View Full Version : Unlock Rom102 Rev289?
jack10
04-12-2008, 06:28 AM
I have one DP311 with Rom102 Rev289 and try to unlock it. I have a powersync and a modded T911 both with 4619 chips. I need some feedback from the experience fellow tester which script to use, dip pin and pot settings etc.... The BGA chip is still inside the receiver. I need your help please. Thanks in advance.
jack10
Wiley-X
04-12-2008, 10:06 AM
I have opened more than 15 DP311's with Rom102 Rev289 with the "new" RM-1C (Seems to be written for BGAs). Here's my info (Maybe it will help you):
Nexus clear/white (No diode mod) 2.2Kohm 9vdc (RM-1C) Glitched BGA on board w/o removing!
Parameters-> Delay:00C7 VCC:14 Glitch Type:B0/07 Timeout Factor:03
Elapsed: 01:22:20
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................................. ...................
.................................. !!!!!!!
******* Good response received! *********
55
===========================================
55 was hit at: Delay:00C7 VCC:000C GlitchType:B0/07
Timeout Factor:04
Elapsed: 01:25:21
VCC Resolution: 0.0625
Delay Range: 00AE to 00CE
********************************
* Rom102, Rev289 CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************
~~UPDATE~~
Yes, after many PM's I am verifying that the above is NOT a misprint...I am using 2200 ohms (2.2Kohms) and NOT 220 ohms....
It works for me and that's what I am leaving my Nexus at when glitching DP311's and ROM103's.
SEARCHY4
04-12-2008, 06:56 PM
the thing i found is if you make trace cut .without pic this is hard. follow the screw to right you will see a big trace line with some diodes. i think it runs all way to vcc solor point. right in front of the row of diodes. this is realy hard with out pic and sounds like mumble. i will have ti figure a way to explain better
but if not cut you can run all day and no pop till cut.
Wiley-X
04-12-2008, 10:33 PM
the thing i found is if you make trace cut .without pic this is hard. follow the screw to right you will see a big trace line with some diodes. i think it runs all way to vcc solor point. right in front of the row of diodes. this is realy hard with out pic and sounds like mumble. i will have ti figure a way to explain better
but if not cut you can run all day and no pop till cut.
I simply use the "dreamer69" method as illustrated in the pics below:
jack10
04-13-2008, 10:16 AM
Thanks both of you for the replies. I do not have a Nexus only powersync and modded T911 with 4619 chip. Is a modded T911 working like the Nexus? If so I will try with pot setting at 2.2 KOhms and dip 2&5.
Bond001
vBulletin® v3.7.0, Copyright ©2000-2009, Jelsoft Enterprises Ltd.