unglitched but cant read /write

kinel

Member ++
Joined
Mar 12, 2005
Messages
757
Reaction score
16
Hi anyone shed any light on this
Opening of COM1 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 34 4C
ROM Revision: 011
EEPROM Revision: RevB04
ProviderID: 82
CamID: 00 00 00 00
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BD3 login failed
Reading ROM11 failed
Closing of COM1 was successful
Open with t911 but cant get nagra to do anything with it
Thanks 4 any help
 

carwash

Member ++
Joined
Mar 20, 2005
Messages
959
Reaction score
7
Open with XNCS 1.8 m8"!


No you need to change the 0000 in the COA2(NipperK) to 4E69

And now press GO

It will then go threw some stuff
And will say at the bottom
he he he your card is unlocked
then go to the blue read card button and it will ask you if you want to install ghost click yes
 

kinel

Member ++
Joined
Mar 12, 2005
Messages
757
Reaction score
16
Tried XNCS result was
ATR=3FFF9500FF918171A04700444E415350303131205265764230344C
Info=DNASP011 RevB04
Retrieving card info...
Card info retrieved :)
--------------------------------------------------------------------
1) Calibration is: 2992.53720526649 Mhz , Acc:5,Use Tsc:Yes
2) Building Bug Table...
2) Using Simple Send method!
3) Encrypting Ecm...
NipperK must have 12 Bytes
any help please.
 

crackerchalk

Inactive User
Joined
Aug 16, 2005
Messages
1,931
Reaction score
42
Location
Berks Pure NTHell
Hi
Wrong way i think
Click settings tick all boxes
then click read card blue arrow
Card should dump blue bar in top corner
click eeprom tab note lines c040 and c070
These are the keys they r normally same
If card dont dump ( try a few times but no blue bar )
Card is still locked
 

kinel

Member ++
Joined
Mar 12, 2005
Messages
757
Reaction score
16
cheers crackerchalk did wot u suggested card dumped but the c040&c070 lines are not the same, wot next?
 

crackerchalk

Inactive User
Joined
Aug 16, 2005
Messages
1,931
Reaction score
42
Location
Berks Pure NTHell
Hi cool
Nearly there now
A few ways to go now so listen closely
1st try read card in nagra 4.1
if it asks 4 a key cool
it 1 of the no.s u noted
if it reads then do what u got to do if not get back to me
Cos reading it in xncs rewrites the bd keys
 

kinel

Member ++
Joined
Mar 12, 2005
Messages
757
Reaction score
16
still no joy
Opening of COM1 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 34 4C
ROM Revision: 011
EEPROM Revision: RevB04
ProviderID: 82
CamID: 00 00 00 00
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BD3 login failed
Reading ROM11 failed
Closing of COM1 was successful
 

Donnie Darko

Inactive User
Joined
Jul 6, 2005
Messages
5,361
Reaction score
45
Location
In the bookies
kinel said:
Hi anyone shed any light on this
Opening of COM1 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 34 4C
ROM Revision: 011
EEPROM Revision: RevB04
ProviderID: 82
CamID: 00 00 00 00
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
BD3 login failed
Reading ROM11 failed
Closing of COM1 was successful
Open with t911 but cant get nagra to do anything with it
Thanks 4 any help

why are the cam ids all zero?have you previously wrote an image to card and forgot to make up your cam ids?
The reason i ask is because it revb04.
 

kinel

Member ++
Joined
Mar 12, 2005
Messages
757
Reaction score
16
yes a image as been wrote before didnt know about cams is this bad news
 

Donnie Darko

Inactive User
Joined
Jul 6, 2005
Messages
5,361
Reaction score
45
Location
In the bookies
kinel said:
yes a image as been wrote before didnt know about cams is this bad news

not sure mate?maybe 1 of the old hands can shed some light on it?when you write the image just make up the 3 rows of cam ids then write to card.
Its maybe worth running it thru glitcher again?
 

carwash

Member ++
Joined
Mar 20, 2005
Messages
959
Reaction score
7
Cam IDs on zeros will not stop card from dumping"!

Try Romstudio, Backdoor method
 

crackerchalk

Inactive User
Joined
Aug 16, 2005
Messages
1,931
Reaction score
42
Location
Berks Pure NTHell
Hi again
Right we have bd keys
so try Rom studio
Open progaram click settings
check com port
Atr delay 115200
TX 20 RX 80
Crystal 3.68 ok
now read card it will ask 4 bd key
Use the no. u got in xncs( no spaces)
If card reads cool
Now close and open nagra with the image u want to load
Benny59s is a good 1 edit it ird/bk
Rem ird 12345678 is 78 56 34 12
Save image i.e my image.bn11
Now change name of image ext from bn11 to bin ok
close all reopen rom studio and load image
click write imate and use same bd key as before all done
Now boot box in eng mode
wait till card says ok etc ( If no t-steam keep waiting)
Card status should say ok not reboot
ANd alls well free tv:Cheers:
 

kinel

Member ++
Joined
Mar 12, 2005
Messages
757
Reaction score
16
Cracked it m8s thanks 4 the help:Cheers:
 
TEST
Top