irjr
01-22-2006, 01:11 AM
I recently purchased the 4619 and used it to unlock two cards I have, both rom 102 rev 103. Just thought I'd write down how I did it while it is still fresh in my mind (old brain syndrome).
First off, I went to ratshak and got a 7.5 volt 300 ma wallwart (center pin positive) and a 25 ohm wirewound pot. I cut one of the traces to the onboard 5k pot, connected the new one, and set it to midrange (12.5 ohms).
Powered up the nexus and flashed it with newd13 using the xpatmel program.
Started up winexplorer 5.0 and loaded the ROM102_ND13_A0FF-INTERCEPT-autoVCC_20.XVB script.
I ran the script and adjusted the pot until I had a good mix of -+-+-+-+ (11 ohms for the first card) and let it run for a minute or two. It didn't unlock, so I interupted the program and bumped up the "glitch delay" setting a bit. Started the script again and ran for a couple more minutes, then upped the delay once more. This time, it ran for about a minute and it was successful.
I placed the second card in with the same settings, but it did not have a good mix, so I adjust the pot down til it was a good mix (9.8) and repeated my steps above. It took only after bumping up the delay once. Popped settings below.
(Card #1, pot set at 11 ohms)
TX Data : 90
RX Data : 4E 44 31 33
Let the 102 Glitching begin....
+---+---+---+---+-NoRsp+--+---+---+---+---+-
TX Data : A1
===========================================
Glitch Success!! A0FF-INTERCEPT IS ON
BootLoader 6F 00 RSP Received!!
VCC = 85 (~2.61274509803922 vdc)
Glitch Delay = 0320
Glitch type 07
#######################################
(Card #2, pot set at 9.8 ohms)
TX Data : 90
RX Data : 4E 44 31 33
Let the 102 Glitching begin....
+---+---+---+---+---+---+---+-NoRsp+-
TX Data : A1
===========================================
Glitch Success!! A0FF-INTERCEPT IS ON
BootLoader 6F 00 RSP Received!!
VCC = 87 (~2.65196078431373 vdc)
Glitch Delay = 0375
Glitch type 06
First off, I went to ratshak and got a 7.5 volt 300 ma wallwart (center pin positive) and a 25 ohm wirewound pot. I cut one of the traces to the onboard 5k pot, connected the new one, and set it to midrange (12.5 ohms).
Powered up the nexus and flashed it with newd13 using the xpatmel program.
Started up winexplorer 5.0 and loaded the ROM102_ND13_A0FF-INTERCEPT-autoVCC_20.XVB script.
I ran the script and adjusted the pot until I had a good mix of -+-+-+-+ (11 ohms for the first card) and let it run for a minute or two. It didn't unlock, so I interupted the program and bumped up the "glitch delay" setting a bit. Started the script again and ran for a couple more minutes, then upped the delay once more. This time, it ran for about a minute and it was successful.
I placed the second card in with the same settings, but it did not have a good mix, so I adjust the pot down til it was a good mix (9.8) and repeated my steps above. It took only after bumping up the delay once. Popped settings below.
(Card #1, pot set at 11 ohms)
TX Data : 90
RX Data : 4E 44 31 33
Let the 102 Glitching begin....
+---+---+---+---+-NoRsp+--+---+---+---+---+-
TX Data : A1
===========================================
Glitch Success!! A0FF-INTERCEPT IS ON
BootLoader 6F 00 RSP Received!!
VCC = 85 (~2.61274509803922 vdc)
Glitch Delay = 0320
Glitch type 07
#######################################
(Card #2, pot set at 9.8 ohms)
TX Data : 90
RX Data : 4E 44 31 33
Let the 102 Glitching begin....
+---+---+---+---+---+---+---+-NoRsp+-
TX Data : A1
===========================================
Glitch Success!! A0FF-INTERCEPT IS ON
BootLoader 6F 00 RSP Received!!
VCC = 87 (~2.65196078431373 vdc)
Glitch Delay = 0375
Glitch type 06