Dishnet and BEV is fucked, N3 is whored out.

[mili]

News coming out, the nFusion people were able to whore out a N3 (ROM240) card over a card sharing network. This is NOT a N3 hack, it is simply taking control words from a subbed N3 card and sharing the keys over the internet with network enabled boxes. Charlie is officially fucked. There is no way to prevent this kind of an exploit with their current hardware, they'd need to swap all IRDs and cards out to put a stop to this kind of an attack. Contrary to popular belief and myths spread by their competition, there is no practical way for the ISPs to cough up IKS clients, there is no way to put a stop to this exploit, with the servers overseas, without logging I bet and on the move not to mention the clients' ability to use proxies there is no way to ECM these units. No way stopping them from entering the USA since FTA is 100% legal. More and more FTA manufacturer will jump the IKS bandwagon most likely by selling IKS "dongles" that plug into existing FTA IRDs connecting them to the Internet.
I am therefore asking suppliers of the nFusion receivers for a reseller deal and if Viewsat or Coolsat people have a working dongle with IKS setup I will ask them to quote me some prices on those goodies as well. If you know such a supplier ask them to contact me. WIth their USA and Canadian dealers harassed the way they are I am sure they and their customers will apreciate a reseller for said hardware who is really offshore and 9 years established.
So there it is guys, the race been won before the runners even get off the block. Dishnet and Bell is officially FUCKED. There is no need for a card hack at all, no more programming of cards, receivers, nothing. No ECMs, no hassle. I wonder how long before they support DTV. With the economy as is I would not surprised if Dishnet went bankrupt in the next few years.

mili

[mtmt1us]

Wow, I can hardly wait to buy a new Viewsat from Mili. Raccoons rejoice !!

[Trapofmind]

Do they have an HD DVR version?

[mili]

I am in the business of making money and it seems like nFusion is where the money is. I will not bother selling Viewsats, maybe dongles for them. Small, controversial and easy to ship is my motto :)

mili

[duh1]

now thats funny

[ellsmako]

First OJ is actually convicted of something, now the racoons have fucked the homeowners while they were sleeping, and threatning to do the same to the neighbors cat, guess it would have been better for them to just feed that racoon in the Bahamas.

[mili]

The world is coming to an end.

mili

[althor123]

i hope they do dtv also just so it evens the playing field. i know alot of people have enjoyed alot of tv due to charlie its only fair :p

[HCCAfan]

they are doing the dtv equivelent with card sharing over the pond so ive read

[old school]

Let me get this straight...will you be able to view dish and bell on any fta receiver with the right attachments?

[Crow 492]

Let me get this straight...will you be able to view dish and bell on any fta receiver with the right attachments?

Nfusion HD Only at this time.

All other IKS/Dongle will probably come out with the same software.

FTA units that don't have IKS/Dongle we will just half to wait and see what happens.

This does not mean that N3 is hacked but yet breached. Once you see a FTA bin out that does not need the internet you will be all able to breath a little better.

But it is a start.

[Crow 492]

C/P

Nfusion is using subs to accomplish what has been done today.

Not that i am undermining the fact that they did get pic on some of the nfl st channels. just want users to be informed of what this is .
1. N3 is not broken,
2. This was done with subs only, reason for only few channels
3. Full cardless will not come out on nfusion for n3, because it is not hacked, just card sharing.

Just a fyi before the hype gets out of hand about hacked n3, Only card sharing not hacked.

thx
verify

[althor123]

yeah this is simply a work around. from what i understand it is a bev card that is being used. bev can (with difficulty) track down which card has been compromised and shut it down. this would be even more complicated with dish since there will be around 14million cards to track down.

[Crow 492]

Nagravision 3 Work Around Released Today!!
C&P from Paramount 10/5/08

Nagravision 3 Work Around Released Today!!

This is worth a front page mention, and it is good news for the entire satellite community for the years to come. Nfusion has released a work around for the Nagravision 3 encryption system in use by Bev for NFL Sunday Ticket. As of right now, Nfusion users can view NFL Sunday Ticket while plugged into the internet with their Nfusion. Expect Neosat and other IKS receivers to have similar work arounds available in the near future.

I am told this was accomplished by Nfusion using a subscribed Bev Smart card in one of their servers, which than lends the encryption code to any Nfusion connected to that server. Let me stress, this is not a hack, this is a very simple work around, which I believe will have bev on it's toes scrambling to patch without any decent recourse for the next few days. In essence, they will have to find out which exact Nagra 3 smart card is being used in order to patch this hole in their system. They will need the exact number of that card. Whether that is obtainable through connection to the Nfusion server, by Bev, is unknown at this time. If it is, do not expect this to last very long. If they are unable to find out the smart card number, they will have to determine, which of the thousands deployed right now it is, and specifically shut down that card through the stream.

This is good news. As most of us know, Nagravision 2 was not fully hacked until the final days of the scaling back of Nagravision 1. First we saw carded hacks for the weak Rom101, than emulation hacks for DVB cards and hours after, hacks for all makes of FTA Receivers. I will stress again, this is not a hack, but a step in the right direction, which can better help the coders understand the workings of Nagravision 3. We will not need a real hack anytime soon, so to see this so early is promising. It will be interesting to watch how long it takes Bev to close this loophole, if they can at all, permanently. It will be much harder for Dish Network to close a loophole like this when they have to pick the card out of the 14 million Nagra 3 cards they will have in deployment by the time they have finished their swapout. Even if they can find the card, they will never be able to permanently patch it if that was their only recourse, as Nfusion will just switch cards, starting the process over again. Dish Network will need to lobby hard to have receivers with Ethernet ports made illegal to import. Even at that, they will not be able to stop dealers from selling Ethernet ports separately from FTA Receivers, as there is nothing illegal about an Ethernet port with a USB adapter. The game only gets more interesting as time goes on!

[Praxis]

Basically as it stands now. Everybody else with a receiver and card will be switching over to FTA unless a card hack comes out. Or at the very least - will an emu version be available for the rest of us.

[althor123]

if fta manufacturers have any sense they will use this opportunity to ditch their older boxes and only offer dongles for their hd type boxes. its just a matter of time before !hd will be basically obsolete anyway

[spanky macdouga]

atta boy, mili! if you can't beat 'em, join 'em. May sales be brisk for you. Also, thank you crow for the very informational update. Now...will they ever hack Dave? Time will tell.

[Zerokill]

The secret's out...the nFusion's on Fleabay just went up $25. I think I will wait for Mili to get some stock and get one from him.

I hope the ROM102's last at least until Christmas....that way I can have some FTA's under the tree instead of just sitting on the TV with a bow on it!!! LOL

[McLovin]

i'm going to wait and buy my fta from oj.

[Hopey007]

What about different control words for every station? If this is not the case, a dual tuner could act as a control word supplier and receiver from a basic sub with a major firmware mod. Just like the cband days, pay for a little get it all.

Hopey

[HCCAfan]

the current receivers out there dont have the ability to do much else than what they are doing now, or else we would have seen greater ecm's towards the fta market already.

[mannybeef]

sounds too good and too easy lol


everyone will have to buy a new nfusion fta box
for this to work i would think

unless they wanted to allow dish and bev to find out what
the way to configure the box would be to allow share

interesting approach

[HCCAfan]

reguardless of how long the up-time is or how many times the provider counters, this is a slap in the face to them with an easy defeat. mili said it right when he said they are fucked.

[Crow 492]

NOTICE!

Its going to be interesting when it comes to PPV channels its not like they will be able to order each time so FTA members can receive them. To make things clear you will not be able to receive PPV Movies unless the card is cracked . It would be too easy for Bell/Dish to find the card # and kill it out of circulation.
IKS/Dongle will be sharing the package that they pay for to put on to there servers.

[NYSE]

so let me see if I get this.
IKS server has at least one real sub connected to it, probably through some logging system to get the CWs. Then it broadcasts the CWs out to the STBs, or the STB requests the CW and then receives it from the server. One of the two right?

Wouldn't that mean that the servers would have to sit within the sat's footprint in order to receive the stream? What is that footprint? I would hope the servers were not in US or CAN. Maybe Mexico? I'm sure these sats are not seen from Korea or Hong Kong right?

[johnnyjam]

Once the provider switches over to full N3 streaming, I predict with 99.999% certainty that they will speed up processing/transport of the cw's, making this work around useless unless you are sharing via a hard wired system, or perhaps a very fast lan. AVR1's were made useless for camless n1 by this same type of simple counter measure.

Too many lemmings listening to faketdg's bullshit...

[cerebral]

If you go to "euro card sharing . c o m " you will see that they have had the card sharing setup working with N3 for a while now but its not huge networks like Nfusion. Its 5 to 10 peeps.

[althor123]

if they made it useless for n1, why didnt they make it useless for n2?

[biker153]

read from another site
Nfusion did not hack Nagra 3

After having to read all these Bullshit announcements around the net, I thought I would put together a brief layout of what the Nfusion has done and why it is NOT a hack.

First let me start off by explaining a couple of things.

Your TV signal is Encrypted before it leaves the uplink center from your TV provider. The signal is gathered by your satellite dish and the beam is focused to the LNB . The signal travels down the coax cable to your receiver where the Smart Card and Conditional Access Module (CAM) process or decrypt the signal and you get video and audio on your TV. The security of the system is in the CAS. A providers CAS compromises of a Conditional Access Module (CAM) and a card. Some CAS only has Smart Card elements and other only CAM but it is assumed that the CAS has both elements in respect to the discussion of abstract security.

Fta receivers and BIN files

A Fta Receiver does what is called emulation. Emulation is in the BIN files you load to your receivers and basically means the software loaded into the Fta Receiver can now process or do the functionality of CAMs and smart cards in a providers receiver. This is sometimes called "stand alone".

Fta Receiver and card sharing:

A person with the subscribed card runs a Card Server on their reconfigured open receiver and listens for client communication on a given port (Here is the only risk with IKS but it is a huge one because it must get your REAL information. I.E serial # and IP). Entitlement Management Messages (EMMs) and Entitlement Control Messages (ECMs) are sent by the clients to the server which in turn decrypts and returns the control words used to scramble the content. The server carries out a unilateral authentication of the clients using the legitimate card and continues to exchange ECMs and EMMs allowing clients to access encoded DVB programs without subscriptions. The Card Server gives each client a thread and this is the only limiting factor of the network. The Server can only support as many clients as the card allows.

The risk or flaws of IKS/cardsharing.

The flaw with card sharing Nag3 (or ANY of the newer forms of encryption) is the card has knowledge of behavioral contracts and once violated it would deny services to the accessing box. In other words, the provider has a way to see how the card is behaving and send alerts when it see something that isn't right. So it limits the number of people who can be connected to the card server at one time. This probably explains why Nfusion only opened the server up for the HD units.

So there was NO hack of Nagra 3 by the Nfusion. What there was, is a PUBLIC test of the limitations of a card share sever. Nothing more then a sales tactic. DO NOT be fooled into thinking Nagra 3 is hacked wide open or even close at this point. Nagra3 is hacked in Europe but ONLY small servers doing card share and no emulation bins are running at this time.

[althor123]

of course anyone who has actually read any of the info coming out, never once does anyone say there is a hack. they all say its a WORK AROUND. this by no means there is a hack. it does give "testers" some confidence in the old adage: if there is a will there is a way. and mili is right when he says they are fucked. you can bet your bottom dollar nagra 3 will be compromised its just a matter of when.

[spanga]

even if at the end of the day all they can supply is reg channels without ppv..........i could care less if it's a workaround, sub card sharing or a few witches sitting around a dead chicken.....still better than nothing...... which alot of platforms might degrade to

[mili]

Don't be so sure about the PPV. They can purchase them as well and whore it out. Nobody said the N3 was hacked, I said WHORED OUT. Also there will be some interesting news coming out this weekend if all goes well. You will hear it right here.

mili

[oldlumber]

Let me guess................................, they have touched the untouchable haven't they.

[spanky macdouga]

Don't be so sure about the PPV. They can purchase them as well and whore it out. Nobody said the N3 was hacked, I said WHORED OUT. Also there will be some interesting news coming out this weekend if all goes well. You will hear it right here.

mili

The suspense is killing us!:eek:

[pecker88]

Not a doubt in my mind about N3 being busted wide open, especially if they were retarded enough to use a ST19 microprocessor in it. There is simply too much known about that chip for it to EVER be secure. N@gr@ has a horrible reputation of implementing compromised technology in the newer generation cams.

Just like N1-N2 conversion, the spoofs came out first. This will likely be followed by a rumored hack where someone posts a video of the supposedly hacked cam then it will be payware, then will get leaked and bam...we have public hack. This will all be followed by emu and 102/103-241 code and so on and so on...

[McLovin]

does this mean that fab5 is finally coming out with his usb iks solution?

[Ohms]

Don't be so sure about the PPV. They can purchase them as well and whore it out. Nobody said the N3 was hacked, I said WHORED OUT. Also there will be some interesting news coming out this weekend if all goes well. You will hear it right here.

mili


Well boss man, I believe it's the weekend. Any interesting news you would like to share with us?

[satnutzz]

.................me thinks mili haz built some N3 machine wit old cPu'z & rom 10 kardz...........

OH--how come yer avatar isn't munchin a purpell kard yet Mili???

[mannybeef]

well its still the weekend lol

i have a feeling its the sox hack finally, well see

[pecker88]

Don't be so sure about the PPV. They can purchase them as well and whore it out. Nobody said the N3 was hacked, I said WHORED OUT. Also there will be some interesting news coming out this weekend if all goes well. You will hear it right here.

mili

me thinks the "if all goes well" didn't go so well....
We'll see

[satnutzz]

........naa,he's just makin shure it werks 2day on sunday tikket on bev:p

[Sportz]

The good ole atmega card has been a tough brute for us over the years. It was dead and resurrected more times than i wish to count. My guess it has more lives than a cat lol. Don't toss them out just yet...

[mili]

Well the news is there is no news yet.

mili

[franky932]

well is the iks work this week with the nfl sunday ticket?


ty

[cerebral]

The news that milli is talking about =ROM240 cards are now being programmed in Canada. $250.00 US. Walk in only. You have to be vouched for and verified by at least two different people (known testers) before they will even talk to you.

[NYSE]

LOL@cerebral.....
I seriously doubt that

[old school]

The news that milli is talking about =ROM240 cards are now being programmed in Canada. $250.00 US. Walk in only. You have to be vouched for and verified by at least two different people (known testers) before they will even talk to you.

LMFAO!

[satnutzz]

Well the news is there is no news yet.

mili





HOLEY SHAT......I waited ALL weekend.....MISSED my turkey dinner....WAITING patiently......FOR ANY WORD from you.......and that's ALL you have to say????:eek:

I mean,ya could of at least thrown us all some small bone.....I dunno.....mebbe.....you n snags "love child" is startin pre-school??:rolleyes:


...............lmao.....AT LEAST......foto shop a PURPLE card in yer mouth.........Oh the timez,they are a changin..........:D

[franky932]

nfusion advertising!!!!!!!!......for more sales.

if all fta companies come with a dongle that connecte to the rs232 port like

captain did...... i will be a great idea.

they will continue to sell their fta plus the dongle.

if not they will not sale many of their existing FTA in future weeks or month.


:o:o

[verify]

comm'on milli, the reason nfusion hasnt came out with cardsharing on nova yet is because current iks system will not handle it.

reason it came out on the hd first low user load, it is just testing at this point of course.

IMO what everyone should be looking for is stable iks which noone has including nfusion all iks at this time has problems, freezing, rebooting reciever , missing channels list goes on.

without stable iks, n3 card sharing is no good, i am sure stable iks is out there waiting, get stable iks with n3 then you have got something.

thx
verify

[franky932]

i did not know that others IKS FTA had problems.....i did not see on any forum that they have problem? are you sure100%?

[verify]

kbox is always having iks problems as is the captain, coolsat is haveing problems period and nfusion iks is always diconnecting and freezing, lots of units having the iks freezing problem. neosat iks doesnt have all the channels, also has the micro freezing problem.

and n3 is a lot faster with longer commands, so yes stable iks will have to be attained for n3 to function properly

i am pretty sure

thx
verify

[mili]

I may still have a surprise this week ;) Some things are worth waiting for. Building up the excrement, oops excitement is crucial. Lets just say when the front door is locked climbing in through the window in the back is a great idea. I can't say shit until I tested what needs to be tested.

mili

[McLovin]

i hope it's a good tale from the cookie monster.

[319]

I have been told a iks dongle is being made for use with dik boxes

[wilmero]

I have been told a iks dongle is being made for use with dik boxes


That's not the news Mili is talking about. Look for the card in mili's avatar to be purple soon...

[spanky macdouga]

I may still have a surprise this week ;) Some things are worth waiting for. Building up the excrement, oops excitement is crucial. Lets just say when the front door is locked climbing in through the window in the back is a great idea. I can't say shit until I tested what needs to be tested.

mili

Holy shit!:eek: could this be a dave hack? your analogy sounds familiar.

[franky932]

The news that milli is talking about =ROM240 cards are now being programmed in Canada. $250.00 US. Walk in only. You have to be vouched for and verified by at least two different people (known testers) before they will even talk to you.


never heard of that...........

[NYSE]

The best predictor of the future is the past. If you want to speculate on what kind of product Mili is talking about, just take a look at the products that he has promoted in the past. I'm willing to bet it will be in that vein.

Whatever form this ends up taking, I can't help but think it will be something that people will want, and will be willing to pay for. Remember, this is a commercial site that is only here to support and promote Mili's business, and there is nothing wrong with that. People just need to keep it in mind when they set their expectations.

[franky932]

The best predictor of the future is the past. If you want to speculate on what kind of product Mili is talking about, just take a look at the products that he has promoted in the past. I'm willing to bet it will be in that vein.

Whatever form this ends up taking, I can't help but think it will be something that people will want, and will be willing to pay for. Remember, this is a commercial site that is only here to support and promote Mili's business, and there is nothing wrong with that. People just need to keep it in mind when they set their expectations.

okkkkkkkkk i did not know that it was a commercial forum.........

[verify]

kool

milli hope you are right only a couple things that can be done i wont say what they are , dont want to spoil milli surprise

we will see

thx
verify

[spanga]

not sure how nf was able to run all the nova boxes on n2 and somehow the same technique isn't available to the same number of boxes on n3????....i'm sure there is a simple explanation but it escapes my feeble mind.....maybe setting up to accept bins asking for both is difficult since both streams are there and hidef guys indeed in fewer numbers......i figure cardsharing is cardsharing.......i've semi committed to whatever they are doing and could really care less if it crashes and burns, but the track history does indicate that they are onto something other than else.....or not......lol

[A-Team]

C is for cookie that's good enough for me. Cookie,cookie,cookie starts with c. ;)

[rg6a]

In the past 60 days within 1 mile three new FTA stores have opened. The first two on a busy venue, one is strictly FTA and the 2nd computer and FTA. The former owner/sales clerk is definitely East Indian, the latter sounds like a Slovenian accent.

The 3rd store is in a subdivision plaza and think it used to be a shoe repair as it's really tiny. All FTA, carrying most popular makes and had two TV's running with the known compromised providers.

Noticed eight white rg6 cables coming down the wall, so he must have several antennas on the roof. I asked abouit Nfusion and he laughed and said not to waste my time. He mentioned a model that has a card slot and went on the others use a USB stick.


I know nothing about FTA but have heard they have lousy Video, well what I saw was just as sharp as what I'm getting on plastic.

The last guy was Russian, his wry smile seemed to denote he knew something and perhaps I was imagining or wanted to imagine that.? ;-)

[spanga]

says ''don't waste your time on nfusion''.......read ''i can't get my hands on any to sell ya''..........lol

[rg6a]

says ''don't waste your time on nfusion''.......read ''i can't get my hands on any to sell ya''..........lol


Had a stack of them in the store but no HD units and said if you want HD will get one this afternoon. His comment was about IKS.

PS the Nfusion HD unit was $425, OUCH!

[spanga]

Had a stack of them in the store but no HD units and said if you want HD will get one this afternoon. His comment was about IKS.

PS the Nfusion HD unit was $425, OUCH!ya it's pricey for sure.......well if he poo poo's IKS that way then maybe there is something on the horizon.......sure hope so

[NYSE]

I would sit tight, and see what Mili has cooking. He has been in this business as long as anyone I know of. Longer than 99%. He usually has stuff that works.

[spanga]

i am therefore asking suppliers of the nFusion receivers for a reseller deal and if Viewsat or Coolsat people have a working dongle with IKS setup I will ask them to quote me some prices on those goodies as well. If you know such a supplier ask them to contact me. WIth their USA and Canadian dealers harassed the way they are I am sure they and their customers will apreciate a reseller for said hardware who is really offshore and 9 years established pretty much the only hint he's given so far.......

[mtmt1us]

Majic 3 coming soon to a theatre near you !

[rg6a]

ya it's pricey for sure.......well if he poo poo's IKS that way then maybe there is something on the horizon.......sure hope so

Frankly, I don't know and this was my first contact with this chap and he had perhaps half a dozen people walking in with USB keys.

Found out he just moved and has only been in this store for a week. Perhaps, he is just servicing and no doubt charging his Customers to 'recharge' their USB keys and judging from what I saw.............yeah that would be it.

This guy carried all the major brands...small store but piled up along the far wall. He also supplies bins via email to Customers that know what the hell that is.

From the brief time (10 minutes) I was there noticed that his Customer base are older non-computer folk that just want to watch TV and will pay for it.

Figure he's charging $20 a pop to update the USB key and frankly it's cheap TV for those that don't own a computer or know what to do with it.

That's all I can tell everyone, no Magic Cure for what is coming down the pipe. :-(

[spanga]

pretty brazen activity there.......let us know when he gets busted

[rg6a]

pretty brazen activity there.......let us know when he gets busted

Frankly, IMHO think he's doing a service to his Customers. The scenario reminded of another <T>hread here about someone wanting to get his Grandfather an FTA and asked questions.

The 'grandfatherly' customers depend on him, hence they walk in with a USB key and I only 'guessed' about $20 a pop, maybe $10 and every other time?

I imagine emailing the bins is free and part of the after sales support. Still, like if he sells someone an FTA and say makes $45 is he their 'slave' forever after and personally has to take the time and put a new bin on the USB key?

Nah, he deserves to be paid for the service for those that can't do it themselves.

PS using your thinking, Home Depot should come over and replace the faucet that I purchased from them 6 years ago, as the cartridge is worn out and leaking?

It's easy for us to say and do but mumbo jumbo for the majority of FTA FreetV'ers.

[EPROM512]

The whole issue of card sharing is not necessarily new Sky Mexico has been shared using Neosat Receivers for some time now, and it has been going on in Europe for at least 10 years in some form or the other. The real is is the info needed for setting up a private card server preferbly on a LAN this would be useful as it would make the individual much less of a target. One we can set up our private servers we will have the best of both worlds especially if the new cards are unlocked and dumped!

[spanga]

Frankly, IMHO think he's doing a service to his Customers. The scenario reminded of another <T>hread here about someone wanting to get his Grandfather an FTA and asked questions.

The 'grandfatherly' customers depend on him, hence they walk in with a USB key and I only 'guessed' about $20 a pop, maybe $10 and every other time?

I imagine emailing the bins is free and part of the after sales support. Still, like if he sells someone an FTA and say makes $45 is he their 'slave' forever after and personally has to take the time and put a new bin on the USB key?

Nah, he deserves to be paid for the service for those that can't do it themselves.

PS using your thinking, Home Depot should come over and replace the faucet that I purchased from them 6 years ago, as the cartridge is worn out and leaking?

It's easy for us to say and do but mumbo jumbo for the majority of FTA FreetV'ers.NO DOUBT he's providing a valuable service but to run it out of a store front and ya gotta know he's a heat score waiting to happen......maybe he's small potatoes in the sleazy underbelly of the fast paced, high stakes, pay tv piracy world but he sure has more balls than me (or is what he is doing perfectly legal in that neck of the woods).......lol.......the Home Depot analogy is kinda ''offside''..........*tweeeeeet*......lol

[vvhicke]

So any good news..........MILI

[sdeens]

the rumors are that the rom240/241 has been compromised, dumped. this is the purple card that BEV controls the NFLST channels and now more channels (i.e #300 for example) were moved over to N3 tonight on BEV; in summary about 8 more BEV channels went N3 on thursday afternoon.

so this is why the rumorville for rom240/241 is heating up. This was expected the minute I saw them migrate channel #300 and discontinue yesterday the "error #120: card expiring message" they were streaming exactly every 30 minutes on BEV.

if they compromised that new purple card then N3 is hacked and st19 emulation will probbaly be among the smartest ways to test it.

my guess is less than one month after BEV goes 100% N3, we will see private blockers from Mili and other dealers and then six months after that it will be leaked publically by one of their customers and then its free.

[Lynard]

i say they used iptv for the nfl, I for one think if they had the cws for real they would have put it on the nova as well for sure. wouldn't have been that big of deal if they really had cws. now iptv is diff, the chipset they bought for the hd probally comes with sw for that. now i could be wrong, was just a thought.

now iptv i can see where they could make that work with the hds, however they did it good for them.

one problem i see with it however, they are doing it with subs, who will pay for those subs? now just a couple of subs is ok to boost sales. but what about when all dish bev is n3.

I hope milli has good news for us besides this because i see it going nowhere right now.

[wilmero]

i say they used iptv for the nfl, I for one think if they had the cws for real they would have put it on the nova as well for sure. wouldn't have been that big of deal if they really had cws. now iptv is diff, the chipset they bought for the hd probally comes with sw for that. now i could be wrong, was just a thought.

now iptv i can see where they could make that work with the hds, however they did it good for them.

one problem i see with it however, they are doing it with subs, who will pay for those subs? now just a couple of subs is ok to boost sales. but what about when all dish bev is n3.

I hope milli has good news for us besides this because i see it going nowhere right now.

Dude, you're way off base! Read the post above yours again, and when you're done, read it again, then after that ... oh what the hell, maybe you want to read it again. :rolleyes:

[althor123]

im not a coder or tester in the least but i still think it was a very bad idea to start streaming the nfl channel so early. with the cards already being sent out and a stream it would seem they were giving all the necessary tools for the true coders to get a head start.

[ruciz]

my guess is less than one month after BEV goes 100% N3, we will see private blockers from Mili and other dealers and then six months after that it will be leaked publically by one of their customers and then its free.

I hope you guess right often. So what do you figure FTA will do? IKS until a public leak?

[Lynard]

Dude, you're way off base! Read the post above yours again, and when you're done, read it again, then after that ... oh what the hell, maybe you want to read it again. :rolleyes:


yea I seen that and hope it is true, but i thought the thread was nfusion had n3 hacked and I for one don't think they do.

just keeeping on topic.

thanks
Lynard

[spanga]

i have my doubts as well Lynard........i could understand N2 viewing via IKS with a hacked 102 cam at the head end and some very competent IT guys setting up the server (which by the way is what set them apart from all other attempts at broad stroke IKS)......i can understand NFL ST coming down the chute via a subbed cam, but i'll be darned if i can figure out what's going to do the math to bring in wide open N3 once all channels are flipped over......now that bev has started to cull out N2, we'll see if bullshit walks........i'm guessing money talks.............i have a semi well known disclaimer which boils down to JMHO.......lol

[Brugge]

i have my doubts as well Lynard........i could understand N2 viewing via IKS with a hacked 102 cam at the head end and some very competent IT guys setting up the server (which by the way is what set them apart from all other attempts at broad stroke IKS)......i can understand NFL ST coming down the chute via a subbed cam, but i'll be darned if i can figure out what's going to do the math to bring in wide open N3 once all channels are flipped over......now that bev has started to cull out N2, we'll see if bullshit walks........i'm guessing money talks.............i have a semi well known disclaimer which boils down to JMHO.......lol

Good point , I dont think anyone of us will know until N3 is here, I'm sure there will be plenty of Nuvenio HD models sold before we can really tell. My guess is that they are not going support it with the Nova and they will try to push users to the Nuvenio SD. If there is a breaking point, Nfusion will have made enough money to be able to walk away.

[sfg]

.....

[midgetcoach]

This thread keeps getting off track with "hack" . N3 is not hacked that we know of. It states that a subbed card is being shared over a network.
See the link earlier in the post of the euro forum about card sharing. If card sharing with D*SH and B*V receivers could be done then that would be something. We could use current equipment and have the added fun of networking. Free tvers can just go fta with card share.

[spanga]

for the sake of throwing something else into the mix here.....i've been running nf since almost day 1 of it's introduction and since then the guys running the head end have repeatedly denied that card sharing is the technique they are using.....in fact they did state running dave would not even be a problem.......some believe them and obviously some don't.......at any rate, the "Free tvers" you mention midget coach may well be the "Only tvers" for a while sooncome.......lol

[franky932]

the rumors are that the rom240/241 has been compromised, dumped. this is the purple card that BEV controls the NFLST channels and now more channels (i.e #300 for example) were moved over to N3 tonight on BEV; in summary about 8 more BEV channels went N3 on thursday afternoon.

so this is why the rumorville for rom240/241 is heating up. This was expected the minute I saw them migrate channel #300 and discontinue yesterday the "error #120: card expiring message" they were streaming exactly every 30 minutes on BEV.

if they compromised that new purple card then N3 is hacked and st19 emulation will probbaly be among the smartest ways to test it.

my guess is less than one month after BEV goes 100% N3, we will see private blockers from Mili and other dealers and then six months after that it will be leaked publically by one of their customers and then its free.


yes rumorville!!!!!!!!!!!


last time N1 to N2 (2005) remember (bell hacked): Fta came first (sept.2005)(dreambox) and other weeks after ........
and rom 102 :1 to 2 month after and not autoroll , it was not stable. FTA YES.

[franky932]

I may still have a surprise this week ;) Some things are worth waiting for. Building up the excrement, oops excitement is crucial. Lets just say when the front door is locked climbing in through the window in the back is a great idea. I can't say shit until I tested what needs to be tested.

mili

what did happen.........did the nuvueno and nova lost channel despite n2 to n3. last couple of days?

[rg6a]

NO DOUBT he's providing a valuable service but to run it out of a store front and ya gotta know he's a heat score waiting to happen......maybe he's small potatoes in the sleazy underbelly of the fast paced, high stakes, pay tv piracy world but he sure has more balls than me (or is what he is doing perfectly legal in that neck of the woods).......lol.......the Home Depot analogy is kinda ''offside''..........*tweeeeeet*......lol

The guy is a Russian and they do have big cojones, besides the six customers all were senior citizens and spoke to each other in Russian. This guy lived under the KGB, you think the RCMP would scare him? ;-)

Back to new 3 FTA stores opening within a mile of each other and two on a very busy street................something is going on!


PS I didn't bothing calling Home Depot. ;-)

[jocko50]

yes rumorville!!!!!!!!!!!


last time N1 to N2 (2005) remember (bell hacked): Fta came first (sept.2005)(dreambox) and other weeks after ........
and rom 102 :1 to 2 month after and not autoroll , it was not stable. FTA YES.

Ah no, 102 was first there bud. Maybe not publicly but it had to be! Then the rest followed. Always give credit where its due! cheers.;)

[rg6a]

the rumors are that the rom240/241 has been compromised, dumped. this is the purple card that BEV controls the NFLST channels and now more channels (i.e #300 for example) were moved over to N3 tonight on BEV; in summary about 8 more BEV channels went N3 on thursday afternoon.

so this is why the rumorville for rom240/241 is heating up. This was expected the minute I saw them migrate channel #300 and discontinue yesterday the "error #120: card expiring message" they were streaming exactly every 30 minutes on BEV.

if they compromised that new purple card then N3 is hacked and st19 emulation will probbaly be among the smartest ways to test it.

my guess is less than one month after BEV goes 100% N3, we will see private blockers from Mili and other dealers and then six months after that it will be leaked publically by one of their customers and then its free.


Oh shit, that's why 402(?) went dark...............guide showed UFC and info worked but dark screen. :-(

[franky932]

is that a joke or what?

[JT]

is that a joke or what?

No joke franky932. Card hacks in one form or another have always come first. FTA just takes along using the information gained from "card bangers".... as the most annoying guy in this hobby likes to call us.

If you wish to push FTA propaganda on folks, you'll have to do it at a site where they don't know any better.

[pecker88]

thank you JT

And for all u fta freetvers out there, after the 101 was cracked the firsts public emulator release was DVB. Then the FTA maggot coders stole there code and inadvertently "sold" it to market their junk stb's.

[alsouthster]

lol pecker
while you may be right, still waiting to see your reply to where you were corrected earlier today regarding your comment
"Aladin Smart Card" = N1, known as Rom2/3/10/11. Thus the whole thing is BS
in this thread
http://www.dssftp.com/forum/showthread.php?t=80159
;)

[pecker88]

lol pecker
while you may be right, still waiting to see your reply to where you were corrected earlier today regarding your comment

in this thread
http://www.dssftp.com/forum/showthread.php?t=80159
;)

chill out bro, i corrected my earlier post in that thread. Please, don't group me in w/ the freetvers, i'm far from it.

[alsouthster]

nah no prob pecker, yer cool, seen you provide a lot of good info for peeps over the while
just the hating fta thing is getting old
specially when mili gearing up to sell em lol

[ruciz]

unfortunately private card hacks may be a thing of the past... Only time will tell.

If no private cards are hacked we at least can see sub sharing will still work :)

At least until N2 is completely gone.... I remember 101 wasn't much change from 10 until they got going.

[Zerokill]

Don't know if this helps or not. I bought a bunch of those DN PrePaid receivers and was worried about the cardswap. I called Charlie's excellent (ya right) customer service and told them my dealer told me I would be needing a new card soon....I have the "Orange/Red ROM206"....They told me, no sir...your cards will be good for another year, they will not need to be replaced. I asked them to ask a supervisor to make sure...there was a pause and they came back to say, your cards do not need to be replaced, only certain yellow ones.

So, what do you make of this? I thought the ROM206's were getting swapped as well???

[sky-bandit]

JFYI,
"Aladin Smart Card" = N2
"Merlin Smart Card" = N3
Just in case anybody wanted to know.:)

[midgetcoach]

ruciz
If no private cards are hacked we at least can see sub sharing will still work :)
Can D*SH receivers be used in a card share network? How?

[Tim H]

Can D*SH receivers be used in a card share network? How?

I have heard rumors of this, but nothing as of yet.

[Benleo1]

Can D*SH receivers be used in a card share network? How?

There are people gearing up to build these devices in -where else? China. It is the same principle as ordinary sub-sharing. Instead of a bunch of people activating subs from a master subscription, they will share cards that have all the packages on offshore servers. The downside to this is that you must have these devices connected to your internet broadband connection at all times. There is also the possibility of Charlie tracing the connection back to you and Charlie infiltrating the card sharing network and deactivating the cards. Remember when Mili tried sub sharing? :)

[Zerokill]

I believe Mili used "orphan sub sharing" in that there was a master account and up to 18 receivers were "orphaned" off of that account, receiving everything that the master receiver did. This won't work with Charlie in that Charlie calls accounts with more than 4 receivers to check location IDs every few months to make sure that no receivers are being "orphaned" out.

[spanga]

i don't see any technical problem card sharing using regular receivers....i'd imagine it would be much like st or cemu except the required info would come from a server somewhere.......the problem i see is ''who is going set up and pay for the server and do the coding?''........fta has sales of units to support bottom feeding, lowlife, cull, free tvers.....lol......regular receivers, not so much......more likely to see small groups setting up their own network to split the cost of a big ass sub

[Benleo1]

i don't see any technical problem card sharing using regular receivers....i'd imagine it would be much like st or cemu except the required info would come from a server somewhere.......the problem i see is ''who is going set up and pay for the server and do the coding?'' more likely to see small groups setting up their own network to split the cost of a big ass sub

Setting up a secure off-shore server that can't be traced back to the end user is a big concern. You are right that smaller groups are about to set up their own networks. The problem is that there will be no PPV movies or porn unless customers chip in more money. They are planning on buying the sports packages.

Forget a fully functional N3 hack. I still think that N3 is Charlie's answer to Dave's P4 IMHO.

[midgetcoach]

I was thinking along the lines of small private networks. Maybe ten people getting togeather and sharing. I see it being done in europe by a lot of people on different providers. I have the epuipment to setup a server just not the know-how to pull it all off. With the help of others I would try it.
Where could you find the programing for a server to run a subbed card?
What receivers and what mods to them?
Also this must be a HD setup!

Not going to really do this just thinking.

[HCCAfan]

Forget a fully functional N3 hack. I still think that N3 is Charlie's answer to Dave's P4 IMHO.

eh, no. weak attempt at best..... programming will be a lil different, but testing will be the same....

[franky932]

fta come first after n1- n2 swap and rom102 after. i have the list.

[HuSatellite1]

Your list doesnt man shit, 102 was done long before the swap was complete...

I know, i had a card done long before anyone even knew of a hack

[franky932]

some coders try to open the 240-241 . the card block or lock when trying to wrote to the

eeprom of the CARDS. card scrap.

[JT]

fta come first after n1- n2 swap and rom102 after. i have the list.

Like I said earlier in this thread, do not try to push your FTA propaganda here. We know better. Your list is erroneous if it says anything other than a card hack came first.

[HCCAfan]

some coders try to open the 240-241 . the card block or lock when trying to wrote to the

eeprom of the CARDS. card scrap.
correct, some did loop their cards when trying old style tricks. some evolved and made new tricks, those are the ones u should be watching.....

[Benleo1]

some coders try to open the 240-241 . the card block or lock when trying to wrote to the

eeprom of the CARDS. card scrap.

Yup. Exactly what I've heard. I'm no coder but a glitch or a dump is useless if you can't write to the card. It's definitely different than all the previous versions of Nagra cards.

I wish the FTA guys could get along with the plastic guys. JT is right. Every FTA fix came after the plastic was hacked. It's possible FTA might have released something before the plastic guys, but it would have never happened had it not been for the plastic guys hacking it first.

[HCCAfan]

Like I said earlier in this thread, do not try to push your FTA propaganda here. We know better. Your list is erroneous if it says anything other than a card hack came first.

jt is correct. everything was based off the card hack. without the card hack, we would have sub sharing via iks.....

[NICKY__6]

thanks for this post it was informative

my only question is is iks using a card share for the n2 as well as the n3 and how does it work with so many users hooked up via iks

[HCCAfan]

Yup. Exactly what I've heard. I'm no coder but a glitch or a dump is useless if you can't write to the card. It's definitely different than all the previous versions of Nagra cards.




correct, it is different from some older versions, yet the same in some ways as well ;) We are limited on available codespace like rom2's....... very limited.....

[HCCAfan]

thanks for this post it was informative

my only question is is iks using a card share for the n2 as well as the n3 and how does it work with so many users hooked up via iks


it works the same way a game server works. your iks machine connects to the server to get the control words from it to produce video on your tv. the amount of users able to connect is based upon how many servers are working together and how fat their pipe is (internet connection @ the servers). I dont know how intensive the servers and bandwidth they have to have to support the iks, but i can imagine it would be alot less than what EA has for their game servers.....

[NICKY__6]

Yup. Exactly what I've heard. I'm no coder but a glitch or a dump is useless if you can't write to the card. It's definitely different than all the previous versions of Nagra cards.

I wish the FTA guys could get along with the plastic guys. JT is right. Every FTA fix came after the plastic was hacked. It's possible FTA might have released something before the plastic guys, but it would have never happened had it not been for the plastic guys hacking it first.


excuse me if i am wrong but i would think if u were able to glitch into the card enough to dump it you would be able to use that exact same method to write the information back.

the chances of getting an actual write hold into the card is slim to none and from history we can tell you dont always need it you just need to glitch or get lucky and pop into the card enough to read and write (HU,N2)

and i dont know about the private sector but i believe dreambox then coolsat had n2 running before i seen a public card script

[HCCAfan]

excuse me if i am wrong but i would think if u were able to glitch into the card enough to dump it you would be able to use that exact same method to write the information back.

the chances of getting an actual write hold into the card is slim to none and from history we can tell you dont always need it you just need to glitch or get lucky and pop into the card enough to read and write (HU,N2)

and i dont know about the private sector but i believe dreambox then coolsat had n2 running before i seen a public card script

eh, sorta..... the new cards have some defenses aimed at defeating this. we wont be glitching to open them, we will be glitching to write over them. Think of us doing exactly what dish does when they are about to send a sub'd card out the door....

as for public versus fta, my opinions are that fta forced a public release. but the private was there in some hands before fta. but like jt said as well as others, the fta hack on n2 was based off of the plastic being hacked, end of story. the real question is who hacked plastic first, plastic junkies or fta people...... I think there was some smart minds watching n2 cards way before the n1 stream ever shut down....

[franky932]

copy paste:
and i dont know about the private sector but i believe dreambox then coolsat had n2 running before i seen a public card script.

that is what i said from the beginning:+ i have the list from the beginning with all cha. with the date that go to n2

and what came first after: do you want it......it is the same that i saw in 7 forums :not here.

[franky932]

btw i have a fta hd and a 6000bell hd.....no preference

[Benleo1]

copy paste:
and i dont know about the private sector but i believe dreambox then coolsat had n2 running before i seen a public card script.



Exactly!! You don't know what was going on behind the scenes in the private sector. You only saw what was made public first. Just because it was made public first does NOT mean that it was not running privately on plastic before FTA.

[NICKY__6]

Exactly!! You don't know what was going on behind the scenes in the private sector. You only saw what was made public first. Just because it was made public first does NOT mean that it was not running privately on plastic before FTA.


100% agree that why i said it that way cause at one time i was in the private sector when we worked on a diffrent provider and i know we had scripts and hw way before any release

[HuSatellite1]

eh, sorta..... the new cards have some defenses aimed at defeating this. we wont be glitching to open them, we will be glitching to write over them. Think of us doing exactly what dish does when they are about to send a sub'd card out the door....

as for public versus fta, my opinions are that fta forced a public release. but the private was there in some hands before fta. but like jt said as well as others, the fta hack on n2 was based off of the plastic being hacked, end of story. the real question is who hacked plastic first, plastic junkies or fta people...... I think there was some smart minds watching n2 cards way before the n1 stream ever shut down....

Exactly, I had a open 101 long before it hit the net....
It was done by coders, Not FTA coders!

You can search my orig nick here HuSatellite, (Before i was banned)

At that time no one beleaved me. I knew the right people at the right time.

[HuSatellite1]

Just did a search myself, Seems the board here doesnt save info that old.... were talking 2005.
Anyways, i remember having long fights with smilingjack about the subject. :)

I dont really stay in touch with my old contacts, Since i no longer test.
But it will be interesting to see what happens


Sup, Nicky6..... Its been what? 7 years? im still lurking, Keeping a eye on the scene...

[NICKY__6]

Just did a search myself, Seems the board here doesnt save info that old.... were talking 2005.
Anyways, i remember having long fights with smilingjack about the subject. :)

I dont really stay in touch with my old contacts, Since i no longer test.
But it will be interesting to see what happens


Sup, Nicky6..... Its been what? 7 years? im still lurking, Keeping a eye on the scene...


man do i remember you !!!!!!!!!!

yeah im just doing reading
the game changed too much from our day dude

[HuSatellite1]

I think we orig met in 99-2000 at dssfilexchange, Yeah its been a while :)

[NICKY__6]

that sounds about right maybe even a little before that at pirates den

[sky-bandit]

In case you guys missed it. This was posted at the fake C.C.
Tis claimed to be rom240, disclaimers say its s0x.
Could they both be right in a way? Time will tell.
Posted by: thebroken

$00:$4000: (05) 00065A btjt0 $06, $405D ; Branch to $405D if $06.0=1
$00:$4003: (00) A7
$00:$4004: (03) 2029 jra $402F ; Branch to $402F always
$00:$4006: (00) A7
$00:$4007: (02) 9D nop ; No operation
$00:$4008: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$400B: (06) 81 ret ; Return
$00:$400C: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$400F: (00) A7
$00:$4010: (03) 2025 jra $4037 ; Branch to $4037 always
$00:$4012: (00) A7
$00:$4013: (02) 9D nop ; No operation
$00:$4014: (03) 202C jra $4042 ; Branch to $4042 always
$00:$4016: (00) A7
$00:$4017: (02) 9D nop ; No operation
$00:$4018: (05) 3F0B clr $0B ; Clear $0B
$00:$401A: (03) 205E jra $407A ; Branch to $407A always
$00:$401C: (03) 202F jra $404D ; Branch to $404D always
$00:$401E: (00) A7
$00:$401F: (02) 9D nop ; No operation
$00:$4020: (04) 86 pop cc ; Restore CC from stack
$00:$4021: (03) CC4F5F jp $4F5F ; Jump to $4F5F
$00:$4024: (03) 202F jra $4055 ; Branch to $4055 always
$00:$4026: (00) A7
$00:$4027: (02) 9D nop ; No operation
$00:$4028: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$402B: (00) A7
$00:$402C: (00) A7
$00:$402D: (05) 1E04 bset7 $04 ; Set $04.7
$00:$402F: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$4033: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4036: (00) A7
$00:$4037: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$403B: (03) CC4CC7 jp $4CC7 ; Jump to $4CC7
$00:$403E: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4041: (00) A7
$00:$4042: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$4046: (03) CC4FBF jp $4FBF ; Jump to $4FBF
$00:$4049: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$404C: (00) A7
$00:$404D: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$4051: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4054: (00) A7
$00:$4055: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$4059: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$405C: (00) A7
$00:$405D: (05) 1360 bclr1 $60 ; Clear $60.1
$00:$405F: (02) 9B sim ; Set interrupt mask
$00:$4060: (03) B602 ld a, $02 ; Load into A from $02
$00:$4062: (02) A4C0 and a, #$C0 ; Logical AND (A AND #$C0)
$00:$4064: (04) B702 ld $02, a ; Load into $02 from A
$00:$4066: (02) A6A5 ld a, #$A5 ; Load #$A5 into A
$00:$4068: (04) B706 ld $06, a ; Load into $06 from A
$00:$406A: (02) A60E ld a, #$0E ; Load #$0E into A
$00:$406C: (04) B70D ld $0D, a ; Load into $0D from A
$00:$406E: (07) 8D00DCCF ecall #$00, $DCCF ; Call $DCCF from page #$00
$00:$4072: (02) A608 ld a, #$08 ; Load #$08 into A
$00:$4074: (07) 8D00DC85 ecall #$00, $DC85 ; Call $DC85 from page #$00
$00:$4078: (00) A7
$00:$4079: (00) A7
$00:$407A: (05) 1119 bclr0 $19 ; Clear $19.0
$00:$407C: (03) B61E ld a, $1E ; Load into A from $1E
$00:$407E: (05) 02630D btjt1 $63, $408E ; Branch to $408E if $63.1=1
$00:$4081: (05) 006311 btjt0 $63, $4095 ; Branch to $4095 if $63.0=1
$00:$4084: (04) B755 ld $55, a ; Load into $55 from A
$00:$4086: (03) CC4150 jp $4150 ; Jump to $4150
$00:$4089: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$408C: (00) A7
$00:$408D: (00) A7
$00:$408E: (05) 0F521E btjf7 $52, $40AF ; Branch to $40AF if $52.7=0
$00:$4091: (04) B754 ld $54, a ; Load into $54 from A
$00:$4093: (03) 2025 jra $40BA ; Branch to $40BA always
$00:$4095: (03) BE57 ld x, $57 ; Load into X from $57
$00:$4097: (02) A302 cp x, #$02 ; Compare X with #$02
$00:$4099: (03) 2706 jreq $40A1 ; Branch to $40A1 if equal
$00:$409B: (05) E751 ld ($51,x), a ; Load into $51, index X, from A
$00:$409D: (05) 3C57 inc $57 ; Increment $57
$00:$409F: (03) 201F jra $40C0 ; Branch to $40C0 always
$00:$40A1: (05) 1163 bclr0 $63 ; Clear $63.0
$00:$40A3: (04) B753 ld $53, a ; Load into $53 from A
$00:$40A5: (03) 2602 jrne $40A9 ; Branch to $40A9 if not equal
$00:$40A7: (03) 2017 jra $40C0 ; Branch to $40C0 always
$00:$40A9: (05) 1263 bset1 $63 ; Set $63.1
$00:$40AB: (04) B757 ld $57, a ; Load into $57 from A
$00:$40AD: (03) 2011 jra $40C0 ; Branch to $40C0 always
$00:$40AF: (03) BE59 ld x, $59 ; Load into X from $59
$00:$40B1: (02) A3FF cp x, #$FF ; Compare X with #$FF
$00:$40B3: (03) 2405 jrnc $40BA ; Branch to $40BA if carry clear
$00:$40B5: (06) D70DF8 ld ($0DF8,x), a ; Load into $0DF8, index X, from A
$00:$40B8: (05) 3C59 inc $59 ; Increment $59
$00:$40BA: (05) 3A57 dec $57 ; Decrement $57
$00:$40BC: (03) 2602 jrne $40C0 ; Branch to $40C0 if not equal
$00:$40BE: (05) 1363 bclr1 $63 ; Clear $63.1
$00:$40C0: (05) 001A35 btjt0 $1A, $40F8 ; Branch to $40F8 if $1A.0=1
$00:$40C3: (04) CE0DE4 ld x, $0DE4 ; Load into X from $0DE4
$00:$40C6: (05) 001A2F btjt0 $1A, $40F8 ; Branch to $40F8 if $1A.0=1
$00:$40C9: (05) 130A bclr1 $0A ; Clear $0A.1
$00:$40CB: (05) 001A2A btjt0 $1A, $40F8 ; Branch to $40F8 if $1A.0=1
$00:$40CE: (05) 3F0A clr $0A ; Clear $0A
$00:$40D0: (05) 001A25 btjt0 $1A, $40F8 ; Branch to $40F8 if $1A.0=1
$00:$40D3: (02) A6F9 ld a, #$F9 ; Load #$F9 into A
$00:$40D5: (05) 001A20 btjt0 $1A, $40F8 ; Branch to $40F8 if $1A.0=1
$00:$40D8: (04) B709 ld $09, a ; Load into $09 from A
$00:$40DA: (05) 001A1B btjt0 $1A, $40F8 ; Branch to $40F8 if $1A.0=1
$00:$40DD: (05) 120A bset1 $0A ; Set $0A.1
$00:$40DF: (05) 001A16 btjt0 $1A, $40F8 ; Branch to $40F8 if $1A.0=1
$00:$40E2: (05) 020AFA btjt1 $0A, $40DF ; Branch to $40DF if $0A.1=1
$00:$40E5: (05) 001A10 btjt0 $1A, $40F8 ; Branch to $40F8 if $1A.0=1
$00:$40E8: (03) 5A dec x ; Decrement X
$00:$40E9: (05) 001A0C btjt0 $1A, $40F8 ; Branch to $40F8 if $1A.0=1
$00:$40EC: (03) 26E7 jrne $40D5 ; Branch to $40D5 if not equal
$00:$40EE: (06) AD10 callr $4100 ; Call relative $4100
$00:$40F0: (03) CC42BE jp $42BE ; Jump to $42BE
$00:$40F3: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$40F6: (00) A7
$00:$40F7: (00) A7
$00:$40F8: (03) CC407A jp $407A ; Jump to $407A
$00:$40FB: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$40FE: (00) A7
$00:$40FF: (00) A7
$00:$4100: (05) 125E bset1 $5E ; Set $5E.1
$00:$4102: (02) 96 ld x, s ; Load into X from S
$00:$4103: (02) 8C ld a, csr ; Load into A from CSR
$00:$4104: (03) 4D tnz a ; Test for negative and zero
$00:$4105: (03) 270E jreq $4115 ; Branch to $4115 if equal
$00:$4107: (02) A101 cp a, #$01 ; Compare A with #$01
$00:$4109: (03) 270A jreq $4115 ; Branch to $4115 if equal
$00:$410B: (02) A180 cp a, #$80 ; Compare A with #$80
$00:$410D: (03) 2706 jreq $4115 ; Branch to $4115 if equal
$00:$410F: (07) 8D00414E ecall #$00, $414E ; Call $414E from page #$00
$00:$4113: (03) 2018 jra $412D ; Branch to $412D always
$00:$4115: (05) D60F06 ld a, ($0F06,x) ; Load into A from $0F06, index X.
$00:$4118: (03) 2603 jrne $411D ; Branch to $411D if not equal
$00:$411A: (05) D60F08 ld a, ($0F08,x) ; Load into A from $0F08, index X.
$00:$411D: (02) A110 cp a, #$10 ; Compare A with #$10
$00:$411F: (03) 252E jrc $414F ; Branch to $414F if carry set
$00:$4121: (02) A140 cp a, #$40 ; Compare A with #$40
$00:$4123: (03) 242A jrnc $414F ; Branch to $414F if carry clear
$00:$4125: (02) A135 cp a, #$35 ; Compare A with #$35
$00:$4127: (03) 2504 jrc $412D ; Branch to $412D if carry set
$00:$4129: (02) A138 cp a, #$38 ; Compare A with #$38
$00:$412B: (03) 2522 jrc $414F ; Branch to $414F if carry set
$00:$412D: (05) 1463 bset2 $63 ; Set $63.2
$00:$412F: (02) A6A5 ld a, #$A5 ; Load #$A5 into A
$00:$4131: (04) B706 ld $06, a ; Load into $06 from A
$00:$4133: (02) A60E ld a, #$0E ; Load #$0E into A
$00:$4135: (04) B70D ld $0D, a ; Load into $0D from A
$00:$4137: (02) 96 ld x, s ; Load into X from S
$00:$4138: (02) A676 ld a, #$76 ; Load #$76 into A
$00:$413A: (06) D70F06 ld ($0F06,x), a ; Load into $0F06, index X, from A
$00:$413D: (02) A6BB ld a, #$BB ; Load #$BB into A
$00:$413F: (06) D70F07 ld ($0F07,x), a ; Load into $0F07, index X, from A
$00:$4142: (07) 8D00414E ecall #$00, $414E ; Call $414E from page #$00
$00:$4146: (03) CC4988 jp $4988 ; Jump to $4988
$00:$4149: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$414C: (00) A7
$00:$414D: (00) A7
$00:$414E: (04) 84 pop a ; Restore A from stack
$00:$414F: (06) 81 ret ; Return
$00:$4150: (06) ADAE callr $4100 ; Call relative $4100
$00:$4152: (05) 051A08 btjf2 $1A, $415D ; Branch to $415D if $1A.2=0
$00:$4155: (03) CC42BA jp $42BA ; Jump to $42BA
$00:$4158: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$415B: (00) A7
$00:$415C: (00) A7
$00:$415D: (05) 071A08 btjf3 $1A, $4168 ; Branch to $4168 if $1A.3=0
$00:$4160: (03) CC42BE jp $42BE ; Jump to $42BE
$00:$4163: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4166: (00) A7
$00:$4167: (00) A7
$00:$4168: (05) 091A08 btjf4 $1A, $4173 ; Branch to $4173 if $1A.4=0
$00:$416B: (03) CC42BE jp $42BE ; Jump to $42BE
$00:$416E: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4171: (00) A7
$00:$4172: (00) A7
$00:$4173: (03) B653 ld a, $53 ; Load into A from $53
$00:$4175: (03) 2713 jreq $418A ; Branch to $418A if equal
$00:$4177: (05) 0F5204 btjf7 $52, $417E ; Branch to $417E if $52.7=0
$00:$417A: (03) B654 ld a, $54 ; Load into A from $54
$00:$417C: (03) 200C jra $418A ; Branch to $418A always
$00:$417E: (03) BB58 add a, $58 ; Add A to $58
$00:$4180: (02) 97 ld x, a ; Load into X from A
$00:$4181: (03) 4F clr a ; Clear A
$00:$4182: (03) 5A dec x ; Decrement X
$00:$4183: (05) D80DF8 xor a, ($0DF8,x) ; Logical XOR (A XOR $0DF8, index X.)
$00:$4186: (03) B358 cp x, $58 ; Compare X with $58
$00:$4188: (03) 26F8 jrne $4182 ; Branch to $4182 if not equal
$00:$418A: (03) B851 xor a, $51 ; Logical XOR (A XOR $51)
$00:$418C: (03) B852 xor a, $52 ; Logical XOR (A XOR $52)
$00:$418E: (03) B853 xor a, $53 ; Logical XOR (A XOR $53)
$00:$4190: (03) B855 xor a, $55 ; Logical XOR (A XOR $55)
$00:$4192: (03) 2708 jreq $419C ; Branch to $419C if equal
$00:$4194: (03) CC42BA jp $42BA ; Jump to $42BA
$00:$4197: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$419A: (00) A7
$00:$419B: (00) A7
$00:$419C: (05) 0F527F btjf7 $52, $421E ; Branch to $421E if $52.7=0
$00:$419F: (05) 0D5254 btjf6 $52, $41F6 ; Branch to $41F6 if $52.6=0
$00:$41A2: (03) B652 ld a, $52 ; Load into A from $52
$00:$41A4: (02) A1C0 cp a, #$C0 ; Compare A with #$C0
$00:$41A6: (03) 2717 jreq $41BF ; Branch to $41BF if equal
$00:$41A8: (02) A1C1 cp a, #$C1 ; Compare A with #$C1
$00:$41AA: (03) 272D jreq $41D9 ; Branch to $41D9 if equal
$00:$41AC: (02) A1E1 cp a, #$E1 ; Compare A with #$E1
$00:$41AE: (03) 270C jreq $41BC ; Branch to $41BC if equal
$00:$41B0: (02) A1C2 cp a, #$C2 ; Compare A with #$C2
$00:$41B2: (03) 270B jreq $41BF ; Branch to $41BF if equal
$00:$41B4: (02) A1E3 cp a, #$E3 ; Compare A with #$E3
$00:$41B6: (03) 2704 jreq $41BC ; Branch to $41BC if equal
$00:$41B8: (02) A1E4 cp a, #$E4 ; Compare A with #$E4
$00:$41BA: (03) 2700 jreq $41BC ; Branch to $41BC if equal
$00:$41BC: (03) CC42BE jp $42BE ; Jump to $42BE
$00:$41BF: (06) CD7783 call $7783 ; Call $7783
$00:$41C2: (05) 3F58 clr $58 ; Clear $58
$00:$41C4: (05) 3F59 clr $59 ; Clear $59
$00:$41C6: (05) 1962 bclr4 $62 ; Clear $62.4
$00:$41C8: (05) 1B62 bclr5 $62 ; Clear $62.5
$00:$41CA: (05) 1D62 bclr6 $62 ; Clear $62.6
$00:$41CC: (05) 1F62 bclr7 $62 ; Clear $62.7
$00:$41CE: (05) 1E63 bset7 $63 ; Set $63.7
$00:$41D0: (03) B652 ld a, $52 ; Load into A from $52
$00:$41D2: (02) AA20 or a, #$20 ; Logical OR (A OR #$20)
$00:$41D4: (03) BE53 ld x, $53 ; Load into X from $53
$00:$41D6: (03) CC42CE jp $42CE ; Jump to $42CE
$00:$41D9: (03) B653 ld a, $53 ; Load into A from $53
$00:$41DB: (02) A101 cp a, #$01 ; Compare A with #$01
$00:$41DD: (03) 26DD jrne $41BC ; Branch to $41BC if not equal
$00:$41DF: (03) B654 ld a, $54 ; Load into A from $54
$00:$41E1: (03) 27D9 jreq $41BC ; Branch to $41BC if equal
$00:$41E3: (02) A1FE cp a, #$FE ; Compare A with #$FE
$00:$41E5: (03) 22D5 jrugt $41BC ; Branch to $41BC if higher
$00:$41E7: (02) A1FF cp a, #$FF ; Compare A with #$FF
$00:$41E9: (03) 2302 jrule $41ED ; Branch to $41ED if lower/same
$00:$41EB: (02) A6FF ld a, #$FF ; Load #$FF into A
$00:$41ED: (04) B756 ld $56, a ; Load into $56 from A
$00:$41EF: (02) A6E1 ld a, #$E1 ; Load #$E1 into A
$00:$41F1: (02) AE01 ld x, #$01 ; Load #$01 into X
$00:$41F3: (03) CC42CE jp $42CE ; Jump to $42CE
$00:$41F6: (05) 086278 btjt4 $62, $4271 ; Branch to $4271 if $62.4=1
$00:$41F9: (05) 085205 btjt4 $52, $4201 ; Branch to $4201 if $52.4=1
$00:$41FC: (05) 0C6215 btjt6 $62, $4214 ; Branch to $4214 if $62.6=1
$00:$41FF: (03) 2003 jra $4204 ; Branch to $4204 always
$00:$4201: (05) 0D6210 btjf6 $62, $4214 ; Branch to $4214 if $62.6=0
$00:$4204: (05) 0052B5 btjt0 $52, $41BC ; Branch to $41BC if $52.0=1
$00:$4207: (04) C60DE9 ld a, $0DE9 ; Load into A from $0DE9
$00:$420A: (02) A520 bcp a, #$20 ; Bit compare A with #$20
$00:$420C: (03) 27AE jreq $41BC ; Branch to $41BC if equal
$00:$420E: (06) CD4366 call $4366 ; Call $4366
$00:$4211: (03) CC4E9F jp $4E9F ; Jump to $4E9F
$00:$4214: (05) 0562A5 btjf2 $62, $41BC ; Branch to $41BC if $62.2=0
$00:$4217: (06) CD438E call $438E ; Call $438E
$00:$421A: (03) CC4E9F jp $4E9F ; Jump to $4E9F
$00:$421D: (00) A7
$00:$421E: (06) CD7783 call $7783 ; Call $7783
$00:$4221: (05) 1862 bset4 $62 ; Set $62.4
$00:$4223: (05) 1F62 bclr7 $62 ; Clear $62.7
$00:$4225: (05) 0C5202 btjt6 $52, $422A ; Branch to $422A if $52.6=1
$00:$4228: (05) 1E62 bset7 $62 ; Set $62.7
$00:$422A: (03) B659 ld a, $59 ; Load into A from $59
$00:$422C: (04) B758 ld $58, a ; Load into $58 from A
$00:$422E: (05) 0A5240 btjt5 $52, $4271 ; Branch to $4271 if $52.5=1
$00:$4231: (05) 1962 bclr4 $62 ; Clear $62.4
$00:$4233: (06) AD43 callr $4278 ; Call relative $4278
$00:$4235: (03) 2619 jrne $4250 ; Branch to $4250 if not equal
$00:$4237: (06) AD5A callr $4293 ; Call relative $4293
$00:$4239: (06) CD434F call $434F ; Call $434F
$00:$423C: (04) C60DE8 ld a, $0DE8 ; Load into A from $0DE8
$00:$423F: (04) B753 ld $53, a ; Load into $53 from A
$00:$4241: (06) CD4384 call $4384 ; Call $4384
$00:$4244: (05) 3F58 clr $58 ; Clear $58
$00:$4246: (05) 3F59 clr $59 ; Clear $59
$00:$4248: (03) CC4E9F jp $4E9F ; Jump to $4E9F
$00:$424B: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$424E: (00) A7
$00:$424F: (00) A7
$00:$4250: (05) 016406 btjf0 $64, $4259 ; Branch to $4259 if $64.0=0
$00:$4253: (05) 036403 btjf1 $64, $4259 ; Branch to $4259 if $64.1=0
$00:$4256: (06) CD4137 call $4137 ; Call $4137
$00:$4259: (06) CD4441 call $4441 ; Call $4441
$00:$425C: (05) 011805 btjf0 $18, $4264 ; Branch to $4264 if $18.0=0
$00:$425F: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4262: (00) A7
$00:$4263: (00) A7
$00:$4264: (05) 0018F8 btjt0 $18, $425F ; Branch to $425F if $18.0=1
$00:$4267: (05) 1A62 bset5 $62 ; Set $62.5
$00:$4269: (03) CC4E9F jp $4E9F ; Jump to $4E9F
$00:$426C: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$426F: (00) A7
$00:$4270: (00) A7
$00:$4271: (03) 2053 jra $42C6 ; Branch to $42C6 always
$00:$4273: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4276: (00) A7
$00:$4277: (00) A7
$00:$4278: (03) B659 ld a, $59 ; Load into A from $59
$00:$427A: (02) A108 cp a, #$08 ; Compare A with #$08
$00:$427C: (03) 260C jrne $428A ; Branch to $428A if not equal
$00:$427E: (02) 97 ld x, a ; Load into X from A
$00:$427F: (05) D60DF7 ld a, ($0DF7,x) ; Load into A from $0DF7, index X.
$00:$4282: (05) D1428A cp a, ($428A,x) ; Compare A to $428A, index X.
$00:$4285: (03) 2603 jrne $428A ; Branch to $428A if not equal
$00:$4287: (03) 5A dec x ; Decrement X
$00:$4288: (03) 26F5 jrne $427F ; Branch to $427F if not equal
$00:$428A: (06) 81 ret ; Return
$00:$428B: (02) A0CA sub a, #$CA ; Substract #$CA from A
$00:$428D: (05) 000002 btjt0 $00, $4292 ; Branch to $4292 if $00.0=1
$00:$4290: (04) C00006 sub a, $0006 ; Substract $0006 from A
$00:$4293: (05) 1663 bset3 $63 ; Set $63.3
$00:$4295: (02) AE03 ld x, #$03 ; Load #$03 into X
$00:$4297: (04) E666 ld a, ($66,x) ; Load into A from $66, index X.
$00:$4299: (06) D70DFA ld ($0DFA,x), a ; Load into $0DFA, index X, from A
$00:$429C: (03) 5A dec x ; Decrement X
$00:$429D: (03) 2AF8 jrpl $4297 ; Branch to $4297 if positive
$00:$429F: (02) A6B0 ld a, #$B0 ; Load #$B0 into A
$00:$42A1: (05) C70DF8 ld $0DF8, a ; Load into $0DF8 from A
$00:$42A4: (02) A604 ld a, #$04 ; Load #$04 into A
$00:$42A6: (05) C70DF9 ld $0DF9, a ; Load into $0DF9 from A
$00:$42A9: (02) A690 ld a, #$90 ; Load #$90 into A
$00:$42AB: (05) C70DFE ld $0DFE, a ; Load into $0DFE from A
$00:$42AE: (03) 4F clr a ; Clear A
$00:$42AF: (05) C70DFF ld $0DFF, a ; Load into $0DFF from A
$00:$42B2: (05) 1367 bclr1 $67 ; Clear $67.1
$00:$42B4: (02) A608 ld a, #$08 ; Load #$08 into A
$00:$42B6: (05) C70DE8 ld $0DE8, a ; Load into $0DE8 from A
$00:$42B9: (06) 81 ret ; Return
$00:$42BA: (02) A681 ld a, #$81 ; Load #$81 into A
$00:$42BC: (03) 2002 jra $42C0 ; Branch to $42C0 always
$00:$42BE: (02) A682 ld a, #$82 ; Load #$82 into A
$00:$42C0: (03) BE58 ld x, $58 ; Load into X from $58
$00:$42C2: (04) BF59 ld $59, x ; Load into $59 from X
$00:$42C4: (03) 2002 jra $42C8 ; Branch to $42C8 always
$00:$42C6: (02) A680 ld a, #$80 ; Load #$80 into A
$00:$42C8: (03) 5F clr x ; Clear X
$00:$42C9: (05) 0F6202 btjf7 $62, $42CE ; Branch to $42CE if $62.7=0
$00:$42CC: (02) AA10 or a, #$10 ; Logical OR (A OR #$10)
$00:$42CE: (04) B752 ld $52, a ; Load into $52 from A
$00:$42D0: (05) 3E51 swap $51 ; Swap nibbles
$00:$42D2: (02) 9F ld a, x ; Load into A from X
$00:$42D3: (04) B753 ld $53, a ; Load into $53 from A
$00:$42D5: (03) 2702 jreq $42D9 ; Branch to $42D9 if equal
$00:$42D7: (03) B854 xor a, $54 ; Logical XOR (A XOR $54)
$00:$42D9: (03) B851 xor a, $51 ; Logical XOR (A XOR $51)
$00:$42DB: (03) B852 xor a, $52 ; Logical XOR (A XOR $52)
$00:$42DD: (03) 88 push a ; Save A on stack
$00:$42DE: (06) AD17 callr $42F7 ; Call relative $42F7
$00:$42E0: (04) 3D53 tnz $53 ; Test for negative and zero
$00:$42E2: (03) 2705 jreq $42E9 ; Branch to $42E9 if equal
$00:$42E4: (03) B654 ld a, $54 ; Load into A from $54
$00:$42E6: (06) CD432D call $432D ; Call $432D
$00:$42E9: (04) 84 pop a ; Restore A from stack
$00:$42EA: (06) CD432D call $432D ; Call $432D
$00:$42ED: (06) AD1F callr $430E ; Call relative $430E
$00:$42EF: (03) CC4E9F jp $4E9F ; Jump to $4E9F
$00:$42F2: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$42F5: (00) A7
$00:$42F6: (00) A7
$00:$42F7: (06) CD431C call $431C ; Call $431C
$00:$42FA: (03) B651 ld a, $51 ; Load into A from $51
$00:$42FC: (06) CD432D call $432D ; Call $432D
$00:$42FF: (03) B652 ld a, $52 ; Load into A from $52
$00:$4301: (06) CD432D call $432D ; Call $432D
$00:$4304: (03) B653 ld a, $53 ; Load into A from $53
$00:$4306: (03) CC432D jp $432D ; Jump to $432D
$00:$4309: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$430C: (00) A7
$00:$430D: (00) A7
$00:$430E: (05) 1063 bset0 $63 ; Set $63.0
$00:$4310: (05) 1363 bclr1 $63 ; Clear $63.1
$00:$4312: (05) 3F57 clr $57 ; Clear $57
$00:$4314: (03) CC4422 jp $4422 ; Jump to $4422
$00:$4317: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$431A: (00) A7
$00:$431B: (00) A7
$00:$431C: (05) 130A bclr1 $0A ; Clear $0A.1
$00:$431E: (02) A610 ld a, #$10 ; Load #$10 into A
$00:$4320: (04) B70A ld $0A, a ; Load into $0A from A
$00:$4322: (04) C60DE3 ld a, $0DE3 ; Load into A from $0DE3
$00:$4325: (04) B709 ld $09, a ; Load into $09 from A
$00:$4327: (05) 120A bset1 $0A ; Set $0A.1
$00:$4329: (05) 020AFD btjt1 $0A, $4329 ; Branch to $4329 if $0A.1=1
$00:$432C: (06) 81 ret ; Return
$00:$432D: (02) 9B sim ; Set interrupt mask
$00:$432E: (03) 88 push a ; Save A on stack
$00:$432F: (05) 001803 btjt0 $18, $4335 ; Branch to $4335 if $18.0=1
$00:$4332: (06) CD4427 call $4427 ; Call $4427
$00:$4335: (04) CE0DE2 ld x, $0DE2 ; Load into X from $0DE2
$00:$4338: (03) 270B jreq $4345 ; Branch to $4345 if equal
$00:$433A: (05) 130A bclr1 $0A ; Clear $0A.1
$00:$433C: (05) 3F0A clr $0A ; Clear $0A
$00:$433E: (04) BF09 ld $09, x ; Load into $09 from X
$00:$4340: (05) 120A bset1 $0A ; Set $0A.1
$00:$4342: (05) 020AFD btjt1 $0A, $4342 ; Branch to $4342 if $0A.1=1
$00:$4345: (05) 031AFD btjf1 $1A, $4345 ; Branch to $4345 if $1A.1=0
$00:$4348: (06) CD757E call $757E ; Call $757E
$00:$434B: (04) 84 pop a ; Restore A from stack
$00:$434C: (04) B71D ld $1D, a ; Load into $1D from A
$00:$434E: (06) 81 ret ; Return
$00:$434F: (05) 1B62 bclr5 $62 ; Clear $62.5
$00:$4351: (05) 3F52 clr $52 ; Clear $52
$00:$4353: (05) 3F53 clr $53 ; Clear $53
$00:$4355: (05) 0C6205 btjt6 $62, $435D ; Branch to $435D if $62.6=1
$00:$4358: (05) 1D52 bclr6 $52 ; Clear $52.6
$00:$435A: (05) 1C62 bset6 $62 ; Set $62.6
$00:$435C: (06) 81 ret ; Return
$00:$435D: (05) 1C52 bset6 $52 ; Set $52.6
$00:$435F: (05) 1D62 bclr6 $62 ; Clear $62.6
$00:$4361: (06) 81 ret ; Return
$00:$4362: (06) ADEB callr $434F ; Call relative $434F
$00:$4364: (03) 201E jra $4384 ; Branch to $4384 always
$00:$4366: (06) ADE7 callr $434F ; Call relative $434F
$00:$4368: (04) CE0DEB ld x, $0DEB ; Load into X from $0DEB
$00:$436B: (07) DD78B4 call ($78B4,x) ; Call $78B4, index X,
$00:$436E: (05) 3C5A inc $5A ; Increment $5A
$00:$4370: (05) 3C53 inc $53 ; Increment $53
$00:$4372: (03) BE53 ld x, $53 ; Load into X from $53
$00:$4374: (06) D70DF7 ld ($0DF7,x), a ; Load into $0DF7, index X, from A
$00:$4377: (03) 2508 jrc $4381 ; Branch to $4381 if carry set
$00:$4379: (03) B356 cp x, $56 ; Compare X with $56
$00:$437B: (03) 26EB jrne $4368 ; Branch to $4368 if not equal
$00:$437D: (05) 1A52 bset5 $52 ; Set $52.5
$00:$437F: (03) 2003 jra $4384 ; Branch to $4384 always
$00:$4381: (06) CD7783 call $7783 ; Call $7783
$00:$4384: (03) B652 ld a, $52 ; Load into A from $52
$00:$4386: (05) C70DE9 ld $0DE9, a ; Load into $0DE9 from A
$00:$4389: (03) B653 ld a, $53 ; Load into A from $53
$00:$438B: (05) C70DEA ld $0DEA, a ; Load into $0DEA from A
$00:$438E: (05) 1462 bset2 $62 ; Set $62.2
$00:$4390: (04) C60DE9 ld a, $0DE9 ; Load into A from $0DE9
$00:$4393: (04) B752 ld $52, a ; Load into $52 from A
$00:$4395: (04) C60DEA ld a, $0DEA ; Load into A from $0DEA
$00:$4398: (04) B753 ld $53, a ; Load into $53 from A
$00:$439A: (05) 3E51 swap $51 ; Swap nibbles
$00:$439C: (03) B651 ld a, $51 ; Load into A from $51
$00:$439E: (03) B852 xor a, $52 ; Logical XOR (A XOR $52)
$00:$43A0: (03) B853 xor a, $53 ; Logical XOR (A XOR $53)
$00:$43A2: (05) 3F57 clr $57 ; Clear $57
$00:$43A4: (03) BE57 ld x, $57 ; Load into X from $57
$00:$43A6: (03) B353 cp x, $53 ; Compare X with $53
$00:$43A8: (03) 2707 jreq $43B1 ; Branch to $43B1 if equal
$00:$43AA: (05) D80DF8 xor a, ($0DF8,x) ; Logical XOR (A XOR $0DF8, index X.)
$00:$43AD: (05) 3C57 inc $57 ; Increment $57
$00:$43AF: (03) 20F3 jra $43A4 ; Branch to $43A4 always
$00:$43B1: (03) 88 push a ; Save A on stack
$00:$43B2: (06) CD42F7 call $42F7 ; Call $42F7
$00:$43B5: (05) 3F57 clr $57 ; Clear $57
$00:$43B7: (03) BE57 ld x, $57 ; Load into X from $57
$00:$43B9: (03) B353 cp x, $53 ; Compare X with $53
$00:$43BB: (03) 270A jreq $43C7 ; Branch to $43C7 if equal
$00:$43BD: (05) D60DF8 ld a, ($0DF8,x) ; Load into A from $0DF8, index X.
$00:$43C0: (06) CD432D call $432D ; Call $432D
$00:$43C3: (05) 3C57 inc $57 ; Increment $57
$00:$43C5: (03) 20F0 jra $43B7 ; Branch to $43B7 always
$00:$43C7: (04) 84 pop a ; Restore A from stack
$00:$43C8: (06) CD432D call $432D ; Call $432D
$00:$43CB: (03) CC430E jp $430E ; Jump to $430E
$00:$43CE: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$43D1: (00) A7
$00:$43D2: (00) A7
$00:$43D3: (04) CE0DE8 ld x, $0DE8 ; Load into X from $0DE8
$00:$43D6: (03) 278A jreq $4362 ; Branch to $4362 if equal
$00:$43D8: (05) 3F58 clr $58 ; Clear $58
$00:$43DA: (05) 3F59 clr $59 ; Clear $59
$00:$43DC: (05) C70DEB ld $0DEB, a ; Load into $0DEB from A
$00:$43DF: (05) 3F5A clr $5A ; Clear $5A
$00:$43E1: (03) 8A push cc ; Save CC on stack
$00:$43E2: (06) CD4366 call $4366 ; Call $4366
$00:$43E5: (04) 86 pop cc ; Restore CC from stack
$00:$43E6: (06) 81 ret ; Return
$00:$43E7: (05) 0D1AFD btjf6 $1A, $43E7 ; Branch to $43E7 if $1A.6=0
$00:$43EA: (05) 0C1A05 btjt6 $1A, $43F2 ; Branch to $43F2 if $1A.6=1
$00:$43ED: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$43F0: (00) A7
$00:$43F1: (00) A7
$00:$43F2: (05) 1118 bclr0 $18 ; Clear $18.0
$00:$43F4: (05) 1118 bclr0 $18 ; Clear $18.0
$00:$43F6: (05) 3F18 clr $18 ; Clear $18
$00:$43F8: (05) 1E18 bset7 $18 ; Set $18.7
$00:$43FA: (05) 016202 btjf0 $62, $43FF ; Branch to $43FF if $62.0=0
$00:$43FD: (05) 1618 bset3 $18 ; Set $18.3
$00:$43FF: (05) 1918 bclr4 $18 ; Clear $18.4
$00:$4401: (05) 1B18 bclr5 $18 ; Clear $18.5
$00:$4403: (04) C60DE7 ld a, $0DE7 ; Load into A from $0DE7
$00:$4406: (02) A430 and a, #$30 ; Logical AND (A AND #$30)
$00:$4408: (03) BA18 or a, $18 ; Logical OR (A OR $18)
$00:$440A: (04) B718 ld $18, a ; Load into $18 from A
$00:$440C: (04) C60DE5 ld a, $0DE5 ; Load into A from $0DE5
$00:$440F: (02) A407 and a, #$07 ; Logical AND (A AND #$07)
$00:$4411: (03) 88 push a ; Save A on stack
$00:$4412: (03) B61B ld a, $1B ; Load into A from $1B
$00:$4414: (02) A478 and a, #$78 ; Logical AND (A AND #$78)
$00:$4416: (04) 31EA01 or a, ($01,s) ; Logical OR (A OR $01, index S.)
$00:$4419: (04) B71B ld $1B, a ; Load into $1B from A
$00:$441B: (04) 84 pop a ; Restore A from stack
$00:$441C: (04) C60DE6 ld a, $0DE6 ; Load into A from $0DE6
$00:$441F: (04) B71C ld $1C, a ; Load into $1C from A
$00:$4421: (06) 81 ret ; Return
$00:$4422: (06) AD03 callr $4427 ; Call relative $4427
$00:$4424: (05) 1019 bset0 $19 ; Set $19.0
$00:$4426: (06) 81 ret ; Return
$00:$4427: (05) 0D1AFD btjf6 $1A, $4427 ; Branch to $4427 if $1A.6=0
$00:$442A: (05) 0C1A05 btjt6 $1A, $4432 ; Branch to $4432 if $1A.6=1
$00:$442D: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4430: (00) A7
$00:$4431: (00) A7
$00:$4432: (05) 1018 bset0 $18 ; Set $18.0
$00:$4434: (03) B619 ld a, $19 ; Load into A from $19
$00:$4436: (02) A4C0 and a, #$C0 ; Logical AND (A AND #$C0)
$00:$4438: (04) B719 ld $19, a ; Load into $19 from A
$00:$443A: (03) B61A ld a, $1A ; Load into A from $1A
$00:$443C: (02) A480 and a, #$80 ; Logical AND (A AND #$80)
$00:$443E: (04) B71A ld $1A, a ; Load into $1A from A
$00:$4440: (06) 81 ret ; Return
$00:$4441: (05) 0D1AFD btjf6 $1A, $4441 ; Branch to $4441 if $1A.6=0
$00:$4444: (05) 0C1A05 btjt6 $1A, $444C ; Branch to $444C if $1A.6=1
$00:$4447: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$444A: (00) A7
$00:$444B: (00) A7
$00:$444C: (05) 1118 bclr0 $18 ; Clear $18.0
$00:$444E: (05) 1118 bclr0 $18 ; Clear $18.0
$00:$4450: (06) 81 ret ; Return
$00:$4451: (04) C60DF9 ld a, $0DF9 ; Load into A from $0DF9
$00:$4454: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$4458: (02) A1CA cp a, #$CA ; Compare A with #$CA
$00:$445A: (03) 2737 jreq $4493 ; Branch to $4493 if equal
$00:$445C: (06) CD4988 call $4988 ; Call $4988
$00:$445F: (05) 1963 bclr4 $63 ; Clear $63.4
$00:$4461: (05) 1C5F bset6 $5F ; Set $5F.6
$00:$4463: (03) AC push dsr ; Save DSR on stack.
$00:$4464: (04) C63099 ld a, $3099 ; Load into A from $3099
$00:$4467: (03) 260D jrne $4476 ; Branch to $4476 if not equal
$00:$4469: (03) 7180 ld dsr, #$80 ; Load #$80 into DSR
$00:$446B: (04) C68000 ld a, $8000 ; Load into A from $8000
$00:$446E: (03) CC447B jp $447B ; Jump to $447B
$00:$4471: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4474: (00) A7
$00:$4475: (00) A7
$00:$4476: (03) 7180 ld dsr, #$80 ; Load #$80 into DSR
$00:$4478: (04) C68048 ld a, $8048 ; Load into A from $8048
$00:$447B: (04) AF pop dsr ; Restore DSR from stack
$00:$447C: (02) A480 and a, #$80 ; Logical AND (A AND #$80)
$00:$447E: (03) 2708 jreq $4488 ; Branch to $4488 if equal
$00:$4480: (03) CC7771 jp $7771 ; Jump to $7771
$00:$4483: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4486: (00) A7
$00:$4487: (00) A7
$00:$4488: (03) 26F9 jrne $4483 ; Branch to $4483 if not equal
$00:$448A: (04) C60DF9 ld a, $0DF9 ; Load into A from $0DF9
$00:$448D: (03) CC4A2A jp $4A2A ; Jump to $4A2A
$00:$4490: (03) CC7771 jp $7771 ; Jump to $7771
$00:$4493: (05) 1561 bclr2 $61 ; Clear $61.2
$00:$4495: (06) CD56B1 call $56B1 ; Call $56B1
$00:$4498: (05) 010080 btjf0 $00, $441B ; Branch to $441B if $00.0=0
$00:$449B: (04) C60DFA ld a, $0DFA ; Load into A from $0DFA
$00:$449E: (04) CA0DFB or a, $0DFB ; Logical OR (A OR $0DFB)
$00:$44A1: (03) 26ED jrne $4490 ; Branch to $4490 if not equal
$00:$44A3: (06) CD506A call $506A ; Call $506A
$00:$44A6: (03) 25E8 jrc $4490 ; Branch to $4490 if carry set
$00:$44A8: (03) B659 ld a, $59 ; Load into A from $59
$00:$44AA: (02) A005 sub a, #$05 ; Substract #$05 from A
$00:$44AC: (03) 2409 jrnc $44B7 ; Branch to $44B7 if carry clear
$00:$44AE: (03) CC7771 jp $7771 ; Jump to $7771
$00:$44B1: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$44B4: (00) A7
$00:$44B5: (05) 1E04 bset7 $04 ; Set $04.7
$00:$44B7: (04) C10DFC cp a, $0DFC ; Compare A to $0DFC
$00:$44BA: (03) 2709 jreq $44C5 ; Branch to $44C5 if equal
$00:$44BC: (02) A001 sub a, #$01 ; Substract #$01 from A
$00:$44BE: (03) 25EE jrc $44AE ; Branch to $44AE if carry set
$00:$44C0: (04) C10DFC cp a, $0DFC ; Compare A to $0DFC
$00:$44C3: (03) 26E9 jrne $44AE ; Branch to $44AE if not equal
$00:$44C5: (02) A002 sub a, #$02 ; Substract #$02 from A
$00:$44C7: (03) 25E5 jrc $44AE ; Branch to $44AE if carry set
$00:$44C9: (04) C10DFE cp a, $0DFE ; Compare A to $0DFE
$00:$44CC: (03) 26E0 jrne $44AE ; Branch to $44AE if not equal
$00:$44CE: (05) C70C82 ld $0C82, a ; Load into $0C82 from A
$00:$44D1: (05) 126C bset1 $6C ; Set $6C.1
$00:$44D3: (04) C60DFD ld a, $0DFD ; Load into A from $0DFD
$00:$44D6: (05) C70C81 ld $0C81, a ; Load into $0C81 from A
$00:$44D9: (02) 97 ld x, a ; Load into X from A
$00:$44DA: (03) 54 srl x ; Logical shift right
$00:$44DB: (03) 54 srl x ; Logical shift right
$00:$44DC: (03) 54 srl x ; Logical shift right
$00:$44DD: (03) AC push dsr ; Save DSR on stack.
$00:$44DE: (04) C63099 ld a, $3099 ; Load into A from $3099
$00:$44E1: (03) 260D jrne $44F0 ; Branch to $44F0 if not equal
$00:$44E3: (03) 7180 ld dsr, #$80 ; Load #$80 into DSR
$00:$44E5: (05) D68008 ld a, ($8008,x) ; Load into A from $8008, index X.
$00:$44E8: (03) CC44F5 jp $44F5 ; Jump to $44F5
$00:$44EB: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$44EE: (00) A7
$00:$44EF: (00) A7
$00:$44F0: (03) 7180 ld dsr, #$80 ; Load #$80 into DSR
$00:$44F2: (05) D68050 ld a, ($8050,x) ; Load into A from $8050, index X.
$00:$44F5: (04) B724 ld $24, a ; Load into $24 from A
$00:$44F7: (04) AF pop dsr ; Restore DSR from stack
$00:$44F8: (04) C60C81 ld a, $0C81 ; Load into A from $0C81
$00:$44FB: (02) A407 and a, #$07 ; Logical AND (A AND #$07)
$00:$44FD: (02) A807 xor a, #$07 ; Logical XOR (A XOR #$07)
$00:$44FF: (02) 97 ld x, a ; Load into X from A
$00:$4500: (03) AC push dsr ; Save DSR on stack.
$00:$4501: (03) 7102 ld dsr, #$02 ; Load #$02 into DSR
$00:$4503: (05) D68111 ld a, ($8111,x) ; Load into A from $8111, index X.
$00:$4506: (04) AF pop dsr ; Restore DSR from stack
$00:$4507: (03) B424 and a, $24 ; Logical AND (A AND $24)
$00:$4509: (03) 2708 jreq $4513 ; Branch to $4513 if equal
$00:$450B: (03) CC7771 jp $7771 ; Jump to $7771
$00:$450E: (03) CC5A0A jp $5A0A ; Jump to $5A0A
$00:$4511: (00) A7
$00:$4512: (00) A7
$00:$4513: (03) 26F9 jrne $450E ; Branch to $450E if not equal
$00:$4515: (04) C60C81 ld a, $0C81 ; Load into A from $0C81
$00:$4518: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$451C: (02) A133 cp a, #$33 ; Compare A with #$33
$00:$451E: (03) 264E jrne $456E ; Branch to $456E if not equal
$00:$4520: (06) CD56B1 call $56B1 ; Call $56B1
$00:$4523: (05) 0DF8FF btjf6 $F8, $4525 ; Branch to $4525 if $F8.6=0
$00:$4526: (02) A663 ld a, #$63 ; Load #$63 into A
$00:$4528: (05) 06642F btjt3 $64, $455A ; Branch to $455A if $64.3=1
$00:$452B: (05) 0A682C btjt5 $68, $455A ; Branch to $455A if $68.5=1
$00:$452E: (05) 096429 btjf4 $64, $455A ; Branch to $455A if $64.4=0
$00:$4531: (04) C60DC3 ld a, $0DC3 ; Load into A from $0DC3
$00:$4534: (02) AB03 add a, #$03 ; Add A to #$03
$00:$4536: (06) CD53D7 call $53D7 ; Call $53D7
$00:$4539: (05) 0DFECD btjf6 $FE, $4509 ; Branch to $4509 if $FE.6=0
$00:$453C: (03) 58 sll x ; Logical shift left
$00:$453D: (03) 24CD jrnc $450C ; Branch to $450C if carry clear
$00:$453F: (03) 53 cpl x ; Logical complement
$00:$4540: (06) D709B0 ld ($09B0,x), a ; Load into $09B0, index X, from A
$00:$4543: (06) CD7E53 call $7E53 ; Call $7E53
$00:$4546: (04) CE0DBC ld x, $0DBC ; Load into X from $0DBC
$00:$4549: (03) 2705 jreq $4550 ; Branch to $4550 if equal
$00:$454B: (02) AE01 ld x, #$01 ; Load #$01 into X
$00:$454D: (05) CF0DF7 ld $0DF7, x ; Load into $0DF7 from X
$00:$4550: (04) CE0DB8 ld x, $0DB8 ; Load into X from $0DB8
$00:$4553: (05) CF0DFC ld $0DFC, x ; Load into $0DFC from X
$00:$4556: (03) 5F clr x ; Clear X
$00:$4557: (05) CF0DFD ld $0DFD, x ; Load into $0DFD from X
$00:$455A: (05) 1964 bclr4 $64 ; Clear $64.4
$00:$455C: (02) AB02 add a, #$02 ; Add A to #$02
$00:$455E: (02) AE06 ld x, #$06 ; Load #$06 into X
$00:$4560: (05) CF0DFA ld $0DFA, x ; Load into $0DFA from X
$00:$4563: (05) C70DFB ld $0DFB, a ; Load into $0DFB from A
$00:$4566: (02) AB02 add a, #$02 ; Add A to #$02
$00:$4568: (02) 97 ld x, a ; Load into X from A
$00:$4569: (02) A6F3 ld a, #$F3 ; Load #$F3 into A
$00:$456B: (03) CC49BB jp $49BB ; Jump to $49BB
$00:$456E: (02) A11C cp a, #$1C ; Compare A with #$1C
$00:$4570: (03) 265B jrne $45CD ; Branch to $45CD if not equal
$00:$4572: (02) 90AE3F ld y, #$3F ; Load #$3F into Y
$00:$4575: (02) AE1E ld x, #$1E ; Load #$1E into X
$00:$4577: (04) C82F71 xor a, $2F71 ; Logical XOR (A XOR $2F71)
$00:$457A: (03) 5A dec x ; Decrement X
$00:$457B: (03) 2AFA jrpl $4577 ; Branch to $4577 if positive
$00:$457D: (06) 90D70DF8 ld ($0DF8,y), a ; Load into $0DF8, index Y, from A
$00:$4581: (03) 905A dec y ; Decrement Y
$00:$4583: (03) 2AF0 jrpl $4575 ; Branch to $4575 if positive
$00:$4585: (03) 4F clr a ; Clear A
$00:$4586: (05) C70DFA ld $0DFA, a ; Load into $0DFA from A
$00:$4589: (05) C70E14 ld $0E14, a ; Load into $0E14 from A
$00:$458C: (02) A608 ld a, #$08 ; Load #$08 into A
$00:$458E: (05) C70DFB ld $0DFB, a ; Load into $0DFB from A
$00:$4591: (05) C70E15 ld $0E15, a ; Load into $0E15 from A
$00:$4594: (06) CD53D7 call $53D7 ; Call $53D7
$00:$4597: (05) 0DFACD btjf6 $FA, $4567 ; Branch to $4567 if $FA.6=0
$00:$459A: (03) 58 sll x ; Logical shift left
$00:$459B: (03) 24CD jrnc $456A ; Branch to $456A if carry clear
$00:$459D: (03) 53 cpl x ; Logical complement
$00:$459E: (06) D70272 ld ($0272,x), a ; Load into $0272, index X, from A
$00:$45A1: (05) 036902 btjf1 $69, $45A6 ; Branch to $45A6 if $69.1=0
$00:$45A4: (06) AD16 callr $45BC ; Call relative $45BC
$00:$45A6: (05) 05690A btjf2 $69, $45B3 ; Branch to $45B3 if $69.2=0
$00:$45A9: (02) A61A ld a, #$1A ; Load #$1A into A
$00:$45AB: (06) CD5582 call $5582 ; Call $5582
$00:$45AE: (06) CD55C3 call $55C3 ; Call $55C3
$00:$45B1: (06) AD09 callr $45BC ; Call relative $45BC
$00:$45B3: (05) 1369 bclr1 $69 ; Clear $69.1
$00:$45B5: (05) 1569 bclr2 $69 ; Clear $69.2
$00:$45B7: (06) CD49AF call $49AF ; Call $49AF
$00:$45BA: (02) 9C rsp ; Reset stack pointer
$00:$45BB: (05) 34AE srl $AE ; Logical shift right
$00:$45BD: (05) 0192D6 btjf0 $92, $4596 ; Branch to $4596 if $92.0=0
$00:$45C0: (03) 47 sra a ; Arithmetic shift right
$00:$45C1: (03) 2709 jreq $45CC ; Branch to $45CC if equal
$00:$45C3: (02) A118 cp a, #$18 ; Compare A with #$18
$00:$45C5: (03) 2205 jrugt $45CC ; Branch to $45CC if higher
$00:$45C7: (02) AB02 add a, #$02 ; Add A to #$02
$00:$45C9: (06) CD7E53 call $7E53 ; Call $7E53
$00:$45CC: (06) 81 ret ; Return
$00:$45CD: (02) A1C8 cp a, #$C8 ; Compare A with #$C8
$00:$45CF: (03) 2619 jrne $45EA ; Branch to $45EA if not equal
$00:$45D1: (06) CD53D7 call $53D7 ; Call $53D7
$00:$45D4: (05) 0DFACD btjf6 $FA, $45A4 ; Branch to $45A4 if $FA.6=0
$00:$45D7: (03) 58 sll x ; Logical shift left
$00:$45D8: (03) 24CD jrnc $45A7 ; Branch to $45A7 if carry clear
$00:$45DA: (03) 53 cpl x ; Logical complement
$00:$45DB: (06) D70DC7 ld ($0DC7,x), a ; Load into $0DC7, index X, from A
$00:$45DE: (02) A604 ld a, #$04 ; Load #$04 into A
$00:$45E0: (06) CD7E53 call $7E53 ; Call $7E53
$00:$45E3: (05) 1967 bclr4 $67 ; Clear $67.4
$00:$45E5: (06) CD49AF call $49AF ; Call $49AF
$00:$45E8: (03) B804 xor a, $04 ; Logical XOR (A XOR $04)
$00:$45EA: (02) A1C7 cp a, #$C7 ; Compare A with #$C7
$00:$45EC: (03) 260C jrne $45FA ; Branch to $45FA if not equal
$00:$45EE: (06) CD5743 call $5743 ; Call $5743
$00:$45F1: (05) 0DFA02 btjf6 $FA, $45F6 ; Branch to $45F6 if $FA.6=0
$00:$45F4: (06) 6ACD dec ($CD,x) ; Decrement $CD, index X,
$00:$45F6: (03) 49 rlc a ; Rotate left through carry
$00:$45F7: (04) AF pop dsr ; Restore DSR from stack
$00:$45F8: (04) B702 ld $02, a ; Load into $02 from A
$00:$45FA: (02) A115 cp a, #$15 ; Compare A with #$15
$00:$45FC: (03) 260C jrne $460A ; Branch to $460A if not equal
$00:$45FE: (06) CD7ED1 call $7ED1 ; Call $7ED1
$00:$4601: (05) 0DFA06 btjf6 $FA, $460A ; Branch to $460A if $FA.6=0
$00:$4604: (03) 4F clr a ; Clear A
$00:$4605: (06) CD49AF call $49AF ; Call $49AF
$00:$4608: (02) 95 ld s, a ; Load into S from A
$00:$4609: (05) 06A112 btjt3 $A1, $461E ; Branch to $461E if $A1.3=1
$00:$460C: (03) 260D jrne $461B ; Branch to $461B if not equal
$00:$460E: (06) CD7E14 call $7E14 ; Call $7E14
$00:$4611: (05) 3050 neg $50 ; Negate $50
$00:$4613: (05) 0DFA04 btjf6 $FA, $461A ; Branch to $461A if $FA.6=0
$00:$4616: (06) CD49AF call $49AF ; Call $49AF
$00:$4619: (05) 9204A165 btjt2 [$A1], [$65] ; Branch to $65, indirect. if $A1, indirect, .2=1
$00:$461D: (03) 261E jrne $463D ; Branch to $463D if not equal
$00:$461F: (06) CD56B1 call $56B1 ; Call $56B1
$00:$4622: (05) 0DF8FF btjf6 $F8, $4624 ; Branch to $4624 if $F8.6=0
$00:$4625: (05) 06640E btjt3 $64, $4636 ; Branch to $4636 if $64.3=1
$00:$4628: (05) 08640B btjt4 $64, $4636 ; Branch to $4636 if $64.4=1
$00:$462B: (05) 0B6808 btjf5 $68, $4636 ; Branch to $4636 if $68.5=0
$00:$462E: (06) CD7E14 call $7E14 ; Call $7E14
$00:$4631: (05) 09B00D btjf4 $B0, $4641 ; Branch to $4641 if $B0.4=0
$00:$4634: (03) FA or a, (x) ; Logical OR (A OR index X.)
$00:$4635: (03) 50 neg x ; Negate X
$00:$4636: (05) 1B68 bclr5 $68 ; Clear $68.5
$00:$4638: (06) CD49AF call $49AF ; Call $49AF
$00:$463B: (04) E550 bcp a, ($50,x) ; Bit compare A with $50, index X.
$00:$463D: (02) A11A cp a, #$1A ; Compare A with #$1A
$00:$463F: (03) 262D jrne $466E ; Branch to $466E if not equal
$00:$4641: (04) C60DFF ld a, $0DFF ; Load into A from $0DFF
$00:$4644: (04) B728 ld $28, a ; Load into $28 from A
$00:$4646: (06) CD56B1 call $56B1 ; Call $56B1
$00:$4649: (05) 0DF8FF btjf6 $F8, $464B ; Branch to $464B if $F8.6=0
$00:$464C: (05) 056810 btjf2 $68, $465F ; Branch to $465F if $68.2=0
$00:$464F: (04) CE02FA ld x, $02FA ; Load into X from $02FA
$00:$4652: (02) A330 cp x, #$30 ; Compare X with #$30
$00:$4654: (03) 2209 jrugt $465F ; Branch to $465F if higher
$00:$4656: (05) D602FA ld a, ($02FA,x) ; Load into A from $02FA, index X.
$00:$4659: (06) D70DFA ld ($0DFA,x), a ; Load into $0DFA, index X, from A
$00:$465C: (03) 5A dec x ; Decrement X
$00:$465D: (03) 2AF7 jrpl $4656 ; Branch to $4656 if positive
$00:$465F: (03) BE28 ld x, $28 ; Load into X from $28
$00:$4661: (02) A302 cp x, #$02 ; Compare X with #$02
$00:$4663: (03) 2402 jrnc $4667 ; Branch to $4667 if carry clear
$00:$4665: (02) AE02 ld x, #$02 ; Load #$02 into X
$00:$4667: (03) 5A dec x ; Decrement X
$00:$4668: (03) 5A dec x ; Decrement X
$00:$4669: (02) A69A ld a, #$9A ; Load #$9A into A
$00:$466B: (03) CC49BB jp $49BB ; Jump to $49BB
$00:$466E: (02) A149 cp a, #$49 ; Compare A with #$49
$00:$4670: (03) 261E jrne $4690 ; Branch to $4690 if not equal
$00:$4672: (06) CD56B1 call $56B1 ; Call $56B1
$00:$4675: (05) 0DF8FF btjf6 $F8, $4677 ; Branch to $4677 if $F8.6=0
$00:$4678: (05) 08640E btjt4 $64, $4689 ; Branch to $4689 if $64.4=1
$00:$467B: (05) 0A680B btjt5 $68, $4689 ; Branch to $4689 if $68.5=1
$00:$467E: (05) 076408 btjf3 $64, $4689 ; Branch to $4689 if $64.3=0
$00:$4681: (06) CD7E14 call $7E14 ; Call $7E14
$00:$4684: (05) 09B00D btjf4 $B0, $4694 ; Branch to $4694 if $B0.4=0
$00:$4687: (03) FA or a, (x) ; Logical OR (A OR index X.)
$00:$4688: (09) 80 iret ; Return
$00:$4689: (05) 1764 bclr3 $64 ; Clear $64.3
$00:$468B: (06) CD49AF call $49AF ; Call $49AF
$00:$468E: (05) 79 rlc (x) ; Rotate left through carry
$00:$468F: (09) 80 iret ; Return
$00:$4690: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$4694: (06) CD4988 call $4988 ; Call $4988
$00:$4697: (06) CD56B1 call $56B1 ; Call $56B1
$00:$469A: (05) 09B083 btjf4 $B0, $4620 ; Branch to $4620 if $B0.4=0
$00:$469D: (06) CD509B call $509B ; Call $509B
$00:$46A0: (04) C60DFD ld a, $0DFD ; Load into A from $0DFD
$00:$46A3: (02) A122 cp a, #$22 ; Compare A with #$22
$00:$46A5: (03) 2703 jreq $46AA ; Branch to $46AA if equal
$00:$46A7: (03) CC477D jp $477D ; Jump to $477D
$00:$46AA: (06) CD59D5 call $59D5 ; Call $59D5
$00:$46AD: (03) 2AAE jrpl $465D ; Branch to $465D if positive
$00:$46AF: (06) 6AC6 dec ($C6,x) ; Decrement $C6, index X,
$00:$46B1: (05) 0E00A0 btjt7 $00, $4654 ; Branch to $4654 if $00.7=1
$00:$46B4: (05) 022205 btjt1 $22, $46BC ; Branch to $46BC if $22.1=1
$00:$46B7: (06) CD49AF call $49AF ; Call $49AF
$00:$46BA: (02) A200 sbc a, #$00 ; Sub w/carry #$00 from A
$00:$46BC: (05) C7023C ld $023C, a ; Load into $023C from A
$00:$46BF: (04) C60DFF ld a, $0DFF ; Load into A from $0DFF
$00:$46C2: (06) CD56B1 call $56B1 ; Call $56B1
$00:$46C5: (05) 0DFBFC btjf6 $FB, $46C4 ; Branch to $46C4 if $FB.6=0
$00:$46C8: (03) 4D tnz a ; Test for negative and zero
$00:$46C9: (03) 2A1D jrpl $46E8 ; Branch to $46E8 if positive
$00:$46CB: (05) 096360 btjf4 $63, $472E ; Branch to $472E if $63.4=0
$00:$46CE: (06) CD7E00 call $7E00 ; Call $7E00
$00:$46D1: (05) 023803 btjt1 $38, $46D7 ; Branch to $46D7 if $38.1=1
$00:$46D4: (03) 4E swap a ; Swap nibbles
$00:$46D5: (02) 90AE00 ld y, #$00 ; Load #$00 into Y
$00:$46D8: (03) 48 sll a ; Logical shift left
$00:$46D9: (03) 2A03 jrpl $46DE ; Branch to $46DE if positive
$00:$46DB: (02) 90AE40 ld y, #$40 ; Load #$40 into Y
$00:$46DE: (04) C6023B ld a, $023B ; Load into A from $023B
$00:$46E1: (06) CD59AC call $59AC ; Call $59AC
$00:$46E4: (03) 2415 jrnc $46FB ; Branch to $46FB if carry clear
$00:$46E6: (03) 2046 jra $472E ; Branch to $472E always
$00:$46E8: (05) C7023B ld $023B, a ; Load into $023B from A
$00:$46EB: (06) CD5996 call $5996 ; Call $5996
$00:$46EE: (02) 90AE60 ld y, #$60 ; Load #$60 into Y
$00:$46F1: (03) 88 push a ; Save A on stack
$00:$46F2: (03) B66A ld a, $6A ; Load into A from $6A
$00:$46F4: (03) BA6B or a, $6B ; Logical OR (A OR $6B)
$00:$46F6: (04) 84 pop a ; Restore A from stack
$00:$46F7: (03) 2602 jrne $46FB ; Branch to $46FB if not equal
$00:$46F9: (05) 1167 bclr0 $67 ; Clear $67.0
$00:$46FB: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$46FF: (05) C7032E ld $032E, a ; Load into $032E from A
$00:$4702: (07) 8D00A3A3 ecall #$00, $A3A3 ; Call $A3A3 from page #$00
$00:$4706: (03) 2526 jrc $472E ; Branch to $472E if carry set
$00:$4708: (02) 909F ld a, y ; Load into A from Y
$00:$470A: (06) CD7264 call $7264 ; Call $7264
$00:$470D: (03) 251F jrc $472E ; Branch to $472E if carry set
$00:$470F: (06) CD5743 call $5743 ; Call $5743
$00:$4712: (05) 023803 btjt1 $38, $4718 ; Branch to $4718 if $38.1=1
$00:$4715: (03) 4E swap a ; Swap nibbles
$00:$4716: (05) 1863 bset4 $63 ; Set $63.4
$00:$4718: (06) CD53D7 call $53D7 ; Call $53D7
$00:$471B: (05) 0DFB3F btjf6 $FB, $475D ; Branch to $475D if $FB.6=0
$00:$471E: (00) 82
$00:$471F: (02) A6FC ld a, #$FC ; Load #$FC into A
$00:$4721: (04) B783 ld $83, a ; Load into $83 from A
$00:$4723: (07) 8D004736 ecall #$00, $4736 ; Call $4736 from page #$00
$00:$4727: (03) B648 ld a, $48 ; Load into A from $48
$00:$4729: (02) A0FB sub a, #$FB ; Substract #$FB from A
$00:$472B: (05) C70DFA ld $0DFA, a ; Load into $0DFA from A
$00:$472E: (04) CE023C ld x, $023C ; Load into X from $023C
$00:$4731: (02) A6A2 ld a, #$A2 ; Load #$A2 into A
$00:$4733: (03) CC49BB jp $49BB ; Jump to $49BB
$00:$4736: (07) 8D009EC3 ecall #$00, $9EC3 ; Call $9EC3 from page #$00
$00:$473A: (03) AC push dsr ; Save DSR on stack.
$00:$473B: (03) BE82 ld x, $82 ; Load into X from $82
$00:$473D: (03) B37F cp x, $7F ; Compare X with $7F
$00:$473F: (03) 223A jrugt $477B ; Branch to $477B if higher
$00:$4741: (03) 58 sll x ; Logical shift left
$00:$4742: (03) 58 sll x ; Logical shift left
$00:$4743: (05) D607B0 ld a, ($07B0,x) ; Load into A from $07B0, index X.
$00:$4746: (02) 9097 ld y, a ; Load into Y from A
$00:$4748: (03) 271F jreq $4769 ; Branch to $4769 if equal
$00:$474A: (05) D607B1 ld a, ($07B1,x) ; Load into A from $07B1, index X.
$00:$474D: (02) 7B ld dsr, a ; Load into DSR from A
$00:$474E: (05) D607B2 ld a, ($07B2,x) ; Load into A from $07B2, index X.
$00:$4751: (04) B74A ld $4A, a ; Load into $4A from A
$00:$4753: (05) D607B3 ld a, ($07B3,x) ; Load into A from $07B3, index X.
$00:$4756: (04) B74B ld $4B, a ; Load into $4B from A
$00:$4758: (03) B683 ld a, $83 ; Load into A from $83
$00:$475A: (05) D007B0 sub a, ($07B0,x) ; Substract $07B0, index X. from A
$00:$475D: (03) 250E jrc $476D ; Branch to $476D if carry set
$00:$475F: (04) B7?? ld $00, a ; Load into $00 from A

If a card was a dick and the code was the balls, and this is the 240. I bet FTA sucks the code outta this...lol

[elperro]

C&P
Good nagra 3 news part 1-2-3
--------------------------------------------------------------------------------
PLEASE TRANSLATE PART 1 TO ENGLISH.
You will like this Part 1
--------------------------------------------------------------------------------
This is a rare gift.
I suggest that you
Use it wisely.
They deleted this as soon as I posted it. I found it earlier today. I knew those spanish classes and girlfriends would come in handy. Remember is was a spanish team that cracked N2 a few years ago. Now Germans and Spanish engineers are works together and appear to have a public file
They deleted it because of it's "plastic/card" content. Post it on card friendly sites that you regularly frequent;
Get the word out......
I found proof that N3 can be beat
if they can do it on cards
boxes will follow closely behind.
Good Luck
Holstein912
Un intenso y depurado rumor está corriemdo como el agua por los diferentes Foros Undeerground de medio mundo, con foto incluida. al parecer y según diversas publicaciones se anuncia que que se publicarán dos archivos exclusivos para una tarjeta PrimaCard y que al parecer podrían piratear el sistema de Kudelski Nagra 3 e incluso NDS Videoguard. Se habla también, de que no es posible introducir los dos códigos a la vez en dicha tarjeta para que emule ambos sistemas y que además, será una tarjeta cara, del orden de los 140 €. Pero lo más sorprendente de todo es que se habla de que la última adaptación del código la están realizando un grupo de Hackers españoles. Presumiblemente se entiende que en esta aventura se han unido dos Teams importantes con expertos Alemanes y Españoles. Hasta aquí todo muy bien, y bastante entretenido. ¿Es una historia de ficción o es un evento que pronto se cumplirá?
En cualquier caso en los diversos Foros parecen estar esperanzados y sobretodo entretenidos. En portales mas serios con estos temas nada hablan de esta milagrosa tarjeta y otros apuntan a la madre de todas las Fakes, pues no se entiende cómo se ha podido abrir el sistema de Nagra 3 implantado en Alemania con el escaso tiempo de pruebas en el que están sometidos ahora mismo, y que no se hable de TV Cabo, sistema que lleva más tiempo en proceso de estudio. Primero fueron unas fotografias del Chip de las ROM 142, despues de la ROM 180 y ahora la nueva PrimaCard o PrimaerCard. Objetivamente hablando se puede decir que lo único real es que Internet es la madre de todas las esperanzas y rumores que finalmente son creidos por miles y miles de usuarios de los foros.
Kudelski ya ha perdido bastante dinero con Nagra 2 y ahora, tras perder algunos viejos clientes importantes y recuperar otros, ha hecho un gran esfuerzo económico para solucionar ese gran agujero que la pirateria agrandaba por momentos. Nagravision 3 que no es tal, sino una evolución del sistema Nagra, se conoce con distintos niveles de Rom con la finalidad de poder proteger al resto de clientes, si uno de ellos es pirateado. Además cuentan con una tecnologia más avanzada y con sorpresas en dichas tarjetas capaces de mantener a los mejores Hackers del mundo demasiado tiempo ocupado con ellas. Tranosky ya demostró cuan complejo es hackear una tarjeta o mejor dicho, cuanto instrumental es necesario, nada accesible para cualquiera. entonces estamos ante el bulo más grande del año, o ante la desesperación de los comerciantes... quien sabe, el tiempo nos dará nuevos datos más adelante. Se admiten apuestas.
PD: Esta noticia está basada en la información y comentarios que se pueden encontrar en Internet. El autor de esta WEB no acepta en ninún término la pirateria. Sólo informa de acontecimientos acogiendose a la libre expresión y libertad de opinión. Abonese a su plataforma digital correspondiente y no le de más vueltas al asunto.
Fuente: TDT-Aguilas
You will want this Part II
--------------------------------------------------------------------------------
Google translation:
An intense and refined corriemdo rumor is like water in different forums Undeerground half a world, including photo. Apparently and according to various publications announcing that two files to be published exclusively for a card PrimaCard and who reportedly could hack the system and even 3 Nagra Kudelski NDS Videoguard. It also speaks, that is not possible to introduce the two codes at a time on that card to emulate both systems and that also will be a face card, the order of 140 €. But the most surprising thing is that there is talk that the latest adaptation of the code are making a group of Hackers Spaniards. Presumably it is understood that in this adventure have joined two major Teams with German and Spanish experts. So far, very well, and quite entertaining. Is it a story or fiction is an event that will soon be met?
In any case in the various forums seem to be hopeful and above all entertaining. In more serious portals with these issues speak nothing of this miraculous card and others point to the mother of all Fakes, as they do not understand how it was possible to open the system Nagra 3 implanted in Germany with limited time in which evidence are subject right now, and not talk about TV Cabo, a system which takes longer to process study. First there were few photographs of the ROM chip 142, after the ROM 180 and now the new PrimaCard or PrimaerCard. Objectively speaking one can say that the only thing real is that the Internet is the mother of all rumors and hopes that finally Cree are thousands and thousands of users of the forums.
Kudelski has already lost enough money with Nagra 2 and now, after losing some old and retrieve other major customers, has done a great economic effort to resolve this great Piracy enlarge the hole at times. Nagravision 3 that is not such, but an evolution of the system Nagra, is known with different levels of Rom in order to be able to protect the remaining customers, if one of them is pirated. In addition have a more advanced technology and surprises in these cards capable of keeping the world's best Hackers too busy time with them. Tranosky already demonstrated how complex hack is a card or rather, the instrumentation needed, nothing accessible to everyone. then we have the largest bulo year, or to despair of traders ... who knows, the new data will give us time later. Acceptable bets.
PS: This press release is based on information and comments can be found on the Internet. The author of this SITE does not accept the term in ninún piracy. Only reported events qualify for free *******ion and freedom of opinion. Subscribe to its digital platform for him and not turn over the matter.
I got this off a European Site that I watch, visit and monitor called
part 3
The new system of Cripta Nagra (N3) has fallen! Premium Card N3 As much it is so some things that really must continue being NP Sooo all this is new. Nowadays, the RSA equipment decided to raise NP. D + and pre *** e (After KARTENTAUSCH) Siknd already hehackt. It seems more than a tool of TV Cabo to give… but they ten well-taken care of! 1) Rome 180 (D +) tool is probably a pure Backddor, not to all! 2) Rome 142 (TV Cabo) tool is really It is not a tool for MOSC Cabo, that does a TV to him Cabo ermölglicht tickets of MOSC in all the free air channels (except PPV) The tool also allows to extend Third This is only original with TV Cabo cards! Of the tool, there is a version of which is a number of license questions! If they do not do it, the card of burners unwiederruflich destroyed! The number of license can be in Portugal around 1500 Euros. One is Ali the past of cards to buy cheap and to sell again Apparently, there is a version where rausgepatched. The fact is that the new system of Cripta Nagra (N3) has fallen!
Rumours about hack NDS and Nagravision 3
Since yesterday monitors our editors increasingly rumours about the possible hack of the NDS Videoguard and Kudelski Nagravision 3 coderingsystemen. In practice this could mean that the package of Sky Italia (Videoguard), the Spanish D (Nagravision3) and the German Premiere (Nagravision3) without paying any adjustments can be made visible.
The potential of the hack Nagravision3 system will be a major blow to the ailing Swiss coderingsspecialist Kudelski. This past week, made known a substantial loss in the first part of 2008 ago. This was mainly suffered by the costs that the company had to make codes cracked by television weather to recover. Even the loss of customers by the long-term free channels has to look at the losses to Kudelski. In the Netherlands using the digital television CanalDigitaal (Mediaguard) and UPC (Nagravision2) the encryption of Kudelski well as other products and services of the Swiss company.
The possible Nagravision3 hack is of a commercial nature. There will soon be a "smart card ijskrabber" on the market which brought more than 120 euros will cost. The force and any lasting effect of this smart card is totally uncertain, hence the pet name "ijskrabber."
Today come from Italy also becoming increasingly stubborn rumors that have never publicly hacked Videoguard encoding of the English NDS prey would have been cases of hackers. It talks about using an old Nokia Dbox receiver via a particular file should be modified. This is the zenderpakket of the Italian branch of the worldwide Sky television. The international satellietforum Satscreen has been through an email to its members asked to holders of Dbox recipients to enter into the file on force to be tested.
Satellite Magazine would unnecessarily indicate that use of modified smartcards and / or satellite receivers are free to be able to watch television which must be paid in the Netherlands through the Penal Code prohibited. Reason to strongly warn visitors of possible ways to look for free use.
Holstein912
---------------------------------------------------------------------------------------------------------------
Though this was an interesting reading................................COOKIE MONSTERS came in the all known rear windows, doors, and then some.

[prinler]

Hmmmmmdidty

[dellsam34]

I don't believe until I see it.

[franky932]

the beginning of the tread was nfusion.

is it still up?

[garysam]

Nfusion is still up and with a new S/W that has most movies on it (no PPV, of course). Only a retard would think that this is a hack and not card sharing, but then, only retards would worry about who got what first. The objective is to have TV. If N3 is hacked by FTA first and card purists have it a day later...would they say " Fuck that!....I won't watch it because it came from FTA?" Even "visa-versa"....I doubt it. What you may be missing is the fact that this stuff comes from exceptianal coders who sell to the highest bidder. So whether FTA or roms were first, really doesn't mean fuck all. It's pretty much a fact that it came from the same sources.

[franky932]

Nfusion is still up and with a new S/W that has most movies on it (no PPV, of course). Only a retard would think that this is a hack and not card sharing, but then, only retards would worry about who got what first. The objective is to have TV. If N3 is hacked by FTA first and card purists have it a day later...would they say " Fuck that!....I won't watch it because it came from FTA?" Even "visa-versa"....I doubt it. What you may be missing is the fact that this stuff comes from exceptianal coders who sell to the highest bidder. So whether FTA or roms were first, really doesn't mean fuck all. It's pretty much a fact that it came from the same sources.


but if the server is shot down by bev or a lawsuit against nfusion?

[watchnit]

not convinced that overseas is enough protection anymore ? there is an existing legal battle that courts have asked hong kong for the evidence, in which they state will be forth coming...

I would say IKS needs an evolution into a peer to peer type of setup... sending only parts of the data from each server... only assembled by the client... or it must move to countries like Iran and Venezuela... where US cooperation is shunned...

this battle is not over by far... political and legal challenges are forth coming...

[franky932]

is it worth it to buy a nfusion HD or risky?

ty

[caos]

Doesn't Nfusion's allow connections to be masked via proxy? Even if they were successful in obtaining logs from the IKS servers in Europe, there's no way the providers are going to go through the trouble of subpoening the proxy people, and then the end users ISP just to nail one end user. It's much easier and economical for them to nail the operators of the IKS/Nfusion servers.

I've been trying to keep up with all the Nfusion progress and I am days if not hours away from pulling the trigger on one of these receivers!

[OU812]

Well if you want to have HDTV-with plastic-you must mod the ird which now you cant just jtag and use-costs money to mod -and with the NF you can have HD without dealing with blockers-spoofs-and whatever else you may need-also if its true and card sharing is the way of the future-im sure the provider will figure out a way to make it difficult enough to trace to the end-user as that is the only way they will make money on it. Most peeps will not stick their neck in a noose willingly-

[garysam]

Like any other illegal activity, the risks increase over time. Only you can decide what your comfort level is. I have not heard an IKS argument that made any sense at all. Maybe they can get your IP address, maybe not. If they can get it from an IKS server, however, they can sure as hell get it when you download your plastic fix too. So, really, what is the difference? If hammering on the end user is the chosen path-forward for the providers, you are just as fucked with plastic as you are with IKS.

[franky932]

i am sure that bev have a nfusion in their hands and get a close look

[kromedge]

Dishnet and BEV is fucked, N3 is whored out.
mili


This may be true, but all I know is that nobody without a subscription is able to view BEV using the traditional methods. I say let BEV have their day in the sun because they only get to do it once every 3 or 4 years and it costs them a shitload of money to have that day. Once the card swap is complete for both providers, we will put them back in their rightful place under a dark cloud.

[rg6a]

Re: Bandwidth Shaping

That's a friggin' euphenism, but Bell (Sympatico.ca) is filtering and throttling down peer to peer file exchanges. There are many ISPs in Canada that pay to use the Bell Network infrastructure and their subscribers also have this problem.

The CRTC (Canadian FCC) ruled that Bell can do this to protect their Network integrity.

So there ya' go, and besides the BitTorrent thing...........also Skype is in their headlights. I can see this filtering down to all major bandwidth suppliers where ever they are.

Back to N3, the various auction sites have not too many takers and low prices on said plastic being offered. I'd also think that N3 plastic will be closely monitored to where and whom it goes to.

I hate to say this but perhaps FTA may be the way to go as the Chinese and Koreans have more at stake than a bunch of hackers and private blocker websites.

Natch, don't think for a moment that they will make the new crack compatible with all those old STBS....................Nope will have to buy a new one.

Still, a USB stick can't be Looped...........just my wandering thoughts and nothing to back it up with.

[HuSatellite1]

Like any other illegal activity, the risks increase over time. Only you can decide what your comfort level is. I have not heard an IKS argument that made any sense at all. Maybe they can get your IP address, maybe not. If they can get it from an IKS server, however, they can sure as hell get it when you download your plastic fix too. So, really, what is the difference? If hammering on the end user is the chosen path-forward for the providers, you are just as fucked with plastic as you are with IKS.

They are totally different....
Let me explain why,
You can download any file you want, It doesnt mean you actually figured out how to load a card and watch tv.
I can download many files explaining how to make crystal meth, plastic explosives ect...
That doesnt mean I sold drugs or blew anything up!


IKS is different, The receiver is getting packets sent to it ALL THE TIME.
Meaning you were almost positivly watching tv. Thats all they need, in civil court A jury only needs to be 51% sure you were stealing the signal.

Get what im saying?

[HuSatellite1]

Natch, don't think for a moment that they will make the new crack compatible with all those old STBS....................Nope will have to buy a new one.


All FTA's will ba able to keep up, not using full emu though.....

im sure n3, if hacked publicly, will be released for all the old fta's. just like last time!

[spanga]

i'm a clueless mofo for the most part......apparently no less that the providers that bought into nagra 1 and 2 however.......face it...card sharing is here to stay come hell or high water.....wide open marketplace or small private nets...either way the cat is outa the bag.....it has been demonstrated as feasable by nf and you can bet that more and more research is being done to either allow current models of stb's to accomplish this or into new models to go this route......that's if N3 isn't pooped by plastic at least once somewhere and/or if that info isn't released.......if N3 doesn't fall big time look for cardsharing to be the one step back/forward of the hobby.....perhaps no ppv but we'll take what we can get.....some of us even gratefull for it.......btw....if csh works for dn and bev why not dtv?......at the end of the day, i see equivalent free cable tv for everyone that can afford a pc internet connection............pls refer to my first statement in this post.......lol

[bacala]

just letting everyone know there"s nfusion clones around....you could tell by the power plug out of the back of the receiver....the round plug is a clone...original is rectangular......clones serial start with HO812NF........picture link.http://img395.imageshack.us/img395/6158/novacloneki4.jpg......

[spanga]

just letting everyone know there"s nfusion clones around....you could tell by the power plug out of the back of the receiver....the round plug is a clone...original is rectangular......clones serial start with HO812NF........picture link.http://img395.imageshack.us/img395/6158/novacloneki4.jpg......
(http://img395.imageshack.us/img395/6158/novacloneki4.jpg)serial numbers that begin with H0812NF and purchased after like Feb of this year are to be scrutinized for the above discrepency as apparently that series of nova was sold out by then.....cheers

[franky932]

They are totally different....
Let me explain why,
You can download any file you want, It doesnt mean you actually figured out how to load a card and watch tv.
I can download many files explaining how to make crystal meth, plastic explosives ect...
That doesnt mean I sold drugs or blew anything up!


IKS is different, The receiver is getting packets sent to it ALL THE TIME.
Meaning you were almost positivly watching tv. Thats all they need, in civil court A jury only needs to be 51% sure you were stealing the signal.

Get what im saying?

if it is not stealing what it is?

[Yongone]

Anyone can download info on how to make drugs, but if the cops get wind that you sold meth then find a lab in your basement and prove a link, you're not getting your 51%.

If the packets are encrypted, there's nothing illegal about this, but if he decrypts them, chances are he's finished right away because the simple act of decrypting could be evidence of hacking. But read below for an explanation:

What very narrow scenario he offers is that yes, you can have all the info and means to do something illegal and you are not breaking any law.

What he fails to mention is how and why the cops would end up looking into his home. He conveniently forgets that somehow information was leaked to lead them to his home. With all the evidence they would find, it would not convict him, but when attached to other evidence such as with a confession of a friend or partner, a clear pattern will emerge and he'll be sunk.

Many refuse to realize is that it's not just receiving packets. It's part of the overall act of stealing signals, one step in the process, and that's enough to lose that court case.

Many use bad logic to justify all sorts of things. They focus on specific points to cloud the bigger picture. Juries can be manipulated up to a point, but if the prosecution clears up things, they will be even more prone to convict the guy, partly to teach him a lesson for treating them as chumps.

[franky932]

Husatellite is confusing things.

Anyone can download info on how to make drugs, but if the cops get wind that you sold meth then find a lab in your basement and prove a link, you're not getting your 51%.

If the packets are encrypted, there's nothing illegal about this, but if he decrypts them, chances are he's finished right away because the simple act of decrypting could be evidence of hacking. But read below for an explanation:

What very narrow scenario he offers is that yes, you can have all the info and means to do something illegal and you are not breaking any law.

What he fails to mention is how and why the cops would end up looking into his home. He conveniently forgets that somehow information was leaked to lead them to his home. With all the evidence they would find, it would not convict him, but when attached to other evidence such as with a confession of a friend or partner, a clear pattern will emerge and he'll be sunk.

What husatellite refuses to realize is that it's not just receiving packets. It's part of the overall act of stealing signals, one step in the process, and that's enough to lose that court case.

Many use bad logic to justify all sorts of things. They focus on specific points to cloud the bigger picture. Juries can be manipulated up to a point, but if the prosecution clears up things, they will be even more prone to convict the guy, partly to teach him a lesson for treating them as chumps.


the lawsuit can be tu Nfusion or shutting done the server

bell have a nfusion in their hand to figure that out

[duh1]

here's the part that kills me, u boneheads gotta guote 47 gazillion paragraphs to make a bone head statement, give me a break, just say ur wrong, or bump, or hey, i know, how bout one original thought, u guys r usin my bandwidth, quit it.

[OU812]

Hey,,,,,,,,watch this,,,,,,,,,,,,,OUCH!!!

[vvhicke]

If they really wanted to get everyone here all they would have to do is Bust this site and everyone's IP's are right here..........We all ask questions about stealing tv so what does it matter if using a receiver with IKS.....You buy from a site you donate.....YOUR ALL FUCKED>>>>>>:confused::eek::mad::rolleyes:

[kromedge]

I am in the business of making money and it seems like nFusion is where the money is. I will not bother selling Viewsats, maybe dongles for them. Small, controversial and easy to ship is my motto :)

mili

That may all fair and well but you can bet your ass that the FTA gang will likely break the encryption on the dongle which I'm sure would be a helluva lot easier than a Nag3 hack just to keep sales going in the interim.

[fubr]

If they really wanted to get everyone here all they would have to do is Bust this site and everyone's IP's are right here..........We all ask questions about stealing tv so what does it matter if using a receiver with IKS.....You buy from a site you donate.....YOUR ALL FUCKED>>>>>>:confused::eek::mad::rolleyes:
hmm,
ok name me one site that was hosted in Asia, that was owned by someone in the Bahama's has ever been busted?
secondly, why would you use your real IP on a site that you just admitted you have concerns about.
3rd point, You think mili is stupid? as long as he has been doing this I would not be one bit surprised if he was not even on paradise Island but has held a clever ruse for all these years. I doubt he even has a computer where ever he is.
I see your concern, I see sites that are hosted in the USA and all that would take is a simple request and servers would gladly hand out server logs, also some countries that play well with USA, like Canada, Britian or any kind of internet traffic from the middle east or south america.
I have pondered wether to go the IKS route or not, after reading, thinking and more readng I would do it just so I want miss out, but it would have to be a safe encrypted way and in an asiain country or even maybe mexcicoooo before I would do it.

[pogotv2]

Are alternate decryption solutions possible for N3? Simply put, can an alternate decryption solution be derived by knowing what the end result is. Currently for say the weather channel we know what the final picture and sound is frame by frame. Can a compare be done on the n3 stream with the decrypted end result, and reverse engineer a solution. It would seem that if you know what the final product is ( decrypted N2 test pattern) by comparing it to the N3 stream one could derive a hack for N3.

I am no crypto guy for sure, but when the british decrypted the Egnima in WWII they had no clue of what the final mesage was. We do though, and by compairing, maybe N3 encryption could be solved.

[spanga]

the enigma situation was not quite as you put it.......they stole a coding machine and figured things out from there.....in fact it's kinda the word on the street that something very similiar happened to get us N1 and 2....bought or stolen or bought from the guy that stole it......something like that

[dellsam34]

Don't worry guys a hack will occure, DN is making money illegaly and tax free more than what they're making with legal subs, they will leak their codes to offshore mafia, otherwise how do you explain that DTV has been safe for years.

[ruciz]

Don't worry guys a hack will occure, DN is making money illegaly and tax free more than what they're making with legal subs, they will leak their codes to offshore mafia, otherwise how do you explain that DTV has been safe for years.


So the billions the spent updating to ROM240 cards was for the investors then? too much illegal money they had to launder? Bev pushed them to do it? They ran out of milk with the 102 cow? Your statement is transparent and your FTA will stop decrypting DN weather you like it or not.

DTV has been safe due to the prosecution of end users who ordered cards and programmers off unsecure websites... DTV is hacked somewhere in the world for sure, but not in the public eye.. no one wants that heat on their back when they can easily screw the other pooch.

[corman]

So the billions the spent updating to ROM240 cards was for the investors then? too much illegal money they had to launder? Bev pushed them to do it? They ran out of milk with the 102 cow? Your statement is transparent and your FTA will stop decrypting DN weather you like it or not.
DTV has been safe due to the prosecution of end users who ordered cards and programmers off unsecure websites... DTV is hacked somewhere in the world for sure, but not in the public eye.. no one wants that heat on their back when they can easily screw the other pooch.
Another fta slam. Where did he even mention fta? I don't agree with his statement but good god, people get off this fta bash fest already.
As far as I'm concerned , fta and all illegal means of watching dishnet will go black soon, weather you like it or not.

[franky932]

millions not billions...........

[ruciz]

Another fta slam. Where did he even mention fta? I don't agree with his statement but good god, people get off this fta bash fest already.
As far as I'm concerned , fta and all illegal illegal means of watching dishnet will go black soon, weather you like it or not.

It wasn't an FTA slam at all.. I just figured FTA was implied as he was ignorant to a lot of facts any tester would be aware of if they truly tested, and who exactly is 'offshore mafia' that would need this code if the cards actually become hacked unless they were making alternative devices, which dish is illegally profiting on...

yea, if it cost billions that would be retarded. those cards cost only a few bucks to fab, shipping & call center/network support to get them going likely cost more.

[dellsam34]

How can you proove that the plastic dump is done here and not offshore ?

[ruciz]

OK.. lets see here. plastic dumps (or any IC chip dumps) can be done 1 of 2 ways.

historically how plastic has been compramised, is using a device dubbed a 'glitcher' and an 'ISO programmer' with some finely crafted scripts and software. This is non-invasive and leaves the compramised card in a usable condition.

or method 2, to break out the decapper and use a scope to physically read the chips code... expensive and invasive, and the device you read the code off of is DOA. Not good for when the stream changes in 10 minutes time.....

If dick is sending codes to people, its likely not glitch scripts... Its exactly how their service works (IE encryption routines, Mapcalls, etc) - This would NOT help the average joe tester gain access to their card for reading/writing purposes, or help them test anything really.

For the tester, the card holds all this information - meaning subsequent code sent from DN to anyone else would be irrevelant to their course of action... Testers want a glitch script to gain access to the card, then a fool proof way to be able to reprogram it so the provider is now locked out.

As for where the dumps are done it could be anywhere.. don't really matter, if the card is dumped it proves nothing, if its hacked thats another.... We need it hacked for sustainablilty, dumps would need to be done literally hourly which isn't fesiable.. esp if method two needs to be used.

[robkermit]

why would the cam need to be dumped every 10 mins.....? do you really think that they would write that many code changes to a cam one control word packet to the next?

once dumped the first time enough info about the cam would be known where an emulation solution could be fabricated and the info needed for future could be obtained from the emulation source... OR they would obtain no information of use and a second code dump would be useless anyhow..

also you must remember the smart cards have a limited amount of times that data can be written to it..

usually the control word packets generate the "key" needed to decode the stream until the next control word packet is sent down. the "key" needed to decode that specific video packet is not written to the cam but usually is written to "ram".. so dumping the cam would not reveal what was stored within its ram anyhow, since the contents of ram would be lost as soon as the cam loses power or receives its next "reset"..

if they were really writing "code" to their cams every 10 minutes or hourly then they would eventually burn the cards up... requiring yet another card swap...

[dw8]

hmm,
ok name me one site that was hosted in Asia, that was owned by someone in the Bahama's has ever been busted?
secondly, why would you use your real IP on a site that you just admitted you have concerns about.
3rd point, You think mili is stupid? as long as he has been doing this I would not be one bit surprised if he was not even on paradise Island but has held a clever ruse for all these years. I doubt he even has a computer where ever he is.
I see your concern, I see sites that are hosted in the USA and all that would take is a simple request and servers would gladly hand out server logs, also some countries that play well with USA, like Canada, Britian or any kind of internet traffic from the middle east or south america.
I have pondered wether to go the IKS route or not, after reading, thinking and more readng I would do it just so I want miss out, but it would have to be a safe encrypted way and in an asiain country or even maybe mexcicoooo before I would do it.


What Mili's Not really in the Bahama's what's next you'll tell me that's not his real name. Your spoilling this 007 fantasy weve got going.
PS don't even think about talking about Santa

[ruciz]

most ICs are good for at least 100,000 complete write cycles, thats one full write to a CAM every 18 minutes for 3 full yers before you are even getting close to the theoritical limit where corruption and data retention could be questionable. The 102s haven't even seen a 4 year lifespan yet...

Trust me wearing out their smart cards is the last thing on their mind, their IRDs would go first.

I'm fully aware of the nuts and bolts of how basic cryptography works - as for where the data is stored this is the problem. We need to hack into a card, modify it to move all the things we care about into non-volitile memory, then write a backdoor so we can always get back in and checkup on whats happening so when things change we are able to see and address them.

I dont think an invasive card dump would hold for very long, as the provider could change the card very quickly and without a way to see whats done you have nothing.

[HCCAfan]

i think ruciz is correct, the only thing that has kept fta at bay is multiple map calls. if they can pull off map calls every 30 minutes, you start driving fta testers nutz, almost into a sub till something more stable comes around. cat and mouse people, cat and mouse....

[mili]

They can but they don't.

mili

[ruciz]

I know only what history has told us... As for the future you can only presume improvement on the past.

As for N2 it was fucked up in what seemed almost a deliberate manner.. The providers had us sitting ducks on many occasions that they could have pulled triggers but never did.

If history does repeat itself rather than alter course - huge money will make mouths blabble, which is exactly what we need.

[tweakedout]

amen to the downloadables

[OU812]

Well the nfusion gang has come out with a bin that allows it to work with a proxy-so mabe that will alleviate the IKS security issue a bit-------

[klurka]

I see most international channels move to N3 now, is there any update on nFusion?

[AnnaNymET]

I see most international channels move to N3 now, is there any update on nFusion?

I've read that those channels have changed transponders and birds in some cases, but are still N2.

[ekim]

I've read that those channels have changed transponders and birds in some cases, but are still N2.

International channels now moving to nagra 3. It has started now. Running
Rom 102 and get a message like :

IMPORTANT SERVICE NOTICE:
THIS CHANNEL HAS MOVED.
Call the 1-800 number and talk to a rep about upgrades.

I hear the ARABIC channels have started too vanish.
Looks like NAGRA 3 has arrived. :(

[zerocool]

Most of the international channels can be brought back using older firmware on recievers (from what I hear) and by spoofing rom240 onto a rom102/103 card (no autoroll though). I have tried the rom240 spoof and it does give back the international channels that otherwise say only work with new cards. I'm using a private blocker for the rom240 spoof so don't know if there is a public blocker that does that.

[netdomain]

Hi ZeroCool,

How does it give you international channels? I tried it and it says "This channel has moved to new location" . If i go in 6100 range to pickup the same channel, it gives me a black screen.

Does it work for you on 6100 range or just the regular "original" channel number?

What receiver are you using? Is it a VIP receiver?

[kronicSJ]

Well the nfusion gang has come out with a bin that allows it to work with a proxy-so mabe that will alleviate the IKS security issue a bit-------

proxies don't do squat for real security,
a proxy ONLY masks the originating ip, it DOES'NT make it go away,
ppl that have gotten busted for warez usually use a proxy, DID'NT help them did it,
Child pervz that get busted by the FBI use proxies, yet they STILL get busted,

IF they REALLY want to find you, they WILL, plain-n-simple,

just FOOLISH to put your trust in a proxy,....

[beartrack]

And how many have you heard of getting busted so far? Not saying it won't happen but I think they'll go after the source first

[JT]

proxies don't do squat for real security,
a proxy ONLY masks the originating ip, it DOES'NT make it go away,
ppl that have gotten busted for warez usually use a proxy, DID'NT help them did it,
Child pervz that get busted by the FBI use proxies, yet they STILL get busted,

IF they REALLY want to find you, they WILL, plain-n-simple,

just FOOLISH to put your trust in a proxy,....

I feel I need to clear a few things up regarding this post.

First, it is not foolish to trust a proxy. Everyone surfing the net at sites like this one and any other that may controversial is a must if you care about remaining anonymous. The vast majority of the time, a proxy server is a great idea while online and works fine to keep you anonymous.

However, like kronicSJ pointed out, if law enforcement really gets serious about tracking you down and determining your original IP, they can and will do it. They typically won't do that without good cause. If they think you are a child predator, they will be all over you....and this is a good thing IMO. If your a major industry that's stealing from a legit cooperation, like Nfusion, they can and will track you and find original IP's if they want to. On the other hand, end users will probably be fine. They'll go after the company providing the service most likely, but you never know. End users may or may not be included if there should be a bust.

For the most part a proxy does give you the anonymity your looking for when surfing and downloading files from sites such as this one. A guy should always use a proxy. If nothing else it makes the guys trying to find you jump through one more hoop.

[Danndino]

agreed.......of course bust the dealers first.....

[Yongone]

Why waste time on the small guy? When the dealer is busted, the clients are neutered, plain and simple. Also, there are a lot less targets with IKS than FTA receivers, hence easier to find and bust.

IKS wil never gain popularity like FTA receivers which let you control your own receiver without the need for a dealer to get fixes, without any internet connection required.

With the amount of money Nagra loses to hacking, the will certainly spend the money to track down any dealer that causes them to lose money.

There's a backup to the current new card in case something else happens. So whatever could be offered is going to be short-lived, plus dealers don't invest unless there is a clear and easy way to make money, and a backup card takes the wind out of their sails.

I believe in this situation Nagra has secured any major compromise for the next few years.

[spanga]

agreed.......of course bust the dealers first.....arooh?.....unless the boxes are sold with 3rd party software installed nothing illegal about selling any fta box....yet.....lol.......the required upgrade software to run the nf is downloadable right off of the net directly to the unit.......it's the server they need to take down and apparently that's easier said than done......no idea why.......some info floating around that ''technically'' nothing illegal is being done until user turns on tv.....not sure i see how that's possible but there you have it

[HCCAfan]

There's a backup to the current new card in case something else happens. So whatever could be offered is going to be short-lived, plus dealers don't invest unless there is a clear and easy way to make money, and a backup card takes the wind out of their sails.

I believe in this situation Nagra has secured any major compromise for the next few years.


I agree with your post except the last part. N3 has been comprimised, however I do not know if that will surface to the public or not.

[ruciz]

the only device thats truly secure is a device that offers no user I/O.
These cards offer that, they are not secure. Should we find the security hole before their lifespan has depleated is another thing that only time can tell.

Either way K & the gang are not messing around and have learned from their previous mistakes. N3 will not be a plug and play solution should there become one... maybe this hobby will go back to that, rather than an FTA market.

[Yongone]

It is HIGHLY unlikely the same groups will continue as they are. they made their money, many are in lawsuits, and they aren't as hungry as they were at the start.

Every hack brought in different groups and players, with people from past hacks often in a very small minority because they will or have been sued, or they made their money and decided it was enough. People move on, and there is no reason to believe this round will be any different than all the past ones.

Even if N3 was hacked, and that's really a fairytale until something is available, Nagra has backup cards. And what most people can't understand is how much money and effort is required to break encryption. Imagine all the FTA manufacturers coming out with a fix: then you'll have a very quick roll-out of the newer card in effect making any hack dead within less than a year only to start over again. For people who are used to easy money they'll just walk away and invest in something else.

If you just can't accept times will be incredibly tough and without free TV, go to a sat forum and post suck-up messages. It's as effective as praying for a miracle.

[curiousgeorge]

Are you still planning to stock these Nfusions Mili? If so when...

[klurka]

Most of the international channels can be brought back using older firmware on recievers (from what I hear) and by spoofing rom240 onto a rom102/103 card (no autoroll though). I have tried the rom240 spoof and it does give back the international channels that otherwise say only work with new cards. I'm using a private blocker for the rom240 spoof so don't know if there is a public blocker that does that.

Well there are 2 different issues here:

1- International channels (e.g. 620 GEO) had the smart card upgrade message with a cutoff date of 01/xx but 2 weeks before that, dish moved it to some other sat. So when u selected it, it said this channel has moved.
2- Then the cutoff date came, and now u cannot even select that channel as it says new card must be installed to watch this.

So my question s are:

1- Which sat did those channels move to (620/621/902/903 etc.) and how can we get the signal?
2- If we do get the signal/sat, can they be brought back from N3 smart card message by spoofing to what some people claiming rom240?

[HCCAfan]

It is HIGHLY unlikely the same groups will continue as they are. they made their money, many are in lawsuits, and they aren't as hungry as they were at the start.

Every hack brought in different groups and players, with people from past hacks often in a very small minority because they will or have been sued, or they made their money and decided it was enough. People move on, and there is no reason to believe this round will be any different than all the past ones.

Even if N3 was hacked, and that's really a fairytale until something is available, Nagra has backup cards. And what most people can't understand is how much money and effort is required to break encryption. Imagine all the FTA manufacturers coming out with a fix: then you'll have a very quick roll-out of the newer card in effect making any hack dead within less than a year only to start over again. For people who are used to easy money they'll just walk away and invest in something else.

If you just can't accept times will be incredibly tough and without free TV, go to a sat forum and post suck-up messages. It's as effective as praying for a miracle.
n2 was hacked privately before the swap, and publicly a few months after. its been years since and they are now finalizing the swap. i doubt the backup theory holds much water since its been proven that they (dish network) have to try their rev updates to close us out, and i am most certain that they (dish network) will have to do the same again with n3.

[Yongone]

What many forget is how card technology has advanced.

N2 was much simpler technology. N3 is way more advanced and a response to hacking potential. In other words they went the extra mile to ensure it would be far more difficult to compromise.

And you missed the point on the backup card. Each card takes a long time to crack. By having one ready to send out, it makes a hack very unlikely to last because the effort is not worth it, no easy money guaranteed . There was no N2 follow-up: they got caught unprepared and Chuckie said so much.

You say it's been years, and it's true, but you forget the downtime when the providers caught up, such as DirecTV. And N2 was not cracked right away: first came the sat cards, then about a year later the FTA receivers started coming out. For many they had no TV for a long time.

Oversimplifying the situation does not mean it's an easy feat to crack a card. Over the years hacking has gone from regular but good programmers, to corporations overseas. In other words, it takes a huge amount of money, skill and resources. To base the future on the past is a mistake. A big one. If I follow your train of thought then the P4 DTV card should also be easy to crack because the F and H cards were cracked. That makes no sense because the way they hacked the pre-P4 cards don't work no more. You can't glitch a P4 for starters.

No one expected N2 to become so popular, same with F and H cards for DTV. Now that satellite TV is very popular these companies have not only motivation but money to pour into securing their system, plus the technology is far more advanced than it was 5-10 years ago.

[Dragster]

Yes it will be interesting how this will play out,new cards have to run blockerless.

[1munchie]

I had heard that N2 actually was leaked from the inside as opposed to hacked. I imagine Nagravision has closed that door. A hack...well let's hope.

[satboy]

Once read an article on the leak of N2 that it apparently was DTV that leaked It out because they were in battle over buying out DN and DN change their mind about the sale so to get even they let the codes out..

[whiterabbit490]

Once read an article on the leak of N2 that it apparently was DTV that leaked It out because they were in battle over buying out DN and DN change their mind about the sale so to get even they let the codes out..

I read about Dish suing DTV over the leak and Dish lost the case...

[mili]

Another player entered the melee. They finally released the slinger software last night. Anyone with one of these slingers? Will start a new thread on it.

mili

[zerocool]

I'm using the 510 PVR unit and on the 118 bird and am referring to Indian channels not sure about others. The channels are in their original location, just with rom240 spoof they work and with rom102 blocker they say new card is needed and don't work.

Hi ZeroCool,

How does it give you international channels? I tried it and it says "This channel has moved to new location" . If i go in 6100 range to pickup the same channel, it gives me a black screen.

Does it work for you on 6100 range or just the regular "original" channel number?

What receiver are you using? Is it a VIP receiver?