| Re: keyroll ecm and the fix (code it ur self)
Quote:
Originally Posted by cydine_  Yeah, no need for a disassembler at any stage in this process.
The disassembled listings for all the roms are in the nagra coding package. All you need is notepad to write your code and a hex editor to patch the roms.
Open the rom 10.lst in your text editor and search for a jsr EMMBUFF01. This is the point where the keyroll is executed.
2 lines above this is the call we need to change. Change the CD 74 27 to CD XX XX where XX XX is the location of your patch code. |
Once i change to CD XX XX,where how do i attach/create the patch?thinking more i'm gonna be needing values for XX XX is this within the first reply in this thread?
I'm also assuming non of this is possible without an EMM log to begin with.
Post 6 You reference to this:
Yep quite an easy one to fix this one m8. The correct value for X is at $83
__________________
It matters not how strait the gate. How charged with punishments the scroll,I am the master of my fate,I am the captain of my soul.
Last edited by Donnie Darko; 1st December 2008 at 20:36.
|