Info and forum posts by 'Jeremy the Bullfrog'

firmware updates filenaming conventions

Hi

Does anyone know the normal filenaming conventions for players based on Vaddis 6 and also for Ali 3351 or 3355 based players?

Or do different manufacturers use different filenames as is common with other chipsets.

I know for instance that a lot of players suitable for OFFA use SAMPODVD.ROM.

If anyone can point me in the direction of any players manufacturers site that has firmware upgrades available for a player based on the Vaddis 6 or Ali chipsets I`d appreciate it

Thanks

Jeremy the Bullfrog

www.adl528.com

RE: AudioLogic ADV802PS

Essentially it uses the same hack code as the cyberhome AD-L 528 and similar players

Press Eject to Open tray
Press Stop
1999 enters secret menu
change region code to 0 for all

I need more info regarding this player so if you have this player and get a chance pop over to my website below and drop me a line.

Regards

Jeremy the Bullfrog

www.adl528.com

This item was edited on Sunday, 1st August 2004, 01:00

RE: Only certain stores have `em...

Hi All

Recently reeived an email from someone claining to have found a hack for a Goodmans GTV34RDVD again 1379 based.I don`t know if this one has been tried on the Tevion or not but here it is anyway.His name is Luke.
Quote:
Hi

I have found a hack that now works:

1. Press the DVD function on your TV set.
2. Press the DVD mode button on the remote control.
3. Press Setup on the remote control.
4. Press 1, 3, 7 and 9 in order, once at a time.
5. Now select the region you require 0 - 9.

This one does work and I can vouch for this.

Luke

Regards
Jeremy the Bullfrog


www.adl528.com

RE: Only certain stores have `em...

Hi

RCE were tried at the time by Tom and appeared to work OK with the setting at 00.

Regards

Jeremy the Bullfrog
www.adl528.com

RE: Only certain stores have `em...

Anyone other than Tom Used this method yet?

Regards

Jeremy

www.adl528.com

RE: DVD ROM HACK??? help plz

Hi

Or try www.firmware-flash.com

They are usually very good for this sort of thing.

Jeremy

www.adl528.com

RE: ALBA 3451 - Region Hack Needed

Hi

Beginning to sound like an old record here.
Any similarities in setup menu system to these which might give us a clue?

www.adl528.com/referrals/referred.htm?Link18

Regards

Jeremy

www.adl528.com

RE: Only certain stores have `em...

Consider it done.

Regards

Jeremy

www.adl528.com

RE: bush dvd145tv

Ever get the feeling Bush/Goodmans are releasing players every 2 weeks or so.What happened to a 144 must have been superceeded before it was released.

Check this link out for similarities with your own machine - it might give us a clue where to start.

www.adl528.com/referrals/referred.htm?Link18

Regards

Jeremy

www.adl528.com

RE: Only certain stores have `em...

OK

That just about does it.Just need too make my screen dumps a bit clearer.

www.adl528.com/referrals/referred.htm?Link21

Any problems - ask us.

Regards

Jeremy

www.adl528.com

RE: Only certain stores have `em...

Ok

Here`s the link to the page - currently work in progress mind - but at least you`ll see what you need to buy from your local electronics shop.I`ll get it finished as quickly as possible.

www.adl528.com/referrals/referred.htm?Link21

Regards

Jeremy

www.adl528.com

RE: Only certain stores have `em...

Hi

I plan too with a link and full details.

Perhaps we could start a cottage industry in ready built interfaces ;-)

I suspect we`ll be inundated now with requests for Macrovision removal which will be harder.Does this machine suffer from this?
Regards

Jeremy

www.adl528.com

This item was edited on Monday, 20th October 2003, 00:19

RE: Only certain stores have `em...

hi

Tom is now playing a region 1 disk and we have a multi-region setting.

I suspect a large coach load of people to maplin electronics.

I`ll post details later.

Regards

Jeremy

www.adl528.com

This item was edited on Monday, 20th October 2003, 00:14

RE: Any workable hacks for Goodmans GDVD141???

As far as I can tell NickG has mailed me to tell me this machine is

ZR36748APQC based

this processor can be found here
www.zoran.com/products/literature/Vaddis5A_ZR36748A_PB2.0_030805.pdf

the stop 1999 hack for the bush model is for the cs98010 board.From elsewhere on this forum the roadster hack is for a Mediatek firmware.So do we know of any other Vaddis5A chipset based players out there which would give any clues.

Regards

Jeremy

www.adl528.com

RE: Any workable hacks for Goodmans GDVD141???

Hi

Use the following link to determine using the setup screens which decoder board has been fitted in your player and get back to us.

www.adl528.com/referrals/referred.htm?Link18

Regards

Jeremy

www.adl528.com

This item was edited on Sunday, 19th October 2003, 15:12

RE: Only certain stores have `em...

Hi

e-mail sent

I`ve only found one player possibly 2 which don`t have this serial e2prom chip.

Can`t find it on an Oritron DVD600 (or its crown equiv CDV661)

There is an 8pin chip on the limit jdv300a but it`s number is mising so can`t be too sure if that is the one.

Anyway hope you find the e-mail useful.

Regards
Jeremy

www.adl528.com

RE: Only certain stores have `em...

Ok

After a lot of e-mails going back and forth between me and Tom eventually resorting to windows messenger.The infamous chip has been identified.Circled near the top of the picture by the paper label marked HT95.

www.adl528.com/referrals/referred.htm?Link20

The chip is a 24C04 the bigger brother of the 24C01 or 24C02 that I was referring to.

Datasheet here www.hczye.com/hczye.com/qjzl/24c04.pdf

I`ve sent the details of the circuit and the software involved to him.We`ll get back to you once we have some news.

Regards

Jeremy

www.adl528.com

RE: Only certain stores have `em...

My oh my oh my oh my

Evidently I`m looking at a different set of pictures to the rest of you.I`ve changed my header page as this was evidently causing confusion and now commented the pictures too which should hopefully make it clearer.

My pictures start with an aerial view of the board.We then progress inwards.as there is rather a large chip marked MT1388E you appear to have decided this is the purpose of the sequence of pictures.In fact if you look very carefully we are heading towards an 8 pin chip that is between the large chip with a heatsink on it and the MT1388E.

Unfortunately the heatsink is glued on rather well so could be either a MT1369 or MT1379 either way its irrelevent.

We are interested in the 8 pin chip.

Quote:
Sampo DVE612(N), an MT1369 player

Compacks DVD5000, an MT1379 player.

first sampo link - 4 pin plug on right has an 8 pin chip next to it.
second compacks link - 8 pin chip between flash eeprom and large ram chip at bottom of picture.

As yet I haven`t managed to hack the adl-528`s firmware but I do know what the contents of this 24C02 chip stores in this player.
www.adl528.com/referrals/referred.htm?Link19

And I can change its contents which has the same effect of changing functions within the menus including using its own inbuilt region hack.

As for the link Tom has just posted feel free to use any of those screen dumps on your own site.If you have a problem with the last two being there which are linked to your area450 site I`ll obviously remove them again.

I hope this clarifies what I`m trying to get at here.

Regards

Jeremy

www.adl528.com

This item was edited on Saturday, 18th October 2003, 19:04

Limit JDV-300A - Firmware version and others

Hi

Just looking for general info on this player.Apparently its the same as a Medion 7950.It`s Vaddis III based.

Screen dumps here

Anyone know how to display firmware version on this machine or if it`s suitable for an upgrade using one of the OFFA projects going on out there.

Thanks

Jeremy the Bullfrog

RE: Only certain stores have `em...

Hi Tom

Unfortunately it isn`t clear enough.

Here`s a link to some pictures of an Mediatek based Bush machine showing a chip that stores the customer preferences i.e. Language - Pal/NTSC - Subtitles - Region code - Does your board have anything like this? - Also I`ve included a picture at the end of a 3 pin plug that is typically used by the manufacturer to connect to the I2C bus if its fitted - in this particular model though this is for some other purpose.

each picture gets closer to the chip in question so you can see how small it is. chip should say something along the lines of 24C01 or 24C02

You`ll need to click on the pictures link within this page.

www.adl528.com/referrals/referred.htm?Link16

I know how difficult it is to get clear pictures - these were taken with the DVD on the floor and using a camcorder mounted on a tripod about 5-6 feet in the air pointing straight down and then zooming in - If I bring the camcorder any closer it goes out of focus.I then captured the output of the camcorder.Still not quite good enough for a really big shot of the chip.Also a bit complicated as I`ve no digital camera.

Anyway let me know if you can see a chip like this or a connector.

Regards

Jeremy

www.adl528.com

RE: Only certain stores have `em...

Quote:
Regrettably, all newer MediaTek players have soldered in EEPROMs (usually 29F080), which means extracting the firmware is virtually impossible (having said that, we did manage it on the Sampo DVE612(N) but it was extremely complex and took an absolute eternity).

Sorry - you`ve completely missed my point here.I`m not referring to the flash firmware chip,rather the small 3mmx4mm serial e2prom that holds customer settings passwords/region settings.

The Bush 1005 mediatek based player I have in front of me has one nestling next to the processor - it`s dwarfed in comparison.I believe the I2C socket is next to the digital out connector -but I`ve misplaced my multimeter to check.Partnumber is typically 24c01 or 24c02.You`ll may need a magnifying glass to see the writing on it.

The REC850 Vaddis III based has one - serial e2prom that is.

Also any of the cs98010 range I have come across use this to hold customer preferences.

The only machine I`ve come across so far which doesn`t use this method is a Crown CDV661 or its oritron equivalent (DVD600)

You are quite correct extracting the firmware and reverse engineering it is a nightmare even on a good day so that wasn`t something I was suggesting.

Anyway maybe Tom will be able to enlighten us with his better pictures.

Regards

Jeremy the Bullfrog

www.adl528.com

RE: Only certain stores have `em...

Quote:
The stalling at the 1379 screen (the inability to change anything when the region code is displayed) is also being experienced by both Daewoo and Ronin owners. In the latter case, Ronin have had to release a region-free firmware version, and I suspect that is the only way the HT95 will get hacked

Do we have a list of model numbers effected so I can keep a look out for one of these players on ebay?

On a completely different tact.Does this board have a serial eeprom for instance a 24c02 (usually 8 pin) and a 3 pin i2c socket anywhere on it.As I have a small interface using 2 transistors and a few resistors,that allows me to download the contents of these types of chips that usually hold the settings i.e. region/language etc etc to a PC which I can alter and then send back to the player.If we can`t do it using a rc hack perhaps this would be an alternative.

Finally anyone tried this post by Paris 2 days ago -

www.dvd.reviewer.co.uk/forums/thread.asp?Forum=176&Thread=224428

Regards

Jeremy the Bullfrog

www.adl528.com

This item was edited on Saturday, 18th October 2003, 09:20

RE: Only certain stores have `em...

Hi


I`m pretty sure someone will have tried this but trying to do a bit of lateral thinking here.
The code to enter the menu appears to be the number of the chipset i.e. 1379. so once you get there possibly to unlock the menu to get to the region code you need to enter another 4 digit code.

perhaps 1379 again or the model number 1600 or even the year 2002 or 2003 that this firmware came out.

So complete code would be 13791379 or 13791600 or 13792002 or 13792003.

Might be worth a try.

I`ve attempted to read the preceeding 21 pages worth of posts but may have missed someones attempts at this.

Finally Clayts you asked someone called Tom to e-mail you pictures of the board and menu screens - Did you ever post anywhere these pictures for us all to look at.

Good luck.

Jeremy the Bullfrog

This item was edited on Friday, 17th October 2003, 17:24

RE: Please Read - Last ditch attempt to hack Goodmans GTV34RDVD!!

Service Manual just arrived for the GTV14DVD.

Circuit board used for the dvd player is identical to the Starlight Kotron DVD-101 and so is the remote control.

Also the second page suggests that the unit is a P1420-IVVD1 which can be found somewhere on www.starlight.com.hk

ok so for GTV14DVD hack maybe same as kotrons which is

open drawer press stop 1456 followed by region number or 0 for all.
Perhaps someone will let me know if this works.
Also seen recently suggestions that open stop 1369 followed by region number or 0 for all.
If you have this machine could they let me know the firmware version under setup - others - version - Thanks

I`m still awaiting the manual for the GTV34rDVD

Regards

Jeremy the Bullfrog

This item was edited on Thursday, 2nd October 2003, 21:02

RE: Please Read - Last ditch attempt to hack Goodmans GTV34RDVD!!

Just found what maybe a new hack located here for the DVD142TV which you might want to try.

members.aol.com/bizzworks1/common/hack.doc

essentially press open then immediately 2001

I`ve also got service manuals for the GTV14DVDXi and GTV34RDVD machines on order hopefully too this morning.

Regards

Jeremy the Bullfrog

This item was edited on Monday, 15th September 2003, 19:41

RE: kotron p1420 region free codes

Ok

I`m going to make a guess here due to the tie-up between Kotron and Starlight and between Starlight and various other manufacturers i.e. Bush/Goodmans.

Try hacks for the kotron dvd-101 on my site www.adl528.com
Failing that try searching on this forum for roadstar 1437 or BUSH DVD142TV hacks and see if they work.

Let us know which one if any works.

Regards

Jeremy the Bullfrog

RE: Please Read - Last ditch attempt to hack Goodmans GTV34RDVD!!

Maybe I can add a bit to the already muddied waters.

Bush - Goodmans and Alba all appear to belong to the same group of companies,and appear to have a lot of their stuff made by a company called mico.

The various Goodmans and Bush Service manuals I have so far suggest that there are at least 3 dvd decoder boards.Which one happens to be in your DVD/TV combo depends on what they seem to have had in stock at the time.

In fact so much so even one of the service manuals is confused (GTV51DVD).Starting off using the CS98010 chipset one and switching to the Zoran QFP160 Processor (ZR36700)/mpeg decoder (ZR36710) mid manual.

The three boards that I know of are as follows

Boards 1 & 2 made under Licence from Starlight

Board 1 - CS98010 based - menu system similar to that shown here.

www.adl528.com/referrals/referred.htm?Link12

Board 2 - Zoran QFP160 Processor (ZR36700)/mpeg decoder (ZR36710)

Board 3 - made under licence from Ravisent Technologies and uses the STI 5508

I don`t know which one of these other two relates to the menu system shown here.

homepage.ntlworld.com/tracey.sturland1/dvdsetup.htm

I also don`t know how the Roadstar 1437 fits into all of this.

Perhaps someone could post pictures of the Roadstars 1437 menu system and if possible it`s associated chipset from the info above.

Some of the Info retreived from the following service manuals

Bush DVD140TV
Bush DVD141TV
Bush DVD142TV (for some reason marked AK46)
Goodmans GTV51DVD


Regards

Jeremy

For info specific to cs98010 based players visit my website www.adl528.com. I`ll also try and extend it to cover dvd/tv combo`s which aren`t necessarily using this chipset.

This item was edited on Monday, 15th September 2003, 19:42

RE: ROADSTER 2019 HACK NEEDED

Hi

Is the menu system anything like that shown here?

Click this link for example

If so let me know

Jeremy the Bullfrog

RE: list of 528/cs98010 based DVD players required

Thanks

That site has actually answered one question as to what chipset is in a Minowa DVD-101.

By the way very impressive site - area450- particularly interested in the IDE to TCP/IP device,that is featured.Keep up the good work.

Regards

Bullfrog

RE: list of 528/cs98010 based DVD players required

Thanks for the comments all taken on board.

The cirrus Logic CS98010 was originally manufactured by Luxsonor and marked as LS528C.When Cirrus acquired Luxsonor they renumbered the chip.

Any units I`ve found so far seem to have this type of menu system - the wording may be different ,it tends to appear from the bottom left of the screen and in this strange style,but yes there are probably others that are completely different.

Anyway the question remians if anyone comes across any players or combos that use either of these chips that I haven`t mentioned can they let me know.

Does anyone know of a site that lists players and the chipset used inside them?

Anyway thanks for your comments much appreciated.

Bullfrog