47 45 6F 10 00 81 70 18 EE 16 00 00 16 AB
A9 D4 0A 26 FE 79 CB AF 09 AC 49 F5 B3 42 B3 71 AA 02
47 45 6F 13 00 80 70 18 EE 16 00 00 16 AB
09 42 F1 62 63 48 BD 97 09 AC 49 F5 B3 42 B3 71 F7 63
I'd say the green ones are CWs, and something in 70 18 EE 16 00 00 16 AB would identify the ecm key and the entitlement ID?
47 45 6F 10
00
81: Table ID
70 18: & 0x0FFF -> Section length
EE: Tag ECM_TAG_CW_DESCRIPTOR
16: Length
00 00 16 AB: Entitlement ID
A9 D4 0A 26 FE 79 CB AF: encrypted CW
09 AC 49 F5 B3 42 B3 71: encrypted CW
AA 02: Checksum
By the way here are the names of all the tags I have found in the firmware:
E0 = EMM_TAG_RECEIVER_ALLOCATION_DESCRIPTOR
E1 = EMM_TAG_EVENT_ENTITLEMENT_DESCRIPTOR
E2 = EMM_TAG_EVENT_DEENTITLEMENT_DESCRIPTOR
E3 = EMM_TAG_OAC_COMMAND_DESCRIPTOR
E4 = EMM_TAG_SECURITY_TABLE_DESCRIPTOR
E6 = EMM_TAG_OVER_AIR_DOWNLOAD_DESCRIPTOR
E7 = EMM_TAG_OVERALL_ENTITLEMENT_DESCRIPTOR
E8 = EMM_TAG_OVER_AIR_DOWNLOAD_SWITCH_DESCRIPTOR
EE = ECM_TAG_CW_DESCRIPTOR
The 3 first video pactkets which CW: A8 FD 18 BD 70 71 0C ED fits for
47 45 15 96 F1 18 84 3F AB AC 75 80 29 B8 32 2C
47 45 15 94 6C C4 43 5B 0D E4 31 76 9E ED 9E E2
47 45 15 9E 6E 68 50 1F AD 18 3C 52 72 6C D1 15
Sicne we have 9x then I will say EVEN key
PID 13 0x1fff00 Packet Identifier
Scrambling control 2 0xc0 '00' = Not scrambled.
For DVB-CSA only:[11]
'01' (0x40) = Reserved for future use
'10' (0x80) = Scrambled with even key
'11' (0xC0) = Scrambled with odd key
Adaptation field exist 1 0x20 Boolean flag
Contains payload 1 0x10
Continuity counter 4 0xf Sequence number of payload packets (0x00 to 0x0F).
Incremented only when a payload is present (i.e., payload value is true)
Note: the total number of bits above is 32 and is called the transport stream 4-byte prefix or Transport Stream Header.
Code:
guncel 06.02.2019
raw ecm stream
crypTool ile birþey bulamadým..
80 70 28 ED 26 00 00 [COLOR="Red"]26 E0[/COLOR] 96 DB 5E C1 59 07 4A C6 C2 75 4D DD F4 07 14 B6 EF 01 48 36 4D 6F F6 6B 94 C2 6C D5 C3 82 F7 F4 1E 63
81 70 28 ED 26 00 00 [COLOR="red"]26 E0 [/COLOR]05 2E 00 B3 A0 A9 4C 55 C7 B2 41 D2 8E 5D 1A 52 F4 CD 26 38 2A 30 B9 F5 4C C3 22 A3 1C 29 FF 72 14 B6
bu raw ecm 11 saniye de bir degisiyor
simdi abicim ben diyorum burada bir nokta var
mx8400 cihaz ini inceledim sadece ßiss desdek var..
user guide - kullaným kýlavuzuna bakýnca goruyoruz.
CrypTool ile baktým ama bende sýfýr.