13Clone a Card
If you can borrow a subbed V1.2 card for long enough to analyze it, you can make a working copy. You need a zeroed V1.2 card. As long as the subscription is maintained, your card will get MK updates and permit you to carry on your experiments. Allsat and CardWizard have clone buttons (never tried) Other software does this (have used). Need HMK, PMK, Hex Sn, Ascii Sn.
Appendix A Macro Commands / Card Address Modes
Here is a list of the programmer macros:
R0 - Initiate card reset. If the card is OK it replies with the ATR (Answer to Reset).
// - Used for remarks.
P0 - Get Card's set Provider Group 00 and put it here (2 Bytes)
P1 - Get Card's set Provider Group 10 and put it here (2 Bytes)
P2 - Get Card's set Provider ID 00 and put it here (3 Bytes)
P3 - Get Card's set Provider ID 10 and put it here (3 Bytes)
S0 - Put the HEX serial number here (3 Bytes)
S1 - Put the 5 byte digital signature here and check the value of the final byte.
T0 - Put the date stamp of Provider 00 here (2 Bytes)
T1 - Put the date stamp of Provider 10 here (2 Bytes)
I0 - Opens an input window so that you can enter HEX data. The length of the data string must be correct.
Parameter Format: IO Text_can_be_written_here_without_spaces,_always_end_with_;
Here is a list of the card address mode selector bytes with filler bytes required.
# Card Data used: 4 Byte content To insert automatically:
02 Provider group of provider 00 (2 bytes) +00 00 Use crd macro p0
03 Provider ID of provider 00 (3 bytes) +00 Use crd macro p2
0A Provider group of provider 10 (2 bytes) +00 00 Use crd macro p1
0B Provider ID of provider 10 (3 bytes) +00 Use crd macro p3
C3 Hex Serial Number (3 bytes) +00 Use crd macro s0