Quote:
Originally Posted by Donnie Darko  Is step 2 done using hex editor,is there a way to search for BD 81? i've opened the rom10 disassem but i'm struggling at this point.
Its like trying to get on a carousel at the right point,lol.Probably a distinct possibility i'm pissing in the wind also. |
Yeah, no need for a disassembler at any stage in this process.
The disassembled listings for all the roms are in the nagra coding package. All you need is notepad to write your code and a hex editor to patch the roms.
Open the
rom 10.lst in your text editor and search for a jsr EMMBUFF01. This is the point where the keyroll is executed.
2 lines above this is the call we need to change. Change the CD 74 27 to CD XX XX where XX XX is the location of your patch code.