yashsingh1/xdaforums huggingface dataset:
[Nexus 9 Q&A, Help & Troubleshooting] wfujay:
Yeah tried all of this already. I can't flash in recovery bc it's TWRP with no touch. But I did re-flash to stock with Wug's toolkit from bootloader but no dice. I really don't think it's the hardware bc it was working perfect right before I flashed the rom and two fixes. Maybe it was the combination of fixes and rom at the same time. Oh well...
[Nexus 9 Q&A, Help & Troubleshooting] jd1639:
Boot into the stock recovery and do a factory reset. You get to recovery through the bootloader. That should get you through the bootloop. But if your touch screen is borked it's either hardware or a bad flash of the factory image. Try the second method here,

http://xdaforums.com/nexus-9/general/guide-how-to-unlock-bootloader-flash-t3035153
[Xperia Z2 Q&A, Help & Troubleshooting] Mohamed Elhadad:
can anyone check ftf file by 7zip

if files end with .ta or fwinfo.xml

found or not
[Xperia Z2 Q&A, Help & Troubleshooting] DHeppell:
No

in the D6503_23.1.A.0.726_UK+Generic.ftf I cant find either file,

[IMG="Filestructure"]http://xdaforums.com/attachment.php?attachmentid=3391037&stc=1&d=1436055693[/IMG]
[Samsung Galaxy Alpha] lukrangelu:
we need a kernel with low frequency for a better battery! :good::good:
[Galaxy Tab S Q&A, Help & Troubleshooting] hurdlejade:
Hi,. I have made the mistake of updating to lollipop and now I can't live without Xposed, so I want to roll back to 4.4.2. can someone help me how?
[Galaxy Tab S Q&A, Help & Troubleshooting] ashyx:
Xposed now working on lollipop.

If you still want to go back just flash stock kitkat firmware with Odin.
[Galaxy Tab S Q&A, Help & Troubleshooting] hurdlejade:
Hm, can you provide a link? The thread that I visited before said that they can't guarantee Samsung stock ROMs compatibility. In my case I only got into bootloop...
[Galaxy Tab S Q&A, Help & Troubleshooting] ashyx:
You need to flash the correct framework. Use the search. It's been posted several times on here.
[Galaxy Tab S Q&A, Help & Troubleshooting] hurdlejade:
I found one here - http://xdaforums.com/galaxy-tab-s/general/exposed-framework-sm-t700-install-method-t2823004

but one of the Dropbox links are dead. I'll keep looking for another one but if you know what I need exactly - I would own you a beer or two. I would like to test Lollipop, but if it fails I'll roll back to 4.4.2
[Galaxy Tab S Q&A, Help & Troubleshooting] hurdlejade:
- DELETE -
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] godblezz:
Just installed Black Majik... Great work Jas!

check it out: http://wmblack.info
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] Lurch3559:
Why would you post this there has been

a post about Majik since it came out.

Wasted Thread!!!
[8525, TyTN, MDA Vario II, JasJam Software Upgradin] godblezz:
whoops... sorry
[Galaxy Note 3 Q&A, Help & Troubleshooting] SharpTJ:
please delete...wrong forum
[Android Software Development] borillion_star:
The Firmware can be found here, its a zipped *.pkg file http://hisense-usa.com/support/firmware/50H5G_V00.01.130a.F0113_us.zip
[Android Software Development] borillion_star:
If it helps I also have the ports that metasploit was able to find on it"

10.0.0.76	unknown	8060	tcp
10.0.0.76	upnp	9085	tcp	TwonkyMedia UPnP UPnP 1.0; pvConnect SDK 1.0; Twonky SDK 1.1
10.0.0.76	13000	tcp
10.0.0.76	tcpwrapped	56789	tcp
10.0.0.76	tcpwrapped	56790	tcp
[Android Software Development] vache:
Hi,

[MENTION=709992]borillion_star[/MENTION] Did you find a way to extract the .pkg file ?
[Android Software Development] borillion_star:
Yes I did you can you binwalk, and it can extract the files from the pkg. Vache if you need help let me know.
[Android Software Development] tommyk999:
Hi

How did you progress with rooting?

I would like to do the same to LTDN**K720WTSEU

And your post is the only lead I got.

The

Good luck
[Android Software Development] borillion_star:
[MENTION=4546755]tommyk999[/MENTION] and [MENTION=1829889]vache[/MENTION] The pkg files do not contain any files such as /etc/shadow or /etc/passwd that can be used to get the root account password.

I think the only way is to try and dump the tv firmware, there appears to be a serial or uart on the mainboard but I have not had the chance to try that yet.
[Android Software Development] vache:
Yes, i was able to unpack firmware using binwalk.

Still looking into filesystem to find some backdoors.
[Android Software Development] tommyk999:
App for rooting hisense TV, it may help you.

https://mega.nz/#!twYhHZhS!ZW_fdid_P4OtlcqwHCO5Z5nNlYM1cOEluYDrLrE0qM4
[Android Software Development] tommyk999:
Any update on progress? Would be possible to connect raspberry pi with already rooted firmware to go around stock firmware? So you won't void warranty and when anything goes wrong you just disconnect raspb. Pi and go with stock.
[Android Software Development] borillion_star:
Because I don't know where this came from, and what it will do to to my computer if I try to run anything in it, or on my tv. I am going to take a look at it figure it out.

Probably going to be a couple days until I get to it.

As for the Raspberry Pi, yes you can always connect any device over HDMI and disconnect it without changing the TV firmware in any way. That somewhat defeats the goal

of rooting the linux running on the tv though. :P
[Android Software Development] borillion_star:
That zip file actually contains a root for HiSense TV's running android. You can tell because of the adb.exe and the apk file types. It doesn't apply here.
[Android Software Development] borillion_star:
I did purchase a logic board for this TV with the power board off of ebay. There is something on it that is marked as a UART with 3.3V.

I will power it up and see what I can read out white its booting, and post when I am able.
[Android Software Development] tommyk999:
I got some pdf file it is in chinese for led65k720uc, it is getting interestin at the end i think it describes how to get acces to the system with some description. hope this would help you.

https://mega.nz/#!sggVSJaS
[Android Software Development] tommyk999:
[IMG="k720uc system"]http://i.imgur.com/1uBchgC.jpg?1[/IMG]
[Android Software Development] tommyk999:
Found some info on led42k220 but have to find a way how to translate pdf from Chinese to English

https://drive.google.com/file/d/0B7GyFV1vAMbRUkt0LW9kRjUzQ1E/view?usp=docslist_api
[Android Software Development] vache:
Looks like it's for AndroidTV, while mine runs OperaTV.
[Android Software Development] tommyk999:
I will keep looking hope I found something with opera
[Android Software Development] tommyk999:
What type is Chinese equivalent to 50k220gwus?
[Android Software Development] vache:
Mouse/keyboard works on browser, but nothing to do here.

I'm trying to repack firmware after changing some interesting files to check if we can do something interesting.

I first get squashfs filesystem using dd command, then tried to mount it but no luck.

So i used unsquashfs to unpack it (like binwalk did)

Then i used mksquashfs to repack it and used dd to inject file again in upgrade_loader.pkg

OperaTV is new for me, i have to learn how it works before going further.

--------------------------------------------------------------------------------------------------------------------

Firmware Analazing (from 40EC591)

Partitions :

3rdw (Apps ?) (ext4 - /dev/mmcblk0p12 - dev/mmcblk0p11)

3rdp (Apps ?) (squashfs - dev/mmcblk0p11)

uImage (kernel - /dev/mmcblk0p5)

rootfs.bin (squashfs - /dev/mmcblk0p7)

pq.bin (? - /dev/mmcblk0p16)

aq.bin (? - /dev/mmcblk0p17)

adsp.bin (? - /dev/mmcblk0p21)

facsetdata.bin (? - /dev/mmcblk0p25)

uboot.bin (bootloader - /dev/mmcblk0p1)

uenv.bin (? - /dev/mmcblk0p2)

logo.bin (? - /dev/mmcblk0p18)

default_db.bin (? - /dev/mmcblk0p23)

hdmi_2_0_hdcp.bin (? - /dev/mmcblk0p24)
[Android Software Development] bgm0:
hi, i just found this thread but the search tool did not found this info so i hope it helps:

https://github.com/jamesyan84/mt5507_android_4.4

Almost complete dump of source code for TCL tvs based on mediatek MT5507.

Then there is this project: https://github.com/prototux/TCL-TV-reverse-engineering

Happy reading, compiling, hacking
[Android Software Development] 5kstore:
Install apk files hisense 39n2170pw powered by VIDAA

Hi there, I just bought this Hisense tv as a smart Tv, thinking im going to install apk files like iptv, and all the stuff, i failed because i have discovered on the pack ;powered by VIDAA; i saw an app store written N when i got in, its crap. it got a build in browser when you get in , there are only build in search engines, no browser with an address bar. countries location is limited to ARAB countries. when i tried doing some search with my pc, i discovered tv is using Linux portal interface ui. by NETRANGE.COM. so the app store is from netrange. i even tried locating the root folder, nothing which mean i cant download to tv memory. please i need help here, to run android on this tv, or if theres any other way i can get iptv on it, then fine.

Thanks in advance!
[Android Software Development] sendx:
I’ve got Sony XF9005 main board (1-983-249-21) which does not have serial/IR ports (EU model with sat tuner and CAM). CPU is marked MT5832 (not MT5891)

A few questions:

- does anyone know whether 1.8V uart should be available somewhere or uart ports are just blocked at boot?

- are there known software to connect to serial over usb at boot (over usb otg)?
[Android Software Development] Zormax:
For example, my Panasonic does not have a debug output on connector 3.5 or any other external connector.

According to the service manual, a special debugging connector - inside the TV
[Android Software Development] jockyw2001:
L99

On my TCL U65P6046 Android TV with a MT5658 chipset, the 3.3V UART service port is wired on the USB 2.0 port (service port):

GND = pin 5 GND	black
TX = pin 9 MicB_SSRX-	purple (connect to RX of USB-UART adapter)
RX = pin 10 MicB_SSRX+	orange (connect to TX of USB-UART adapter)

The upgrade.pkg AES encryption key is exposed in the bootlog during firmware upgrade :)
[Android Software Development] blackjan:
Got a Thomson 32FD5506 with "Smart TV3" based on Linux.. How to get access to root there? I only found something to "Smart TV2" ?!
[Android Software Development] tarator.ru:
For Hisense LTDN58K700XWTSEU3D

1. Go to /3rd_rw/UI/hisenseUI/keyboard/

2. Open file keyboard_EU.js (config for Russia & Europe)

3. Change the line 31: SYSCMD_KEYCODE_MAP[guijs.SYSCMD_INFO] = VK_INFO;

to SYSCMD_KEYCODE_MAP[guijs.SYSCMD_INFO] = VK_AMAZON; // AMAZON selected because it is not relevant for Russia

4. Go to /3rd_rw/UI/hisenseUI/modulePages/appPages/

5. Open file amazon.js

6. Change the line 36 & 40 to :

sendAM(':am,am,:start=[tv_store,-u,link to your application]')

and line 46

sendAM(":am,am,:stop=tv_store")

7. Reload TV

8. Сlick "info" button -> your application start up :)
[Android Software Development] yamen_tn:
can you please share the AES key

edit

i managed to extract the RSA and AES from the tv but when i use the key to decrypt the header the result differs from the log decrypted header by the first 16 bytes so i think we may need an IV to properly decrypt the firmware

##########RSA public key######
6d 42 9c 74 61 88 f8 28 7f 29 17 0e 12 15 41 02 mB.ta..(.)....A.
9b f2 5d 65 ea 73 b9 b2 a3 64 61 b7 f0 c8 57 a4 ..]e.s...da...W.
ae d9 2b 93 e8 bf 01 ba d4 4e b2 07 50 02 62 42 ..+......N..P.bB
37 c1 b9 dd 88 b4 c4 c6 1f 52 4e d9 7f 4f 65 82 7........RN..Oe.
e2 13 1a d8 53 f6 1f a7 49 b8 b0 36 a4 76 42 a5 ....S...I..6.vB.
07 c9 12 81 f4 51 b1 1d 7d 5c 1c 7b e1 84 2f b2 .....Q..}\.{../.
7f 64 6e a2 c4 29 6f 5d 0b b4 50 bd cd e0 b5 69 .dn..)o]..P....i
4b 37 cc 7d b7 8d e2 c8 4d ea 5a 0a d4 b2 12 5f K7.}....M.Z...._
e8 ec 96 6e c2 ff 03 f4 07 61 36 02 47 85 23 ad ...n.....a6.G.#.
4b 8b ec fa 44 2a 33 3f 37 e7 54 06 81 eb c7 bf K...D*3?7.T.....
8b 0c e1 67 dd b4 78 81 03 a3 ce ab 2d 62 60 3d ...g..x.....-b`=
c5 04 95 9c 36 f6 fe ce ff 25 29 ef eb 80 08 83 ....6....%).....
37 cc a0 b1 e2 fd 10 e2 aa 80 26 f8 29 34 b3 c5 7.........&.)4..
44 c5 5c 31 f6 13 95 bd 88 a2 6d 0e dc 3d 5b 89 D.\1......m..=[.
5b 93 bb 52 96 a0 75 08 b2 17 b8 24 a9 e4 12 b8 [..R..u....$....
5e 58 9a c0 8a d9 d0 c1 9f c8 84 89 e0 b1 29 af ^X............).

##########aes key######
55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 UUUUUUUUUUUUUUUU

##########AES Key######
b1 bf aa 40 7f 70 c8 0c 65 03 79 df ea fa a4 0f ...@.p..e.y.....
[Android Software Development] jockyw2001:
I had to tweak epk2extract a little bit and it works perfect and my MTK.key includes:

55555555555555555555555555555555,B1BFAA407F70C80C650379DFEAFAA40F // TCL 2017
[Android Software Development] yamen_tn:
grait!

did you get the .pak files decrypted or just extracted?

can you email smx-smx (epk2extract author) with the details so he could add it to the tool's source

im trying to get the tool to decrypt the paks but still fail

The main header structure is the same i just added vender magic "TCL\0"

firmware magic is present "#DH@FiRm" but i cant find MTK_RESERVED_MAGIC

there is a static 16bytes (9BF7ED4FDA262A8E58FC63CF38F6E8A9) in every pak header, is that the MTK_RESERVED_MAGIC?
[Android Software Development] tarator.ru:
how to install any html5 app

hi all !

1. open on TV stock browser

2. in the address bar, type hisense://debug

3*. on the page type the name of the application and its URL

4. find the application icon in Google. copy and paste the url of the icon

5. Click the INSTALL button

6. can use the app

* lots of applications here -> apptest.staging.foxxum.com
[Android Software Development] szczuru:
Is there something similar for tcl tvs?
[Android Software Development] tarator.ru:
I don't know
[Android Software Development] Floron:
Hello, I successfully extracted .pkg firmware, but how to convert or extract .pak to .img?
[Android Software Development] challou:
Hi . i have a sony kd55x8507c android tv Mediatek MT5890,whith dual-core ARM Cortex-A17 where i am having problems with the boot loop problem after the update i have done everything to fix this but not successful sony recommends to change a new mainboard and it costs almost 300 euros, i don't think it is honest because it is a software problem and sony only thinks about money loss from customers, I hope that the deva of xda can find a solution that many people have this problem. or makken recovery tool for it ?

https://www.youtube.com/watch?v=DLzF2vGAieA that wat I have

https://oss.sony.net/Products/Linux/TV/KDL-43W950D.html

firmware https://www.sony.nl/electronics/support/downloads/00016209
[Android Software Development] giofrida:
Hello guys. I found out a way to enable Amazon Prime video app on Hisense TVs (my model is H43M3000).

You can find all the details here: https://github.com/giofrida/Hisense-Amazon-Enabler

Drop a message if you need any help :)
[Android Software Development] tarator.ru:
autorun any application...

It looks something like this:

1. pull the config.js(usually lies in the UI folder) file from the TV to your pc

2. Open, look for the line responsible for starting the shop mode, something like this -> var url = " /3rd_rw/UI/hisenseUI/modulePages/epos/EU/epos_xt910.html,-s, epos";

3. Brazenly change the address to the http adres of the application we need, for example IPTVPORTAL - > var url = "http://go.iptvportal.ru/?user-agent=lg";

5. Increase TimerInterval = 6000; to 60000000

6. Save the file on the computer and fill it back into the TV.

Actually, you can already use it, when you turn on the "store" mode in the menu settings, the desired application will automatically start, including when you turn on the TV.

But we will bring a little beauty ...

1. From TV, we pull the file to our computer rus.js(or your language file)

2. Open and edit the lines associated with the Store Mode menu":["Store Mode"], say on "Store Mode": ["Auto start"],

3. Similarly, we will correct the hint " Select store mode to effect EPOS and other demo functions.": ["Activate automatic start of iptvportal when the TV is turned on."]
[Android Software Development] 1337p:
Hey there!

I *may* have found a way to remotely root specific hisense TVs in case:

1. the hisense://debug handler works in the browser AND

2. the `/3rd_rw/software-update/run-OtaUpgrade.sh` file exists on the filesystem

Since my TV doesnt fulfull point number 2: Can someone thats willing to do a quick test (@giofrida @tarator.ru maybe? :D) contact me via DM?

thanks <3
[Android Software Development] 1337p:
oh and btw, newer models (a7100f for example) don't seem to have a service port anymore (https://hisense.de/service/a7100f/). the only 3.5mm jack on the device is labelled as "AV in"
[Android Software Development] tarator.ru:
now only with >= 7500
[Android Software Development] 1337p:
I've also found this in /etc/login.sh

#!/bin/sh
stty -echo

while true
do
read line
# if [ $(echo -n "x${line}" | md5sum | awk '{print $1}') = "e6007a36a7bacfb32502f787431664df" ]; then
if [ "$line" = "05328087" ]; then
stty echo
exit 0
fi
done

no idea where it's used though :D there could be a shell hidden somewhere..
[Android Software Development] Kirby54:
Hi

i'm not sure but maybe somebody can help, i need to know if it's possible to install any application on a 2020 Hisense TV (model is 43A7100F), that run the Vidaa 3 OS:

HISENSE 43A7100F 108 cm sur LCD Compare !

Voir la fiche technique LCD-Compare, les marchands, prix et avis utilisateurs sur le HISENSE 43A7100F - 108 cm

www.lcd-compare.com

I'm not sure if i need to use a ftp browser to browse the TV config files to install app that are not available on the TV app store ?

Thanks
[Android Software Development] fellaw:
fellaw here after a looooong time. Sorry to dig out this old thread but I have exciting news in regards to the QN141E 2014 Philip models. I have been just too busy with life to play with the firmware other than quite recently.

With that said: Further analysis showed that there is a simple, permanent entry point even in the latest QN141E_012.003.086.128 firmware.

In particular at boot time some lib looks for a certain script in two locations and executes it if found.

Both locations are in writable filesystems, and normally there is no script in either.

Search order:

1. /3rd_rw/sigma/mtksigma_start_wfd.sh

2. /mnt/usb/sda1/sigma/mtksigma_start_wfd.sh

No. 2 is only triggered if no. 1 is not found.

If no. 2 is not found then there will be an execute error on the console.

Successful execution is logged to the console for either.

/3rd_rw is a persistent filesystem, even over firmware upgrades. Also it does not depend on external devices.

Thus I preferred to drop a script there rather than use USB.

I dropped my script via my initial method.

I used firmware QN141E_012.003.030.128 to exploit CVE-2011-2716 and drop the script via BusyBox ftpd.

As far as I can tell QN141E_012.003.038.128 and beyond are not exploitable via CVE-2011-2716, although the udhcpc binary and it's calling script are identical. Not sure what is going on though, and frankly I lost patience to dig further.

The relevant lib is /basic/lib/libwfd.so. It's used by a core service, /basic/dtv_svc.

Thus I doubt that the entry point is easy to fix other than maybe with signatures.
[Android Software Development] tarator.ru:
Hisense Vidaa TV, how to :

- make a backup of TV settings & apps

- install applications from a USB flash drive

- delete pre-installed apps

Sorry, Russian only. But the video is clear without words
[Android Software Development] tarator.ru:
from service manual:​
[Android Software Development] a13x501:
GitHub - opensource-hisense/SmartTV-Series9 at 82b65288a9a12b73674184d20c69b9e2adc4a1cc

Productions List: HS32A5600HWB HS43A5600FWB HS39A5600FWB HS32A5605HWB HS43A5605FWB HS49N2173FWB HS32N1800HWB HS43N1800FWB HS50N1800FWB HS32A5608HWB HE39A5600FWTS HE32A5600HWTS HE...

github.com

source code​

Productions List: HS32A5600HWB HS43A5600FWB HS39A5600FWB HS32A5605HWB HS43A5605FWB HS49N2173FWB HS32N1800HWB HS43N1800FWB HS50N1800FWB HS32A5608HWB HE39A5600FWTS HE32A5600HWTS HE43A5600FWTS HE39A5607FWTS HE43A5607FWTS HE32A5800HWTS HX32A5610HWTS HX49N2183FWTS HX43A5610FWTS HE39A5600FWTS(0001) HE43A5600FWTS(0001) HE32A5600HWTS(0001) 40E5600EE 32E…
[Android Software Development] p0isk:
Does Your usb_SA5600H.pkg file contain any partition?

Next step is reading all file's header in upgrade file:

open File = /mnt/usb_0/upgrade_loader.pkg
Append file length = 223
Append file length = 52473995
Append file length = 10205
Append file length = 902576
Append file length = 30784
Append file length = 8196
Append file length = 4592
Append file length = 2803992
Append file length = 13396
Append file length = 196672
Append file length = 288271360
Append file length = 257196096
Append file length = 64553024
Append file length = 3213520
Append file length = 512

Process tag "usig" length = 512, 00.00.02.00
_LdrUsigUpgrade, verify key pass, command='1'(0x31)
No version defined!!
No CC_DISABLE_UART_UPGRADE defined!!
download usig percentage = 100

free memory size = 4194304
UID hise
open File = /mnt/usb_0/upgrade_loader.pkg
Header encrypt by AES
Header :
35 b3 67 73 08 b5 82 c3 7e d0 9c 0c 40 1c b9 ee 5.gs....~...@...
6e 0f be 55 cf 6e 7d 7c c9 e4 16 f6 00 9a f5 cc n..U.n}|........
17 2b 9f a0 45 eb 66 bf 10 ba a0 bc 55 79 bf 27 .+..E.f.....Uy.'
09 a6 98 a5 b0 02 42 1a dd ac 39 21 c2 0b 36 5d ......B...9!..6]
10 f6 dc c0 8e d7 1e 3a 11 92 83 d1 94 1c bd 73 .......:.......s
a9 51 6d 87 b4 5c 17 99 80 fd 3a c5 50 75 37 3b .Qm..\....:.Pu7;
38 b9 d6 10 84 03 94 b2 c3 60 14 9b ed 0b 63 73 8........`....cs

Header :
68 69 73 65 23 44 48 40 46 69 52 6d 49 44 54 56 hise#DH@FiRmIDTV
31 34 30 31 5f 30 30 32 33 30 36 5f 31 32 5f 30 1401_002306_12_0
30 31 5f 33 37 5f 30 30 37 5f 31 39 34 00 00 00 01_37_007_194...
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 7b d6 9b 45 00 00 00 00 ........{..E....
6d 74 35 38 39 30 5f 65 75 5f 6c 69 6e 75 78 00 mt5890_eu_linux.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

open File = /mnt/usb_0/upgrade_loader.pkg
Append file length = 223
..
Process tag "cfig" length = 223, 00.00.00.df
download cfig percentage = 100

free memory size = 4194304
Dynamic Tag No: 0
TagName: load
FlashType: 0
PartitionID: 0
Dynamic Tag No: 1
TagName: uenv
FlashType: 0
PartitionID: 1
Dynamic Tag No: 2
TagName: kern
FlashType: 0
PartitionID: 4
Dynamic Tag No: 3
TagName: kern
FlashType: 0
PartitionID: 5
Dynamic Tag No: 4
TagName: rtfs
FlashType: 0
PartitionID: 6
Dynamic Tag No: 5
TagName: rtfs
FlashType: 0
PartitionID: 7
Dynamic Tag No: 6
TagName: perm
FlashType: 0
PartitionID: 9
Dynamic Tag No: 7
TagName: 3rdp
FlashType: 0
PartitionID: 10
Dynamic Tag No: 8
TagName: 3rdw
FlashType: 0
PartitionID: 11
Dynamic Tag No: 9
TagName: pqda
FlashType: 0
PartitionID: 15
Dynamic Tag No: 10
TagName: aqda
FlashType: 0
PartitionID: 16
Dynamic Tag No: 11
TagName: logo
FlashType: 0
PartitionID: 17
Dynamic Tag No: 12
TagName: adsp
FlashType: 0
PartitionID: 20
Dynamic Tag No: 13
TagName: ddb
FlashType: 0
PartitionID: 22
Dynamic Tag No: 14
TagName: hdcp
FlashType: 0
PartitionID: 23
Dynamic Tag No: 15
TagName: facs
FlashType: 0
PartitionID: 24
[Android Software Development] xiaodeng:
HELLO, epk2extract can unpack the pkg firmware and how to repack it?
[Android Software Development] p0isk:
There is no pack tool. But you can write it
[Android Software Development] hackwerk:
Today I did a large comprehensive post about my Sony Bravia 4K Android TV in the topic Sony Android TV Users.

Parts are based on your great topic and work.

Maybe some of you are able to help me/us too, as the chipsets are the same/similar (MediaTek MT5890 (= MT5595 = ATV1))?

It would be HUGE to us if the tv could be rooted, if we could manage to unpack/pack firmwares (Sony) or if we would be able to upgrade the tv to international firmware (US/Asia 6.827 instead of EU 5.457)!

Thanks, and keep up your great work!
[Android Software Development] Kalaskas:
I have a TV Hisense U7H 2022 version ASIA with Vidaa OS U , I can not install extra applications , it has no web browser , if I write in the search Hisense://debug only searches within YouTube. It seems to be capped everywhere. Any hope to install something ?
[Android Software Development] chris1892006:
May you help me?