Stránka 2 z 4
Napsal: 21 pro 2024, 17:45
od jandur
ok, ak to napajas z PSU, cize MB bezi potom ti bezi aj cpu a vytvara vsetky signaly, cize v tomto pripade musis prerusit CLK a myslim aj CMD..
P.S: citas to RT809H alebo niecim inym ?
Napsal: 22 pro 2024, 12:44
od rnbw
Ostranil som BD6 (3,3V napajanie pre eMMC) a teraz napajam z lab. zdroja len eMMC - 3,3V na BD6 a 1,8V na BD1301 (netreba odstranovat, pretoze na tejto vetve je len eMMC). Najprv sa to nechcelo chytit, ale ked som zvysil napatie na 1,9V, tak to zacalo fungovat!
Kód: Vybrat vše
[ 738.478527] mmc0: new MMC card at address 0001
[ 738.481589] mmcblk0: mmc0:0001 4FEACC 3.64 GiB
[ 738.534076] mmcblk0: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 >
[ 738.536204] mmcblk0boot0: mmc0:0001 4FEACC 4.00 MiB
[ 738.538164] mmcblk0boot1: mmc0:0001 4FEACC 4.00 MiB
Na citanie pouzivam notebook Toshiba Portege R100 so slotom na SD karty. Ma SD/MMC radic s plnym pristupom (nie USB) - takze sa da pracovat aj s boot particiami a CSD.
GND, CLK, CMD a DAT0 som pripojil cez upravenu redukciu na microSD karty. Chyba mi fotka s drotmi prispajkovanymi do redukcie - pridam neskor (teraz je v notebooku).
Napsal: 22 pro 2024, 16:35
od rnbw
Mam vydumpovane 4MiB boot0 a boot1 (prazdna) aj 3728MiB user. Pre istotu dvakrat a oba subory su zhodne.
User cast obsahuje 17 particii. Ktoru mam uploadnut? Ci celu user cast?
Kód: Vybrat vše
# fdisk -l /dev/mmcblk0
Disk /dev/mmcblk0: 3.64 GiB, 3909091328 bytes, 7634944 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0x00000000
Device Boot Start End Sectors Size Id Type
/dev/mmcblk0p1 16 1039 1024 512K 83 Linux
/dev/mmcblk0p2 1040 2063 1024 512K 83 Linux
/dev/mmcblk0p3 2064 3087 1024 512K 83 Linux
/dev/mmcblk0p4 3088 7487439 7484352 3.6G 5 Extended
/dev/mmcblk0p5 3104 4127 1024 512K 83 Linux
/dev/mmcblk0p6 4144 18479 14336 7M 83 Linux
/dev/mmcblk0p7 18496 29759 11264 5.5M 83 Linux
/dev/mmcblk0p8 29776 44111 14336 7M 83 Linux
/dev/mmcblk0p9 44128 55391 11264 5.5M 83 Linux
/dev/mmcblk0p10 55408 55423 16 8K 83 Linux
/dev/mmcblk0p11 55440 55455 16 8K 83 Linux
/dev/mmcblk0p12 55472 55487 16 8K 83 Linux
/dev/mmcblk0p13 55504 61647 6144 3M 83 Linux
/dev/mmcblk0p14 61664 67807 6144 3M 83 Linux
/dev/mmcblk0p15 67824 477423 409600 200M 83 Linux
/dev/mmcblk0p16 477440 4573439 4096000 2G 83 Linux
/dev/mmcblk0p17 4573456 7487439 2913984 1.4G 83 Linux
Podla EXTCSD je eMMC zdravy:
eMMC Life Time Estimation je 0x01, tzn. 0-10% opotrebovanie.
eMMC Pre EOL information je 0x01, tzn. normal.
Kód: Vybrat vše
=============================================
Extended CSD rev 1.7 (MMC 5.0)
=============================================
Card Supported Command sets [S_CMD_SET: 0x01]
HPI Features [HPI_FEATURE: 0x01]: implementation based on CMD13
Background operations support [BKOPS_SUPPORT: 0x01]
Max Packet Read Cmd [MAX_PACKED_READS: 0x3f]
Max Packet Write Cmd [MAX_PACKED_WRITES: 0x3f]
Data TAG support [DATA_TAG_SUPPORT: 0x01]
Data TAG Unit Size [TAG_UNIT_SIZE: 0x04]
Tag Resources Size [TAG_RES_SIZE: 0x00]
Context Management Capabilities [CONTEXT_CAPABILITIES: 0x05]
Large Unit Size [LARGE_UNIT_SIZE_M1: 0x07]
Extended partition attribute support [EXT_SUPPORT: 0x03]
Generic CMD6 Timer [GENERIC_CMD6_TIME: 0x0a]
Power off notification [POWER_OFF_LONG_TIME: 0x3c]
Cache Size [CACHE_SIZE] is 8192 KiB
Background operations status [BKOPS_STATUS: 0x00]
1st Initialisation Time after programmed sector [INI_TIMEOUT_AP: 0x1e]
Power class for 52MHz, DDR at 3.6V [PWR_CL_DDR_52_360: 0x00]
Power class for 52MHz, DDR at 1.95V [PWR_CL_DDR_52_195: 0x00]
Power class for 200MHz at 3.6V [PWR_CL_200_360: 0x00]
Power class for 200MHz, at 1.95V [PWR_CL_200_195: 0x00]
Minimum Performance for 8bit at 52MHz in DDR mode:
[MIN_PERF_DDR_W_8_52: 0x00]
[MIN_PERF_DDR_R_8_52: 0x00]
TRIM Multiplier [TRIM_MULT: 0x02]
Secure Feature support [SEC_FEATURE_SUPPORT: 0x55]
Boot Information [BOOT_INFO: 0x07]
Device supports alternative boot method
Device supports dual data rate during boot
Device supports high speed timing during boot
Boot partition size [BOOT_SIZE_MULTI: 0x20]
Access size [ACC_SIZE: 0x06]
High-capacity erase unit size [HC_ERASE_GRP_SIZE: 0x01]
i.e. 512 KiB
High-capacity erase timeout [ERASE_TIMEOUT_MULT: 0x01]
Reliable write sector count [REL_WR_SEC_C: 0x01]
High-capacity W protect group size [HC_WP_GRP_SIZE: 0x10]
i.e. 8192 KiB
Sleep current (VCC) [S_C_VCC: 0x07]
Sleep current (VCCQ) [S_C_VCCQ: 0x07]
Sleep/awake timeout [S_A_TIMEOUT: 0x11]
Sector Count [SEC_COUNT: 0x00748000]
Device is block-addressed
Minimum Write Performance for 8bit:
[MIN_PERF_W_8_52: 0x00]
[MIN_PERF_R_8_52: 0x00]
[MIN_PERF_W_8_26_4_52: 0x00]
[MIN_PERF_R_8_26_4_52: 0x00]
Minimum Write Performance for 4bit:
[MIN_PERF_W_4_26: 0x00]
[MIN_PERF_R_4_26: 0x00]
Power classes registers:
[PWR_CL_26_360: 0x00]
[PWR_CL_52_360: 0x00]
[PWR_CL_26_195: 0x00]
[PWR_CL_52_195: 0x00]
Partition switching timing [PARTITION_SWITCH_TIME: 0x01]
Out-of-interrupt busy timing [OUT_OF_INTERRUPT_TIME: 0x05]
I/O Driver Strength [DRIVER_STRENGTH: 0x1f]
Card Type [CARD_TYPE: 0x57]
HS400 Dual Data Rate eMMC @200MHz 1.8VI/O
HS200 Single Data Rate eMMC @200MHz 1.8VI/O
HS Dual Data Rate eMMC @52MHz 1.8V or 3VI/O
HS eMMC @52MHz - at rated device voltage(s)
HS eMMC @26MHz - at rated device voltage(s)
CSD structure version [CSD_STRUCTURE: 0x02]
Command set [CMD_SET: 0x00]
Command set revision [CMD_SET_REV: 0x00]
Power class [POWER_CLASS: 0x00]
High-speed interface timing [HS_TIMING: 0x00]
Erased memory content [ERASED_MEM_CONT: 0x00]
Boot configuration bytes [PARTITION_CONFIG: 0x48]
Boot Partition 1 enabled
No access to boot partition
Boot config protection [BOOT_CONFIG_PROT: 0x00]
Boot bus Conditions [BOOT_BUS_CONDITIONS: 0x02]
High-density erase group definition [ERASE_GROUP_DEF: 0x01]
Boot write protection status registers [BOOT_WP_STATUS]: 0x0a
Boot Area Write protection [BOOT_WP]: 0x04
Power ro locking: possible
Permanent ro locking: possible
partition 0 ro lock status: locked permanently
partition 1 ro lock status: locked permanently
User area write protection register [USER_WP]: 0x00
FW configuration [FW_CONFIG]: 0x00
RPMB Size [RPMB_SIZE_MULT]: 0x04
Write reliability setting register [WR_REL_SET]: 0x1f
user area: the device protects existing data if a power failure occurs during a write operation
partition 1: the device protects existing data if a power failure occurs during a write operation
partition 2: the device protects existing data if a power failure occurs during a write operation
partition 3: the device protects existing data if a power failure occurs during a write operation
partition 4: the device protects existing data if a power failure occurs during a write operation
Write reliability parameter register [WR_REL_PARAM]: 0x04
Device supports the enhanced def. of reliable write
Enable background operations handshake [BKOPS_EN]: 0x00
H/W reset function [RST_N_FUNCTION]: 0x01
HPI management [HPI_MGMT]: 0x01
Partitioning Support [PARTITIONING_SUPPORT]: 0x07
Device support partitioning feature
Device can have enhanced tech.
Max Enhanced Area Size [MAX_ENH_SIZE_MULT]: 0x0000e9
i.e. 1908736 KiB
Partitions attribute [PARTITIONS_ATTRIBUTE]: 0x00
Partitioning Setting [PARTITION_SETTING_COMPLETED]: 0x00
Device partition setting NOT complete
General Purpose Partition Size
[GP_SIZE_MULT_4]: 0x000000
[GP_SIZE_MULT_3]: 0x000000
[GP_SIZE_MULT_2]: 0x000000
[GP_SIZE_MULT_1]: 0x000000
Enhanced User Data Area Size [ENH_SIZE_MULT]: 0x000000
i.e. 0 KiB
Enhanced User Data Start Address [ENH_START_ADDR]: 0x00000000
i.e. 0 bytes offset
Bad Block Management mode [SEC_BAD_BLK_MGMNT]: 0x00
Periodic Wake-up [PERIODIC_WAKEUP]: 0x00
Program CID/CSD in DDR mode support [PROGRAM_CID_CSD_DDR_SUPPORT]: 0x01
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[127]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[126]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[125]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[124]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[123]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[122]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[121]]: 0x21
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[120]]: 0x4b
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[119]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[118]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[117]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[116]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[115]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[114]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[113]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[112]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[111]]: 0x04
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[110]]: 0xaf
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[109]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[108]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[107]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[106]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[105]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[104]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[103]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[102]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[101]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[100]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[99]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[98]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[97]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[96]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[95]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[94]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[93]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[92]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[91]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[90]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[89]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[88]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[87]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[86]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[85]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[84]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[83]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[82]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[81]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[80]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[79]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[78]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[77]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[76]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[75]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[74]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[73]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[72]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[71]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[70]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[69]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[68]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[67]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[66]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[65]]: 0x00
Vendor Specific Fields [VENDOR_SPECIFIC_FIELD[64]]: 0x0f
Native sector size [NATIVE_SECTOR_SIZE]: 0x00
Sector size emulation [USE_NATIVE_SECTOR]: 0x00
Sector size [DATA_SECTOR_SIZE]: 0x00
1st initialization after disabling sector size emulation [INI_TIMEOUT_EMU]: 0x00
Class 6 commands control [CLASS_6_CTRL]: 0x00
Number of addressed group to be Released[DYNCAP_NEEDED]: 0x00
Exception events control [EXCEPTION_EVENTS_CTRL]: 0x0000
Exception events status[EXCEPTION_EVENTS_STATUS]: 0x0000
Extended Partitions Attribute [EXT_PARTITIONS_ATTRIBUTE]: 0x0000
Context configuration [CONTEXT_CONF[51]]: 0x00
Context configuration [CONTEXT_CONF[50]]: 0x00
Context configuration [CONTEXT_CONF[49]]: 0x00
Context configuration [CONTEXT_CONF[48]]: 0x00
Context configuration [CONTEXT_CONF[47]]: 0x00
Context configuration [CONTEXT_CONF[46]]: 0x00
Context configuration [CONTEXT_CONF[45]]: 0x00
Context configuration [CONTEXT_CONF[44]]: 0x00
Context configuration [CONTEXT_CONF[43]]: 0x00
Context configuration [CONTEXT_CONF[42]]: 0x00
Context configuration [CONTEXT_CONF[41]]: 0x00
Context configuration [CONTEXT_CONF[40]]: 0x00
Context configuration [CONTEXT_CONF[39]]: 0x00
Context configuration [CONTEXT_CONF[38]]: 0x00
Context configuration [CONTEXT_CONF[37]]: 0x00
Packed command status [PACKED_COMMAND_STATUS]: 0x00
Packed command failure index [PACKED_FAILURE_INDEX]: 0x00
Power Off Notification [POWER_OFF_NOTIFICATION]: 0x01
Control to turn the Cache ON/OFF [CACHE_CTRL]: 0x01
Control to turn the Cache Barrier ON/OFF [BARRIER_CTRL]: 0x00
eMMC Firmware Version:
eMMC Life Time Estimation A [EXT_CSD_DEVICE_LIFE_TIME_EST_TYP_A]: 0x01
eMMC Life Time Estimation B [EXT_CSD_DEVICE_LIFE_TIME_EST_TYP_B]: 0x01
eMMC Pre EOL information [EXT_CSD_PRE_EOL_INFO]: 0x01
Secure Removal Type [SECURE_REMOVAL_TYPE]: 0x09
information is configured to be removed by an erase of the physical memory
Supported Secure Removal Type:
information removed by an erase of the physical memory
information removed using a vendor defined
Napsal: 22 pro 2024, 20:15
od jandur
ok, da sa aj tak.. boot1 aj boot2 by mali byt v tomto tv prazdne pretoze TV bootuje so spi flash. Uploadni niekde na
https://mega.io/ a link mi posli do PM.. Zajtra som v praci tak ti prenesiem vsetky kluce do funkcneho mojho dumpu + spi flash + eeprom s povolenym debugom - malo by to byt o hodne ukecanejsie v uart logu

Napsal: 22 pro 2024, 21:25
od rnbw
Prvy boot prazdny nie je - je tam Onboot.
Inak skusal som dalsie 3 notebooky a v ziadnom z nich to nejde, asi nestravia tu 1,8V uroven. Zvladne to len ta Toshiba.
Mega je platena, dam to na nejake free ulozisko.
Napsal: 22 pro 2024, 22:42
od rnbw
Analyza particii v eMMC:
Kód: Vybrat vše
Device Boot Start End Sectors Size Id Type
loop0p1 16 1039 1024 512K 83 Linux = SERET0 = same as P2
loop0p2 1040 2063 1024 512K 83 Linux = SERET1 = same as P1
loop0p3 2064 3087 1024 512K 83 Linux = SECOS0 = same as P5
loop0p4 3088 7487439 7484352 3.6G 5 Extended
loop0p5 3104 4127 1024 512K 83 Linux = SECOS1 = same as P3
loop0p6 4144 18479 14336 7M 83 Linux = KERNEL0 = same as P8 = u-boot legacy uImage, Linux-3.8.13, ...
loop0p7 18496 29759 11264 5.5M 83 Linux = ROOTFS0 = Squashfs filesystem, little endian, version 4.0, ...
loop0p8 29776 44111 14336 7M 83 Linux = KERNEL1 = same as P6
loop0p9 44128 55391 11264 5.5M 83 Linux = ROOTFS1 = Squashfs filesystem, little endian, version 4.0, ...
loop0p10 55408 55423 16 8K 83 Linux = SECUREMAC0 = ??? encrypted
loop0p11 55440 55455 16 8K 83 Linux = SECUREMAC1 = ??? encrypted
loop0p12 55472 55487 16 8K 83 Linux = SECUREMAC2 = VD-HEADER (HEAD_VD)
loop0p13 55504 61647 6144 3M 83 Linux = DRMREGION_A = VDFS_VOLUME
loop0p14 61664 67807 6144 3M 83 Linux = DRMREGION_B = VDFS_VOLUME
loop0p15 67824 477423 409600 200M 83 Linux = RWAREA = VDFS_VOLUME
loop0p16 477440 4573439 4096000 2G 83 Linux = UNIRO = VDFS_VOLUME
loop0p17 4573456 7487439 2913984 1.4G 83 Linux = UNIRW = VDFS_VOLUME
Nazvy su vytiahnute z rootfs (P7). SERET je nejaky recovery bootloader, SECOS je asi kod pre nejaky sekundarny procesor. V hlavnom procesore bezi Linux (KERNEL0), root filesystem je ROOTFS0.
Ostatne filesystemy su VDFS, co je nejaky zazrak od Samsungu - riesili to tu:
https://labs.withsecure.com/publication ... s-smart-tv
SECUREMAC budu asi nejake hashe alebo tie kluce, ktore sa musia zachovat? Musim pozriet, co je v tych DRMREGION_A a DRMREGION_B.
Napsal: 23 pro 2024, 10:51
od jandur
OK
zatial som Ti v PM poslal link na upravenu eeprom aby bol ukecanejsi uart log.. skus to testnut a poslat vypis
Napsal: 23 pro 2024, 12:19
od rnbw
Dal som tam ten upraveny obsah, verifikoval a ziadny rozdiel vo vystupe. UART1 je stale v mode "UART or logic or FANet". Asi to bude nejaky iny byte.
Kód: Vybrat vše
KLM4G1FEAC
support DDR52 1.8V
Running DDR52
boot-up
Cold boot
=======================================
Onboot X14H Main (Mar 10 2014 - 15:55:35)
release ver : 1009.B - PRODUCT
etc : patch 71 : emmc clk - by yongkyoon81
L1 cache : on
1GB/256MB MMAP version : 0008
=======================================
This U04 : [0] 1,[1] 0,[4] 0,[62] 1
LCD FastLogo Run...
Loading SecureOS auth [success] by h/w sha256, h/w rsa2048
(Ver:0068.0, size:281024bytes)
Loading Kernel >>>[1st]<<< size:3628976byte
UART1 is used to >>>[UART or logic or FANet]<<< mode.
auth [success] by h/w sha256, h/w rsa2048
NEC I2C Write Error addr[0]= 0x00 addr[1]=0x06 !!!!
Jump secos and Kernel....
cpu0 wait for trig : .OK!
jump to kernel
Napsal: 23 pro 2024, 14:11
od rnbw
Pokracovanie analyzy - zatial som pracoval len s neposkodenym dumpom stiahnutym z webu.
S miernymi upravami sa mi podarilo skompilovat vdfs2-tools. Spravna verzia sa urci podla suboru vdfs-tools/include/vdfs*_layout.h a retazca na zaciatku particie - v mojich je "VDFS0001".
vdfs2:
Kód: Vybrat vše
#define VDFS2_LAYOUT_VERSION "0001"
vdfs3:
vdfs4:
Kód: Vybrat vše
#define VDFS4_LAYOUT_VERSION "2006"
Je tam nastroj unpack.vdfs2, ktory rozbali filesystem do adresara.
p13 je prazdna
p14:
Kód: Vybrat vše
.
└── backup
└── sxb
├── 19d6366f
│ └── 93015b43cf71e7c1.sx
├── 6a92acbf
│ ├── 93015b430b80b649.sx
│ ├── 93015b434d7b0ed3.sx
│ ├── 93015b4397850ef3.sx
│ ├── 93015b439c3b34d2.sx
│ └── 93015b43c0d43576.sx
├── 79cd064e
│ ├── 93015b435ae40c6b.sx
│ └── 93015b43b9eaec18.sx
├── c35b9816
│ ├── 93015b431626edeb.sx
│ ├── 93015b435288b49e.sx
│ ├── 93015b4361b15ca1.sx
│ ├── 93015b4364062f79.sx
│ ├── 93015b4394421efe.sx
│ └── 93015b43cc309cd6.sx
├── d075d1bf
│ ├── 93015b4352319c2e.sx
│ ├── 93015b43c5624a34.sx
│ └── 93015b43df8d7f87.sx
├── d6302dd4
│ └── 93015b432c5e2ba9.sx
├── d96bcbc2
│ ├── 93015b4308238445.sx
│ ├── 93015b431cfad238.sx
│ ├── 93015b437274cb2a.sx
│ ├── 93015b439ad79fde.sx
│ └── 93015b43a76f9011.sx
├── e7326ad6
│ ├── 93015b430d94a775.sx
│ ├── 93015b43127e3797.sx
│ ├── 93015b433167a2c2.sx
│ ├── 93015b4343051b19.sx
│ ├── 93015b436e7aaea8.sx
│ ├── 93015b43f9da08ae.sx
│ └── 93015b43ff4518f6.sx
└── f5b28cf6
├── 93015b4353362cd5.sx
└── 93015b43ec40aa42.sx
11 directories, 32 files
p15:
Kód: Vybrat vše
.
├── 15MostUsedDir
│ ├── GENERATE_AND_POWEROFF_DATE_FILE.dat
│ └── GENERATE_AND_POWEROFF_DATE_FILE.datb
├── Analyzer
│ └── usbPath
├── appcmhome
│ ├── Disclaimerfile_billing.dat
│ ├── Disclaimerfile_billing.datb
│ ├── Disclaimerfile_main_common.dat
│ ├── Disclaimerfile_main_common.datb
│ ├── Disclaimerfile_nuance.dat
│ ├── Disclaimerfile_nuance.datb
│ ├── Disclaimerfile_pp.dat
│ ├── Disclaimerfile_pp.datb
│ ├── Disclaimerfile_rm.dat
│ ├── Disclaimerfile_rm.datb
│ ├── Disclaimerfile_sub_common.dat
│ ├── Disclaimerfile_sub_common.datb
│ ├── Disclaimerfile_tnc.dat
│ ├── Disclaimerfile_tnc.datb
│ ├── Disclaimerfile_voice_new.dat
│ ├── Disclaimerfile_voice_new.datb
│ ├── Disclaimer_osd_language.dat
│ ├── Disclaimer_osd_language.datb
│ ├── disclamer
│ │ ├── Disclaimerfile_billing.dat
│ │ ├── Disclaimerfile_billing.datb
│ │ ├── Disclaimerfile_main_common.dat
│ │ ├── Disclaimerfile_main_common.datb
│ │ ├── Disclaimerfile_nuance.dat
│ │ ├── Disclaimerfile_nuance.datb
│ │ ├── Disclaimerfile_pp.dat
│ │ ├── Disclaimerfile_pp.datb
│ │ ├── Disclaimerfile_rm.dat
│ │ ├── Disclaimerfile_rm.datb
│ │ ├── Disclaimerfile_sub_common.dat
│ │ ├── Disclaimerfile_sub_common.datb
│ │ ├── Disclaimerfile_tnc.dat
│ │ ├── Disclaimerfile_tnc.datb
│ │ ├── Disclaimerfile_voice_new.dat
│ │ ├── Disclaimerfile_voice_new.datb
│ │ ├── Disclaimer_osd_language.dat
│ │ ├── Disclaimer_osd_language.datb
│ │ ├── homepanel_info1.dat
│ │ ├── homepanel_info1.datb
│ │ ├── homepanel_info2.dat
│ │ └── homepanel_info2.datb
│ ├── homepanel_info1.dat
│ ├── homepanel_info1.datb
│ ├── homepanel_info2.dat
│ ├── homepanel_info2.datb
│ ├── mucl_new01
│ └── mucl_new01b
├── APP_CONFIG
├── BACKUP_IMAGE_VERSION
├── Billing
│ └── BillingServiceYn
├── Blaster_ver
├── Bluetooth_Dev_info
├── camdatabase
├── camdatabaseb
├── cimstatusstorage
├── cimstatusstorageb
├── cip_services_database
├── CT802.abin
├── DAA.ID
├── DebugBackupData
├── dlna_web_root
│ ├── dmr
│ │ ├── AVTransport1.xml
│ │ ├── ConnectionManager1.xml
│ │ ├── icon_detailed.ico -> /mtd_appdata/Images/DMR/icon_detailed.ico
│ │ ├── icon.ico -> /mtd_appdata/Images/DMR/icon.ico
│ │ ├── icon_LRG.jpg -> /mtd_appdata/Images/DMR/icon_LRG.jpg
│ │ ├── icon_LRG.png -> /mtd_appdata/Images/DMR/icon_LRG.png
│ │ ├── icon_SML.jpg -> /mtd_appdata/Images/DMR/icon_SML.jpg
│ │ ├── icon_SML.png -> /mtd_appdata/Images/DMR/icon_SML.png
│ │ ├── RenderingControl1.xml
│ │ └── SamsungMRDesc.xml
│ ├── MainTVServer2
│ │ ├── MainTVAgent21.xml
│ │ └── MainTVServer2Desc.xml
│ ├── rcr
│ │ ├── dial1.xml
│ │ ├── dialreceiver.xml
│ │ ├── MultiScreenService1.xml
│ │ └── RemoteControlReceiver.xml
│ └── SMPConfig
│ └── UPnPConfig.xml
├── eepgbcg.dat
├── eepgbcg.datb
├── FeaturedDir
│ ├── Amazon Video_111299001578-15608.bmp
│ ├── FEATURED_DATA_CONTENT_FILE_
│ ├── FEATURED_DATA_CONTENT_FILE_b
│ ├── Netflix_11101200001-15564.bmp
│ ├── YouTube_111299001912-15612.bmp
│ ├── Фильмы HD_141199000002-15592.bmp
│ └── Яндекс_-15496.bmp
├── FineTune_Digital
├── FineTune_Digitalb
├── fontconfig
│ ├── 2fa0b6998aff80d44eefdafaf3efd4c1-arm.cache-4
│ ├── 4313cb2745a74d5e6838b8895b7f7f77-arm.cache-4
│ ├── e45ad6c9882f36a36b5406c5fa262b57-arm.cache-4
│ ├── e52552a3d6f664772dd03651324f6abb-arm.cache-4
│ └── version.info
├── fonts
│ └── var
│ └── cache_v2
│ └── fontconfig
│ ├── 3d0e4c0db5a017ac5052c30b5f7e961e-arm.cache-4
│ ├── 40d75032718a15411a5bb7b742b8e5dd-arm.cache-4
│ ├── 4313cb2745a74d5e6838b8895b7f7f77-arm.cache-4
│ ├── 571d14d93c57eb0c3635bf23f0924c05-arm.cache-4
│ ├── 57eda8c65b2d6bf525615d1e22533ab9-arm.cache-4
│ ├── 6d090b64bf3da13d8fe4630a2993aadc-arm.cache-4
│ ├── 70e872b27ae3213510f02adfc062de37-arm.cache-4
│ ├── CACHEDIR.TAG
│ ├── e52552a3d6f664772dd03651324f6abb-arm.cache-4
│ └── eff650475998787560d2a6f001fe4ba3-arm.cache-4
├── freesiaDB
│ ├── freesia_ontv_0.db
│ ├── freesia_ontv_1.db
│ └── profile.db
├── GameHub
│ ├── AutoUpdate
│ └── LatestPlay_1
├── Giraffic
│ ├── Data
│ │ ├── Cache.db
│ │ ├── Slices.db
│ │ └── tmp
│ ├── Giraffic.cfg
│ └── Logs
├── ifcfg-br-auto
├── Iptv
│ └── TEMP
│ └── IptvChMgrDB.xml
├── LastUpgradeInfo
├── LastUpgradeInfo_Temp
├── ld.so.cache
├── ld.so.cache.version
├── ld.so.conf
├── LNBSettingsDataBase.dat
├── LNBSettingsDataBase.datb
├── map-AirA
├── map-AirAb
├── map-AirD
├── map-AirDb
├── map-CableA
├── map-CableD
├── map-CableDb
├── map-ChKey
├── map-ChKeyb
├── map-SateD
├── MC8121.abin
├── mheg
│ ├── freesat
│ │ ├── grp
│ │ └── svr
│ └── PST
├── NCD_LastAutoStoreInfo
├── NCD_LastAutoStoreInfob
├── network
│ ├── br_lease_info
│ ├── entropy.dat
│ ├── insmod_qca.sh
│ ├── network_tv_name
│ ├── p2p_dual.conf
│ ├── wfd_allow_deny_list
│ ├── wfd_bg_ready_mode
│ ├── wifi_vendor
│ ├── wpa_sta.conf
│ └── wpa_supplicant_failed
├── network_snap
│ ├── snap_config.dat
│ └── updateSNAP
├── NetworkSpeakerApp
│ ├── Flag.txt
│ ├── MainSpeaker.txt
│ └── SpeakerList.txt
├── NOA
│ └── CountryCode.txt
├── nvramCount
├── partitionDataHashes.dat
├── PartitionSwitch_1_0
├── persistent_cookie.txt
├── PicUpdateFlag
├── PowerOffTime
├── PQ_Data.cbin
├── PrdInfo
├── PTCCABLE
├── PTCCABLEb
├── QURANTINE
├── RadioMap
├── RadioMapb
├── RECOG_DATA
├── reminder.dat
├── reminder.datb
├── remote.info
├── resetInfoHistory
├── resolv.conf
├── RME
├── SatDataBase.dat
├── SaveKeyFile
├── SCT
│ └── netdiag.xml
├── security
│ ├── ck_flag
│ │ ├── A7a26
│ │ ├── A8b37
│ │ ├── F50f0
│ │ ├── Hb51a
│ │ ├── Mb73d
│ │ ├── Nfe47
│ │ ├── Pe89c
│ │ └── W9b1e
│ ├── crt
│ │ ├── cacert.pem
│ │ ├── fkp_configuration.dat
│ │ ├── openssl4client_req.cnf
│ │ ├── rand.dat
│ │ ├── S0_def_model_cert.pem
│ │ ├── S0_def_model_prkey_enc.pem
│ │ ├── S0_model_cert.pem
│ │ ├── S0_Su0_dev_cert.pem
│ │ ├── S0_Su0_dev_CSR.csr
│ │ ├── S0_Su1_dev_cert.pem
│ │ └── S0_Su1_dev_CSR.csr
│ ├── crt_cc
│ ├── decode.txt
│ ├── DTCP
│ ├── fkp.log
│ └── sdrm
│ ├── MSC
│ │ ├── ctl.dat
│ │ ├── Domain.dat
│ │ └── License.dat
│ ├── VD
│ │ ├── ctl.dat
│ │ ├── Domain.dat
│ │ └── License.dat
│ └── version.txt
├── SecurityDUID
├── ServiceProviders
├── ServiceProvidersb
├── session_cookie.txt
├── shadow_debug
├── SoccerCreate
├── SOCIAL
│ ├── CPSorting.txt
│ ├── DAILYMOTION
│ ├── FB
│ │ └── cheng.zhou@samsung.com
│ │ └── Thumbnail
│ ├── FLICKR
│ ├── SocialData.db
│ ├── TELLY
│ ├── TUNEIN
│ │ └── videodata.txt
│ ├── TW
│ │ └── cheng.zhou@samsung.com
│ │ └── Thumbnail
│ └── Y2B
│ ├── Thumbnail
│ └── videodata.txt
├── swu_finalizer_complete_flag
├── testQR.png
├── TransponderDataBase.dat
├── TSIDList
├── TSIDListb
├── UDBCOMMON
├── udhcpd.pid
├── udhcpd_wifidev.conf
├── UPGRADE_FLAG
├── Version.0
├── Version.1
├── VFC_AirA.txt
├── VFC_AirD.txt
├── VFC_CableA.txt
├── VFC_CableD.txt
├── WatchDog00
├── WatchDog01
├── WatchDog02
├── WatchDog03
├── WeakSignalHistory.dat
├── wfd_rtspsource
└── XSERVER_MSGQ
59 directories, 230 files
p16:
Kód: Vybrat vše
.
├── emanual
│ ├── DTV-manual.img
│ ├── DTV-manual.ver
│ └── eManual.ver
├── exe1.img
├── exe2.img
├── rocommon1.img
├── rocommon2.img
├── rocommon_link_1 -> /mtd_uniro/rocommon1.img
├── rocommon_link_2 -> /mtd_uniro/rocommon2.img
├── uncompexe1.img
└── uncompexe2.img
1 directory, 11 files
p17:
Kód: Vybrat vše
.
├── contents
│ ├── bookmark.db
│ ├── device0013.db
│ ├── RecentlyPlayed
...
│ └── RecentlyPlayed.txt
├── rwcommon
│ ├── adobe
│ │ └── stagecraft
│ │ ├── data
│ │ │ ├── config
│ │ │ │ └── ssl
│ │ │ │ └── certs
│ │ │ │ ├── encrypted
│ │ │ │ └── unencrypted
│ │ │ ├── file-cache
│ │ │ └── ssl
│ │ │ └── certs
│ │ │ ├── encrypted
│ │ │ └── unencrypted
│ │ └── font
│ ├── caph
│ ├── common
│ │ ├── 141199000002
│ │ │ └── data.bin
│ │ ├── LogPolicyConfig.xml
│ │ ├── MiniHubIcon
│ │ │ ├── 11101200001.png
│ │ │ ├── 11101228603.png
│ │ │ ├── 11102105201.png
│ │ │ ├── 111199000265.png
│ │ │ ├── 111199000389.png
│ │ │ ├── 111199000746.png
│ │ │ ├── 111299000288.png
│ │ │ ├── 111299000620.png
│ │ │ ├── 111299001578.png
│ │ │ ├── 111299001664.png
│ │ │ ├── 111299001900.png
│ │ │ ├── 111299001912.png
│ │ │ ├── 111299002000.png
│ │ │ ├── 111399000037.png
│ │ │ ├── 111399000136.png
│ │ │ ├── 111399000410.png
│ │ │ ├── 111399001211.png
│ │ │ ├── 111399001956.png
│ │ │ ├── 111399002017.png
│ │ │ ├── 111477000131.png
│ │ │ ├── 111477000186.png
│ │ │ ├── 111477001201.png
│ │ │ ├── 141199000002.png
│ │ │ ├── 20141000001.png
│ │ │ ├── 20142100002.png
│ │ │ ├── 3201410000185.png
│ │ │ ├── 3201411000347.jpg
│ │ │ ├── 3201508004704.png
│ │ │ ├── 3201611010983.png
│ │ │ ├── 3201612011274.png
│ │ │ ├── 3201710014965.png
│ │ │ └── 3201801015538.png
│ │ ├── PSID.KEY
│ │ ├── PSID.KEYb
│ │ ├── TempDownLoad
│ │ │ └── 141199000002
│ │ ├── vudu
│ │ │ └── deactivate
│ │ └── WidgetMgr
│ │ ├── camera.dat
│ │ ├── fullbrowserData.dat
│ │ └── info.xml
│ ├── cookies
│ │ ├── 10140000000.cookie
│ │ ├── 101400000099.cookie
│ │ ├── 111299001912.cookie
│ │ └── 141199000002.cookie
│ ├── emps
│ │ ├── empBillingEx_img
│ │ │ ├── empBillingEx.img
│ │ │ ├── empBillingEx.img.signature
│ │ │ └── empBillingEx.xml
│ │ ├── empBillingExNew
│ │ ├── empBillingExNew_img
│ │ │ └── empBillingExNew.img
│ │ ├── empBrowserCommonPlugin
│ │ ├── empBrowserCommonPlugin_Execute_img
│ │ │ ├── empBrowserCommonPlugin.img
│ │ │ ├── empBrowserCommonPlugin.img.signature
│ │ │ └── empBrowserCommonPlugin.xml
│ │ ├── empCABOX
│ │ ├── empCABOX_img
│ │ │ ├── empCABOX.img
│ │ │ ├── empCABOX.img.signature
│ │ │ └── empCABOX.xml
│ │ ├── empCamera
│ │ ├── empCamera_img
│ │ │ ├── empCamera.img
│ │ │ ├── empCamera.img.signature
│ │ │ └── empCamera.xml
│ │ ├── empDownload
│ │ ├── empDownload_img
│ │ │ ├── empDownload.img
│ │ │ ├── empDownload.img.signature
│ │ │ └── empDownload.xml
│ │ ├── empFSAPI_img
│ │ │ ├── empFSAPI.img
│ │ │ └── empFSAPI.xml
│ │ ├── empGamepadEx
│ │ ├── empGamepadEx_img
│ │ │ ├── empGamepadEx.img
│ │ │ └── empGamepadEx.xml
│ │ ├── empInstaller
│ │ ├── empInstaller_img
│ │ │ ├── empInstaller.img
│ │ │ └── empInstaller.xml
│ │ ├── empNRDP41_img
│ │ │ ├── empNRDP41.img
│ │ │ ├── empNRDP41.img.signature
│ │ │ └── empNRDP41.xml
│ │ ├── empNRDP_img
│ │ │ ├── empNRDP.img
│ │ │ ├── empNRDP.img.signature
│ │ │ └── empNRDP.xml
│ │ ├── empWebBrowser_Execute
│ │ ├── empWebBrowser_Execute_img
│ │ │ ├── empWebBrowser.img
│ │ │ ├── empWebBrowser.img.signature
│ │ │ └── empWebBrowser.xml
│ │ ├── empYTContents
│ │ └── empYTContents_img
│ │ ├── empYTContents.img
│ │ └── empYTContents.xml
│ ├── error.html
│ ├── FACTOR
│ ├── fold.dat
│ ├── fold.datb
│ ├── hdpop
│ │ ├── Broadcaster_Logo.xml
│ │ ├── Common
│ │ │ └── API
│ │ │ ├── Plugin.js
│ │ │ ├── TVKeyValue.js
│ │ │ └── Widget.js
│ │ ├── config.xml
│ │ ├── CSS
│ │ │ └── Main.css
│ │ ├── HD.swf
│ │ ├── index.html
│ │ ├── Javascript
│ │ │ └── Main.js
│ │ ├── pop_version.txt
│ │ └── widget.info
│ ├── history
│ │ └── capture
│ ├── home_page_restored
│ ├── HTML5FILESYSTEM
│ ├── IIC_ER
│ ├── moip
│ │ ├── bin
│ │ │ └── tmp
│ │ │ ├── empCamera
│ │ │ ├── empCamera.xml
│ │ │ ├── EmpSchema.xsd
│ │ │ ├── FalconBC.bin
│ │ │ ├── FalconFW.bin
│ │ │ ├── FalconPlus_BC.bin
│ │ │ ├── FalconPlus_FW.bin
│ │ │ ├── gesticon
│ │ │ │ ├── gesticon_effect_fight.png
│ │ │ │ ├── gesticon_effect_heart.png
│ │ │ │ ├── gesticon_effect_hi.png
│ │ │ │ ├── gesticon_effect_thumb.png
│ │ │ │ └── gesticon_effect_v.png
│ │ │ ├── Heron_Ext_FW.bin
│ │ │ ├── libMoIPCamera_205c.so
│ │ │ ├── libMoIPCamera_2061.so
│ │ │ ├── libMoIPCamera_2065.so
│ │ │ └── ok
│ │ ├── engines
│ │ └── mnt
│ ├── NetSec
│ │ └── daemon.log
│ ├── panel
│ │ ├── HomeConfig.info
│ │ ├── HomeConfig.infob
│ │ ├── running
│ │ ├── updated
│ │ └── valid
│ │ └── samsung.web.info
│ │ ├── homepanel.property -> /mtd_exe/panel/samsung.web.info/homepanel.property
│ │ ├── panel_icon -> /mtd_exe/panel/samsung.web.info/panel_icon
│ │ ├── RESET_FLAG
│ │ ├── samsung.web.info.img -> /mtd_exe/panel/samsung.web.info/samsung.web.info.img
│ │ ├── version.txt -> /mtd_exe/panel/samsung.web.info/version.txt
│ │ └── widget.license -> /mtd_exe/panel/samsung.web.info/widget.license
│ ├── PreRender
│ │ └── UserProfile.bin
│ ├── psa
│ ├── RECOGNITION
│ ├── resetInfo
│ ├── SFSetting.ini
│ ├── smlu
│ ├── stagecraft-data
│ ├── temp
│ │ └── widgets
│ │ └── caph
│ │ └── updated
│ │ └── 102710000000
│ ├── VideoThumb
│ ├── voice_commands
│ │ ├── temp
│ │ ├── temp_mount
│ │ └── work
│ │ ├── config.xml
│ │ └── second
...
│ ├── webkit
│ │ ├── etc
│ │ │ └── WebkitPlugin
│ │ │ └── ServerConfigurations
│ │ │ ├── featurePageVersion.xml
│ │ │ └── searchPageConfig.xml
│ │ ├── nativeui
│ │ │ └── snapshot
│ │ │ └── favicon
│ │ ├── WebBrowser
│ │ │ ├── Cookies
│ │ │ ├── localstorage
│ │ │ └── settings.db
│ │ ├── WebControl
│ │ │ └── localstorage
│ │ │ ├── https_www.youtube.com_0.localstorage.111299001912
│ │ │ ├── https_www.youtube.com_0.localstorage.111299001912-journal
│ │ │ └── StorageTracker.db
│ │ └── WidgetEngine
│ │ └── localstorage
│ └── widgets
│ ├── caph
│ │ ├── 102710000000
│ │ └── 102710000000_img
│ │ ├── 102710000000.img
│ │ ├── 102710000000.img.signature
│ │ └── widget.license
│ ├── framework
│ │ ├── 501410000000
│ │ └── 501410000000_img
│ ├── manager
│ │ ├── 10140000000
│ │ ├── 10140000000_img
│ │ │ ├── config.xml.spm
│ │ │ └── widget.license
│ │ ├── w.data
│ │ └── ww.data
│ └── normal
...
└── swu
├── autoupgradetimers.dat
├── download-temp
├── OURegistry
├── SHOPUSERMODE
├── STB
├── SWU_TimeInfo
└── WAKEUP_TIMER_INDEX
156 directories, 585 files
Napsal: 23 pro 2024, 14:40
od jandur
sorry moja chyba, to je tak ked sa robi po pamati z domu. v PM mas link na novu upravu eeprom.. u X14-stky treba prepisat 2 byte.. u X12 staci iba jeden
toto v boote neni košér: NEC I2C Write Error addr[0]= 0x00 addr[1]=0x06 !!!! , značí to problem na I2C zbernici..
kazdopadne vdsf nemusius rozoberat, je to irelevantne. uz som v praci, odovzdam par teliek a poslem ti upraveny user, myslim ze to je zo 6200 coz je nepodstatne, pretoze napln eMMC je ta ista, liši sa len 25q40 a obsah eeprom
Napsal: 23 pro 2024, 15:14
od rnbw
Pokracujem analyzou mojho dumpu:
SERET aj SECOS su OK - obe kopie zhodne a rovnake ako z dumpu z webu.
Oba KERNELy su poskodene!
Podla hlavicky by mali byt zhodne ako v dumpe z webu, ale kazdy je iny:
Kód: Vybrat vše
u-boot legacy uImage, Linux-3.8.13, Linux/ARM, OS Kernel Image (Not compressed), 3628976 bytes, Tue Apr 25 05:34:33 2017, Load Address: 0x21708000, Entry Point: 0x21708000, Header CRC: 0xBDA93A4D, Data CRC: 0x7C86041C
KERNEL1 ma len namiesto jedneho nuloveho bloku blok AAh. Zaujimave je, ze dlzka je 816B - nedava to ziadny zmysel. Je to ale az na offsete 003763f0, takze za koncom - teoreticky by to mohlo bootovat.
KERNEL0 je poskodeny viac, ma mnoho casti vynulovanych. Ak sa to pokusa bootovat tento kernel, tak je jasne, ze to nemoze fungovat.
ROOTFS0 aj ROOTFS1 su OK - rovnake ako z dumpu z webu.
Zaujimave je, ze aj p13 obsahuje data. Mozno je to v dumpe z webu naschval zmazane:
Kód: Vybrat vše
.
└── security
├── di.dat
├── du.dat
├── keyfile2.dat
├── sboot
├── sxb
│ ├── 0f426ca5
│ │ └── 93015b4386c8ed5b.sx
│ ├── 19d6366f
│ │ └── 93015b43cf71e7c1.sx
│ ├── 6a92acbf
│ │ ├── 93015b430b80b649.sx
│ │ ├── 93015b434d7b0ed3.sx
│ │ ├── 93015b4397850ef3.sx
│ │ ├── 93015b439c3b34d2.sx
│ │ └── 93015b43c0d43576.sx
│ ├── 79cd064e
│ │ ├── 93015b435ae40c6b.sx
│ │ └── 93015b43b9eaec18.sx
│ ├── a32f9f00
│ │ └── 93015b434609c4b1.sx
│ ├── b6edf067
│ │ └── 93015b430187d1e7.sx
│ ├── bfa654d2
│ │ ├── 93015b4361d0da64.sx
│ │ ├── 93015b438d88e96d.sx
│ │ └── 93015b439141e57e.sx
│ ├── c35b9816
│ │ ├── 93015b431626edeb.sx
│ │ ├── 93015b435288b49e.sx
│ │ ├── 93015b4361b15ca1.sx
│ │ ├── 93015b4364062f79.sx
│ │ ├── 93015b4394421efe.sx
│ │ └── 93015b43cc309cd6.sx
│ ├── d075d1bf
│ │ ├── 93015b4352319c2e.sx
│ │ ├── 93015b43c5624a34.sx
│ │ └── 93015b43df8d7f87.sx
│ ├── d419dfbd
│ │ ├── 93015b435495d95b.sx
│ │ ├── 93015b4378d1b860.sx
│ │ ├── 93015b437d652b7a.sx
│ │ ├── 93015b438f1d62aa.sx
│ │ └── 93015b43c33902e7.sx
│ ├── d6302dd4
│ │ └── 93015b432c5e2ba9.sx
│ ├── d96bcbc2
│ │ ├── 93015b4308238445.sx
│ │ ├── 93015b431cfad238.sx
│ │ ├── 93015b437274cb2a.sx
│ │ ├── 93015b439ad79fde.sx
│ │ └── 93015b43a76f9011.sx
│ ├── e7326ad6
│ │ ├── 93015b430d94a775.sx
│ │ ├── 93015b43127e3797.sx
│ │ ├── 93015b433167a2c2.sx
│ │ ├── 93015b4343051b19.sx
│ │ ├── 93015b436e7aaea8.sx
│ │ ├── 93015b43b4a10772.sx
│ │ ├── 93015b43f9da08ae.sx
│ │ └── 93015b43ff4518f6.sx
│ └── f5b28cf6
│ ├── 93015b4353362cd5.sx
│ └── 93015b43ec40aa42.sx
└── tee_state.dat
16 directories, 49 files
p15 je poskodena - unpack skonci s chybou:
Kód: Vybrat vše
unpack.vdfs2: lib/disk_op.c:397: vdfs2_read_blocks: Assertion `actual_offset < sb_info->image_size' failed.
p16 a p17 sa rozbalili bez chyby, co ale neznamena, ze musia byt OK.
Napsal: 23 pro 2024, 16:07
od jandur
tym naozaj nic neziskas, ale ako zabavka je to poucne.. tu mas link na moj dump s tvojimi klucmi:
https://mega.nz/file/quw0XDjR#CKtZDJ6nz ... -7Da_m74yQ
mas to OK, aspon to co som nasiel v logu:
Boot configuration bytes [PARTITION_CONFIG: 0x48]
Boot Partition 1 enabled
H/W reset function [RST_N_FUNCTION]: 0x01
Partitioning Support [PARTITIONING_SUPPORT]: 0x07
Boot write protection status registers [BOOT_WP_STATUS]: 0x0a
vyskusaj, daj info
Napsal: 23 pro 2024, 16:24
od rnbw
Dakujem, stahujem. Zatial som vyskusal druhu verziu upravy EEPROM. (Ne)funguje rovnako ako prva.
Napsal: 23 pro 2024, 16:43
od jandur
vyslusaj ten user, ak by nesedeli kluce alebo tv sa spraval nejako divne vymazem komplet config, desik mam podrobny servis manual aj s nastavenim poloziek v serv. menu
Napsal: 23 pro 2024, 17:30
od rnbw
Zatial dakujem. Nemam doma panel, tak skusanie musim obmedzit len na UART a blikanie LED.