saludos compañero aqui te paso una distribucion del fichero de hiremco x1 con cpu ali chips 3329E1 aunque parece que tiene algun error facilmente corregible pero te da una idea salud

[QUOTE]
I am really surprised about your post. How do you think that your receiver is X1/2 clone?

Our all mainboard has a special MCU for protection. Even if you modify the binary code via IDA, how do you plan to overcome security ???

The basic thing that you may need to understand is, MEMORY ALLOCATION.

Below is the memory allocation of our STB ( X series).

[File]
id=0
offset=0x10000
file=bloader3_29e.abs
name="S17" <--- our Bootloader fine we use our
ver="34001-01034"

[File]
id=0x01FE0101
offset=0x190000
file=app_glass_merih29e_sdk.bin
name="maincode" <--- OK must have :smiles10: <--- they is to Big
ver="V1.10B1"

[File]
id=0x02FD0100
offset=0x8000
file=../../../info/logo_glass_merihvideo.m2v
name="RadioBack" <--- Background Picture
ver="1.0.0"

[File]
id=0x02FD0200
offset=0x7f80
file=../../../info/logo_boot_merihvideo.m2v
name="HIREMCO-X1" <--- Boot Picture
ver="1.0.0"

[File]
id=0x08F70100
offset=0x10080
file=../../../info/NullData_Fill.bin
name="seeback" <--- not need
ver="1.0.0"

[File]
id=0x03FC0100
offset=0x3ff80
file=../../../info/factory_data_Merih.bin
name="defaultdb" <--- Sat Settings
ver="1.0.0"

[File]
id=0x08F70101
offset=0x50000
file=../../../info/data1.bin
name="data1" <--- not need
ver="1.0.0"

[File]
id=0x08F70102
offset=0xb0000
file=../../../info/data2.bin
name="data2" <--- not need
ver="1.0.0"

[File]
id=0x04FB0100
len=0x100070
name="userdb" <--- Sat Settings
ver="1.0.0"

[OutFile]
out=product_glass_merih29e_sdk.abs <--- We need :smiles10:


Ok, now go to our web site, and download our ABS files. How do you plan to modify it?

I think, it is almost impossible.

But I am ready to help in all aspects. But please don't ask to me to compile a software for your "X clone" receivers

Best Regards

This is this was I not need.:smiles10: And this is many. I need this without seeback, Data 1 and Data 2. Many Infos in the Maincode they can be deleted "Smartcard Info" and so on ...
With Security Protect u mean the Popup "Hardware Illegal" show @ ur maincode Offset 0x64xx ---> 0000 0000 BC19 0008 0000 0000 this is ur Protection.[/QUOTE]