Let the box get "connected"

[usbbdm]

This experiment was done on my first testing box.
If you buy a box that is not activated, here is a way I found work to have the box "connected".
The box must be able to flip channel first and you see blank screen. You go to diagnostic screen and select "Current Channel Status" and you should see the "NOT CONNECTED".
Here is an example for firmware "07.85".

This is original code.
0046A2D4 4E56FFF8 LINK A6,#$FFF8
0046A2D8 48E7303C MOVEM.L D2 D3 /A2 A3 A4 A5 ,-(A7)
0046A2DC 45EEFFF8 LEA ($FFF8,A6),A2
0046A2E0 47EEFFFC LEA ($FFFC,A6),A3
0046A2E4 287C0021FFF2 MOVEA.L #$0021FFF2,A4
0046A2EA 2A7C0021DB70 MOVEA.L #$0021DB70,A5 ;MsgAuthAckId
0046A2F0 423900220A94 CLR.B $00220A94.L ;bIsConnectedFlag1
0046A2F6 42390021F74D CLR.B $0021F74D.L ;bIsConnectedFlag
0046A2FC 486EFFFC PEA ($FFFC,A6)

0046A38E 7000 MOVEQ #$00,D0
0046A390 D180 ADDX.L D0,D0
0046A392 13C000220A94 MOVE.B D0,$00220A94.L ;bIsConnectedFlag1
0046A398 13F900220A940021F74D MOVE.B $00220A94.L,$0021F74D.L ;bIsConnectedFlag

Change to this
0046A2D4 4E56FFF8 LINK A6,#$FFF8
0046A2D8 48E7303C MOVEM.L D2 D3 /A2 A3 A4 A5 ,-(A7)
0046A2DC 45EEFFF8 LEA ($FFF8,A6),A2
0046A2E0 47EEFFFC LEA ($FFFC,A6),A3
0046A2E4 287C0021FFF2 MOVEA.L #$0021FFF2,A4
0046A2EA 2A7C0021DB70 MOVEA.L #$0021DB70,A5
0046A2F0 4EB9004A44B0 JSR $004A44B0.L
0046A2F6 4E71 NOP
0046A2F8 4E71 NOP
0046A2FA 4E71 NOP
0046A2FC 486EFFFC PEA ($FFFC,A6)

0046A38E 7001 MOVEQ #$01,D0
0046A390 4E71 NOP
0046A392 13C000220A94 MOVE.B D0,$00220A94.L
0046A398 13F900220A940021F74D MOVE.B $00220A94.L,$0021F74D.L

Add this code to the end of the firmware.
004A44B0 13FC000100220A94 MOVE.B #$01,$00220A94.L
004A44B8 13FC00010021F74D MOVE.B #$01,$0021F74D.L
004A44C0 4E75 RTS ;

If you have PH7/8 board, you could modify the "Check If Firmware is modified". Or you need to put an valid checksum. This wil be seperate topic in the future.

What you will see is.
If you go to diagnostic screen, the channel is "Connected"
You can watch all the analog channel, also free digital channel like "preview"
But if you go to the Application status. The "Disconnect status" is still yes.
But at least your box is working now.

[adrianbv6]

i have a 7.54 but is not connected but Application status on mine saids Enable

[ebox]

finally I catch a break and get some luck. I just bought a 1261 box with MCA: Not connected. I get guide but no picture blank screen like you said.

I'm new to this stuff and coming over from satelite TV testing...anyways everything makes sense except how to compile what you got written up there to the hexidecimal firmware and Nvram I just saved from my box. my firmware is Ver 7.72

any insight as to how to do this would be great. thanks.

[ebox]

Okay now i'm really confused the addresses on the code up there are out of range....the firmware and Nvram that I backed up on my box has last address 001FFFF8 for firmware and 3FFF8 for NVram...

you got 0046A2D4 for your first address:

" This is original code.
0046A2D4 4E56FFF8 LINK A6,#$FFF8 "

firmware backup instructions I have say

getram 400000 200000, so 0046A2D4 is not even read or in range when the firware is backup up...wow..Now i'm really confused..

[usbbdm]

ebox said:

finally I catch a break and get some luck. I just bought a 1261 box with MCA: Not connected. I get guide but no picture blank screen like you said.

I'm new to this stuff and coming over from satelite TV testing...anyways everything makes sense except how to compile what you got written up there to the hexidecimal firmware and Nvram I just saved from my box. my firmware is Ver 7.72

any insight as to how to do this would be great. thanks.

Makeing changes to the firmware to make it "connected" is a little hard. I will soon post use NVRAM to get connected. Stay tunned.

[adrianbv6]

legal nvram can stil get zaped modify firmware is best way to go they zap nvram u can stil watch tv...

nvram to connect i think there is a small code like foot print valid initiate or something i found in many connected nvram but not in a disconected one

[ebox]

Can anyone post a nvram or firmware file of a connected box, preferably a PH6 1261, which I have. So that we can compare it in hexwork shop to a Not connected box.

Otherwise I can post my nvram and firmware and someone with a connected box can compare for us so we can test these boxes.

I really think this is gonna be the new movmement from SAT TV.

[ebox]

Okay I figured out how to enter the opcodes into the appropriate firmware addresses to modify the firmware as listed above... Example:

0046A2D4 4E
0046A2D5 56
0046A2D6 FF
....etc...

But where the heck are these addresses,,,they are out of range on my firmware cablebox...

Also I'm assuming full duplex communication with cablebox to cable company so I'm assuming High pass filter or disconnecting crossover cable to make cablebox half duplex.

I have found no info regarding this on site. Any input on this from experts? I just got started 2 days ago...lol please clue us newbie's in.,

[QuadForce]

I have a ph6 board that is connected legaly... If you want the nvram pm me an email or im name ( i use msn/yahoo/icq/IRC)

[ebox]

You got a PM!

[usbbdm]

For those want the box to get connected, download 0.4 and use that feature.

[adrianbv6]

this new feature works perfect on my non ph that i cant program my own firmware good work

[ebox]

wow..thanks usbbdm!!

Lemme see if I got this right, getram 200000 40000
Hit the " get connected" button

BTW I compared my two nvram's , the 1 after the " get connected" operation and the original in hexworkshop and I see quiet a few code changes...

Then I should load setram 200000 40000

and I should be connected? Thats all there is to it??

[usbbdm]

ebox said:

wow..thanks usbbdm!!

Lemme see if I got this right, getram 200000 40000
Hit the " get connected" button

BTW I compared my two nvram's , the 1 after the " get connected" operation and the original in hexworkshop and I see quiet a few code changes...

Then I should load setram 200000 40000

and I should be connected? Thats all there is to it??

Yes, you should get connected. But do not expect all the premium channels are open. This feature turns your black screen to non-black screen.
The real digital channel authorization is in the XC4200 chip via SPI. Both cloning NVRAM and "connected" method will not give you all the channels you want.
For now, adrianbv6 recommend to buy the RIGHT digital box and cloning the NVRAM.

[adrianbv6]

my box got disconnected again using just the nvram connect for extra safety modify the firmware is the best thing