5. Keychip coms
| mxkeychip | PIC only | N2 present |
|---|---|---|
| keychip.version | GetVersion | GetVersion |
| keychip.version&device=n2 | 00c1/000c (26 bytes) | 00c1/000c (26 bytes) |
| keychip.status | — | — |
| keychip.encrypt | Encrypt | 00c2/0010 (63 bytes) |
| keychip.decrypt | Decrypt | 00c2/0011 (63 bytes) |
| keychip.setiv | SetIV | — |
| keychip.billing.keyid | ? | 00c2/000e (50 bytes) |
| keychip.billing.mainid | GetMainId | GetMainId |
| keychip.billing.playcount | ? | 00c2/0013 (46 bytes) |
| keychip.billing.playlimit | ? | FlashRead: 07b000/00010c, NvramRead: 1800 (40)1 |
| keychip.billing.nearfull | ? | FlashRead: 07b000/00010c, NvramRead: 1800 (40)1 |
| keychip.billing.signaturepubkey | ? | NvramRead: 1800 (40) |
| keychip.billing.cacertification | ? | NvramRead: 1c00 (40) |
| keychip.tracedata.restore | ? | see below |
| keychip.tracedata.get | ? | EepromRead: 10 |
| keychip.eeprom | ? | see below |
5.1 keychip.billing.keyid=…
Always calls PIC SetKeyId, not N2.
5.2 keychip.tracedata.restore
- EepromRead: 10
- EepromRead: 00
- EepromWrite: 10
- EepromWrite: 00
- FlashRead: 000000/010000
- Unhandled opcode 13
- FlashRead: 010000/010000
- Unhandled opcode 13
- FlashRead: 020000/010000
- Unhandled opcode 13
- FlashRead: 030000/010000
- Unhandled opcode 13
- FlashRead: 040000/010000
- Unhandled opcode 13
- FlashRead: 050000/010000
- Unhandled opcode 13
- FlashRead: 060000/010000
- Unhandled opcode 13
- FlashRead: 000000/000080
- FlashRead: 010000/000080
- FlashRead: 020000/000080
- FlashRead: 030000/000080
- FlashRead: 040000/000080
- FlashRead: 050000/000080
- FlashRead: 060000/000080
- FlashRead: 000000/010000
- FlashRead: 060000/010000
- FlashRead: 050000/010000
- FlashRead: 040000/010000
- FlashRead: 030000/010000
- FlashRead: 020000/010000
- FlashRead: 010000/010000
5.3 keychip.eeprom
- EepromRead: 00
- EepromRead: 10
- EepromRead: 20
- EepromRead: 30
- EepromRead: 40
- EepromRead: 50
- EepromRead: 60
- EepromRead: 70
5.4 keychip.nvram(x)
- FlashRead: 07(x)000/000100
- FlashRead: 07(x)100/000100
- FlashRead: 07(x)200/000100
- FlashRead: 07(x)300/000100
- FlashRead: 07(x)400/000100
- FlashRead: 07(x)500/000100
- FlashRead: 07(x)600/000100
- FlashRead: 07(x)700/000100
- FlashRead: 07(x)800/000100
- FlashRead: 07(x)900/000100
- FlashRead: 07(x)a00/000100
- FlashRead: 07(x)b00/000100
- FlashRead: 07(x)c00/000100
- FlashRead: 07(x)d00/000100
- FlashRead: 07(x)e00/000100
- FlashRead: 07(x)f00/000100