ucas emulator hoe krijg ik deze????

[-= [ Appien ] =-]

Hey you, before you use this, please mind this image is

meant for educational purposes only!

Don't use this image without a subscription or I might

have to shoot you <img src="/ubbthreads/images/graemlins/wink.gif" alt="" />

 

The keys in this version are not up to date. You might have

to edit them al little!

They are located in /var/keys/SoftCam.Key

 

How did I go about doing this?

------------------------------

 

In the older beta images there is no blocking function for

the descrambler so I used beta5 instead and tried to enable

the descrambler. You won't believe it! It works!!!

 

So I applied the same hack to the beta6 image but I can't

get it to work. I dont $#@$^%#@ know why <img src="/ubbthreads/images/graemlins/frown.gif" alt="" />

 

I need some help on this!

 

 

disasm from dream.o

 

<pre><font class="small">code:</font><hr>

.text:00011CF4 38 60 00 01 li r3, 1

.text:00011CF8 38 80 00 06 li r4, 6

.text:00011CFC 38 A0 00 00 li r5, 0

.text:00011D00 4B FF 0A D5 bl xp_ww

.text:00011D04 38 60 00 01 li r3, 1

.text:00011D08 38 80 00 01 li r4, 1

.text:00011D0C 38 A0 00 08 li r5, 8

.text:00011D10 4B FF 0A C5 bl xp_ww

</pre><hr>

 

I think this is a good place to enable the descrambler block

<pre><font class="small">code:</font><hr>

.text:00011D14 38 60 00 00 li r3, 0

.text:00011D18 38 80 10 04 li r4, 0x1004

.text:00011D1C 3C A0 00 03 lis r5, ((ucode+0x1B50) >> 16)

.text:00011D20 60 A5 00 10 ori r5, r5, ((ucode+0x1B50) & 0xFFFF)

.text:00011D24 4B FF 0A B1 bl xp_ww

 

</pre><hr>

 

-> patch !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

<pre><font class="small">code:</font><hr>

.text:00011D14 38 60 00 00 li r3, 0

.text:00011D18 38 80 00 00 li r4, 0x0

.text:00011D1C 3C A0 00 80 lis r5, 0x80

.text:00011D20 60 A5 00 11 ori r5, r5, 0x11 //write the same value as in core_init

.text:00011D24 4B FF 0A B1 bl xp_ww

 

 

on file-offset 0x11d4c you find:

 

38 80 10 04

3C A0 00 03

60 A5 00 10

 

patch this to:

 

38 80 00 00

3C A0 00 80

60 A5 00 11

</pre><hr>

 

Now the descrambler works <img src="/ubbthreads/images/graemlins/wink.gif" alt="" />

 

 

<pre><font class="small">code:</font><hr>

 

.text:00011D28 38 60 00 01 li r3, 1

.text:00011D2C 38 80 10 04 li r4, 0x1004

.text:00011D30 3C A0 00 02 lis r5, ((ucode_dat+0x481B) >> 16)

.text:00011D34 60 A5 00 FF ori r5, r5, ((ucode_dat+0x481B) & 0xFFFF)

.text:00011D38 4B FF 0A 9D bl xp_ww

 

</pre><hr>

 

Now we need a module to access the control-word storage. I did some testing on accessing

the right registers directly.

A sample for my first test is the sdev module. This should work with the actual kernel from

the beta05 image.

 

I copied all the files to the appropriate directories and loaded the module with "insmod sdev.o".

I included this in /etc/init.d/rcS so it will start up automatically. Enigma contains a call for a

program called "camd" on scrambled services (this is dbox2 compatible) so we can use a dbox2-emulator

like mgcam. The sdev module accepts the control-word the same way the dbox2 accepts it.

 

I found this mgcam I get on the German streamboard, a hacker site for the dbox2 and I left it in the

original state.

 

Enigma doesn't support all the new emulators like gbox and so on. for this some hacking in enigma

would be needed. Zapit (the neutrino zap-client) makes a call to a unix socket. This is not supported

in enigma without a hack.

 

I think we should port neutrino because there is a much better handling for a lot of emulators

and the complete handling of neutrino is much better than enigma in my opinion.

 

Many thx to the programmers of the Dreambox they released the linux-modules unstripped.

That makes understanding this stuff a lot easier;)

 

Dr. Matrix

</pre><hr>

[axn]

Nou, voor dat de DB nog maar zo kort op de markt is, denk ik dat het goed werk van meneer Matrix is!

 

Ik begrijp dus dat de kernel (module) gepatched moet worden, jammer, maar goed, als dat de manier is om het werkend te krijgen, dan klaag ik niet.