Unlocked Rom 101-007

[Cimba]

Went at this challenge today, whew what a marathon ! Here is what worked:

1) T911 blueboard modded & flashed with newd 11 ( any modded loader should work )
2) Program used was RomReader in WinEx 5.0 with Loader 1 settings
3) Ran vcc analyzer ( included in program ) until it glitched in and gave vcc range (vcc start 07, vcc end 04 ) (stock delays )
4) Stopped program, unplugged loader, plugged back in, re-started RomReader
5) Entered obtained vcc range in the program and skipped vcc analyzer
6) Clicked Install intercept, tuned the pot until a nice mix of 1212FFFF was flowing
7) In about 3 1/2 minutes it popped
8) Then read the card in Nagra2Edit Beta 7.0 ( took a few tries )
9) Went to EEPROM line C302 and checked for BC 80, it was there (intercept good)
10) Saved EEPROM to a folder.

This actually took a whole day of frigging around with the pot and vcc settings before I stopped using everyone else's settings and just followed the instructions. Rather than try to measure ohms etc. at the pot I just ran the program a dozen times or so until I found a sweet zone where the 1212FFFF was pretty balanced. This was done by dialing the pot counter-clockwise until I got all x's, then very slowly turning clockwise to get the mix. I gradually narrowed the vcc range I started with( and I was all over the place trying posted ranges) so that I got the desired mix a little easier each time. ( It seems that each loader and card has it's own unique personality). Then I ran analyzer from there and got the vcc's that would eventually work for me in install intercept portion of the program. REMEMBER that each time you want to change vcc's you should stop the prgram, unplug the loader, replug, restart, and enter the new vcc's in the program instructions/parameters in the top right window of WinEx.
To use Nagra2Edit make sure you have the Microsoft .net framework installed on your PC.
System Requirements:
Microsft.NET 1.1 Framework.
The N2Edit.exe and Settings.ini must be in the same folder.

Now I just have to read for another day to figure out the programming end of it.

[Pyotr]

Cool.Feels good to finally get it huh? So,did you get any XX's in the mix? To pop mine I found I had to turn the pot low enough to get some XX's in there. Maybe you should post your succesful VCC settings.

[Cimba]

OK, popped them in the above post, hesitated to do so because I didn't want folks to get hung up on my settings like I did on others. You got any info on programming this now, I've read till my eyes bled but don't know where to even start. There is no DT08 on the card.

[qrubim]

Cimba if you can just use this 3m " protested for the public 1-7 rom 101 with v16 blocker.zip (http://dssftp.com/files/index.php?m=category&CATID=24#)" it has everything you need to get it going but I havent tryied with the DT08 yet I was lazy and did the TSOP changes. the DT08 is hard to follow so I havent really tryied it yet but now that I have some company I guess I'll.

[Pyotr]

Yeah Cimba,
You're probably gonna be stuck with the clone that grubim mentioned.I'm in the same boat 101 007 never subbed and 3700 never subbed.I've gt that 3m waiting on my drive.
There's some stuff about using your own cam/bks and rsa over at rom10x.com but every time I try to find out if any of this stuff can be done with virgin equipment,I get either no ansewer or "go read" or a half-assed "no" with o explanation.
I've read myself silly but I still don't know for sure if it can be done. Mostly what I've seen over there is people re-activating ex-subs,adding tiers etc. I think someone has figured out how to do this with virgin stuff but they're making it difficult for those of us who have no programming background.
I'm not quite ready to program my card yet. I have to change the Twin Pro lnb's back to the Legacy twin for my 3700. It's a PIA doing it one handed. I had to buy the Prro lnb to run DVB-S.

[haris2k7]

i did ranromread script and when it asked me to intall intecept i did click install and all i am getting is FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFf on each address
what should i do next ???
Also if i have to run vcc analizer how should i do that and is it a different script if it is where can i get it.???
I am trying to unlock this card. the card is not looped b.c oit reading atr in iso programmer. I am using nexsus loader with switch 2 and 5 on ON position

please help me

[#40Fan]

Adjust the pot to where you get all XXXXX, then raise the ohm until they almost all dissapear. You might have a couple XX's show up now and again. That should be where you want it. You will then get a weird mix of 12's and FF's.

[haris2k7]

on my nexsus i took out pot and i putted in 2.2 ohm resistor now i dont remember what size pot it was their before what should i do what size pot should put on it

[ellsmako]

it was a 5k, just put two pots in a case with a switch , one 50 or 100 ohm and the other 5 K

[A-Team]

it was a 5k, just put two pots in a case with a switch , one 50 or 100 ohm and the other 5 Kis there some pics or a good how to so i can install them on mine?

[Cimba]

i did ranromread script and when it asked me to intall intecept i did click install and all i am getting is FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFf on each address
what should i do next ???
Also if i have to run vcc analizer how should i do that and is it a different script if it is where can i get it.???
I am trying to unlock this card. the card is not looped b.c oit reading atr in iso programmer. I am using nexsus loader with switch 2 and 5 on ON position

please help me
:o

Sorry I did not see this so you probably already got it. Once you have the vcc's from the analyser portion of the program stop the program & close it. Re-open and insert the vcc's you got in the program window, skip analyser and run install intercept.

[jrjorin]

I have 2 of these cards and they are being just like there name sake James Bond hard to crack. Can someone please help me?
I am useing a moded t911 i got from dss house. I am trying to use Rom reader, but all i get when i start it is ------------------------- 100%
then it goes to the install intercept and i get FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
I ran it for 9 hours last night and no change. I have tried changeing the VCC Start and Limit but i dont really know what i am doing there.


Thanks for the help
Jrjorin

[jrjorin]

I am now getting a good mix of 12ffff12ff12 but it still wont open its been running now for 10 hours.
Anyone have an idea?

[Cimba]

Will be back in tomorrow guys I hope, very ill tonight. It's really in the how-to Sticky I did. Let it run jr can take along time from what I've read here & there.

[jrjorin]

Its been running for 22 hours now and still hasnt poped. I am starting to wonder if it ever will.

[snowinpr]

this is what im getting running on terminator unlooper
kit para abrir 101 ami me funciono\prorama se corre con winexplorer\unlocker rom 101 muy bueno dip 4 on.XVB
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
31 30 31 20 52 65 76 30 30 37 3D
0280/19 ++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++ 0280/19 6F = 100% FF = 0%
0280/18 +++++++++++++++++++++++++++++++++++++++++++++X++++ XX+X++++++++++XXXXXX 0280/18 6F = 86% FF = 0%
0280/17 XXXXXXXXXXXXXXXXXXXXXXXXXXXXX+++++++++++++++++++++ ++XXX++++++X+X+++X++ 0280/17 6F = 50% FF = 0%
0280/16 +X+X++++++++XX++++++X+++X++++XX+++X+X+++++++++++++ ++X++++XX++X++++XX+X 0280/16 6F = 76% FF = 0%
0280/15 XXXX++++X+X+X++X+X+XX+X+++++X++XX+++++++XX++XX++X+ +++XXX+++XX+X+++XXXX 0280/15 6F = 57% FF = 0%
0280/14 X+XX++XXXXX+XX+X++++XXXXXX++XXX++X+X++X++XXX++XX+X XX++X+XX+X++XXX++XXX 0280/14 6F = 41% FF = 0%
0280/13 XXX++XX+XXXXX+X+XXXXXX+XX+X+XX+X+XXXX+X+++XXX+XXX+ XXXXX+XX+X++XX++++X+ 0280/13 6F = 36% FF = 0%
0280/12 XXXXXXX++++++X+++++++XXXXX++XXXX+++XX+XXXX+XX+XXXX X+X++++X+X+++XXX+X+X 0280/12 6F = 46% FF = 0%

===========================================
************ INITIAL PARAMETERS ***********
===========================================
StartDate: 2/11/2006 7:33:54 PM
Provider: 00
VCCStart: 00 VCCEnd: 00
DelayStart: 0270 DelayLimit: 2C8
TryLimit: 12
===========================================


0270 XXXXXXXXXXXX1212XXXX12XX 00:00:06
0271 121212XX121212XX12121212 00:00:08
0272 12121212XX1212XX12121212 00:00:11
0273 12121212121212XX12121212 00:00:13
0274 121212121212121212XX1212 00:00:15
0275 1212121212XX121212121212 00:00:17
0276 12121212121212XX12121212 00:00:19
0277 121212121212121212121212 00:00:20
0278 121212121212121212121212 00:00:22
0279 121212121212121212121212 00:00:23
027A 1212121212XX121212121212 00:00:25
027B 121212121212121212121212 00:00:27
027C 121212121212121212121212 00:00:28
027D 12121212121212XX12121212 00:00:30
027E 12XX1212XX12XX1212XXXX12 00:00:34
027F XXXX1212XX12121212121212 00:00:37
0280 121212XX12XX121212121212 00:00:40
0281 12121212XX1212121212

[jet li]

hello i got my nexus unlocker blue color today from dssmilibut it has 6 switches and i dont know how to set up these switches i want to unlock rom 101 rev 007 so if any buddy can help me to setup this unlocker i will appreciate
JET LI

[jet li]

i'm getting this F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6 F6F6F6F6F6F6F6F6F6F6F6F6F6F6F
ANYONE KNOWS WHAT ITS MEANS? i'm using bluenexus with already flashed with newd11, i think my problem is the dips switches and how to setup for this rom,can someone helpme?
and i'm using file A23 Unlocker V1.3

[jet li]

now i'm getting this 122ff12ff12ff12212ff12ff12f12f12ff12f12ff12

[jet li]

Please hellllppppppppppp all i see is FFFF1212FF1212FFFF1212112FFFF1212F1212F121212FFFFF F FOR HOURS please heellllpppppppp:(

[BLADE2061]

what if i am getting all 1212121212121212121212121212121212121212's is this good?

[Pyotr]

what if i am getting all 1212121212121212121212121212121212121212's is this good?

No.Not good. You want a mix of 12's and FF's and even a few XX's. Lower your pot 'til the Romreader quits,then raise(clockwise) til the progran start spitting out 12's and FF's. It may take different dips or different VCC settings to get the right combo.

[flos]

ok here goes used modded t-911 , 10 k pot set at 2.9k switches on t-911 are 2 & 4 on . if you run vcc analyzer and get zero's for ff or 12 something wrong try again . i did not stop it let it run once i got 12ff from start once it was set . i won't mention the time . ha ha .i also notice that after the analyzer when it went to to glich the interceptor that if it only half way across the bottom window somethings wrong start over . anyways thought i would share my info . this is my first post at this site . been around here a while . yall guys are good .just wanted to say thanks to all of yall for your great work . happy testing

[dakazman]

I Ran romreader and clicked vcc after finishing It locked up my computer reseated all connectors and set vcc to script below. I clicked on install intercept and 1.5 hrs later script reads

02AA XX12XXXXXXFFXXXXXXFFFF12XX1212FFXX12FFFF12XXXXXXXX XXXXXXXXXXFFFFFFXXXXFFXX12XXXXXX1212XXXXXXXXXX 01:45:06
02AB 12XX1212XXXX12XX12FFFFXX12XXXXXXXXXXXXXX1212XXXXXX XXXXFF12XX1212XXXXXX12121212XXXXXXFFFF12XXXXFF 01:45:23
02AC 12XXXX12XXFF12XX12XXXXFFFFFF12FF12XX12FFXX12XX12XX XXXXXX12FF1212XX12XXFFFFFFFF12XX12XXXX12XX12FF 01:45:37
02AD 12FFXX12FFFF12XXFF12XX12XXFF12XX12XXXX12XXFFFFXX12 XXXXXX12FFXXXXXXXXXXXXXXXXFFFF12XXXXXX12XXFF12 01:45:51
02AE XXXXXX12XX1212XXXX12XXXXXX12XXXXXX12FFXX12XXXXXXXX XX121212XXXX12XX12XXXX12XXFFXXXXFFXXFF121212XX 01:46:09
02AF XX12XXFF12XXFFXXXXXXXXFFXX1212XXXXFFFFXX12XXXX12XX 12XX12121212XX1212XX12XX1212XXXX12XXFF12FFFF12 01:46:24
02B0 XXFF12XXXX12XXXX12XXXXXXFFXX12XX12XX12XXXXFFFF12XX XXFF12XX12XX12XXXXXX1212XXXX121212XXFFXXXXFFFF 01:46:41
02B1 XX12XX12XX12XX12FF1212XXXX12XXXX12XXFFFFXXXXXXXX12 1212FF1212XXXXFFXX1212XXXX12XX121212XX12FFFF12 01:46:55
02B2 121212FFXXXXXXFF12XX12XXXX12XX12XX12XXXX121212XX12 12XX12XX12XXXXXXXX12XXXXXX12FFXXFF1212XXXXXXXX 01:47:12
02B3 FFXXXX121212XXXXFF12XXFFXX12XXFF1212XX1212XXXXFFXX XX1212XX12XXFF12XXXXXXXXXX1212XXXXFF12XXFFXXXX 01:47:28
02B4 XX12XXFF121212XXXXFF12XXXXXXFFXXXXXXXXXXXX12XXXXXX 12XX121212XXXX12XXFF12XXXX12XXXXXXFFXX1212FF12 01:47:43
02B5 12XX12FF121212FF12FFFF12FFFFXX1212XXFFXX1212XX1212 XX12FF12XX121212FF12AA
===========================================
********* SUCCESSFUL GLITCH DATA **********
===========================================
Delay: 02B5 VCC: 11
VCCStart: 14 VCCEnd: 11
DelayStart: 0280 DelayLimit: 2B8
TryLimit: 12
Elapsed: 01:47:51
===========================================
Script D:\Rom101\romreader\Romreader.xvb Transmission Completed

this cam is a 101 , I just want to know is the intercept on or not??
On a 102 script says "intercept on",which leaves no doubt.
dakazman

[flos]

that should do it . try reading in n2edit . should read . let me know

[dakazman]

Now just no ATR in NEn2beta9
Dakazman

[moneyfarmer0]

good post