emmdecrypt keys missing

[slugworth]

The 051028.1 file was the last version that the emmdecrypt keys appear
twice in the file for the provider I am interested in. Versions beyond that
only have 1 set of emmdecrypt keys. Even though the E1,N1, emmdecrypt
keys are correct, the picture is still scrambled.
Any helpful hints on how/where to edit the other set back into the file to get it working again?
The provider id is 0101.

[logos2000]

slugworth where I can download this software??

[slugworth]

The date of the file is 11-30-2004.
HW version 1.1.0
I also have 051025.1 and 051026.1.
Those were rigged for dishnetwork, but not bell expressvu.
Both are north american providers.

[slugworth]

If you want to read something crazy, the 051028.1 will only boot
if my receiver is cold. If the receiver has been on for a while, the
receiver is dead after the boot message appears on the front panel.
The 051046 series of files does the same thing. Must be a timing issue.
If the receiver has been off for a while, it boots and runs fine. I can't
change the userdata with sceditor, because that requires cycling the ac
power. Other firmware boots fine, hot or cold.

[slugworth]

I ended up replacing the e1,n1,n2 keys for 7001/7101 with the ones
from 0001/0101 and changing the header at those spots from 70 00
and 71 00 to 00 00 and 01 00. Neotioncrcfixer doesn't fix the crc
@ 1fffc, I had to use the 103beta version. It also doesn't fix the 0300x
series of lazer firmware. Apparently the 10000-1fffc code is also included
in the application crc in that firmware.

[logos2000]

thanx for info about CRC :)

[slugworth]

If you double a lazer 1meg file, you can load it on a 2meg receiver via
jtag and the receiver boots up with the 1meg firmware.
I use the dos copy command to double the file.
copy /b 1m.bin+1m.bin 2m.bin
You must load via jtag, since the hw version is SF01.
I can't test the hybrid further, since it isn't rigged for my provider and
I have no way of fixing the crc of the file.
You can also copy the first line of code and paste it to the beginning of
a dummy 1meg file of all FF's, then add the real 1meg file to this.
Basically you would have a 2meg receiver with 1meg of tsop space left
for future enhancements.
A good working jtag setup is a must. You have to load/remove the firmware
with it. I had to use Peditor to play with the channel /transponder list,
sceditor5.3 wouldn't work.