EMM-G DIGI TV CHANGE 01 (46) 07-09-2009
EMM-G Encriptada Precam :
82706C000000000004652011920098AE75CE6FE8B24E21E0
B5FB3F548719BACB7C86C989D3B7483EB2352B0CFD49A
CB575CE102EEFCC86188A33F99BF9B5702ABBF271029A
F7D87F1DFAF9A99D2AA3591B23D0B38F5E7C2EEADFD1
E1DE155745EC4BC24A45E0F03731D0D34D283491
EMM-G Encriptada Postcam :
21006DA0CA00006704652011920098AE75CE6FE8B24E21E0
B5FB3F548719BACB7C86C989D3B7483EB2352B0CFD49AC
B575CE102EEFCC86188A33F99BF9B5702ABBF271029AF7D
87F1DFAF9A99D2AA3591B23D0B38F5E7C2EEADFD1E1DE1
55745EC4BC24A45E0F03731D0D34D283491029D
EMM-G Desencriptada :
2D8E6275E2ECB06C201113DB00011A337789BA8A9BB60D88
A4F1AA02B70DA641B7163F153A151216AE1BCD82209D1316
B8D2B7D29FB814B8D7B7D784B70D86A632CC9BDD832111
420110460800102436612BF14E26FEC8794CDD0AF33FCD0000
Analyzer :
2D8E6275E2ECB06C 2011 13DB0001 1A337789 [BA] 8A9BB60D88A4F1AA02B70DA641B7163F153A151216AE1BCD82
209D1316B8D2B7D29FB814B8D7B7D784B70D86A632CC9BDD
83 2111 42 011046080010 2436612BF14E26FEC8794CDD0AF33FCD
0000
2D8E6275E2ECB06C Signature
2011 Provider (Digi TV (Rumania))
13DB0001 Creacion (Creation) (01/12/2005 00:00:02)
1A337789 Expiracion (Expiry) (13/05/2010 17:00:02)
Cmd BA (Execute ST Code)
Code : 8A9BB60D88A4F1AA02B70DA641B7163F153A151216AE1BCD
82209D1316B8D2B7D29FB814B8D7B7D784B70D86A632CC9BDD
Code Disassembly ST19:
RAM $00:0093: 8A PUSH CC
RAM $00:0094: 9B SIM
RAM $00:0095: B60D LD A,($0D)
RAM $00:0097: 88 PUSH A
RAM $00:0098: A4F1 AND A,#F1
RAM $00:009A: AA02 OR A,#02
RAM $00:009C: B70D LD ($0D),A
RAM $00:009E: A641 LD A,#41
RAM $00:00A0: B716 LD ($16),A
RAM $00:00A2: 3F15 CLR ($15)
RAM $00:00A4: 3A15 DEC ($15)
RAM $00:00A6: 1216 BSET ($16),#01
RAM $00:00A8: AE1B LD X,#1B
RAM $00:00AA: CD8220 CALL $8220
» » » Edit Rom110 (Add code:AB515FAEA081 ($00:8220))
ROM $00:8220: AB51 ADD A,#51 A + 51= 92
ROM $00:8222:
ROM $00:8223: AEA0 LD X,#A0 X = A0
ROM $00:8225: 81 RET
New A=92 X=A0 Y=00 !!!!
RAM $0000AD: 9D NOP
RAM $0000AE: 1316 BRES ($16),#01
Key= 2436612BF14E26FE C8794CDD0AF33FCD
RAM $0000B0: B8D2 XOR A,($D2) F1 ($D2) XOR 92 (A) = 63 ($D2)
RAM $0000B2: B7D2 LD ($D2),A Change F1 ($D2) to 63 ($D2)
Key= 2436612B(63)4E26FE C8794CDD0AF33FCD
RAM $0000B4:
RAM $0000B5: B814 XOR A,($14) A0 (A) XOR F9 ($14) = 59 (A)
RAM $0000B7: B8D7 XOR A,($D7) 59 (A) XOR 79 ($D7) = 20 ($D7)
RAM $0000B9: B7D7 LD ($D7),A Change 79 ($D7) to 20 ($D7)
Key= 2436612B(63)4E26FE C8(20)4CDD0AF33FCD
RAM $0000BB: 84 POP A
RAM $0000BC: B70D LD ($0D),A
RAM $0000BE: 86 POP CC
RAM $0000BF: A632 LD A,#32
RAM $0000C1: CC9BDD JMP $9BDD
Cmd83 Change Provider id --> 2111
Cmd42 Key Update Found
Cmd42 Data :0110'46'080010 (46= Index 01)
Cmd42 Key= 2436612B634E26FE C8204CDD0AF33FCD
0000
2436612B634E26FE = 8 Bytes Desencrypt
C8204CDD0AF33FCD = 8 Bytes Encrypt
PostAU Provid: 2011 Type: 12 (AC6)
B 'Xor' Key DES AC6 = key DES Permuted
6A0EDEB28C00D62A 'Xor' 81BE2D2CA5BC1607 = EBB0F39E29BCC02D
KEY= (('2436612B634E26FE')) (('C8204CDD0AF33FCD'))
Key DES Permuted "DES (Encrypt)" Primer octeto key = xxxxxxxxxxxxxxxx
EBB0F39E29BCC02D "DES (Encrypt)" 2436612B634E26FE = 7458C57CB3D920AF
Segund octet key
7458C57CB3D920AF 'Xor' C8204CDD0AF33FCD = BC7889A1B92A1F62
Second octet key Desencrypt --> BC7889A1B92A1F62
Cmd42 Added Key : N2 2111 01 2436612B634E26FE BC7889A1B92A1F62
|
|
