Prevue Interactive Reverse Engineering
Posted: Sat Oct 08, 2011 1:45 pm
I started taking a cursory look at the Prevue Interactive software the other day.
First, a complete history if you're interested:
- This software started out as a partnership between TCI cable and TV Guide (the magazine, owned by News Corp) in the mid-90s. It was called TV Guide On Screen, and also had a corresponding channel, called the TV Guide On Screen Channel, which was Windows-based and written in C++.
- At some point, TCI bought UVSG, and gave its TV Guide On Screen assets to Prevue Networks.
- Prevue discontinued the TVGOS channel and hired the programmers to work on the Prevue Channel instead. It took the TVGOS interactive guide software (which hadn't been launched in many markets), and renamed it "Prevue Interactive" (also sometimes referred to as "Prevue Navigator"). Prevue had already been working on their own interactive guide, which they then renamed "Prevue Express." Rather than being a full-featured menu system like Prevue Interactive, Express's guide was the Prevue Channel, with the bottom half overlaid with a listings grid that could be paged through manually instead of scrolling. You could also get more information about each program, etc. This site from 1997 provides a nice view of the original Prevue Interactive: http://www.bluestarmediagroup.com/tciti ... pinav.html You can also see two similar product manuals for the DCT-1000 cable box, which at the end, have pictures of the IPG - TV Guide On Screen and Prevue Interactive. It can also be seen in a manual I found lying around in my house a few years ago, which ignited my interest in Prevue in the first place: http://cl.ly/3b1j1347303d0h2w3O3j
- When UVSG bought TV Guide, they renamed Prevue Interactive to "TV Guide Interactive." However, they kept the name "Prevue Interactive" in Canadian markets for unknown reasons. A little before this, they made some changes to the look of Prevue Interactive. They added a blue background gradient, and ads. You can see very very brief examples of this in this video: http://www.youtube.com/watch?v=0OQLtFTykDg
- In 1999, TV Guide rolled out a major new release, A15, which was dubbed "Tan Guide." You can see this here: http://web.archive.org/web/200012050554 ... asp#Design
- Tan Guide is updated to A16 and then A17, adding quick menu, On Demand, and some other changes.
- TV Guide Interactive (at this point, Gemstar-TV Guide) introduces Blue guide, software version A18, with DVR features. Non-DVR boxes continue using tan guide. Blue guide is updated up to A21.
- TV Guide Interactive introduces the i-Guide with version A22. They have an online demo of this guide, and they made both Prevue-branded and TV Guide-branded versions of it. You can also see this diagram comparing features of tan and blue guide with i-Guide.
- i-Guide is licensed to Comcast through the joint venture GuideWorks.
- i-Guide 1000 is introduced, bringing an updated guide to the older, slower cable boxes and finally getting rid of Tan Guide and Blue Guide.
- Rovi acquires Gemstar-TV Guide, and lays off most of its Tulsa-based interactive developers (this may have happened earlier). It also mostly phases out the vestiges of the Prevue brand in Canada. I think Rogers Cable guides may still be Prevue-branded.
- Comcast continues to update i-Guide to add minor features, and the software is currently at version A28. Rovi continues to sell it.
Okay, so where does the reverse engineering come into this? Well, thanks to a community of people who hack cable boxes and other things, I have a software dump of TV Guide Interactive A23 from 2005. I found out that the DCT cable boxes this version is designed to run on actually use the same M68K processors that are found in the Amiga, so I decided to pop open my disassembler and see what I could find.
The disassembler had a lot of trouble analyzing the binary. In the end, I may have to analyze some of it manually, since IDA can't quite figure out what is code and what is data, and I have no way of emulating/running this software at all. Maybe at some point I'll pick up a cable box, throw this software on there, and use the JTAG debugger to figure out what's going on. But I'm not planning to invest too much time into this project in the near future. There were some interesting things - there are no references to Prevue in the code, but there are references to "General Instrument" and "TVGOS."
I'll keep you guys updated if I get anywhere, but probably if I work on reverse engineering Prevue stuff in the near future, it will be Sneak Prevue (if I can ever get a copy) or ESQ/Prevue Channel.
First, a complete history if you're interested:
- This software started out as a partnership between TCI cable and TV Guide (the magazine, owned by News Corp) in the mid-90s. It was called TV Guide On Screen, and also had a corresponding channel, called the TV Guide On Screen Channel, which was Windows-based and written in C++.
- At some point, TCI bought UVSG, and gave its TV Guide On Screen assets to Prevue Networks.
- Prevue discontinued the TVGOS channel and hired the programmers to work on the Prevue Channel instead. It took the TVGOS interactive guide software (which hadn't been launched in many markets), and renamed it "Prevue Interactive" (also sometimes referred to as "Prevue Navigator"). Prevue had already been working on their own interactive guide, which they then renamed "Prevue Express." Rather than being a full-featured menu system like Prevue Interactive, Express's guide was the Prevue Channel, with the bottom half overlaid with a listings grid that could be paged through manually instead of scrolling. You could also get more information about each program, etc. This site from 1997 provides a nice view of the original Prevue Interactive: http://www.bluestarmediagroup.com/tciti ... pinav.html You can also see two similar product manuals for the DCT-1000 cable box, which at the end, have pictures of the IPG - TV Guide On Screen and Prevue Interactive. It can also be seen in a manual I found lying around in my house a few years ago, which ignited my interest in Prevue in the first place: http://cl.ly/3b1j1347303d0h2w3O3j
- When UVSG bought TV Guide, they renamed Prevue Interactive to "TV Guide Interactive." However, they kept the name "Prevue Interactive" in Canadian markets for unknown reasons. A little before this, they made some changes to the look of Prevue Interactive. They added a blue background gradient, and ads. You can see very very brief examples of this in this video: http://www.youtube.com/watch?v=0OQLtFTykDg
- In 1999, TV Guide rolled out a major new release, A15, which was dubbed "Tan Guide." You can see this here: http://web.archive.org/web/200012050554 ... asp#Design
- Tan Guide is updated to A16 and then A17, adding quick menu, On Demand, and some other changes.
- TV Guide Interactive (at this point, Gemstar-TV Guide) introduces Blue guide, software version A18, with DVR features. Non-DVR boxes continue using tan guide. Blue guide is updated up to A21.
- TV Guide Interactive introduces the i-Guide with version A22. They have an online demo of this guide, and they made both Prevue-branded and TV Guide-branded versions of it. You can also see this diagram comparing features of tan and blue guide with i-Guide.
- i-Guide is licensed to Comcast through the joint venture GuideWorks.
- i-Guide 1000 is introduced, bringing an updated guide to the older, slower cable boxes and finally getting rid of Tan Guide and Blue Guide.
- Rovi acquires Gemstar-TV Guide, and lays off most of its Tulsa-based interactive developers (this may have happened earlier). It also mostly phases out the vestiges of the Prevue brand in Canada. I think Rogers Cable guides may still be Prevue-branded.
- Comcast continues to update i-Guide to add minor features, and the software is currently at version A28. Rovi continues to sell it.
Okay, so where does the reverse engineering come into this? Well, thanks to a community of people who hack cable boxes and other things, I have a software dump of TV Guide Interactive A23 from 2005. I found out that the DCT cable boxes this version is designed to run on actually use the same M68K processors that are found in the Amiga, so I decided to pop open my disassembler and see what I could find.
The disassembler had a lot of trouble analyzing the binary. In the end, I may have to analyze some of it manually, since IDA can't quite figure out what is code and what is data, and I have no way of emulating/running this software at all. Maybe at some point I'll pick up a cable box, throw this software on there, and use the JTAG debugger to figure out what's going on. But I'm not planning to invest too much time into this project in the near future. There were some interesting things - there are no references to Prevue in the code, but there are references to "General Instrument" and "TVGOS."
I'll keep you guys updated if I get anywhere, but probably if I work on reverse engineering Prevue stuff in the near future, it will be Sneak Prevue (if I can ever get a copy) or ESQ/Prevue Channel.