O = odd
E = even
They are using alternating CWs that change every 8-12 seconds or so, as in ND$, Conax, Irdeto etc
Rainbow tool is no use for these 'providers' encryptions, it is only intended for BISS, you will only see even CWs (E) in the case of BISS
As for which table to use, if your c8 comes from the Video PID, then the following applies;
H264 video & single high count - FFH table
H264 video & 3 high counts(same or similar) - 030000h table
mpeg2 video - 00h table
If the c8 comes from the audio PID, then it's always 00h table, BUT, if it is PCM audio, c8 will most likely be fake.
Hope that helps a bit