Description:
Win32 console program to filter EMMs for Nagra providers from an EMM-pid log,
and output them in a format suitable for investigation with Caton or EMMStudio.
What's new:
Now NagEMMex stores EMMs in a logfile & only adds new EMMs.
EMMs for PK 2 are decrypted & stored in the log.
Key update EMMs for ROM 3 & 7 are interpreted.
Requirements:
Nokia 9200/9500/9600 with DVB2000, with SCSI connection to a PC.
On the PC, use VGrabber to stream the EMM-pid data to disk.
--- or ---
DVB-s card & MultiDec or WinDVBLive to stream/log the EMM-pid to a file.
Usage:
NagEMMex <source file> <provider> <parity key select>
The <provider> ident can be freely specified eg 4001, 4801, 7001, 7401 etc.
<parity key select> can take the values 1, 2 or 3. A value of 3 searches for
EMMs with parity key either 1 or 2 ie finds all EMMs. NagEMMex only decrypts
the EMMs if you specify PK 2.
NagEMMex now automatically creates a logfile for each Provider-PK, for example
the file _4001PK2.txt will be created & is used again to record the history of
your EMM logging.
In practice:
Stream EMM data from a Nagra encrypted channel with VGrabber's
SCSI->Streaming->Read_from_PID option. Buffer 4000, Mode: TS_packet_payload.
For the DVB-s, use Multidec or WinDVBLive's pid streamers.
Prov. Sat Idents PID Suggested size of log (MB) to capture keys.
ViaDig 30W 4001/4101 0075 20
TVCabo 30W 4801/4901 0075 20
Polsat 13E 7001/7101 0080 1
StrDig 42E 7401/7501 0075 0.5
Open a DOS window and run the program with for example:
F:\Nagra\Source\Release>nagemmex via_0x0075.bin 4001 2
Scanning file for EMMs.....
0001 C2 3f4001f33f24cd45fd08c0002505cd45bf20f33f24cd45fd0b c00425080dc3f5...
0002 82 3F400183410123A00000000000000000000000000000000000 00000000000000...
0003 82 3F4001FACD7AB74EA1CD7A30A604CD924FAEABAD0EAEB5AD0A CD7915A617AE26...
0004 42 3F4001FBCD456F430BCD44E8A604CD42AEAEABAD0EAEB5AD0A CD8354A617AE26...
0005 82 3F4001F3C6E050A12526A2CCE18F2408E31637251E1432CD7D 95AE07D60100B7...
0006 82 3F4001F33F24CD45FD06C001250CA6B4B7C0CD47C0C01B0120 EC810000000000...
0007 C2 3f4001f3cd6a0a502fcd68c6a604cd7df2aeabad0eaeb5ad0a 9d9d9da617ae26...
0008 82 3F4001F4CD69096685CD67A2A604CD7E0AAEABAD0EAEB5AD0A 9D9D9DA6E8AE26...
0009 42 3f4001f3cd6a0a4acdcd68c6a604cd7df2aeabad0eaeb5ad0a 9d9d9da617ae26...
Provider: 4101 ROM3 (new)
Key0: 1122334455667788
Key1: 8877665544332211
Total EMMs 9, added 9 new from 199 found for 4001 PK 2
NagEMMex will create the file _4001pk2.txt if it doesn't exist; if it does then new EMMs
will be appended to the log. "Intercambia firma" EMMs are shown decrypted in lower case.
You may open NagEMMex's logs in Vitiato's Caton, or Frodo's EMMStudio. The EMMs can
also be cut & pasted into Viriato's Sosia.
History:
1.0 Initial release
1.2 Write EMMs only once (filter duplicates). The number of unique/total EMMs are
displayed at the end of the output.
1.3 Append output to a historical logfile, adding only new EMMs to the database.
1.4 Bugfixes. Append information about pidlog.bin i.e. size, date stamp to logfiles.
1.5 Bugfixes. Tidy up console output.
2.0 RSA EMM decrypt routines added - nicked from Frodo's EMMfind. Thanks frodo ;-)
2.1 ROM3/7 key update EMMs are interpreted & the keys written to the log.
campag5242