Slacked off in the posting for a little while there. But you will be comforted to know that I always have at least a half-dozen articles in development for this blog.

According to the aggregated site statistics, “vp62 codec” is, far and away, the top search string that drives people to this site. “vp61 codec” brings up a distant second. This tells me that people are actually interested in On2′s VP6 line of codecs even though I may not encounter much media in those formats. If you are interested in the codec format, RE efforts on the Java modules are proceeding slowly and tediously.

People actually subscribe to this blog via RSS. Fun to know.

This blog is also well on its way to hijacking key food concepts. Another search string driving traffic to the site is “making omelettes”.

From the Internet Movie Database:

At the same time, [the MPAA] released free software that it said would help parents scan their computers to find file-swapping software and pirated films.

I am most curious about what this free software does. Unfortunately, I find no mention of such software over on mpaa.org.

Read the rest of this entry »

I’m feeling good about these new MS multimedia libraries with debug symbols. At first I was a little disappointed to see that ‘only’ WMA8, WMA9 and WMV9 were covered by these libraries.

Read the rest of this entry »

Since Microsoft was kind enough to freely release certain of their multimedia libraries with extensive symbolic information, I thought I would go one step further and start extracting useful intelligence from the libraries in a methodical manner. To that end, I wrote a Perl script that analyzes the disassembly output of a “dumpbin.exe /disasm <file>” command (standard with the Microsoft development tools) and outputs a list of all the functions in the file as well as all the functions the function calls. The list is divided into functions that are not called within the code (these are suspected to be top-level functions) and functions that are referenced.

Read the rest of this entry »

A visitor brought my attention to the fact that Microsoft makes available, as a free download or a nominal-priced CD, Windows Embedded Introductory Kit. It’s quite large and contains, among many other things, some .lib files with debug symbols. That was nice of them.

Read the rest of this entry »

Okay folks, let’s get a few things clear here: Yes, we all know that some official source code for a few of Microsoft’s A/V codecs made it into the wrong hands and is now floating around the internet. Understand that you are not l33t h4X0r if you happen to receive this file. Also, quit sending it to me. I do not want it. I delete it upon receipt. I may have to implement a special mail filter to deal with it.

Realize that this could taint us. I have no problem with ripping open a publically-available binary decoder to discover an algorithm inside (and if they happen to leave the debug symbols compiled in, oops, file that under “their problem” category).

If it makes you feel any better, there are some people who have already glanced at the code and discovered that it covers algorithms that we have already largely reverse engineered, a long time ago, via legitimate methods.

Microsoft should come up with bogus, red herring source code samples and periodically “leak” them, just to give the -ahem- “hacker underground” something to salivate over and feel special about.

…sigh… and I had really hoped to avoid creating a legal/ethical category for this blog…

From the Internet Movie Database Studio Briefing, Sony is planning to unveil a chip that will perform image postprocessing on a normal television signal in order to make it look like a HDTV signal:

Sony Brings HDTV-Like Quality to Ordinary TV — At a Price

Sony has unveiled a new settop processor called the Qualia 001 Creation Box…is a microchip that sharpens the edges of objects within an image…priced at $5,080.

This is not the first time I have heard about such a product. I saw an ad in a home A/V magazine a few months ago for a set top box that could perform 6 types of post-processing on the input video signal. I think the price tag was in the neighborhood of $3,500. Just for some well-known mathematical filters probably implemented in a standard Texas Instruments DSP.

A user on one of the FFmpeg mailing lists brought to our attention a codec called FPS1. The company behind this codec is named Fraps. The application domain for this codec is apparently real-time screen capture of computer game animation, such as in popular first-person shooter games, hence the clever FOURCC FPS1.

Read the rest of this entry »

On a recent visit to the FlatIron Crossing in Colorado, the first thing that greeted me was a large, hanging widescreen television with a PC BIOS start up screen imploring the user to remove any system disks and press any key to boot the computer. Another hanging screen nearby showed a Windows XP login screen. These screens were scattered throughout the shopping center and luckily, many of them were showing what they were supposed to be showing, I suppose. The regular presentation was some rather choppy video that made me wonder if the video stream was being piped in via a constrained 115Kbit/sec serial cable.

I do not even want to guess how much it cost to deploy dozens of these widescreen, flat-panel monitors all over the building, or what the underlying justification was. And how are they administered? Is there actually one PC driving each monitor? I understand that 1 PC driving the whole show would be unappealing as all the monitors would be in complete sync for an eerie, techno-dystopian effect. Perhaps 1 PC is driving 3-5 monitors?

Then there is the potential for misuse. I hope the back office with the PCs is well-secured. The program running these video files ad nauseum could probably be easily subverted to show anything. One unlocked door and a prankster with a CD-ROM of some choice cuts from the internet “adult content” community could turn family-friendly shopping on its ear.

Then again, perhaps the video streams are being transmitted via DSL from some central office, hence the quality.

Now that I think about it, I was probably paying more attention to the multitude of monitors than any other patron in the entire mall.

I received a tip regarding the VQF format. This page contains binary decoding modules capable of handling VQF data. Binary decoding support has already been added to the MPlayer and MPlayerXP projects. This might be a good jumping-off point for anyone interested in RE’ing this format.