fes_786

ok guyz not my work

credit goes to dstream from wizardmodz


Key roll ecm and the fix go do it its simple

--------------------------------------------------------------------------------

DECRYPTED EMM:
--------------------------------------------------------
SIGNATURE: OK!

3F -> Filter: ANY CARD
5401 PROVIDER ID (NTL)
FA -> RUN CODE FOR ROM10:
5FA679B741A6022D 079BCD20209A2003 CD20209FB8B1B7B1 9FB8B6B7B6A626CC
6B01000000835501 420562BD220AC686 E593428580D4D1D3 8090FF2B
DISASSEMBLY OF CODE:
------------------------------
0081: 5F clrx ; x <-- 0
0082: A6 79 lda #$79 ; Load in A
0084: B7 41 sta TEMPA ; Store A in...
0086: A6 02 lda #$02 ; Load in A
0088: 2D 07 bms $91 ; Branch if mask=1
008A: 9B sei ; I <-- 1
008B: CD 20 20 jsr $2020 ; Go to subroutine
008E: 9A cli ; I <-- 0
008F: 20 03 bra $94 ; Branch always
0091: CD 20 20 jsr $2020 ; Go to subroutine
0094: 9F txa ; X --> A
0095: B8 B1 eor $B1 ; A= A xor ...
0097: B7 B1 sta $B1 ; Store A in...
0099: 9F txa ; X --> A
009A: B8 B6 eor $B6 ; A= A xor ...
009C: B7 B6 sta $B6 ; Store A in...
009E: A6 26 lda #$26 ; Load in A
00A0: CC 6B 01 jmp $6B01 ; Jump
BYTES DUMP:
---------------------
00A3: 00 00 00 83 55 01 42 05
00AB: 62 BD 22 0A C6 86 E5 93
00B3: 42 85 80 D4 D1 D3 80 90
00BB: FF 2B

current keys are in the file for all to see if your stuck. This is the current streams new key update

00A3: 00 00 00 83 55 01 42 05
00AB: 62 BD 22 0A C6 86 E5 93 <<<< b1 key altered e5 to 9c for all thos what xors e5 to 9c use windows calc
00B3: 42 85 80 D4 D1 D3 80 90 <<<< b6 is altered from d4 to ad and stored back to the memory
00BB: FF 2B
current keys are in the file for all to see if your stuck. This is the current streams new key update


if you want it handed to you on a plate the file is doing a xor on byte b1 thats the e5 bit of the key
9F txa ; X --> A
0095: B8 B1 eor $B1 ; A= A xor ... key is e5 now 9c
0097: B7 B1 sta $B1 ; Store A in...
0099: 9F txa ; X --> A
009A: B8 B6 eor $B6 ; A= A xor ... load byte from b6 key is d4 now ad
009C: B7 B6 sta $B6
if you want it any simpler

its taking memory location b1 in the decrypted key xoring it with 79 storing it back in and copying it down

then it getting byte b6 xoring it with 79 hex and restoring it



0094: 9F txa ; X --> A ld a with#79
0095: B8 B1 eor $B1 ; A= A xor ... xor location b1 with a i.e #79
0097: B7 B1 sta $B1 ; Store A in... its turned e5 to 9c
0099: 9F txa ; X --> A ld a with 79
009A: B8 B6 eor $B6 ; A= A xor ... xor location b6 with a #79
009C: B7 B6 sta $B6 ; Store A in... its turned d4 to ad
009E: A6 26 lda #$26 ; Load in A store key all updated
00A0: CC 6B 01 jmp $6B01 ; Jump


go write the code its a piss easy one

__________________

teaml

Thanks ,

NOW That'S A START

doom11

Top man fes,will give it ago ,cheers for the help

fes_786

dont thank me

credit goes to dstream from wizardmodz

__________________

havelln

wish i stilll lived in a cable area could of done with something to do but if they plan on changing everyday this will have to be done every day with the diff location they will change

cydine_

Yep quite an easy one to fix this one m8. The correct value for X is at $83

__________________
http://profile.mygamercard.net/cydine

fes_786

here is the last chaos

source code

RapidShare: Easy Filehosting

__________________

sempi

piss easy if you know how if you don't then its not m8.
i am glad you posted the "code" though as there are lots of peeps on here who can do it and hopefully will soon
not getting at you m8 or this post but it seems to be when things like this happen (all boxes being hit) there are loads of posts on here from people gloating and laughing that people will be on the site asking for fixes and so on,
well sorry that is what a lot of people use this site for or what they used it for when they initially joined so that they were not paying traders money to do cards and yes i can prog a card now and have helped others after i got to know how to do mine, but i do not have a clue how to write code, plenty of the people who do not know how to do this contribute in other ways and also donate financially to the site and do not need flamed every time a major hit comes along

again fes m8 nothing to do with your post i had just been reading thru a load of previous posts in the cable section and was replying to your origional post and got carried away.....should probably have posted in the rant room...lol..

tlogic

wish I knew how to do all this coding stuff, writting cards is the easy bit, but coding Is in a different league all together. I wounder if there a tut some Where on this?

__________________
http://i34.tinypic.com/2hnz9t2.gif

sarge

Link dead now

__________________
: motor :