3_7 funcard fix here

[666]

Originally Posted by timetrex

Obisouly the 9,000 views were just looking for the fix, but as the old saying goes give a man a fish, it will feed him for a day, teach him to fish, it will feed him for life. Or something along those lines.

So im prepare to have a bash, I'm a computer engineer buy trade so I want to have a go. not that I need to know the fix as most of my family have the Mosc cards and I just use an ITgate box but I use to do funcard's and was always curious to know how people done the fixes. I did post a year or so ago about this but got no help then so im hoping for a better interest and response now.

i would,nt say that, i,m over unlockers and astra teaching us 1 bit of code at a time, and even that
is bloody hard, i think when we talk about this 0086: A6 02 lda #$02 ; Load in A, it just goes over ppl heads, i,m try very hard but its starting to go over my head, all i can do is give advice on what i learned, using chaos , is not the way to go cos its fixed the key roll, go with prune and then learn to fix the key roll then the proplem with the 3.7

[666]

you will need...
StuntGuy FAQ
EMMStudio
AvrStudio
MC68HC05P4A

[timetrex]

where can I obtain MC68HC05P4A and what excatly is it?

[timetrex]

Originally Posted by 666

i would,nt say that, i,m over unlockers and astra teaching us 1 bit of code at a time, and even that
is bloody hard, i think when we talk about this 0086: A6 02 lda #$02 ; Load in A, it just goes over ppl heads, i,m try very hard but its starting to go over my head, all i can do is give advice on what i learned, using chaos , is not the way to go cos its fixed the key roll, go with prune and then learn to fix the key roll then the proplem with the 3.7

Yeah yuou cud be right, Im not an authority on the subject but yes understanding howe the keyroll works and the fixing the issue with 3.7. As I understand there is some sort of timing issuing. Should the old keyroll method still apply under 3.7 or has something changed with this as well?

[666]

this is what he says and till we learn this we are not going to fix nowt...
You need to create them.

I'm not going to give you the keys ... I'm going to make you all calcualte them...

You will need an known Ex-C&W image. Generate one with Toxic if you don't have one.

If you don't have a 5C01 ... create one.

What you need to do is find the parity keys 0/1/2 - they are on a Data Type 07. in the image. There are 2 of these on a base card, and sometimes a 3rd on a newer revision card. You are looking for the one that begins 5C 3F 00 ...

The parity key you need is parity key 2 (Global EMM) - 15 bytes.

Look for the input box on EMM studio's 5C01 tables where it says PK=
To the left of it make sure this is on PK2. Now paste the 15 numbers into the box to the rights of PK=

Press Expand PK.

Now back in NagraEdit, we need 64 bytes known as EMM Verify Key. Paste these into the the box thats says N2=

Fianlly we need the verify key.

This is also in the DT07 in nagraedit, just above the EMM Decrypt key.

Now: Tell me ... what is the first and last digits of of the keys:

N1
E1
N2
Verify Key?

You can leave public keys as all zero's.


this is done in avrstudio i can help you a little bit, but you are going to need edcase, sunrise, thecoder or some other god to help you

[timetrex]

Originally Posted by 666

this is what he says and till we learn this we are not going to fix nowt...
You need to create them.

I'm not going to give you the keys ... I'm going to make you all calcualte them...

You will need an known Ex-C&W image. Generate one with Toxic if you don't have one.

If you don't have a 5C01 ... create one.

What you need to do is find the parity keys 0/1/2 - they are on a Data Type 07. in the image. There are 2 of these on a base card, and sometimes a 3rd on a newer revision card. You are looking for the one that begins 5C 3F 00 ...

The parity key you need is parity key 2 (Global EMM) - 15 bytes.

Look for the input box on EMM studio's 5C01 tables where it says PK=
To the left of it make sure this is on PK2. Now paste the 15 numbers into the box to the rights of PK=

Press Expand PK.

Now back in NagraEdit, we need 64 bytes known as EMM Verify Key. Paste these into the the box thats says N2=

Fianlly we need the verify key.

This is also in the DT07 in nagraedit, just above the EMM Decrypt key.

Now: Tell me ... what is the first and last digits of of the keys:

N1
E1
N2
Verify Key?

You can leave public keys as all zero's.


this is done in avrstudio i can help you a little bit, but you are going to need edcase, sunrise, thecoder or some other god to help you

Aprreciate that, yes it would be good if sunrise and The Coder can input into the thread.... I will hopefully answer this when I get home from work, Maybe I'll just put the stuff on my server and do it there now...

[timetrex]

Originally Posted by 666

this is what he says and till we learn this we are not going to fix nowt...
You need to create them.

I'm not going to give you the keys ... I'm going to make you all calcualte them...

You will need an known Ex-C&W image. Generate one with Toxic if you don't have one.

If you don't have a 5C01 ... create one.

What you need to do is find the parity keys 0/1/2 - they are on a Data Type 07. in the image. There are 2 of these on a base card, and sometimes a 3rd on a newer revision card. You are looking for the one that begins 5C 3F 00 ...

The parity key you need is parity key 2 (Global EMM) - 15 bytes.

Look for the input box on EMM studio's 5C01 tables where it says PK=
To the left of it make sure this is on PK2. Now paste the 15 numbers into the box to the rights of PK=

Press Expand PK.

Now back in NagraEdit, we need 64 bytes known as EMM Verify Key. Paste these into the the box thats says N2=

Fianlly we need the verify key.

This is also in the DT07 in nagraedit, just above the EMM Decrypt key.

Now: Tell me ... what is the first and last digits of of the keys:

N1
E1
N2
Verify Key?

You can leave public keys as all zero's.


this is done in avrstudio i can help you a little bit, but you are going to need edcase, sunrise, thecoder or some other god to help you

n1 2 and 9
e1 b and b
n2 d and b
D476071286086F1B

[SunRise]

Originally Posted by blakey_8

I think they work on a cash basis, basically they want to make their fair share of £££ on the fix before they decide to release it - for free - to the people who want it.

You sir, are a plant pot.

It is attitudes like this which make me not want to release - ever.

SunRise / Astra

[666]

n1= 25 & b9 - put the first 2 and the last two numbers in.. 2 numbers are 1 byte,, it must be a c&w rom 10 image

[timetrex]

Originally Posted by SunRise

You sir, are a plant pot.

It is attitudes like this which make me not want to release - ever.

SunRise / Astra

Despite what people may think of the coders, the fix has already been done and if you or whoever want folks to learn or try to learn to do it themselves then I think you should assist that.

On a seperate note with the ever increasing threat of nagra 3 and the end of free tv for now it could be said that is a reason why the fix is being held back because after nagra 3 is introduced along with IPTV when it comes, there will be an empty void of money comming into peeps pockets. I would hate to think that the coders are holding back because of this to cash in as much as they can before the lights go out.

I myself im only interested in learning and have posted a few years pack asking to learn but no much interest shown from others that no and indeed message yourself on another fourm with no response. Not all peeps are to blame but certainely there are people who take with not contributing,