How To For Private Info In Cemu

[Crazy1_79]

See Texas Trophys post below: he made my how to very user friendly:

[Texas Trophy]

How To For Private Info In CEMU

===========================================
This is a How-To for private info in CEMU that Crazy1 79 wrote.
I am just cleaning it up and adding pictures to it.
===========================================

ok first off, I have tested this on seaboards 1.3.10AR and that is it,
I can confirm it is working on that

Files you will need:
- A working card image
- TSOP image (obtained in instructions below)
- Dish.bin (similar to card image but used in your CEMU file)
- JKeys
- Flashedit
- GentDT
- AIO clone utility available here:
http://bellexpress.vu/forum/local_li...d=64#linkid397

============================================
I HIGHLY RECOMMEND YOU CREATE A SEPARATE FOLDER TO PUT
ALL THE BIN FILES THAT YOU ARE ABOUT TO USE/CREATE. THE
CEMU FOLDER IN THIS HOW-TO IS NOT THE SAME AS THE ONE USE
FOR THE ACTUAL EMULATION.
============================================

Steps For Marrying The Card Image To The TSOP Image

1. Using JKeys, save your TSOP image.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht1.jpg


2. Open the image you just saved in Flashedit to verify checksums
are correct.
2a. If Flashedit says that it will not allow you to open the file because
checksums are not correct you must force an update to the receiver
by erasing the corresponding sector of the TSOP. If the receiver
gives the same error, do it again. Repeat until Flashedit lets you
open it. (This may take 5-10 times)

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht2.jpg


3. Using GenDT, open your TSOP image.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht3.jpg


4. Now select “Card Information” then select the “Rom 102” radio
button and open the working card image you want to use.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht4.jpg

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht4.1.jpg

4a. Check to make sure all of your “TSOP Information” & “Card
Information” (Cam ID, IRD, Boxkey) is correct. If not then edit them
now.


5. Select the “TSOP RSA” and wait for calculation then “Card RSA”
and wait for calculations again.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht5.jpg

5a. If you are using a legacy receiver (i.e. 2700-4900 and 301.010)
click on the calculate button on the right hand side of the screen on the
"TSOP Information" page.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht5a.jpg


6. Select “Save TSOP” and save it in your cemu folder.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht6.jpg

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht6.1.jpg

[Texas Trophy]

7. Select “Card Patch” and then select “Check Patch”. If the test
passes then select “Apply Patch”.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht7.jpg

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht7.1.jpg


8. Select “Save Card” and save it in your cemu folder.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht8.jpg


9. Select “Save Keys” and save it. This will allow you to clone all
future receivers to these numbers and you can use the same 102
image. (This only works if all receivers are legacy or DP you cannot
interchange two.)

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht9.jpg


Steps For Writing The TSOP To Your IRD

10. Using JKeys, select “Flash Programming”.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht10.jpg


11. Select “Erase” to erase the TSOP. (I recommend doing this 3
times)

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht11.jpg


12. Select “Program” and select the TSOP you just created in GenDT.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht12.jpg

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht12.1.jpg


Steps For Creating The Card Image To Use In Cemu

13. Open the “AIO Clone Utilitly Tool” application and select “Blue
Clone”.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht13.jpg


14. Open the card image you just made in step 8.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht14.jpg

[Texas Trophy]

15. Select “Perform Calculation”

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht15.jpg


16. Select “Create EP10 Patch” and it will automatically save the
patch in the same folder as your card image. Note the name of the
file.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht16.jpg

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht16.1.jpg


17. Open GenDT again and select “Card Information”, leave
the “Rom 10” radio button selected and open your “dish.bin” file.
Note: If you can’t find your dish.bin file in your folder, then select the
drop down from “Type of file” and select “All Files”

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht17.jpg

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht17.1.jpg


18. Select “Card Patch” then open the patch you just made in the
AIO Clone Utility.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht18.jpg


19. Select “Check Patch”. If “Patch Is Valid” then select “Apply
Patch”.

http://i102.photobucket.com/albums/m88/TexasTrophy/How%20To%20For%20Private%20Info%20In%20CEMU/cemuht19.jpg

20. If “Patch Applied Successfully” then select “Save Card” and save
it in your cemu folder. NOTE: THIS FILE YOU JUST CREATED MUST
GO IN THE ACTUAL EMULATION FOLDER.


That is it guys. Takes two minutes. I successfully did this on a 510
with SK's still in tact.

============================================
IF YOU HAVE ANY QUESTIONS CONCERNING CEMU, PLEASE DO NOT
ASK ME. I DON’T HAVE A CLUE ABOUT CEMU. I CAN ONLY HELP YOU
WITH JKEYS, FLASHEDIT, & GENDT08. I AM MERELY MAKING
CRAZY1 79’S HOW-TO CLEARER TO UNDERSTAND.
============================================

[JT]

This is great TT. Nicely done. I'm going to see if I can combine the threads into one sticky.

[Texas Trophy]

Thanks JT. If I were you I would have put the How-To first then added the
important stuff from the first thread and get rid of the non important stuff. But
that's just me. HEHEHE

[duh1]

i can't get the aoiutil to run. i have downloaded it numerous times samtning. runtimerror339 gownladed tabctl32.oxs and put in the folder still no go. does anyone know another place to get it, im pulling my hair out need help and sleep Regards Duh1

[JT]

Thanks JT. If I were you I would have put the How-To first then added the
important stuff from the first thread and get rid of the non important stuff. But
that's just me. HEHEHE

I'm not that 'hands on'. You and crazy are welcome to get together and edit this thread how ever you see fit. You really clarified Crazy's how-to, so perhaps it would have been better to leave your post as a seperate sticky. Either way, there is a bunch of good info going on in this thread. I don't see how anyone couldn't get it done with this much help.

[j0e]

Does anyone have the latest GenDt08 *.cfg for dish 6000 ....to use with the combined Tsop program

[duh1]

serously guys i need help with AOIUtil. can't find it anywhere else. have downloaded it numorous times. won't work. iv'e cleaned the registry, i updated windows, put the missing .ocx in the zip file. nothing works. please help! Duh1. hell mabe someone could pm me one that they know works and i could try from there. i'm grabbing at straws now somebody got to heip me out

[Crazy1_79]

That fixed the grey out issue. Went back and followed your how-to's exactly again, (both of them) and am now running private numbers with a boot disk version of Cemu. Confirmed working with at least one version of Cemu other than Seaboards. Thanks for your patience Crazy. Now I got to get it going on some 301.10's. I never would have figured that change in the .ini for GenDT08 without your help.:)
JT, i used to put the session key in manually for single 013's until i figured that out. It was a real pain in the ass man. LOL

[somar]

Can I follow this guide if I have a 2700 ? I'm asking because I follow a similar guide and didn't work (maybe I made a mistake)
Also tried something else and I got confused with SK and DT08, still am ,but i'm reading

[socawarria]

Is charlie targeting public IRD and BOX Keys as well? If so can a
private info from a 301.13 be used on a 301.10? I mean can you just
copy the box and ird keys from a private 301.13 tsop and edit it to the 301.10
tstop through flashedit?

Thanks

[tparks80]

See Texas Trophys post below: he made my how to very user friendly:
I have combined Texas Trophy's several threads into one downloadable PDF.

Sorry ....... not able to upload PDF file.

[Texas Trophy]

The How-To has been fixed at step 5a for the legacy receivers.

[duh1]

thanks TT maybe i can get this thing going. i was close on my 2800 had guide in black but no pic except for the usual promotion crap. i'm tired but think i'll give it one more shot tonight. thanks again and best regards Duh1

[Crazy1_79]

that is what is nice about having a rom 102, once you get the image, you can program the card real quick, verify you have tv. if not then you know issue lies in card image/tsop marriage. not in something you did farther down the line.

[felix the cat]

Been doing more reading than asking questions.
I finally got a tsop from one of my irds ( 2800 ) that the checksums match.
Using that tsop in gent08 i ,and my clean 102 image i can edit my new prvt # from mili to card and tsop,save tsop and now when i open in flash edit everything looks right! .
However i never read about writing a virgin eeprom from the new tsop i created in gent08.
In the past i always made a vigin eeprom in flash edit when i edited
any changes.

[cypherp5]

If I apply this to my 301-010 will my plastic rom 102 card still work in the receiver?

[catman]

what if you have an 811 with bin info and want to use an atmega to clone?

[mannybeef]

17. Open GenDT again

was i supposed to close it entirely or leave it open and just minimize ?

i am having more trouble, followed the guide over 50 times.

i used the guide here for private with atmega.
i did get that working.

can i use the tsop and rom 102 i made with the private atmega with this cemu guide ?
the only difference i can see except the using AIO stuff is you say in this guide to do the card patch.

i would really appreciate it.

[day_tona2]

anyone get this working?
tryed and all black screen every time...

[desrever]

Not a good Idea unless it is someone you can trust but here is a little help that may get you going. With a DP301.10 rec anyhow.

et a Good hex editor with search and replace.

and whatever you need to get the below info.

;ird #forward XXXXXXXX
Search For 02AF04CA
Replace With your Info

;ird #backward XXXXXXXX
Search For CA04AF02
Replace With your Info

;Boxkey XXXXXXXXXXXXXXXX
Search For FDBF2E56AFFA7264
Replace With your Info

;Camid XXXXXXXX
Search For 1B2C3F1D should be 2
Replace With your Info

Using AIOCloneUtil
Getting Dt08
Look for this 002DC5C248
On your screen in AIO you want everthing after FFFF49 it will look something like this.
0C000A54540A13078D5C080108FFFF49 <<Start of data -- Data we need to replace >> 002DC5C248+ lots

more data
DT08 (0A)
Replace With your Info

***Getting Dt06 This is for Rom 102 to Rom 102 only
Look for this D993BD966F80073339E680E39626CCCC00C935DFC4067044
Replace With your Info


***Below is for Rom 102 to Rom 10 Only

;*** XOR Camid This is only when doing ROM10x to Rom10
Search For E4D3C0E2
Replace With your Info

Now using AIOCloneUtil under Blue Clone
Now to get 2b Public - N and 2b private key - d
First click edit and uncheck auto calculation.
Now highlight and copy your DT06 (0D) Data
Now click on To Clipboard
Now paste your DT06 Data
Now Click on Expand DT06 0D
Now Click Swap button for N(P*Q) and D
Now you have your 2b Public - N == N(P*Q)
Now you have your 2b private key - d == D

Now Replace those using the method below

find 2b Public - N
Search for A7F72FBFD4 this is the first 10 bytes only you need to replace them all
Replace with yours

find 2b private key - d
Search for BBFB7A8B6A first 10 bytes only you need to replace them all
Replace with yours