PDA

View Full Version : 102rev283


musky48
05-14-2008, 08:48 PM
I am trying to unlock this card with no luck. I have a PS and a modded t-911 whick have done me well in the past but no luck with this card. I have tried several scripts and many different settings. The chip is still on the receiver, should I remove it and try it? Also, any script sugestions and settings would be appreciated. Never know someone may suggest something I haven't tried.

Thanks,
musky48

Wiley-X
05-14-2008, 10:02 PM
I have had very good success at unlocking Rev 283 on the board. Your most likely problem is the length of the wires from the solder traces around the chip to your unlocker/glitcher.

They cannot be much longer than 2 inches. I know this sounds impossible, but (in my experience) that is the difference between a locked chip and an unlocked chip.

I use RM-1A (sometimes RM1-C) and it takes between 30 minutes and 1.5 hours to unlock Rev 283. I have successfully unlocked over 30 of them (on the board... my favorite way!) with absolutely no looped chips. I use a white Nexus set at 200 ohms... but this is a very easy Rev to open.

I am telling you, it's all in the wire length!

Test4fun
05-14-2008, 10:21 PM
the first rule for glitch onboard icam, is as state before to keept the wire lenght as short as possible.
second one is to ensure no caps is in circuit on vcc-ground of your icam as your trying to glitch !!!! then i would stick with older low rev script as they are less likely to loop card(unless you have 4619 mod your 911 and some sucess with icam) Just keept reading before doing something bad.
Hope you have result and having ex-sub rev. 283 for dt-06/08, sk data running private.

musky48
05-14-2008, 11:05 PM
Well that could be my problem then, becasue I know my wires are longer than that. I will shorten them and give that a try and post back.

Thanks,
musky48

duffybno1
05-15-2008, 12:06 AM
remember rev 383 is equal to rev105 i think
4053 chips work good on these

dracornelius
05-16-2008, 01:28 AM
I have had very good success at unlocking Rev 283 on the board. Your most likely problem is the length of the wires from the solder traces around the chip to your unlocker/glitcher.

They cannot be much longer than 2 inches. I know this sounds impossible, but (in my experience) that is the difference between a locked chip and an unlocked chip.

I use RM-1A (sometimes RM1-C) and it takes between 30 minutes and 1.5 hours to unlock Rev 283. I have successfully unlocked over 30 of them (on the board... my favorite way!) with absolutely no looped chips. I use a white Nexus set at 200 ohms... but this is a very easy Rev to open.

I am telling you, it's all in the wire length!

That could be my problem, been trying for over 3 days with same rev, i only get ---------- not even a +++++ :( my cable are larger than 2 inches, but its probably almost impossible to do with 2inches i got a rom102 as dummy card so the lenght from the solder point up to the edge of the card seems 2 inches now i need more lenght to solder the cables to the chip, have you done it with a rom card as dummy or are you using an atmega? probably thats my problem, i'm using a wire from rathshack, which cable do you recommend cat5 or that one is good? thanks wiley for your response or another expert.

Wiley-X
05-16-2008, 02:31 AM
WOW! Stop the PMs!!!! I am attaching a thumbnail of my ROM3 modified to clitch the DP311's on board. The wires are slightly longer than 2 inches, but I recommend that you make them 2 inches long exactly!

I solder the ROM3 DIRECTLY to the solder points on the motherboard, tilt the receiver on it's side and slide the ROM3 into the loader/glitcher and use RM-1C to glitch the BGA ICAM.

This is what works for me.... I have opened all twenty-eight DP311 receivers that I have attempted, opening Rev's from 283 to 287 with NO LOOPS!

This is a previously looped ROM3 and 30 gauge wire from RatShack (they call it wire-wrap wire).
.

musky48
05-18-2008, 05:48 AM
still no luck, going to buy new unlocker and will post back results. Thanks for the ideas.

musky

musky48
06-01-2008, 01:19 PM
finally got it and a 107, heres the settings that worked for me. Thanks for the replies.




Parameters-> Delay:041A VCC:0035 Glitch Type:B5/09
Elapsed: 00:26:04
----------------------------------+88 !!!!!!!
******* Good response received! *********
55
===========================================
55 was hit at: Delay:041A VCC:0025 GlitchType:B5/09
Elapsed: 00:26:06
VCC Resolution: 0.5
Delay Range: 03C0 to 0420
********************************
* Rom102, Rev283 CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************


Parameters-> Delay:386F VCC:13 Glitch Type:B0/07 Timeout Factor:04
Elapsed: 00:04:10
................................... !!!!!!!
******* Good response received! *********
55
===========================================
55 was hit at: Delay:386F VCC:000A GlitchType:B0/07
Timeout Factor:04
Elapsed: 00:04:19
VCC Resolution: 0.25
Delay Range: 3869 to 3899
********************************
* Rom102, Rev107 CAM OPEN! *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************



1946 ohms
switch 1 only
powersinc
4619CPE+0852 chips
12V power +polarity 300MA
rommasterv1c