Screwed or What?

[monster2]

Am I screwed with a looped card. I finally got the provider info changed in ROM STUDIO. I then used Powersyncyunlockerall Ver3. this is what I get now:

Executing Script: C:\Dish\rom11 B8A unlocker edited flash includ\rom11 B8A unlocker edited\unlocker script B8A\Rom11-B8A_edited.xvb
TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 38
TX Data : 14 03 10 15 AB 21 00 08 A0 CA 00 00 02 12 00 06
55 0E 03 87 00
RX Data : 14 08
RX Data : 12 00 08 92 04 01 80 CA

Now we will try 1780 delay
TX Data : B0 40
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
TX Data : 47 15 E0
TX Data : 21 00 3D A0 CA 00 00 37 03 35 00 01 10 31 05 4E
69 70 50 45 72 20 49 E3 40 7C AD FD B9 64 29 F4
F6 77 C2 35 6D 74 74
TX Data : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 05 9A
TX Data : 0E 05 8A 00
RX Data : 47 0B
RX Data : 12 00 07 83 03 B1 01 01 90
TX Data : 53 15 E8
TX Data : 21 00 45 A0 D7 10 80 40 37 83 EC 11 F8 5E 3A AB
44 8F 66 AF 52 2C AA 95 0F C9 20 42 99 EB 0B C0
83 65 2A 99 9C FE DF
TX Data : 98 9F 46 95 BD 82 F8 8C 28 D4 C0 30 74 8D 27 D5
DF 25 F3 60 31 B2 AB C4 4D 66
TX Data : EA 50 DC FC 52 9F 09 63 20 17 80 06 0E 05 85 00
RX Data : 53 06
RX Data : FF FF FF FF FF
- ! -- ! ! - ! ------ ! ! ! ! ! ! ! - ! -- ! ! ! ! ! ! ! ! ! ! ! ! -- ! - ! -- ! ! ! ! ! - ! ! ! ! !

*********** we hit our bug *************
9000 was our loggin = good loggin, D7 packet 1 wrote to cam
1240029000
===========================================
90 was hit at 1780 delay ----VCC WAS 77 , our GlitchType was 07

!

*********** we hit our bug *************
9000 was our loggin = good loggin, D7 packet 2 wrote to cam
1240029000
===========================================
90 was hit at 1780 delay ----VCC WAS 78 , our GlitchType was 07


********************************
* DISH ROM11 B8A EMM sent *
* ROM11 B8A cam should be open *
* test in Nagra to see. *
* if not, try again. *
********************************


Now all I get in Nagra is

Opening of COM1 was successful
Reset failed
Error reseting card, ATR string invalid
Closing of COM1 was successful
Error detected, One Step Clean incomplete

[BirdieMod]

Do you have Nagra settings for the comm port your ISO is connected to?
Simple I know, But with this flipping loaders and unlocking it's easy to get ports mixed up :)

[monster2]

Thanks. I used a Nexus loader to use powersync then I moved over to my ISO and it is fine but I get No?bad ATR. If I run the card thru powersync again I get the same message as before (Good etc.. try Nagra)


Please don't tell me its looped. I have been working on this card for over three weeks. Finally learned on my own how to change the provider ID etc in Rom Studio.

I'll be pissed if I screwed it up. Wanted to give up so many times but I didn't.

[BirdieMod]

I think your card is fine. Recheck what serial communication port your iso is connect to and check in Nagraedit setup for the comm port Nagra is set for, I think this is the problem.

[Crazy1_79]

Birdie, look at the last Rx transmission from card.

RX Data : FF FF FF FF FF
- ! -- ! ! - ! ------ ! ! ! ! ! ! ! - ! -- ! ! ! ! ! ! ! ! ! ! ! ! -- ! - ! -- ! ! ! ! ! - ! ! ! ! !
RX data is FF FF FF FF FF isn't that a sign of a looped card? I have no experience with Rom 11's but FF FF is always a bad sign for ATR I thought. Of course I may be falling back into the old HU card days! LOL

[monster2]

The ISO is fine. I read a Rom 3 & 10 with no issues.

This card ( Rom11) is now giving me the dreaded
(Error reseting card, ATR string invalid).

I am pretty sure I am screwed, but hoping you have some advice.

It sucks! I worked so hard on this with tons of reading.

[BirdieMod]

90 was hit at 1780 delay ----VCC WAS 78 , our GlitchType was 07


Missed that, Vcc78? Holy shit, I thought tossing 47 at rom 3's was wild. I wonder if that was way too high and melted it?

[BirdieMod]

BTW, Just looked, 47 melted a rom 3 here just now but I hate rom 3's anyway and think thats funny, I'll add it to my ice scapper collection of about 50 looped 3's :)

[Crazy1_79]

NO birdie, it didn't melt it. don't scare the guy like that. I"ve seen 99 vcc hits on cards that people have posted. it is still under 5 volts because of the voltage regulator. can't put in more than what is coming out without a outside source of power, he didn't plug it the damn thing straight into the wall. (did you?) lol. how do you unloop a rom 11? that is the question here, we know it is software looped. Hey monster, copy and paste what it says when you try to run the unlocking script again , it has to show a ATR of some sort. btw you didn't forget to plug in your iso did you?

[monster2]

Using Nexus on Rom11 @ b88. Flashed with D11.exe hex, running PowersyncunlockallVer3_433. Power supply 12v @ 250ma.

Executing Script: C:\Dish\powersyncunlockallver3_433\PowersyncUnlock ALLver3.XVB
________________Setting up WinExplorer_________________
Version Number returned from Atmel CMD 90 reads: ND11 Known as NewD11 use for Rom11
TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 06 00
TX Data : 14 03 10 15 AB 21 00 08 A0 CA 00 00 02 12 00 06
55 0E 03 87 00
RX Data : 13 00
Now we will try 1780 delay
TX Data : B0 40
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
TX Data : 47 15 E0
TX Data : 21 00 3D A0 CA 00 00 37 03 35 00 01 10 31 05 4E
69 70 50 45 72 20 49 E3 40 7C AD FD B9 64 29 F4
F6 77 C2 35 6D 74 74
TX Data : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 05 9A
TX Data : 0E 05 8A 00
RX Data : 47 0B
RX Data : 12 00 07 83 03 B1 01 01 90
TX Data : 53 15 E8
TX Data : 21 00 45 A0 D7 10 80 40 37 83 EC 11 F8 5E 3A AB
44 8F 66 AF 52 2C AA 95 0F C9 20 42 99 EB 0B C0
83 65 2A 99 9C FE DF
TX Data : 98 9F 46 95 BD 82 F8 8C 28 D4 C0 30 74 8D 27 D5
DF 25 F3 60 31 B2 AB C4 4D 66
TX Data : EA 50 DC FC 52 9F 09 63 20 17 80 06 0E 05 85 00
RX Data : 53 06
RX Data : FF FF FF FF FF
- RESET RESET RESET RESET RESET - RESET RESET RESET -- RESET -- RESET - RESET RESET - RESET - RESET RESET RESET - RESET - RESET - RESET RESET RESET - RESET RESET - RESET RESET RESET RESET - RESET - RESET RESET RESET - RESET RESET - RESET RESET RESET RESET RESET RESET

*********** we hit our bug *************
9000 was our loggin = good loggin, D7 packet 1 wrote to cam
1240029000
===========================================
90 was hit at 1780 delay ----VCC WAS 79 , our GlitchType was 07



*********** we hit our bug *************
9000 was our loggin = good loggin, D7 packet 2 wrote to cam
1240029000
===========================================
90 was hit at 1780 delay ----VCC WAS 79 , our GlitchType was 07

TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 38
TX Data : 60 15 F6 21 40
TX Data : 53 A0 CA 00 00 4D 00 4B 00 01 02 28 E2 FE EF 6F
TX Data : E0 1A 8D EE 21 88 E4 9E 9D 76 AA 32 AE 1D 1E 6F
TX Data : 34 B6 6C F4 72 81 9A 65 D3 80 8A F6 B5 B1 E3 04
TX Data : 39 30 C4 A7 45 4B 67 7F 7D B2 24 E1 A6 ED 30 1E
TX Data : 9F 48 1C 93 14 AB FD 1D FC 90 FF 74 E2 43 BF 2D
TX Data : 27 63 7E 05 37 20 00 FF 0E 05 85 00
RX Data : 60 06
RX Data : 12 00 07 80 03

********************************
* DISH ROM11 B8A EMM sent *
* ROM11 B8A cam should be open *
* test in Nagra to see. *
* if not, try again. *
********************************

[Crazy1_79]

RX Data : 07 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 38
TX Data : 60 15 F6 21 40
TX Data : 53 A0 CA 00 00 4D 00 4B 00 01 02 28 E2 FE EF 6F
TX Data : E0 1A 8D EE 21 88 E4 9E 9D 76 AA 32 AE 1D 1E 6F
TX Data : 34 B6 6C F4 72 81 9A 65 D3 80 8A F6 B5 B1 E3 04
TX Data : 39 30 C4 A7 45 4B 67 7F 7D B2 24 E1 A6 ED 30 1E
TX Data : 9F 48 1C 93 14 AB FD 1D FC 90 FF 74 E2 43 BF 2D
TX Data : 27 63 7E 05 37 20 00 FF 0E 05 85 00
RX Data : 60 06
RX Data : 12 00 07 80 03


RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
That is your ATR, that card is not looped.

the last Rx of

RX Data : 12 00 07 80 03

that looks like a response to a emm packet, but it doesn't seem to be long enough for a valiid response, although I have no experience with rom 11's I think it is not fitting snugly into your iso because that is not a response of a looped card, the FF FF FF FF above in the script appears to be a looped response but then it clearly give more than two byte replies later on and even a valid atr after the FF FF FF FF so that card is not looped. I don't know what for sure is wrong with it, but not looped.

[BirdieMod]

I meant softlooped of course, Not physically melted.
Out of hundreds of cards I only have 1 rom 11 and that one is looped since about last april/May

[Crazy1_79]

well don't scare the poor guy like that birdie! he said he has weeks of hands on with that card. No any good rom 11 unmelters? LOL Look at the RX of the data he gets when he reruns the script, there is a ATR and then a response to some EMM packets, the emm responses seem about 2 or 4 bytes short of a valid response that would be received from a rom 3 or rom 10 card. What do you think, I say that card is not looped, it might not like his iso but it isn't looped. I see the dreaded FF FF FF FF FF return near the top of the script and then some scary 2 byte returns after that which could verify a looped card but then it pops out a ATR and then a emm packet response. so it isn't looped.

[Crazy1_79]

I don't like this response this is the last transmission from the card
RX Data : 12 00 07 80 03

I don't think it is a looped response but I don't think the packet had a good write, run it again monster and post the last response from the card it should look more like this
RX Data : 12 00 07 83 03 B1 01 01 90

It may differ from that, because I pulled that out of the script you pasted a little farther up but that appears to be more of a response to valid emm write.

[satanicnazi]

check connections - something is off you getting to the card ok dump it again

[monster2]

I continue to get no response from Nagra, Rom Studio or MROMV6. (Invalid ATR)

Executing Script: C:\Dish\powersyncunlockallver3_433\PowersyncUnlock ALLver3.XVB
________________Setting up WinExplorer_________________
Version Number returned from Atmel CMD 90 reads: ND11 Known as NewD11 use for Rom11
TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 38
TX Data : 14 03 10 15 AB 21 00 08 A0 CA 00 00 02 12 00 06
55 0E 03 87 00
RX Data : 14 08
RX Data : 12 00 08 92 04 01 80 CA
Now we will try 1780 delay
TX Data : B0 40
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
TX Data : 47 15 E0
TX Data : 21 00 3D A0 CA 00 00 37 03 35 00 01 10 31 05 4E
69 70 50 45 72 20 49 E3 40 7C AD FD B9 64 29 F4
F6 77 C2 35 6D 74 74
TX Data : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 05 9A
TX Data : 0E 05 8A 00
RX Data : 47 0B
RX Data : 12 00 07 83 03 B1 01 01 90
TX Data : 53 15 E8
TX Data : 21 00 45 A0 D7 10 80 40 37 83 EC 11 F8 5E 3A AB
44 8F 66 AF 52 2C AA 95 0F C9 20 42 99 EB 0B C0
83 65 2A 99 9C FE DF
TX Data : 98 9F 46 95 BD 82 F8 8C 28 D4 C0 30 74 8D 27 D5
DF 25 F3 60 31 B2 AB C4 4D 66
TX Data : EA 50 DC FC 52 9F 09 63 20 17 80 06 0E 05 85 00
RX Data : 53 06
RX Data : 12 40 02 90 00


*********** we hit our bug *************
9000 was our loggin = good loggin, D7 packet 1 wrote to cam
1240029000
===========================================
90 was hit at 1780 delay ----VCC WAS 40 , our GlitchType was 06

RESET RESET RESET

*********** we hit our bug *************
9000 was our loggin = good loggin, D7 packet 2 wrote to cam
1240029000
===========================================
90 was hit at 1780 delay ----VCC WAS 43 , our GlitchType was 06

TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 38
TX Data : 60 15 F6 21 40
TX Data : 53 A0 CA 00 00 4D 00 4B 00 01 02 28 E2 FE EF 6F
TX Data : E0 1A 8D EE 21 88 E4 9E 9D 76 AA 32 AE 1D 1E 6F
TX Data : 34 B6 6C F4 72 81 9A 65 D3 80 8A F6 B5 B1 E3 04
TX Data : 39 30 C4 A7 45 4B 67 7F 7D B2 24 E1 A6 ED 30 1E
TX Data : 9F 48 1C 93 14 AB FD 1D FC 90 FF 74 E2 43 BF 2D
TX Data : 27 63 7E 05 37 20 00 FF 0E 05 85 00
RX Data : 60 06
RX Data : 12 00 07 80 03

********************************
* DISH ROM11 B8A EMM sent *
* ROM11 B8A cam should be open *
* test in Nagra to see. *
* if not, try again. *
********************************

Script C:\Dish\powersyncunlockallver3_433\PowersyncUnlock ALLver3.XVB Transmission Completed

[mk14er]

please tell me how you fixed in rom studio i am having same problem

[monster2]

Hey BirdieMod or Crazy1 can you take a quick peek at my last posted powersynch results. I kinda think I might be software looped. I can run the winexplorer scripts but none using my ISO at 3.86 mhz

Thanks for all you input.

Monster2

[Crazy1_79]

RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 38 there's your atr from your last post, it ain't looped don't know why you can't read it, but it isn't looped, try running that script with no card in the loader see if it gives you a bunch of crap like the card is really in there.

[monster2]

Nah, tried that already, the winexplorer prog quits pretty fast. Any other ISO progrs that might work reading a card. I have tried MROM, NAGRA, ROM STUDIO. They all say invalid ATR.

RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 38 there's your atr from your last post, it ain't looped don't know why you can't read it, but it isn't looped, try running that script with no card in the loader see if it gives you a bunch of crap like the card is really in there.

[Crazy1_79]

but all of those proggy use your iso, I think it is bad contacts in the iso, you are getting alot of data outta that card but maybe it's looped I have no experience with rom 11's so I could be wrong on this monster, If you ever get it figured out let me know if I was

[monster2]

Thanks Crazy1

The ISO works fine on my 3's and 10's. It used to read the 11 partially until I got my provider info straightened out. When I ran Powersynch the card crapped out on me.

Thanks for everything anyway. I'll keep going until the damn thing melts or my wife kills me. lol (I mean it)

[Crazy1_79]

sorry I couldn't be of more help but I am about tapped out of ideas for ya bud,, rom 11 support is scarce I'm sure you are figuring that out. I am thinking about buying one just to see if I can pop it, then I may have more experience and more ideas for one.