View Full Version : GenDT08 Config for VIP622
wderbi
07-21-2009, 02:09 AM
I am trying to get Private Session N and Private Session D 64 byte Keys so that I could use the VIP622 as a client on my NK share network. Unfortunately, this IRD was never subbed with a ROM102 or 103---i bought it refurbished and subbed it with an external ROM241. I believe it has an internal ROM206 chip that is still in place and the cardslot was activated by firmware...no mod.
I had the SK keys extracted, so I can now use the card in a cardserver, but I am more interested in using this reciever as a client either in NK Share or Rq-echoclient. It is my understanding that I need to get N and D from the card image---but no can do with the ROM241 since it is not cracked! Is it possible to marry the IRD to a ROM102 image artificially and then generate N and D from the ROM102 in GenDT08? I have the TSOP image from the VIP, but it will not open in my copy of GenDT08...I think I need to update the Config file for the VIP622. Am I barking up the wrong tree here?
TIA
intelligent1
07-21-2009, 08:07 AM
good question, im in the same situation an internal 206 and now with an exsub 241.
you can spoof a 102 to 241 so ideally thats what the slinger is doing.
i havent got sk keys but maybe writing a code for the atmega 128 or 256 to write a debug/dump of the reading process of the 622 could maybe identify some important info.
so
return a valid atr , maybe read a n3 card and copy down the hex values. then write those values somewhere in sram.
ld x,+...
st x, eeprom +...
repeat n times
for straight dumping
add interrupts for reading other info
shoot, better yet autoroll some keys to see if you get a good match to accept the atmega then dump the good numbers or keys if the numbers are accepted.
since i havent tried this im not sure if its useless because of read encryption. lets hope not
i could be wrong. ill try and work on that for the mean time
i dont wanna have to pay for a mod so im just waiting for some kind of alternative to it.
can someone fill us in on this. i want to use mine as a client also.
wderbi
07-21-2009, 06:06 PM
I asked this question in another forum, and the answer I got back was that these values can not be generated "backwards". I take it to mean that you can use Private Session N and Private Session D already on a subbed card to generate values for the TSOP (such as SK and DT08), but you cannot generate Private Session N and Private Session D from a subbed TSOP image to use in an unsubbed ROM card image. If this is true, it would mean that we are out of luck---unless we want to change the TSOP image so that it is married to an exsubbed ROM102, get the values and then sub the reciever with a ROM241. I don't think that will fly for me since I am already married to a ROM241, and already paid once for a TSOP read!
intelligent1
07-21-2009, 07:57 PM
yeah i saw your post in the coders forum.
i agree since our irds are already updated and never were on a rom102 we cannot "work backwards"
ill just try and emulate some code on the atmega and see what happens.
so we are pretty much stuck for making clients out of our irds unless we do a bga mod with known numbers.
i haven't worked on straight asm with the atmegs but its easier to understand for me.
im sure there will be some other fixes unless dealers want to keep making money off vip modding.
id send it off if it was 75 usd.
vBulletin® v3.8.4, Copyright ©2000-2009, Jelsoft Enterprises Ltd.