Plse update predator for 09AC

[satfiles_dotcom]

Astro TV on Measat 91.5E have changed from Seca2 00AB/00AC/00AD/00AE to new encryption N*D*S provID: 09AC

Plse update predator to support for new card.



Read from WinExplorer

Trying to reset card...
Reset Successful

RX ATR : 3F FF 11 25 03 10 80 41 B0 06 69 FF 4A 50 70 00 00 41 5A 01 00 11

Timeout from 58 command

Trying to reset card...
Reset Successful

ATR: 3F FF 11 25 03 10 80 41 B0 06 69 FF 4A 50 70 00 00 41 5A 01 00 11

Convention: INVERSE
Protocol: T=0
TA1 = 11
TA2 = 80
TB1 = 25
TC1 = 03

Historical Bytes: 41 B0 06 69 FF 4A 50 70 00 00 41 5A 01 00 11
A ° i ÿ J P p A Z

Programming Voltage = 5.0 volts
Programming Current = 50ma
Maximum Clock Frequency = 5.0MHz

Assuming a 3.5790MHz clock:
Work ETU = 0.0001039396 seconds
Guard Time = 0.0015590946 seconds
Baud Rate After Reset = 9621



This is the boot up sequence of the Original decoder :
1. Reset card and read ATR...
2. Read card command list-> what command are supported by the card
3. Write IRD No. or Boxkey to the card-> if card reply incorrect->decoder stop->show error
4. If correct->Read SN, Provider info and etc.
5. If step4 checksum incorrect->Preform ZKT. (ZKT is 2 parts)
6. ZKT part1->Request random number seeding->Read X->r^2 mod N
7. ZKT part2->Request random number or Y = r*s mod N
8. The ZKT part2 is randomly issue... you can't predict which one coming..
9. Write AES modulus to card to get AES hashing
10. Get decrytion key(the key is then compare to the hashing).
11. If not correct retry. 2~3 retry will allow then decoder stop.
12. If correct, start polling card.



Some logs

Original Philips receiver & Original card:-
-------------------------------------------------
[04:27:37]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:37]
A0 84 84 04 AC 84 00 F8 08 04 A8 A0 50 E8 1C 38 98 00 00
98 04 3C 20 5C 4C 20 2C C0 70 20 60 04 04 8C 04 00 74 14
48 04 00 0C 00 50 64 08 04 00 DC 14 08 30 DC 80 08 00 D0
80 08 00 DC 80 08 18 F8 80 08 18 F8 80 08 18 F8 80 08 00
D4 80 DC 04 14 F0 4C 4C 58 84 68 90 20 40 AC B4 00 00 A4
B4 0C 4C F0 6C C0 98 20 A8 90 70 2C 34 24 6C B8 54 64 70
2C A4 2C BC 80 E0 90 80 E0 1C 9C D0 FC E4 7C 98 4C 58 78
38 BC 48 B0 74 40 0C 48 48 1C E0 4C 9C AC D4 70 84 C4 A0
D0 10 A4 EC 08 E4 48 10 50 2C 38 44 14 90 78 4C E0 C0 A0
F0 EC 68 60 90 94 44 5C 98 58 3C 50 08 20 40

[04:27:38]
A0 B0 00 00 14 B0 00 00 00 00 20 40

[04:27:39]
A0 B0 00 00 14 B0 00 00 00 00 20 40

[04:27:40]
A0 B0 00 00 14 B0 00 00 00 00 20 40

[04:27:41]
A0 B0 00 00 14 B0 00 00 00 00 20 40

[04:27:42]
A0 B0 00 00 14 B0 00 00 00 00 20 40 A0 88 00 00 4C 88 20
40 84 04 28 78 10 9C D0 AC 34 C4 EC E8 FC 9C AC F8 18 C8
3C 48 9C 00 30 74 DC 30 64 40 C4 20 64 8C 84 20 44 A0 88
00 00 4C 88 20 40 84 04 28 78 10 9C D0 AC 34 C4 EC E8 FC
9C AC F8 18 C8 3C 48 9C 00 30 74 DC 30 64 40 C4 20 64 8C
84 20 44

[04:27:43]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:44]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:45]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:46]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:47]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:47]
A0 84 84 04 AC 84 00 F8 08 3C A8 BC B8 40 BC 54 64 00 00
98 04 74 84 5C 38 9C 88 2C 54 20 60 04 04 8C 04 00 74 14
48 14 00 0C 00 50 64 08 04 00 DC 14 08 30 DC 80 08 00 D0
80 08 00 DC 80 08 18 F8 80 08 18 F8 80 08 18 F8 80 08 00
D4 80 DC 04 00 F8 6C B0 70 78 3C D4 20 40 AC B4 00 00 A4
B4 D8 C0 58 CC BC 98 94 70 BC DC B0 B4 54 68 CC B0 24 48
F0 94 40 3C C8 28 0C 70 14 38 D4 D8 D4 84 A8 9C 00 5C 2C
F8 AC 10 18 F8 80 28 D8 B8 BC 70 94 74 CC 20 0C 5C CC 0C
74 AC 30 A8 58 8C A4 D8 C0 A4 64 F8 50 24 F4 84 B0 10 54
34 D8 E0 18 C4 00 B4 24 A8 98 CC F4 70 20 40

[04:27:48]
A0 B0 00 00 14 B0 00 00 00 00 20 40

[04:27:49]
A0 B0 00 00 14 B0 00 00 00 00 20 40

[04:27:50]
A0 B0 00 00 14 B0 00 00 00 00 20 40

[04:27:51]
A0 B0 00 00 14 B0 00 00 00 00 20 40

[04:27:52]
A0 B0 00 00 14 B0 00 00 00 00 20 40

[04:27:52]
A0 88 00 00 0C 88 20 00 C0 04 60 B0 F0 00 0C 44 D0 24 10
70 F4 14 2C 10 98 64 EC 0C E8 68 40 C4 4C B8 58 4C FC 0C
1C 3C DC 24 A4 60 60 30 DC 48 18 88 B8 40 9C E8 C4 AC D8
CC 2C 0C B0 E0 2C 04 CC 2C 08 1C 48 44 48 10 C8 84 70 E8
4C 1C 54 8C F4 6C C4 0C AC 6C 54 80 B4 80 78 2C D0 08 58
C8 E8 C4 5C A4 74 58 A0 E8 9C 84 8C 04 2C E4 4C CC 8C D8
CC 50 80 4C 68 E8 54 20 D8 74 18 18 EC 80 9C D8 50 1C 3C
40 34 08 24 20 40 A0 88 00 00 38 88 20 34 84 04 FC D0 2C
10 DC 7C 30 38 54 2C 2C F4 9C 64 B0 F4 94 00 C0 48 70 FC
B4 48 14 C4 20 44 A0 88 00 00 38 88 20 34 84 04 FC D0 2C
10 DC 7C 30 38 54 2C 2C F4 9C 64 B0 F4 94 00 C0 48 70 FC
B4 48 14 C4 20 44

[04:27:53]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:54]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:55]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:56]
A0 B0 00 00 14 B0 00 00 00 00 20 44

[04:27:57]
A0 84 84 04 AC 84 00 F8 08 40 10 DC A0 78 04 60 A8 00 00
98 04 8C 8C 00 2C E8 68 F4 98 20 60 04 04 8C 04 00 74 14
48 0C 00 0C 00 50 64 08 04 00 DC 14 08 30 DC 80 08 00 D0
80 08 00 DC 80 08 18 F8 80 08 18 F8 80 08 18 F8 80 08 00
D4 80 DC 04 58 B4 C4 14 1C 94 EC 1C 20 40 AC B4 00 00 A4
B4 14 EC B0 08 BC EC 44 EC 14 C4 C0 30 7C 6C 14 8C 3C 98
78 68 EC 0C 14 6C 84 F8 2C CC 8C F0 E4 F4 10 5C D0 80 E4
5C 98 EC 1C E8 BC 48 8C 8C 80 10 10 20 10 A0 A8 B8 C8 80
C0 B4 80 5C 10 D8 64 18 00 84 04 6C E0 E8 88 D8 00 4C F4
E4 4C D0 C4 84 C0 A4 B4 00 98 B0 DC 24 20 40

[Shadow12128]

Hi,

I was wondering if there are any senior member or gurus out there willing to help me out. I have a dragon CAM (T-Rex v4.6) and I have problem decoding my sat provider since they change to NDS (provider ID 09AC).

I'm new to this and I hope someone could help to update the predator/saur files to include Measat 3 91.5E, tq.

I hope some kind soul could help me update this firmware to work with the T-Rex CAM (pls pls). I have DuaLabs CAS 3+ programmer and a valid subscription card. Any gurus who can help pls point me the right direction, thank you very much ...