This page was copied from Duwgati's site with his permission: http://www.duwgati.com
Enjoy, Bill & the funFiles Team.

MKFind 4.4


Overview of the screen-layout:
- MKF will show a menu column at the left hand side of the screen
- There is a title bar (light blue bar) near the top of the screen
- A log window can be found at the bottom of the screen
- The main program window is in the center of the screen



The menu column allows you to navigate the programs main functions.
The title bar will keep you informed about the currently active function.
The log window can be used to monitor all data traffic to and from the card. All commands, requests, answers etc. are logged.
The main program window will constantly change as you call on other functions.

The screen shots were made from MKF version 4.4 which means that some minor differences can occur if you are using a newer version of the software.

This is the 'Connect'/'Disconnect' icon

This description is divided into several separate program functions:
1. First time here, then go here before you do anything else.
2. Doing a full Seca card extraction.
3. Changing operational keys.
4. Reviving a dead card.
5. Modifying the Channel Package (Package BitMap - PBM).
6. Block providers from updating the PBM.
7. Working with the Elvis programmer.
8. A tip to keep your card optimized.

Doing a full Seca card extraction:

Overview of the procedures:
1. Connect the programmer to a proper power supply.
Connect the programmer to the PC.
If you have a Elvis programmer, choose 'Settings' in the menu column.
Tick the check box 'Elvis AutoPhoenix Mode'.
Press the 'Connect' icon.
2. Choose 'Card Layout' in the menu column.
Click the button 'Soft Version'.
Check your cards version number.
If your card is version 6 or older, it's safe to go on,
OTHERWISE DON'T CONTINUE THE EXTRACTION
your card may get damaged if you do.
3. From the menu choose 'Card Records'.
4. Click the 'Get Records' button.
You will notice the table in the center of the screen get filled with records.
Wait until the complete table has loaded.
5. Now tick the check boxes 'Maxprovider' and 'Overwrite'
then click the 'Auto Extract' button.
Confirm to all questions.
Wait until the title bar shows Card Layout: Card Records and the keys are all visible.
The 'Auto Extract' procedure is rather time consuming, don't interrupt the procedure.
6. Click the 'Save Records' button or the disk icon to store the card data.

Detailed description:
1. Basic setup of the programmer/ PC.
You will need a Phoenix interface for this program.
The interface has to be connected to a proper external power supply.
It has to operate at 3.58 MHz.

If these conditions are met, insert your card and start MKF.
Click the 'Connect' icon.





2: From the menu, choose 'Card Layout'.



3: Click the 'Get Card Info' button.
Click the 'Get Firmware' button to find out what version your card is.

WARNING:
If your card is a version 6 card or older, it is safe to continue.
If it is a newer version, then do NOT continue.
Chances are that your card will be damaged in the process if you continue.
In this example, you can see that the card is a Canal+ card, version 4.0 (Num40).
This allows us to continue safely.


4: From the menu choose 'Card Records'.

5: Click the 'Get Records' button
Wait until you see the complete table appear in the main window
This is how the table should look when filled with records.



OK, these are all basic records, but they are still coded.

Remark ;
the position of the keys is depends on what's on the card. The Index column is the sort order of the table.

6: For a full extraction, tick the check boxes 'Maxprovider' and 'Overwrite', then click 'Auto Extract'.
Confirm to all questions or warnings and wait until the complete table has loaded.



WARNING:
If you don't want to risk anything to happen to your original card, check mark the 'Maxprovider' option only. This will only create extra providers on the card. You can then read the provider info you're after and then remove these added providers.
This method will not be successful to every card though. The amount of success will vary per card too. But if it's only the MK01 you're after, this procedure will do.
If at least 3 bytes appear, it is possible to use a manual brute-force.
If 4 or more bytes appear, then you can click the record for Automatic Brute Force.

When the automatic extraction has completed, your screen will look something like this.
All available keys will appear in the table.



If a popup message appears, saying that the program found a PPV record ending on Bx, be careful!!! This means that MKF is about to delete this record. Because MKF cannot completely restore such records, it will remove them. So if there are any credits for PPV events left on your card and you do not intend to change the PBM of the card, then DO NOT answer yes to this question.
In most cases however, you might want to consider changing the PBM to include PPV. In that case, this Question can be answered with Yes and the rest of your card will be extracted.

As shown above, by clicking any of the records, you can copy all extracted keys to the individual keys section of each provider. This is very important if you want to save ALL card details and not only the card records.

7. To save all details extracted, you have three options to choose from:
- Click the 'Save Records' button.
- Click the Disk Icon on the Tool Bar to save all your cards details.
- Select "Save MKF Key File" from the File menu.

All three options now use the same save method and will therefor create the exact same log file.

That's It. A full card extraction and all keys visible!



Changing the operational keys.

Overview of the procedures:
1. Connect the programmer to a proper power supply.
Connect the programmer to the PC.
If you have a Elvis programmer, choose 'Settings' in the menu column.
Check mark the check box 'Elvis AutoPhoenix Mode'.
Press the 'Connect' icon.
2. Choose 'Card Layout' in the menu column.
Click the button 'Soft Version'.
Check your cards version number.
If your card version is Version 6 or older, it's safe to go on,
OTHERWISE DON'T CONTINUE THE EXTRACTION
your card may get damaged if you do.
3. From the menu choose the provider you want to edit (for example ONdigital1).
Click the keys tab in the main window or choose keys from the menu.

In the middle of the screen, you see two tabs: 'Management' and 'Operational'.
Click on the tab 'Operational'



4. Now fill in the key(s) that you wish to update. Be sure to put them in the appropriate places (i.e. Key 0C, is entered in the box next to '5C', etc.). You will notice that as soon as you start typing the first character in the appropriate field, a marker will appear in the tick box next that field.

A general misunderstanding seems to be the way, the keys are entered. I get a lot of remarks about this. It seems that most people try to tick the tick box of the key they want to enter. But that is not the way it works. You don't need to tick that box. MKF does that for you as soon as you start typing.

So why is that tick box there then??
Well, the tick box just marks the keys you want to be written to the card. If you enter a key but then remove the marker from the tick box, that key will not be written to the card.

To execute the card update (write the keys to the card) you just press 'Write Keys'.
That's it, your card will now have the updated keys on it!



Reviving a dead card:
Overview of the procedures:
You will need a valid Management key in order to make your card Auto Update.
If you do not have a valid Management key, then you can only make the card operational by writing Operational (Monthly) keys to the card and you will need to do this each month.

1. Connect the programmer to a proper power supply.
Connect the programmer to the PC.
If you have a Elvis programmer, choose 'Settings' in the menu column.
Check mark the check box 'Elvis AutoPhoenix Mode'.
Press the 'Connect' icon.
2. Choose 'Card Layout' in the menu column.
Click the button 'Soft Version'.
Check your cards version number.
If your card is version 6 or older, it's safe to go on,
OTHERWISE DON'T CONTINUE THE EXTRACTION

your card may get damaged if you do.
3. From the menu choose the provider you want to edit (for example ONdigital1).
Click the keys tab in the main window or choose keys from the menu.

In the middle of the screen, you can see two tabs: 'Management' and 'Operational'.
Click on the tab 'Management'



4. Now fill in the key(s) that you wish to write to your card. You will at least need the '51' (that is the MK01 or Primary Key). If you have them, you can also write any other keys you have extracted from a valid card (i.e. MK01 Secondary, also maybe MK00 Primary/ Secondary).
Make sure to check mark the check box next to any key you wish to write to the card and Press 'Write Keys'.
That's it, for the MK's. Now you will also need to change your PPUA and possibly the expiry date.

5. Modify the PPUA, this one is found under the 'General' tab of the provider. When you click the 'General' tab, you will see the PPUA Box.



Type in the FULL PPUA from the card you got the MK's from.

Note:
You cannot use the PPUA from a 'Wafer' or 'Gold' card as these do not contain a full PPUA.
'Wafer' or 'Gold' cards do not use the CustWP byte.

You may also want to change the expiry date to this month or last month. The date will be updated automatically when the card receives the updates from the Provider.
Be sure to click the 'Modify Selected' button. If you don't, your card will not be updated.
Now from this point on, your card will be able to receive Operational Keys from your Providers signal. Therefore, if you put your card into the receiver, do change to an encrypted channel and wait. It may take up to an hour or so, but your card should receive the latest Operational Keys and become active automatically.

6. If, you don't want to wait for the Auto Update however, you can write the latest Operational Keys to your card yourself. To read how to do that, click HERE.



Modifying the Channel Package (Package BitMap - PBM):
Overview of the procedures:
1. Connect the programmer to a proper power supply.
Connect the programmer to the PC.
If you have a Elvis programmer, choose 'Settings' in the menu column.
Check mark the check box 'Elvis AutoPhoenix Mode'.
Press the 'Connect' icon.
2. Choose 'Card Layout' in the menu column.
Click the button 'Soft Version'.
Check your cards version number.
If your card is version 6 or older, it's safe to go on,
OTHERWISE DON'T CONTINUE THE EXTRACTION
your card may get damaged if you do.
3. From the menu choose the provider you want to edit (for example ONdigital1).
Click the PBM tab in the main window or choose PBM from the menu.



As you can see above, the PBM 'Package BitMap' is shown in a 8 byte hexadecimal form (mostly zero's).
To the right you see six buttons.
Click the button labeled 'Read PBM'. This will read the current PBM that you are subscribed to from your card.

4. The Channel Package can be modified by working your way through the different 'Byte' tabs, check marking the check box next to each channel you want to be able to watch.

Note:
Clicking the 'All Primary Channels' in Byte 2, will activate all Primary channels, no matter what each individual channel is set to.
Also, OnRequest (PPV) is only 1 single bit. Therefore, there is no way to disable for instance the 'Adult OnRequest' without losing the rest of the OnRequest Channels.
This can only be done by disabling it using the standard menus on your Receiver.

5. Once you have selected all the channels you want, press the 'Modify PBM' button and that's it.
You will now have all the channels you selected.

Note:
If you have recently changed your channel lineup or activated your card, then your provider may still be sending out your 'official' channel list to your card. Therefore, the list may get reset after a short while. This will normally stop after a couple of weeks.
However, if you don't want to wait that long, you can block any changes being made to your PBM by your provider, by using the 'Lock PBM' Option. For Details on how to do this, go HERE.




Block providers from updating the PBM (Package BitMap):
Overview of the procedures:
1. Connect the programmer to a proper power supply.
Connect the programmer to the PC.
If you have a Elvis programmer, choose 'Settings' in the menu column.
Check mark the check box 'Elvis AutoPhoenix Mode'.
Press the 'Connect' icon.
2. Choose 'Card Layout' in the menu column.
Click the button 'Soft Version'.
Check your cards version number.
If your card is version 6 or older, it's safe to go on,
OTHERWISE DON'T CONTINUE THE EXTRACTION
your card may get damaged if you do.
3. From the menu choose the provider you want to edit (for example ONdigital1).
Click the PBM tab in the main window or choose PBM from the menu.



In the screen shot above, you can see 'Package BitMap' and a row of Hex digits (mostly zero's).
To the Right of this, there will be six buttons.
Click the button labeled 'Lock PBM'. This will lock your card, so that the provider cannot change the channels.
If ever you want to Unlock the PBM, then simply click on the button labeled 'Unlock PBM'.

Note:
By locking the PBM, you are actually locking a bit more than that. The full effects of this facility are not fully known and although we are fairly sure that the MK01 on your card can still be updated, there is some doubt as to whether this will block changes to the PPUA and Expiry Date. If this is the case, then with the PBM locked your card will not Auto Update itself and you will need to unlock it before these elements can be written to the card. Therefore, currently ONLY use this if your card has just been activated or you have just phoned up to change your channels and it keeps changing back to the official channels available. After a few weeks, unlock it again, to allow normal updating to occur.



Working with the Elvis Programmer:

1. Connect Power to Programmer.
Connect the Programmer to the PC.
Launch MKF, go to the 'Settings' Tab and select 'Elvis AutoPhoenix Mode'.



Press the 'Connect' Icon. This will then trigger the Elvis 'Phoenix' mode emulation.

Remember:
To return your Elvis its 'Normal' programmer mode, you will need to disconnect the power for a few seconds after leaving MKF.