Want to learn to make fun flash! - Page 9 - Digital World Cable Satellite Console Forum

sammymk2 · 20th November 2009, 15:22

Hi Guys,

Please forgive me and feel free to shout at me if I am being thick and mentioning anything that has already been said.

I have read this thread and it has confused the hell out of me but I am willing to give it a try anyhow.

I saw on another forum that there is a non au fix using RST, could and of the files in this fix be studied to work out the timing issues with 3.7.

Sammy

overburnit · 20th November 2009, 15:33

Quote:

Originally Posted by sammymk2

Hi Guys,

Please forgive me and feel free to shout at me if I am being thick and mentioning anything that has already been said.

I have read this thread and it has confused the hell out of me but I am willing to give it a try anyhow.

I saw on another forum that there is a non au fix using RST, could and of the files in this fix be studied to work out the timing issues with 3.7.

Sammy

in a word yes you could

sammymk2 · 20th November 2009, 17:12

Quote:

Originally Posted by overburnit

in a word yes you could

Well incase anyone wants it, here it is.

Its not my work I found it on another forum.

Hope it is of some use.

Sammy

h##p://www.megaupload.com/?d=X06UHQL9

rutters · 20th November 2009, 17:55

Worked great..thanks

sammymk2 · 20th November 2009, 18:03

Quote:

Originally Posted by rutters

Worked great..thanks

Im glad your happy with it but the credit goes to who ever created it.

This is also no reason to give up on the AU fix, the more people that have the knowlage to create the fixes will give us a better chance when N3 arrives.

cg010169 · 22nd November 2009, 19:25

think i might of sorted the flash out, just movin onto the keyroll side to it now, otherwise its just the same as the RST verison which will go down every roll.
plus it seems alot have given up and went for the easy option of the RST method in my view, anyway

I just wondering what source code is best to amend to use, if it's the Redneck or grape one. Im currently working with the Prune file, and 99% think i've got the timing sorted out.
would it be a case of just making sure the right emm bytes are being checked. Then just Amend it into the Prune file (which im pretty sure it is), or does it have to be it's own asm file.
don't know much about the keyroll side, so any info would be good thanks

madbrumie · 22nd November 2009, 19:52

Quote:

Originally Posted by cg010169

think i might of sorted the flash out, just movin onto the keyroll side to it now, otherwise its just the same as the RST verison which will go down every roll.
plus it seems alot have given up and went for the easy option of the RST method in my view, anyway

I just wondering what source code is best to amend to use, if it's the Redneck or grape one. Im currently working with the Prune file, and 99% think i've got the timing sorted out.
would it be a case of just making sure the right emm bytes are being checked. Then just Amend it into the Prune file (which im pretty sure it is), or does it have to be it's own asm file.
don't know much about the keyroll side, so any info would be good thanks

The Prune.asm is the fun card same as grape.asm, i think astra made the prune.asm when he had a few issues with the grape.asm (but dont quote me on that) so both will work if you fix 1 of them, the redneck.asm is the atmega card and if you fix that 1 you will not have to do the keyroll as its done on the atmega (redneck.asm) the public prune/grape.asm, has not got the latest keyroll 8 with it.
hope that answers sone of your questions.
also as now u know that the redneck has the keyroll 8 in there you could look at it as a start as the work has been done, but it will again be a job that you have to get some understanding of, but again the works there so it does make it easyer.
Here is the latest keyroll decripted for you, should help.

Code:

3F            -> Filter: ANY CARD
5C01          PROVIDER ID  (C&W)
FA            -> RUN CODE FOR ROM10:
5FA651B741A6022D 079BCD20209A2003 CD20209FB8AEB7AE 9FB8BCB7BCA626CC 
6B01000000835D01 4205BBA9DC3A4CC4 705F42854EC4484D B7D3A44A
DISASSEMBLY OF CODE:
------------------------------
0081: 5F           clrx                 ; x <-- 0
0082: A6 51        lda #$51             ; Load in A
0084: B7 41        sta TEMPA            ; Store A in...
0086: A6 02        lda #$02             ; Load in A
0088: 2D 07        bms $91              ; Branch if mask=1
008A: 9B           sei                  ; I <-- 1
008B: CD 20 20     jsr $2020            ; Go to subroutine
008E: 9A           cli                  ; I <-- 0
008F: 20 03        bra $94              ; Branch always
0091: CD 20 20     jsr $2020            ; Go to subroutine
0094: 9F           txa                  ; X --> A
0095: B8 AE        eor $AE              ; A= A xor ...
0097: B7 AE        sta $AE              ; Store A in...
0099: 9F           txa                  ; X --> A
009A: B8 BC        eor $BC              ; A= A xor ...
009C: B7 BC        sta $BC              ; Store A in...
009E: A6 26        lda #$26             ; Load in A
00A0: CC 6B 01     jmp $6B01            ; Jump
 BYTES DUMP:
---------------------
00A3: 00 00 00 83 5D 01 42 05 
00AB: BB A9 DC 3A 4C C4 70 5F 
00B3: 42 85 4E C4 48 4D B7 D3 
00BB: A4 4A

MB

cg010169 · 23rd November 2009, 11:55

thanks for that info, still reading up with the keyroll side, it's very interesting and slowly going in i hope lol

From what i see, so please tell me if im wrong.

I have to change this and the block codes below it, so that it can carry on with the keyroll.

Code:

LDS     R16,0x0180
LDI     R17,0x3F
CPSE    R16,R17
RJMP    EndEMM

so thats it#s 0x180 and so on etc

then change the method it used to check the keys, with the code underneath that.
part of it taken for example

Code:

_9A4:		

key1:		

;
	clr		r17
;
	ldi		r19, $10
	ldi		XH, high( MP )
	ldi		XL,  low( MP )
	lds		r18, (MP + 10)		
	subi	r18, 0x7D			
	add		XL, r18			; Y+=r17:r18	
	adc		XH, r17			; /

then amend that so it works along the lines of the keyroll 8 method.
example

Code:

LDI    YH, high(MP)   	 
LDI     YL, low( MP)         
LDS R16, (MP+ 0x19)		
SUBI R16,0x7d			
ADD R28,R16			
LD R17,Y

madbrumie · 23rd November 2009, 18:54

Quote:

Originally Posted by cg010169

thanks for that info, still reading up with the keyroll side, it's very interesting and slowly going in i hope lol

From what i see, so please tell me if im wrong.

I have to change this and the block codes below it, so that it can carry on with the keyroll.

Code:

LDS     R16,0x0180
LDI     R17,0x3F
CPSE    R16,R17
RJMP    EndEMM

so thats it#s 0x180 and so on etc

then change the method it used to check the keys, with the code underneath that.
part of it taken for example

Code:

_9A4:		

key1:		

;
	clr		r17
;
	ldi		r19, $10
	ldi		XH, high( MP )
	ldi		XL,  low( MP )
	lds		r18, (MP + 10)		
	subi	r18, 0x7D			
	add		XL, r18			; Y+=r17:r18	
	adc		XH, r17			; /

then amend that so it works along the lines of the keyroll 8 method.
example

Code:

LDI    YH, high(MP)   	 
LDI     YL, low( MP)         
LDS R16, (MP+ 0x19)		
SUBI R16,0x7d			
ADD R28,R16			
LD R17,Y

Yep... to help you off here is the keymask, and the way you make it is by using a logged emm as in my other post then finding out what is varible and what is not. you keep the varibles and skip over the bytes that can change for now. so you would need to make yourself a mask of an emm then know what changes and what dont. in the prune.asm it has 16 bytes of keymask but this is a full 1 that i made.. . As you are working on a AU keyroll now do you think it might be better to start a new thread? and let the members who are working on the fun/atemga card continue in here? just a thought?

Code:

LDS     R16,0x0180
        LDI     R17,0x3F
        CPSE    R16,R17
        RJMP    EndEMM
 
        ;(81)

        LDS     R16,0x0182
        LDI     R17,0x01
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0183
        LDI     R17,0xFA
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0184
        LDI     R17,0x5F
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0185
        LDI     R17,0xA6
        CPSE    R16,R17
        RJMP    EndEMM
 
        ;(86)

        LDS     R16,0x0187
        LDI     R17,0xB7
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0188
        LDI     R17,0x41
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0189
        LDI     R17,0xA6
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x018A
        LDI     R17,0x02
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x018B
        LDI     R17,0x2D
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x018C
        LDI     R17,0x07
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x018D
        LDI     R17,0x9B
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x018E
        LDI     R17,0xCD
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x018F
        LDI     R17,0x20
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0190
        LDI     R17,0x20
        CPSE    R16,R17
        RJMP    EndEMM
                
        LDS     R16,0x0191
        LDI     R17,0x9A
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0192
        LDI     R17,0x20
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0193
        LDI     R17,0x03
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0194
        LDI     R17,0xCD
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0195
        LDI     R17,0x20
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0196
        LDI     R17,0x20
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0197
        LDI     R17,0x9F
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x0198
        LDI     R17,0xB8
        CPSE    R16,R17
        RJMP    EndEMM

        ;(99)

        LDS     R16,0x019A
        LDI     R17,0xB7
        CPSE    R16,R17
        RJMP    EndEMM
 
        ;(9B)
                
        LDS     R16,0x019C
        LDI     R17,0x9F
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x019D
        LDI     R17,0xB8
        CPSE    R16,R17
        RJMP    EndEMM
 
        ;(9E)

        LDS     R16,0x019F
        LDI     R17,0xB7
        CPSE    R16,R17
        RJMP    EndEMM
 
        ;(0x01A0)

        LDS     R16,0x01A1
        LDI     R17,0xA6
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x01A2
        LDI     R17,0x26
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x01A3
        LDI     R17,0xCC
        CPSE    R16,R17
        RJMP    EndEMM
 
        LDS     R16,0x01A4
        LDI     R17,0x6B
        CPSE    R16,R17
        RJMP    EndEMM

        LDS     R16,0x01A5
        LDI     R17,0x01
        CPSE    R16,R17
        RJMP    EndEMM

        ;( A6,A7,A8)
  
        LDS     R16,0x01A9
        LDI     R17,0x83
        CPSE    R16,R17
        RJMP    EndEMM
 
        ;(0x01AA)
 
        LDS     R16,0x01AB
        LDI     R17,0x01
        CPSE    R16,R17
        RJMP    EndEMM
 
        LDS     R16,0x01AC
        LDI     R17,0x42
        CPSE    R16,R17
        RJMP    EndEMM
 
        LDS     R16,0x01AD
        LDI     R17,0x05
        CPSE    R16,R17
        RJMP    EndEMM
 
        ;( AE,AF,B0,B1,B2,B3,B4,B5)
 
        LDS     R16,0x01B6
        LDI     R17,0x42
        CPSE    R16,R17
        RJMP    EndEMM
 
        LDS     R16,0x01B7
        LDI     R17,0x85
        CPSE    R16,R17
        RJMP    EndEMM

        ;(B8,B9,BA,BB,BC,BD,BE,BF)

might get slagged for this, hope not??

MB

TBC · 23rd November 2009, 19:15

tbh it is not very likely that anything other than a KR is gonna make a map call to 2020, personally i would be checking for the map call and only a few other items. seems like a lot of messing about with such a long keymask to me. That'll teach em to pull sneeky ones with map calls in KR's lol, you could probs test your progress by leaving the kr mask invalid inserting correct keys and seeing if the card actually runs (i will assume you already did this

)

20th November 2009, 15:22	#81 (permalink)
sammymk2 Member ++ Join Date: Feb 2006 Posts: 84 Downloads: 0 Uploads: 0 Thanks: 1 Thanked 1 Time in 1 Post Feedback Score: 0 reviews	Re: Want to learn to make fun flash! Hi Guys, Please forgive me and feel free to shout at me if I am being thick and mentioning anything that has already been said. I have read this thread and it has confused the hell out of me but I am willing to give it a try anyhow. I saw on another forum that there is a non au fix using RST, could and of the files in this fix be studied to work out the timing issues with 3.7. Sammy
	Quote Post

20th November 2009, 17:55	#84 (permalink)
rutters DW Top Poster ++ Join Date: Jul 2001 Location: boro Posts: 756 Downloads: 0 Uploads: 0 Thanks: 0 Thanked 0 Times in 0 Posts Feedback Score: 0 reviews	Re: Want to learn to make fun flash! Worked great..thanks __________________ Before you criticise someone, you should walk a mile in their shoes. That way, when you criticise them, you're a mile away and you have their shoes.
	Quote Post

22nd November 2009, 19:25	#86 (permalink)
cg010169 DW Guru Join Date: Jul 2005 Location: Deathstar Posts: 2,326 Downloads: 1 Uploads: 0 Thanks: 2 Thanked 55 Times in 42 Posts Feedback Score: 0 reviews	Re: Want to learn to make fun flash! think i might of sorted the flash out, just movin onto the keyroll side to it now, otherwise its just the same as the RST verison which will go down every roll. plus it seems alot have given up and went for the easy option of the RST method in my view, anyway I just wondering what source code is best to amend to use, if it's the Redneck or grape one. Im currently working with the Prune file, and 99% think i've got the timing sorted out. would it be a case of just making sure the right emm bytes are being checked. Then just Amend it into the Prune file (which im pretty sure it is), or does it have to be it's own asm file. don't know much about the keyroll side, so any info would be good thanks __________________ [SIGPIC][/SIGPIC] I live to GiveI LIVE TO GIVE DIE HARD SHEFF WED FAN & ARCADE KING!!! PS3 ID name Keyser__Soze
	Quote Post

23rd November 2009, 11:55	#88 (permalink)
cg010169 DW Guru Join Date: Jul 2005 Location: Deathstar Posts: 2,326 Downloads: 1 Uploads: 0 Thanks: 2 Thanked 55 Times in 42 Posts Feedback Score: 0 reviews	Re: Want to learn to make fun flash! thanks for that info, still reading up with the keyroll side, it's very interesting and slowly going in i hope lol From what i see, so please tell me if im wrong. I have to change this and the block codes below it, so that it can carry on with the keyroll. Code: LDS R16,0x0180 LDI R17,0x3F CPSE R16,R17 RJMP EndEMM so thats it#s 0x180 and so on etc then change the method it used to check the keys, with the code underneath that. part of it taken for example Code: _9A4: key1: ; clr r17 ; ldi r19, $10 ldi XH, high( MP ) ldi XL, low( MP ) lds r18, (MP + 10) subi r18, 0x7D add XL, r18 ; Y+=r17:r18 adc XH, r17 ; / then amend that so it works along the lines of the keyroll 8 method. example Code: LDI YH, high(MP) LDI YL, low( MP) LDS R16, (MP+ 0x19) SUBI R16,0x7d ADD R28,R16 LD R17,Y __________________ [SIGPIC][/SIGPIC] I live to GiveI LIVE TO GIVE DIE HARD SHEFF WED FAN & ARCADE KING!!! PS3 ID name Keyser__Soze
	Quote Post

23rd November 2009, 19:15	#90 (permalink)
TBC Moderator + Join Date: May 2005 Posts: 4,016 Downloads: 0 Uploads: 0 Thanks: 0 Thanked 3 Times in 3 Posts Feedback Score: 0 reviews	Re: Want to learn to make fun flash! tbh it is not very likely that anything other than a KR is gonna make a map call to 2020, personally i would be checking for the map call and only a few other items. seems like a lot of messing about with such a long keymask to me. That'll teach em to pull sneeky ones with map calls in KR's lol, you could probs test your progress by leaving the kr mask invalid inserting correct keys and seeing if the card actually runs (i will assume you already did this )
	Quote Post

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode