Took from other one
They have found half of the valid key
later on it goes to check for these bytes inside ECM. But with new ECM those should now be 0x00, 0x72, 0x01
I've changed it to 0x72 and recompiled. I get "found" on ECMs now, but the picture is still not appearing. The returned CW is always half
zeroes and half valid key (I guess it's valid).
By the way I DID NOT apply the "patch" posted above that strips last 4 bytes of ECM. If I do this, the returned CW is always completely
zeroed.
I'm almost sure there is something more we are missing, something related to changed length of ECM. We should parse the reader-videoguard2.c for more hardcoded stuff.
patch has been amended, recompiled and ready for test with
card- later this evening