Author Topic: windows phatbox dms hack  (Read 12815 times)

0 Members and 1 Guest are viewing this topic.

Offline rayner601

  • Newbie
  • Posts: 4
windows phatbox dms hack
« on: April 12, 2007, 03:40:32 am »
Help! After 6 hours of trying to patch the dms, I have this issue.  Under profiles, I have an entry for startup sound as /dos/music/flactemp.flac
I can't find a directory called dos anywhere on either partiton of the dms.  The patch fails to load and starts playing right where I left off in the last song I was listening to (I have only 1 song loaded at this time).  Please tell me what I am doing wrong.  I am listing the profile.ini entries and the patch.log file and the bootload.log files here



Offline rayner601

  • Newbie
  • Posts: 4
Re: windows phatbox dms hack
« Reply #1 on: April 12, 2007, 03:41:39 am »
profile.ini

[Default]
num_discs=2
startup_sound=/dos/Music/flactemp.flac
pattern=$TITLE$ - $ARTIST$
album_seek=alpha

[profiles]
active_profile=Default
enable_special_discs=1
enable_voice_prompts=0
num_discs=2

[product]
product_name=PhatNoise Media Manager
product_version=3, 5, 1, 0

bootload.log file
<properties>
<name>Music Keg</name>
<author>Ryan Moriyama</author>
<version>13.01</version>
<date>12.07.2004</date>
<URL>KWMK_logo.gif</URL>
<description>Properties for the in-car hardware</description>
<ini_file>phatbox.ini</ini_file>

<property>
<name>Number of Kenwood Display Digits</name>
<ini_field>kenwood_digits</ini_field>
<description>Number of disc digits displayed on your radio.

Certain radios have protocol limitations that restrict disc numbers greater than 10.  If you are experiencing problems with discs greater than 10, please switch to "1 Digit Display".
</description>
<value>
<ini_value>2</ini_value>
<name>Kenwood 2 Digit Display (factory setting)</name>
<description>Displays 2 digits for the track number on your radio.

NOTE: KVT-910DVD, KVT-911DVD, KVT-M700, Double-Din radios; Please use "1 Digit Display"

2 Digit Display includes the following radios:

2003: 300 series radios and up and KCA-R70FM (FM modulator)
2002: 500 series radios and up
2001: 600 series radios and up
2000: KDC-X915, KDC-X815 only

1999 and older: Use "1 Digit Display"
</description>
</value>
<value>
<ini_value>1</ini_value>
<name>Kenwood 1 Digit Display</name>
<description>Displays 1 digit for the track number on your radio.
</description>
</value>
</property>

<property>
<name>Playlist Announce</name>
<ini_field>announce</ini_field>
<description>Uses text to speech to announce the current playlist.</description>
<disable><condition>kenwood_ssa=1</condition><force_ini_value>1</force_ini_value></disable>
<value>
<ini_value>0</ini_value>
<name>Off (factory setting)</name>
<description>Silent disc changes.</description>
</value>
<value>
<ini_value>1</ini_value>
<name>On</name>
<description>Announce disc changes.

NOTE: Disc change announcements are always "On" if running Kenwood SSA.</description>
</value>
</property>

<property>
<name>Track Display 250</name>
<ini_field>track_display_250</ini_field>
<description>Display track numbers up to 250 (if your radio is capable of it).

This only works on 2001+ model years that utilize 2 disc digit displays.
</description>
<disable><condition>kenwood_digits=1</condition><force_ini_value>0</force_ini_value></disable>
<value>
<ini_value>0</ini_value>
<name>Off (factory setting)</name>
<description>Display track numbers up to 100.

NOTE: If head unit is not capable of running "2 Digit Display" code, this functionality will not work.
</description>
</value>
<value>
<ini_value>1</ini_value>
<name>On</name>
<description>Display track numbers up to 250.

Note: If incorrect numbers appear for tracks greater than 100, switch back to "Off".
</description>
</value>
</property>

<property>
<name>List Title Text</name>
<ini_field>list_title_text</ini_field>
<description>Generates custom disc text on your radio.</description>
<value>
<ini_value>%m%n: %t</ini_value>
<name>Abbreviated Mode Disc Number: Disc Text (factory setting)</name>
<description>Abbreviated Mode Disc Number: Disc Text

Examples:
"PLY14: New Encoded Albums"
"ART132: The Beatles"
</description>
</value>
<value>
<ini_value>%M%n: %t</ini_value>
<name>Mode Disc Number: Disc Text</name>
<description>Mode Disc Number: Disc Text

Examples:
"Playlist14: New Encoded Albums"
"Artist132: The Beatles"
</description>
</value>
<value>
<ini_value>%t</ini_value>
<name>Disc Text</name>
<description>Disc Text

Examples:
"New Encoded Albums"
"The Beatles"
</description>
</value>
<value>
<ini_value>%t (%M%n)</ini_value>
<name>Disc Text (Mode#)</name>
<description>Disc Text (Mode#)
This mode is useful for radios with limited text display capabilities

Examples:
"New Encoded Albums (Playlist14)"
"The Beatles (Artist132)"
</description>
</value>
</property>
</properties>

Offline rayner601

  • Newbie
  • Posts: 4
Re: windows phatbox dms hack
« Reply #2 on: April 12, 2007, 03:43:43 am »
patch.log
: No such file or directory
PhatPatch v0.8 - original code by bushing, additional patches by sbingner
Finding patch offsets:
Verified standard patch offsets
Verifying:
Patch 1 @ 0bb8: make drive signature check always succeed: [bne verify_sig_failed -> bne PC+1]
Expected: 0000 1a00    Actual: 0033 1a00
Unverified!
Patch 2 @ 0bec: make rc.sh signature check always succeed: [bne verify_sig_failed -> bne PC+1]
Expected: 0000 1a00    Actual: 0026 1a00
Unverified!
Patch 3 @ 0c20: make phatd signature check always succeed: [bne verify_sig_failed -> bne PC+1]
Expected: 0000 1a00    Actual: 0019 1a00
Unverified!
Patch 4 @ 0c54: make linux signature check always succeed: [bne verify_sig_failed -> bne PC+1]
Expected: 0000 1a00    Actual: 000c 1a00
Unverified!
Patch 5 @ 0354: make ramdisk invalid signature return 0 instead of 0xFFFFFFFF: [movlne r0, 0xFFFFFFFF -> movlne r0, #0]
Expected: 0000 13a0    Actual: 0000 13e0
Unverified!
Patch 6 @ 0c80: make ramdisk signature check verify 0 instead of 1: [cmp r0, #1 -> cmp r0, #0]
Expected: 0000 e350    Actual: 0001 e350
Unverified!
Patch 7 @ 0358: make ramdisk valid signature return 0 instead of 1: [moveq r0, #1 -> moveq r0, #0]
Expected: 0000 03a0    Actual: 0001 03a0
Unverified!
Patch 8 @ 0330: don't try to read ramdisk.sig (boot without any .sig files): [bl sector_read_suzy -> bl PC+1]
Expected: 0000 eb00    Actual: 02db eb00
Unverified!
Patch 9 @ 02c0: don't try to read linux.sig (boot without any .sig files): [bl sector_read_suzy -> bl PC+1]
Expected: 0000 eb00    Actual: 02f7 eb00
Unverified!
PhatPatch v0.8 - original code by bushing, additional patches by sbingner
Finding patch offsets:
Verified standard patch offsets
first 2 words of flash=c102 0025
testing offsets 0x555 and 0x2aa
writing auto-id command (AA, 55, 90)
Flash chip reports manufacturer id=0020, device id=0057
offsets 0x555 and 0x2aa verified
Resetting flash.
Testing patch locations:
Patch 1 @ 0bb8: make drive signature check always succeed: [bne verify_sig_failed -> bne PC+1]
Expected: 0033 1a00    Actual: 0033 1a00
Match! Programming...
Wrote 0000
Patch 2 @ 0bec: make rc.sh signature check always succeed: [bne verify_sig_failed -> bne PC+1]
Expected: 0026 1a00    Actual: 0026 1a00
Match! Programming...
Wrote 0000
Patch 3 @ 0c20: make phatd signature check always succeed: [bne verify_sig_failed -> bne PC+1]
Expected: 0019 1a00    Actual: 0019 1a00
Match! Programming...
Wrote 0000
Patch 4 @ 0c54: make linux signature check always succeed: [bne verify_sig_failed -> bne PC+1]
Expected: 000c 1a00    Actual: 000c 1a00
Match! Programming...
Wrote 0000
Patch 5 @ 0354: make ramdisk invalid signature return 0 instead of 0xFFFFFFFF: [movlne r0, 0xFFFFFFFF -> movlne r0, #0]
Expected: 0000 13e0    Actual: 0000 13e0
Match! Programming...
Wrote 13a0
Patch 6 @ 0c80: make ramdisk signature check verify 0 instead of 1: [cmp r0, #1 -> cmp r0, #0]
Expected: 0001 e350    Actual: 0001 e350
Match! Programming...
Wrote 0000
Patch 7 @ 0358: make ramdisk valid signature return 0 instead of 1: [moveq r0, #1 -> moveq r0, #0]
Expected: 0001 03a0    Actual: 0001 03a0
Match! Programming...
Wrote 0000
Patch 8 @ 0330: don't try to read ramdisk.sig (boot without any .sig files): [bl sector_read_suzy -> bl PC+1]
Expected: 02db eb00    Actual: 02db eb00
Match! Programming...
Wrote 0000
Patch 9 @ 02c0: don't try to read linux.sig

Offline VorTechS

  • Administrator
  • Veteran.
  • *****
  • Posts: 1678
  • PhatHack Media Manager & DMS Tools Wizard Author
Re: windows phatbox dms hack
« Reply #3 on: April 12, 2007, 06:31:32 am »
Just to alleviate your confusion [i can't help with the hacking parts]...

/dos/music/flactemp.flac

is a unix mount to a Windows drive partition.  When your DMS is being viewed under windows this equates to the drive with the volume label 'PHTDTA'.

For example, my DMS cartridge is two drives under Windows:

Drive F: [PHTSYS]
Drive G: [PHTDTA]

Therefore the path: /dos/music/flactemp.flac
would actually refer to: G:\music\flactemp.flac

HTH
Kenwood KDC-W7031 | Kenwood KHD-CX910 | 250GB DMS | PhatHack Media Manager v1.1.4 (Alpha) | VIOT

Catch me weekdays 8am-4pm GMT on IRC @ irc.freenode.net on channel #phathack (aka the chat link!!)

Offline sbingner

  • Administrator
  • Veteran.
  • *****
  • Posts: 1301
Re: windows phatbox dms hack
« Reply #4 on: April 13, 2007, 12:02:53 pm »
According to the log you pasted, it patched your box... not sure why you're not getting the 'patch complete' wave

Offline VorTechS

  • Administrator
  • Veteran.
  • *****
  • Posts: 1678
  • PhatHack Media Manager & DMS Tools Wizard Author
Re: windows phatbox dms hack
« Reply #5 on: April 13, 2007, 12:05:42 pm »
According to the log you pasted, it patched your box... not sure why you're not getting the 'patch complete' wave

Ah, wait.... have I just spotted something wrong here?!

/dos/music/flactemp.flac

is a path to the PhtData partition is it not?
The file flactemp.flac resides on the PhtSys partition [and incidentally is zero bytes on my DMS cartridge].

Has either of these things got anything to do with it?
Kenwood KDC-W7031 | Kenwood KHD-CX910 | 250GB DMS | PhatHack Media Manager v1.1.4 (Alpha) | VIOT

Catch me weekdays 8am-4pm GMT on IRC @ irc.freenode.net on channel #phathack (aka the chat link!!)

Offline sbingner

  • Administrator
  • Veteran.
  • *****
  • Posts: 1301
Re: windows phatbox dms hack
« Reply #6 on: April 13, 2007, 12:08:31 pm »
nah - /dos/data == PHTDTA and /dos/music == PHTSYS:\music

oh, and it's 0 bytes because it's not actually played... there's an MP3 for the patch complete sound... the .flac is just to get it to call our fake "flacplay" program

Offline VorTechS

  • Administrator
  • Veteran.
  • *****
  • Posts: 1678
  • PhatHack Media Manager & DMS Tools Wizard Author
Re: windows phatbox dms hack
« Reply #7 on: April 13, 2007, 12:35:40 pm »
Ah okay, so /dos/music is a separate mount.  Didn't know that! :)
Thanks for clearing that up.
Kenwood KDC-W7031 | Kenwood KHD-CX910 | 250GB DMS | PhatHack Media Manager v1.1.4 (Alpha) | VIOT

Catch me weekdays 8am-4pm GMT on IRC @ irc.freenode.net on channel #phathack (aka the chat link!!)

Offline judb

  • Administrator
  • Veteran.
  • *****
  • Posts: 1329
  • ph4t l3wtz
Re: windows phatbox dms hack
« Reply #8 on: April 13, 2007, 05:30:13 pm »
well, unless I did some crack smoking this morning and forgot, its not /dos/music it is /dos/data/music
music should be a directory on the phtdta drive.. in anycase we are not mounting anything during the hack process.

all of phtdta drive would be visible under /dos/data and all of phtsys is mounted / visible under /dos


I am pretty sure im copying the flac file into phtdta under a folder called music.

Offline VorTechS

  • Administrator
  • Veteran.
  • *****
  • Posts: 1678
  • PhatHack Media Manager & DMS Tools Wizard Author
Re: windows phatbox dms hack
« Reply #9 on: April 14, 2007, 05:45:33 am »
Are you creating that directory?  It doesn't exist by default....
Kenwood KDC-W7031 | Kenwood KHD-CX910 | 250GB DMS | PhatHack Media Manager v1.1.4 (Alpha) | VIOT

Catch me weekdays 8am-4pm GMT on IRC @ irc.freenode.net on channel #phathack (aka the chat link!!)

Offline judb

  • Administrator
  • Veteran.
  • *****
  • Posts: 1329
  • ph4t l3wtz
Re: windows phatbox dms hack
« Reply #10 on: April 14, 2007, 03:54:03 pm »
yep, and the flactemp.flac file too.  its all part of the hacking scripts.

Offline rayner601

  • Newbie
  • Posts: 4
Re: windows phatbox dms hack
« Reply #11 on: April 21, 2007, 08:18:20 pm »
Sorry guys. I haven't been in here due to knee surgery and thereafter serious complications.  I can at least now hobble around.  I will be working on this after I can get around a bit. So my box is patched, that's good. Why does it say no disc when I replace the hd?  Will I have to use a specific hd or will any notebook hd work?  Any help is appreciated and I will do what I can to help in this endeavor.
Joe