vs pro and rq-sssp?

[nashnoush]

Is vs pro works on rq-sssp file. I checked the files section and didn't see any files for that receiver.

[yappapi]

the pro is not supported.

[drakul71]

The VS Pro is a superior receiver compared to the 2000 Extreme yet the Extreme gets the support. It would be nice to utilize the Pro's USB and PVR functions :(

[jvvh5897]

The fix was done by hobby coders. Why not take the example of the work done to figure out how to get the pro working? It is a hobby, yes? If you own a box that no longer has support, then it is up to you to figure out how to get it working.

[red box]

some how very interesting, where to start ??

[jvvh5897]

Look at the file with a hexviewer or hexeditor like XVI32 or a cracked copy of Hexworkshop (lots of other editors out there).
Disassemble the code with IDA Pro. It might be that you need to extract compressed code to get the clear code to put into IDA from the box's files, I haven't looked at one yet. The mods to the other viewsat boxes required that the part of the code that deals with the N2 cmd07 packets be isolated and mods made to send the packets (in coolsat4000's protocol which is very simple) out the serial port. There was code in the other vs boxes to have serial remote control of box (you could change channels by sending a command over the rs232 line from a PC--three bytes with the first two being the same code as sent from remote control and the third the same code as a remote would send, but you leave off the remote control's 4th byte (NEC1 format remote BTW))--that serial routine was reworked to allow the channel change code to still work, but also allowed the capture of the returned CWs from PC acting as client or from routine modded to run an rq-sssp client. The captured CWs were then written to processor register to allow decryption of streams using a routine found in the cmd07 routines.

[jvvh5897]

I found a vsPro PVR file from 2009-09-05 and found that the code was st20c2/c4 type--that is the same as used in the older pansat 2500/2700 type of box, so lots of tools for you to use and code to use as examples (if I have the right box's file). Easy to find the N2 cmd07 handling routines, but it would take a little playing to find best place to mod to send out the packets. Found a UART write routine and a read too, would take a little playing to see how it would be best to mod to use those, but it looks like it would be easy to use the write routine to do some thing like a RAM dump to find things like channel info needed for the rq-sssp format. You don't have to use IDA for st20c2/c4 code there is an old Dave2 program to do that and an st20emu program to run through the section table moves to RAM (something that IDA can do in a virtual way).

Here are a few routine addresses:

start of code c0008800
end of code around C021E868

C004940A ; debug message print
C001B199 ; look for correct file extentions (.key .sat)
C001B2C3 ; 2nd look for correct file extentions (.key .sat)
C01D4C2A ; UPLOAD/DOWNLOAD command received
C0048860 ; make up sys info about boot/program addr
C00096F0 ; main init?
C0017CC8 ; setup memory partitions
C004BE2D ; test CRC's?
C00A2D75 ; upgrade via usb?

C004C4DC ; Channel ODS7810 PVR sysinfo?
"ODSUSAKEY0" ODS7810 PVR Channel.OCH

C004C30C ; OPT ALL extentions
C01D28DF ; usb menu options
C016ACDC ; UART_Write
C016A83D ; UART_Read
C0044147 ; rs232 test
C0045C29 ; RS232 test2
C0045698 ; test menu steps
C001764D ; "front_fkey" install
C01C346D ; create_task -- used 59 times
C00175A9 ; mcukey task --uses uart_read
C0017471 ; front_fkey task --front panel buttons
C001740C ; micom_time_process task
C0017C29 ; read PIO port?
C0009A8C ; main
C0017B67 ; set PIO port pin
C0018198 ; STPIO_init
C01F52E3 ; "nagra2 ecm"
C01F5849 ; do "nagra2 ecm"
C01F5718 ; ecm_callback
C01F561C ; install ecm_Q
C01F3EEB ; ROM102 use
C01F4A5B ; ROM110 use
C01F36D4 ; do idea decrypt w "Nagra....S.A."

[jvvh5897]

And you can always just start by looking to see if anything comes out the serial port. Try the cable you use to serial upload a file to box, but listen with something like windows Hyperterm or RealTerm from sourceforge site (free).

If you see stuff coming out serial port you can look to see if you can spot the info in the file, then see if there is a specific routine called to do the serial port write in the download--that can tell you much of what you need to do serial dumps of other stuff like a RAM dump.