PDA

View Full Version : cci bytes



coaxe59
12-14-2008, 11:23 AM
these aren't the cci patches your looking for

you can be on your way now

11.0-01-2
--------------
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2433020
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2433056
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14123600

StanSimmons
01-15-2009, 02:12 AM
That broke unhacked S3 to hacked S3 MRV.
It also broke hacked S3 to unhacked S3 MRV.

S2 to S3 MRV seems to work fine.
S3 to S2 MRV seems to work fine.

captain_video
01-15-2009, 07:46 AM
Is this supposed to fix MRV between hacked and unhacked S3 units? If not, is there a fix for this issue? I've got one hacked S3 and one unhacked S3 and have never been able to transfer shows between Tivos.

Jamie
01-15-2009, 11:13 AM
Is this supposed to fix MRV between hacked and unhacked S3 units? If not, is there a fix for this issue? I've got one hacked S3 and one unhacked S3 and have never been able to transfer shows between Tivos.IIRC, it used to work, at least with just the nocso patch. What breaks it? The nocso patch, or these cci patches, or some other patch? You might need to test with one patch applied at a time to isolate the issue.

cartouchbea
01-15-2009, 04:44 PM
<Response deleted>

StanSimmons
01-15-2009, 06:32 PM
I recently hacked my TivoHD with NoCSO, Backdoors, 30-second skip, and the CCI hacks to tivoapp, and nothing else.

So just to add more information for clarification, I can successfully transfer shows between my hacked TivoHD and my unhacked Series 3. However I cannot _watch_ any of the transferred shows on either machine. I just get a black screen when watching them. FF, REW, etc seem to work, but the time code at the bottom seems to always stay at 0:00.

I have the same setup and same symptoms. TiVoHD to TiVoHD

captain_video
01-16-2009, 07:09 AM
That's what I get with my two S3's. The only mods I applied to tivoapp were the nocso and backdoors patches.

StanSimmons
01-16-2009, 01:44 PM
One (Standard Def) series that has been recording with the CCI set recorded last night and now doesn't have the CCI set.

I tried MRVing to an unhacked TiVoHD and it showed a progress bar, but only played a black screen with no incrementing of the time indicator. I then MRVed it to a 240040 and it played fine.

I also used TivoPlayList v0.64b from dcahoe to pull the show to my XP machine. It played fine on the PC.

I haven't tested TivoPlayList with a HD show yet.

cartouchbea
01-17-2009, 02:25 AM
I cannot condone disabling copy protection or encryption.

lgkahn
01-19-2009, 04:58 PM
was wondering why my older saved. .tmf files put back on the box with mfs ftp would not play think it is the same reason turning off the cci .. when i saved them it was in ver 9.4 with cci enabled.. will turn it back on and let you know the results but my feelings are that this is an issue with mfs ftp files as well as mrv.. i have enough saved that it is not worth turning it off.

tivoq
02-28-2009, 06:03 PM
The top posting is for 11.0-01. Are the byte changes known for 11b-01-2-652 on Tivo HD?

jt1134
02-28-2009, 07:08 PM
The top posting is for 11.0-01. Are the byte changes known for 11b-01-2-652 on Tivo HD?

11.0b-01-2
--------------
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2451664
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2451700
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14115792

lgkahn
03-02-2009, 01:54 PM
how about 11.0b-01-2 648 anyone know if the patch locations are te same

pdd
03-02-2009, 08:20 PM
how about 11.0b-01-2 648 anyone know if the patch locations are te same

If you open up your tivoapp in a hex editor you can check.



VMA/HEX Orignial Value New Value
0x00651E1C/0x00251E1C 30B000FF 00008021
0x00651E40/0x00251E40 00E08821 24110000
0x01177870/0x00d77870 30B000FF 00008021


If the original values match then you should be ok to patch with those values.

I can't confirm this because I don't have your version of tivoapp.

lgkahn
03-02-2009, 08:45 PM
i know but i dont have it yet either as i havent updated yet.. thanks .. i hopped someone else had done i already.. also looking for backdoor and 30 sec. skip patches

lgkahn
03-03-2009, 08:17 PM
ok i have upgraded and they sseem to work.. encryption is off and cci is not set after recording but i found the locations to check in the original tivoapp by converting the offset to hex so in the cases above i found them at

2568d0
2568f4
d763d0

i believe this is because it was not running in memory

these locations when looked at in hedit on windows
show the correct 30b000ff and 00e08821 and 30b000ff

so that is probably why it works.. no just need the 30 sec skip and backdoor patches
if anyone want the original tivoapp for 11.0b-01-648 let me know

lrhorer
03-15-2009, 10:52 PM
If you open up your tivoapp in a hex editor you can check.



VMA/HEX Orignial Value New Value
0x00651E1C/0x00251E1C 30B000FF 00008021
0x00651E40/0x00251E40 00E08821 24110000
0x01177870/0x00d77870 30B000FF 00008021


If the original values match then you should be ok to patch with those values.

I can't confirm this because I don't have your version of tivoapp.

First of all, let me confirm these are the values for the THD running 11.0b, correct? Secondly, does anyone have a link to a hex editor compiled for the TiVo (S3 class, of course)?

lrhorer
03-15-2009, 11:02 PM
ok i have upgraded and they sseem to work.. encryption is off and cci is not set after recording but i found the locations to check in the original tivoapp by converting the offset to hex so in the cases above i found them at

2568d0
2568f4
d763d0

i believe this is because it was not running in memory

these locations when looked at in hedit on windows
show the correct 30b000ff and 00e08821 and 30b000ff

so that is probably why it works.. no just need the 30 sec skip and backdoor patches
if anyone want the original tivoapp for 11.0b-01-648 let me know

And just to make sure I follow you, as well, you have an original S3, running 11.0b? So the upgrade values would be


Hex Old Value New Value
002568D0 30B000FF 00008021
002568F4 00E08821 24110000
00D763D0 30B000FF 00008021

Jamie
03-16-2009, 12:33 AM
... Secondly, does anyone have a link to a hex editor compiled for the TiVo (S3 class, of course)?I'd recommend you look at tvapppatch (http://www.dealdatabase.com/forum/showthread.php?t=60304). 11.0b patches for tvapppatch were posted here (http://www.dealdatabase.com/forum/showthread.php?p=301983#post301983).

lgkahn
03-18-2009, 04:31 PM
here is my tivoapp patches for an original s3

below is for 11.0b
echo -ne "\x10\x00\x00\xaa" | dd conv=notrunc of=tivoapp bs=1 seek=1915420
echo -ne "\x24\x10\x00\x01" | dd conv=notrunc of=tivoapp bs=1 seek=3619700
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=2451664
echo -ne "\x24\x11\x00\x00" | dd conv=notrunc of=tivoapp bs=1 seek=2451700
echo -ne "\x00\x00\x80\x21" | dd conv=notrunc of=tivoapp bs=1 seek=14115792
echo -ne "\x10\x40\x00\x26" | dd conv=notrunc of=tivoapp bs=1 seek=7934352

first 2 are nocso and back door
next 3 are cci
last is 30 sec

lgkahn
04-19-2009, 06:05 AM
need these please for 11.0c thanks

ScanMan
04-19-2009, 08:06 AM
need these please for 11.0c thanks
Here they are:

array set patch_11.0c {
0x005d3a14 "104000aa 100000aa"
0x00773b38 "00008021 24100001"
0x00b92be4 "14400026 10400026"
0x00656e40 "30b000ff 00008021"
0x00656e64 "00e08821 24110000"
0x0117e020 "30b000ff 00008021"
}

array set desc_11.0c {
0x005d3a14 "noencrypt"
0x00773b38 "backdoors"
0x00b92be4 "30secskip"
0x00656e40 "cci1"
0x00656e64 "cci2"
0x0117e020 "cci3"
}
Remember to subtract 0x400000 from the VMA address and then convert it to decimal to get your 'seek' value if you use the 'dd' method.

The "tvapppatches-11.0c.tcl" was posted here. (http://www.dealdatabase.com/forum/showthread.php?p=302666#post302666)

philhu
12-08-2009, 07:53 AM
Anyone have these for 11.0d?

ScanMan
12-08-2009, 08:59 AM
Anyone have these for 11.0d?
It was posted here: http://www.dealdatabase.com/forum/showthread.php?t=61245

jt1134
12-08-2009, 09:32 AM
It was posted here: http://www.dealdatabase.com/forum/showthread.php?t=61245

in the 11.0d thread, no less...:rolleyes:

amazing...