Welcome to Mili's Marauders.
Header

 
ViP211 modded HDTV IRD

ViP211 modded receiver

Slinger ready
Free shipping

SALE PRICE: $349!!!
RomCode DishTV Subscription

RomCode DishTV Subscription

FROM: $69.00
Slinger IKS Kit
FREE SHIPPING

Slinger kit
PRICE: ONLY $199!!!
CLICK
HERE FOR INSTRUCTIONS
ViP622 modded HDTV IRD

ViP622 modded receiver

Slinger ready
Free Canada shipping

PRICE: ONLY $549!!!
BGA TSOP programming for ViP722 IRD

BGA tsop programming services for ViP722 receivers

PRICE: $144.00
FREE CANADA SHIPPING
Buffered JTAG Programmer

JTAG programmer

 PRICE: $39.00
MaxMel Emulator
MaxMel Emulator
PRICE: $59.00
FREE SHIPPING
SB5101 Diagnostics Modem

VIP downloads
PRICE
: $149.00
ViP722 modded HDTV IRD

ViP722 modded receiver

Slinger ready
Free Canada shipping

PRICE: ONLY $649!!!
BGA TSOP programming for most IRDs
BGA tsop programming services

PRICE: $124.00
FREE CANADA SHIPPING
Latest developments:
Slinger IKS boxes are now in store. All porn open, all premium chanels open. Hindi, Latino, Urdu Internationals. Running on Nagra 3 already and right now. Get them today HERE

Router Configuration

Slinger FAQ

Slinger Instructions

Files and VIP

VID Mod Instructions

JTAG-ing

Mili's Marauders » mili's Forums » Dish Network and Bell ExpressVU » Nagra Glitching and Unlocking » sc read/timeout--script error

Notices


Nagra Glitching and Unlocking Discussions on unlocking ROM 3-11 cards, unlocker how tos, modifications and hopefully Nagra 2 glicthing

Reply
Thread Tools vBmenu Seperating Image
sc read/timeout--script error
Old 02-28-2005   #1
VirgoVixen
 
Status: Guest
Posts: n/a
sc read/timeout--script error

this is a rom 10

no matter what vcc hi and lo I set it at I can get a good combination of +++---- but then it wants to stop and ends with xx. Anyone know maybe why?
Here is the reading.

Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h2A
VCC Low &h20
TX Data : 02 03 00
TX Data : 02 02 00
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 8B 00
RX Data : 12 0C
RX Data : 12 00 08 92 04 01 15 92 6E 90 00 F4
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 2A: --------++--++--++--++--++--------++--++++--++++++----++----++--------++++--------------++++++++----
VCC 29: ++--++--++++----++--------------++----++--++++--------------++--XX

Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read, Continuing Script

Script Error on Line 665
Sc.GetByte: Requested Byte Exceeds Last Read Request


I am using the powerunlock3 script, switch 2&5 on. Mod T911. I have windows XP.

The Vixon
  Reply With Quote
Old 02-28-2005   #2
VirgoVixen
 
Status: Guest
Posts: n/a
more readings at different hi & lo's...

Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h1a
VCC Low &h10
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 1A: ----------------------------------------------------------------------------------------------------
VCC 19: ----------------------------++++++--------++----++++------++--++++--++----++----++++--++++--++++++++
VCC 18: ++------++--------++----++++--------++------++++----++--++++++----++--++------XX

Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read, Continuing Script

Script Error on Line 665
Sc.GetByte: Requested Byte Exceeds Last Read Request

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~

Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h1a
VCC Low &h12
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 1A: ++----++++--++--++++----++++--++--++++----++++++--++--++--++++++++------++++++++++++++++--++----++--
VCC 19: ++++++XX

Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read, Continuing Script

Script Error on Line 665
Sc.GetByte: Requested Byte Exceeds Last Read Request

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~

Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h3a
VCC Low &h14
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 3A: ++--------++++----++--++--++------++++----++----++++++++------------++--++++----++------++----++++++
VCC 39: ++++++--++++--------++------------++++++----++--++++--++++++++++--++----++++--------++++--++------++
VCC 38: --++++----------------++--++++----------++------++--++++--++--++++------++++--------++++------++----
VCC 37: --++--++++++--++++--++----++++--------++----++++++++++--++++++++++++------++++XX

Sc.Read: Timeout Reading Data From Card - 2 Bytes Requested, 0 Bytes Read, Continuing Script

Script Error on Line 665
Sc.GetByte: Requested Byte Exceeds Last Read Request
  Reply With Quote
Old 02-28-2005   #3
Cid6.7
 
Cid6.7's Avatar
 
Status: Registered User
Join Date: Jul 2004
Location: Over Here
Posts: 844
Try this script..Sometimes Powersync gives me the same thing & I just switch to this one
__________________
Too often we lose sight of lifes simple pleasures. Remember when someone annoys you it takes 42 muscles to frown, BUT it only takes 4 muscles to extend your arm and B*^&$ slap that Mother %&*#@! upside the head.
Cid6.7 is offline   Reply With Quote
Old 02-28-2005   #4
VirgoVixen
 
Status: Guest
Posts: n/a
Ok thanks will try....But wanted to show what i am getting now, I get all F's no matter what I set at, 123e-?? and 125a-126/127....Also will post my progress from using what you posted.

@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@


VCC Ceiling: 1A
VCC Floor..: 20
################################################## #######
# #
# For Dealer locked A23 try using Delay range 0C20-0C40 #
# #
################################################## #######

Delay Start &h0C40
Del End &h125A
TX Data : A0
TX Data : A0
TX Data : A1
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 85 00
RX Data : 12 06
RX Data : 12 00 08 92 04 01
Now we will try 0C40 delay
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFF

Script Error on Line 856
Script Aborted By User
  Reply With Quote
Old 03-01-2005   #5
VirgoVixen
 
Status: Guest
Posts: n/a
I am getting 6F6F6F6F6F6F6F6F6F6F6F6F6F now in either the powerunlock3 or the rom10unlocker-glitcher.

when delay start comes up when it says lo can be as low as 1100 does that mean 123e/124e/125e etc to -->1100e. Do I add the e or does it matter?

Do I need to mess with the trim pot setting if it gets past the first step and onto the 6F6F6F6F6F6F6F, or is that ok and let it run at the 6F6F6F6F6F6F6F6F6F. Does it have to be good combo like 6666FFFFFF6F6F6666FFFF6F6F6F etc.
  Reply With Quote
Old 03-01-2005   #6
Cimba
 
Status: Guest
Posts: n/a
From the guide for modded loaders:
In most cases the default values will give you great success in opening cards as long as your Vcc setting are good. Once again, this number is in hex so we use the recommended value for a dish rom 10 card of 123E,
Next it will ask you for a Delay end value(Limit) and once again we will use the recommended setting of 125A for a dish network rom 10 card and click ok. Now the script will start running at the 123E delay and start returning a log of 6FFF6FFF6F6F6F6F6FFFFFFFFF or something along those lines, If you have your Vcc settings correct you will see a good mixture of 6F and FF in the unlocking scripts. This is what you want!
If you get 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F then you need to abort the script and try lower vcc settting in the glitch analyzer while paying closer attention to the responses you see on the screen in glitch analyzer.

Last edited by Cimba; 03-01-2005 at 12:30 AM..
  Reply With Quote
Old 03-01-2005   #7
VirgoVixen
 
Status: Guest
Posts: n/a
YES I READ THE GUIDE ....

this one is doing different things, just troubleshooting is all.

Thanks
  Reply With Quote
Old 03-01-2005   #8
Cimba
 
Status: Guest
Posts: n/a
I wasn't asking if you read or insinuating you had not; just answered your question about the 6F6F6F6F6F6F by using a quote from the guide that does answer that.
Easier than typing it all out, thats all.
  Reply With Quote
Old 03-01-2005   #9
VirgoVixen
 
Status: Guest
Posts: n/a
ok thanks
  Reply With Quote
Old 03-01-2005   #10
Cid6.7
 
Cid6.7's Avatar
 
Status: Registered User
Join Date: Jul 2004
Location: Over Here
Posts: 844
Virgo I think your changeing the wrong setting's
If you only getting FFFFFFFFFF's Turn the VCCHigh higher then the default 23 or whatever it is..Try VCCHigh &h40 VCCLimit &h 31...Always set them 9 digits apart..seems to work better that way..Keep you pot set to 2.2k UNLESS no other VCC settings in the script works.If your have a hard time glitching it try dips 2&6..
If you cant just get the correct setting's then just monkey with the script untill you get a good reply of 6F's & FF's
__________________
Too often we lose sight of lifes simple pleasures. Remember when someone annoys you it takes 42 muscles to frown, BUT it only takes 4 muscles to extend your arm and B*^&$ slap that Mother %&*#@! upside the head.

Last edited by Cid6.7; 03-01-2005 at 01:57 AM..
Cid6.7 is offline   Reply With Quote
Old 03-01-2005   #11
Crazy1_79
 
Crazy1_79's Avatar
 
Status: Cardkilla'
Join Date: May 2004
Location: anything but 0000001
Posts: 5,519
virgo, very strange reading. try a different flash, turn the pot way lo and use VCC settings up in the 90's if need be, also the start vcc needs to be higher than the limit, so you should use 99 for a start and 90 for the limit, by reading your vcc post over in the praises complaints and rants section it appears you switched these two around, which in fact may still get you into a card, but it is actually backwards. that may just cure your problem with this one.
__________________
Free TV is expensive!!!!!
6B697373206D7920617373206563686F73746172
PLEASE DO NOT PM WITH ME QUESTIONS, ASK IN THE FORUM SO OTHER CAN LEARN AND HELP TOO.
Crazy1_79 is offline   Reply With Quote
Old 03-01-2005   #12
VirgoVixen
 
Status: Guest
Posts: n/a
Got it finally, thanks Cid and Crazy....here is what I did. Instead of explaining I am putting the log in, this will tell you what i did.


________________Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h40
VCC Low &h31
TX Data : 02 03 00
TX Data : 02 02 00
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 8B 00
RX Data : 12 0C
RX Data : 12 00 08 92 04 01 15 92 6E 90 00 F4
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@

VCC 40: ++++--++----++++++++++++------++------++------++++++--++----------++----++------++--++----++++++----
VCC 3F: ++++++----++--++----++++----------++------------++++--++--------------++----++++--------++++++------
VCC 3E: ------++++----------++--++------++++----++--++--------++++----++++------++--++++++------------------
VCC 3D: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX XXXX(<~~the X's is because it quit recognizing the card, I get that alot too)


Script Error on Line 652
Script Aborted By User

________________Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h1A
VCC Low &h20
TX Data : 02 03 00
TX Data : 02 02 00
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 8B 00
RX Data : 12 0C
RX Data : 12 00 08 92 04 01 15 92 6E 90 00 F4
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@


VCC Ceiling: 1A
VCC Floor..: 20
################################################## #######
# #
# For Dealer locked A23 try using Delay range 0C20-0C40 #
# #
################################################## #######

Delay Start &h99
Del End &h90
TX Data : A0
TX Data : A0
TX Data : A1
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 85 00
RX Data : 12 06
RX Data : 12 00 08 92 04 01
Now we will try 0099 delay
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFF6FFFFFFF6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F 6F6FFF6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F 6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F 6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F6F 6F6FFF6F6F6F6F6F6F6F6FFF6FFF6F6F6F6F6F6FFF6F6F6F6F
PowersyncUnlock Testing Chuck Rom10(<~~I was messing with the knob-up and down/trim pot untill I got the mix of 6F's)

now we will try 009A delay
6F6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F6F6F6F 6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F6F6F6FFF6FFF6F6F6F 6F6F6F6F6F6F6F6F6F6F6FFF6F6FFF6FFFFF6FFFFF6F6F6F6F FFFFFF6F6FFFFF6F6F6F6F6FFF6FFF6F6F6F6F6F6F6FFFFF6F FFFFFF6F6F6F6F6FFF6F6F6FFF6FFFFF6F6F6F6F6FFF6FFFFF 6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F FF6FFF6F6F6F6F6F6F6F6F6FFF6FFF6F6F6FFF6F6FFF6FFFFF FF6FFF6F6FFFFF6F6F6FFF6F6FFFFFFF6F6F6F6F6F6F6F6F6F FFFF6FFFFFFFFF6F6FFFFF6FFF6FFF6F6F6F6FFF6FFF6F6F6F FF6F6FFF6FFF6F6FFFFF6F6FFFFFFF6FFF6F6F6FFF6FFF6F6F FFFF6F6F6F6FFFFF6FFF6FFF6F6F6FFF6F6FFF6FFFFF6F6F6F 6F6F6F6F6FFF6F6F6F6FFF6F6F6F6FFFFF6F6F6FFF6FFF6F6F 6F
PowersyncUnlock Testing Chuck Rom10

now we will try 009B delay
6F6F6F6FFF6FFF6FFF6FFF6F6FFF6F6F6FFF6FFF6F6F6F6F6F FFFFFF6FFFFF6F6FFF6F6F6F6FFF6F6FFF6F6F6F6F6F6F6F6F 6F6F6F6F6FFF6F6FFF6FFF6F6F6F6FFFFF6F6FFF6F6FFF6FFF 6FFFFF6FFF6FFF6F6F6F6F6F6F6FFF6F6F6F6FFF6F6FFF6FFF FF6F6FFF6F6F6F6FFFFFFF6FFF6F6F6FFF6FFFFF6F6F6F6F6F 6F6F6FFF6FFF6F6FFF6F6F6F6F6FFFFFFF6F6FFF6FFF6F6F6F FFFF6FFFFF6FFF6FFF6FFFFFFF6F6F6F6F6F6F6F6F6F6F6F6F FF6F6FFFFF6FFF6FFFFF6F6F6F6F6F6FFF6F6F6F6F6F6F6FFF 6FFF6F6F6F6F6F6FFF6FFF6FFF6F6F6F6FFFFFFF6FFF6F6F6F FF6F6F6F6F6F6F6F6F6F6F6F6F6FFF6F6F6F6F6F6F6F6FFF6F 6FFF6F6FFFFF6FFF6F6F6F6FFF6F6F6F6FFF6F6F6F6F6FFF6F 6F6F6FFFFF6F6F6F6F6FFF6FFF6F6F6FFFFF6F6F6FFF6F6F6F FF
PowersyncUnlock Testing Chuck Rom10

now we will try 009C delay
FFFF6FFF6F6FFF6FFFFF6F6FFF6F6F6F6F6F6F6FFF6F6FFF6F 6FFFFFFFFF6FFF6F6FFFFF6FFFFFFFFF6F6FFF6FFF6F6FFFFF 6F6F6F6FFFFFFF6FFF6F6F6F6F6F6FFF6F6F6F6F6F6F6F6FFF FFFFFF6FFF6FFF6FFF6F6FFFFFFFFF6FFFFFFF6F6F6F6F6FFF 6FFF6F6F6FFF6F6FFF6F6FFF6FFF6FFFFF6FFF6F6F6F6F6FFF 6F6F6F6F6F6FFF6FFF6F6FFF6FFF6F6F6F6FFF6F6F6FFFFF6F 6FFFFF6F6F6FFF6FFFFF6FFF6F6F6F6F6FFFFF6F6FFF6FFF6F 6F6F6F6F6F6F6F6FFF6F6FFF6F6FFFFFFF6FFF6FFF6F6F6FFF 6FFF6F6F6F6F6F6FFF6F6F6F6F6F6FFFFFFFFF6FFF6F6FFF6F FFFF6FFF6FFF6FFFFF6FFF6F6F6FFFFFFFFF6F6F6F6F6F6F6F 6F6F6F6F6FFF6FFF6FFFFF6F6FFF6F6F6F6F6FFF6FFFFF6F6F 6FFF6FFF6F6F6F6F6FFFFFFFFF6F6FFFFFFF6F6F6FFF6FFFFF 6F
PowersyncUnlock Testing Chuck Rom10

now we will try 009D delay
6FFFFF6F6F6FFF6FFFFFFF6F6F6F6FFFFFFF6FFFFFFF6F6F6F 6F6F6F6F6F6F6F6FFF6FFF6F6F6F6FFF6F6FFF6F6F6FFFFF6F FF6F6FFF6FFF6F6FFF6F6FFFFF6FFF6F6FFFFF6F6F6F6F6F6F 6FFFFF6F6F6FFF6F6F6F6FFF6FFF6F6FFFFFFF6F6F6F6FFFFF FF6F6F6FFFFFFF6F6FFF6F6FFFFFFFFF6FFFFF6F6F6FFF6F6F 6FFF6FFF6FFF6F6FFF6F6FFFFF6F6F6F6F6F6FFFFF6FFFFF6F FFFF6FFF6FFF6FFF6F6F6F6FFF6FFF6FFF6F6FFFFF6FFF6F6F FFFF6F6F6F6FFFFFFFFFFFFF6F6F6F6F6F6F6FFFFF6F6F6FFF FF6FFF6FFFFFFF6F6FFFFFFF6F6FFFFFFF6FFF6F6FFFFF6F6F FF6FFF6F6FFFFFFFFF6F6F6F6F6F6FFF6FFF6F6FFFFF6FFF6F 6F6F6F6FFF6FFF6F6FFFFFFF6F6F6FFF6F6FFFFF6FFFFF6FFF FFFF6F6FFF6F6FFFFFFF6F6F6FFF6F6FFFFFFF6F6F6F6FFF6F 6F
PowersyncUnlock Testing Chuck Rom10

now we will try 009E delay
6FFFFF6F6FFFFFFF6F6FFF6FFF6F6F6FFF6F6FFF6FFF6F6FFF FF6FFFFFFFFFFF6F6FFF6FFFFFFFFFFFFFFFFFFF6F6F6FFFFF FF6F6FFF6F6F6F6F6F6FFFFFFFFFFF6FFF6F6FFFFF6FFF6F6F 6F6FFF6FFFFFFFFF6F6F6F6F6F6FFFFF6FFFFF6FFF6F6F6F6F FF6FFF6F6FFF6FFF6F6F6F6F6FFF6F6FFF6F6FFF6F6FFFFFFF FF6F6F6F6FFFFF6FFF6FFFFF6F6F6FFF6F6F6F6F6F6F6F6FFF FF6FFF6F6FFFFFFFFFFFFF6FFF6FFFFF6FFFFF6F6F6FFF6FFF 6FFF6F6FFFFFFF6F6FFF6FFFFFFFFF6F6F6FFFFF6FFF6FFFFF FF6F6FFFFF6F6FFF6FFF6FFF

Script Error on Line 793
Script Aborted By User (<~~if you notice I am impatient, lol)

________________Setting up WinExplorer_________________
Chip is flashed with D9(version REK9)and was verified.
VCC High &h1A
VCC Low &h20
TX Data : 02 03 00
TX Data : 02 02 00
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 8B 00
RX Data : 12 0C
RX Data : 12 00 08 92 04 01 15 92 6E 90 00 F4
@@@@@@@@@@@@ Testing for good glitch voltage @@@@@@@@@@@@@


VCC Ceiling: 1A
VCC Floor..: 20
################################################## #######
# #
# For Dealer locked A23 try using Delay range 0C20-0C40 #
# #
################################################## #######

Delay Start &h123E
Del End &h125A
TX Data : A0
TX Data : A0
TX Data : A1
TX Data : 08 0E 03 10 01 01 03 9A 00
RX Data : 08 1B
RX Data : 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 30 20 52 65 76 41 32
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 85 00
RX Data : 12 06
RX Data : 12 00 08 92 04 01
Now we will try 123E delay
FFFFFFFFFF6F6F6FFFFF6FFFFFFF6F6FFFFF6FFFFF6F6FFF6F 6FFF RESET RESET RESET RESET RESET RESET 6F6F6F6FFFFF6F RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET RESET FF6FFFFFFFFF6FFFFFFF6F6FFFFFFFFF6FFFFFFFFF6FFF6FFF 6F6F6F6FFFFF6F6FFFFF6F6FFFFF6FFF6F6F83 (<~~~Notice the reset to a good mix of 6F, I again messed with the trim pot while running the script)

*********** we hit our bug *************
1200078303
===========================================
83 was hit at 123E delay ----VCC WAS 1A
TX Data : 0A 15 A3 21 92 00 B3 0E 03 85 00
RX Data : 0A 06
RX Data : 12 92 00 80 21
***************************
* A23 CAM should be OPEN *
* test in Nagra to see. *
* if not, try again. *
***************************


I was able to clean it and is now open. I wanted to ask if my playing with the what i think is the trim pot, wise? I turn it up and down alot. I don't know how to read my ohm meter or if it is even the right kind of ohm meter, so i don't know what it is set at. So I play with it instead of playing with the vcc settings. I am probably confused at what i am trying to ask, but if it makes sence to you then i am on the right trac. If not overlook the question.


.
  Reply With Quote
Old 03-01-2005   #13
VirgoVixen
 
Status: Guest
Posts: n/a
I JUST POPPED ANOTHER ROM10, WOOHOOO!!!!
Total of 5 popped cards
below is my settings I used on this last one, this one took a bit longer, but I didn't mess with the trim pot and just let it run it's course. I had a good mix of 6F's with "RESET" popping up occasionally.

VCC High &h1A
VCC Low &h20

Delay Start &h99
Del End &h90

I need to get to bed, but I can't STOP popping. I am now working on my 6th rom 10.

Maybe someone can start a thread with everyone who have been successfull at opening cards, there settings....
VCC High =
VCC Low =

Delay Start =
Del End =


This loader ROCKS Crazy1. Made my money back already and then some MUAH! Worth every penny. Now maybe you might consider making a guide on rom 3's "WINK". These I have had no luck at so far.


.
  Reply With Quote
Old 03-01-2005   #14
Cid6.7
 
Cid6.7's Avatar
 
Status: Registered User
Join Date: Jul 2004
Location: Over Here
Posts: 844
Vixin you pop them the same way...This is what I did lastnight had 4 rom10's & 4 rom3's to pop So I popped all the rom10's 1st useing the analyzer to start wrote down all the VCC setting's on the card's.When they all popped I did the exactly the same thing for the rom3's.Used the analyzer to get the setting's wrote them down for each card.Then flashed the loader with Newd6 & started poppin with the saved setting's for each particular card..Popped all 8 cards in approx 5 hours.
__________________
Too often we lose sight of lifes simple pleasures. Remember when someone annoys you it takes 42 muscles to frown, BUT it only takes 4 muscles to extend your arm and B*^&$ slap that Mother %&*#@! upside the head.
Cid6.7 is offline   Reply With Quote
Old 03-01-2005   #15
VirgoVixen
 
Status: Guest
Posts: n/a
I am not sure what you mean by "useing the analyzer to start wrote down all the VCC setting's on the card's".

I do not have an open rom 3 to analyze. I had one but not now UGHHH!!! So I can get it back if I have to have an open Rom 3 to analyze it. Are you meaning the test.bin and the test glitch in penga'a unlocker-glitcher script?

I am sorry for my confusion, I searched on vcc analyzer and couldn't find anything specific telling what this is and how to do it.

So far on my rom 3's I get o6Fo6Fo6Fo6Fo6F, but I am using default or the vcc settings it suggest. Let one card run till today but no luck. I read somewhere it has to have a good mix of the o6F's to pop it. I get straight o6Fo6Fo6Fo6F no mix or different sync. I did change these settings I found but still nothing different.

vcc start=&h60
vcc limit=&h1A

vcc start=&h45
vcc limit=&h1A

.
  Reply With Quote
Old 03-01-2005   #16
Cid6.7
 
Cid6.7's Avatar
 
Status: Registered User
Join Date: Jul 2004
Location: Over Here
Posts: 844
No run the analyzer on the locked rom3's & write down the Vcc setting's it gives you on the card(on tape or whatever).
Then once all your rom3's have been ran through the analyzer flash your loader with newd6 & use the setting's you've written on the card.If you still dont git what Im talkin bout come into chat..
__________________
Too often we lose sight of lifes simple pleasures. Remember when someone annoys you it takes 42 muscles to frown, BUT it only takes 4 muscles to extend your arm and B*^&$ slap that Mother %&*#@! upside the head.
Cid6.7 is offline   Reply With Quote
Old 03-01-2005   #17
VirgoVixen
 
Status: Guest
Posts: n/a
OIC, gotcha....I keep it flashed with the d9 right, then after analyzing I flash to the newd6.

I finally figured out the analyzer, duh, did I mention I am a blonde .

OK I got this but it is flashed with the d6. To analyze do I have to have it flashed with d9? Or am I confused with this altogether?...

Setting up WinExplorer_________________
Chip is flashed with D1(version REK1)and was verified.
===========================================
VCC = &hA1
glitch type = &h07
glitch delay = &h10A4
GLITCHED past 0C BUG!!!, unlocker is good to go.
use the above settings on real unlocker script
3FFF9500
===========================================

Script Error on Line 294
Sc.GetByte: Requested Byte Exceeds Last Read Request

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Now where do I put the settings i got at, below is what I think to do...

Delay Start &h10A4
Delay Limit &h10A5
VCC Start &hA1
VCC Limit &h07

THANKS for all your help

.
  Reply With Quote
Old 03-01-2005   #18
VirgoVixen
 
Status: Guest
Posts: n/a
OK here is whats going on now with me...

when I flash to either d9 or d8 I can not get analyzer to come up. I have d6-1 flash and a newd6 flash, the newd6 says it programed but runs thru real fast and doesn't show up as flashed when I analyze. I used different switches on and off as well. But the d6-1 flash does and shows above.

Now my loader is getting rather hot to the touch, not burning, but oddly warm.

I am gonna walk away before I start banging at things. I am completely confused with these rom3's. Seems easy enough, but I can blunder even the easiest of tasks. I have read and read and then read some more. Too early to have a drink, and I am not into no girlfriends or wives, hubby is away at work, so no tension helper's here! @#%&^%##&

.

Last edited by VirgoVixen; 03-02-2005 at 06:14 PM..
  Reply With Quote
Old 03-01-2005   #19
Crazy1_79
 
Crazy1_79's Avatar
 
Status: Cardkilla'
Join Date: May 2004
Location: anything but 0000001
Posts: 5,519
sorry Virgo, in my haste I inadvertantly proposed that every tester was male in gender, I do apologize, Now for the rom 3's the key is to start the script and walk away, I have had them take 4 hours per card. usually a minimum of 45 minutes. Flash with D9 and run the rom 10 unlocking script with the rom 3 in the loader, let it run through the first part where you get the glitch analyzer (the ++ and the --'s) now when that is done, it will tell you the ceiling and floor. Okay write that down or remember it. (I know your blonde so you better write it down!) LOL, anyway. now flash the loader with D1 and start the rom 3 unlocking script, it will ask you for vcc start, put the Vcc Ceiling in there, then it will ask for Vcc limit, put the VCC Floor in that spot, use the default delays of 10a4 and 10a5, then walk away and take the dog out to poop, watch your favorite movie, what ever, I suggest letting it run a minimum of 2 hours. I would even more strongly sugges that you let it run overnite while you sleep, the cam will be open when you wake up. if the loader is getting warm, check your resistance at the pot. You do not want this to drop below 150 ohms because it will cause things to warm up, now your voltage regulator in the loader will get very warm, in fact if you remove the cover of the loader and touch it it will probally leave a mark if you leave your finger on there for a few seconds. That is how hot they get. NOt instant burn hot, but they do get very warm. if you are feeling the warmth from this, then that is normal. If you are feeling the IC chips (all the little black rectangles with the silver legs sticking out) and they are overly warm to the touch, raise the resistance of the pot . Usuallya the chip that will get warm is the chipt that has the two wires coming off of it to the pot. if resistance is too low it will get warm and that is bad
__________________
Free TV is expensive!!!!!
6B697373206D7920617373206563686F73746172
PLEASE DO NOT PM WITH ME QUESTIONS, ASK IN THE FORUM SO OTHER CAN LEARN AND HELP TOO.
Crazy1_79 is offline   Reply With Quote
Old 03-02-2005   #20
VirgoVixen
 
Status: Guest
Posts: n/a
Well that clears a few things up for me. Ok now I get it about the D9 flash and analyze. See before I was looking for it to ask me to analyze like it does when it is flashed with
D6-1. Anyway I did that got a ceiling and a floor setting with the D9 flash. I did write it down, .

vcc ceiling=27
vcc floor=1F

Ok I flashed to the D6-1 and went back to powerunlock and did like you said.

Delay Start &h10A4
Delay Limit &h10A5
VCC Start &h27
VCC Limit &h1F

I was getting o6Fo6Fo6F. I let it run, then about 10 minutes I got this

o6Fo6Fo6Fo6Fo6Fo6Fo6Fo6Fo6Fo6Fo6Fo00o63
=========================
= CAM IS OPEN NOW !!!!! =
=========================

Thank you Crazy1! Gonna try on the rest of them. I also want to oploigize for my post about the girlfriends and wives, I know you werent meening that in a bad way. And for the most part this is a guy hobby, I know of no women myself who do or know anything about testing. Anyway THANK you for taking the time to spell out what I had to do exactly to get into these rom3's, most appreciated.


.
  Reply With Quote
Old 03-02-2005   #21
Crazy1_79
 
Crazy1_79's Avatar
 
Status: Cardkilla'
Join Date: May 2004
Location: anything but 0000001
Posts: 5,519
You'd be surprised how many woman test virgo, in fact I think one of main public blockers (perhaps it is GCSB) was written by a woman. There are also a few around the forum here. I guess someone can C&P my above post, pretty it up a bit and then add it to the unlocking guide, cuz that is how you do it in a nutshell.
__________________
Free TV is expensive!!!!!
6B697373206D7920617373206563686F73746172
PLEASE DO NOT PM WITH ME QUESTIONS, ASK IN THE FORUM SO OTHER CAN LEARN AND HELP TOO.
Crazy1_79 is offline   Reply With Quote
Old 03-02-2005   #22
Cimba
 
Status: Guest
Posts: n/a
Crazy, what is D1 ? And be really patient cause my head is truly f****d up right now with shit, thanx in advance.
Also now when I run the VCC analyzer with the looped rom 3 in it all I get is xxxxxxxxxxxxxxx forever.

Last edited by Cimba; 03-02-2005 at 03:40 AM..
  Reply With Quote
Old 03-02-2005   #23
HILLBILLY
 
Status: Registered User
Join Date: Jul 2004
Posts: 1,105
Quote:
Originally Posted by Cid6.7
Vixin you pop them the same way...This is what I did lastnight had 4 rom10's & 4 rom3's to pop So I popped all the rom10's 1st useing the analyzer to start wrote down all the VCC setting's on the card's.When they all popped I did the exactly the same thing for the rom3's.Used the analyzer to get the setting's wrote them down for each card.Then flashed the loader with Newd6 & started poppin with the saved setting's for each particular card..Popped all 8 cards in approx 5 hours.
cid, do u mean that there is a program that will tell u the vcc settings of a particular card instaed of trying random settings each time? this must save a ton of time! can u post it if u have it?
thanks
hillbilly
HILLBILLY is offline   Reply With Quote
Old 03-02-2005   #24
Crazy1_79
 
Crazy1_79's Avatar
 
Status: Cardkilla'
Join Date: May 2004
Location: anything but 0000001
Posts: 5,519
Cimba, I'm always patient! (however people have been known to tell me I am the most impatient person they ever met) lOL, anyway, I made a typo, when I said D1, I meant D6-1 which is basically the new newd6 flash with the updated timing settings, you should have it if you have the D7,D8,D9 flashes.
__________________
Free TV is expensive!!!!!
6B697373206D7920617373206563686F73746172
PLEASE DO NOT PM WITH ME QUESTIONS, ASK IN THE FORUM SO OTHER CAN LEARN AND HELP TOO.
Crazy1_79 is offline   Reply With Quote
Old 03-02-2005   #25
Crazy1_79
 
Crazy1_79's Avatar
 
Status: Cardkilla'
Join Date: May 2004
Location: anything but 0000001
Posts: 5,519
Quote:
Originally Posted by HILLBILLY
cid, do u mean that there is a program that will tell u the vcc settings of a particular card instaed of trying random settings each time? this must save a ton of time! can u post it if u have it?
thanks
hillbilly
Yes hillbilly there is a VCC analyzer, it is included in most of the newest scripts, such as unlockallver2A and up, the glitch analyzer runs first, gets the ideal setting for each individual card and then puts that into teh script automatically so you don't have to do it.
__________________
Free TV is expensive!!!!!
6B697373206D7920617373206563686F73746172
PLEASE DO NOT PM WITH ME QUESTIONS, ASK IN THE FORUM SO OTHER CAN LEARN AND HELP TOO.
Crazy1_79 is offline   Reply With Quote
Old 03-02-2005   #26
Cimba
 
Status: Guest
Posts: n/a
I have newd6 eeprom and program but never saw a newd6-1.....Duh, I found it thanx.

Last edited by Cimba; 03-02-2005 at 03:53 AM..
  Reply With Quote
Old 03-02-2005   #27
HILLBILLY
 
Status: Registered User
Join Date: Jul 2004
Posts: 1,105
Quote:
Originally Posted by Crazy1_79
Yes hillbilly there is a VCC analyzer, it is included in most of the newest scripts, such as unlockallver2A and up, the glitch analyzer runs first, gets the ideal setting for each individual card and then puts that into teh script automatically so you don't have to do it.
thanks, i see it in downloads. is unlockallver3 the same but with rom 11 capabilities?
HILLBILLY is offline   Reply With Quote
Old 03-02-2005   #28
Crazy1_79
 
Crazy1_79's Avatar
 
Status: Cardkilla'
Join Date: May 2004
Location: anything but 0000001
Posts: 5,519
it is actually just D6-1 I will upload them for you cimba, It will all be in my xpatmel folder but you can put them into your UPF16 and use them I am sure.

this is every flash that I have cimba, you should be good to go now, you will see the newdd6,7.8,9 and then you will see D6-1, D7-7, D8-8, D9-9 the D ones are the newer of the flashes and help resolve some reset issues.
Attached Files
File Type: zip XP Atmel Flash.zip (63.1 KB, 18 views)
__________________
Free TV is expensive!!!!!
6B697373206D7920617373206563686F73746172
PLEASE DO NOT PM WITH ME QUESTIONS, ASK IN THE FORUM SO OTHER CAN LEARN AND HELP TOO.
Crazy1_79 is offline   Reply With Quote
Old 03-02-2005   #29
Crazy1_79
 
Crazy1_79's Avatar
 
Status: Cardkilla'
Join Date: May 2004
Location: anything but 0000001
Posts: 5,519
Quote:
Originally Posted by HILLBILLY
thanks, i see it in downloads. is unlockallver3 the same but with rom 11 capabilities?
I think so hillbilly, should have the analyzer right in there.
__________________
Free TV is expensive!!!!!
6B697373206D7920617373206563686F73746172
PLEASE DO NOT PM WITH ME QUESTIONS, ASK IN THE FORUM SO OTHER CAN LEARN AND HELP TOO.
Crazy1_79 is offline   Reply With Quote
Old 03-02-2005   #30
HILLBILLY
 
Status: Registered User
Join Date: Jul 2004
Posts: 1,105
Quote:
Originally Posted by Crazy1_79
I think so hillbilly, should have the analyzer right in there.
thanks for the patience guys. gonna try my first one tomorrow and just trying to get all the info possible.

thanks!
hillbilly
HILLBILLY is offline   Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 10:29 AM.

[Output: 152.22 Kb. compressed to 138.74 Kb. by saving 13.48 Kb. (8.86%)]