أول فيرموير يحوي المفاتيح مشفرة

// Generated ModySat Software's
//
//  Source File: maincodeD002.abs
//         Time: 16/03/2014 05:34 أ£
// Orig. Offset: 4066232 / 0x00000000
//       Length: 48 / 0x00000030 (bytes)
unsigned char rawData[48] =
{
    0x12, 0x70, 0x03, 0xF8, 0xE9, 0x51, 0x00, 0x36, 0x7A, 0x55, 0x61, 0x21, 0xC7, 0x79, 0xFB, 0x6E,
   0x6B, 0x1B, 0x02, 0x4D, 0x36, 0xF6, 0x09, 0x74, 0x97, 0x3C, 0xB8, 0x1F, 0xA5, 0xE8, 0xF0, 0x1C,
   0x34, 0x98, 0x83, 0xE5, 0x4D, 0x58, 0x33, 0x6D, 0xCA, 0x75, 0x0A, 0x87, 0x8A, 0xCC, 0x5C, 0xD5,
} ;

V 030B00 0A EE2679604A7DDD32E4F8CB913500D38E ; TNTSat France (19.2E)
V 030B00 EE 349883E54D58336DCA750A878ACC5CD5 ; WB2 SD SurEncryption
V 030B00 E14 6B1B024D36F60974973CB81FA5E8F01C ; WB2 HD SurEncryption

V 030B00 E15 127003f8e95100367a556121c779FB6E
TNT Fixed

EE2679604A7DDD32E4F8CB913500D38E

80 71 3F 01 80 33 D2 02 15 0D 40 07 03 0B 00 0A
05 67 01 E2 03 43 5B 00 E2 03 43 5B FE EA 10 72
BF ED B3 3D D2 BC 32 2D B7 D1 5B 96 9B 5E D0 F0
08 78 8E 9F C2 12 DA 67 70 80 33 D2 02 15 0D 40
07 03 0B 00 08 06 15 01 E2 03 43 5B 00 E2 03 43
5B FE EA 10 FE 52 C5 28 6E BF 42 4E 2E 8D AA 50
6A C4 27 45 F0 08 57 D8 D2 48 EB EF BB B3 80 33
D2 02 15 0D 40 07 03 0B 00 08 07 01 00 E2 03 43
5B 00 E2 03 43 5B FE EA 10 C4 8B BE FD 55 5A A5
C4 F4 91 0C 65 FA 7A 5E 2A F0 08 E4 13 A1 81 40
B0 9A 88 80 33 D2 02 15 0D 40 07 03 0B 00 08 07
01 01 E2 03 43 5B 00 E2 03 43 5B FE EA 10 A7 B7
B2 58 8A E9 70 C2 2F C1 12 81 E9 93 F2 BD F0 08
BF 6C C8 CF 07 BA C3 AF 80 33 D2 02 15 0D 40 07
03 0B 00 08 06 15 00 E2 03 43 5B 00 E2 03 43 5B
FE EA 10 19 5A D8 A3 ED E5 0E 5E 79 CB 02 6B AA
F4 D1 9D F0 08 24 18 96 3E 0F ED 2C AB 80 33 D2
02 15 0D 40 07 03 0B 00 0A 05 67 00 E2 03 43 5B
00 E2 03 43 5B FE EA 10 4B B3 B1 49 0C 66 2E 69
0D 50 97 8C 51 52 D0 C4 F0 08 DB E5 68 1A D4 2B
ED 20
msg_pos is: 0004
msg is: 0080
msg_pos is: 0006
msg is: 00D2
D2 found at: 0006
Used Algo : 0015
Algo key : 000D
msg_pos is: 000A
msg is: 0040
Prov found on position: 0000
Key found on position: 000F
ProviderId: 30B00
ecm_id: 56701
msg_pos is: 0013
msg is: 00E2
msg_pos is: 0018
msg is: 00E2
msg_pos is: 001D
msg is: 00EA
msg_pos is: 002F
msg is: 00F0
msg_pos is: 0039
msg is: 0080
msg_pos is: 003B
msg is: 00D2
D2 found at: 003B
Used Algo : 0015
Algo key : 000D
msg_pos is: 003F
msg is: 0040
Prov found on position: 0000
Key found on position: 0044
ProviderId: 30B00
ecm_id: 61501
msg_pos is: 0048
msg is: 00E2
msg_pos is: 004D
msg is: 00E2
msg_pos is: 0052
msg is: 00EA
msg_pos is: 0064
msg is: 00F0
msg_pos is: 006E
msg is: 0080
msg_pos is: 0070
msg is: 00D2
D2 found at: 0070
Used Algo : 0015
Algo key : 000D
msg_pos is: 0074
msg is: 0040
Prov found on position: 0000
Key found on position: 0079
ProviderId: 30B00
ecm_id: 70100
msg_pos is: 007D
msg is: 00E2
msg_pos is: 0082
msg is: 00E2
msg_pos is: 0087
msg is: 00EA
msg_pos is: 0099
msg is: 00F0
msg_pos is: 00A3
msg is: 0080
msg_pos is: 00A5
msg is: 00D2
D2 found at: 00A5
Used Algo : 0015
Algo key : 000D
msg_pos is: 00A9
msg is: 0040
Prov found on position: 0000
Key found on position: 00AE
ProviderId: 30B00
ecm_id: 70101
msg_pos is: 00B2
msg is: 00E2
msg_pos is: 00B7
msg is: 00E2
msg_pos is: 00BC
msg is: 00EA
msg_pos is: 00CE
msg is: 00F0
msg_pos is: 00D8
msg is: 0080
msg_pos is: 00DA
msg is: 00D2
D2 found at: 00DA
Used Algo : 0015
Algo key : 000D
msg_pos is: 00DE
msg is: 0040
Prov found on position: 0000
Key found on position: 00E3
ProviderId: 30B00
ecm_id: 61500
msg_pos is: 00E7
msg is: 00E2
msg_pos is: 00EC
msg is: 00E2
msg_pos is: 00F1
msg is: 00EA
msg_pos is: 0103
msg is: 00F0
msg_pos is: 010D
msg is: 0080
msg_pos is: 010F
msg is: 00D2
D2 found at: 010F
Used Algo : 0015
Algo key : 000D
msg_pos is: 0113
msg is: 0040
Prov found on position: 0115
Key found on position: 0118
ProviderId: 30B00
ecm_id: 56700
msg_pos is: 011C
msg is: 00E2
msg_pos is: 0121
msg is: 00E2
msg_pos is: 0126
msg is: 00EA
Provider in emu: 0008
using opkey from EMU: EE 26 79 60 4A 7D DD 32 E4 F8 CB 91 35 00 D3 8E

We also have keydata for this one
Crypted Word:4B B3 B1 49 0C 66 2E 69 0D 50 97 8C 51 52 D0 C4
Via3x_Core->init indata:0C 66 2E 69 00 00 00 00
Via3x_Core->final indata:87 4F 26 C7 2E 58 49 39
Via3x_Fct1:87 4F 26 C7 2E 39 49 58
Via3x_Core->init indata:65 8A F8 11 2E 39 49 58
Via3x_Core->final indata:5C 3A E8 0B 95 4E 9E E5
Via3x_Fct2:5C 3A E8 0B 95 4E E5 9E
CW->After data mixing:99 28 CB F7 65 8A F8 11
CW->After 3DES:79 11 D3 92 A0 45 09 B3
Via3x_Core->init indata:A0 45 09 B3 95 4E E5 9E
Via3x_Core->final indata:99 F5 19 A9 D0 EA 0B B9
Via3x_Fct2 second:99 F5 19 A9 D0 EA B9 0B
Via3x_Core->init indata:A9 FB 6A 99 D0 EA B9 0B
Via3x_Core->final indata:22 D2 62 37 30 6A 35 D0
Via3x_Fct1 second:22 D2 62 37 30 D0 35 6A
CW->After data mixing:90 95 3C D9 A9 FB 6A 99
Via3x_Core->init indata:51 52 D0 C4 00 00 00 00
Via3x_Core->final indataA 7B D8 6A 28 20 2B EA
Via3x_Fct1A 7B D8 6A 28 EA 2B 20
Via3x_Core->init indata:25 BA BC AC 28 EA 2B 20
Via3x_Core->final indata:1C 0A AC B6 D3 7A 49 04
Via3x_Fct2:1C 0A AC B6 D3 7A 04 49
CW->After data mixing:82 28 D4 8D 25 BA BC AC
CW->After 3DES:A4 BB D0 39 B0 4C 50 91
Via3x_Core->init indata:B0 4C 50 91 D3 7A 04 49
Via3x_Core->final indata:89 FC 40 8B DB 7F 76 71
Via3x_Fct2 second:89 FC 40 8B DB 7F 71 76
Via3x_Core->init indata:7F C4 A1 4F DB 7F 71 76
Via3x_Core->final indata:F4 ED A9 E1 12 69 1A C0
Via3x_Fct1 second:F4 ED A9 E1 12 C0 1A 69
CW->After data mixing:A2 8C 4A F8 7F C4 A1 4F
Final DW before XOR:90 95 3C D9 A9 FB 6A 99 A2 8C 4A F8 7F C4 A1 4F
Final DW after XOR (Cardanswer): 6C A9 63 CC 7E 5B DE AE E9 3F FB B1 73 A2 8F 26
loopvalue: 0000
Crypted Word after Common2 FA E5 D4 17 42 8A 71 E9 3F FB B1 73 A2 8F 26
loopvalue: 0001
Crypted Word after Common2 FA E5 D4 17 42 8A 71 93 85 D7 33 D8 B0 64 06
loopvalue: 0002
Crypted Word after Common:AD 58 F7 F0 E6 F3 0C 95 93 85 D7 33 D8 B0 64 06
loopvalue: 0003
Crypted Word after Common:AD 58 F7 F0 E6 F3 0C 95 72 B3 21 5E 8D BF 63 DA
loopvalue: 0004
Crypted Word after Common:B3 D8 8F 8D 8E 2A F8 8E 72 B3 21 5E 8D BF 63 DA
loopvalue: 0005
Crypted Word after Common:B3 D8 8F 8D 8E 2A F8 8E 40 E3 A0 91 C8 2F 01 2E
loopvalue: 0006
Crypted Word after Common:A9 29 E6 CC EC 0A 9E D4 40 E3 A0 91 C8 2F 01 2E
loopvalue: 0007
Crypted Word after Common:A9 29 E6 CC EC 0A 9E D4 90 B9 15 52 C6 AD 60 48
After swap:90 B9 15 52 C6 AD 60 48 A9 29 E6 CC EC 0A 9E D4
Crypted Word after proc_1:90 B9 15 52 C6 AD 60 48 A9 29 E6 CC EC 0A 9E D4
Final DW after AES: 2D E0 CA EA 49 22 DA 8F 9B 9D 8F 03 90 64 6F DB
loopvalue: 0007
Crypted Word after Common:43 8D F7 BC 7A AA 55 31 9B 9D 8F 03 90 64 6F DB
loopvalue: 0006
Crypted Word after Common:43 8D F7 BC 7A AA 55 31 FA 2B 01 D6 0C 55 B0 57
loopvalue: 0005
Crypted Word after Common:0A 75 25 83 CC 12 D7 48 FA 2B 01 D6 0C 55 B0 57
loopvalue: 0004
Crypted Word after Common:0A 75 25 83 CC 12 D7 48 DF 23 05 F9 69 62 9B 70
loopvalue: 0003
Crypted Word after Common:43 3C 67 CF D5 6C 9F 58 DF 23 05 F9 69 62 9B 70
loopvalue: 0002
Crypted Word after Common:43 3C 67 CF D5 6C 9F 58 8D AE DE BE F9 3A F8 48
loopvalue: 0001
Crypted Word after Common:BA 9C 30 86 A9 07 BE 6E 8D AE DE BE F9 3A F8 48
loopvalue: 0000
Crypted Word after Common:BA 9C 30 86 A9 07 BE 6E E5 10 4F 44 D8 6D 76 BB
After swap:E5 10 4F 44 D8 6D 76 BB BA 9C 30 86 A9 07 BE 6E
Crypted Word after proc_2:E5 10 4F 44 D8 6D 76 BB BA 9C 30 86 A9 07 BE 6E

result: 01
DW :
E5 10 4F 44 D8 6D 76 BB BA 9C 30 86 A9 07 BE 6E