ATTENTION You should always unplug power before you do anything inside your Box.  We cannot give any warranty if the info shown here - is correct! Anyone does this all on his own risk!

Mediamaster®
is registered trademark of Nokia
d-box
®  is registered trademark of betaresearch
Build a BDM

Since the programme DBOXHACK has been published by the Chaos Computer Club, everyone is able to exchange the software of his Mediamaster. Unfortunately, the construction plan was published only in CCC's own magazine.
It's possible, certainly, to find out the specifics of plugs and connection diagram from the documentation of the Debugger, Assembler and Motorola info, but this is quite laborious. A couple of months ago, I've built an interface for the Box and I'd like to offer this possibility here. The basis is a BD32 Interface of the Freeware Debugger BD32.
It's irritating how some firms/people offer expensive new software for the Box. I think it's not justifiable - just profit-thinking. Therefore I quickly put together this "All in One" package (dboxbdm.zip) for everyone. As I had to hurry, the wiring diagram is only sketched and scanned in. There is still no plate diagram and I wired everything on a small plate myself. But certainly others will make further diagrams which will replace this start package, especially if CCC gives more publicity to it's information.

But first of all something very important:

YOU LOOSE THE ONE-YEAR-GUARANTEE AS SOON AS YOU MANIPULATE IN THE BOX.
Everyone must decide this on his own risk. The risk is high and Box repairs expensive!
The Debug connection goes undamped to the processor, and connecting poles can have fatal consequences!

Therefore, check everything carefully after having assembled the circuit. Especially, verify several times the wires leading to the Box connection. For this connection you can use a main board COM connection cable, but check carefully if there are really contacts for pin 10 inside of the plug. The are often missing. In that case you can use the plug the other way round - 10, then 1, and 1 is not used. But note that in this case the colour of pin 1 is not correct. Danger of confusion!

The wiring according to the wiring diagram should be no problem for experienced hobbyist. All the details are indicated.

About the Mediamaster:

Unscrewing of the box cover is possible with a Torx-Screwdriver or small Screwdriver.
The Debug connection is under the modem. This is to be dismounted (2 screws and twice bending of the sheet-metal) Jumper for the description of the boot area (according to dboxhack.exe) is once on the left of the sheet-metal (box with 2 x 4 M bit flash) or on the right of the sheet-metal (box with 1 x 8 M bit flash), (also on the right of the Multichoice Mediamaster - 1 x 8 M bit + 1 x 4 M bit flash).

Having assembled the circuit, make a first test whether the box shows a reaction to the reset (press R at dboxhack), if it works it's a good sign. After that you can start choosing the different ranges.

There's no or too little description of the software dboxhack in the short CCC documentation attached as a html file. Here some more details:

Memorising the different ranges, you must indicate a name. Contrary to the documentation it's to indicate for a first time ...
Reading and writing take much more time than indicated (factor x 2) (maybe CCC uses another Interface?)
The 1,5 MB-flash-box (Multichoice) indicate (besides a 8 M bit) two 4 M bit-flash types (at info) - but as it is only one, also only one third-area is to be read out.
If you only want to transmit the set-up/channel-programming to another box, you must always read the whole flash out. Only the wished sequence will be written really (menu point W).

Partially it's an English keyboard (y and z are interchanged for interrogations).

Everything else is to find in the CCC short doc (dboxhack.htm)

The software:
Copying of other peoples' software into your own machine is illegal and against the copyright laws! The many firms in Germany which offer this publicly are more than courageous ....

As to myself:
I'm not the programmer of DBOXHACK.

The programme is from TRON (CCC)

For all questions concerning the software please ask CCC/Hamburg. Documentation on the interface and the actually "appropriate programme for the hardware", the Freeware-Debugger BD32 are here enclosed.

For detailed information on the processor 68340 see Motorola: http://www.motorola.com