View Single Post
   
cable satellite consoles Old 30th November 2008, 23:22   #123 (permalink)
Nick [D]vB
Member +++
 
Join Date: Mar 2005
Posts: 149
Downloads: 0
Uploads: 0
Thanks: 0
Thanked 0 Times in 0 Posts
cable satellite consoles Nick [D]vB will become famous soon enough
Re: keyroll emm and the fix (code it ur self)

I’ve just been looking at the vplug emulator's debug output:

Code:
>> Decrypted EMM: 3F5C01FA5FA6E9B741A6022D079BCD20209A2003CD20209FB8B2B7B29FB8B5B7B5A626CC6B01000000835D01420500588DCF279804044285C3E072B09E079B5D
keyId:0x5C01 
filter type->All cards with the same system ID
Update with CPU code->ROM 10 (FA)
Init->RomNr:10 , Id:5C01
Required files:->Rom: ROM10.bin, RomExt: ROM10ext.bin (non-fatal), EEPROM: eep10_5c.bin
mapeeprom: new map off=c000 size=2000 otp=0040
fread -> C:\Program Files\MyTheatre\Plugins\vModules\NagraBins\ROM10.bin, size: 24576 ,
Bytes read: 24576
Init -> Done...
6805: breakpoint at 81ca (count=113)
Trying to GetOpKeys...
cr:-pc- aa xx yy dr -sp- VHINZC -mem@pc- -mem@sp- -cycles-
00:0081 00 80 c0 00 03fd ....Z. 5fa6e9b7 74f30000 00000904 CLR   X 
00:0082 00 00 c0 00 03fd ....Z. a6e9b741 74f30000 00000907 LDA   #e9 
00:0084 e9 00 c0 00 03fd ...N.. b741a602 74f30000 00000909 STA   41 
00:0086 e9 00 c0 00 03fd ...N.. a6022d07 74f30000 0000090d LDA   #02 
00:0088 02 00 c0 00 03fd ...... 2d079bcd 74f30000 0000090f BMS   0091 (taken) 
00:008a 02 00 c0 00 03fd ...... 9bcd2020 74f30000 00000912 SEI   
00:008b 02 00 c0 00 03fd ..I... cd20209a 74f30000 00000914 JSR   2020 
6805: breakpoint at 2020 (count=630)
math call: $02
RAM[41]=$e9
cr:-pc- aa xx yy dr -sp- VHINZC -mem@pc- -mem@sp- -cycles-
00:008e 02 e9 c0 00 03fd ..I... 9a2003cd 74f30000 0000091a CLI   
00:008f 02 e9 c0 00 03fd ...... 2003cd20 74f30000 0000091c BRA   0094 (taken) 
00:0094 02 e9 c0 00 03fd ...... 9fb8b2b7 74f30000 0000091f TXA   
00:0095 e9 e9 c0 00 03fd ...... b8b2b7b2 74f30000 00000921 EOR   b2 {04} 
00:0097 ed e9 c0 00 03fd ...N.. b7b29fb8 74f30000 00000924 STA   b2 
00:0099 ed e9 c0 00 03fd ...N.. 9fb8b5b7 74f30000 00000928 TXA   
00:009a e9 e9 c0 00 03fd ...N.. b8b5b7b5 74f30000 0000092a EOR   b5 {c3} 
00:009c 2a e9 c0 00 03fd ...... b7b5a626 74f30000 0000092d STA   b5 
00:009e 2a e9 c0 00 03fd ...... a626cc6b 74f30000 00000931 LDA   #26 
00:00a0 26 e9 c0 00 03fd ...... cc6b0100 74f30000 00000933 JMP   6b01 
[...]
6805: breakpoint at 7172 (count=50442)
GetMem -> key0 -> *** REMOVED *** 
6805: breakpoint at 717a (count=25379)
GetMem -> key1 -> *** REMOVED *** 
6805: breakpoint at 81f7 (count=361)
New ID: 5D01
6805: breakpoint at 713d (count=24915)
No PK keys for provider 5d01 ?
Got keys for 5D01 (ROM 10)
It seems to be detailing memory addresses and logic operations,

I don’t know if it’s any help to you lot?

Keep at it guys… 8 )
cable satellite consoles Nick [D]vB is offline