Interesting Devices Ltd
Home Forums Register FAQ Calendar Arcade Mark Forums Read
Main Menu

Categories

Products
Random Products


Arcade Control Bundle Pack


GBA FM Radio


Action Replay (PAL Only)


Gamebit Driver 4.5mm


ISO 7816 Dual Speed Smart Card Reader/Writer Interface


Smart Card Reader/Writer Enclosure
Sponsors


  
Go Back   Interesting Devices Ltd > Canadian Satellite > Express Vu > ExVu General Help
Reload this Page How-to tier for Bev for newbies
ExVu General Help Need help or are new to the system this is the forum to post in.

Reply
 
Thread Tools Display Modes
How-to tier for Bev for newbies
Old
  (#1)
nettoyeur
Registered
nettoyeur is on a distinguished road
 
nettoyeur's Avatar
 
Status: Offline
Posts: 352
Join Date: May 2001
Location: dans une buanderie
Rep Power: 598
   
Default How-to tier for Bev for newbies - 20th August 2003, 10:06 AM

Here's a little how-to tier for Bev.

(Some materials described here were from "Vipers Tier Class 101" and
"Virgin's PPV Fix" threads at Sattech, posted by Virgin in 2002.)

I'm NOT an expert on plastic. I've just read a lot of threads and doing
some Bev testings at night when my wife has a headache...
This is the result from my own experience and observations.
Don't PM me asking questions. Ask here so everyone can learn.
I'm not responsible if your card is locked or looped by following the
instructions below.

This is for educational purpose only. The goal is helping newbies to
understand how it works so they can do-it-themselves. This is not
for hardcore testers. If you find some errors, don't hesitate to notice me
so I can update it.

"Give a man a fish and you feed him for a day.
Teach a man how to fish and you feed him for every day."


Introduction

When you turn on your receiver, the ird firmware gets from the stream a
list of all available channels and its related informations (channel name,
channel number, tier, transponder, satellite, frequency, etc). For each
channel, there's a related tier number. To filter what channels you
can watch, your CAM (or testing devices, i.e. AVR, Atmega, ...) contains
a list (or single line) of tier ranges (min tier/max tier).

For example, considering this simple list of channels and tiers:

Code:
Channel   Channel    Tier
 name     number
   A        1        0010
   B        2        0020
   C        3        0300
   D        4        0400
   E        5        0050
If you have min tier/max tier = 0020/0100 on your CAM, you can only watch
the channels which tier number is included in the 0020-0100 range, i.e.
channels B & E.

When you subscribe and call to activate your receiver, Bev sends commands
to write the list of min tier/max tier to your CAM, corresponding to the
programming packages you bought. That's tier customization. When you heard
about 3M or wide open tier, instead of having a list, there's only one line
of tier range min/max = 0000/7FFF (or 0001/7FFF).

Getting a Tier List

You can get the current tier listing by connecting a jtag to your receiver
and executing the IRDcM program, written by satFTA. For more infos how to
use it, read this thread. Or you can find the latest list posting in the
files section or hidden in other threads...

IRDcM produces a tier listing with informations like this.

Code:
Name   SID  f1  f2  f3  tier  st  TID  T#  sat  SB  LB  <LRM> Ramarks
SRC    100  00  10  09  0108  01  28   28  91.0  0  00
SRC-Q  101  00  10  09  0108  01  26   26  91.0  0  00
SRC-O  102  00  10  09  0108  01  12   12  91.0  0  00
TQS-Q  104  00  10  09  023F  01  20   20  91.0  0  00
TQS    105  00  10  09  023A  01  28   28  91.0  0  00
We're only interested in the columns: Name, SID (channel number) and tier.


Standard Tier Data

For ease of understanding, launch the NagraEdit 3 program and load a ROM10
bin for example. Click on the "Data Editor" tab and take a look at "Data Space"
on the left. Find a "08 Standard Tier(31)" component and click on it. If
there's no such component (e.g. virgin bin), click "Add", choose "08 Standard
Tier" and click "OK".

System ID: "0901" for Bev, "0101" for Dish.

IRD Status Byte: for ROM10: "10" for group of channels,
"00" for individual channel. For ROM3: "00".
You can always use "00" or "10" only, for ROM3 or ROM10, and
it will work.

Rights Identifier: for individual channel tier, it's the channel number converted
to hexadecimal. Example: SRC (0108), channel 100, it's "000064" (100 in hex).
For a group of channels tier, the formula used by Bev has not been cracked yet.
But Bev does not validate this value (yet). You can use "0000" for individual or
for group of channels tier and it will work.

String ID: "00". ???

Impulse Subscription Price: I guess is the cost to subscribe to this channel or
group of channels. There's no validation here neither. "000000" will work.

Modification Date: in Nagra date format.

Begin Date: of this tier in Nagra date format.

Expire Date: in Nagra date format. Legit value used by Bev is "4C21" (2030-01-01).

Rights Date: in Nagra date format. Legit value used by Bev is "4C21" (2030-01-01).

Min Channel: for invidual channel, it's the value of the related tier.
For a group of channels, it's the lowest value of the tier in that group.

Max Channel: "8000" for individual channel tier (that's why for a 3M, max tier=7FFF
i.e. 8000h - 1h = 7FFFh).
For a group of channels, it's the highest tier value within the group.

Component: "8000". ???

Theme: "FF". ???

Theme Extension: "00FF". ???

Level: "00" for normal channels, "01" for PPV or porn channels.
If you set level to "01", the PPV channel is open without using
a 0B PPV Tier. But people testing Dish reported that it was a
target for an ECM.



So, you can manually add standard tiers data to your (open) CAM using NagraEdit 3.
With a current tiers listing and Bev programming packages, you can "easily" customize
your channels on the CAM.

Example 1: Add tier for SRC, channel 100.
System ID="0901"
IRD Status Byte="10"
Rights Identifier="000064" (100 in hex)
String ID="00"
Impulse Subscription Price:"000000"
Modification Date="1714" (i.e. 2003-08-20)
Begin Date="1714" (i.e. 2003-08-20)
Expire Date="4C21" (i.e. 2030-01-01)
Rights Date="4C21" (i.e. 2030-01-01)
Min Channel="0108"
Max Channel="8000"
Component="8000"
Theme="FF"
Theme Extension="00FF"
Level="00"

N.B.: You'll get SRC, SRC-Q and SRC-O channels because
they have the same tier value (0108).

Example 2: Add tier for a group of channels: 100(SRC) to 105(TQS).
System ID="0901"
IRD Status Byte="10"
Rights Identifier="000000"
String ID="00"
Impulse Subscription Price:"000000"
Modification Date="1714" (i.e. 2003-08-20)
Begin Date="1714" (i.e. 2003-08-20)
Expire Date="4C21" (i.e. 2030-01-01)
Rights Date="4C21" (i.e. 2030-01-01)
Min Channel="0108"
Max Channel="023F"
Component="8000"
Theme="FF"
Theme Extension="00FF"
Level="00"


Writing EP10 Patch for Adding Standard Tier

Instead of adding tiers manually within NagraEdit 3 by clicking "Add", you can
also write an EP10 patch file (to use with ROM10 bin).
Here's the implementation of the previous two examples in an EP10 patch file:

Code:
;Remove all previous standard tier
!removeall 08

;Tier for channel 100(SRC)
!add 08 1C 0901 10 000064 00 000000 1714 1714 1714 4C21 4C21 0108 8000 8000 FF 00FF 00
;Tier for channels 100(SRC) to 105(TQS)
!add 08 1C 0901 10 000000 00 000000 1714 1714 1714 4C21 4C21 0108 023F 8000 FF 00FF 00

;Defragment the Data Space of the card
!defrag

!add = add command for NagraEdit patch file
08 = data type to add, "08" is for standard tier
1C = length in bytes of the data followed (1C = 28 in decimal, i.e. "0901 10 ... 00FF 00"=28 bytes)
0901 10 ... 00FF 00 = the standard tier data

An EP10 patch file is just a text or ASCII file. You can use NotePad to edit it.
You can generate your patch file by hand or using a program like RTM for Bev.


PPV Tier Data

When you tune to a PPV channel, the ird checks that you have a PPV tier in your
CAM (or testing devices, i.e. AVR, Atmega, ...). If it's not found, it will
display a nag on your tv asking to purchase it.
If you have a PPV tier, the ird checks that's still valid or it's not expired.
Let's take a look what are the components of a PPV tier.

For ease of understanding, launch the NagraEdit 3 program and load a ROM10
bin for example. Click on the "Data Editor" tab and take a look at "Data Space"
on the left. Find a "0B PPV Tier(37)" component and click on it. If
there's no such component (e.g. virgin bin), click "Add", choose "0B PPV
Tier" and click "OK".

System ID: "0901" for Bev, "0101" for Dish.

IRD Status Byte: "10" for ROM10. "00" for ROM3.

PPV Event ID: this value is assigned by Bev. For example, press "Guide" on
the remote and tune to a PPV channel like 701. Then press "Info" on the remote:

K-1 Fighting: Sports. Card subject to change.(87551)(CC)(Stereo)

Thus, the PPV event ID in this example is "87551" or "0155FF" in hex.

PPV ID Within CAM: "01"=the 1st PPV tier written on card, "02"=2nd, etc.

Event Price: not validated by Bev yet. Can by any numeric value.

Purchase Date: in Nagra Date.

Event Expiration Date: in Nagra Date. If it's lower than the current date,
you'll get a nag asking to purchase.

Service String ID: "FF". ???

Min Channel: "0001" as reported by people dumping legit CAM.

Max Channel: "7FFF" as reported by people dumping legit CAM.

Component: "FF00". ???

Lowest PPV ID: must be lower than Event ID and lower than the lowest Event ID
assigned by Bev. If not, you'll get a nag asking to purchase.

Highest PPV ID: must be higher than Event ID and higher than the highest Event
ID assigned by Bev. If not, you'll get a nag asking to purchase.

ECM Odometer: ??? NBCBevv1 uses "8003".

View Start Date: in Nagra Date. Same value as Purchase Date.

View Start Time: "7FFF" = anytime.


Example:
System ID="0901"
IRD Status Byte="10"
PPV Event ID="0155FF"
PPV ID Within CAM="01"
Event Price="004999"
Purchase Date="1714" (i.e. 2003-08-20)
Event Expiration Date="4C21" (i.e. 2030-01-01)
Service String ID="FF"
Min Channel="0000"
Max Channel="7FFF"
Component="FF00"
Lowest PPV ID="000000"
Highest PPV ID="7FFFFFFF"
ECM Odometer="8003"
View Start Date="1714" (i.e. 2003-08-20)
View Start Time="7FFF"



Writing EP10 Patch for Adding PPV Tier

Instead of adding tiers manually within NagraEdit 3 by clicking "Add", you can
also write an EP10 patch file (to use with ROM10 bin).
Here's the implementation of the previous example in an EP10 patch file:

Code:
;Remove all previous PPV tier
!removeall 0B

;PPV Tier
!add 0B 22 0901 10 0155FF 01 004999 1714 4C21 FF 0000 7FFF FF00 000000 7FFFFFFF 8003 1714 7FFF

;Defragment the Data Space of the card
!defrag

!add = add command for NagraEdit patch file
0B = data type to add, "0B" is for PPV tier
22 = length in bytes of the data followed (22 = 34 in decimal, i.e. "0901 10 ... 7FFF"=34 bytes)
0901 10 ... 7FFF = the PPV tier data


Le /\/ETtoyeur

Last edited by nettoyeur; 24th August 2003 at 12:57 AM..
  
Reply With Quote
Old
  (#2)
Pssst
Guest
 
Posts: n/a
   
Default 20th August 2003, 02:00 PM

Excellent!!!!!
  
Reply With Quote
Old
  (#3)
flux
Registered
flux is on a distinguished road
 
Status: Offline
Posts: 63
Join Date: Apr 2002
Rep Power: 292
   
Default 20th August 2003, 03:25 PM

Nice post.
Good thing for us that your wife hasn't discovered Advil.
  
Reply With Quote
Old
  (#4)
Lible
New Here
Lible is on a distinguished road
 
Status: Offline
Posts: 5
Join Date: Aug 2003
Rep Power: 212
   
21st August 2003, 07:49 PM

I was just wondering about 09 type spending limits for rom10. i thought it would be kinda cool if i could have the message pop up that asks me if i wana purchase the ppv event. i think it's 0C spending limits but not sure would you know where i could find info on this?
  
Reply With Quote
Old
  (#5)
Heinz
Registered
Heinz is on a distinguished road
 
Status: Offline
Posts: 149
Join Date: Apr 2002
Rep Power: 378
   
Default 21st August 2003, 08:25 PM

Your blocker will prevent you from being able to do that.
  
Reply With Quote
Old
  (#6)
Lible
New Here
Lible is on a distinguished road
 
Status: Offline
Posts: 5
Join Date: Aug 2003
Rep Power: 212
   
Default 21st August 2003, 08:29 PM

hey thanks for the info : ) would you per chance know where i may find information on more advanced topic such as the one decribed above. i have some knowledge in assembler so dont worry im not looking for something entirely beginner. thanks in advance.
  
Reply With Quote
Old
  (#7)
Spoonman
Registered
Spoonman is on a distinguished road
 
Spoonman's Avatar
 
Status: Offline
Posts: 112
Join Date: Oct 2001
Location: This side of Insane
Rep Power: 350
   
Default 21st August 2003, 09:28 PM

"IRD Status Byte: "10" for activated. Other possible values ???"

10 is for rom 10 only
00 is for rom 3
spending tiers are different again, the NBCBevv file sets the IRD status byte to 05 in the spending tier for rom 10 and i believe that h0rhays file sets the IRD status byte to 00 in the spending tier for rom 3.

nice guide nettoyeur



  
Reply With Quote
Old
  (#8)
DimSat
Guest
 
Posts: n/a
   
Default 22nd August 2003, 06:27 AM

OK - that's twice in one night that nettoyer has totally blown me away with the quality and depth of a post. It's like the dude is sitting here reading my mind - I was just thinking: "OK - RTM and NagraEdit are pretty simple to use, but what the hell exactly am I doing there? I wonder if I should post a query on this. . . "

Do a search and this pops up #1

Once again - beautiful post - very informative, educational, and well-laid-out

Thanks!
  
Reply With Quote
Old
  (#9)
caper_1
Registered
caper_1 is on a distinguished road
 
Status: Offline
Posts: 477
Join Date: Nov 2001
Location: Nova Scotia
Rep Power: 714
   
Default 22nd August 2003, 01:13 PM

Nice post.


Nothing in life is free, including TV :smokin:
  
Reply With Quote
Old
  (#10)
nettoyeur
Registered
nettoyeur is on a distinguished road
 
nettoyeur's Avatar
 
Status: Offline
Posts: 352
Join Date: May 2001
Location: dans une buanderie
Rep Power: 598
   
Default 22nd August 2003, 02:19 PM

Quote:
Originally posted by Spoonman
"IRD Status Byte: "10" for activated. Other possible values ???"

10 is for rom 10 only
00 is for rom 3
spending tiers are different again, the NBCBevv file sets the IRD status byte to 05 in the spending tier for rom 10 and i believe that h0rhays file sets the IRD status byte to 00 in the spending tier for rom 3.

nice guide nettoyeur



This morning, before going to work, I did a little test.
I've programmed a ROM10 using "00" as IRD Status Byte
(standard tier and PPV) and a ROM3 using "10". They BOTH
worked.

For another test, I've tried "FF" as IRD Status Byte and it failed.
A nag appeared saying you're not subscribed to this channel...
I had time to try other values like "20" and "30" and it worked.
So maybe any value other than "FF" will work. I'll try that
tonight...

When I dumped my legit ROM10 card last year, the IRD Status
Byte was "10". Has anybody dumped a legit Bev ROM3 to see
what the value is ?
  
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Forum Jump





Powered by vBulletin® Version 3.7.5
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
vBulletin Skin developed by: vBStyles.com
Copyright ©1995 - 2009, Interesting Devices Ltd

Page generated in 0.25178 seconds with 9 queries