Digi TV (1°W) - Strona 2 - sat-turbo forum

aa112 · 03-09-2009, 08:53

DigiTV (1°W) 02.09.2009
ident 2111 [Nagra2]

DigiTV (1°W) Key 00: 86 A1 C8 FF 48 C3 B1 D8 0F A7 C4 99 C1 67 ED 7F

Key 00 in HEX: 86A1C8FF48C3B1D80FA7C499C167ED7F
Key 00 in DEC: 134 161 200 255 072 195 177 216 015 167 196 153 193 103 237 127

For camd3.keys (camd3.keys):
1801:002111:0000000000:00:86A1C8FF48C3B1D80FA7C499 C167ED7F ; IDEA 86

For CCcam/MGcamd/incubusCamd (SoftCam.Key) and EVOcamd (keylist.txt):
N 2111 00 86A1C8FF48C3B1D80FA7C499C167ED7F ; IDEA 86

For Newcamd (keylist):
1801:000000:211100::86 A1 C8 FF 48 C3 B1 D8 0F A7 C4 99 C1 67 ED 7F ; IDEA 86

For GBox (nagra):
I: { 21 11 00 { 86 A1 C8 FF 48 C3 B1 D8 0F A7 C4 99 C1 67 ED 7F }} # IDEA 86

scam (nagra2):
N: { 2111 00000000 06 08 10 { 86A1C8FF48C3B1D80FA7C499C167ED7F }}

For GigaTwinCam (SoftCam.Key)
N 2111 00 86A1C8FF48C3B1D80FA7C499C167ED7F ;DigiTV (1°W)

CAM Module HEX Key
00-0: 86 A1 C8 FF 48 C3 B1 D8
00-1: 0F A7 C4 99 C1 67 ED 7F

CAM Module DEC Key
00-0: 134 161 200 255 072 195 177 216
00-1: 015 167 196 153 193 103 237 127

Humax
00: 86 A1 C8 FF 48 C3 B1 D8 (for Technomate/ClarkTech line 10)
01: 0F A7 C4 99 C1 67 ED 7F (for Technomate/ClarkTech line 11)

Neotion
04: 86 A1 C8 FF 48 C3 B1 D8
05: 0F A7 C4 99 C1 67 ED 7F

gregor1213 · 05-12-2009, 18:55

DigiTV (1°W) Key 01: 21 BB 69 9D 01 E4 91 E8 1F 2A EF E2 86 33 32 41

[/size]
Key 01 in HEX: 21BB699D01E491E81F2AEFE286333241
Key 01 in DEC: 033 187 105 157 001 228 145 232 031 042 239 226 134 051 050 065

For camd3.keys (camd3.keys):
1801:002111:0000000000:01:21BB699D01E491E81F2AEFE2 86333241 ; IDEA 96

For CCcam/MGcamd/incubusCamd (SoftCam.Key) and EVOcamd (keylist.txt):
N 2111 01 21BB699D01E491E81F2AEFE286333241 ; IDEA 96

For Newcamd (keylist):
1801:000000:211101::21 BB 69 9D 01 E4 91 E8 1F 2A EF E2 86 33 32 41 ; IDEA 96

For GBox (nagra):
I: { 21 11 01 { 21 BB 69 9D 01 E4 91 E8 1F 2A EF E2 86 33 32 41 }} # IDEA 96

scam (nagra2):
N: { 2111 00000000 46 08 10 { 21BB699D01E491E81F2AEFE286333241 }}

For GigaTwinCam (SoftCam.Key)
N 2111 01 21BB699D01E491E81F2AEFE286333241 ;DigiTV (1°W)

CAM Module HEX Key
01-0: 21 BB 69 9D 01 E4 91 E8
01-1: 1F 2A EF E2 86 33 32 41

CAM Module DEC Key
01-0: 033 187 105 157 001 228 145 232
01-1: 031 042 239 226 134 051 050 065

Humax
02: 21 BB 69 9D 01 E4 91 E8 (for Technomate/ClarkTech line 20)
03: 1F 2A EF E2 86 33 32 41 (for Technomate/ClarkTech line 21)

Neotion
06: 21 BB 69 9D 01 E4 91 E8
07: 1F 2A EF E2 86 33 32 41

aa112 · 06-12-2009, 22:32

DigiTV (1°W) 2nd Change 05.12.2009

Cytat:

ident 2111 [Nagra2]

Key00: 88 ED 60 27 08 F4 6B B7 80 66 39 6E 78 A9 85 96

HEX: 88ED602708F46BB78066396E78A98596

DEC: 136 237 096 039 008 244 107 183 128 102 057 110 120 169 133 150

aa112 · 07-12-2009, 22:27

ROM110 Fixed AUTO DIGI TV.zip

Kod:

Treść widoczna tylko dla zarejestrowanych użytkowników.

aa112 · 26-12-2009, 18:22

RCS Digi TV (0.8°W) EMM-G Proces AU

KEY IDEA ECM 00:

39 xor 04 = 3D xor E4 = D9 xor 8E = 57 xor E0 = B7

3D = 04 xor 39
D9 = E4 xor 3D
57 = 8E xor D9
B7 = E0 xor 57

82 70 6C 00 00 00 00 00 04 65 20 11 92 00 98 DE 85 5A 47 80 34 8D 4D 70 5F 15 9B 9F 97 80 A9 E4 73 01 3C DA 05 1A 43 18 A3 42 79 72 B3 8A EF A0 E3 70 D1 28 6A 97 50 D7 D0 35 60 0D B6 4F 0C AD 9D 58 16 A6 B2 39 25 2C 83 35 CE 79 25 92 84 F4 61 85 63 E0 FE CB 78 BA 39 9D B9 AE CB 0E DB C1 BA 87 82 0B F8 93 68 0B F5 B8 AD 78 14 D8 03
16 63 85 72 A6 FB 42 19 20 11 13 DB 00 01 1A BD 77 89 BA 8A 9B B6 0D 88 A4 F1 B7 0D 12 0E 13 0E AE 03 E6 D9 B7 0F B6 0F 9D 9D 9D 9D 9D 9D B8 CF B7 CF 5A 2A ED 84 B7 0D 86 A6 2C CC 9B E1 83 21 11 42 01 10 06 08 00 10 88 ED 60 27 08 F4 6B 39 91 D9 21 28 53 FC 90 E7 00 42 79 65 42 79 65 00
cr:-pc- aa xx yy dr -sp- VHINZC -mem@pc- -mem@sp- -cycles-
00:0093 00 00 00 00 0fff V..... 8a9bb60d 00000000 00000000 PUSHC
00:0094 00 00 00 00 0ffe V..... 9bb60d88 e0000000 00000003 SEI
00:0095 00 00 00 00 0ffe V.I... b60d88a4 e0000000 00000005 LDA 0d {00}
00:0097 00 00 00 00 0ffe V.I.Z. 88a4f1b7 e0000000 00000008 PUSHA
00:0098 00 00 00 00 0ffd V.I.Z. a4f1b70d 00e00000 0000000b AND #f1
00:009a 00 00 00 00 0ffd V.I.Z. b70d120e 00e00000 0000000d STA 0d
00:009c 00 00 00 00 0ffd V.I.Z. 120e130e 00e00000 00000011 BSET 0e {82} ,#1
00:009e 00 00 00 00 0ffd V.I.Z. 130eae03 00e00000 00000016 BCLR 0e {82} ,#1
00:00a0 00 00 00 00 0ffd V.I.Z. ae03e6d9 00e00000 0000001b LDX #03
00:00a2 00 03 00 00 0ffd V.I... e6d9b70f 00e00000 0000001d LDA (d9,X) -> 00dc {42}
00:00a4 42 03 00 00 0ffd V.I... b70fb60f 00e00000 00000021 STA 0f
00:00a6 42 03 00 00 0ffd V.I... b60f9d9d 00e00000 00000025 LDA 0f {04}
00:00a8 04 03 00 00 0ffd V.I... 9d9d9d9d 00e00000 00000028 NOP
00:00a9 04 03 00 00 0ffd V.I... 9d9d9d9d 00e00000 0000002a NOP
00:00aa 04 03 00 00 0ffd V.I... 9d9d9d9d 00e00000 0000002c NOP
00:00ab 04 03 00 00 0ffd V.I... 9d9d9db8 00e00000 0000002e NOP
00:00ac 04 03 00 00 0ffd V.I... 9d9db8cf 00e00000 00000030 NOP
00:00ad 04 03 00 00 0ffd V.I... 9db8cfb7 00e00000 00000032 NOP
00:00ae 04 03 00 00 0ffd V.I... b8cfb7cf 00e00000 00000034 EOR cf {39}
00:00b0 3d 03 00 00 0ffd V.I... b7cf5a2a 00e00000 00000037 STA cf
00:00b2 3d 03 00 00 0ffd V.I... 5a2aed84 00e00000 0000003b DEC X
00:00b3 3d 02 00 00 0ffd ..I... 2aed84b7 00e00000 0000003e BPL 00a2 (taken)
00:00a2 3d 02 00 00 0ffd ..I... e6d9b70f 00e00000 00000041 LDA (d9,X) -> 00db {65}
00:00a4 65 02 00 00 0ffd ..I... b70fb60f 00e00000 00000045 STA 0f
00:00a6 65 02 00 00 0ffd ..I... b60f9d9d 00e00000 00000049 LDA 0f {e4}
00:00a8 e4 02 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 0000004c NOP
00:00a9 e4 02 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 0000004e NOP
00:00aa e4 02 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000050 NOP
00:00ab e4 02 00 00 0ffd ..IN.. 9d9d9db8 00e00000 00000052 NOP
00:00ac e4 02 00 00 0ffd ..IN.. 9d9db8cf 00e00000 00000054 NOP
00:00ad e4 02 00 00 0ffd ..IN.. 9db8cfb7 00e00000 00000056 NOP
00:00ae e4 02 00 00 0ffd ..IN.. b8cfb7cf 00e00000 00000058 EOR cf {3d}
00:00b0 d9 02 00 00 0ffd ..IN.. b7cf5a2a 00e00000 0000005b STA cf
00:00b2 d9 02 00 00 0ffd ..IN.. 5a2aed84 00e00000 0000005f DEC X
00:00b3 d9 01 00 00 0ffd ..I... 2aed84b7 00e00000 00000062 BPL 00a2 (taken)
00:00a2 d9 01 00 00 0ffd ..I... e6d9b70f 00e00000 00000065 LDA (d9,X) -> 00da {79}
00:00a4 79 01 00 00 0ffd ..I... b70fb60f 00e00000 00000069 STA 0f
00:00a6 79 01 00 00 0ffd ..I... b60f9d9d 00e00000 0000006d LDA 0f {8e}
00:00a8 8e 01 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000070 NOP
00:00a9 8e 01 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000072 NOP
00:00aa 8e 01 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000074 NOP
00:00ab 8e 01 00 00 0ffd ..IN.. 9d9d9db8 00e00000 00000076 NOP
00:00ac 8e 01 00 00 0ffd ..IN.. 9d9db8cf 00e00000 00000078 NOP
00:00ad 8e 01 00 00 0ffd ..IN.. 9db8cfb7 00e00000 0000007a NOP
00:00ae 8e 01 00 00 0ffd ..IN.. b8cfb7cf 00e00000 0000007c EOR cf {d9}
00:00b0 57 01 00 00 0ffd ..I... b7cf5a2a 00e00000 0000007f STA cf
00:00b2 57 01 00 00 0ffd ..I... 5a2aed84 00e00000 00000083 DEC X
00:00b3 57 00 00 00 0ffd ..I.Z. 2aed84b7 00e00000 00000086 BPL 00a2 (taken)
00:00a2 57 00 00 00 0ffd ..I.Z. e6d9b70f 00e00000 00000089 LDA (d9,X) -> 00d9 {42}
00:00a4 42 00 00 00 0ffd ..I... b70fb60f 00e00000 0000008d STA 0f
00:00a6 42 00 00 00 0ffd ..I... b60f9d9d 00e00000 00000091 LDA 0f {e0}
00:00a8 e0 00 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000094 NOP
00:00a9 e0 00 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000096 NOP
00:00aa e0 00 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000098 NOP
00:00ab e0 00 00 00 0ffd ..IN.. 9d9d9db8 00e00000 0000009a NOP
00:00ac e0 00 00 00 0ffd ..IN.. 9d9db8cf 00e00000 0000009c NOP
00:00ad e0 00 00 00 0ffd ..IN.. 9db8cfb7 00e00000 0000009e NOP
00:00ae e0 00 00 00 0ffd ..IN.. b8cfb7cf 00e00000 000000a0 EOR cf {57}
00:00b0 b7 00 00 00 0ffd ..IN.. b7cf5a2a 00e00000 000000a3 STA cf
00:00b2 b7 00 00 00 0ffd ..IN.. 5a2aed84 00e00000 000000a7 DEC X
00:00b3 b7 ff 00 00 0ffd ..IN.. 2aed84b7 00e00000 000000aa BPL 00a2
00:00b5 b7 ff 00 00 0ffd ..IN.. 84b70d86 00e00000 000000ad POPA
00:00b6 00 ff 00 00 0ffe ..IN.. b70d86a6 e0000000 000000b1 STA 0d
00:00b8 00 ff 00 00 0ffe ..I.Z. 86a62ccc e0000000 000000b5 POPC
00:00b9 00 ff 00 00 0fff V..... a62ccc9b 00000000 000000b9 LDA #2c
00:00bb 2c ff 00 00 0fff V..... cc9be183 00000000 000000bb JMP 9be1
6805: breakpoint at 9be1 (count=66)
88 ED 60 27 08 F4 6B B7 91 D9 21 28 53 FC 90 E7

KEY DES AC6 PROCES POSTAU TYPE12
key same in db
updating key 2111 00 :88 ED 60 27 08 F4 6B B7 80 66 39 6E 78 A9 85 96

DECRYPT INTERNAL SUCCESS : pid 1a1e, table id 80 81 30 47 07 45 21 11 86 00 88 2A 11 92 67 85 05 AB 1E 9D FC 85 84 9E 65 A3 8D 38 C9 F3 05 BB 41 18 4D 7A C2 CF 2F 01 B7 BA 25 F0 DF 1B BD 44 1F CE 49 F9 34 54 85 3B 15 B8 63 3A CE 92 65 C1 53 ED 79 A2 79 E5 B8 F3 06 0F 52
4A B9 7F 84 EF 55 A1 8E 21 11 19 A6 60 82 00 80 19 B0 1C 43 30 0B 01 C9 80 00 FF 00 19 A6 1C 43 1E 10 09 00 6C 3B F2 99 97 8C 4F 72 11 09 00 52 45 8B 22 42 22 33 97 00 B6 C7 C6 AB F3 49 41 D2
DECRYPT SUCCESS 1801 1a1e DCW : 52 45 8B 22 42 22 33 97 6C 3B F2 99 97 8C 4F 72
DECRYPT INTERNAL SUCCESS : pid 1a1e, table id 81 80 30 47 07 45 21 11 86 00 88 3B 7A 13 32 46 0A 70 8B D5 EB D3 B4 A9 03 F7 9E FB 84 55 37 3C F2 4F 65 48 50 99 A3 A6 F0 BD 2E 36 D0 27 B6 10 D7 93 D8 81 1C 7A B1 06 A5 5B 4B 73 B6 9B C7 69 8C A5 D2 16 BE 9F 0B D9 21 EC 93
52 A3 C9 B7 EC 55 BA 08 21 11 19 A6 60 88 00 80 19 B0 1C 43 30 0B 01 C9 80 00 FF 00 19 A6 1C 43 1E 10 09 00 CF EB 19 D3 BC 38 7B 6F 11 09 00 52 45 8B 22 42 22 33 97 00 00 36 FF 3B 56 80 1B D3
DECRYPT SUCCESS 1801 1a1e DCW : 52 45 8B 22 42 22 33 97 CF EB 19 D3 BC 38 7B 6F

KEY IDEA ECM 00:

XY xor 04 = YX xor E4 = JY xor 8E = YJ xor E0 = JZ

YX = 04 xor XY
JY = E4 xor YX
YJ = 8E xor JY
JZ = E0 xor YJ

E0 xor 04 = E4 xor E4 = 00 xor 8E = 8E xor E0 = 6E

E4 = 04 xor E0
00 = E4 xor E4
8E = 8E xor 00
6E = E0 xor 8E

82 70 6C 00 00 00 00 00 04 65 20 11 92 00 98 65 0D F7 FE C7 63 53 F8 58 05 E3 87 42 1F 79 D8 DA 3F FF 5B A1 C0 AE F5 5E 75 9C D6 15 E5 26 A1 83 E1 7F C4 CF F4 ED 83 F0 03 BD C2 C9 FB 53 1F 09 48 52 1B E5 5E 9C 5A 6A C9 59 81 4D 3E FE 8D E6 75 0C FC A8 59 4C 32 2D 5C 04 90 D9 D8 33 8A B9 F3 B1 CF 96 24 B3 48 7B 81 91 50 0B 4E A9 98
5C 18 3E 48 40 9B CF 41 20 11 13 DB 00 01 1A BD 77 89 BA 8A 9B B6 0D 88 A4 F1 B7 0D 12 0E 13 0E AE 03 E6 D9 B7 0F B6 0F 9D 9D 9D 9D 9D 9D B8 D3 B7 D3 5A 2A ED 84 B7 0D 86 A6 2C CC 9B E1 83 21 11 42 01 10 46 08 00 10 21 BB 69 9D 01 E4 91 E8 10 02 AC E0 1E 5B 0F 3D 00 42 79 65 42 79 65 00
cr:-pc- aa xx yy dr -sp- VHINZC -mem@pc- -mem@sp- -cycles-
00:0093 00 00 00 00 0fff V..... 8a9bb60d 00000000 00000000 PUSHC
00:0094 00 00 00 00 0ffe V..... 9bb60d88 e0000000 00000003 SEI
00:0095 00 00 00 00 0ffe V.I... b60d88a4 e0000000 00000005 LDA 0d {00}
00:0097 00 00 00 00 0ffe V.I.Z. 88a4f1b7 e0000000 00000008 PUSHA
00:0098 00 00 00 00 0ffd V.I.Z. a4f1b70d 00e00000 0000000b AND #f1
00:009a 00 00 00 00 0ffd V.I.Z. b70d120e 00e00000 0000000d STA 0d
00:009c 00 00 00 00 0ffd V.I.Z. 120e130e 00e00000 00000011 BSET 0e {82} ,#1
00:009e 00 00 00 00 0ffd V.I.Z. 130eae03 00e00000 00000016 BCLR 0e {82} ,#1
00:00a0 00 00 00 00 0ffd V.I.Z. ae03e6d9 00e00000 0000001b LDX #03
00:00a2 00 03 00 00 0ffd V.I... e6d9b70f 00e00000 0000001d LDA (d9,X) -> 00dc {42}
00:00a4 42 03 00 00 0ffd V.I... b70fb60f 00e00000 00000021 STA 0f
00:00a6 42 03 00 00 0ffd V.I... b60f9d9d 00e00000 00000025 LDA 0f {04}
00:00a8 04 03 00 00 0ffd V.I... 9d9d9d9d 00e00000 00000028 NOP
00:00a9 04 03 00 00 0ffd V.I... 9d9d9d9d 00e00000 0000002a NOP
00:00aa 04 03 00 00 0ffd V.I... 9d9d9d9d 00e00000 0000002c NOP
00:00ab 04 03 00 00 0ffd V.I... 9d9d9db8 00e00000 0000002e NOP
00:00ac 04 03 00 00 0ffd V.I... 9d9db8d3 00e00000 00000030 NOP
00:00ad 04 03 00 00 0ffd V.I... 9db8d3b7 00e00000 00000032 NOP
00:00ae 04 03 00 00 0ffd V.I... b8d3b7d3 00e00000 00000034 EOR d3 {e0}
00:00b0 e4 03 00 00 0ffd V.IN.. b7d35a2a 00e00000 00000037 STA d3
00:00b2 e4 03 00 00 0ffd V.IN.. 5a2aed84 00e00000 0000003b DEC X
00:00b3 e4 02 00 00 0ffd ..I... 2aed84b7 00e00000 0000003e BPL 00a2 (taken)
00:00a2 e4 02 00 00 0ffd ..I... e6d9b70f 00e00000 00000041 LDA (d9,X) -> 00db {65}
00:00a4 65 02 00 00 0ffd ..I... b70fb60f 00e00000 00000045 STA 0f
00:00a6 65 02 00 00 0ffd ..I... b60f9d9d 00e00000 00000049 LDA 0f {e4}
00:00a8 e4 02 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 0000004c NOP
00:00a9 e4 02 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 0000004e NOP
00:00aa e4 02 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000050 NOP
00:00ab e4 02 00 00 0ffd ..IN.. 9d9d9db8 00e00000 00000052 NOP
00:00ac e4 02 00 00 0ffd ..IN.. 9d9db8d3 00e00000 00000054 NOP
00:00ad e4 02 00 00 0ffd ..IN.. 9db8d3b7 00e00000 00000056 NOP
00:00ae e4 02 00 00 0ffd ..IN.. b8d3b7d3 00e00000 00000058 EOR d3 {e4}
00:00b0 00 02 00 00 0ffd ..I.Z. b7d35a2a 00e00000 0000005b STA d3
00:00b2 00 02 00 00 0ffd ..I.Z. 5a2aed84 00e00000 0000005f DEC X
00:00b3 00 01 00 00 0ffd ..I... 2aed84b7 00e00000 00000062 BPL 00a2 (taken)
00:00a2 00 01 00 00 0ffd ..I... e6d9b70f 00e00000 00000065 LDA (d9,X) -> 00da {79}
00:00a4 79 01 00 00 0ffd ..I... b70fb60f 00e00000 00000069 STA 0f
00:00a6 79 01 00 00 0ffd ..I... b60f9d9d 00e00000 0000006d LDA 0f {8e}
00:00a8 8e 01 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000070 NOP
00:00a9 8e 01 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000072 NOP
00:00aa 8e 01 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000074 NOP
00:00ab 8e 01 00 00 0ffd ..IN.. 9d9d9db8 00e00000 00000076 NOP
00:00ac 8e 01 00 00 0ffd ..IN.. 9d9db8d3 00e00000 00000078 NOP
00:00ad 8e 01 00 00 0ffd ..IN.. 9db8d3b7 00e00000 0000007a NOP
00:00ae 8e 01 00 00 0ffd ..IN.. b8d3b7d3 00e00000 0000007c EOR d3 {00}
00:00b0 8e 01 00 00 0ffd ..IN.. b7d35a2a 00e00000 0000007f STA d3
00:00b2 8e 01 00 00 0ffd ..IN.. 5a2aed84 00e00000 00000083 DEC X
00:00b3 8e 00 00 00 0ffd ..I.Z. 2aed84b7 00e00000 00000086 BPL 00a2 (taken)
00:00a2 8e 00 00 00 0ffd ..I.Z. e6d9b70f 00e00000 00000089 LDA (d9,X) -> 00d9 {42}
00:00a4 42 00 00 00 0ffd ..I... b70fb60f 00e00000 0000008d STA 0f
00:00a6 42 00 00 00 0ffd ..I... b60f9d9d 00e00000 00000091 LDA 0f {e0}
00:00a8 e0 00 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000094 NOP
00:00a9 e0 00 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000096 NOP
00:00aa e0 00 00 00 0ffd ..IN.. 9d9d9d9d 00e00000 00000098 NOP
00:00ab e0 00 00 00 0ffd ..IN.. 9d9d9db8 00e00000 0000009a NOP
00:00ac e0 00 00 00 0ffd ..IN.. 9d9db8d3 00e00000 0000009c NOP
00:00ad e0 00 00 00 0ffd ..IN.. 9db8d3b7 00e00000 0000009e NOP
00:00ae e0 00 00 00 0ffd ..IN.. b8d3b7d3 00e00000 000000a0 EOR d3 {8e}
00:00b0 6e 00 00 00 0ffd ..I... b7d35a2a 00e00000 000000a3 STA d3
00:00b2 6e 00 00 00 0ffd ..I... 5a2aed84 00e00000 000000a7 DEC X
00:00b3 6e ff 00 00 0ffd ..IN.. 2aed84b7 00e00000 000000aa BPL 00a2
00:00b5 6e ff 00 00 0ffd ..IN.. 84b70d86 00e00000 000000ad POPA
00:00b6 00 ff 00 00 0ffe ..IN.. b70d86a6 e0000000 000000b1 STA 0d
00:00b8 00 ff 00 00 0ffe ..I.Z. 86a62ccc e0000000 000000b5 POPC
00:00b9 00 ff 00 00 0fff V..... a62ccc9b 00000000 000000b9 LDA #2c
00:00bb 2c ff 00 00 0fff V..... cc9be183 00000000 000000bb JMP 9be1
6805: breakpoint at 9be1 (count=66)
21 BB 69 9D 01 E4 91 E8 10 02 AC 6E 1E 5B 0F 3D

KEY DES AC6 PROCES POSTAU TYPE12
key same in db
updating key 2111 01 :21 BB 69 9D 01 E4 91 E8 1F 2A EF E2 86 33 32 41

gregor1213 · 01-02-2010, 23:29

all keys auto digi tv:

Cytat:

2111 00 (key idea ecm 06) xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2111 01 (key idea ecm 46) xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2111 m1 (rsa16 ecm) 7508665801dc6815f8df965641a8c27cae056ed0249cf60f60 dedd75a3a84d486e85285220f133439f038bfe54975543c8df c4205067985e5cdad7aba4cf48a7 ;
2111 07 (key ecm signa) 7653bbdaa13d97bb32b1b05e42272060
2011 52 (rsa12 emmg) 41c52356c25807052b6c15fbd951e07ced5360c11a792be076 134167af9438410de37e0c8f6e71cf5b7794b14f4642ab692b c3133e450bb6fb58d792898ef6ebce7edf407381ce8c827e65 961132f6047e9a23d0f013e5a3f2e4fe559ae524c6
2011 02 (ram ikey ac6 emmg) e6525030148b33bc1ea499dc979e60da
2011 03 (key emmg signa) d918b9aa5debc0378e9bdf6623e54afb
2011 3d (key des ac6) 81be2d2ca5bc1607 !!!!!!!!!!!!!!!

Emm-g keys digi tv encriptado:
21006da0ca00006704652011920098fb1fdbeee1bb3464ad0b 04d0119a363ba3aac15996bdf8d2f9718ccf16b8ac108c989e ea5fcf9b401cccd18c0ee9b86b20735343f6a859cd3a1bb2f4 c4c0e4f4188ec73b888e5dec9e72022a884b75c8dfe4a2fd04 b63268c9ebae18c000d107027e

analisis:
21006da0ca0000670465: Header
2011 : Proveedor
920098 : Select key: 42 18 52 10 03 18 (emm-g) 2011 (ram ikey ac6)

longitud (len) 96 bytes datos a desncriptar:
Fb1fdbeee1bb3464ad0b04d0119a363ba3aac15996bdf8d2f9 718ccf16b8ac108c989eea5fcf9b401cccd18c0ee9b86b2073 5343f6a859cd3a1bb2f4c4c0e4f4188ec73b888e5dec9e7202 2a884b75c8dfe4a2fd04b63268c9ebae18c000d107
02
7e :crl
_______________________________
_______________________________
1: Rsa 768 bits (m= datos) (n= rsa12) (e= exp)
_______________________________
_______________________________

m = fb1fdbeee1bb3464ad0b04d0119a363ba3aac15996bdf8d2f9 718ccf16b8ac108c989eea5fcf9b401cccd18c0ee9b86b2073 5343f6a859cd3a1bb2f4c4c0e4f4188ec73b888e5dec9e7202 2a884b75c8dfe4a2fd04b63268c9ebae18c000d107

n = 41c52356c25807052b6c15fbd951e07ced5360c11a792be076 134167af9438410de37e0c8f6e71cf5b7794b14f4642ab692b c3133e450bb6fb58d792898ef6ebce7edf407381ce8c827e65 961132f6047e9a23d0f013e5a3f2e4fe559ae524c6

e = 03

m ^ e mod n = cfb99aaeb416b88c868a5987df0c40027eea85b47e7cad316a 4d1a64edfe19adefc508768ccb949626ad7fa34b06a9c978b3 9c69d3a52eae037c3ec1a8d6580036e08ac7d3a64c513ded60 f1e8d1d45e77ca7baadc462cae5f845925bec2711e
_______________________________
_______________________________
2:
______________________________
_______________________________

select key: 98 (10011000 binary)

1e (00011110 binary)

1e or (98 and 80) = 9e

m = cfb99aaeb416b88c868a5987df0c40027eea85b47e7cad316a 4d1a64edfe19adefc508768ccb949626ad7fa34b06a9c978b3 9c69d3a52eae037c3ec1a8d6580036e08ac7d3a64c513ded60 f1e8d1d45e77ca7baadc462cae5f845925bec2719e

============================
3: Idea cbc 12 rounds
============================

ideacbc key: E6525030148b33bc1ea499dc979e60da (ram ikey ac6 emmg)

m (all blocks)=

cfb99aaeb416b88c --> block 01
868a5987df0c4002 --> block 02
7eea85b47e7cad31 --> block 03
6a4d1a64edfe19ad --> block 04
efc508768ccb9496 --> block 05
26ad7fa34b06a9c9 --> block 06
78b39c69d3a52eae --> block 07
037c3ec1a8d65800 --> block 08
36e08ac7d3a64c51 --> block 09
3ded60f1e8d1d45e --> block 10
77ca7baadc462cae --> block 11
5f845925bec2719e --> block 12

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 12 : 5f845925bec2719e

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : 1250f821826b2f82

crypted block xor block 11 = xxxxxxxxxxxxxxxx --> new block 12
1250f821826b2f82 xor 77ca7baadc462cae = 659a838b5e2d032c --> new block 12

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 11 : 77ca7baadc462cae

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : 06be340887c1c676

crypted block xor block 10 = xxxxxxxxxxxxxxxx --> new block 11
06be340887c1c676 xor 3ded60f1e8d1d45e = 3b5354f96f101228 --> new block 11

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 10 : 3ded60f1e8d1d45e

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : 32d0819f4f48d2af

crypted block xor block 9 = xxxxxxxxxxxxxxxx --> new block 10
32d0819f4f48d2af xor 36e08ac7d3a64c51 = 04300b589cee9efe --> new block 10

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 9 : 36e08ac7d3a64c51

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : Edaa63c95208f9e9

crypted block xor block 8 = xxxxxxxxxxxxxxxx --> new block 9
edaa63c95208f9e9 xor 037c3ec1a8d65800 = eed65d08fadea1e9 --> new block 9

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 8 : 037c3ec1a8d65800

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : 3440c658956de103

crypted block xor block 7 = xxxxxxxxxxxxxxxx --> new block 8
3440c658956de103 xor 78b39c69d3a52eae = 4cf35a3146c8cfad --> new block 8

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 7 : 78b39c69d3a52eae

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : B1a416f7e844a6c0

crypted block xor block 6 = xxxxxxxxxxxxxxxx --> new block 7
b1a416f7e844a6c0 xor 26ad7fa34b06a9c9 = 97096954a3420f09 --> new block 7

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 6 : 26ad7fa34b06a9c9

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : B6e9b8218dca6068

crypted block xor block 5 = xxxxxxxxxxxxxxxx --> new block 6
b6e9b8218dca6068 xor efc508768ccb9496 = 592cb0570101f4fe --> new block 6

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 5 : Efc508768ccb9496

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : 31e361b941f7f84f

crypted block xor block 4 = xxxxxxxxxxxxxxxx --> new block 5
31e361b941f7f84f xor 6a4d1a64edfe19ad = 5bae7bddac09e1e2 --> new block 5

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 4 : 6a4d1a64edfe19ad

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : Db72219def5a880c

crypted block xor block 3 = xxxxxxxxxxxxxxxx --> new block 4
db72219def5a880c xor 7eea85b47e7cad31 = a598a4299126253d --> new block 4

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 3 : 7eea85b47e7cad31

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : E5d0723a5cbc27d1

crypted block xor block 2 = xxxxxxxxxxxxxxxx --> new block 3
e5d0723a5cbc27d1 xor 868a5987df0c4002 = 635a2bbd83b067d3 --> new block 3

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 2 : 868a5987df0c4002

crypter ideacbc..: E6525030148b33bc1ea499dc979e60da

crypted block : 1d97a9f0c726485a

crypted block xor block 1 = xxxxxxxxxxxxxxxx --> new block 2
1d97a9f0c726485a xor cfb99aaeb416b88c = d22e335e7330f0d6 --> new block 2

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 1 : Cfb99aaeb416b88c

crypter ideacbc : E6525030148b33bc1ea499dc979e60da

crypted block : 3dc48d64e066b8c3 --> new block 1

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

all blocks = m

3dc48d64e066b8c3 --> new block 01
d22e335e7330f0d6 --> new block 02
635a2bbd83b067d3 --> new block 03
a598a4299126253d --> new block 04
5bae7bddac09e1e2 --> new block 05
592cb0570101f4fe --> new block 06
97096954a3420f09 --> new block 07
4cf35a3146c8cfad --> new block 08
eed65d08fadea1e9 --> new block 09
04300b589cee9efe --> new block 10
3b5354f96f101228 --> new block 11
659a838b5e2d032c --> new block 12

m = 3dc48d64e066b8c3d22e335e7330f0d6635a2bbd83b067d3a5 98a4299126253d5bae7bddac09e1e2592cb0570101f4fe9709 6954a3420f094cf35a3146c8cfadeed65d08fadea1e904300b 589cee9efe3b5354f96f101228659a838b5e2d032c
_______________________________
_______________________________
4: Rsa 768 bits (m= datos) (n= rsa12) (e= exp)
_______________________________
_______________________________

m = 3dc48d64e066b8c3d22e335e7330f0d6635a2bbd83b067d3a5 98a4299126253d5bae7bddac09e1e2592cb0570101f4fe9709 6954a3420f094cf35a3146c8cfadeed65d08fadea1e904300b 589cee9efe3b5354f96f101228659a838b5e2d032c

n = 41c52356c25807052b6c15fbd951e07ced5360c11a792be076 134167af9438410de37e0c8f6e71cf5b7794b14f4642ab692b c3133e450bb6fb58d792898ef6ebce7edf407381ce8c827e65 961132f6047e9a23d0f013e5a3f2e4fe559ae524c6

e = 03

m ^ e mod n = 779cb669af8bc57b201113db00011a337789ba8a9bb60d88a4 f1aa02b70da641b7163f153a151216ae1bcd82209d1316b8dc b7dc9fb814b8d3b7d384b70d86a632cc9bdd83211142011006 0800106f91b55db76f1c38f8d3e2d531002c090000

m = 779cb669af8bc57b 201113db00011a337789ba8a9bb60d88a4f1aa02b70da641b7 163f153a151216ae1bcd82209d1316b8dcb7dc9fb814b8d3b7 d384b70d86a632cc9bdd832111420110060800106f91b55db7 6f1c38f8d3e2d531002c090000

779cb669af8bc57b --> block 01
201113db00011a33 --> block 02
7789ba8a9bb60d88 --> block 03
a4f1aa02b70da641 --> block 04
b7163f153a151216 --> block 05
ae1bcd82209d1316 --> block 06
b8dcb7dc9fb814b8 --> block 07
d3b7d384b70d86a6 --> block 08
32cc9bdd83211142 --> block 09
0110060800106f91 --> block 10
b55db76f1c38f8d3 --> block 11
e2d531002c090000 --> block 12
_______________________________
_______________________________
5:
_______________________________
_______________________________

ideacbc key signature: D918b9aa5debc0378e9bdf6623e54afb (key emmg signa)

datos:

201113db00011a33 --> block 02
7789ba8a9bb60d88 --> block 03
a4f1aa02b70da641 --> block 04
b7163f153a151216 --> block 05
ae1bcd82209d1316 --> block 06
b8dcb7dc9fb814b8 --> block 07
d3b7d384b70d86a6 --> block 08
32cc9bdd83211142 --> block 09
0110060800106f91 --> block 10
b55db76f1c38f8d3 --> block 11
e2d531002c090000 --> block 12

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 2 : 201113db00011a33

crypter ideacbc : D918b9aa5debc0378e9bdf6623e54afb

crypted block : Ad8c458c4872aa6a

block 2 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
201113db00011a33 xor ad8c458c4872aa6a = 8d9d56574873b059 --> second octet new key ideacbc

new key ideacbc : 8e9bdf6623e54afb8d9d56574873b059

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 3 : 7789ba8a9bb60d88

crypter ideacbc : 8e9bdf6623e54afb8d9d56574873b059

crypted block : 6a3785369ffb379f

block 3 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
7789ba8a9bb60d88 xor 6a3785369ffb379f = 1dbe3fbc044d3a17 --> second octet new key ideacbc

new key ideacbc : 8d9d56574873b0591dbe3fbc044d3a17

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 4 : A4f1aa02b70da641

crypter ideacbc : 8d9d56574873b0591dbe3fbc044d3a17

crypted block : 0cad3ea95fc00678

block 4 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
a4f1aa02b70da641 xor 0cad3ea95fc00678 = a85c94abe8cda039 --> second octet new key ideacbc

new key ideacbc: 1dbe3fbc044d3a17a85c94abe8cda039

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 5 : B7163f153a151216

crypter ideacbc : 1dbe3fbc044d3a17a85c94abe8cda039

crypted block : 0caf3890df8fb953

block 5 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
b7163f153a151216 xor 0caf3890df8fb953 = bbb90785e59aab45 --> second octet new key ideacbc

new key ideacbc: A85c94abe8cda039bbb90785e59aab45

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 6 : Ae1bcd82209d1316

crypter ideacbc : A85c94abe8cda039bbb90785e59aab45

crypted block : Eb21a8d6110797ef

block 6 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
ae1bcd82209d1316 xor eb21a8d6110797ef = 453a6554319a84f9 --> second octet new key ideacbc

new key ideacbc: Bbb90785e59aab45453a6554319a84f9

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 7 : B8dcb7dc9fb814b8

crypter ideacbc : Bbb90785e59aab45453a6554319a84f9

crypted block : Ff36eb6b81164192

block 7 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
b8dcb7dc9fb814b8 xor ff36eb6b81164192 = 47ea5cb71eae552a --> second octet new key ideacbc

new key ideacbc: 453a6554319a84f947ea5cb71eae552a

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 8 : D3b7d384b70d86a6

crypter ideacbc : 453a6554319a84f947ea5cb71eae552a

crypted block : F0db4b01bd03af54

block 8 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
d3b7d384b70d86a6 xor f0db4b01bd03af54 = 236c98850a0e29f2

new key ideacbc: 47ea5cb71eae552a236c98850a0e29f2

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 9 : 32cc9bdd83211142

crypter ideacbc : 47ea5cb71eae552a236c98850a0e29f2

crypted block : A0c4efe9169006e8

block 9 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
32cc9bdd83211142 xor a0c4efe9169006e8 = 9208743495b117aa --> second octet new key ideacbc

new key ideacbc: 236c98850a0e29f29208743495b117aa

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 10 : 0110060800106f91

crypter ideacbc : 236c98850a0e29f29208743495b117aa

crypted block : 2785a6bf3b9038d2

block 10 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
0110060800106f91 xor 2785a6bf3b9038d2 = 2695a0b73b805743 --> second octet new key ideacbc

new key ideacbc: 9208743495b117aa2695a0b73b805743

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 11 : B55db76f1c38f8d3

crypter ideacbc : 9208743495b117aa2695a0b73b805743

crypted block : 92b5b341fd78adc6

block 11 xor crypted block = xxxxxxxxxxxxxxxx --> second octet new key ideacbc
b55db76f1c38f8d3 xor 92b5b341fd78adc6 = 27e8042ee1405515 --> second octet new key ideacbc

new key ideacbc: 2695a0b73b80574327e8042ee1405515

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

block 12 : E2d531002c090000

crypter ideacbc : 2695a0b73b80574327e8042ee1405515

crypted block : 154987698382c57b

block 12 xor crypted block = xxxxxxxxxxxxxxxx
e2d531002c090000 xor 154987698382c57b = f79cb669af8bc57b '"f7"'

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
_______________________________
_______________________________
6:
_______________________________
_______________________________

f7 (11110111 binary)

f7 and 7f = 77

firma (signature) ok!!!!!!: (77)9cb669af8bc57b

================================================== =======================

emmg desencrypt

779cb669af8bc57b 2011 13db0001 1a337789 [ba] 8a9bb60d88a4f1aa02b70da641b7163f153a151216ae1bcd82 209d1316b8dcb7dc9fb814b8d3b7d384b70d86a632cc9bdd83 2111420110060800106f91b55db76f1c38f8d3e2d531002c09 0000

779cb669af8bc57b signature
2011 provider ((digi tv (rumania))
13db0001 creacion (creation) (01/12/2005 00:00:02)
1a337789 expiracion (expiry) (13/05/2010 17:00:02)

cmd ba (execute st code)
code 8a9bb60d88a4f1aa02b70da641b7163f153a151216ae1bcd82 209d1316b8dcb7dc9fb814b8d3b7d384b70d86a632cc9bdd [83] 2111 [42] 011006080010 6f91b55db76f1c38f8d3e2d531002c09 0000

cmd 83 cambia (change) provider --> 2111
cmd 42 update key
data 0110'06'080010 (06= index 00)
key encrypt 6f91b55db76f1c38f8d3e2d531002c09
0000
code disassembly:
8a9bb60d88a4f1aa02b70da641b7163f153a151216ae1bcd82 209d1316b8dcb7dc9fb814b8d3b7d384b70d86a632cc9bdd

ram 00:0093: 8a push cc ; stack <- cc
ram 00:0094: 9b sim ; i <-- 1
ram 00:0095: B60d ld a, $0d ; load in a
ram 00:0097: 88 push a ; stack <- a
ram 00:0098: A4f1 and a, #$f1 ; a= a and ...
Ram 00:009a: Aa02 or a, #$02 ; a= a or ...
Ram 00:009c: B70d ld $0d, a ; store a in...
Ram 00:009e: A641 ld a, #$41 ; load in a
ram 00:00a0: B716 ld $16, a ; store a in...
Ram 00:00a2: 3f15 clr $15 ; <-- 0
ram 00:00a4: 3a15 dec $15 ; -=1
ram 00:00a6: 1216 bset $16, #1 ; bit 1 <-- 1
ram 00:00a8: Ae1b ld x, #$1b ; load in x
ram 00:00aa: Cd8220 call $8220 ; go to subroutine

edit rom110 by kasita botonnou (add code:ab515faea081)

rom 00:8220: Ab51 add a, #$51 ; a=a + ...
Rom 00:8222: 5f clr x ; x <-- 0
rom 00:8223: Aea0 ld x, #$a0 ; load in x
rom 00:8225: 81 ret ; return from subroutine

ram 00:00ad: 9d nop ; no operation
ram 00:00ae: 1316 bclr $16, #1 ; bit 1 <-- 0
ram 00:00b0: B8dc xor a, $dc ; a= a xor ...
Ram 00:00b2: B7dc ld $dc, a ; store a in...
Ram 00:00b4: 9f ld a, x ; x --> a
ram 00:00b5: B814 xor a, $14 ; a= a xor ...
Ram 00:00b7: B8d3 xor a, $d3 ; a= a xor ...
Ram 00:00b9: B7d3 ld $d3, a ; store a in...
Ram 00:00bb: 84 pop a ; stack -> a
ram 00:00bc: B70d ld $0d, a ; store a in...
Ram 00:00be: 86 pop cc ; stack -> cc
ram 00:00bf: A632 ld a, #$32 ; load in a
ram 00:00c1: Cc9bdd jp $9bdd nextemmcmd ; jump

cr:-pc- aa xx yy dr -sp- vhinzc -mem@pc- -mem@sp- -cycles-
ram 00:0093 00 00 00 00 0fff v..... 8a9bb60d 00000000 00000000 pushc
ram 00:0094 00 00 00 00 0ffe v..... 9bb60d88 e0000000 00000003 sei
ram 00:0095 00 00 00 00 0ffe v.i... B60d88a4 e0000000 00000005 lda 0d {00}
ram 00:0097 00 00 00 00 0ffe v.i.z. 88a4f1aa e0000000 00000008 pusha
ram 00:0098 00 00 00 00 0ffd v.i.z. A4f1aa02 00e00000 0000000b and #f1
ram 00:009a 00 00 00 00 0ffd v.i.z. Aa02b70d 00e00000 0000000d ora #02
ram 00:009c 02 00 00 00 0ffd v.i... B70da641 00e00000 0000000f sta 0d
ram 00:009e 02 00 00 00 0ffd v.i... A641b716 00e00000 00000013 lda #41
ram 00:00a0 41 00 00 00 0ffd v.i... B7163f15 00e00000 00000015 sta 16
ram 00:00a2 41 00 00 00 0ffd v.i... 3f153a15 00e00000 00000019 clr 15
ram 00:00a4 41 00 00 00 0ffd v.i.z. 3a151216 00e00000 0000001e dec 15 {00}
ram 00:00a6 41 00 00 00 0ffd ..in.. 1216ae1b 00e00000 00000023 bset 16 {41} ,#1
ram 00:00a8 41 00 00 00 0ffd ..in.. Ae1bcd82 00e00000 00000028 ldx #1b
ram 00:00aa 41 1b 00 00 0ffd ..i... Cd82209d 00e00000 0000002a jsr 8220

edit rom110 (add code:ab51 5f aea0 81)

rom 00:8220 41 1b 00 00 0ffb ..i... Ab515fae 00ad00e0 00000030 add #51
rom 00:8222 92 1b 00 00 0ffb ..i... 5faea081 00ad00e0 00000033 clr x
rom 00:8223 92 00 00 00 0ffb ..i... Aea081a3 00ad00e0 00000036 ldx #a0
rom 00:8225 92 a0 00 00 0ffb ..i... 81a30127 00ad00e0 0000003a rts
!!!! A=92 x=a0 y=00 !!!!

Ram 00:00ad 92 a0 00 00 0ffd ..in.. 9d1316b8 00e00000 00001ae7 nop
ram 00:00ae 92 a0 00 00 0ffd ..in.. 1316b8dc 00e00000 00001ae9 bclr 16 {43} ,#1

key=6f91b55db76f1c38 f8d3e2d531002c09

ram 00:00b0 92 a0 00 00 0ffd ..in.. B8dcb7dc 00e00000 00001aee eor dc {2c}
ram 00:00b2 be a0 00 00 0ffd ..in.. B7dc9fb8 00e00000 00001af1 sta dc

____ 2c ($00dc) xor 92 (a) = be ($00dc) ____

key=6f91b55db76f1c38 f8d3e2d53100(be)09

ram 00:00b4 be a0 00 00 0ffd ..in.. 9fb814b8 00e00000 00001af5 txa
ram 00:00b5 a0 a0 00 00 0ffd ..in.. B814b8d3 00e00000 00001af7 eor 14 {f9}
ram 00:00b7 59 a0 00 00 0ffd ..in.. B8d3b7d3 00e00000 00001afa eor d3 {6f}
ram 00:00b9 36 a0 00 00 0ffd ..in.. B7d384b7 00e00000 00001afd sta d3

____ a0 (a) xor f9 ($0014) = 59 (a) xor 6f ($00d3) = 36 ($00d3) ____

key=6f91b55db7(36)1c38 f8d3e2d53100(be)09

ram 00:00bb 36 a0 00 00 0ffd ..in.. 84b70d86 00e00000 00001b01 popa
ram 00:00bc 00 a0 00 00 0ffe ..in.. B70d86a6 e0000000 00001b05 sta 0d
ram 00:00be 00 a0 00 00 0ffe ..i.z. 86a632cc e0000000 00001b09 popc
ram 00:00bf 00 a0 00 00 0fff v..... A632cc9b 00000000 00001b0d lda #32
ram 00:00c1 32 a0 00 00 0fff v..... Cc9bdd83 00000000 00001b0f jmp 9bdd next_emmcmd

((((((((((((((((((((((((( xor: 1-0=1; 0-1=1; 1-1=0; 0-0=0 )))))))))))))))))))))))))))))

key emmg: 6f91b55db7 '6f' 1c38f8d3e2d53100 '2c' 09

____ 2c xor 92 = be $00dc ____
____ a0 xor f9 = 59 xor 6f = 36 $00d3 ____

key (desencrypt 2 bytes): 6f91b55db7 '36' 1c38f8d3e2d53100 'be' 09

6f91b55db7361c38 = 8 bytes desencrypt
f8d3e2d53100be09 = 8 bytes encrypt

key = 6f91b55db7361c38 f8d3e2d53100be09

)))))))))))))))))))))))))))))))))))))))))))))))))) )))))))))))))))))

offs: 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
--------------------------------------------------------
00b0: A7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7
00c0: A7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7
00d0: A7 a7 a7 a7 a7 a7 a7 a7 a7 a7 6f 91 b5 5d b7 36
00e0: 1c 38 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7
00f0: A7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7

6f91b55db7361c38a7a7a7a7 a7a7a7a7a7a7a7 a7a7a7a7a7a7a7a7a7a7a7a7 a7a7a7a7a7a7a7

offs: 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
--------------------------------------------------------
00b0: A7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7
00c0: A7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7 a7
00d0: A7 a7 a7 a7 a7 a7 a7 a7 a7 a7 6f 91 b5 1b 67 b4
00e0: 07 83 2d 17 e3 5d e7 e3 6d f7 c3 1d 47 c3 ad d7
00f0: 23 5d 27 23 ed b7 03 1d 87 03 2d 97 63 5d 67 63

6f91b51b67b407832d17e35d e7e36df7c31d47 c3add7235d2723edb7031d87 032d97635d6763

p= 032d97635d6763
q= e7e36df7c31d47

p xor q = a

032d97635d6763 'xor' e7e36df7c31d47 = e4cefa949e7a24

a = e4cefa949e7a24
a = 11100100110011101111101010010100100111100111101000 100100

1110 0100 = e4
1100 1110 = ce
1111 1010 = fa
1001 0100 = 94
1001 1110 = 9e
0111 1010 = 7a
0010 0100 = 24

tabla 1

35(1)-34(1)-33(1)-32(0) 55(0)-20(1)-21(0)-22(0)--- 1110 0100 = e4
43(1)-42(1)-41(0)-40(0) 39(1)-04(1)-05(1)-06(0)--- 1100 1110 = ce
51(1)-50(1)-49(1)-48(1) 47(1)-12(0)-13(1)-14(0)--- 1111 1010 = fa

31(1)-27(0)-60(0)-61(1) 62(0)-26(1)-25(0)-24(0)--- 1001 0100 = 94
23(1)-19(0)-52(0)-53(1) 54(1)-18(1)-17(1)-16(0)--- 1001 1110 = 9e
15(0)-11(1)-44(1)-45(1) 46(1)-10(0)-09(1)-08(0)--- 0111 1010 = 7a
07(0)-03(0)-36(1)-37(0) 38(0)-02(1)-01(0)-00(0)--- 0010 0100 = 24

tabla 2

00(0)-08(0)-16(0)-24(0) 32(0)-40(0)-48(1)-56(0)--- 0000 0010 = 02
01(0)-09(1)-17(1)-25(0) 33(1)-41(0)-49(1)-57(0)--- 0110 1010 = 6a
02(1)-10(0)-18(1)-26(1) 34(1)-42(1)-50(1)-58(0)--- 1011 1110 = be
38(0)-46(1)-54(1)-62(0) 35(1)-43(1)-51(1)-59(0)--- 0110 1110 = 6e

37(0)-45(1)-53(1)-61(1) 06(0)-14(0)-22(0)-30(0)--- 0111 0000 = 70
36(1)-44(1)-52(0)-60(0) 05(1)-13(1)-21(0)-29(0)--- 1100 1100 = cc
03(0)-11(1)-19(0)-27(0) 04(1)-12(0)-20(1)-28(0)--- 0100 1010 = 4a
07(0)-15(0)-23(1)-31(1) 39(1)-47(1)-55(0)-63(0)--- 0011 1100 = 3c

b= 026abe6e70cc4a3c
------------------------------------------------

b 'xor' key des ac6 = key des permuted
026abe6e70cc4a3c 'xor' 81be2d2ca5bc1607 = 83d49342d5705c3b

key des permuted= 83d49342d5705c3b
-------------------------------------------------

key= (('6f91b55db7361c38')) f8d3e2d53100be09

key des permuted "des (encrypt)" primer octeto key = xxxxxxxxxxxxxxxx
83d49342d5705c3b "des (encrypt)" 6f91b55db7361c38 = xxxxxxxxxxxxxxxx

primer octeto key :
6f91b55db7361c38
key des permuted:
83d49342d5705c3b

subclaves (binario)
subclave 1
101101100101001010111000000100000110101101010001
subclave 2
011101001101100111000011111001000000100011000101
subclave 3
001100111110100101010011100000101000001011011111
subclave 4
001011010110010110010111000101111001011110000001
subclave 5
011101110000010110011101000110100000010101100001
subclave 6
010111111000000010110001010010101110100100000100
subclave 7
100111111000100010111110011000000110010110011000
subclave 8
101111100010001010001110111010010001000000001011
subclave 9
011100010011111110000111001010111000011101110000
subclave 10
011100011011110011000001000110011100110100000010
subclave 11
010100011110010011110110010011000100010000010100
subclave 12
111101001100010110010110110010010110000011001100
subclave 13
011101101000001100100111101000001101001010001001
subclave 14
101010111001000000110111100100100001011000100111
subclave 15
101011010000001011111110100111100000101110100000
subclave 16
011000011101011111011010000001010110000010100110
cifrando (binario)
ronda 1
r0:
11100011100110100100110100101000
l0:
00010110101101011100100100110001
ronda 2
r0:
11110111110010101010010011111000
l0:
11100011100110100100110100101000
ronda 3
r0:
01100000010101000100111100110101
l0:
11110111110010101010010011111000
ronda 4
r0:
11001110100000001111011000100100
l0:
01100000010101000100111100110101
ronda 5
r0:
01001001111000011101001000101010
l0:
11001110100000001111011000100100
ronda 6
r0:
00000011101110110011000010110010
l0:
01001001111000011101001000101010
ronda 7
r0:
01011100111111001001100010000010
l0:
00000011101110110011000010110010
ronda 8
r0:
10110101011100101101011011010010
l0:
01011100111111001001100010000010
ronda 9
r0:
01001011001011100010111010101000
l0:
10110101011100101101011011010010
ronda 10
r0:
10001000100010110100101000010110
l0:
01001011001011100010111010101000
ronda 11
r0:
00101011011101001010010001111011
l0:
10001000100010110100101000010110
ronda 12
r0:
10111101111010001111001011010101
l0:
00101011011101001010010001111011
ronda 13
r0:
00000001000100110011101000111011
l0:
10111101111010001111001011010101
ronda 14
r0:
10000100011110010000010001101011
l0:
00000001000100110011101000111011
ronda 15
r0:
10000110001111111011111101101000
l0:
10000100011110010000010001101011
ronda 16
r0:
10100010010001010000001101111111
l0:
10000110001111111011111101101000
resulte: 3dedb92b296b13c8

key des permuted "des (encrypt)" primer octeto key = xxxxxxxxxxxxxxxx
83d49342d5705c3b "des (encrypt)" 6f91b55db7361c38 = 3dedb92b296b13c8 --> resulte!!!!!!!!!!!!!!

Key= 6f91b55db7361c38 (('f8d3e2d53100be09'))

resulte "xor" segund octeto key encrypt = xxxxxxxxxxxxxxxx --> second octet key desencrypt
3dedb92b296b13c8 "xor" f8d3e2d53100be09 = c53e5bfe186badc1 --> second octet key desencrypt

key= 6f91b55db7361c38 (('c53e5bfe186badc1'))

2111 00 6f91b55db7361c38 c53e5bfe186badc1

2111 00 (key idea ecm 06) 6f91b55db7361c38c53e5bfe186badc1
2111 01 (key idea ecm 46 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2111 m1 (rsa16 ecm) 7508665801dc6815f8df965641a8c27cae056ed0249cf60f60 dedd75a3a84d486e85285220f133439f038bfe54975543c8df c4205067985e5cdad7aba4cf48a7 ;
2111 07 (key ecm signa) 7653bbdaa13d97bb32b1b05e42272060

Tedi58 · 14-06-2010, 16:59

RCS DigiTV (0.8/1W) 14.06.2010
Ident 2111 [Nagra2]

Key 00 : 61 5F 01 C0 58 EE 8A B1 3D E8 CA CC A4 89 D4 67

HEX: 615F01C058EE8AB13DE8CACCA489D467

DEC : 097 095 001 192 088 238 138 177 061 232 202 204 164 137 212 103

aa112 · 07-09-2009, 19:38

Kod:

Treść widoczna tylko dla zarejestrowanych użytkowników.

aa112 · 01-10-2009, 20:42

DigiTV (1°W) 01.10.2009
ident 2111 [Nagra2]

Key 01: 4C 70 A0 6F BE 3C 1E E3 90 D4 E3 CB 16 61 D0 8D

02: 4C 70 A0 6F BE 3C 1E E3
03: 90 D4 E3 CB 16 61 D0 8D

DEC: 076 112 160 111 190 060 030 227 144 212 227 203 022 097 208 141

aa112 · 14-06-2010, 21:21

Key 00: 615f01c058ee8ab13de8cacca489d467

DigiTV (1°W) 14.06.2010
ident 2111 [Nagra2]

DigiTV (1°W) Key 00: 61 5F 01 C0 58 EE 8A B1 3D E8 CA CC A4 89 D4 67

Key 00 in HEX: 615F01C058EE8AB13DE8CACCA489D467
Key 00 in DEC: 097 095 001 192 088 238 138 177 061 232 202 204 164 137 212 103

For camd3.keys (camd3.keys):
1801:002111:0000000000:00:615F01C058EE8AB13DE8CACC A489D467 ; IDEA 86

For CCcam/MGcamd/incubusCamd (SoftCam.Key) and EVOcamd (keylist.txt):
N 2111 00 615F01C058EE8AB13DE8CACCA489D467 ; IDEA 86

For Newcamd (keylist):
1801:000000:211100::61 5F 01 C0 58 EE 8A B1 3D E8 CA CC A4 89 D4 67 ; IDEA 86

For GBox (nagra):
I: { 21 11 00 { 61 5F 01 C0 58 EE 8A B1 3D E8 CA CC A4 89 D4 67 }} # IDEA 86

scam (nagra2):
N: { 2111 00000000 06 08 10 { 615F01C058EE8AB13DE8CACCA489D467 }}

For GigaTwinCam (SoftCam.Key)
N 2111 00 615F01C058EE8AB13DE8CACCA489D467 ;DigiTV (1°W)

CAM Module HEX Key
00-0: 61 5F 01 C0 58 EE 8A B1
00-1: 3D E8 CA CC A4 89 D4 67

CAM Module DEC Key
00-0: 097 095 001 192 088 238 138 177
00-1: 061 232 202 204 164 137 212 103

Humax
00: 61 5F 01 C0 58 EE 8A B1 (for Technomate/ClarkTech line 10)
01: 3D E8 CA CC A4 89 D4 67 (for Technomate/ClarkTech line 11)

Neotion
04: 61 5F 01 C0 58 EE 8A B1
05: 3D E8 CA CC A4 89 D4 67

Narzędzia wątku
Wersja do druku Wyślij na email
Wygląd
Wygląd liniowy Hybrid Mode Wygląd wątkowy

Podobne wątki
Temat	Autor wątku	Forum	Odpowiedzi	Ostatni post / autor
Digi TV	las62	Nagravision 1-2-3	6	06-07-2010 20:32
Latest Tita 1 N2 Digi-TV	aa112	Titanium card	0	16-06-2010 18:34
Platforma Digi TV bez MTV Adria	SATKOM	Nowości	0	15-06-2010 07:58
Digi TV: powrót węgierskiej TV6	SATKOM	Nowości	0	20-05-2010 11:21
Digi TV: Koniec Top Shop TV	SATKOM	Nowości	0	21-04-2010 07:19

Użytkownicy aktualnie czytający ten temat: 1 (0 użytkownik(ów) i 1 gości)