Fine Tuneing Modded T911 For rom3?

[Cid6.7]

Ok I got my loader Modded...Big thanks to Skinard..!!
Ok I'm running the Testglitch & in the VCC Setting's it says this..


VCCStart = &h23 'YOU CAN CHANGE THIS FROM 20 TO 50-SET TO TEST BIN
VCCLimit = &h1A 'YOU CAN CHANGE THIS FROM 1A TO 30-SET TO TEST BIN


What I'm wondering is do I change the VCCLimit to &h10A or &h10 do I leave the A off..? It doesnt clearly say in the readme..
All I can get off the testglitch is all A's....
Thanks Upfront..!!

[Crazy1_79]

just 10 the A is for hex would work something like this 10, 9F 9E, 9D,9C,9B,9A, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0F,0E,0D,0C,0B,0A, if you were to count from 10 to zero

[Cid6.7]

Thanks Crazy..!
I been trying everything but still cant get any F's off this card...Tickin me off..lol

[JT]

If you have a trimmer pot installed, you can adjust that while the testglitchfind .xvb is running.

[Cid6.7]

I do & have tried but same results... =/

[skinerd]

I do & have tried but same results... =/

I tried mine on a 2nd PC and get much better results, so it appears that some PCs are more unlocker friendly than others. And some ROM 3's just take a while to pop too. I have read of guys letting theirs run for hours before it opened.

[Cid6.7]

Yah I've ran it for almost 20 hours straight...Still nothin..
I dont know of all the different VCC configuration's tho..

These are my results from the testglitch (with origional VCC settings) that I get everytime I run it... =(

\TESTglitchFIND.xvb
TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 0C FF 95 00 FF 91 81 71 64 47 00 44 4E 41 53 50
30 30 33 20 52 65 76 33 37
++++++++++++++++++++++++++++++++++++++++++++++++++ +--- try to hit 0C bug at 10A5
++++++++++++++++++++++++++++++++++++++++++++++++++ ++--- try to hit 0C bug at 10A6
++++++++++++++++++++++++++++++++++++++++++++++++++ ++--- try to hit 0C bug at 10A7
++++++++++++++++++++++++++++++++++++++++

Script Error on Line 97
Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read


Skinerd what type of Trimmer Pot did you say you put on it..I was reading another post & some guy had problems with a 15 pot & switched to a 5 & it started to work...I cant remember what pot you say you put on..Thanks

[Crazy1_79]

Yah I've ran it for almost 20 hours straight...Still nothin..
I dont know of all the different VCC configuration's tho..

These are my results from the testglitch (with origional VCC settings) that I get everytime I run it... =(

\TESTglitchFIND.xvb
TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 0C FF 95 00 FF 91 81 71 64 47 00 44 4E 41 53 50
30 30 33 20 52 65 76 33 37
++++++++++++++++++++++++++++++++++++++++++++++++++ +--- try to hit 0C bug at 10A5
++++++++++++++++++++++++++++++++++++++++++++++++++ ++--- try to hit 0C bug at 10A6
++++++++++++++++++++++++++++++++++++++++++++++++++ ++--- try to hit 0C bug at 10A7
++++++++++++++++++++++++++++++++++++++++

Script Error on Line 97
Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read


Skinerd what type of Trimmer Pot did you say you put on it..I was reading another post & some guy had problems with a 15 pot & switched to a 5 & it started to work...I cant remember what pot you say you put on..Thanks
5K pot should be on it, you are getting mostly ceiling hits, lower your resistance and try again untill you get just as many -- than ++

[Cid6.7]

I'm not getting any ---- all are ++++ then I get the error on 10A8 everytime I lower it untill it stop's then back off a bit...

[Crazy1_79]

I see a few -- --'s in the glitch analyzer you have above, try lowering resistance, or lowering vcc sart and limit.

[Cid6.7]

These are the default setting's..
VCC = &hA1 'YOU CAN CHANGE THIS FROM 20 TO 50 241A
trylimit = 51
VCCLimit = VCCStart - &h09 'YOU CAN CHANGE THIS FROM 1A TO 30
Delay = DelayStart

Could you post some setting's I should try..?
Thanks

[Crazy1_79]

try 20 and 1, or 10 and 1, try to get some --'s in that analyzer,

[Cid6.7]

With those setting's..

TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 0C FF 95 00 FF 91 81 71 64 47 00 44 4E 41 53 50
30 30 33 20 52 65 76 33 37
++++++++++++++++++++++++++++++++++++++++++++++++++ +--- try to hit 0C bug at 10A5
+++++++++++++++

Script Error on Line 97
Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read

[Crazy1_79]

are you using the original test glitch? the ++ and -- makes me think you are, try this updated version that gives you aaaa's and FFFF's Also make sure you are using flash newd6

[Cid6.7]

I have that one aswell & get nothing but A's..
I can get the very odd FF in there but thats it...No more then 2 in a row..

[Crazy1_79]

what is your restance at the pot? And what kind of loader do you have? t911 black board? t911 green board?

[Cid6.7]

Hey WTF my Firewall just picked this up...

Application Hijacking has been detected
The application: C:\Documents and Settings\Desktop\Nagra\winexp50\winexp50\WinExplor er.exe try to launch another application: C:\Documents and Settings\Desktop\Nagra\winexp50\winexp50\WinExplor er.exe anyone else ever get this..?

its a T911 Greenboard...& I'm not sure how to test the Pot resistance..I dont have a Ohm meter

[Crazy1_79]

Jesus, did I send you a virus or something in that file, I have scanned it and never shown a virus in it. ok so you have the greenboard then your resistance should be up around 2.2K You are goiing to have to change the resitance of that trimpot, this can be done while the script is running, they way it keeps timing out is very odd though, do you have adequate power going to the loader.

That's not the location of that file on my system so I don't think I did it,

[Cid6.7]

How do I measure the Pot resistance..?
Is there a program or something I could use..or just a meter?..I could try a new power supply but this one is new only used a few times..

Ok I just started from scratch...Reflashed the loader with XPAtmel useing Newd6..I put the test bin on my good rom3 & went to test it I'm getting a new error damnit..lol
Script Error on Line 69
Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read

If I get this sucker popped I'ma do a triple backflip..

[Crazy1_79]

You need a ohm meter to measure resistance but while the script is running if you turn the pot you will see a variation of the ----- and +++++ if you are getting ++++++ you need to lower resistance, just turn one way or the other just a hair and see what happens, I can't tell you which way is less and which way is more because it can be changed by how you install the pot. just go one way untill you start to see ---- if you don't see any come up then you went the wrong way, make sure you have the correct dips on, dip 2 and 5

[Cid6.7]

Skinerd put in a switch so I only use 1 on to flash & 2 on to run..

I've tried goin both ways with the pot & never see anything but A's

[Crazy1_79]

are you using the test glitch bin on a open rom 3 or are you using a locked card?

[Cid6.7]

open rom..I just let it run adjusting the pot from 1 end to the other got in total 5 F's (not in a row) got to fully opened then almost closed & it errored on line 157..

[Crazy1_79]

How do I measure the Pot resistance..?
Is there a program or something I could use..or just a meter?..I could try a new power supply but this one is new only used a few times..

Ok I just started from scratch...Reflashed the loader with XPAtmel useing Newd6..I put the test bin on my good rom3 & went to test it I'm getting a new error damnit..lol
Script Error on Line 69
Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read

If I get this sucker popped I'ma do a triple backflip..
ok, I see now what you are working with, sorry I must have missed this post, the timeout issue is what is bothering me, do you have another computer to try it on like skinerd suggested? It also seems you need to be hitting some floor bugs but to unlock a rom 3 all you need is oc hits. if you could let it run without it timing out it may work. even though all you are getting is mostly +++++

[Crazy1_79]

Then you did load the test glich bin onto the card, right?

[Cid6.7]

No other pc..Yep I loaded the testbin to the card..I can let it run forever gettin all A's..

[Crazy1_79]

as you get close to the closed position you will get a timeout error, that is normal. okay put that fucker about halfway in between open and closed, maybe a bit on the closed side to be around 2.2k and let it run, see if it will hit the oc bug or the of bug, let it run for 20 minutes or so, after you let it run you have to scroll up into the script to look for hits, it doesn't stop after hitting the bug, it keeps going. so that maybe why you didn't notice any hits when you let it run over night. when you are running testglitch it will not stop when you get a hit, when you are running 383 unlocker, it will stop when you hit the bug.. when you scroll up you have go slow otherwise you will jump right over the hits and won't see them.

[Crazy1_79]

do you have another card to try it on? If skinderd modded that thing, I would be confindent it has the ability to work.

[Cid6.7]

No only 1 383 & a open rom3 & 10

[Crazy1_79]

what kind of power are you running to it? it is center postitive outside ground, right? what voltage and Milliamp is it? Should have around 9 volt 300 miliamp

[Cid6.7]

Ok its 4:53 I'll se you in 20 minutes..lol

[Cid6.7]

Yes its a 9V 500 MA

[Cid6.7]

K ran the testglitch on default setting's Pot @ 1/2 way ...17 turn from open to closed either way..lol So I set it @ 9 turns from Open...

Got nothing but A's I wont post the whole thing it would be 8 miles long just a bit of it I made sure there was no glitch...

Executing Script: C:\Documents and Settings\Desktop\New Folder\3-TESTFILES\TESTglitchFIND.XVB
TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 0C FF 95 00 FF 91 81 71 64 47 00 44 4E 41 53 50
30 30 33 20 52 65 76 33 37
OVERFLOW WAS SENT TO 00 E050, READ CAM LATER WITH NAGRA EDIT TO SEE E050
CHANGED FROM FF TO 00. IF IT DID WE KNOW OVERFLOW IS WORKING.
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAA--- try to hit 0C bug at 10A5
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A6
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A7
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A8
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A9
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10AA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10AB
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10AC
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10AD
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10AE
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10AF
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10B0
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10B1
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10B2
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10B3
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10B4
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10B5
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A2
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A3
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A4
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A5
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A6
AAAAAAAA

[Crazy1_79]

your on the right track, keep narrowing that resistance, I have opened rom 10 cards that give me 6f6f6f6f no ffff's and they still popped. but I had the resistance from my test glitch and I used that for my pot and then set the start and limit to 10 and 0 and they both popped like that, Of course I have had 1 stubborn card that will not pop for anything.

[Cid6.7]

By Narrowing the resistance you mean turning the Pot down...?
Or manually setting the setting's..?

[Crazy1_79]

By Narrowing the resistance you mean turning the Pot down...?
Or manually setting the setting's..?
yes lowering the resistance. however, don't be afraid to try lower vcc settings.

[Cid6.7]

Damn it new error..!!! I ran this on the Locked rom3 383

\TESTglitchFIND.XVB
TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 3F FF 95 00 FF 91 81 71 64 47 00 44 4E 41 53 50
30 30 33 20 52 65 76 33 38
OVERFLOW WAS SENT TO 00 E050, READ CAM LATER WITH NAGRA EDIT TO SEE E050
CHANGED FROM FF TO 00. IF IT DID WE KNOW OVERFLOW IS WORKING.

===========================================
VCC = 23-0710A4 GLITCHED past 0C BUG
3FFF9500
===========================================

Script Error on Line 152
Sc.GetByte: Requested Byte Exceeds Last Read Request

[Cid6.7]

Do you have ICQ or msn or something lol this is getting frustrating coming back to the forum...I appreciate all the help ..!!!

[Crazy1_79]

because you ran it on the 383 you got that message. It is normal for it to timeout after words. and it is normal to say you glitched past the oc bug as well, I have tried that myself. if you want to pop that locked card, open up the unlocking file and let it go. It will still say it is locked if you try to read it in nagra, I am fairly certain.

[Crazy1_79]

you have a pm

[Dr Zapola]

Where can I get newd6,7,9 flash. I went to the files but it will not dounload. Can any body send me one.
ZAP