetype Microsoft.TV2.Crypto.CertLib/EncodingType dwCertEncodingType, valuetype Microsoft.TV2.Crypto.CryptoApiBlob&amp; pName, valuetype Microsoft.TV2.Crypto.CertLib/CertStringType dwStrType, class [mscorlib]System.Text.StringBuilder psz, uint32 csz)<br /> crypt32.dll void CertFreeCertificateChain (native int pChainContext)<br /> iptvplatform.dll int32 TV2Graphics_GetGrabMetrics (int32* lpWidth, int32* lpHeight, int32* lpDepth)<br /> iptvplatform.dll int32 TV2Graphics_GetGrabMetrics (uint16* lpWidth, uint16* lpHeight, uint16* lpDepth)<br /> iptvplatform.dll int32 TV2Graphics_GrabCurrentScreen (uint8* callers_buf, int32 width, int32 height)<br /> iptvplatform.dll int32 TV2Graphics_GrabScreenSlice (uint8* callers_buf, int32 width, int32 height, int32 offset, int32 length)<br /> kernel32.dll void DebugBreak ()<br /> raswrap.dll native int RegisterClassWrap (string classname, class Microsoft.TV2.NativeMethods.Win32API/WNDPROC wc)<br /> raswrap.dll uint32 QueryRasEvent ([in][out] uint32&amp; uStatus, [in][out] uint32&amp; uError, [in] uint32 uTimeout)<br /> raswrap.dll uint32 RasDial (native int lpRasDialExtensions, string lpszPhonebook, string szEntryName, string szUserName, string szPassword, [in] uint32 dwNotifierType, [in] native int lpvNotifier, [in][out] native int&amp; hrasconn)<br /> raswrap.dll uint32 RasEnumEntries (string Reserved, string lpszPhoneBookPath, [in][out] valuetype Microsoft.TV2.NativeMethods.RasHelper/RASENTRYNAME[] lprasentryname, uint32&amp; lpcb, uint32&amp; lpcEntries)<br /> raswrap.dll uint32 RasGetConnectStatus ([in] native int hrasconn, [in][out] valuetype Microsoft.TV2.NativeMethods.RasHelper/RASCONNSTATUS&amp; lprasconnstatus)<br /> raswrap.dll uint32 RasGetEntryDialParams (string lpszPhoneBook, string szEntryName, class [mscorlib]System.Text.StringBuilder szUserName, class [mscorlib]System.Text.StringBuilder szPassword, bool&amp; marshal ( bool) lpfPassword)<br /> raswrap.dll uint32 RasGetEntryProperties (string lpszPhoneBook, string szEntry, [in][out] valuetype Microsoft.TV2.NativeMethods.RasHelper/RASENTRY&amp; lpbEntry, uint32&amp; lpdwEntrySize, [in][out] uint8[] lpb, uint32&amp; lpdwSize)<br /> raswrap.dll uint32 RasGetProjectionInfoWrap ([in] native int hrasconn, [in][out] valuetype Microsoft.TV2.NativeMethods.RasHelper/RASIPADDR&amp; lpPPPoEIP)<br /> raswrap.dll uint32 RasHangUp (native int hrasconn)<br /> raswrap.dll uint32 RasSetEntryDialParams (string lpszPhoneBook, string szEntryName, string szUserName, string szPassword, bool marshal ( bool) lpfPassword)<br /> raswrap.dll uint32 RasSetEntryProperties (string lpszPhoneBook, string szEntry, [in] valuetype Microsoft.TV2.NativeMethods.RasHelper/RASENTRY&amp; lpbEntry, uint32 dwEntryInfoSize, [in] uint8[] lpbDeviceInfo, uint32 lpdwSize)<br /> toolhelp.dll bool marshal ( bool) CloseToolhelp32Snapshot (native int snapshot)<br /> toolhelp.dll bool marshal ( bool) Thread32First (native int snapshot, valuetype Microsoft.TV2.TV2Thread/ThreadEntry&amp; te)<br /> toolhelp.dll bool marshal ( bool) Thread32Next (native int snapshot, valuetype Microsoft.TV2.TV2Thread/ThreadEntry&amp; te)<br /> toolhelp.dll native int CreateToolhelp32Snapshot (valuetype Microsoft.TV2.TV2Thread/ToolHelpConstants c, int32 progId)<br /> tv2engine.dll int32 TV2Engine_LaunchApp (string name, string cmdLine)<br /> zlib.dll uint32 ZDeflate (uint8[] source, uint8[] dest, uint32 uncomprLength, uint32 comprLength)<br /> zlib.dll uint32 ZInflate (uint8[] source, uint8[] dest, uint32 length, uint32 uncompLength)<br /> &lt;/pre&gt;<br /> <br /> <br /> [[category:WinCe]][[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Network-Bootstrap 2012-04-03T19:49:50Z

<p>Dans34: </p> <hr /> <div>&lt;pre&gt;<br /> BuildFlavor: RELEASE<br /> ClientID: 1a132e5c-3464-4706-b14c-e3caxxxxxxxx<br /> ProjectName:<br /> BuildVersion: 3970<br /> BootTime: 3/27/2007 2:19:30 AM<br /> Service: http://cgbf01001.iptv.t-online.de/bootstrap/Bootstrap.asmx<br /> IP Address: 192.168.2.100<br /> BuildNumber: 3970<br /> <br /> <br /> <br /> IP xx.xx.xx.xx.1024 &gt; xx.xx.xx.xx.domain: 5213+ A? discovery.iptv.t-online.de. (44)<br /> IP xx.xx.xx.xx.domain &gt; xx.xx.xx.xx.1024: 5213 2/4/4 A 217.6.167.185, A 217.6.167.184 (228)<br /> IP xx.xx.xx.xx.1024 &gt; 217.6.167.185.tftp: 105 RRQ &quot;sync&quot; octet tsize 0 timeout 3 blksize 1424 guid 1a132e5c-3464-4706-b14c-xxxxxxxx<br /> bb45 model KMM3210-TG-A<br /> IP 217.6.167.185.tftp &gt; xx.xx.xx.xx.1024: 97 tftp-#6<br /> IP xx.xx.xx.xx.1024 &gt; 217.6.167.185.tftp: 4 ACK block 0<br /> IP 217.6.167.185.tftp &gt; xx.xx.xx.xx.1024: 1384 DATA block 1<br /> IP xx.xx.xx.xx.1024 &gt; 217.6.167.185.tftp: 4 ACK block 1<br /> IP 217.6.167.185.tftp &gt; xx.xx.xx.xx.1024: 1384 DATA block 2<br /> IP xx.xx.xx.xx.1024 &gt; 217.6.167.185.tftp: 4 ACK block 2<br /> IP 217.6.167.185.tftp &gt; xx.xx.xx.xx.1024: 1384 DATA block 3<br /> IP xx.xx.xx.xx.1024 &gt; 217.6.167.185.tftp: 4 ACK block 3<br /> IP 217.6.167.185.tftp &gt; xx.xx.xx.xx.1024: 142 DATA block 4<br /> IP xx.xx.xx.xx.1024 &gt; 217.6.167.185.tftp: 4 ACK block 4<br /> IP xx.xx.xx.xx.1025 &gt; 217.6.167.185.tftp: 104 RRQ &quot;dra&quot; octet tsize 0 timeout 3 blksize 1424 guid 1a132e5c-3464-4706-b14c-xxxxxxxx<br /> b45 model KMM3210-TG-A<br /> IP 217.6.167.185.tftp &gt; xx.xx.xx.xx.1025: 100 tftp-#6<br /> IP xx.xx.xx.xx.1025 &gt; 217.6.167.185.tftp: 4 ACK block 0<br /> IP 217.6.167.185.tftp &gt; xx.xx.xx.xx.1025: 1384 DATA block 1<br /> IP xx.xx.xx.xx.1025 &gt; 217.6.167.185.tftp: 4 ACK block 1<br /> ...<br /> IP 217.6.167.185.tftp &gt; xx.xx.xx.xx.1025: 1384 DATA block 5960<br /> IP xx.xx.xx.xx.1025 &gt; 217.6.167.185.tftp: 4 ACK block 5960<br /> IP 217.6.167.185.tftp &gt; xx.xx.xx.xx.1025: 1303 DATA block 5961<br /> IP xx.xx.xx.xx.1025 &gt; 217.6.167.185.tftp: 4 ACK block 5961<br /> <br /> -rw-r--r-- 1 root root 8223529 Apr 14 16:59 dra<br /> -rw-r--r-- 1 root root 4278 Apr 14 16:45 sync<br /> <br /> <br /> <br /> # hexdump sync -bc<br /> 0000000 000 032 144 151 163 143 157 166 145 162 171 056 151 160 164 166<br /> 0000000 \0 032 d i s c o v e r y . i p t v<br /> 0000010 056 164 055 157 156 154 151 156 145 056 144 145 001 000 215 325<br /> 0000010 . t - o n l i n e . d e 001 \0 215 Õ<br /> 0000020 366 166 132 200 000 135 174 157 241 207 333 041 142 163 203 245<br /> 0000020 ö v Z 200 \0 ] | o ¡ 207 Û ! b s 203 ¥<br /> 0000030 225 371 037 065 220 132 032 237 254 315 131 266 161 345 222 260<br /> 0000030 225 ù 037 5 220 Z 032 237 ¬ Í Y ¶ q å 222 °<br /> 0000040 330 310 040 340 236 117 226 214 216 301 031 274 246 121 251 256<br /> 0000040 Ø È à 236 O 226 214 216 Á 031 ¼ ¦ Q © ®<br /> 0000050 067 327 062 216 175 243 376 157 362 274 047 073 047 376 352 217<br /> 0000050 7 × 2 216 } £ þ o ò ¼ ' ; ' þ ê 217<br /> 0000060 173 151 355 367 072 042 324 325 202 164 350 313 040 272 167 155<br /> 0000060 { i í ÷ : &quot; Ô Õ 202 t è Ë º w m<br /> 0000070 321 015 210 020 125 237 253 331 143 171 366 033 106 035 320 120<br /> 0000070 Ñ \r 210 020 U 237 « Ù c y ö 033 F 035 Ð P<br /> 0000080 137 012 002 033 005 220 335 076 043 347 257 035 235 165 002 366<br /> 0000080 _ \n 002 033 005 220 Ý &gt; # ç ¯ 035 235 u 002 ö<br /> 0000090 144 267 171 146 210 335 262 060 314 317 042 047 312 213 157 042<br /> 0000090 d · y f 210 Ý ² 0 Ì Ï &quot; ' Ê 213 o &quot;<br /> 00000a0 372 377 075 220 300 350 237 012 312 250 147 253 060 367 112 216<br /> 00000a0 ú ÿ = 220 À è 237 \n Ê ¨ g « 0 ÷ J 216<br /> 00000b0 321 257 132 300 243 143 133 062 016 044 004 264 120 327 076 105<br /> 00000b0 Ñ ¯ Z À £ c [ 2 016 $ 004 ´ P × &gt; E<br /> 00000c0 373 047 031 204 047 202 264 170 214 350 301 370 074 134 230 152<br /> 00000c0 û ' 031 204 ' 202 ´ x 214 è Á ø &lt; \ 230 j<br /> 00000d0 062 366 312 073 315 123 322 242 101 177 032 077 276 241 277 250<br /> 00000d0 2 ö Ê ; Í S Ò ¢ A 177 032 ? ¾ ¡ ¿ ¨<br /> 00000e0 020 052 031 164 133 174 317 357 061 235 116 157 274 316 227 260<br /> 00000e0 020 * 031 t [ | Ï ï 1 235 N o ¼ Î 227 °<br /> 00000f0 356 366 055 062 254 234 010 215 267 367 037 145 024 064 141 175<br /> 00000f0 î ö - 2 ¬ 234 \b 215 · ÷ 037 e 024 4 a }<br /> 0000100 226 304 117 211 117 123 176 220 116 315 300 255 050 301 122 363<br /> 0000100 226 Ä O 211 O S ~ 220 N Í À ­ ( Á R ó<br /> 0000110 213 312 277 302 156 024 267 053 107 271 221 147 225 075 017 226<br /> 0000110 213 Ê ¿  n 024 · + G ¹ 221 g 225 = 017 226<br /> 0000120 001 003 005 350 001 040 001 000 000 001 000 001 060 202 005 344<br /> 0000120 001 003 005 è 001 001 \0 \0 001 \0 001 0 202 005 ä<br /> 0000130 240 003 002 001 002 002 012 034 015 055 046 000 001 000 000 004<br /> 0000130 003 002 001 002 002 \n 034 \r - &amp; \0 001 \0 \0 004<br /> 0000140 355 060 015 006 011 052 206 110 206 367 015 001 001 005 005 000<br /> 0000140 í 0 \r 006 \t * 206 H 206 ÷ \r 001 001 005 005 \0<br /> 0000150 060 201 211 061 022 060 020 006 012 011 222 046 211 223 362 054<br /> 0000150 0 201 211 1 022 0 020 006 \n \t 222 &amp; 211 223 ò ,<br /> 0000160 144 001 031 026 002 144 145 061 030 060 026 006 012 011 222 046<br /> 0000160 d 001 031 026 002 d e 1 030 0 026 006 \n \t 222 &amp;<br /> 0000170 211 223 362 054 144 001 031 026 010 164 055 157 156 154 151 156<br /> 0000170 211 223 ò , d 001 031 026 \b t - o n l i n<br /> 0000180 145 061 023 060 021 006 012 011 222 046 211 223 362 054 144 001<br /> 0000180 e 1 023 0 021 006 \n \t 222 &amp; 211 223 ò , d 001<br /> 0000190 031 026 003 141 146 155 061 023 060 021 006 012 011 222 046 211<br /> 0000190 031 026 003 a f m 1 023 0 021 006 \n \t 222 &amp; 211<br /> 00001a0 223 362 054 144 001 031 026 003 164 150 163 061 024 060 022 006<br /> 00001a0 223 ò , d 001 031 026 003 t h s 1 024 0 022 006<br /> 00001b0 012 011 222 046 211 223 362 054 144 001 031 026 004 143 157 162<br /> 00001b0 \n \t 222 &amp; 211 223 ò , d 001 031 026 004 c o r<br /> 00001c0 145 061 031 060 027 006 003 125 004 003 023 020 124 055 110 157<br /> 00001c0 e 1 031 0 027 006 003 U 004 003 023 020 T - H o<br /> 00001d0 155 145 040 123 160 145 145 144 040 103 101 061 060 036 027 015<br /> 00001d0 m e S p e e d C A 1 0 036 027 \r<br /> 00001e0 060 066 060 067 060 064 061 064 061 064 061 071 132 027 015 060<br /> 00001e0 0 6 0 7 0 4 1 4 1 4 1 9 Z 027 \r 0<br /> 00001f0 070 060 067 060 063 061 064 061 064 061 071 132 060 055 061 053<br /> 00001f0 8 0 7 0 3 1 4 1 4 1 9 Z 0 - 1 +<br /> 0000200 060 051 006 003 125 004 003 023 042 123 123 102 106 060 061 060<br /> 0000200 0 ) 006 003 U 004 003 023 &quot; S S B F 0 1 0<br /> 0000210 060 062 056 143 157 162 145 056 164 150 163 056 141 146 155 056<br /> 0000210 0 2 . c o r e . t h s . a f m .<br /> 0000220 164 055 157 156 154 151 156 145 056 144 145 060 202 001 042 060<br /> 0000220 t - o n l i n e . d e 0 202 001 &quot; 0<br /> 0000230 015 006 011 052 206 110 206 367 015 001 001 001 005 000 003 202<br /> 0000230 \r 006 \t * 206 H 206 ÷ \r 001 001 001 005 \0 003 202<br /> 0000240 001 017 000 060 202 001 012 002 202 001 001 000 356 374 043 210<br /> 0000240 001 017 \0 0 202 001 \n 002 202 001 001 \0 î ü # 210<br /> 0000250 112 015 046 016 020 253 143 334 366 376 134 242 317 234 003 211<br /> 0000250 J \r &amp; 016 020 « c Ü ö þ \ ¢ Ï 234 003 211<br /> 0000260 300 111 115 301 331 153 304 156 321 033 015 161 313 365 044 111<br /> 0000260 À I M Á Ù k Ä n Ñ 033 \r q Ë õ $ I<br /> 0000270 141 070 151 270 320 303 061 001 312 102 071 005 020 210 243 301<br /> 0000270 a 8 i ¸ Ð Ã 1 001 Ê B 9 005 020 210 £ Á<br /> 0000280 071 073 203 043 114 254 337 071 164 247 211 176 030 137 361 233<br /> 0000280 9 ; 203 # L ¬ ß 9 t § 211 ~ 030 _ ñ 233<br /> 0000290 053 153 162 137 344 322 060 032 154 137 045 243 034 054 063 311<br /> 0000290 + k r _ ä Ò 0 032 l _ % £ 034 , 3 É<br /> 00002a0 042 235 122 257 117 121 137 067 304 151 326 332 345 151 351 063<br /> 00002a0 &quot; 235 R ¯ O Q _ 7 Ä i Ö Ú å i é 3<br /> 00002b0 041 302 147 116 251 102 274 030 240 147 000 331 376 274 143 247<br /> 00002b0 !  g N © B ¼ 030 g \0 Ù þ ¼ c §<br /> 00002c0 255 212 124 061 065 000 134 227 012 227 375 351 320 056 147 063<br /> 00002c0 ­ 212 T 1 5 \0 \ 227 \n 227 ý é Ð . g 3<br /> 00002d0 055 334 343 254 226 233 076 264 136 140 107 330 037 124 204 063<br /> 00002d0 - Ü ã ¬ 226 233 &gt; ´ ^ ` G Ø 037 T 204 3<br /> 00002e0 277 233 113 073 341 101 330 033 113 063 253 213 114 145 034 221<br /> 00002e0 ¿ 233 K ; á A Ø 033 K 3 « 213 L e 034 221<br /> 00002f0 355 107 077 201 103 012 312 023 343 162 337 377 051 052 216 110<br /> 00002f0 í G ? 201 C \n Ê 023 ã r ß ÿ ) * 216 H<br /> 0000300 015 114 252 025 027 374 021 146 345 207 276 167 214 360 270 151<br /> 0000300 \r L ª 025 027 ü 021 f å 207 ¾ w 214 ð ¸ i<br /> 0000310 233 014 366 174 336 057 130 320 007 355 363 160 171 263 177 360<br /> 0000310 233 \f ö | Þ / X Ð \a í ó p y ³ 177 ð<br /> 0000320 144 311 131 170 227 236 266 013 237 203 176 265 237 032 131 243<br /> 0000320 d É Y x 227 236 ¶ \v 237 203 ~ µ 237 032 Y £<br /> 0000330 373 247 223 272 212 074 037 037 352 103 136 351 143 102 171 174<br /> 0000330 û § 223 º 212 &lt; 037 037 ê C ^ é c B y |<br /> 0000340 146 266 322 022 043 042 064 023 257 223 204 321 002 003 001 000<br /> 0000340 f ¶ Ò 022 # &quot; 4 023 ¯ 223 204 Ñ 002 003 001 \0<br /> 0000350 001 243 202 003 277 060 202 003 273 060 013 006 003 125 035 017<br /> 0000350 001 £ 202 003 ¿ 0 202 003 » 0 \v 006 003 U 035 017<br /> 0000360 004 004 003 002 004 060 060 075 006 011 053 006 001 004 001 202<br /> 0000360 004 004 003 002 004 0 0 = 006 \t + 006 001 004 001 202<br /> 0000370 067 025 007 004 060 060 056 006 046 053 006 001 004 001 202 067<br /> 0000370 7 025 \a 004 0 0 . 006 &amp; + 006 001 004 001 202 7<br /> 0000380 025 010 203 272 322 001 205 307 264 023 201 361 215 017 203 316<br /> 0000380 025 \b 203 º Ò 001 205 Ç ´ 023 201 ñ 215 017 203 Î<br /> 0000390 267 106 205 235 376 034 052 202 373 243 176 205 203 234 126 002<br /> 0000390 · F 205 235 þ 034 * 202 û £ ~ 205 203 234 V 002<br /> 00003a0 001 144 002 001 004 060 053 006 003 125 035 045 004 044 060 042<br /> 00003a0 001 d 002 001 004 0 + 006 003 U 035 % 004 $ 0 &quot;<br /> 00003b0 006 010 053 006 001 005 005 007 003 001 006 014 052 206 110 206<br /> 00003b0 006 \b + 006 001 005 005 \a 003 001 006 \f * 206 H 206<br /> 00003c0 367 024 001 006 050 001 002 001 006 010 053 006 001 005 005 007<br /> 00003c0 ÷ 024 001 006 ( 001 002 001 006 \b + 006 001 005 005 \a<br /> 00003d0 003 002 060 067 006 011 053 006 001 004 001 202 067 025 012 004<br /> 00003d0 003 002 0 7 006 \t + 006 001 004 001 202 7 025 \n 004<br /> 00003e0 052 060 050 060 012 006 010 053 006 001 005 005 007 003 001 060<br /> 00003e0 * 0 ( 0 \n 006 \b + 006 001 005 005 \a 003 001 0<br /> 00003f0 016 006 014 052 206 110 206 367 024 001 006 050 001 002 001 060<br /> 00003f0 016 006 \f * 206 H 206 ÷ 024 001 006 ( 001 002 001 0<br /> 0000400 012 006 010 053 006 001 005 005 007 003 002 060 104 006 011 052<br /> 0000400 \n 006 \b + 006 001 005 005 \a 003 002 0 D 006 \t *<br /> 0000410 206 110 206 367 015 001 011 017 004 067 060 065 060 016 006 010<br /> 0000410 206 H 206 ÷ \r 001 \t 017 004 7 0 5 0 016 006 \b<br /> 0000420 052 206 110 206 367 015 003 002 002 002 000 200 060 016 006 010<br /> 0000420 * 206 H 206 ÷ \r 003 002 002 002 \0 200 0 016 006 \b<br /> 0000430 052 206 110 206 367 015 003 004 002 002 000 200 060 007 006 005<br /> 0000430 * 206 H 206 ÷ \r 003 004 002 002 \0 200 0 \a 006 005<br /> 0000440 053 016 003 002 007 060 012 006 010 052 206 110 206 367 015 003<br /> 0000440 + 016 003 002 \a 0 \n 006 \b * 206 H 206 ÷ \r 003<br /> 0000450 007 060 055 006 003 125 035 021 004 046 060 044 202 042 123 123<br /> 0000450 \a 0 - 006 003 U 035 021 004 &amp; 0 $ 202 &quot; S S<br /> 0000460 102 106 060 061 060 060 062 056 143 157 162 145 056 164 150 163<br /> 0000460 B F 0 1 0 0 2 . c o r e . t h s<br /> 0000470 056 141 146 155 056 164 055 157 156 154 151 156 145 056 144 145<br /> 0000470 . a f m . t - o n l i n e . d e<br /> 0000480 060 035 006 003 125 035 016 004 026 004 024 114 255 275 003 110<br /> 0000480 0 035 006 003 U 035 016 004 026 004 024 L ­ ½ 003 H<br /> 0000490 155 270 142 351 066 162 161 203 112 316 307 250 252 017 366 060<br /> 0000490 m ¸ b é 6 r q 203 J Î Ç ¨ ª 017 ö 0<br /> 00004a0 037 006 003 125 035 043 004 030 060 026 200 024 121 310 263 137<br /> 00004a0 037 006 003 U 035 # 004 030 0 026 200 024 Q È ³ _<br /> 00004b0 222 330 350 117 026 261 046 051 004 102 110 107 132 241 315 173<br /> 00004b0 222 Ø è O 026 ± &amp; ) 004 B H G Z ¡ Í {<br /> 00004c0 060 202 001 052 006 003 125 035 037 004 202 001 041 060 202 001<br /> 00004c0 0 202 001 * 006 003 U 035 037 004 202 001 ! 0 202 001<br /> 00004d0 035 060 202 001 031 240 202 001 025 240 202 001 021 206 201 316<br /> 00004d0 035 0 202 001 031 202 001 025 202 001 021 206 201 Î<br /> 00004e0 154 144 141 160 072 057 057 057 103 116 075 124 055 110 157 155<br /> 00004e0 l d a p : / / / C N = T - H o m<br /> 00004f0 145 045 062 060 123 160 145 145 144 045 062 060 103 101 061 050<br /> 00004f0 e % 2 0 S p e e d % 2 0 C A 1 (<br /> 0000500 061 051 054 103 116 075 103 105 122 106 060 061 060 060 062 054<br /> 0000500 1 ) , C N = C E R F 0 1 0 0 2 ,<br /> 0000510 103 116 075 103 104 120 054 103 116 075 120 165 142 154 151 143<br /> 0000510 C N = C D P , C N = P u b l i c<br /> 0000520 045 062 060 113 145 171 045 062 060 123 145 162 166 151 143 145<br /> 0000520 % 2 0 K e y % 2 0 S e r v i c e<br /> 0000530 163 054 103 116 075 123 145 162 166 151 143 145 163 054 103 116<br /> 0000530 s , C N = S e r v i c e s , C N<br /> 0000540 075 103 157 156 146 151 147 165 162 141 164 151 157 156 054 104<br /> 0000540 = C o n f i g u r a t i o n , D<br /> 0000550 103 075 164 150 163 054 104 103 075 141 146 155 054 104 103 075<br /> 0000550 C = t h s , D C = a f m , D C =<br /> 0000560 164 055 157 156 154 151 156 145 054 104 103 075 144 145 077 143<br /> 0000560 t - o n l i n e , D C = d e ? c<br /> 0000570 145 162 164 151 146 151 143 141 164 145 122 145 166 157 143 141<br /> 0000570 e r t i f i c a t e R e v o c a<br /> 0000580 164 151 157 156 114 151 163 164 077 142 141 163 145 077 157 142<br /> 0000580 t i o n L i s t ? b a s e ? o b<br /> 0000590 152 145 143 164 103 154 141 163 163 075 143 122 114 104 151 163<br /> 0000590 j e c t C l a s s = c R L D i s<br /> 00005a0 164 162 151 142 165 164 151 157 156 120 157 151 156 164 206 076<br /> 00005a0 t r i b u t i o n P o i n t 206 &gt;<br /> 00005b0 150 164 164 160 072 057 057 160 153 151 056 164 150 163 056 141<br /> 00005b0 h t t p : / / p k i . t h s . a<br /> 00005c0 146 155 056 164 055 157 156 154 151 156 145 056 144 145 057 160<br /> 00005c0 f m . t - o n l i n e . d e / p<br /> 00005d0 153 151 057 124 055 110 157 155 145 045 062 060 123 160 145 145<br /> 00005d0 k i / T - H o m e % 2 0 S p e e<br /> 00005e0 144 045 062 060 103 101 061 050 061 051 056 143 162 154 060 202<br /> 00005e0 d % 2 0 C A 1 ( 1 ) . c r l 0 202<br /> 00005f0 001 042 006 010 053 006 001 005 005 007 001 001 004 202 001 024<br /> 00005f0 001 &quot; 006 \b + 006 001 005 005 \a 001 001 004 202 001 024<br /> 0000600 060 202 001 020 060 201 301 006 010 053 006 001 005 005 007 060<br /> 0000600 0 202 001 020 0 201 Á 006 \b + 006 001 005 005 \a 0<br /> 0000610 002 206 201 264 154 144 141 160 072 057 057 057 103 116 075 124<br /> 0000610 002 206 201 ´ l d a p : / / / C N = T<br /> 0000620 055 110 157 155 145 045 062 060 123 160 145 145 144 045 062 060<br /> 0000620 - H o m e % 2 0 S p e e d % 2 0<br /> 0000630 103 101 061 054 103 116 075 101 111 101 054 103 116 075 120 165<br /> 0000630 C A 1 , C N = A I A , C N = P u<br /> 0000640 142 154 151 143 045 062 060 113 145 171 045 062 060 123 145 162<br /> 0000640 b l i c % 2 0 K e y % 2 0 S e r<br /> 0000650 166 151 143 145 163 054 103 116 075 123 145 162 166 151 143 145<br /> 0000650 v i c e s , C N = S e r v i c e<br /> 0000660 163 054 103 116 075 103 157 156 146 151 147 165 162 141 164 151<br /> 0000660 s , C N = C o n f i g u r a t i<br /> 0000670 157 156 054 104 103 075 164 150 163 054 104 103 075 141 146 155<br /> 0000670 o n , D C = t h s , D C = a f m<br /> 0000680 054 104 103 075 164 055 157 156 154 151 156 145 054 104 103 075<br /> 0000680 , D C = t - o n l i n e , D C =<br /> 0000690 144 145 077 143 101 103 145 162 164 151 146 151 143 141 164 145<br /> 0000690 d e ? c A C e r t i f i c a t e<br /> 00006a0 077 142 141 163 145 077 157 142 152 145 143 164 103 154 141 163<br /> 00006a0 ? b a s e ? o b j e c t C l a s<br /> 00006b0 163 075 143 145 162 164 151 146 151 143 141 164 151 157 156 101<br /> 00006b0 s = c e r t i f i c a t i o n A<br /> 00006c0 165 164 150 157 162 151 164 171 060 112 006 010 053 006 001 005<br /> 00006c0 u t h o r i t y 0 J 006 \b + 006 001 005<br /> 00006d0 005 007 060 002 206 076 150 164 164 160 072 057 057 160 153 151<br /> 00006d0 005 \a 0 002 206 &gt; h t t p : / / p k i<br /> 00006e0 056 164 150 163 056 141 146 155 056 164 055 157 156 154 151 156<br /> 00006e0 . t h s . a f m . t - o n l i n<br /> 00006f0 145 056 144 145 057 160 153 151 057 124 055 110 157 155 145 045<br /> 00006f0 e . d e / p k i / T - H o m e %<br /> 0000700 062 060 123 160 145 145 144 045 062 060 103 101 061 050 061 051<br /> 0000700 2 0 S p e e d % 2 0 C A 1 ( 1 )<br /> 0000710 056 143 162 164 001 000 162 034 223 013 363 261 042 303 375 355<br /> 0000710 . c r t 001 \0 r 034 223 \v ó ± &quot; à ý í<br /> 0000720 076 230 015 016 373 273 156 047 175 143 330 244 062 311 263 141<br /> 0000720 &gt; 230 \r 016 û » n ' } c Ø ¤ 2 É ³ a<br /> 0000730 225 337 270 015 170 150 275 213 057 324 203 003 227 033 314 122<br /> 0000730 225 ß ¸ \r x h ½ 213 / Ô 203 003 227 033 Ì R<br /> 0000740 135 363 333 355 014 276 104 100 166 077 303 374 237 214 133 071<br /> 0000740 ] ó Û í \f ¾ D @ v ? à ü 237 214 [ 9<br /> 0000750 004 101 037 353 126 043 014 121 341 172 077 036 114 257 141 133<br /> 0000750 004 A 037 ë V # \f Q á z ? 036 L ¯ a [<br /> 0000760 325 142 137 254 276 212 237 371 026 335 230 100 037 325 002 137<br /> 0000760 Õ b _ ¬ ¾ 212 237 ù 026 Ý 230 @ 037 Õ 002 _<br /> 0000770 136 251 170 061 315 157 062 203 053 144 205 071 071 204 207 022<br /> 0000770 ^ © x 1 Í o 2 203 + d 205 9 9 204 207 022<br /> 0000780 027 126 237 274 011 275 032 263 360 244 162 025 234 266 153 032<br /> 0000780 027 V 237 ¼ \t ½ 032 ³ ð ¤ r 025 234 ¶ k 032<br /> 0000790 265 161 065 344 152 212 316 042 205 042 021 176 131 363 176 256<br /> 0000790 µ q 5 ä j 212 Î &quot; 205 &quot; 021 ~ Y ó ~ ®<br /> 00007a0 106 040 177 177 347 121 135 266 376 323 165 262 032 103 260 210<br /> 00007a0 F 177 177 ç Q ] ¶ þ Ó u ² 032 C ° 210<br /> 00007b0 016 043 237 201 000 276 324 015 015 041 350 035 013 362 045 263<br /> 00007b0 016 # 237 201 \0 ¾ Ô \r \r ! è 035 \v ò % ³<br /> 00007c0 251 112 115 272 130 337 162 314 202 262 253 375 260 240 115 262<br /> 00007c0 © J M º X ß r Ì 202 ² « ý ° M ²<br /> 00007d0 324 262 177 313 371 354 374 236 217 163 011 006 046 357 040 021<br /> 00007d0 Ô ² 177 Ë ù ì ü 236 217 s \t 006 &amp; ï 021<br /> 00007e0 005 134 255 133 271 040 344 171 235 273 145 136 177 223 026 142<br /> 00007e0 005 \ ­ [ ¹ ä y 235 » e ^ 177 223 026 b<br /> 00007f0 275 355 203 326 122 065 362 352 357 122 364 250 371 126 016 174<br /> 00007f0 ½ í 203 Ö R 5 ò ê ï R ô ¨ ù V 016 |<br /> 0000800 140 067 242 313 041 303 017 124 027 016 342 161 265 217 314 253<br /> 0000800 ` 7 ¢ Ë ! à 017 T 027 016 â q µ 217 Ì «<br /> 0000810 031 303 177 163 264 333 005 210 001 151 001 000 000 001 000 001<br /> 0000810 031 à 177 s ´ Û 005 210 001 i 001 \0 \0 001 \0 001<br /> 0000820 060 202 005 204 240 003 002 001 002 002 012 141 106 131 010 000<br /> 0000820 0 202 005 204 003 002 001 002 002 \n a F Y \b \0<br /> 0000830 001 000 000 000 006 060 015 006 011 052 206 110 206 367 015 001<br /> 0000830 001 \0 \0 \0 006 0 \r 006 \t * 206 H 206 ÷ \r 001<br /> 0000840 001 005 005 000 060 166 061 022 060 020 006 012 011 222 046 211<br /> 0000840 001 005 005 \0 0 v 1 022 0 020 006 \n \t 222 &amp; 211<br /> 0000850 223 362 054 144 001 031 026 002 144 145 061 030 060 026 006 012<br /> 0000850 223 ò , d 001 031 026 002 d e 1 030 0 026 006 \n<br /> 0000860 011 222 046 211 223 362 054 144 001 031 026 010 164 055 157 156<br /> 0000860 \t 222 &amp; 211 223 ò , d 001 031 026 \b t - o n<br /> 0000870 154 151 156 145 061 023 060 021 006 012 011 222 046 211 223 362<br /> 0000870 l i n e 1 023 0 021 006 \n \t 222 &amp; 211 223 ò<br /> 0000880 054 144 001 031 026 003 141 146 155 061 023 060 021 006 012 011<br /> 0000880 , d 001 031 026 003 a f m 1 023 0 021 006 \n \t<br /> 0000890 222 046 211 223 362 054 144 001 031 026 003 164 150 163 061 034<br /> 0000890 222 &amp; 211 223 ò , d 001 031 026 003 t h s 1 034<br /> 00008a0 060 032 006 003 125 004 003 023 023 101 160 160 154 151 143 141<br /> 00008a0 0 032 006 003 U 004 003 023 023 A p p l i c a<br /> 00008b0 164 151 157 156 040 122 157 157 164 040 103 101 060 036 027 015<br /> 00008b0 t i o n R o o t C A 0 036 027 \r<br /> 00008c0 060 066 060 064 062 060 061 062 062 063 062 061 132 027 015 061<br /> 00008c0 0 6 0 4 2 0 1 2 2 3 2 1 Z 027 \r 1<br /> 00008d0 062 060 064 062 060 061 062 063 063 062 061 132 060 201 211 061<br /> 00008d0 2 0 4 2 0 1 2 3 3 2 1 Z 0 201 211 1<br /> 00008e0 022 060 020 006 012 011 222 046 211 223 362 054 144 001 031 026<br /> 00008e0 022 0 020 006 \n \t 222 &amp; 211 223 ò , d 001 031 026<br /> 00008f0 002 144 145 061 030 060 026 006 012 011 222 046 211 223 362 054<br /> 00008f0 002 d e 1 030 0 026 006 \n \t 222 &amp; 211 223 ò ,<br /> 0000900 144 001 031 026 010 164 055 157 156 154 151 156 145 061 023 060<br /> 0000900 d 001 031 026 \b t - o n l i n e 1 023 0<br /> 0000910 021 006 012 011 222 046 211 223 362 054 144 001 031 026 003 141<br /> 0000910 021 006 \n \t 222 &amp; 211 223 ò , d 001 031 026 003 a<br /> 0000920 146 155 061 023 060 021 006 012 011 222 046 211 223 362 054 144<br /> 0000920 f m 1 023 0 021 006 \n \t 222 &amp; 211 223 ò , d<br /> 0000930 001 031 026 003 164 150 163 061 024 060 022 006 012 011 222 046<br /> 0000930 001 031 026 003 t h s 1 024 0 022 006 \n \t 222 &amp;<br /> 0000940 211 223 362 054 144 001 031 026 004 143 157 162 145 061 031 060<br /> 0000940 211 223 ò , d 001 031 026 004 c o r e 1 031 0<br /> 0000950 027 006 003 125 004 003 023 020 124 055 110 157 155 145 040 123<br /> 0000950 027 006 003 U 004 003 023 020 T - H o m e S<br /> 0000960 160 145 145 144 040 103 101 061 060 202 001 042 060 015 006 011<br /> 0000960 p e e d C A 1 0 202 001 &quot; 0 \r 006 \t<br /> 0000970 052 206 110 206 367 015 001 001 001 005 000 003 202 001 017 000<br /> 0000970 * 206 H 206 ÷ \r 001 001 001 005 \0 003 202 001 017 \0<br /> 0000980 060 202 001 012 002 202 001 001 000 330 015 356 267 354 170 105<br /> 0000980 0 202 001 \n 002 202 001 001 \0 Ø \r î · ì x E<br /> 0000990 334 376 346 231 147 231 272 326 154 206 036 221 015 055 132 154<br /> 0000990 Ü þ æ 231 g 231 º Ö l 206 036 221 \r - Z l<br /> 00009a0 311 014 045 047 346 055 036 260 065 046 302 002 321 262 015 346<br /> 00009a0 É \f % ' æ - 036 ° 5 &amp;  002 Ñ ² \r æ<br /> 00009b0 207 132 323 266 174 136 333 265 137 250 135 117 025 353 010 207<br /> 00009b0 207 Z Ó ¶ | ^ Û µ _ ¨ ] O 025 ë \b 207<br /> 00009c0 162 040 157 376 351 273 363 351 230 314 161 166 330 007 360 304<br /> 00009c0 r o þ é » ó é 230 Ì q v Ø \a ð Ä<br /> 00009d0 072 147 320 352 333 215 000 267 175 330 223 206 362 037 172 316<br /> 00009d0 : g Ð ê Û 215 \0 · } Ø 223 206 ò 037 z Î<br /> 00009e0 152 325 311 100 124 047 327 313 374 241 176 300 226 141 045 223<br /> 00009e0 j Õ É @ T ' × Ë ü ¡ ~ À 226 a % 223<br /> 00009f0 361 301 372 137 351 170 325 374 225 070 135 321 010 031 324 027<br /> 00009f0 ñ Á ú _ é x Õ ü 225 8 ] Ñ \b 031 Ô 027<br /> 0000a00 117 153 322 110 257 056 302 303 243 326 041 140 036 255 005 134<br /> 0000a00 O k Ò H ¯ .  à £ Ö ! ` 036 ­ 005 \<br /> 0000a10 205 323 160 112 034 347 311 336 050 313 204 264 247 271 362 165<br /> 0000a10 205 Ó p J 034 ç É Þ ( Ë 204 ´ § ¹ ò u<br /> 0000a20 215 356 172 266 356 334 236 042 170 025 176 070 245 133 333 123<br /> 0000a20 215 î z ¶ î Ü 236 &quot; x 025 ~ 8 ¥ [ Û S<br /> 0000a30 316 202 361 347 001 261 123 267 064 057 014 242 026 137 370 224<br /> 0000a30 Î 202 ñ ç 001 ± S · 4 / \f ¢ 026 _ ø 224<br /> 0000a40 120 044 050 034 255 320 305 317 132 220 344 003 270 115 006 044<br /> 0000a40 P $ ( 034 ­ Ð Å Ï Z 220 ä 003 ¸ M 006 $<br /> 0000a50 162 152 152 370 243 365 016 244 001 246 272 062 103 203 072 247<br /> 0000a50 r j j ø £ õ 016 ¤ 001 ¦ º 2 C 203 : §<br /> 0000a60 042 074 006 104 157 350 321 376 255 311 373 011 261 311 262 361<br /> 0000a60 &quot; &lt; 006 D o è Ñ þ ­ É û \t ± É ² ñ<br /> 0000a70 101 101 132 314 007 206 007 204 354 220 372 103 301 172 244 214<br /> 0000a70 A A Z Ì \a 206 \a 204 ì 220 ú C Á z ¤ 214<br /> 0000a80 043 066 320 206 207 363 351 002 107 002 003 001 000 001 243 202<br /> 0000a80 # 6 Ð 206 207 ó é 002 G 002 003 001 \0 001 £ 202<br /> 0000a90 003 026 060 202 003 022 060 017 006 003 125 035 023 001 001 377<br /> 0000a90 003 026 0 202 003 022 0 017 006 003 U 035 023 001 001 ÿ<br /> 0000aa0 004 005 060 003 001 001 377 060 035 006 003 125 035 016 004 026<br /> 0000aa0 004 005 0 003 001 001 ÿ 0 035 006 003 U 035 016 004 026<br /> 0000ab0 004 024 121 310 263 137 222 330 350 117 026 261 046 051 004 102<br /> 0000ab0 004 024 Q È ³ _ 222 Ø è O 026 ± &amp; ) 004 B<br /> 0000ac0 110 107 132 241 315 173 060 013 006 003 125 035 017 004 004 003<br /> 0000ac0 H G Z ¡ Í { 0 \v 006 003 U 035 017 004 004 003<br /> 0000ad0 002 001 206 060 022 006 011 053 006 001 004 001 202 067 025 001<br /> 0000ad0 002 001 206 0 022 006 \t + 006 001 004 001 202 7 025 001<br /> 0000ae0 004 005 002 003 001 000 001 060 043 006 011 053 006 001 004 001<br /> 0000ae0 004 005 002 003 001 \0 001 0 # 006 \t + 006 001 004 001<br /> 0000af0 202 067 025 002 004 026 004 024 253 251 263 004 231 042 376 336<br /> 0000af0 202 7 025 002 004 026 004 024 « © ³ 004 231 &quot; þ Þ<br /> 0000b00 177 232 062 232 115 325 247 175 117 151 154 003 060 031 006 011<br /> 0000b00 177 232 2 232 M Õ § } O i l 003 0 031 006 \t<br /> 0000b10 053 006 001 004 001 202 067 024 002 004 014 036 012 000 123 000<br /> 0000b10 + 006 001 004 001 202 7 024 002 004 \f 036 \n \0 S \0<br /> 0000b20 165 000 142 000 103 000 101 060 037 006 003 125 035 043 004 030<br /> 0000b20 u \0 b \0 C \0 A 0 037 006 003 U 035 # 004 030<br /> 0000b30 060 026 200 024 054 224 306 014 157 161 157 016 247 330 141 052<br /> 0000b30 0 026 200 024 , 224 Æ \f o q o 016 § Ø a *<br /> 0000b40 351 232 106 101 375 302 076 277 060 202 001 060 006 003 125 035<br /> 0000b40 é 232 F A ý  &gt; ¿ 0 202 001 0 006 003 U 035<br /> 0000b50 037 004 202 001 047 060 202 001 043 060 202 001 037 240 202 001<br /> 0000b50 037 004 202 001 ' 0 202 001 # 0 202 001 037 202 001<br /> 0000b60 033 240 202 001 027 206 201 321 154 144 141 160 072 057 057 057<br /> 0000b60 033 202 001 027 206 201 Ñ l d a p : / / /<br /> 0000b70 103 116 075 101 160 160 154 151 143 141 164 151 157 156 045 062<br /> 0000b70 C N = A p p l i c a t i o n % 2<br /> 0000b80 060 122 157 157 164 045 062 060 103 101 050 061 051 054 103 116<br /> 0000b80 0 R o o t % 2 0 C A ( 1 ) , C N<br /> 0000b90 075 103 105 122 106 060 061 060 060 061 054 103 116 075 103 104<br /> 0000b90 = C E R F 0 1 0 0 1 , C N = C D<br /> 0000ba0 120 054 103 116 075 120 165 142 154 151 143 045 062 060 113 145<br /> 0000ba0 P , C N = P u b l i c % 2 0 K e<br /> 0000bb0 171 045 062 060 123 145 162 166 151 143 145 163 054 103 116 075<br /> 0000bb0 y % 2 0 S e r v i c e s , C N =<br /> 0000bc0 123 145 162 166 151 143 145 163 054 103 116 075 103 157 156 146<br /> 0000bc0 S e r v i c e s , C N = C o n f<br /> 0000bd0 151 147 165 162 141 164 151 157 156 054 104 103 075 164 150 163<br /> 0000bd0 i g u r a t i o n , D C = t h s<br /> 0000be0 054 104 103 075 141 146 155 054 104 103 075 164 055 157 156 154<br /> 0000be0 , D C = a f m , D C = t - o n l<br /> 0000bf0 151 156 145 054 104 103 075 144 145 077 143 145 162 164 151 146<br /> 0000bf0 i n e , D C = d e ? c e r t i f<br /> 0000c00 151 143 141 164 145 122 145 166 157 143 141 164 151 157 156 114<br /> 0000c00 i c a t e R e v o c a t i o n L<br /> 0000c10 151 163 164 077 142 141 163 145 077 157 142 152 145 143 164 103<br /> 0000c10 i s t ? b a s e ? o b j e c t C<br /> 0000c20 154 141 163 163 075 143 122 114 104 151 163 164 162 151 142 165<br /> 0000c20 l a s s = c R L D i s t r i b u<br /> 0000c30 164 151 157 156 120 157 151 156 164 206 101 150 164 164 160 072<br /> 0000c30 t i o n P o i n t 206 A h t t p :<br /> 0000c40 057 057 160 153 151 056 164 150 163 056 141 146 155 056 164 055<br /> 0000c40 / / p k i . t h s . a f m . t -<br /> 0000c50 157 156 154 151 156 145 056 144 145 057 160 153 151 057 101 160<br /> 0000c50 o n l i n e . d e / p k i / A p<br /> 0000c60 160 154 151 143 141 164 151 157 156 045 062 060 122 157 157 164<br /> 0000c60 p l i c a t i o n % 2 0 R o o t<br /> 0000c70 045 062 060 103 101 050 061 051 056 143 162 154 060 202 001 050<br /> 0000c70 % 2 0 C A ( 1 ) . c r l 0 202 001 (<br /> 0000c80 006 010 053 006 001 005 005 007 001 001 004 202 001 032 060 202<br /> 0000c80 006 \b + 006 001 005 005 \a 001 001 004 202 001 032 0 202<br /> 0000c90 001 026 060 201 304 006 010 053 006 001 005 005 007 060 002 206<br /> 0000c90 001 026 0 201 Ä 006 \b + 006 001 005 005 \a 0 002 206<br /> 0000ca0 201 267 154 144 141 160 072 057 057 057 103 116 075 101 160 160<br /> 0000ca0 201 · l d a p : / / / C N = A p p<br /> 0000cb0 154 151 143 141 164 151 157 156 045 062 060 122 157 157 164 045<br /> 0000cb0 l i c a t i o n % 2 0 R o o t %<br /> 0000cc0 062 060 103 101 054 103 116 075 101 111 101 054 103 116 075 120<br /> 0000cc0 2 0 C A , C N = A I A , C N = P<br /> 0000cd0 165 142 154 151 143 045 062 060 113 145 171 045 062 060 123 145<br /> 0000cd0 u b l i c % 2 0 K e y % 2 0 S e<br /> 0000ce0 162 166 151 143 145 163 054 103 116 075 123 145 162 166 151 143<br /> 0000ce0 r v i c e s , C N = S e r v i c<br /> 0000cf0 145 163 054 103 116 075 103 157 156 146 151 147 165 162 141 164<br /> 0000cf0 e s , C N = C o n f i g u r a t<br /> 0000d00 151 157 156 054 104 103 075 164 150 163 054 104 103 075 141 146<br /> 0000d00 i o n , D C = t h s , D C = a f<br /> 0000d10 155 054 104 103 075 164 055 157 156 154 151 156 145 054 104 103<br /> 0000d10 m , D C = t - o n l i n e , D C<br /> 0000d20 075 144 145 077 143 101 103 145 162 164 151 146 151 143 141 164<br /> 0000d20 = d e ? c A C e r t i f i c a t<br /> 0000d30 145 077 142 141 163 145 077 157 142 152 145 143 164 103 154 141<br /> 0000d30 e ? b a s e ? o b j e c t C l a<br /> 0000d40 163 163 075 143 145 162 164 151 146 151 143 141 164 151 157 156<br /> 0000d40 s s = c e r t i f i c a t i o n<br /> 0000d50 101 165 164 150 157 162 151 164 171 060 115 006 010 053 006 001<br /> 0000d50 A u t h o r i t y 0 M 006 \b + 006 001<br /> 0000d60 005 005 007 060 002 206 101 150 164 164 160 072 057 057 160 153<br /> 0000d60 005 005 \a 0 002 206 A h t t p : / / p k<br /> 0000d70 151 056 164 150 163 056 141 146 155 056 164 055 157 156 154 151<br /> 0000d70 i . t h s . a f m . t - o n l i<br /> 0000d80 156 145 056 144 145 057 160 153 151 057 101 160 160 154 151 143<br /> 0000d80 n e . d e / p k i / A p p l i c<br /> 0000d90 141 164 151 157 156 045 062 060 122 157 157 164 045 062 060 103<br /> 0000d90 a t i o n % 2 0 R o o t % 2 0 C<br /> 0000da0 101 050 061 051 056 143 162 164 001 000 070 264 060 071 276 152<br /> 0000da0 A ( 1 ) . c r t 001 \0 8 ´ 0 9 ¾ j<br /> 0000db0 255 244 307 143 044 340 273 133 271 167 213 147 131 235 320 324<br /> 0000db0 ­ ¤ Ç c $ à » [ ¹ w 213 g Y 235 Ð Ô<br /> 0000dc0 075 257 360 273 125 025 242 234 353 336 161 213 241 276 023 105<br /> 0000dc0 = ¯ ð » U 025 ¢ 234 ë Þ q 213 ¡ ¾ 023 E<br /> 0000dd0 227 171 102 343 146 263 051 076 000 244 153 361 335 343 221 143<br /> 0000dd0 227 y B ã f ³ ) &gt; \0 ¤ k ñ Ý ã 221 c<br /> 0000de0 065 025 317 042 105 031 212 235 221 304 273 164 236 327 060 334<br /> 0000de0 5 025 Ï &quot; E 031 212 235 221 Ä » t 236 × 0 Ü<br /> 0000df0 306 216 214 342 242 343 045 016 070 063 305 173 314 162 002 252<br /> 0000df0 Æ 216 214 â ¢ ã % 016 8 3 Å { Ì r 002 ª<br /> 0000e00 217 351 156 321 074 002 206 204 147 304 252 076 361 034 252 072<br /> 0000e00 217 é n Ñ &lt; 002 206 204 g Ä ª &gt; ñ 034 ª :<br /> 0000e10 150 046 256 246 120 301 163 353 002 226 230 061 124 270 317 337<br /> 0000e10 h &amp; ® ¦ P Á s ë 002 226 230 1 T ¸ Ï ß<br /> 0000e20 153 076 373 031 333 230 204 341 254 214 375 330 176 030 113 153<br /> 0000e20 k &gt; û 031 Û 230 204 á ¬ 214 ý Ø ~ 030 K k<br /> 0000e30 242 030 135 232 114 275 302 303 172 030 302 304 000 274 237 321<br /> 0000e30 ¢ 030 ] 232 L ½  à z 030 Â Ä \0 ¼ 237 Ñ<br /> 0000e40 352 116 326 001 214 222 266 062 367 363 336 335 311 120 343 157<br /> 0000e40 ê N Ö 001 214 222 ¶ 2 ÷ ó Þ Ý É P ã o<br /> 0000e50 060 322 305 300 141 043 141 200 301 247 065 176 160 356 214 266<br /> 0000e50 0 Ò Å À a # a 200 Á § 5 ~ p î 214 ¶<br /> 0000e60 276 256 357 272 015 364 136 326 376 313 257 113 342 002 034 220<br /> 0000e60 ¾ ® ï º \r ô ^ Ö þ Ë ¯ K â 002 034 220<br /> 0000e70 365 353 055 074 315 365 136 210 004 367 165 006 163 217 372 016<br /> 0000e70 õ ë - &lt; Í õ ^ 210 004 ÷ u 006 s 217 ú 016<br /> 0000e80 354 300 344 232 072 070 321 037 322 333 005 046 356 142 337 010<br /> 0000e80 ì À ä 232 : 8 Ñ 037 Ò Û 005 &amp; î b ß \b<br /> 0000e90 340 070 143 062 132 010 223 134 151 316 213 311 372 020 275 164<br /> 0000e90 à 8 c 2 Z \b 223 \ i Î 213 É ú 020 ½ t<br /> 0000ea0 063 220 046 047 236 111 364 057 127 132 001 000 000 000 001 000<br /> 0000ea0 3 220 &amp; ' 236 I ô / W Z 001 \0 \0 \0 001 \0<br /> 0000eb0 000 001 000 001 257 301 375 320 012 370 004 305 064 242 360 231<br /> 0000eb0 \0 001 \0 001 ¯ Á ý Ð \n ø 004 Å 4 ¢ ð 231<br /> 0000ec0 144 323 052 154 371 375 070 111 361 006 253 203 122 002 130 211<br /> 0000ec0 d Ó * l ù ý 8 I ñ 006 « 203 R 002 X 211<br /> 0000ed0 021 071 064 053 374 077 177 220 056 276 320 126 155 204 065 316<br /> 0000ed0 021 9 4 + ü ? 177 220 . ¾ Ð V m 204 5 Î<br /> 0000ee0 005 244 216 344 266 366 165 153 347 330 174 055 276 100 167 150<br /> 0000ee0 005 ¤ 216 ä ¶ ö u k ç Ø | - ¾ @ w h<br /> 0000ef0 041 342 351 103 014 141 111 107 374 061 110 100 336 021 033 362<br /> 0000ef0 ! â é C \f a I G ü 1 H @ Þ 021 033 ò<br /> 0000f00 240 367 141 212 267 171 304 207 230 031 364 376 034 272 357 222<br /> 0000f00 ÷ a 212 · y Ä 207 230 031 ô þ 034 º ï 222<br /> 0000f10 027 165 146 106 037 252 215 154 207 200 311 222 034 172 264 173<br /> 0000f10 027 u f F 037 ª 215 l 207 200 É 222 034 z ´ {<br /> 0000f20 207 350 132 175 110 260 204 377 246 110 071 020 354 013 170 131<br /> 0000f20 207 è Z } H ° 204 ÿ ¦ H 9 020 ì \v x Y<br /> 0000f30 274 061 034 000 156 152 107 142 175 077 234 327 011 134 267 270<br /> 0000f30 ¼ 1 034 \0 n j G b } ? 234 × \t \ · ¸<br /> 0000f40 163 364 110 324 201 142 237 236 144 052 227 262 207 304 173 046<br /> 0000f40 s ô H Ô 201 b 237 236 d * 227 ² 207 Ä { &amp;<br /> 0000f50 120 110 001 126 154 077 016 155 074 006 122 235 374 361 062 155<br /> 0000f50 P H 001 V l ? 016 m &lt; 006 R 235 ü ñ 2 m<br /> 0000f60 204 000 056 374 233 053 366 344 137 334 365 056 127 070 032 073<br /> 0000f60 204 \0 . ü 233 + ö ä _ Ü õ . W 8 032 ;<br /> 0000f70 073 334 343 172 146 031 010 035 153 223 331 201 212 245 277 304<br /> 0000f70 ; Ü ã z f 031 \b 035 k 223 Ù 201 212 ¥ ¿ Ä<br /> 0000f80 151 023 072 224 257 141 052 232 116 110 167 322 306 375 265 364<br /> 0000f80 i 023 : 224 ¯ a * 232 N H w Ò Æ ý µ ô<br /> 0000f90 265 144 376 052 201 116 110 235 152 313 152 153 164 251 142 270<br /> 0000f90 µ d þ * 201 N H 235 j Ë j k t © b ¸<br /> 0000fa0 302 255 306 367 167 215 043 161 041 266 266 306 372 067 352 030<br /> 0000fa0  ­ Æ ÷ w 215 # q ! ¶ ¶ Æ ú 7 ê 030<br /> 0000fb0 241 267 323 301 001 000 046 017 214 211 010 124 361 152 227 207<br /> 0000fb0 ¡ · Ó Á 001 \0 &amp; 017 214 211 \b T ñ j 227 207<br /> 0000fc0 032 077 055 320 026 145 043 027 136 022 156 061 166 112 052 017<br /> 0000fc0 032 ? - Ð 026 e # 027 ^ 022 n 1 v J * 017<br /> 0000fd0 225 326 341 232 123 113 243 250 250 163 255 062 223 075 203 230<br /> 0000fd0 225 Ö á 232 S K £ ¨ ¨ s ­ 2 223 = 203 230<br /> 0000fe0 120 227 203 225 251 047 124 112 357 075 222 350 043 211 352 307<br /> 0000fe0 P 227 203 225 © ' T J ï = 222 è # 211 ê Ç<br /> 0000ff0 216 150 021 133 305 010 135 105 260 136 201 371 032 255 355 171<br /> 0000ff0 216 h 021 [ Å \b ] E ° ^ 201 ù 032 ­ í y<br /> 0001000 251 174 121 331 142 324 355 264 373 345 167 160 166 362 035 260<br /> 0001000 © | Q Ù b Ô í ´ û å w p v ò 035 °<br /> 0001010 202 307 212 323 261 051 363 002 103 160 276 034 151 167 322 357<br /> 0001010 202 Ç 212 Ó ± ) ó 002 C p ¾ 034 i w Ò ï<br /> 0001020 257 227 121 154 040 041 173 120 266 151 330 075 075 224 071 026<br /> 0001020 ¯ 227 Q l ! { P ¶ i Ø = = 224 9 026<br /> 0001030 371 103 231 045 351 367 052 315 260 271 352 334 236 355 211 152<br /> 0001030 ù C 231 % é ÷ * Í ° ¹ ê Ü 236 í 211 j<br /> 0001040 124 146 316 272 146 006 046 155 133 166 365 226 050 302 152 302<br /> 0001040 T f Î º f 006 &amp; m [ v õ 226 (  j Â<br /> 0001050 167 050 223 115 334 246 231 232 165 237 300 362 140 026 376 133<br /> 0001050 w ( 223 M Ü ¦ 231 232 u 237 À ò ` 026 þ [<br /> 0001060 342 262 354 321 101 060 131 242 011 014 143 141 062 240 032 044<br /> 0001060 â ² ì Ñ A 0 Y ¢ \t \f c a 2 032 $<br /> 0001070 375 300 156 023 063 162 225 131 040 156 067 220 055 207 024 346<br /> 0001070 ý À n 023 3 r 225 Y n 7 220 - 207 024 æ<br /> 0001080 045 141 303 010 235 160 266 177 360 041 115 246 005 045 346 164<br /> 0001080 % a à \b 235 p ¶ 177 ð ! M ¦ 005 % æ t<br /> 0001090 205 126 127 360 360 333 262 154 016 101 067 302 067 005 046 056<br /> 0001090 205 V W ð ð Û ² l 016 A 7  7 005 &amp; .<br /> 00010a0 271 003 211 175 277 222 140 241 301 344 053 040 107 043 217 110<br /> 00010a0 ¹ 003 211 } ¿ 222 ` ¡ Á ä + G # 217 H<br /> 00010b0 372 137 242 020 051 164 <br /> 00010b0 ú _ ¢ 020 ) t <br /> 00010b6<br /> &lt;/pre&gt;<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=HDD-Layout 2012-04-03T19:49:35Z

<p>Dans34: </p> <hr /> <div>&lt;pre&gt;<br /> x300t: hdd layout<br /> <br /> Disk /dev/hdX: 255 heads, 63 sectors, 9729 cylinders<br /> Units = cylinders of 16065 * 512 bytes<br /> <br /> Device Boot Start End Blocks Id System<br /> /dev/hdX1 * 1 17 129055+ 6 FAT16<br /> Partition 1 does not end on cylinder boundary:<br /> phys=(1023, 1, 63) should be (1023, 254, 63)<br /> /dev/hdX2 17 9730 78021657 b Win95 FAT32<br /> Partition 2 does not end on cylinder boundary:<br /> phys=(436, 15, 63) should be (436, 254, 63)<br /> <br /> <br /> # file bootblock.dd<br /> bootblock.dd: x86 boot sector, extended partition table<br /> &lt;/pre&gt;<br /> <br /> <br /> [[category:x300t]][[category:Hardware]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Bootstrap-Message 2012-04-03T19:49:13Z

<p>Dans34: </p> <hr /> <div>&lt;pre&gt;<br /> x300t: bootloader msgs<br /> <br /> xosPc8 serial#e3eec781720b9f8258d2b8d9xxxxxxxx subid 0xc4<br /> xenv cs2 ok<br /> power supply: ok<br /> dram0 ok (7)<br /> dram1 ok (7)<br /> zboot ok<br /> SIGNED BL<br /> <br /> Microsoft IPTV Bootloader, Build (1039)<br /> Built by BM-DELL-167, Jul 13 2006 20:19:03<br /> <br /> &lt;/pre&gt;<br /> <br /> &lt;pre&gt;<br /> with 115k2 baud; SW1 == reset switch (usefull). 14pin J5 looks like JTAG.<br /> <br /> JP4:<br /> 1 - n/c<br /> 2 - CD?<br /> 3 - DSR?<br /> 4 - CTS?<br /> 5 - RXD<br /> 6 - TXD<br /> 7 - RTS?<br /> 8 - DTR?<br /> 9 - Vcc +5V<br /> 10 - GND<br /> <br /> JP5:<br /> <br /> 1 - TRST<br /> 2 - GND<br /> 3 - TDI<br /> 4 - GND<br /> 5 - TDO<br /> 6 - GND<br /> 7 - TMS<br /> 8 - GND<br /> 9 - TCK<br /> 10 - GND<br /> 11 - RESET<br /> 12 - n/c<br /> 13 - 10k pulldown<br /> 14 - 10k pullup - &quot;target connected&quot;?<br /> &lt;/pre&gt;<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Remote_Debugging 2012-04-03T19:48:43Z

<p>Dans34: </p> <hr /> <div>Copy these files to the box.&lt;br&gt;<br /> they need to go into the folder&lt;br&gt;<br /> \hard disk\win&lt;br&gt;<br /> <br /> [win.rar:http://www.t-hack.com/wiki/images/7/72/Win.rar]<br /> <br /> Always remember : '''The debug files are version dependent''' !&lt;br&gt;<br /> VS05 debug files will not work with VS05 SP1, and VS08 files do not work with VS05, so '''use your OWN files if possible!'''&lt;br&gt;<br /> I.e. installing VS08 on a box with VS05 or copying vs05 sp1 files and trying to connect with VS05 without SP1 does NOT work.&lt;br&gt;<br /> My advice : Stick to VS05 sp1, because you might want to be able to compile native ce 5.0 apps for the box.&lt;br&gt;<br /> <br /> <br /> <br /> [[category:WinCe]][[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=NK.BIN_Patcher 2012-04-03T19:48:29Z

<p>Dans34: </p> <hr /> <div>NK Patcher is a C# GUI application that patches a NK.BIN file to allow unsigned applications to run outside of the windows folder (rom).<br /> <br /> '''[[Media:NKpatcher.rar|Download NK Patcher]]'''<br /> <br /> <br /> '''New Version'''<br /> <br /> The following version is by Dark Neo, based on the original source code from isO-Mick, that adds support for disabling the Watchdog that monitors the TV2Client:<br /> <br /> '''[[Media:NKBINPatcher.rar|Download New Version]]'''<br /> <br /> [[category:WinCe]][[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Download_Update_Files 2012-04-03T19:48:19Z

<p>Dans34: </p> <hr /> <div>This tool (written in C#) downloads, decrypts and unpacks the update files (PKG) from the Telekom or BT-Vision server.<br /> <br /> '''[[Media:PKGTool.zip|Download PKGTool]]'''<br /> <br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=MakeNK 2012-04-03T19:48:02Z

<p>Dans34: </p> <hr /> <div>MakeNK is a C# GUI application that allows to create a NK.BIN file that contains several memory dumps. <br /> <br /> This can be used to let the Bootloader load a Linux Kernel and start it :)<br /> <br /> the archive does not include any memory dumps.<br /> <br /> '''[[Media:MakeNK.zip|Download MakeNK]]'''<br /> <br /> <br /> ----<br /> <br /> here is a zboot dump that has to be loaded to 0x91200000.<br /> <br /> the zboot will try to process a romfs located at 0x90800000, if this does not exist or no bootable xload was found in the romfs, it will jump to 0x90020000.<br /> <br /> '''[[Media:Zboot-forLinux9120.zip|Download zboot dump]]'''<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=NK.BIN_toolset 2012-04-03T19:47:51Z

<p>Dans34: </p> <hr /> <div>Content of this toolset:<br /> <br /> viewbin.exe - shows the contents of the NK.BIN<br /> <br /> cvrtbin.exe - converts the NK.BIN to and from other formats<br /> <br /> binmod.exe - is able to replace files inside the NK.BIN however it has several limitations<br /> <br /> dumprom.exe - this tool extracts all files and modules from the kernel. It does not use NK.BIN files as input but NK.nb0 files, which can be created with the cvrtbin.exe<br /> <br /> [[Media:Nkbintools.zip|Download the toolset]]<br /> <br /> Output from a sample session using BT Vision files<br /> [[sample output]]<br /> <br /> <br /> <br /> '''to dump the content of a nk.bin''':<br /> <br /> *'''viewbin.exe nk.bin'''<br /> write down start and length<br /> <br /> *'''cvrtbin -r -a START -w 32 -l LENGTH nk.bin'''<br /> this command converts the nk.bin to a nk.nb0 (START and LENGTH from the command bevor)<br /> <br /> *'''dumprom.exe -d dump -v -5 nk.nb0'''<br /> the content of the nk.bin will be written in the directory &quot;dump&quot;. It must exists, otherwise an error occurs.<br /> <br /> [[Category:WinCe]][[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Upload_YAMON 2012-04-03T19:47:26Z

<p>Dans34: </p> <hr /> <div>YAMON is a standard debug tool for MIPS CPUs. <br /> <br /> some examples what it can do<br /> <br /> * load and save binary data.<br /> * disassemble memory<br /> * start code<br /> <br /> use the 'help' command to find all the commands<br /> <br /> '''[[Media:X300t-yamon.zip|download YAMON upload tool (src included)]]'''<br /> <br /> <br /> usage:<br /> *use the loaddrv.exe to start the giveio.sys driver. it is needed to use the parallel port.<br /> *boot the x300t without network cable and have it reboot until it complains about missing network ... &quot;internet ok?&quot; in display<br /> *now start the x300yamon.exe and wait for the upload to complete.<br /> *finally fire up the terminal tool (115000 8N1) and press the OK button on the box.<br /> *you should instantly get some output on the serial port.<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Disable_X300T_Signature_Check 2012-04-03T19:47:15Z

<p>Dans34: </p> <hr /> <div>The signature check on the bootloader itself cannot be removed, since it happens inside the SMP8634. However it is possible to disable the signature check of the NK.BIN so that a modified kernel can be booted.<br /> <br /> This modified kernel can be even a Linux kernel that is hidden inside a special NK.BIN.<br /> <br /> Please note that this only works if there is a JTAG connection between a PC and the X300T.<br /> <br /> '''[[Media:X300tpatch.zip|download the patch tool v1]]''' ---<br /> '''[[Media:X300tpatch-src.zip|download the source v1]]'''<br /> <br /> '''[[Media:X300tpatch2.zip|download the patch tool v2 (src included)]]'''<br /> <br /> '''[[Media:X300tpatch3.zip|download the patch tool v3 (src included)]]'''<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Dump_X300T_Bootloader 2012-04-03T19:46:58Z

<p>Dans34: </p> <hr /> <div>The Bootloader in the Flashrom is encrypted, so it is not helpful to investigate the content of the rom.<br /> <br /> However, the rom is decrypted into RAM before it is started.<br /> <br /> You need a JTAG connection from a PC to the X300T to use the dump tool and it will take<br /> about 30 minutes to dump the data into a file.<br /> <br /> '''[[Media:X300tdump.zip|Download the dump tool]]'''<br /> <br /> if you are using a wiggler cable you need to use /wiggler as a comandline parameter.<br /> <br /> <br /> <br /> == C# version of the dump tool ==<br /> for those who have problems with the above tool, please try this one.<br /> it uses a different driver dll and is written in C#.<br /> due to the driver it seems to be a lot slower than the C version.<br /> <br /> '''[[Media:X300tdump-cs.zip|Download the C# version]]'''<br /> <br /> if you are using a wiggler cable you need to use /wiggler as a comandline parameter.<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Tools 2012-04-03T19:46:46Z

<p>Dans34: </p> <hr /> <div>At this Point,you can download some tools to edit/modify/create/extract files of the X30xT:<br /> <br /> '''[[Dump X300T Bootloader]]'''&lt;br&gt;<br /> With this tool, you are able to dump the bootloader of the X300T. It's not been tested, if you can dump the bootloader of the X301T, too. So someone should test it!<br /> <br /> '''[[Debrick SMP863x Device]]'''&lt;br&gt;<br /> This is a modified version of the WRT-Debrick Tool. It recognizes the SMP863x CPU and allows to flash even when the device does not boot up any more.<br /> <br /> '''[[Disable X300T Signature Check]]'''&lt;br&gt;<br /> This tool can disable the signature check, so you'r able to boot a Linux-Kernel or something else.<br /> Currently there is nothing else to boot than the WinCE 5.0.<br /> <br /> '''[[NK.BIN toolset]]'''&lt;br&gt;<br /> These tools are used to view, modify and dump the NK.BIN<br /> <br /> '''[[MakeNK|Fake NK.BIN creator]]'''&lt;br&gt;<br /> This small GUI tool allows to package a Linux Kernel and/or other binary memory dumps into a NK.BIN file that will be accepted by the MS IPTV Bootloader. Of course this will only work if the signature check is disabled :)<br /> <br /> '''[[NK.BIN Patcher]]'''&lt;br&gt;<br /> This tool patches the NK.BIN to disable the signature checking on exe files outside the windows folder<br /> It also fixes up the record checksum after patching.<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Pictures_inside_bootloader 2012-04-03T19:46:22Z

<p>Dans34: </p> <hr /> <div>The dump of the bootloader contains 4 different pictures.<br /> They are packed with deflate and the following program is able to find the pictures and inflate them.<br /> <br /> &lt;pre&gt;<br /> python2.5 /Users/xxx/Desktop/zlib-decrypt.py<br /> License: GPLv2<br /> Author: pcgeil<br /> search inside a file for zlib headers and extract them<br /> <br /> Version: 0.1beta - 10-12-2008<br /> <br /> Usage:<br /> &lt;argv1&gt; source file<br /> &lt;argv2&gt; dest file<br /> [&lt;argv3&gt; offset dezimal]<br /> [&lt;argv4&gt; end dezimal]<br /> <br /> &lt;/pre&gt;<br /> <br /> The following output is with the bootloader v1051.<br /> &lt;pre&gt;<br /> python2.5 /Users/xxx/Desktop/zlib-decrypt.py /Users/xxx/Desktop/BOOTLOADER_20081128_204145_1 /Users/xxx/Desktop/test.txt 430000 440000<br /> <br /> License: GPLv2<br /> Author: pcgeil<br /> search inside a file for zlib headers and extract them<br /> <br /> Version: 0.1beta - 10-12-2008<br /> <br /> Using:<br /> Source: /Users/xxx/Desktop/BOOTLOADER_20081128_204145_1<br /> Dest: /Users/xxx/Desktop/test.txt<br /> <br /> Length is: 0x100000<br /> 0x69bac <br /> Found at address: 0x69bac<br /> 0x6a05c <br /> Found at address: 0x6a05c<br /> 0x6a3f4 <br /> Found at address: 0x6a3f4<br /> 0x6a6d4 <br /> Found at address: 0x6a6d4<br /> 0x6b6bf Now extract the files which are found<br /> [+]Done writing to /Users/xxx/Desktop/test.txt-0<br /> [+]Done writing to /Users/xxx/Desktop/test.txt-1<br /> [+]Done writing to /Users/xxx/Desktop/test.txt-2<br /> [+]Done writing to /Users/xxx/Desktop/test.txt-3<br /> &lt;/pre&gt;<br /> <br /> <br /> Download Python-Script:<br /> [http://www.t-hack.com/wiki/images/5/55/Zlib-decrypt_py.zip]<br /> <br /> <br /> Bootloader V1039:<br /> <br /> <br /> 0x00067bac . 1192 --&gt; 307396<br /> <br /> 0x0006805c . 909 --&gt; 307400<br /> <br /> 0x000683f4 . 727 --&gt; 307376<br /> <br /> 0x000686d4 .. 4064 --&gt; 307826<br /> <br /> <br /> <br /> Bootloader V1053:<br /> <br /> <br /> 0x0006bbac . 1192 --&gt; 307396<br /> <br /> 0x0006c05c . 909 --&gt; 307400<br /> <br /> 0x0006c3f4 . 727 --&gt; 307376<br /> <br /> 0x0006c6d4 .. 4064 --&gt; 307826<br /> <br /> <br /> Bootloader V1527 (BT VISION):<br /> <br /> <br /> <br /> Length is: 0x100000<br /> <br /> <br /> Found at address: 0x67bac<br /> <br /> <br /> Found at address: 0x70150<br /> <br /> <br /> Found at address: 0x77620<br /> <br /> 0xfffff Now extract the files which are found<br /> <br /> [+]Done writing to test.txt-0<br /> <br /> [+]Done writing to test.txt-1<br /> <br /> [+]Done writing to test.txt-2<br /> <br /> [[category:Software]][[category:EN]]<br /> <br /> All 300k (307772 Bytes)</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Bootloader 2012-04-03T19:46:02Z

<p>Dans34: </p> <hr /> <div>Here are some information containing the bootloader of X300T<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Boot_Process 2012-04-03T19:45:41Z

<p>Dans34: </p> <hr /> <div>[[Image:Boot.png|thumb|Box Boot Process Diagram|300px]]<br /> === CPU internal ===<br /> The SMP863x has a security coprocessor ([[XPU]]) that is responsible for controlling the boot process.<br /> <br /> It has a bios like bootstrap code ([[XOS]]) in internal flash memory. This bootstrap code cannot be read from outside the CPU.<br /> <br /> === Bootloader in Flash ===<br /> The [[XOS]] tries to find the an [[XENV]] block in the external flash memory. <br /> <br /> The [[XENV]] contains a pointer where the flash-boot-partition is located. The boot partition is encrypted and signed in case of the x300t. Therefore the [[XPU]] decrypts the flash-boot-partition and stores the decrypted code in RAM.<br /> <br /> The signature of the boot partition is verified, and if it is ok, then the [[XPU]] triggers the CPU to start the code from RAM.<br /> <br /> This code is the IPTV Bootloader. It does some hardware inits and downloads the &quot;bootstrap&quot; file via TFTP from discovery.iptv.t-online.de<br /> <br /> The content of this file is not important for the boot itself. (On the BT-Vision version the file contains some Certificate information. Maybe this is part of the trust chain - will the box accept any CA cert, i.e. if this is the start of the chain, or is there a cert that verifies this one that is already in flash? I do not recognise the format, but the strings make this look like a BT Vision CA cert signed by the BT root CA.)<br /> <br /> Next step is the Desaster-Recovery check. On the 1st partition on the harddrive there is the file &quot;BOOT.PRF&quot;. This file contains a boot counter that is increased on each boot attempt by the IPTV Bootloader. If the BOOT.PRF file is not found or if the boot counter is at least 4, then a Desaster-Recovery is triggered.<br /> <br /> === Disaster-Recovery ===<br /> For Disaster-Recovery the Bootloader downloads the files &quot;sync&quot; and &quot;dra&quot; from discovery.iptv.t-online.de also via TFTP. (On the BT-Vision version the file sync contains the dns name of the server to download dra from, and a some Certificate information).<br /> <br /> dra contains a WinCE kernel (NK.BIN) and a signed hash for the kernel. If the signature is correct, then the kernel is started.<br /> <br /> The NK.BIN is a stripped down WinCE 5.0 kernel, with some SMP863x drivers, DotNet Compact 2.0 and a Boot application (TV2DRACE.exe)<br /> <br /> The WinCE initializes the hardware and starts the TV2DRACE.exe (a C# application)<br /> <br /> The TV2DRACE.exe will download the IPTV application with all its data files from the t-online server, same way as the regular [[IPTV application update]] takes place.<br /> <br /> After all the files are extracted to harddisk, the box will reboot because there is also a new NK.BIN included in the application files.<br /> <br /> The Bootloader will detect that there is a NK.BIN on the harddrive and it will check the signature that is in the boot.sig file.<br /> <br /> If the signatur is ok, and the hash and size of the NK.BIN matches as well, then it will start the new NK.BIN.<br /> <br /> The new NK.BIN is similar to the one that is in the &quot;dra&quot; but it has much more files, and instead of a TV2DRACE.exe it contains a BooterCE.exe<br /> <br /> === BooterCE ===<br /> The BooterCE.exe autostarts and will check if there is an update available on the bootstrap server of t-online. If this is true the [[IPTV application update]] is started.<br /> <br /> Next the BooterCE.exe searches the harddrive for *.sig files and processes them. Any file that is not listed in a .sig file will be deleted. If an incorrect hash is found, then the system will be rebooted... which will finally result in a desaster recovery.<br /> <br /> The file check takes quite some time as it is recursively checking all files on the first partition. If no problems were found then the TV2Client.exe (C#) is started. The TV2Client.exe is now embedded in the NK.BIN (in earlier version it was stored on the harddrive)<br /> <br /> The TV2Client.exe is the application that handles all the communication with the IPTV server and it also creates the GUI that is seen on TV.<br /> <br /> [[category:Software]][[category:EN]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Main_Page 2012-04-03T18:34:26Z

<p>Dans34: </p> <hr /> <div>__NOTOC__<br /> &lt;!-- = '''Registering''' = --&gt;<br /> &lt;!-- Style Stolen.. ahem I mean borrowed from Wikipedia Homepage --&gt;<br /> {| style=&quot;margin:4px 0 0 0; width:100%; border:1px solid #F2CECE; background:#FFF5F5; vertical-align:top; &quot;<br /> | class=&quot;MainPageBG&quot; style=&quot;width:100%; border:1px color:#000;&quot;|<br /> {| style=&quot;vertical-align:top; background:#FFF5F5; color:#000; width:100%&quot;<br /> ! style=&quot;padding:2px&quot; | &lt;h1 id=&quot;mp-tfp-h2&quot; style=&quot;margin:3px; background:#F2CECE; font-size:120%; font-weight:bold; border:1px solid #BFA3A3; text-align:left; color:#000; padding:0.2em 0.4em&quot;&gt;Welcome to the wiki of t-hack.com&lt;/h1&gt;<br /> |-<br /> | style=&quot;color:#000;padding: 2px&quot; | &lt;div id=&quot;mp-tfp&quot;&gt;<br /> T-hack.com has been founded at the 14. December 2007, to invent/improve the software on X300T/X301T and similar boxes, like DIT9719 / KISS KMM / BT Vision/ Bluewin TV-Box /V-BOX / VIP 1216. <br /> &lt;br&gt;&lt;br&gt;<br /> '''Due to severe abuse, all users will now need to contact An Administrator via PM to get a Wiki account before they can contribute.'''<br /> &lt;br /&gt;&lt;br&gt;<br /> &lt;STRIKE&gt;'''You are able to upload files with following extension (max file size 100MB):<br /> png, gif, jpg, jpeg, zip, rar, pdf, ace'''&lt;/STRIKE&gt;<br /> &lt;/div&gt;<br /> |}<br /> |}<br /> <br /> <br /> <br /> Visit the [http://www.t-hack.com/forum t-hack-Board]<br /> <br /> == Status quo (May 2009)==<br /> &lt;div style=&quot;margin:0;background-color:#ff0000;font-family:sans-serif;font-size:120%;font-weight:bold;border:1px solid;text-align:left;color:#000;padding-left:0.4em;padding-top:0.2em;padding-bottom:0.2em; width:10%;&quot;&gt;[http://www.t-hack.com/forum/index.php?topic=252.0 How-To (English)]&lt;/div&gt;<br /> <br /> '''Linux'''<br /> * You can boot linux&lt;STRIKE&gt;, but the microcodes can't (yet) be loaded . So unfortunaly you won't have an Image and sound.&lt;/STRIKE&gt;&lt;span style=&quot;color:green&quot;&gt;'''Video &amp; Audio available now'''&lt;/span&gt;<br /> <br /> '''Windows CE'''<br /> * Its possible to compile and run own native as well as .NET-based applications on the box. Also its possible to debug it with MSVC2005 &amp; MSVC2008 (MSVC = Microsoft Visual Studio).<br /> <br /> '''You can run any Code on the box''' but you need a Modchip or an external PC to patch the security-features. Soldering is required! Also you've to connect the internal HD to a PC for software-modifications once.<br /> <br /> &lt;!-- = '''Registering''' = --&gt;<br /> &lt;!-- Style Stolen.. ahem I mean borrowed from Wikipedia Homepage --&gt;<br /> {| style=&quot;margin:4px 0 0 0; width:100%; border:1px solid #F2CECE; background:#FFF5F5; vertical-align:top; &quot;<br /> | class=&quot;MainPageBG&quot; style=&quot;width:100%; border:1px color:#000;&quot;|<br /> {| style=&quot;vertical-align:top; background:#FFF5F5; color:#000; width:100%&quot;<br /> ! style=&quot;padding:2px&quot; | &lt;h1 id=&quot;mp-tfp-h2&quot; style=&quot;margin:3px; background:#F2CECE; font-size:120%; font-weight:bold; border:1px solid #BFA3A3; text-align:left; color:#000; padding:0.2em 0.4em&quot;&gt;Willkommen zum Wiki von t-hack.com&lt;/h1&gt;<br /> |-<br /> | style=&quot;color:#000;padding: 2px&quot; | &lt;div id=&quot;mp-tfp&quot;&gt;<br /> Das t-hack.com - Projekt wurde am 14. Dezember 2007 ins Leben gerufen, um eine alternative Software für die Multimedia-Box X300T bzw. X301T und baugleiche Boxen zu entwickeln bzw. die originale zu verbessern ;)<br /> &lt;br&gt;&lt;br&gt;<br /> '''Das Wiki ist zum Schutz vor Spambots nur von registrierten Usern nutzbar.'''<br /> &lt;br /&gt;&lt;br&gt;<br /> &lt;STRIKE&gt;''''Es ist möglich folgende Dateitypen hochzuladen (max Dateigröße 100MB):<br /> png, gif, jpg, jpeg, zip, rar, pdf, ace'''&lt;/STRIKE&gt;<br /> &lt;/div&gt;<br /> |}<br /> |}<br /> Besuchen Sie auch das [http://www.t-hack.com/forum t-hack-Forum]<br /> <br /> <br /> == Momentaner Status (Mai 2009)==<br /> <br /> &lt;div style=&quot;margin:0;background-color:#ff0000;font-family:sans-serif;font-size:120%;font-weight:bold;border:1px solid;text-align:left;color:#000;padding-left:0.4em;padding-top:0.2em;padding-bottom:0.2em; width:10%;&quot;&gt;[http://www.t-hack.com/forum/index.php?topic=244.0 How-To (Deutsch)]&lt;/div&gt;<br /> <br /> '''Linux'''<br /> * Linux kann auf der Box gebootet werden&lt;STRIKE&gt;, da aber immer noch keine Microcodes geladen werden können, macht das wenig Sinn (Keine Ausgabe von Bild/Ton möglich).&lt;/STRIKE&gt;&lt;span style=&quot;color:green&quot;&gt;'''Nun gibts Audio &amp; Video :)'''&lt;/span&gt;<br /> <br /> '''Windows CE'''<br /> * Es ist möglich eigene native Anwendungen als auch .net-basierende Anwendungen auf der Box auszuführen und mit MSVC2005 &amp; MSVC2008 (MSVC = Microsoft Visual Studio) zu debuggen.<br /> <br /> Konkret heisst das : &lt;b&gt;Beliebigen, eigenen Code auf der Box ausführen ist möglich!&lt;/b&gt;<br /> <br /> Erforderlich ist ein Modchip oder ein zusätzlicher Rechner (zum Patchen), &lt;u&gt;jegliche&lt;/u&gt; Modifikation setzt das Löten an der Box und das zumindest einmalige Ausbauen der Festplatte voraus!<br /> <br /> {| cellpadding=&quot;10&quot;<br /> | valign=&quot;top&quot; width=&quot;30%&quot;|<br /> <br /> == Hardware ==<br /> *[[Picture|Hardware Images]]<br /> *[[Schematic/Boardlayout]]<br /> *[[hardware-versions]]<br /> *[[SMP8634]]<br /> *[[eJTAG|eJTAG on PCB]]<br /> *[[eJTAG on SMP]]<br /> *[[UART0|Serial Debug Port]]<br /> *[[Display]]<br /> *[[X300t_tuner| X300t Tuner]]<br /> *[[BT_Vision_Box_40823]]<br /> <br /> == Additional smp8634 / tango2 stuff==<br /> *[[A_detailed_look_at_the_boot_process| A detailed look at the boot process]]<br /> *[[XRPC| The WinCE way of making XRPC calls]]<br /> *[[Xrpc_call_list| XRPC list including descriptions]]<br /> *[[Smp8634_certificate_stuff| Smp8634 certificate information]]<br /> *[[Common_pitfalls_when_working_with_smp_based_devices|Common pitfalls when working with smp based devices]]<br /> <br /> ==Linux==<br /> * How Sigma's [[RUA]] Package works<br /> *[[Toolchain]]<br /> *[[Toolchain_new]]<br /> *[[Howto boot Linux]]<br /> *[[Setup NFS-Root-Filesystem]]<br /> *IPTV-fähiger Router mit [[fli4l]]<br /> **[[Grundinformationen]]<br /> **[[Wir legen los]]<br /> **[[Konfiguration anpassen]]<br /> **[[Wichtige Links]]<br /> **[[ein Wort in eigener Sache]]<br /> *[[some additional output regarding Linux]]<br /> *[[Dvi.bin]]<br /> | valign=&quot;top&quot; width=&quot;30%&quot;|<br /> <br /> ==Software==<br /> *[[Boot Process]]<br /> **[[Bootloader]]<br /> ***[[pictures inside bootloader]]<br /> *[[Tools]]<br /> **[[Dump X300T Bootloader]]<br /> **[[Disable X300T Signature Check]]<br /> **[[Upload YAMON]]<br /> **[[NK.BIN_toolset]]<br /> **[[MakeNK]]<br /> **[[Download Update Files]]<br /> **[[NK.BIN Patcher]]<br /> **[[Debug Files for remote debugging]]<br /> *[[Bootstrap-Message]]<br /> *[[HDD-Layout]]<br /> *[[Network-Bootstrap]]<br /> *[[TV2ClientCE.exe]]<br /> *[[BooterCE.exe]]<br /> *[[TFTP]]<br /> *[[ATmega88]]<br /> *[[A_closer_look_at_TV2Engine_MacrovisionEnable|A closer look at TV2Engine_MacrovisionEnable]]<br /> *[[Smp8634_certificate_stuff]]<br /> <br /> ==WinCE==<br /> *[[Disable TrustModel]]<br /> <br /> | valign=&quot;top&quot; width=&quot;30%&quot;|<br /> ==Links/Information==<br /> *[[Bootlog??|Bootlog of Beta X300T]]<br /> *[[x300tBeta|Flash dump of Beta X300T]]<br /> *[[Workaround, damit mehrere Settopboxen im Netz sind und die Timeshift-Funktion erhalten bleibt]]<br /> *[[PKG.DIR]]<br /> *[[NK.BIN]]<br /> *[[Media:131008_AN.zip|x300t client&lt;-&gt;server xml communication dump]]<br /> <br /> ==Pirelli STB HY100 (aka IP100)==<br /> *[[UART0 output]]<br /> *[[Pictures]]<br /> *[[Firmware Aufbau Arcor]]<br /> <br /> ==Netbox 8160==<br /> <br /> *[[Netbox 8160 presentation]]<br /> <br /> ==Other SMP based boxes==<br /> *[[SMP_Boxes]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Main_Page 2012-04-03T08:59:33Z

<p>Dans34: </p> <hr /> <div>__NOTOC__<br /> &lt;!-- = '''Registering''' = --&gt;<br /> &lt;!-- Style Stolen.. ahem I mean borrowed from Wikipedia Homepage --&gt;<br /> {| style=&quot;margin:4px 0 0 0; width:100%; border:1px solid #F2CECE; background:#FFF5F5; vertical-align:top; &quot;<br /> | class=&quot;MainPageBG&quot; style=&quot;width:100%; border:1px color:#000;&quot;|<br /> {| style=&quot;vertical-align:top; background:#FFF5F5; color:#000; width:100%&quot;<br /> ! style=&quot;padding:2px&quot; | &lt;h1 id=&quot;mp-tfp-h2&quot; style=&quot;margin:3px; background:#F2CECE; font-size:120%; font-weight:bold; border:1px solid #BFA3A3; text-align:left; color:#000; padding:0.2em 0.4em&quot;&gt;Welcome to the wiki of t-hack.com&lt;/h1&gt;<br /> |-<br /> | style=&quot;color:#000;padding: 2px&quot; | &lt;div id=&quot;mp-tfp&quot;&gt;<br /> T-hack.com has been founded at the 14. December 2007, to invent/improve the software on X300T/X301T and similar boxes, like DIT9719 / KISS KMM / BT Vision/ Bluewin TV-Box /V-BOX / VIP 1216. <br /> &lt;br&gt;&lt;br&gt;<br /> '''Due to severe abuse, all users will now need to contact An Administrator via PM to get a Wiki account before they can contribute.'''<br /> &lt;br /&gt;&lt;br&gt;<br /> &lt;STRIKE&gt;'''You are able to upload files with following extension (max file size 100MB):<br /> png, gif, jpg, jpeg, zip, rar, pdf, ace'''&lt;/STRIKE&gt;<br /> &lt;/div&gt;<br /> |}<br /> |}<br /> <br /> <br /> <br /> Visit the [http://www.t-hack.com/forum t-hack-Board]<br /> <br /> == Status quo (May 2009)==<br /> &lt;div style=&quot;margin:0;background-color:#ff0000;font-family:sans-serif;font-size:120%;font-weight:bold;border:1px solid;text-align:left;color:#000;padding-left:0.4em;padding-top:0.2em;padding-bottom:0.2em; width:10%;&quot;&gt;[http://www.t-hack.com/forum/index.php?topic=252.0 How-To (English)]&lt;/div&gt;<br /> <br /> '''Linux'''<br /> * You can boot linux&lt;STRIKE&gt;, but the microcodes can't (yet) be loaded . So unfortunaly you won't have an Image and sound.&lt;/STRIKE&gt;&lt;span style=&quot;color:green&quot;&gt;'''Video &amp; Audio available now'''&lt;/span&gt;<br /> <br /> '''Windows CE'''<br /> * Its possible to compile and run own native as well as .NET-based applications on the box. Also its possible to debug it with MSVC2005 &amp; MSVC2008 (MSVC = Microsoft Visual Studio).<br /> <br /> '''You can run any Code on the box''' but you need a Modchip or an external PC to patch the security-features. Soldering is required! Also you've to connect the internal HD to a PC for software-modifications once.<br /> <br /> ==Willkommen zum Wiki von t-hack.com==<br /> <br /> Das t-hack.com - Projekt wurde am 14. Dezember 2007 ins Leben gerufen, um eine alternative Software für die Multimedia-Box X300T bzw. X301T und baugleiche Boxen zu entwickeln bzw. die originale zu verbessern ;)<br /> <br /> '''Das Wiki ist zum Schutz vor Spambots nur von registrierten Usern nutzbar.'''<br /> <br /> '''Es ist möglich folgende Dateitypen hochzuladen (max Dateigröße 100MB):<br /> png, gif, jpg, jpeg, zip, rar, pdf, ace'''<br /> <br /> Besuchen Sie auch das [http://www.t-hack.com/forum t-hack-Forum]<br /> <br /> <br /> == Momentaner Status (Mai 2009)==<br /> <br /> &lt;div style=&quot;margin:0;background-color:#ff0000;font-family:sans-serif;font-size:120%;font-weight:bold;border:1px solid;text-align:left;color:#000;padding-left:0.4em;padding-top:0.2em;padding-bottom:0.2em; width:10%;&quot;&gt;[http://www.t-hack.com/forum/index.php?topic=244.0 How-To (Deutsch)]&lt;/div&gt;<br /> <br /> '''Linux'''<br /> * Linux kann auf der Box gebootet werden&lt;STRIKE&gt;, da aber immer noch keine Microcodes geladen werden können, macht das wenig Sinn (Keine Ausgabe von Bild/Ton möglich).&lt;/STRIKE&gt;&lt;span style=&quot;color:green&quot;&gt;'''Nun gibts Audio &amp; Video :)'''&lt;/span&gt;<br /> <br /> '''Windows CE'''<br /> * Es ist möglich eigene native Anwendungen als auch .net-basierende Anwendungen auf der Box auszuführen und mit MSVC2005 &amp; MSVC2008 (MSVC = Microsoft Visual Studio) zu debuggen.<br /> <br /> Konkret heisst das : &lt;b&gt;Beliebigen, eigenen Code auf der Box ausführen ist möglich!&lt;/b&gt;<br /> <br /> Erforderlich ist ein Modchip oder ein zusätzlicher Rechner (zum Patchen), &lt;u&gt;jegliche&lt;/u&gt; Modifikation setzt das Löten an der Box und das zumindest einmalige Ausbauen der Festplatte voraus!<br /> <br /> {| cellpadding=&quot;10&quot;<br /> | valign=&quot;top&quot; width=&quot;30%&quot;|<br /> <br /> == Hardware ==<br /> *[[Picture|Hardware Images]]<br /> *[[Schematic/Boardlayout]]<br /> *[[hardware-versions]]<br /> *[[SMP8634]]<br /> *[[eJTAG|eJTAG on PCB]]<br /> *[[eJTAG on SMP]]<br /> *[[UART0|Serial Debug Port]]<br /> *[[Display]]<br /> *[[X300t_tuner| X300t Tuner]]<br /> *[[BT_Vision_Box_40823]]<br /> <br /> == Additional smp8634 / tango2 stuff==<br /> *[[A_detailed_look_at_the_boot_process| A detailed look at the boot process]]<br /> *[[XRPC| The WinCE way of making XRPC calls]]<br /> *[[Xrpc_call_list| XRPC list including descriptions]]<br /> *[[Smp8634_certificate_stuff| Smp8634 certificate information]]<br /> *[[Common_pitfalls_when_working_with_smp_based_devices|Common pitfalls when working with smp based devices]]<br /> <br /> ==Linux==<br /> * How Sigma's [[RUA]] Package works<br /> *[[Toolchain]]<br /> *[[Toolchain_new]]<br /> *[[Howto boot Linux]]<br /> *[[Setup NFS-Root-Filesystem]]<br /> *IPTV-fähiger Router mit [[fli4l]]<br /> **[[Grundinformationen]]<br /> **[[Wir legen los]]<br /> **[[Konfiguration anpassen]]<br /> **[[Wichtige Links]]<br /> **[[ein Wort in eigener Sache]]<br /> *[[some additional output regarding Linux]]<br /> *[[Dvi.bin]]<br /> | valign=&quot;top&quot; width=&quot;30%&quot;|<br /> <br /> ==Software==<br /> *[[Boot Process]]<br /> **[[Bootloader]]<br /> ***[[pictures inside bootloader]]<br /> *[[Tools]]<br /> **[[Dump X300T Bootloader]]<br /> **[[Disable X300T Signature Check]]<br /> **[[Upload YAMON]]<br /> **[[NK.BIN_toolset]]<br /> **[[MakeNK]]<br /> **[[Download Update Files]]<br /> **[[NK.BIN Patcher]]<br /> **[[Debug Files for remote debugging]]<br /> *[[Bootstrap-Message]]<br /> *[[HDD-Layout]]<br /> *[[Network-Bootstrap]]<br /> *[[TV2ClientCE.exe]]<br /> *[[BooterCE.exe]]<br /> *[[TFTP]]<br /> *[[ATmega88]]<br /> *[[A_closer_look_at_TV2Engine_MacrovisionEnable|A closer look at TV2Engine_MacrovisionEnable]]<br /> *[[Smp8634_certificate_stuff]]<br /> <br /> ==WinCE==<br /> *[[Disable TrustModel]]<br /> <br /> | valign=&quot;top&quot; width=&quot;30%&quot;|<br /> ==Links/Information==<br /> *[[Bootlog??|Bootlog of Beta X300T]]<br /> *[[x300tBeta|Flash dump of Beta X300T]]<br /> *[[Workaround, damit mehrere Settopboxen im Netz sind und die Timeshift-Funktion erhalten bleibt]]<br /> *[[PKG.DIR]]<br /> *[[NK.BIN]]<br /> *[[Media:131008_AN.zip|x300t client&lt;-&gt;server xml communication dump]]<br /> <br /> ==Pirelli STB HY100 (aka IP100)==<br /> *[[UART0 output]]<br /> *[[Pictures]]<br /> *[[Firmware Aufbau Arcor]]<br /> <br /> ==Netbox 8160==<br /> <br /> *[[Netbox 8160 presentation]]<br /> <br /> ==Other SMP based boxes==<br /> *[[SMP_Boxes]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Category:DE 2012-04-03T08:57:57Z

<p>Dans34: Created page with &quot;German here&quot;</p> <hr /> <div>German here</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Category:EN 2012-04-03T08:57:37Z

<p>Dans34: Created page with &quot;English Articles here&quot;</p> <hr /> <div>English Articles here</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Template:Translation 2012-04-03T08:56:12Z

<p>Dans34: </p> <hr /> <div>{|cellpadding=0 cellspacing=0 align=center width=500px style=&quot;border:solid red 2px&quot;<br /> |width=10px style=&quot;background-color: red; padding: 0px&quot;|<br /> |style=&quot;padding:3px&quot;|This article has been translated by automated tools (Google Translate / Babelfish) and may contain factual errors or omissions<br /> |}</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Template:Translation 2012-04-03T08:55:52Z

<p>Dans34: </p> <hr /> <div>{|cellpadding=0 cellspacing=0 align=center width=500px style=&quot;border:solid red 2px&quot;<br /> |width=10px style=&quot;background-color: red; padding: 0px&quot;|<br /> |style=&quot;padding:3px&quot;|This article has been translated by automated tools (Google Translate / Babelfish and may contain factual errors or omissions<br /> |}</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Template:Translation 2012-04-03T08:55:40Z

<p>Dans34: </p> <hr /> <div>{|cellpadding=0 cellspacing=0 align=center width=500px style=&quot;border:solid red 2px&quot;<br /> |width=10px style=&quot;background-color: gold; padding: 0px&quot;|<br /> |style=&quot;padding:3px&quot;|This article has been translated by automated tools (Google Translate / Babelfish and may contain factual errors or omissions<br /> |}</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Template:Translation 2012-04-03T08:55:22Z

<p>Dans34: Created page with &quot;{|cellpadding=0 cellspacing=0 align=center width=500px style=&quot;border:solid gold 2px&quot; |width=10px style=&quot;background-color: gold; padding: 0px&quot;| |style=&quot;padding:3px&quot;|This articl...&quot;</p> <hr /> <div>{|cellpadding=0 cellspacing=0 align=center width=500px style=&quot;border:solid gold 2px&quot;<br /> |width=10px style=&quot;background-color: gold; padding: 0px&quot;|<br /> |style=&quot;padding:3px&quot;|This article has been translated by automated tools (Google Translate / Babelfish and may contain factual errors or omissions<br /> |}</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Ki-openwrt 2012-04-02T18:48:26Z

<p>Dans34: </p> <hr /> <div>There seems to be a port of openwrt for some STBs here:<br /> <br /> http://kf-repos.de/viewgit/?a=viewblob&amp;p=ki-openwrt&amp;h=66f14fbde3405282ce75f86841ac0f9442517dff&amp;f=Config.in.stb<br /> <br /> &lt;pre&gt;<br /> config STB_TARGET<br /> string<br /> default &quot;STB71XX&quot; if STB71XX_TARGET<br /> default &quot;SMP86XX&quot; if SMP86XX_TARGET<br /> &lt;/pre&gt;<br /> <br /> When trying to compile it for the AZBox (which is based on SMP86XX), it fails to compile:<br /> <br /> &lt;pre&gt;<br /> $ make<br /> make[1] world<br /> make[2] tools/install<br /> make[3] -C tools/m4 compile<br /> make[3] -C tools/m4 install<br /> make[3] -C tools/sed compile<br /> make[3] -C tools/sed install<br /> make[3] -C tools/libtool compile<br /> make[3] -C tools/libtool install<br /> make[3] -C tools/autoconf compile<br /> make[3] -C tools/autoconf install<br /> make[3] -C tools/pkg-config compile<br /> make[3] -C tools/pkg-config install<br /> make[3] -C tools/automake compile<br /> make[3] -C tools/automake install<br /> make[3] -C tools/gmp compile<br /> make[3] -C tools/gmp install<br /> make[3] -C tools/mpfr compile<br /> make[3] -C tools/mpfr install<br /> make[3] -C tools/mpc compile<br /> make[3] -C tools/mpc install<br /> make[3] -C tools/libelf compile<br /> make[3] -C tools/libelf install<br /> make[3] -C tools/flex compile<br /> make[3] -C tools/flex install<br /> make[3] -C tools/bison compile<br /> make[3] -C tools/bison install<br /> make[3] -C tools/genromfs compile<br /> make[3] -C tools/genromfs install<br /> make[3] -C tools/genzbf compile<br /> make -r world: build failed. Please re-run make with V=99 to see what's going on<br /> make: *** [world] Error 1<br /> <br /> $ make V=99<br /> <br /> [...]<br /> <br /> make[3]: Leaving directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/tools/bison'<br /> make[3]: Entering directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/tools/genromfs'<br /> make[3]: Leaving directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/tools/genromfs'<br /> make[3]: Entering directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/tools/genromfs'<br /> make[3]: Leaving directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/tools/genromfs'<br /> make[3]: Entering directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/tools/genzbf'<br /> make CC=&quot;gcc&quot; -C /home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/build_dir/host/genzbf-20101031 CFLAGS=&quot;-Wall -O2 -g -m32&quot;<br /> make[4]: Entering directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/build_dir/host/genzbf-20101031'<br /> gcc -Wall -O2 -g -m32 -o genzbf genzbf.c<br /> In file included from /usr/include/stdio.h:28:0,<br /> from genzbf.c:12:<br /> /usr/include/features.h:323:26: fatal error: bits/predefs.h: No such file or directory<br /> compilation terminated.<br /> make[4]: *** [genzbf] Error 1<br /> make[4]: Leaving directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/build_dir/host/genzbf-20101031'<br /> make[3]: *** [/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/build_dir/host/genzbf-20101031/.built] Error 2<br /> make[3]: Leaving directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/tools/genzbf'<br /> make[2]: *** [tools/genzbf/compile] Error 2<br /> make[2]: Leaving directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0'<br /> make[1]: *** [/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0/staging_dir/target-mipsel_glibc-2.10.2/stamp/.tools_install_ynnnn] Error 2<br /> make[1]: Leaving directory `/home/zoobab/soft/belgacomtv-scientific/ki/ki-openwrt-052a2f0'<br /> make: *** [world] Error 2<br /> &lt;/pre&gt;<br /> <br /> [[category:Software]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Hardware_Images 2012-04-02T15:54:04Z

<p>Dans34: </p> <hr /> <div>==Unknown Box==<br /> &lt;gallery&gt;<br /> Image:IMG 2239.JPG<br /> Image:IMG 2241.JPG<br /> Image:IMG 2242.JPG<br /> Image:IMG 2245.JPG<br /> Image:IMG 2246.JPG<br /> Image:JP_1_without_connection.JPG<br /> Image:X300-jtag-rev05.jpg<br /> Image:IMG 2247.JPG<br /> Image:IMG 2249.JPG<br /> Image:IMG 2250.JPG<br /> Image:IMG 2251.JPG<br /> Image:IMG 2252.JPG<br /> Image:Backside_JP_1.jpg<br /> Image:IMG 2253.JPG<br /> Image:IMG 2255.JPG<br /> Image:IMG 2256.JPG<br /> Image:IMG 2257.JPG<br /> Image:IMG 2261.JPG<br /> Image:JP2.JPG<br /> <br /> &lt;/gallery&gt;<br /> <br /> <br /> ==BT Vision==<br /> ===DIT9719===<br /> <br /> &lt;gallery&gt;<br /> Image:100_1155.JPG | Top View Of Board<br /> Image:Solderpoints.jpg<br /> &lt;/gallery&gt;<br /> <br /> <br /> ==Pirelli STB==<br /> === HY100===<br /> <br /> &lt;gallery&gt;<br /> Image:Cardr1.jpg|card reader<br /> Image:Pirelli_front.jpg|front view<br /> Image:Cardr2.jpg|card reader<br /> Image:Pirelli_top1.jpg|top view 1<br /> Image:Pirelli_top2.jpg|top view 2<br /> Image:Pirelli_bottom.jpg|bottom view 1<br /> Image:Pirelli_bottom2.jpg|bottom view 2<br /> Image:Pirelli_uart.jpg|uart0 pins<br /> Image:Pirelli-uart1.jpg|uart1 pins<br /> Image:pirelli_jtag_soldering.jpg|jtag lines soldered bga<br /> Image:Jtag enable.JPG|jtag enable<br /> <br /> <br /> &lt;/gallery&gt;<br /> <br /> [[category:Hardware]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Category:Hardware 2012-04-02T15:53:28Z

<p>Dans34: Created page with &quot;The Hardware Category&quot;</p> <hr /> <div>The Hardware Category</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=HDD-Layout 2012-04-02T15:53:04Z

<p>Dans34: </p> <hr /> <div>&lt;pre&gt;<br /> x300t: hdd layout<br /> <br /> Disk /dev/hdX: 255 heads, 63 sectors, 9729 cylinders<br /> Units = cylinders of 16065 * 512 bytes<br /> <br /> Device Boot Start End Blocks Id System<br /> /dev/hdX1 * 1 17 129055+ 6 FAT16<br /> Partition 1 does not end on cylinder boundary:<br /> phys=(1023, 1, 63) should be (1023, 254, 63)<br /> /dev/hdX2 17 9730 78021657 b Win95 FAT32<br /> Partition 2 does not end on cylinder boundary:<br /> phys=(436, 15, 63) should be (436, 254, 63)<br /> <br /> <br /> # file bootblock.dd<br /> bootblock.dd: x86 boot sector, extended partition table<br /> &lt;/pre&gt;<br /> <br /> <br /> [[category:x300t]][[category:Hardware]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Howto_boot_Linux 2012-04-01T13:49:00Z

<p>Dans34: </p> <hr /> <div>Requirements:<br /> * working JTAG interface &lt;u&gt;'''or'''&lt;/u&gt; a working modchip<br /> * working Serial connection, 115200 8n1 &lt;u&gt;'''or'''&lt;/u&gt; use the &quot;Compiled-in Kernel Boot Parameter&quot;(the lazy way without a yamon/serial connection)<br /> &lt;br&gt;<br /> ok, lets start.<br /> &lt;br&gt;<br /> First download the Yamon boot image from '''[[Media:Ya.zip|here]]''' and the Linux boot image from '''[[Media:Lx.zip|here]]'''.<br /> &lt;br&gt;<br /> extract both files to the first partition of the x300t hard disk (either upload it with FTP or connect the drive to a PC).<br /> &lt;br&gt;<br /> now grab the latest x300t patch tool from '''[[Media:X300tpatch3.zip|here]]'''&lt;br&gt;<br /> ''(note: there are some Bugs in the Linux version, apply this [[Media:X300tpatchv3-linux-patch.diff.bz2|patch]] - Silicium)''<br /> &lt;br&gt;<br /> use the patch tool as usual, but add the /yamon parameter when starting the tool.<br /> as soon as you press the OK button of the x300t you should see the YAMON prompt in the terminal window.<br /> &lt;br&gt;<br /> the YAMON is required just once to set the Linux kernel parameter<br /> &lt;br&gt;<br /> use the setxenv command to display the current xenv parameters.<br /> &lt;br&gt;<br /> usually there should not be a parameter &quot;a.linux_cmd&quot; .. so we have to create one like this<br /> &lt;br&gt;<br /> '''setxenv a.linux_cmd &quot;console=ttyS0 root=/dev/hda3&quot;'''<br /> &lt;br&gt;<br /> this command will write the new parameter to the flash.<br /> &lt;br&gt;<br /> now reboot the x300t and use the patch too again, but now add the /linux parameter when starting.<br /> &lt;br&gt;<br /> after some seconds you should the the Linux Kernel booting up.<br /> &lt;br&gt;<br /> please note that you need a Linux root partition on a NFS share, USB stick or hard disk to really use the Linux.<br /> &lt;br&gt;<br /> '''Known Problems'''<br /> compile errors at Linux: Make sure to apply the Linux fix to compile it with gcc<br /> <br /> Failed to lock /dev/parport0: No such device or address:<br /> You should remove the &quot;lp&quot; (lineprinter) module from the kernel with the command: <br /> ''rmmod lp''<br /> <br /> <br /> [[category:Linux]][[category:Software]]</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=Category:Software 2012-04-01T11:38:03Z

<p>Dans34: Created page with &quot;Softawre&quot;</p> <hr /> <div>Softawre</div>

Dans34 http://www.t-hack.com/wiki/index.php?title=NK.BIN_Patcher 2012-04-01T11:37:43Z

<p>Dans34: </p> <hr /> <div>NK Patcher is a C# GUI application that patches a NK.BIN file to allow unsigned applications to run outside of the windows folder (rom).<br /> <br /> '''[[Media:NKpatcher.rar|Download NK Patcher]]'''<br /> <br /> <br /> '''New Version'''<br /> <br /> The following version is by Dark Neo, based on the original source code from isO-Mick, that adds support for disabling the Watchdog that monitors the TV2Client:<br /> <br /> '''[[Media:NKBINPatcher.rar|Download New Version]]'''<br /> <br /> [[category:WinCe]][[category:Software]]</div>

Dans34