PowerVu nano 01 Discussion/Exploration

Greetings colleagues,

here I bring you more news that I have found in the latest powerVu software where they have removed some functions in the data of the DCTP DCTB and DCBS tables, the increase in the Vprintf values of the ECM stamps from% 10d to% 10llu, The new functions called "ECM CM PARTITION PER CENT FULL" is something new that has not been seen in previous software, these functions were in use from 2009 to 2018, but in the latest software 2.92 of 2019 they were modified, they also removed some functions as you can see in the images. so far this is what I have been able to differentiate when analyzing each software. the S-box algorithm, the key flow and the different hash tables have changed, which is why the current emulators are not compatible. it would only remain to study how these new systems work and adapt it to the emulators.

Quote from Fenix11

Quote from ilikenwf

Where are you even getting software updates, OTA from the satellite? I can't find them on cisco's site anywhere.

The software is updated via satellite.

how to get that OTA update ? I guess it comes encrypted and no so easy to disassemble.

best regards.

++

I'm trying to find a new EMM using PowerVu Home Edition for the VTV+ HD channel on frequency 4060 H SR 20000, on SES 6, 40.5W, and this appeared in the log. Could any colleague help me? Thank you..

This is a recording from the VTV+ HD channel, which I made using PowerVu Home Edition.

Quote from geraldo

This is a recording from the VTV+ HD channel, which I made using PowerVu Home Edition.

Those channels have hash mode enabled; that is why the program does not yield valid results with the EMMs.

Quote from sam_

Quote from Fenix11

Quote from ilikenwf

Where are you even getting software updates, OTA from the satellite? I can't find them on cisco's site anywhere.

The software is updated via satellite.

how to get that OTA update ? I guess it comes encrypted and no so easy to disassemble.

best regards.

++

Display More

Hello bro, Updates are obtained via OTA by tuning in to a channel that carries the necessary download PIDs—specifically PIDs 7001, 7002, or 7003. The software is encrypted; consequently, I had to remove the flash memory chip from the receiver in order to perform a memory dump. I currently have several versions available for analysis, including versions x.00, x.01, x,20, x.30, x.75, x.85, x.90, and the latest release, x.92. Using tools such as Binwalk, it is possible to extract specific data to examine the software's details and track any changes made between versions. Additionally, by utilizing tools provided by STMicroelectronics, one can connect to the device via its JTAG interface to explore the system environment and perform memory dumps of specific address ranges.

is that interesting material sharable for analysis and help to understand additionnal processing in the powervu system ?

many thanks.

++

Quote from sam_

is that interesting material sharable for analysis and help to understand additionnal processing in the powervu system ?

many thanks.

++

Hi Sam,

resolving this requires the right tools and people capable of using them effectively. The only solution for this new system is to try to obtain the modules that handle encryption—specifically the PTI (Programmable Transport Interface) and the TC (Transport Controller) software. These can be found within the OS20 or OS21 kernel, along with their associated APIs; there, you can examine every detail of the system and observe how it operates. You will need to attempt to acquire these modules and drivers using tools such as ST Workbench, ST 40toolset, Osplus, or trace32, among other possibilities.

Regards.