You probably didn't notice that the DCW for nano 01 is different than it should be. the 4th, 8th, 12th and 16th bytes are the control sums. Take a look:
TF1 HD
81 00 61 33 11 00 07 5C 00 06 35 A6 61 AD 1E 23
1B EB 37 37 C7 D8 07 58 54 E5 1D 8B 38 DA 14 59
54 B1 F1 8D D2 00 40 C7 1A 21 C6 F3 5F 25 89 C5
09 08 86 8D 2E A8 96 F2 E8 8F 84 BA 97 24 8F 19
B0 DE A6 0F B2 5C D5 83 61 5D 61 6D 41 73 DD BC
1B BF F6 F4 0E 92 F6 19 D7 CB EA E7 CC C5 32 81
7D 91 16 A8
dcw E6 22 33 3B F0 48 69 A1 42 4B AE 3B F8 2B 97 BA
E6 + 22 + 33 gives 13B, so the fourth byte is 3B
E6 + 22 + 33 donne 13B, So the byte is 4è 3B
F0 + 48 + 69 gives 1A1 so the eighth byte is A1
F0 + 48 + 69 donne 1A1 So the byte is 8èmt A1
42 + 4B + AE gives 13B so the twelvth byte is 3B
42 + 4B + AE donne 13BSo the byte is 12èmt 3B
F8 + 2B + 97 gives 1BA so the sixteenth byte is BA
F8 + 2B + 97 donne 1BA sdonc leSo the byte is 4é BA
Now, take a look at nano 01 which is on the HD channels.
80 00 61 33 11 01 07 5C 00 AC A8 D6 08 2D DD 47
07 73 53 1F 2D EA 76 CD 64 47 BC 5A 37 B3 50 5E
C6 74 27 54 F4 C0 17 8D 80 F2 36 ED B8 45 3A 3F
06 E5 1A 94 A8 9D 7B 88 E1 EE 07 C8 97 3D DD 99
AE EB 20 6B FD 3B 8E 85 15 0A E5 65 A2 8F E1 05
3C 1A 69 FD 41 0F 59 48 95 C4 25 C3 AA 87 F8 67
dcw D8 08 F4 8C B4 CF FB 3A 38 19 ED 56 E5 1B 4C B1
D8 + 08 + F4 gives 1D4 instead of 8C
B4 + CF + FB gives 27E instead of 3A
38 + 19 + ED gives 13E instead of 56
E5 + 1B + 4C gives 14C instead of B1
I think we need to focus on that why the control sum is calculated wrongly. Gentlemen, is there anyone who could log these ECMs on original boxes and put here the communication logs? E.g. you can use the Season/logger interface. Then we would have to check how the same ECMs are being decoded in Oscam or other softcam, e.g. newcs
The solution might be to implement a better calculation of these control sums for nano 01.Vous pouvez utilisez un season logger.
My colleague pointed out that Oscam has got automatic control sum correction
Code source
for (i=0; i<16; i+=4)
{
c=((er->cw[i]+er->cw[i+1]+er->cw[i+2]) & 0xff);
if (er->cw[i+3]!=c)
{
cs_debug_mask(D_TRACE, "notice: changed dcw checksum byte cw[%i] from %02x to %02x", i+3, er->cw[i+3],c);
er->cw[i+3]=c;
}
}
You can quickly test it by disabling this option and if it does not help, then you have to test the ECMs in original boxes versus the softcams.
Probably there is some sort of pairing in Seca and you'll have to dump the firmware of these boxes. Please check it out whether the original boxes have some glue on onboard chipsets. If not, then you should start organizing some dumps
Below you can find a dump of Polish Seca HD cam that was officially sold by the provider. According to my colleague, it may already have some pairing instructions which could have been used in your case. Maybe you have some debugging knowledge and you'll find out something interesting.
This course information and as each member is solely responsible for what he does with the information held on this forum.
