seaboard18
06-08-2007, 06:45 AM
Some folks have reported an "unknown MECM Algo 20" error on some of the 400 channels, e.g. 431, 438, etc.
Apparently d*sh is using a longer CMD07 that is not handled correctly by the current eeprom bin. Not sure when they started using this.
In order to handle this CMD07 which is 8 bytes longer than the current eep is coded for, I've included this patch to apply to either your d*sh or b*v eep bin.
NOT the rom10.bin.
This patch effectively allows the larger CMD07s to be fully decrypted, thus eliminating the "unknown MECM Algo 20" error.
Has been tested in d*sh, but should also work for b3v should that provider start using the longer CMD07 (57h), if they haven't already..
Apply patch with nagraedit 4.1, or as the edit is only 1 byte...hehe...you can also edit the eep bin at location CA7F with the cemu debugger then save the bin, or other hex editor(remember offsets may be different).
Change at location:
$CA7F 27 ---> 24
Old
$CA70=AE0FD60110E7B05A2AF8C60304A14F27
New
$CA70=AE0FD60110E7B05A2AF8C60304A14F24
Apparently d*sh is using a longer CMD07 that is not handled correctly by the current eeprom bin. Not sure when they started using this.
In order to handle this CMD07 which is 8 bytes longer than the current eep is coded for, I've included this patch to apply to either your d*sh or b*v eep bin.
NOT the rom10.bin.
This patch effectively allows the larger CMD07s to be fully decrypted, thus eliminating the "unknown MECM Algo 20" error.
Has been tested in d*sh, but should also work for b3v should that provider start using the longer CMD07 (57h), if they haven't already..
Apply patch with nagraedit 4.1, or as the edit is only 1 byte...hehe...you can also edit the eep bin at location CA7F with the cemu debugger then save the bin, or other hex editor(remember offsets may be different).
Change at location:
$CA7F 27 ---> 24
Old
$CA70=AE0FD60110E7B05A2AF8C60304A14F27
New
$CA70=AE0FD60110E7B05A2AF8C60304A14F24