seaboard18
08-05-2007, 08:51 AM
--- !!! FREEWARE !!! ---
Use the new CEMU at the end this GIVE YOU FALSE KEYS that will fix it
Cemu 10b_v1.3.10 Autoroll Cygwin/Linux/DJGPP/Mingw (Eternally Beta)
See the cemu.ini for parameters
Now with Autoroll
For use with Rom102to10 bin
--- !!! FREEWARE !!! ---
Here is the new version of Cemu 10b_v1.3.10 Autoroll - designed especially for Pure DOS - RamDrive and Windows DOS. This version uses a cemu.ini file. Just change it as needed for your system.
If you are currently using Cemu 10b_v1.3.9 Autoroll and do not want to change over to this version, you can just change the morph2.cc file and the cmd07.c file then re-compile. This will get your AR back and should help freezing issues. However, the new Cemu 10b_v1.3.10 Autoroll is far superior and has many new fixes.
Tested using DJGGP ONLY... It should compile in other compilers.
Please use the following patch to your dish.bin:
; ROM 102 EMULATOR with 07 DECRYPTION
; Bin patch to enable longer CMD07 decryption
; Adds additional blackout string tier at $D691 for CMD220104
; Fixes length of blackout string at $D2A1 for CMD220184 and CMD2201C4
$C920=9DAE4FD6030CE7805A2AF8A6D8B7CAA6
$C930=89B7CBA682B7CFCD9012C6030BA480BA
$CA7F124
$CAA0=C05A2AF9CCCC9000000000000000009D
$CC90=AE07D60354E7F05A2AF8AE07D6034CE7
$CCA0=E85A2AF8CDCE6BCDCA60AE07E6F0E7C8
$CCB045A2AF981
$D2A021056
$D680=0000000000000000000000000000076E
$D690=1041FF8000000100001A602020000000
$D6A08033638A8BEB40120
; blackout
$D6A8=7F7F7F7F7F7F7F7F7F7F7F7F000000C9
$D6B980000000000000000
$D6C0=00000000000000000A18005555555FFF
$D6D0=FFFFFF00000000000000000000000000
Please use this cemu.ini file- EDIT AS NEEDED:
#
# For comments any option use the symbol #
#
# ---- PORT Settings ---
# Linux/Cygwin : /dev/ttyS0 for COM1, /dev/ttyS1 for COM2 .....
# Dos/Windows/DJGPP : COM1 or 1 for Com1, COM2 or 2 for Com2....
# Linux USB->Serial Adapter : /dev/ttyUSB0
# Stream file input : stream
port COM1
#port stream
baud 115200
# If your com port dosn't use the sandard IRQ and Base Address, Change Them Here
# Standard IRQ and BASE Address:
# Port Base Address IRQ
# COM1 0x3f8 4
# COM2 0x2f8 3
# COM3 0x3e8 4
# COM4 0x2e8 3
#
#COM IRQ
#irq 5
#
#COM I/O Base Address
#address 3e8
#AVR or mofified serial port
#protocol modserial
protocol avr
sendatrstart 0 #(for modded serial)
sendatrreset 0 #(for modded serial)
#atrbaud 4800 #(for modded serial)
# Choose a good Time Zone work with Zip Code and DayLight - Works with Rom10to102
tz eastern
# Zip code decimal - Works with Rom10to102 (Need for a good TimeZone)
zip 00000
#
# The name of your ROM file
rombin rom10.bin
# The name of your EEPROM file (File to upgrade with your information)
dishbin dish.bin
# Write to bin = NoSave 0, Dont Write to bin = NoSave 1
nosave 1
# Use this option to display different output information
# CMD IRD command, and other cmds logged
# CMD07 debug CMD07s
# CAM not used yet
# SAVE not used yet
# 6805 debug the 6805 emulator commands. This is very intensive
# MAP debug the map functions from libgmp
# ROM3 debug bytes placed in ROM
# NYI not Yet Implemented feature debug
# INPUT debug incoming byte strings
# OUTPUT debug outgoing byte strings
# COMM debug low level communication
# RUN output various info taken from a running bin (keys, etc)
# KEY output just key info
# EMM debug EMM's that have been decoded
# B1 debug B1 morph
# EMU debug B1 processing emulator, verbose output
# EMU_0x80 debug B1 processing emulator, limits output to 0x80 - 0xC0, must used with EMU
# NAGRA debug ROM102 MAPROM/MAPMEM
# DEBUG turn on debug debug processing :)
# BIG_INT debug big_int
# NONE turn ALL debugging off
# ALL turn on ALL debugging from above
#debug RUN KEY NYI EMM INPUT OUTPUT MAP 6805
#debug RUN KEY NYI EMM INPUT OUTPUT ROM3
#debug RUN KEY NYI EMM ROM3
#debug B1 EMM KEY EMU EMU_0x80
#debug INPUT OUTPUT CAM
debug B1 KEY
#debugging on = 1, debugging off = 0 to debug cemu. Usage: b/d/e/g/s/q/r/w
debugging 0
#Needed for key recognition
cmdforkeys B1
offsetkey86 14
offsetkey96 14
stringtofind86 42001006080010
stringtofind96 42001046080010
#altcmds not needed at present
#altcmdforkeys b1
#altoffsetkey86 14
#altoffsetkey96 14
#altstringtofind86 42201006080010
#altstringtofind96 42201046080010
#
#EMMLOG 1 to save EMM decrypt data, including keys. EMMLOG 0 to turn off.
EMMLOG 0
sessionkey 1
nbprecomp 5
# autodate - Advance tier/cam dates 6 months ahead automatically
# 1 - Turn it on
# 0 - Turn it off
autodate 1
# Output debug to a text file
# streamlog streamlog.txt
Get It Here...
http://bellexpress.vu/forum/local_links.php?catid=64
Use the new CEMU at the end this GIVE YOU FALSE KEYS that will fix it
Cemu 10b_v1.3.10 Autoroll Cygwin/Linux/DJGPP/Mingw (Eternally Beta)
See the cemu.ini for parameters
Now with Autoroll
For use with Rom102to10 bin
--- !!! FREEWARE !!! ---
Here is the new version of Cemu 10b_v1.3.10 Autoroll - designed especially for Pure DOS - RamDrive and Windows DOS. This version uses a cemu.ini file. Just change it as needed for your system.
If you are currently using Cemu 10b_v1.3.9 Autoroll and do not want to change over to this version, you can just change the morph2.cc file and the cmd07.c file then re-compile. This will get your AR back and should help freezing issues. However, the new Cemu 10b_v1.3.10 Autoroll is far superior and has many new fixes.
Tested using DJGGP ONLY... It should compile in other compilers.
Please use the following patch to your dish.bin:
; ROM 102 EMULATOR with 07 DECRYPTION
; Bin patch to enable longer CMD07 decryption
; Adds additional blackout string tier at $D691 for CMD220104
; Fixes length of blackout string at $D2A1 for CMD220184 and CMD2201C4
$C920=9DAE4FD6030CE7805A2AF8A6D8B7CAA6
$C930=89B7CBA682B7CFCD9012C6030BA480BA
$CA7F124
$CAA0=C05A2AF9CCCC9000000000000000009D
$CC90=AE07D60354E7F05A2AF8AE07D6034CE7
$CCA0=E85A2AF8CDCE6BCDCA60AE07E6F0E7C8
$CCB045A2AF981
$D2A021056
$D680=0000000000000000000000000000076E
$D690=1041FF8000000100001A602020000000
$D6A08033638A8BEB40120
; blackout
$D6A8=7F7F7F7F7F7F7F7F7F7F7F7F000000C9
$D6B980000000000000000
$D6C0=00000000000000000A18005555555FFF
$D6D0=FFFFFF00000000000000000000000000
Please use this cemu.ini file- EDIT AS NEEDED:
#
# For comments any option use the symbol #
#
# ---- PORT Settings ---
# Linux/Cygwin : /dev/ttyS0 for COM1, /dev/ttyS1 for COM2 .....
# Dos/Windows/DJGPP : COM1 or 1 for Com1, COM2 or 2 for Com2....
# Linux USB->Serial Adapter : /dev/ttyUSB0
# Stream file input : stream
port COM1
#port stream
baud 115200
# If your com port dosn't use the sandard IRQ and Base Address, Change Them Here
# Standard IRQ and BASE Address:
# Port Base Address IRQ
# COM1 0x3f8 4
# COM2 0x2f8 3
# COM3 0x3e8 4
# COM4 0x2e8 3
#
#COM IRQ
#irq 5
#
#COM I/O Base Address
#address 3e8
#AVR or mofified serial port
#protocol modserial
protocol avr
sendatrstart 0 #(for modded serial)
sendatrreset 0 #(for modded serial)
#atrbaud 4800 #(for modded serial)
# Choose a good Time Zone work with Zip Code and DayLight - Works with Rom10to102
tz eastern
# Zip code decimal - Works with Rom10to102 (Need for a good TimeZone)
zip 00000
#
# The name of your ROM file
rombin rom10.bin
# The name of your EEPROM file (File to upgrade with your information)
dishbin dish.bin
# Write to bin = NoSave 0, Dont Write to bin = NoSave 1
nosave 1
# Use this option to display different output information
# CMD IRD command, and other cmds logged
# CMD07 debug CMD07s
# CAM not used yet
# SAVE not used yet
# 6805 debug the 6805 emulator commands. This is very intensive
# MAP debug the map functions from libgmp
# ROM3 debug bytes placed in ROM
# NYI not Yet Implemented feature debug
# INPUT debug incoming byte strings
# OUTPUT debug outgoing byte strings
# COMM debug low level communication
# RUN output various info taken from a running bin (keys, etc)
# KEY output just key info
# EMM debug EMM's that have been decoded
# B1 debug B1 morph
# EMU debug B1 processing emulator, verbose output
# EMU_0x80 debug B1 processing emulator, limits output to 0x80 - 0xC0, must used with EMU
# NAGRA debug ROM102 MAPROM/MAPMEM
# DEBUG turn on debug debug processing :)
# BIG_INT debug big_int
# NONE turn ALL debugging off
# ALL turn on ALL debugging from above
#debug RUN KEY NYI EMM INPUT OUTPUT MAP 6805
#debug RUN KEY NYI EMM INPUT OUTPUT ROM3
#debug RUN KEY NYI EMM ROM3
#debug B1 EMM KEY EMU EMU_0x80
#debug INPUT OUTPUT CAM
debug B1 KEY
#debugging on = 1, debugging off = 0 to debug cemu. Usage: b/d/e/g/s/q/r/w
debugging 0
#Needed for key recognition
cmdforkeys B1
offsetkey86 14
offsetkey96 14
stringtofind86 42001006080010
stringtofind96 42001046080010
#altcmds not needed at present
#altcmdforkeys b1
#altoffsetkey86 14
#altoffsetkey96 14
#altstringtofind86 42201006080010
#altstringtofind96 42201046080010
#
#EMMLOG 1 to save EMM decrypt data, including keys. EMMLOG 0 to turn off.
EMMLOG 0
sessionkey 1
nbprecomp 5
# autodate - Advance tier/cam dates 6 months ahead automatically
# 1 - Turn it on
# 0 - Turn it off
autodate 1
# Output debug to a text file
# streamlog streamlog.txt
Get It Here...
http://bellexpress.vu/forum/local_links.php?catid=64