I’ve just been looking at the vplug emulator's debug output:
Code:
>> Decrypted EMM: 3F5C01FA5FA6E9B741A6022D079BCD20209A2003CD20209FB8B2B7B29FB8B5B7B5A626CC6B01000000835D01420500588DCF279804044285C3E072B09E079B5D
keyId:0x5C01
filter type->All cards with the same system ID
Update with CPU code->ROM 10 (FA)
Init->RomNr:10 , Id:5C01
Required files:->Rom: ROM10.bin, RomExt: ROM10ext.bin (non-fatal), EEPROM: eep10_5c.bin
mapeeprom: new map off=c000 size=2000 otp=0040
fread -> C:\Program Files\MyTheatre\Plugins\vModules\NagraBins\ROM10.bin, size: 24576 ,
Bytes read: 24576
Init -> Done...
6805: breakpoint at 81ca (count=113)
Trying to GetOpKeys...
cr:-pc- aa xx yy dr -sp- VHINZC -mem@pc- -mem@sp- -cycles-
00:0081 00 80 c0 00 03fd ....Z. 5fa6e9b7 74f30000 00000904 CLR X
00:0082 00 00 c0 00 03fd ....Z. a6e9b741 74f30000 00000907 LDA #e9
00:0084 e9 00 c0 00 03fd ...N.. b741a602 74f30000 00000909 STA 41
00:0086 e9 00 c0 00 03fd ...N.. a6022d07 74f30000 0000090d LDA #02
00:0088 02 00 c0 00 03fd ...... 2d079bcd 74f30000 0000090f BMS 0091 (taken)
00:008a 02 00 c0 00 03fd ...... 9bcd2020 74f30000 00000912 SEI
00:008b 02 00 c0 00 03fd ..I... cd20209a 74f30000 00000914 JSR 2020
6805: breakpoint at 2020 (count=630)
math call: $02
RAM[41]=$e9
cr:-pc- aa xx yy dr -sp- VHINZC -mem@pc- -mem@sp- -cycles-
00:008e 02 e9 c0 00 03fd ..I... 9a2003cd 74f30000 0000091a CLI
00:008f 02 e9 c0 00 03fd ...... 2003cd20 74f30000 0000091c BRA 0094 (taken)
00:0094 02 e9 c0 00 03fd ...... 9fb8b2b7 74f30000 0000091f TXA
00:0095 e9 e9 c0 00 03fd ...... b8b2b7b2 74f30000 00000921 EOR b2 {04}
00:0097 ed e9 c0 00 03fd ...N.. b7b29fb8 74f30000 00000924 STA b2
00:0099 ed e9 c0 00 03fd ...N.. 9fb8b5b7 74f30000 00000928 TXA
00:009a e9 e9 c0 00 03fd ...N.. b8b5b7b5 74f30000 0000092a EOR b5 {c3}
00:009c 2a e9 c0 00 03fd ...... b7b5a626 74f30000 0000092d STA b5
00:009e 2a e9 c0 00 03fd ...... a626cc6b 74f30000 00000931 LDA #26
00:00a0 26 e9 c0 00 03fd ...... cc6b0100 74f30000 00000933 JMP 6b01
[...]
6805: breakpoint at 7172 (count=50442)
GetMem -> key0 -> *** REMOVED ***
6805: breakpoint at 717a (count=25379)
GetMem -> key1 -> *** REMOVED ***
6805: breakpoint at 81f7 (count=361)
New ID: 5D01
6805: breakpoint at 713d (count=24915)
No PK keys for provider 5d01 ?
Got keys for 5D01 (ROM 10)
It seems to be detailing memory addresses and logic operations,
I don’t know if it’s any help to you lot?
Keep at it guys… 8 )