Irdeto Commands to get all information from your GammaCard

Status
Not open for further replies.
K

kargo.25

Super VIP
Messages
9,725
Irdeto Commands to get all information from your GammaCard

Irdeto Commands to get all information from your GammaCard. How To Use: Only with emk you can send this comands to your gamma at position string to send to card you take the mesage not succesfull but also you take the information that your card recieved

Code: 
cmd class Ins Ref1 Ref2 Lenth Data
----------------------------------------------------------------------------------------
01 02 00 00 00 00       	Get ASCII Serial Number
----------------------------------------------------------------------------------------
01 02 01 00 00 00   		Get HEX Serial Number
----------------------------------------------------------------------------------------
01 02 02 00 00 00  		Get Country Code
----------------------------------------------------------------------------------------
01 02 03 00 xx 00  		Get  Provider xx ID (max 4 providers in 2.x and 4.x cards)
----------------------------------------------------------------------------------------
01 02 04 00 xx 01 yy		Get chid Block yy for Provider xx.Block is 60 bytes Max. 
				number of Blocks depends on card type.for 2.1 and 2.2 is 13 Blocks.
----------------------------------------------------------------------------------------
01 02 05 00 00 00  		Get 00 00 + 49 bytes (FF)
----------------------------------------------------------------------------------------
01 02 06 00 00 00  		Return error code 0050   ( Ref1 error ?? )
----------------------------------------------------------------------------------------
01 02 07 00 00 40...  		Write 64 bytes to register 08  (Return code 0700)
----------------------------------------------------------------------------------------
01 02 08 00 00 00  		Get 64 register 08
----------------------------------------------------------------------------------------
01 02 09 03 xx 40 ...		Set camkey to card. xx is index byte for which camkey to 
				use. data  is 64 bytes 	(8 keys x 8 bytes)
----------------------------------------------------------------------------------------
01 02 0A 00 xx 02 ...	check PIN code         xx= (00)Parental PIN 
01 02 0A 01 xx 04 ... 	change PIN code		   (01)IPPV PIN 
						   (02)Home-Shopping PIN
         					   (03)General PIN
						check  (data = 2 bytes pin code) 
						change (data = 2 bytes old pin code + 2 bytes new)
						If ok return  50 or  51 not ok  52 chenged ok

01 02 0A 02 02 02 00 00        --> ???????????????????? idon't know check this later
01 02 0A 03 02 04 00 00 00 00  --> ???????????????????? idon't know check this later

------------------------------------------------------------------------------------------
01 02 0B 00 00 00  		Country Code + ???? + 2 bytes for maximum 
				ChID for each provider + 30 bytes(00).
-------------------------------------------------------------------------------------------
01 02 0C 00 00 00             	11 bytes (00)
-------------------------------------------------------------------------------------------
01 02 0D 00 00 00             	14 bytes (00)
-------------------------------------------------------------------------------------------
01 02 0E xx 00 00  		xx= 2    Read Card File 2
				xx= 3    Read Card File 3
--------------------------------------------------------------------------------------------
01 02 0F 00 xx 00  		Get ASCII Serial + Provider xx + Provider id  xx + 8 bytes Encrypted + 8 bytes Signature ??.
--------------------------------------------------------------------------------------------
01 02 10 00 00 00             	Get ASCII Serial + 0000 + 64 bytes(FF) + 8 bytes Signature??.
-------------------------------------------------------------------------------------------- 
01 02 11 00 00 40 ...		Send 64 bytes data to be Encrypted by RSA public-key encryption
--------------------------------------------------------------------------------------------
01 02 12 00 00 00            	Return error code 5D00 
---------------------------------------------------------------------------------------------
01 02 13 00 00 00            	15 bytes(00)
--------------------------------------------------------------------------------------------
01 02 14 00 00 00      		02 bytes (00 80)
--------------------------------------------------------------------------------------------
01 02 15 00 xx 00          	If xx=00 return Encrypted 128 bytes
				If xx=01 return another Encrypted 128 bytes
---------------------------------------------------------------------------------------------
01 02 16 xx 00 00		If xx 01 or 02 Return error code 0092 else 0096   
				If we send xx =00 Return error code 00 96 
				then send  xx =01 return Encrypted 128 bytes
-------------------------------------------------------------------------------------------
01 02 17 xx 00 00		If xx 01 or 02 Return error code 5100 else 0096   
-------------------------------------------------------------------------------------------
01 02 18 xx 00 00 		If xx 00 or 01 Return error code 0093 else 0053
-------------------------------------------------------------------------------------------
01 02 19 xx 00 00 		If  xx 00      Return error code 0011 else 0007  
-------------------------------------------------------------------------------------------
01 02 1A 00 00 00 		               Return error code 0007   
-------------------------------------------------------------------------------------------
01 02 1B 40 00 00               64 bytes Encrypted
-------------------------------------------------------------------------------------------
01 02 1C 00 xx 00		07 bytes (00) if provider xx availabe
-------------------------------------------------------------------------------------------
01 02 1D 00 00 00		Return error code 0050
-------------------------------------------------------------------------------------------
01 02 1E 00 00 00		Return error code 0050   
-------------------------------------------------------------------------------------------
01 02 1F 00 00 00		Return error code 0050 
-------------------------------------------------------------------------------------------
01 02 20 00 00 00		Return error code 0050 
 


 
	

 
     
for ACS 5.0 new commands
================================
01 00 03 00 00 00          return 2  bytes 50 53
01 00 03 01 00 00          return 4  bytes 05 05 0A 0A
01 00 03 02 00 00          return 5  bytes 00 95 3F 00 00 
01 00 03 03 00 00          return 10 bytes 14 24 39 E1 34 F4 00 00 28 56

01 02 20 00 00 10 02 1A 00 01 01 00 00 00 00 01 00 00 00 00 00 00    (write 16 bytes)
01 02 21 00 00 00  (Get 16 bytes wroted by 01 02 20 00 00)
01 02 1E 00 00 00
01 02 1F 00 00 00
01 02 1C 03 0x 00    (x = 0 to 4 check if the privider availabe)
01 02 23 00 00 00

-----------------------------------------	
01 02 05 00 00 00 removed was there older card
01 02 10 00 00 00 removed 
01 02 16 00 00 00 removed
 
N

nokia59

Registered
Messages
34
atr gamma

AHello, me j' have of l' helps please thank you
ATR: 3B 9F 21 0E 49 52 44 45 54 4F 20 41 43 53 20 56 34 2e 31 9D
 
0

007.4

VIP
Messages
364
papaki63 said:
Any news/help on unlocking locked g@mm@s ?
Can theese commands do the trick somehow?
Click to expand...

The above cmds are standard Irdetto cmds. They cannot unlock a Gamma card.
The Gamma card is locked using a specific Gamma cmd. 3010...........

You need to determine which file killed your card and then what the false Transport Code was. The Gamma unlocker(s) has seven of these Transport Codes hardcoded in it and you can try these one by one by trial and error. If your card has not been locked by one of these known TCs then I'm afraid it cannot be unlocked.
 
G

gparis

Registered
Messages
4
Hi all any software to change hsn and prov id on gamma + card with atr 3B 9F 21 0E 49 52 44 45 54 4F 20 41 43 53 20 56 35 2E 33 9E

Would appreciate any advice.

Cheers
 
Status
Not open for further replies.
Top