tivoapp patches

**Sleeper** · 04-08-2004, 11:45 PM

I know that there is another thread discussing tivoapp patches. This thread has two purposes:

1) A centralized list of each hack and the associated patches for each Series/Software version. Currently they are too spread out. I will attempt to give the "original" discoverer/author credit for each of them. If any of the information posted is incorrect, please let me know.

2) Eventually, I will develop a tpm packaged script for each hack that will encompass all the known software versions. Support issues for these scripts should be posted in the Support Forums.

**Sleeper** · 04-08-2004, 11:46 PM

30 Second Skip

Series 1
Known Contributors/Authors: MuscleNerd

Code:

All Values are Hex

Sw Version          Offset              Original Value      New Value
2.5.5               002D51EC            41860034            40860034
3.0                 003DFA28            41860040            40860040
3.1.0               003FF21C            41860040            40860040
3.1.0b              003FF30C            41860040            40860040
3.1.0c              003FF358            41860040            40860040

Series 2
Known Contributors/Authors: MuscleNerd, RonnyThunder, Jeboo, falcontx, nutkase

Code:

All Values are Hex

Sw Version          Offset              Original Value      New Value
3.1.1               00313BC4            10400024            14400024
3.1.1b              00314454            10400024            14400024
3.1.1c              00314424            10400024            14400024
3.1.1d              00315564            10400024            14400024
3.1.1e              00315564            10400024            14400024
4.0                 005177DC            10400068            14400068
4.0.1               0051CC90            10400068            14400068
4.0.1b              0051CC90            10400068            14400068
6.2                 00667d58            1040001d            1440001d

Edit by alldeadhomiez, 2004/08/12:

All 4.0.1b-01 offsets will be the same as 4.0.1b-02 offsets.

All 3.1.0c2 offsets are posted later in the thread.

**Sleeper** · 04-08-2004, 11:47 PM

Directory Sort

Series 1
Known Contributors/Authors:

Code:

All Vaules are Hex

Sw Version          Offset              Original Value      New Value
3.0                 
3.1.0               
3.1.0b

Series 2
Known Contributors/Authors: Jeboo, falcontx

Code:

All Vaules are Hex

Sw Version          Offset              Original Value      New Value
3.1.1               
3.1.1b              
3.1.1c              0026F238            A22000E1            A22200E1
3.1.1d              00270378            A22000E1            A22200E1

<edit by mrbalck51> Sort is only available in this way on 3.x units. 4.x allows it by default (as does 5.x), and 2.x doesnt have the capabilty at all.

Please post corrections or additions!

**Sleeper** · 04-08-2004, 11:48 PM

Enable Backdoors

Series 1
Known Contributors/Authors: MuscleNerd

Code:

All Vaules are Hex

Sw Version          Offset              Original Value      New Value
2.5.5               
3.0                 0038ED38            7F64DB78            38800001
3.1.0               
3.1.0b              003B29FC            7F64DB78            38800001
3.1.0c              003B2A3C            7F64DB78            38800001

Series 2
Known Contributors/Authors: Jeboo, ntesla, falcontx

Code:

All Vaules are Hex

Sw Version          Offset              Original Value      New Value
3.1.1               
3.1.1b              
3.1.1c              0031F564            02802821            24050001
3.1.1d              003206A4            02802821            24050001
3.1.5               00747384            02802821            24050001
4.0                 005216C8            02602821            24050001
4.01b               00526B78            02602821            24050001
6.2                 006e521c            00008821            24100001

Please post corrections or additions!

**Sleeper** · 04-08-2004, 11:49 PM

NoPPV

Series 1
Known Contributors/Authors:

Code:

All Vaules are Hex

Sw Version          Offset              Original Value      New Value
2.5.5               
3.0                 
3.1.0               
3.1.0b

Series 2
Known Contributors/Authors: Jeboo, AhoyMatey

Code:

All Vaules are Hex

Sw Version          Offset              Original Value      New Value
3.1.1               
3.1.1b              
3.1.1c              0032A4EC            104001DC            00000000
3.1.1d              0032B62C            104001DC            00000000
4.0                 005305EC            104001C8            00000000
4.01b               00535B0C            104001C8            00000000
6.2                 00687530            1040026d            00000000

Please post corrections or additions!

**Sleeper** · 04-08-2004, 11:50 PM

Parental Controls Fix for 4.x on S2 DirectTivos

Series 2
Known Contributors/Authors: Jeeboo

Code:

All Vaules are Hex

Sw Version          Offset              Original Value      New Value
4.0                 0058A298            304200FF            30420000
4.01b               0058F868            304200FF            30420000

**Sleeper** · 04-08-2004, 11:52 PM

Disable Yellow Star Promos

Series 1
Known Contributors/Authors: MuscleNerd

Code:

All Vaules are Hex

Sw Version          Offset              Original Value      New Value
2.5.5               
3.0               003CBE4C               40860068           48000068
3.1.0               
3.1.0b            003EC67C               40860068           48000068
3.1.0c            003EC6C8               40860068           48000068

Series 2
Known Contributors/Authors: Nutkase, Alarmtronics

Code:

All Vaules are Hex

Sw Version          Offset              Original Value      New Value
3.1.u5              00296604                12200007          00000000
3.1.1c              00296de4                12200007          00000000
3.1.1d              00297f24                12200007          00000000
3.1.5d              002baa50                12200007          00000000
4.0               00387880                12200007          00000000
4.0.1             003884e4                12200007          00000000
4.0.1b            003884e4                12200007          00000000

Please post corrections or additions![/QUOTE]

Added 4.x patches.

**Sleeper** · 04-08-2004, 11:53 PM

NoCSO - Disable tyStream Encryption

Series 1
Known Contributors/Authors:

Code:

All Values are Hex

Sw Version          Offset              Original Value      New Value
2.5.5               
3.0
3.1.0               00476248            41860038            48000038
3.1.0b              00476338            41860038            48000038
3.1.0c              00476408            41860038            48000038

Series 2
Known Contributors/Authors: anonymous by request, NutKase, 7.1

Code:

All Values are Hex

Sw Version          Offset              Original Value      New Value
3.1.0              0062F09C            0320f809            3C020000
3.1.1              0063139C            0320f809            3C020000
3.1.1b             0063139C            0320f809            3C020000
3.1.1c             00631E1C            0320f809            3C020000
3.1.1d             00632FEC            0320f809            3C020000
4.0                00831F28            0320f809            3C020000
4.0.1 & 4.0.1b     00838108            0320f809            3C020000
5.3                009904c0            0320f809            3C020000
6.1                00a3536c            0320f809            3C020000
6.2                00a3599c            0320f809            3C020000
7.1                002916c4            0320f809            3C020000
7.1a-0[12]         00291284            0320f809            3C020000

Please post corrections or additions.

**Sleeper** · 04-08-2004, 11:54 PM

This is Future #4

**Sleeper** · 04-10-2004, 03:18 AM

Reserved #5

**Sleeper** · 04-10-2004, 03:18 AM

Reserved #6

**Sleeper** · 04-13-2004, 12:20 AM

I don't have 3.1.1c running. I would really appreciate it if someone would post up or PM me the missing original values.

Also, any other version locations?

**AlphaWolf** · 04-13-2004, 01:01 AM

Originally Posted by Sleeper

I don't have 3.1.1c running. I would really appreciate it if someone would post up or PM me the missing original values.

Yoink....

Code:

Offset   Data
0026F238 A22000E1
0031F540 24050006
0032A4EC 104001DC

Also, a quick reference for those who don't know any better (because I know this question will surface):

To make a command line equivalent patch, follow this formula:

Code:

echo -ne "\xHH\xHH\xHH\xHH" | dd conv=notrunc of=tivoapp bs=1 seek=<dec offset>

Where the 8 H's are the hex data of the new value in its given order, and the <dec offset> is the patch offset converted from hexadecimal to decimal. Your average win user probably doesn't know how to convert from hex to dec, so I'll give a quick cheat: run the win calculator, set it to scientific mode, press F5, key in the byte offset, press F6, and viola, your dd seek offset appears.

**Sleeper** · 04-13-2004, 01:03 AM

I thought that DirectTivo's started with Sw Version 3.1.0 and upgraded to 3.1.1b.

Was there an interim 3.1.1 version as I indicated in this post?
http://www.dealdatabase.com/forum/sh...03&postcount=2

If this is correct, does anyone know the 30 Second Skip location for 3.1.0?

AW, thanks for the values!

**ronnythunder** · 04-13-2004, 01:33 AM

3.1.0 and it's ilk is for series 1, and 3.1.1 and variants are series 2.

ronny

Thread: tivoapp patches

Thread Tools

Rate This Thread

Display

tivoapp patches

30 Second Skip

Directory Sort

Enable Backdoors

Record Scheduled PPV (NoPPV)

Parental Controls Fix for 4.x on S2 DirecTivos

Disable Yellow Star Promos

NoCSO - Disable Encryption

Future #4

Reserver #5

Reserved #6

Posting Permissions