sc read/timeout--script error

[VirgoVixen]

this is a rom 10

no matter what vcc hi and lo I set it at I can get a good combination of +++---- but then it wants to stop and ends with xx. Anyone know maybe why?
Here is the reading.

Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h2A
VCC Low &h20
TX Data : 02 03 00
TX Data : 02 02 00
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 8B 00
RX Data : 12 0C
RX Data : 12 00 08 92 04 01 15 92 6E 90 00 F4
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 2A: --------++--++--++--++--++--------++--++++--++++++----++----++--------++++--------------++++++++----
VCC 29: ++--++--++++----++--------------++----++--++++--------------++--XX

Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read, Continuing Script

Script Error on Line 665
Sc.GetByte: Requested Byte Exceeds Last Read Request


I am using the powerunlock3 script, switch 2&5 on. Mod T911. I have windows XP.

The Vixon

[VirgoVixen]

more readings at different hi & lo's...

Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h1a
VCC Low &h10
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 1A: ----------------------------------------------------------------------------------------------------
VCC 19: ----------------------------++++++--------++----++++------++--++++--++----++----++++--++++--++++++++
VCC 18: ++------++--------++----++++--------++------++++----++--++++++----++--++------XX

Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read, Continuing Script

Script Error on Line 665
Sc.GetByte: Requested Byte Exceeds Last Read Request

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~

Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h1a
VCC Low &h12
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 1A: ++----++++--++--++++----++++--++--++++----++++++--++--++--++++++++------++++++++++++++++--++----++--
VCC 19: ++++++XX

Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read, Continuing Script

Script Error on Line 665
Sc.GetByte: Requested Byte Exceeds Last Read Request

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~

Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h3a
VCC Low &h14
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 3A: ++--------++++----++--++--++------++++----++----++++++++------------++--++++----++------++----++++++
VCC 39: ++++++--++++--------++------------++++++----++--++++--++++++++++--++----++++--------++++--++------++
VCC 38: --++++----------------++--++++----------++------++--++++--++--++++------++++--------++++------++----
VCC 37: --++--++++++--++++--++----++++--------++----++++++++++--++++++++++++------++++XX

Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read, Continuing Script

Script Error on Line 665
Sc.GetByte: Requested Byte Exceeds Last Read Request

[Cid6.7]

Try this script..Sometimes Powersync gives me the same thing & I just switch to this one

[VirgoVixen]

Ok thanks will try....But wanted to show what i am getting now, I get all F's no matter what I set at, 123e-?? and 125a-126/127....Also will post my progress from using what you posted.

@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@


VCC Ceiling: 1A
VCC Floor..: 20
################################################## #######
# #
# For Dealer locked A23 try using Delay range 0C20-0C40 #
# #
################################################## #######

Delay Start &h0C40
Del End &h125A
TX Data : A0
TX Data : A0
TX Data : A1
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 85 00
RX Data : 12 06
RX Data : 12 00 08 92 04 01
Now we will try 0C40 delay
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFF

Script Error on Line 856
Script Aborted By User

[VirgoVixen]

I am getting 6F6F6F6F6F6F6F6F6F6F6F6F6F now in either the powerunlock3 or the rom10unlocker-glitcher.

when delay start comes up when it says lo can be as low as 1100 does that mean 123e/124e/125e etc to -->1100e. Do I add the e or does it matter?

Do I need to mess with the trim pot setting if it gets past the first step and onto the 6F6F6F6F6F6F6F, or is that ok and let it run at the 6F6F6F6F6F6F6F6F6F. Does it have to be good combo like 6666FFFFFF6F6F6666FFFF6F6F6F etc.

[Cimba]

From the guide for modded loaders:
In most cases the default values will give you great success in opening cards as long as your Vcc setting are good. Once again, this number is in hex so we use the recommended value for a dish rom 10 card of 123E,
Next it will ask you for a Delay end value(Limit) and once again we will use the recommended setting of 125A for a dish network rom 10 card and click ok. Now the script will start running at the 123E delay and start returning a log of 6FFF6FFF6F6F6F6F6FFFFFFFFF or something along those lines, If you have your Vcc settings correct you will see a good mixture of 6F and FF in the unlocking scripts. This is what you want!
If you get 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F then you need to abort the script and try lower vcc settting in the glitch analyzer while paying closer attention to the responses you see on the screen in glitch analyzer.

[VirgoVixen]

YES I READ THE GUIDE :)....

this one is doing different things, just troubleshooting is all.

Thanks

[Cimba]

I wasn't asking if you read or insinuating you had not; just answered your question about the 6F6F6F6F6F6F by using a quote from the guide that does answer that.
Easier than typing it all out, thats all.

[VirgoVixen]

ok thanks

[Cid6.7]

Virgo I think your changeing the wrong setting's
If you only getting FFFFFFFFFF's Turn the VCCHigh higher then the default 23 or whatever it is..Try VCCHigh &h40 VCCLimit &h 31...Always set them 9 digits apart..seems to work better that way..Keep you pot set to 2.2k UNLESS no other VCC settings in the script works.If your have a hard time glitching it try dips 2&6..
If you cant just get the correct setting's then just monkey with the script untill you get a good reply of 6F's & FF's

[Crazy1_79]

virgo, very strange reading. try a different flash, turn the pot way lo and use VCC settings up in the 90's if need be, also the start vcc needs to be higher than the limit, so you should use 99 for a start and 90 for the limit, by reading your vcc post over in the praises complaints and rants section it appears you switched these two around, which in fact may still get you into a card, but it is actually backwards. that may just cure your problem with this one.

[VirgoVixen]

Got it finally, thanks Cid and Crazy....here is what I did. Instead of explaining I am putting the log in, this will tell you what i did.


________________Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h40
VCC Low &h31
TX Data : 02 03 00
TX Data : 02 02 00
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 8B 00
RX Data : 12 0C
RX Data : 12 00 08 92 04 01 15 92 6E 90 00 F4
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 40: ++++--++----++++++++++++------++------++------++++++--++----------++----++------++--++----++++++----
VCC 3F: ++++++----++--++----++++----------++------------++++--++--------------++----++++--------++++++------
VCC 3E: ------++++----------++--++------++++----++--++--------++++----++++------++--++++++------------------
VCC 3D: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXX(<~~the X's is because it quit recognizing the card, I get that alot too)


Script Error on Line 652
Script Aborted By User

________________Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h1A
VCC Low &h20
TX Data : 02 03 00
TX Data : 02 02 00
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 8B 00
RX Data : 12 0C
RX Data : 12 00 08 92 04 01 15 92 6E 90 00 F4
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@


VCC Ceiling: 1A
VCC Floor..: 20
################################################## #######
# #
# For Dealer locked A23 try using Delay range 0C20-0C40 #
# #
################################################## #######

Delay Start &h99
Del End &h90
TX Data : A0
TX Data : A0
TX Data : A1
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 85 00
RX Data : 12 06
RX Data : 12 00 08 92 04 01
Now we will try 0099 delay
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFF6FFFFFFF6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F 6F6FFF6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F 6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F 6F6FFF6F6F6F6F6F6F6F6FFF6FFF6F6F6F6F6F6FFF6F6F6F6F
PowersyncUnlock Testing Chuck Rom10(<~~I was messing with the knob-up and down/trim pot untill I got the mix of 6F's)

now we will try 009A delay
6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F6F6F6F 6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F6F6F6FFF6FFF6F6F6F 6F6F6F6F6F6F6F6F6F6F6FFF6F6FFF6FFFFF6FFFFF6F6F6F6F FFFFFF6F6FFFFF6F6F6F6F6FFF6FFF6F6F6F6F6F6F6FFFFF6F FFFFFF6F6F6F6F6FFF6F6F6FFF6FFFFF6F6F6F6F6FFF6FFFFF 6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F FF6FFF6F6F6F6F6F6F6F6F6FFF6FFF6F6F6FFF6F6FFF6FFFFF FF6FFF6F6FFFFF6F6F6FFF6F6FFFFFFF6F6F6F6F6F6F6F6F6F FFFF6FFFFFFFFF6F6FFFFF6FFF6FFF6F6F6F6FFF6FFF6F6F6F FF6F6FFF6FFF6F6FFFFF6F6FFFFFFF6FFF6F6F6FFF6FFF6F6F FFFF6F6F6F6FFFFF6FFF6FFF6F6F6FFF6F6FFF6FFFFF6F6F6F 6F6F6F6F6FFF6F6F6F6FFF6F6F6F6FFFFF6F6F6FFF6FFF6F6F 6F
PowersyncUnlock Testing Chuck Rom10

now we will try 009B delay
6F6F6F6FFF6FFF6FFF6FFF6F6FFF6F6F6FFF6FFF6F6F6F6F6F FFFFFF6FFFFF6F6FFF6F6F6F6FFF6F6FFF6F6F6F6F6F6F6F6F 6F6F6F6F6FFF6F6FFF6FFF6F6F6F6FFFFF6F6FFF6F6FFF6FFF 6FFFFF6FFF6FFF6F6F6F6F6F6F6FFF6F6F6F6FFF6F6FFF6FFF FF6F6FFF6F6F6F6FFFFFFF6FFF6F6F6FFF6FFFFF6F6F6F6F6F 6F6F6FFF6FFF6F6FFF6F6F6F6F6FFFFFFF6F6FFF6FFF6F6F6F FFFF6FFFFF6FFF6FFF6FFFFFFF6F6F6F6F6F6F6F6F6F6F6F6F FF6F6FFFFF6FFF6FFFFF6F6F6F6F6F6FFF6F6F6F6F6F6F6FFF 6FFF6F6F6F6F6F6FFF6FFF6FFF6F6F6F6FFFFFFF6FFF6F6F6F FF6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F6FFF6F 6FFF6F6FFFFF6FFF6F6F6F6FFF6F6F6F6FFF6F6F6F6F6FFF6F 6F6F6FFFFF6F6F6F6F6FFF6FFF6F6F6FFFFF6F6F6FFF6F6F6F FF
PowersyncUnlock Testing Chuck Rom10

now we will try 009C delay
FFFF6FFF6F6FFF6FFFFF6F6FFF6F6F6F6F6F6F6FFF6F6FFF6F 6FFFFFFFFF6FFF6F6FFFFF6FFFFFFFFF6F6FFF6FFF6F6FFFFF 6F6F6F6FFFFFFF6FFF6F6F6F6F6F6FFF6F6F6F6F6F6F6F6FFF FFFFFF6FFF6FFF6FFF6F6FFFFFFFFF6FFFFFFF6F6F6F6F6FFF 6FFF6F6F6FFF6F6FFF6F6FFF6FFF6FFFFF6FFF6F6F6F6F6FFF 6F6F6F6F6F6FFF6FFF6F6FFF6FFF6F6F6F6FFF6F6F6FFFFF6F 6FFFFF6F6F6FFF6FFFFF6FFF6F6F6F6F6FFFFF6F6FFF6FFF6F 6F6F6F6F6F6F6F6FFF6F6FFF6F6FFFFFFF6FFF6FFF6F6F6FFF 6FFF6F6F6F6F6F6FFF6F6F6F6F6F6FFFFFFFFF6FFF6F6FFF6F FFFF6FFF6FFF6FFFFF6FFF6F6F6FFFFFFFFF6F6F6F6F6F6F6F 6F6F6F6F6FFF6FFF6FFFFF6F6FFF6F6F6F6F6FFF6FFFFF6F6F 6FFF6FFF6F6F6F6F6FFFFFFFFF6F6FFFFFFF6F6F6FFF6FFFFF 6F
PowersyncUnlock Testing Chuck Rom10

now we will try 009D delay
6FFFFF6F6F6FFF6FFFFFFF6F6F6F6FFFFFFF6FFFFFFF6F6F6F 6F6F6F6F6F6F6F6FFF6FFF6F6F6F6FFF6F6FFF6F6F6FFFFF6F FF6F6FFF6FFF6F6FFF6F6FFFFF6FFF6F6FFFFF6F6F6F6F6F6F 6FFFFF6F6F6FFF6F6F6F6FFF6FFF6F6FFFFFFF6F6F6F6FFFFF FF6F6F6FFFFFFF6F6FFF6F6FFFFFFFFF6FFFFF6F6F6FFF6F6F 6FFF6FFF6FFF6F6FFF6F6FFFFF6F6F6F6F6F6FFFFF6FFFFF6F FFFF6FFF6FFF6FFF6F6F6F6FFF6FFF6FFF6F6FFFFF6FFF6F6F FFFF6F6F6F6FFFFFFFFFFFFF6F6F6F6F6F6F6FFFFF6F6F6FFF FF6FFF6FFFFFFF6F6FFFFFFF6F6FFFFFFF6FFF6F6FFFFF6F6F FF6FFF6F6FFFFFFFFF6F6F6F6F6F6FFF6FFF6F6FFFFF6FFF6F 6F6F6F6FFF6FFF6F6FFFFFFF6F6F6FFF6F6FFFFF6FFFFF6FFF FFFF6F6FFF6F6FFFFFFF6F6F6FFF6F6FFFFFFF6F6F6F6FFF6F 6F
PowersyncUnlock Testing Chuck Rom10

now we will try 009E delay
6FFFFF6F6FFFFFFF6F6FFF6FFF6F6F6FFF6F6FFF6FFF6F6FFF FF6FFFFFFFFFFF6F6FFF6FFFFFFFFFFFFFFFFFFF6F6F6FFFFF FF6F6FFF6F6F6F6F6F6FFFFFFFFFFF6FFF6F6FFFFF6FFF6F6F 6F6FFF6FFFFFFFFF6F6F6F6F6F6FFFFF6FFFFF6FFF6F6F6F6F FF6FFF6F6FFF6FFF6F6F6F6F6FFF6F6FFF6F6FFF6F6FFFFFFF FF6F6F6F6FFFFF6FFF6FFFFF6F6F6FFF6F6F6F6F6F6F6F6FFF FF6FFF6F6FFFFFFFFFFFFF6FFF6FFFFF6FFFFF6F6F6FFF6FFF 6FFF6F6FFFFFFF6F6FFF6FFFFFFFFF6F6F6FFFFF6FFF6FFFFF FF6F6FFFFF6F6FFF6FFF6FFF

Script Error on Line 793
Script Aborted By User (<~~if you notice I am impatient, lol)

________________Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h1A
VCC Low &h20
TX Data : 02 03 00
TX Data : 02 02 00
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 8B 00
RX Data : 12 0C
RX Data : 12 00 08 92 04 01 15 92 6E 90 00 F4
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@


VCC Ceiling: 1A
VCC Floor..: 20
################################################## #######
# #
# For Dealer locked A23 try using Delay range 0C20-0C40 #
# #
################################################## #######

Delay Start &h123E
Del End &h125A
TX Data : A0
TX Data : A0
TX Data : A1
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 85 00
RX Data : 12 06
RX Data : 12 00 08 92 04 01
Now we will try 123E delay
FFFFFFFFFF6F6F6FFFFF6FFFFFFF6F6FFFFF6FFFFF6F6FFF6F 6FFF RESET RESET RESET RESET RESET RESET 6F6F6F6FFFFF6F RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET FF6FFFFFFFFF6FFFFFFF6F6FFFFFFFFF6FFFFFFFFF6FFF6FFF 6F6F6F6FFFFF6F6FFFFF6F6FFFFF6FFF6F6F83 (<~~~Notice the reset to a good mix of 6F, I again messed with the trim pot while running the script)

*********** we hit our bug *************
1200078303
===========================================
83 was hit at 123E delay ----VCC WAS 1A
TX Data : 0A 15 A3 21 92 00 B3 0E 03 85 00
RX Data : 0A 06
RX Data : 12 92 00 80 21
***************************
* A23 CAM should be OPEN *
* test in Nagra to see. *
* if not, try again. *
***************************


I was able to clean it and is now open. I wanted to ask if my playing with the what i think is the trim pot, wise? I turn it up and down alot. I don't know how to read my ohm meter or if it is even the right kind of ohm meter, so i don't know what it is set at. So I play with it instead of playing with the vcc settings. I am probably confused at what i am trying to ask, but if it makes sence to you then i am on the right trac. If not overlook the question.


.

[VirgoVixen]

I JUST POPPED ANOTHER ROM10, WOOHOOO!!!!
Total of 5 popped cards
below is my settings I used on this last one, this one took a bit longer, but I didn't mess with the trim pot and just let it run it's course. I had a good mix of 6F's with "RESET" popping up occasionally.

VCC High &h1A
VCC Low &h20

Delay Start &h99
Del End &h90

I need to get to bed, but I can't STOP popping. I am now working on my 6th rom 10.

Maybe someone can start a thread with everyone who have been successfull at opening cards, there settings....
VCC High =
VCC Low =

Delay Start =
Del End =


This loader ROCKS Crazy1. Made my money back already and then some ;) MUAH! Worth every penny. Now maybe you might consider making a guide on rom 3's "WINK". These I have had no luck at so far.


.

[Cid6.7]

Vixin you pop them the same way...This is what I did lastnight had 4 rom10's & 4 rom3's to pop So I popped all the rom10's 1st useing the analyzer to start wrote down all the VCC setting's on the card's.When they all popped I did the exactly the same thing for the rom3's.Used the analyzer to get the setting's wrote them down for each card.Then flashed the loader with Newd6 & started poppin with the saved setting's for each particular card..Popped all 8 cards in approx 5 hours.

[VirgoVixen]

I am not sure what you mean by "useing the analyzer to start wrote down all the VCC setting's on the card's".

I do not have an open rom 3 to analyze. I had one but not now UGHHH!!! So I can get it back if I have to have an open Rom 3 to analyze it. Are you meaning the test.bin and the test glitch in penga'a unlocker-glitcher script?

I am sorry for my confusion, I searched on vcc analyzer and couldn't find anything specific telling what this is and how to do it.

So far on my rom 3's I get o6Fo6Fo6Fo6Fo6F, but I am using default or the vcc settings it suggest. Let one card run till today but no luck. I read somewhere it has to have a good mix of the o6F's to pop it. I get straight o6Fo6Fo6Fo6F no mix or different sync. I did change these settings I found but still nothing different.

vcc start=&h60
vcc limit=&h1A

vcc start=&h45
vcc limit=&h1A

.

[Cid6.7]

No run the analyzer on the locked rom3's & write down the Vcc setting's it gives you on the card(on tape or whatever).
Then once all your rom3's have been ran through the analyzer flash your loader with newd6 & use the setting's you've written on the card.If you still dont git what Im talkin bout come into chat..

[VirgoVixen]

OIC, gotcha....I keep it flashed with the d9 right, then after analyzing I flash to the newd6.

I finally figured out the analyzer, duh, did I mention I am a blonde :).

OK I got this but it is flashed with the d6. To analyze do I have to have it flashed with d9? Or am I confused with this altogether?...

Setting up WinExplorer_________________
Chip is flashed with D1(version REK1)and was verified.
===========================================
VCC = &hA1
glitch type = &h07
glitch delay = &h10A4
GLITCHED past 0C BUG!!!, unlocker is good to go.
use the above settings on real unlocker script
3FFF9500
===========================================

Script Error on Line 294
Sc.GetByte: Requested Byte Exceeds Last Read Request

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Now where do I put the settings i got at, below is what I think to do...

Delay Start &h10A4
Delay Limit &h10A5
VCC Start &hA1
VCC Limit &h07

THANKS for all your help

.

[VirgoVixen]

OK here is whats going on now with me...

when I flash to either d9 or d8 I can not get analyzer to come up. I have d6-1 flash and a newd6 flash, the newd6 says it programed but runs thru real fast and doesn't show up as flashed when I analyze. I used different switches on and off as well. But the d6-1 flash does and shows above.

Now my loader is getting rather hot to the touch, not burning, but oddly warm.

I am gonna walk away before I start banging at things. I am completely confused with these rom3's. Seems easy enough, but I can blunder even the easiest of tasks. I have read and read and then read some more. Too early to have a drink, and I am not into no girlfriends or wives, hubby is away at work, so no tension helper's here! @#%&^%##&

.

[Crazy1_79]

sorry Virgo, in my haste I inadvertantly proposed that every tester was male in gender, I do apologize, Now for the rom 3's the key is to start the script and walk away, I have had them take 4 hours per card. usually a minimum of 45 minutes. Flash with D9 and run the rom 10 unlocking script with the rom 3 in the loader, let it run through the first part where you get the glitch analyzer (the ++ and the --'s) now when that is done, it will tell you the ceiling and floor. Okay write that down or remember it. (I know your blonde so you better write it down!) LOL, anyway. now flash the loader with D1 and start the rom 3 unlocking script, it will ask you for vcc start, put the Vcc Ceiling in there, then it will ask for Vcc limit, put the VCC Floor in that spot, use the default delays of 10a4 and 10a5, then walk away and take the dog out to poop, watch your favorite movie, what ever, I suggest letting it run a minimum of 2 hours. I would even more strongly sugges that you let it run overnite while you sleep, the cam will be open when you wake up. if the loader is getting warm, check your resistance at the pot. You do not want this to drop below 150 ohms because it will cause things to warm up, now your voltage regulator in the loader will get very warm, in fact if you remove the cover of the loader and touch it it will probally leave a mark if you leave your finger on there for a few seconds. That is how hot they get. NOt instant burn hot, but they do get very warm. if you are feeling the warmth from this, then that is normal. If you are feeling the IC chips (all the little black rectangles with the silver legs sticking out) and they are overly warm to the touch, raise the resistance of the pot . Usuallya the chip that will get warm is the chipt that has the two wires coming off of it to the pot. if resistance is too low it will get warm and that is bad

[VirgoVixen]

Well that clears a few things up for me. Ok now I get it about the D9 flash and analyze. See before I was looking for it to ask me to analyze like it does when it is flashed with
D6-1. Anyway I did that got a ceiling and a floor setting with the D9 flash. I did write it down, :).

vcc ceiling=27
vcc floor=1F

Ok I flashed to the D6-1 and went back to powerunlock and did like you said.

Delay Start &h10A4
Delay Limit &h10A5
VCC Start &h27
VCC Limit &h1F

I was getting o6Fo6Fo6F. I let it run, then about 10 minutes I got this

o6Fo6Fo6Fo6Fo6Fo6Fo6Fo6Fo6Fo6Fo6Fo00o63
=========================
= CAM IS OPEN NOW !!!!! =
=========================

Thank you Crazy1! Gonna try on the rest of them. I also want to oploigize for my post about the girlfriends and wives, I know you werent meening that in a bad way. And for the most part this is a guy hobby, I know of no women myself who do or know anything about testing. Anyway THANK you for taking the time to spell out what I had to do exactly to get into these rom3's, most appreciated.


.

[Crazy1_79]

You'd be surprised how many woman test virgo, in fact I think one of main public blockers (perhaps it is GCSB) was written by a woman. There are also a few around the forum here. I guess someone can C&P my above post, pretty it up a bit and then add it to the unlocking guide, cuz that is how you do it in a nutshell.

[Cimba]

Crazy, what is D1 ? And be really patient cause my head is truly f****d up right now with shit, thanx in advance.
Also now when I run the VCC analyzer with the looped rom 3 in it all I get is xxxxxxxxxxxxxxx forever.

[HILLBILLY]

Vixin you pop them the same way...This is what I did lastnight had 4 rom10's & 4 rom3's to pop So I popped all the rom10's 1st useing the analyzer to start wrote down all the VCC setting's on the card's.When they all popped I did the exactly the same thing for the rom3's.Used the analyzer to get the setting's wrote them down for each card.Then flashed the loader with Newd6 & started poppin with the saved setting's for each particular card..Popped all 8 cards in approx 5 hours.
cid, do u mean that there is a program that will tell u the vcc settings of a particular card instaed of trying random settings each time? this must save a ton of time! can u post it if u have it?
thanks
hillbilly

[Crazy1_79]

Cimba, I'm always patient! (however people have been known to tell me I am the most impatient person they ever met) lOL, anyway, I made a typo, when I said D1, I meant D6-1 which is basically the new newd6 flash with the updated timing settings, you should have it if you have the D7,D8,D9 flashes.

[Crazy1_79]

cid, do u mean that there is a program that will tell u the vcc settings of a particular card instaed of trying random settings each time? this must save a ton of time! can u post it if u have it?
thanks
hillbilly
Yes hillbilly there is a VCC analyzer, it is included in most of the newest scripts, such as unlockallver2A and up, the glitch analyzer runs first, gets the ideal setting for each individual card and then puts that into teh script automatically so you don't have to do it.

[Cimba]

I have newd6 eeprom and program but never saw a newd6-1.....Duh, I found it thanx.

[HILLBILLY]

Yes hillbilly there is a VCC analyzer, it is included in most of the newest scripts, such as unlockallver2A and up, the glitch analyzer runs first, gets the ideal setting for each individual card and then puts that into teh script automatically so you don't have to do it.
thanks, i see it in downloads. is unlockallver3 the same but with rom 11 capabilities?

[Crazy1_79]

it is actually just D6-1 I will upload them for you cimba, It will all be in my xpatmel folder but you can put them into your UPF16 and use them I am sure.

this is every flash that I have cimba, you should be good to go now, you will see the newdd6,7.8,9 and then you will see D6-1, D7-7, D8-8, D9-9 the D ones are the newer of the flashes and help resolve some reset issues.

[Crazy1_79]

thanks, i see it in downloads. is unlockallver3 the same but with rom 11 capabilities?
I think so hillbilly, should have the analyzer right in there.

[HILLBILLY]

I think so hillbilly, should have the analyzer right in there.
thanks for the patience guys. gonna try my first one tomorrow and just trying to get all the info possible.

thanks!
hillbilly

[Cimba]

Crazy, I flashed with D9-9, ran unlock2a, chose bev, ran the prog, got all xxxxxxxxxxxxxx and got vcc values it suggested back as ceiling & floor (1A & 10). ?

[Crazy1_79]

well cimba if it gave you all XXXX then that is equivelent of a RESET in the script itself. it may not like that flash, ignore those settings, since it didn't any good glitches it is just repeating the default. My loader loves that D9 flash, Yours may not.

[Crazy1_79]

hey cimba, what unlooping scripts do you use? I have a looped rom 3 here someone sent me and would like to know what to throw at it

[Cimba]

In pwersync I have used every flash there is, same thing. I notice it says you have to use the test bin on a good card for it to work, I'm using the looped card as per your post above ?
You talk about 150 ohms above, my pot is set at 2.2 on the 20k setting, how many ohms is that ?

[Crazy1_79]

shoot cimba, that is 2200 ohms, you are way over ok, In my case my loader operates at low ohms, 150 is what I use to unlock rom 10's I have even dipped down to 127 a time or too, most loaders operate way above this but I have a oddball loader, You are using a looped card, that is why you are getting XXXXXXXX if you used a open or locked card you would get responses. I'm not sure what you are exactly trying to do cimba, why are you running the glitch analyzer on a looped card? What I was trying to teach Virgo is how to use the Rom 10 glitch analyzer on a rom 3 card to get the Ceiling and Floor and then put that into the rom 3 unlocking scripts. Basically, the loader decides you have a rom 10 card by which flash it sees. if you have flash 7,8,9 it thinks you are unlocking a rom 10 card so you can use one of those flashes, with a rom 3 card to run the glitch analyzer that runs at the start of the powersync script. then take those settings after reflashing the loader to D6 (or newdd6) and putting them in the unlock rom 3 settings, the vcc analyzer on rom 3, you still need the test bin on a open card for that one.

[Cimba]

Basically the same proggies. I use powersync, toys 2 programs, Penga's unlock.xvb, and TopGun. Thing is I only had the 2 bev cards that were looped, one popped using Penga's program, the other has resisted everything

[Cimba]

Ok, how do I set this friggin loader, I know everyone says set it at 2.2, what setting on the meter is that at if not 20k ?

[Crazy1_79]

2.2 is 2200 ohms cimba, when on the 20000 ohms setting, you want it at 2200 ohms or 2.2K when the meter is set for 20000 ohms,

[Cimba]

Look at what you just said, both things are the same to me. On the meter where should the pointer be, 20K or 2000 or 200, what ?

[Crazy1_79]

LMAO @ myself, trying to explain it and I complicated it!< I just reread it cimba, sorry bud, Ok put the meter to 20000 ohms. you now want a reading of 2.2 you do have a digital meter? if you have the old analog style meter, then set the dial to 20000 ohms and let adjust until the needle gets to 2200, this may vary from meter to meter cimba, trust me cimba if you were running 2.2 ohms or almost a shorted circuit, I don't think your loader would do anything at all let alone unloope a card, I think you have it in the right place.

[Cimba]

OK, here we go again. I have a digital meter, the pointer is pointing at 20K and I get a reading of 2.2. Is that right or should I be trying for .22 ?
I assume 20K means 20,000 right. So a reading of 2.2 would be what 20,000 X 2.2 ? Or 22,000 ohms, this has me brain boggled. I have searched the net until I'm dead but can't find proper instructions.

[Crazy1_79]

okay cimba, before I complicate things anymore, YOU ARE CORRECT! 2.2 or 2.2 X 1000 is 2200, don't multiply it by 20000 that is the maximum ohms the meter will read at that setting, that is not the variable we want to use as our multiplier, you mutiply by 1000, I know you are going to ask why that is, I don't know, but that is how it is. something to do with the decimal point I'm sure. Not sure but that is how it is done.

[Cimba]

Ok, so I'm running at 2200 ohms if set at 20 k on the meter and reading 2.2. That established is that good or bad ? Should I try dropping it to your range of 150 ohms which would be .15 reading at 20k setting ?
Brain is dead, whooo-hoooo !

[Crazy1_79]

No cimba, don't try my range, but yes, .85 would be correct for 850 ohms. my loader is a T911 black board clear case model available at dsshouse, these are know for their low ohms, I knew that when I ordered it and was looking for the mods. your's will not perform where mine does and mine won't perform where your does. I don't see where you would have to go anywehre near that, Mine works at 150 ohms, or .15 on the meter set at 20000 ohms, or .38 for the rom threes with the meter set at 20000, you should never have to go below 1.5 cimba, actuall 2.2 is all you will probally have to use if you change your Vcc setting correctly. I have a funky loader that is why I don't post my setting for card popping, My VCC's are Always inbetween 10 and 0 Usually like 0A and 0 or sometimes even FFFFFFFF (I don't know wha tthe hell that is but I can tell you it is below 0, and that it works on my loader)

[Cimba]

OKOKOKOKOKOK> thanx for the cerebral exercise !!!!!!!!!!!! Seriously, I appreciate you sticking with it.

[Crazy1_79]

no problem cimba, sometimes I make things harder than they are even though that is not my intention to do so, You just have to stick with me, I have good intentions in mind. Glad we got to the bottom of that! LOL. As long as we accomplished what we started out to accomplish, it's all good.

[Cid6.7]

What I mostly do is set the pot to 2.2k & leave it then adjust the VCC settings in the script as high as 99 or as low as 00.If I'm still getting RESETS then I will make it as high as I can & raise the pot untill the RESETS stop..or vise versa..

[Cimba]

Am running powerSync 2a again. Left default delays, Vcc start 24 and limit 1E as per analyzer. Of course getting o00o00o00o00o00 on and on. Funny thing was in analyzer(incl with power) I got a pattern like this -----!!!!!!!!!!---------!!!!--!!!!!! etc instead of ------++++++-----. Anyway still got a ceiling and floor so what the hey, I'll give it a whirl.
Try your idea tomorrow Cid.

[Cimba]

But hey! I've been watching dish on that first bevrom 3 I unlooped. 1 out of 2 ain't bad average, wish I had more to tinker with.

[VirgoVixen]

Well for me Crazy1 you have made things simple, instead of complicating them. You said the same to me about analyzing as cid, but yours explained it in more detail. Now that I know what to do, I know what cid was saying. Not that i don't appreciate your help cid ;).

Anyway I wanted to jump back in here and say I have unlocked 3 more rom 3's since I last posted. I have only had my loader for 5 days and only have actually messed with it for 2 days. I have unlocked a total of 9 cards so far 5 10's and 4 3's. I am SOOO happy :).

.

[VirgoVixen]

how does one go about reading the ohms? Mine is digital and has alot of other features on it. When I stick the pins on the knob I get alot of mumbo jumbo, no one number. It flashes quickly a bunch of numbers.

[Cimba]

Well there are variations, Stick one lead in the com hole of your meter, the other in the V"horse-shoe"mA hole.
Turn your dial to point at 20k in the ohm symbol part of the meter and touch each lead to one of the pot posts that is wired. Hold still, it will range about at first but shoud settle after a few seconds. For my T911 it should be reading at 2.2 which is 2200 ohms according to Crazy(2.2 x 1,000)

[Cimba]

"Well for me Crazy1 you have made things simple, instead of complicating them."
I'm glad Crazy helped you Vixen, I think by the time he got to me we was lighting up the same giggle sticks, lol. Actually 4 me it's old age, gotta beat with a stick. :rolleyes:

[VirgoVixen]

finally got a clear reading, I been stickin it in the wrong place, I was putting it on this knob. It says 0.35, that means 350 right I am guessing.

Thanks cimba

[VirgoVixen]

LOL cimba I have to be beaten with several sticks sometimes for things to sink in. I was just telling Crazy to not be hard on hiself about splaining things. I never have posted before recently and have learned a hell of alot more in a couple of weeks that which would have took me a couple of months. And alot of that help has been from Crazy1. He splains well, lol..

.

[Cimba]

Yes if your set at 20k on the meter. Its been so long since we started this thread, what is your loader again ?

[Cimba]

LOL cimba I have to be beaten with several sticks sometimes for things to sink in. I was just telling Crazy to not be hard on hiself about splaining things. I never have posted before recently and have learned a hell of alot more in a couple of weeks that which would have took me a couple of months. And alot of that help has been from Crazy1. He splains well, lol..

.

When he's straight yep, only ticks me off cause we can't share ! lol

[Cimba]

finally got a clear reading, I been stickin it in the wrong place, I was putting it on this knob. It says 0.35, that means 350 right I am guessing.

Thanks cimba

Just re-read that post, you gotta be carefull about stickin things in the wrong places especially on that knob !!!!!! ;)

[VirgoVixen]

I have t911, I just really realized where to put the darn pins. Crazy1 made a hole on top that has two little holes that are connected to the wires needed to read from. DUH, guess i could have asked him eh instead of just turning this knob up and down, up and down, lol. See wheres that stick!

.

[VirgoVixen]

LOL, guess that didn't sound soo good did it. I will be carefull with knobs and where I am sticking things. LOL

[Cimba]

For your man's sake I hope so !! Well that talk has got me thinking wild, guess I'll crash into my lonely bed and dream of .............well you know; it's all I got left after 27 years with the same "sweet woman".

[Cimba]

I have t911, I just really realized where to put the darn pins. Crazy1 made a hole on top that has two little holes that are connected to the wires needed to read from. DUH, guess i could have asked him eh instead of just turning this knob up and down, up and down, lol. See wheres that stick!

.

Whoops, which T911, I have the original with blue case and green board.

[VirgoVixen]

blue board and light see thru case....

[Cimba]

Thanx Vixen, always liked that word Vixen, so foxy and suggestive ! Tell your old man its just talk from an old fart, nice talikin' anywho. G,night !

[Cid6.7]

Am running powerSync 2a again. Left default delays, Vcc start 24 and limit 1E as per analyzer. Of course getting o00o00o00o00o00 on and on. Funny thing was in analyzer(incl with power) I got a pattern like this -----!!!!!!!!!!---------!!!!--!!!!!! etc instead of ------++++++-----. Anyway still got a ceiling and floor so what the hey, I'll give it a whirl.
Try your idea tomorrow Cid.
Cimba if your getting that in the analyzer lower or raise the VCC settings in the analyzer itself..
I got the same thing with the rom3's I just did & my ceiling was lower then the analyzers floor..lol
I think default is 24 ceiling & 10 floor for the analyzer..
I adjusted the settings to be 10 & 00 & then got a good reading of ++++-----
My final settings were VCCStart &h0F VccLimit &h01

[Cimba]

I aleady tried that Cid,if I go lower or higher like that I get either !!!!!!!!!!!!!!!!!!!!!!!! when higher and I get----------------- if any lower.
Something ain't right but Ill plug away 4 a bit. Getting too tired/depressed to think. I know that before when I got !!!!!! it meant the card was open but this is weird.