tub / photokeychain Goto Github PK
View Code? Open in Web Editor NEWAutomatically exported from code.google.com/p/photokeychain
Automatically exported from code.google.com/p/photokeychain
Hi,
I have a royal pf141 model photoframe[1] which is also a sitronix product.
This is my initial try with the device...
<<<shell session starts here>>>>>
root@shyam:/home/shyam/plans# dmesg | tail
[ 174.226215] usb-storage: device scan complete
[ 174.229126] scsi 2:0:0:0: Direct-Access SITRONIX MULTIMEDIA
0.09 PQ: 0 ANSI: 0 CCS
[ 174.230084] sd 2:0:0:0: Attached scsi generic sg2 type 0
[ 174.247091] sd 2:0:0:0: [sdb] 4096 512-byte hardware sectors: (2.09
MB/2.00 MiB)
[ 174.251084] sd 2:0:0:0: [sdb] Write Protect is off
[ 174.251094] sd 2:0:0:0: [sdb] Mode Sense: 0b 00 00 08
[ 174.251101] sd 2:0:0:0: [sdb] Assuming drive cache: write through
[ 174.264085] sd 2:0:0:0: [sdb] Assuming drive cache: write through
[ 174.264097] sdb: unknown partition table
[ 174.302203] sd 2:0:0:0: [sdb] Attached SCSI removable disk
root@shyam:/home/shyam/plans# lsscsi
[0:0:0:0] disk ATA TOSHIBA MK1234GS AH00 /dev/sda
[1:0:0:0] cd/dvd MATSHITA DVD-RAM UJ-850S 1.61 /dev/scd0
[2:0:0:0] disk SITRONIX MULTIMEDIA 0.09 /dev/sdb
root@shyam:/home/shyam/plans# lsusb
Bus 004 Device 001: ID 1d6b:0001
Bus 003 Device 001: ID 1d6b:0001
Bus 005 Device 002: ID 5986:0100 Bison Acer OrbiCam
Bus 005 Device 001: ID 1d6b:0002
Bus 002 Device 001: ID 1d6b:0001
Bus 001 Device 002: ID 1403:0001
Bus 001 Device 001: ID 1d6b:0001
root@shyam:/home/shyam/st2205tool/svn/sitronix-dpf/trunk/st2205tool# fdisk
-l /dev/sdb
Disk /dev/sdb: 2 MB, 2097152 bytes
1 heads, 4 sectors/track, 1024 cylinders
Units = cylinders of 4 * 512 = 2048 bytes
Disk identifier: 0x03a8ad60
Disk /dev/sdb doesn't contain a valid partition table
root@shyam:/home/shyam/st2205tool/svn/sitronix-dpf/trunk/st2205tool#
./hackfw.sh /dev/sdb
Interactive script to hack the firmware of your keychain photo
player.
Expected response 8 on cmd 1, got 0x10!
Sorry, there doesn't seem to be a device using the ST2205U chipset
at /dev/sdb.
root@shyam:/home/shyam/st2205tool/svn/sitronix-dpf/trunk/st2205tool#
./phack -df firmware-dump /dev/sdb
Expected response 8 on cmd 1, got 0x10!
<<<<shell session ends here>>>>>>
I tried a crooked way out of the by changing the response 8 on the phack
source to 16 which i am getting;-)
I could get the firmware dump and could get short messages displayed on the
device as this..
<<<<shell session starts here>>>>>>>>>
root@shyam:/home/shyam/st2205tool/svn/sitronix-dpf/trunk/st2205tool#
./phack -m "Yay" /dev/sdb
Expected response 8 on cmd 1, got 0x10!
root@shyam:/home/shyam/st2205tool/svn/sitronix-dpf/trunk/st2205tool# make
cc -c -o main.o main.c
gcc -o phack main.o -g
root@shyam:/home/shyam/st2205tool/svn/sitronix-dpf/trunk/st2205tool#
./phack -m "Yay" /dev/sdb
Message written.
root@shyam:/home/shyam/st2205tool/svn/sitronix-dpf/trunk/st2205tool#
./phack -m "abcdefghijklmnopqrstuvwxyz" /dev/sdb
Message written.
<<<<shell session ends here>>>
The last message displayed "abcdefghi" on the device... that is the message
is stripped after first 9 characters.
Then i tried hackfw.sh with the changed phack and i got as below.
<<<shell session starts here>>>>
root@shyam:/home/shyam/st2205tool/svn/sitronix-dpf/trunk/st2205tool#
./hackfw.sh /dev/sdb
Interactive script to hack the firmware of your keychain photo
player.
Message written.
Ok, first off all, we're going to backup the firmware and memory of your
device to fwimage.bak and memimage.bak. Please save fwimage.bak, you
need it to flash a newer version into your unit.
Found existing fwimage.bak, moving to fwimage.bak.old
..
..............................................................
Making a working copy...
Looking for a known device profile...
hack/m_coby_dir ...
...nope.
hack/m_ebuyer ...
...nope.
hack/m_hknameless ...
...nope.
hack/m_keypix ...
...nope.
hack/m_nextg ...
...nope.
hack/m_royal_pf141 ...
...nope.
hack/m_sitronix ...
...nope.
Sorry, I couldn't find a matching device profile. If you want to give
creating it yourself a shot, please read ./hack/newhack.txt for more
info.
(Btw: this can also mean your device already has a hacked firmware. If
you want to upgrade your device using this script, please flash back
the fwimage.bak the previous version saved first.)
root@shyam:/home/shyam/st2205tool/svn/sitronix-dpf/trunk/st2205tool#
<<<<<shell session ends here>>>>>>>>>
The firmware i got by running modified phack is attached (at
attachment/modified-phack-firmware-dump/* ). But that don't seem to be a
good dump as i have already tampered the phack tool. disassembling those
dumps didn't show me anything useful as said in the newhack.txt :(
I also tried "cat /dev/sdb > device-dump" to get the firmware as phack
didn't work at first time. Those dumps seemed more useful and i could also
make a profile refering newhack.txt from these dumps though it too didn't
work. the profile i made and the second dump is also attached at
attachment/device-firmware-dump/.
Hope this helps..
Hope i could get my lcd display work soon:)
Shyam K
[1] http://www.amazon.com/Royal-39103T-PF141-Digital-Travel/dp/B000FOOHX2
Original issue reported on code.google.com by [email protected]
on 19 Oct 2009 at 6:35
Attachments:
I just got my coby 151 from amazon and none of the existing hacks
worked. I followed the instructions and managed to get a working spec
file for it. I opened it, and it says VER:08 on the PCB. Spec files
and firmware attached.
Cheers,
Girts
Original issue reported on code.google.com by [email protected]
on 14 Jan 2009 at 9:08
Attachments:
Also, I have attached my additions to FotoFrameTest.
Regards,
Marko
Original issue reported on code.google.com by [email protected]
on 17 Nov 2008 at 2:03
Attachments:
I tried to instawl your softwar on Widnows. It did'nt wurk. Please fx.
Original issue reported on code.google.com by cpbotha
on 28 Mar 2008 at 10:12
Hi there. I have a generic photo keychain, with ED49 V2 printed on the PCB.
It has usb id's of 1403 0001 and identifies as "Sitronix Digital Photo
Frame", so it should be a st2205. Under windows, it shows up as two drives.
One unaccessible 2mb drive and a 108KB write protected FAT partition. It
doesn't use the common DPFMate.exe software like the other driverless
frames. It uses "setup.exe", which displays "Photo Image Viewer Editor
V2.0.1" in the title bar.
Under ubuntu, I connect the device and run ./phack -m "baks r ok" /dev/sdb
and it returns "No photoframe found there.". I modified main.c to display
the buff string, and it appears to be empty, it's reading nothing from the
device.
As far as I can tell this is standard hardware with a new firmware image.
If anyone could point me to the right direction to getting this working,
give me a hoy.
Are there any good windows apps for monitoring the USB traffic?
Is there a way to backdate the firmware?
Cheers,
Paul
Original issue reported on code.google.com by [email protected]
on 25 Apr 2010 at 4:04
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.