How To Guides Files Links Toplists Forums


Please Vote for US!



Enter TopHackerz TOP Info Sites list and Vote for this site !!!

Enter to .com - The Top 100 Dss Info and Dealer Sites and Vote for this Site

Enter to TopSatSites and Vote for this Site!!!






Vote Now!

Enter to Sat-100.com and Vote for this Site!!!

Please Vote for US!




Syndrome Nagra2 cards, AVR-X Nagra2 cards




Loader Operating Instructions (6 switch)
detox99

Use these settings for your 6 switch model programmer/unlooper/loader.

ON = Top Switch unit [UP]/-or-/Side Switch unit [Down]


SWITCH #1= is programmer/H unlooper or flash mode

SWITCH #2 =on LOADER MODE.

SWITCH #3 =is half clock negative slope [slowest timing glitch for stubborn cards (9 MHz)]

SWITCH #4=is half clock positive slope [Fastest for easy repairs (9 MHz)]

SWITCH#5=is full clock positive slope [normal timing for easy repairs/loads (18 MHz)]

SWITCH # 6=is full clock negative slope [buffer- slower for most suborn cads (18 MHz)]

FLASHING;

---when you flash the Atmel use switches 1 and 5.

**Flash with HUCODE (atmel-flash.exe- or equivalent HU code flash). Boot to pure DOS to use (not a DOS Window).


LOADING;

---Switch number 2 and 5 are down when glitching/Loading cards (for HU).

You can read the ATR in ExtremeHU with your T6 (read in extreme with 2 & 5 down). You can also use that to backup (read) your eeprom and restore it.


H UNLOOPER
1) with All dips off and #1 and #5 on, Flash the Unlooper code to the loader.
2) Then leave all settings as they are and run your unloop software.

H (non bs)
1. You need to flash it with WTPlus with #5 on
2. power up with the card in it to use it with an H card.
3. Make sure All dips off and #5 on . This should program and load your H.


PROGRAMMER MODE:

---Phoenix PROGRAMMER mode =make sure power up with card in

---UNLOOPER mode=make sure power up without card in


Most every operation you need to do will have #2 & #5 on. You can essentially just leave them there, without the need to change them(as long as the code for HU has already been flashed).You may already Know this but once you flash with the code it stays on the Atmel so you don't need to flash every time you work on the HU card. the only exception to this is if your changing the type of "card operation" IE. H or BS H cards.


---Also; If you get a stubborn card or it just wont "pop", use #2 & #6 on( this will act as a buffer [-clk])

Phoenix Mode

Like wtplus2, phoenix mode is enabled by placing a card in the unlooper when the atmel is reset. If the atmel is reset without a card inserted, it will be in 'unlooper' mode. Note that current software supporting the phoenix interface (BasicH, WinExplorer, SLE44e_p, etc) does not know how to reset the atmel. Because of this, it is necessary that the atmel reset pin (pin 1) not be connected to the circuit in most unloopers. Disconnecting this pin causes the atmel to be reset only at power up.

Once in phoenix mode, the unlooper waits for PC software to reset the card. When a card reset attempt is detected, the card is reset and the unlooper applies a glitch to get by the damage cause by the BS ECM. At that point, the card should function normally while in the unlooper, returning an ATR (assuming you have no other damage to your cards EEPROM). The unlooper then forwards all communication between the PC and card.

H (BS)

Su2v2 should be able to repair your cards EEPROM so that your card is usable with this software (look for other guides for info on installing su2 atmel code and using su2v2). Try reading or repairing your card with su2v2 first, it will probably only be readable/repairable in setup 3 mode. If you are able to do this successfully, then there is a good chance your card will work with wtbsboot.

BS & WTBS to emulate.

First, you need to 'Aux' your card. To do this, put your unlooper in 'phoenix' mode as described above. Clean card to 26 updates in BasicH. Quit Windows and drop to dos. Put your Unlooper on Com 1 and go into the directory where you have your emulator files. Type: sle44a_p. This will create your aux card.

Finally, move your unlooper to com 2 and setup your ird interface on com 1. Start your emulator like you'd normally would.

happy testing...
detox99

revised9/6/01

---------------------------------------------------------------
For H you can use the following flashes

non BS'ed HCards
" WT2 Wildthing 2 flash
" WTX Wildthing X flash
" SU2 Super Unlooper Flash (For use with the SU2V2 and V3 software)
" WT2plus Wildthing 2 with Phoenix programmer mode enabled
" WTXplus Wildthing X with Phoenix programmer mode enabled


BS'ed HCards

" WT2bs01 Wildthing 2 with BS support and Phoenix programmer mode
" WTXbs01 Wildthing X with BS support and Phoenix programmer mode
" SU2bs01 Super Unlooper with BS support

---------------------------------------------------------------------------

Good HU ATR. The 4th last byte is 55, The next byte:

4b - 3F 7F 13 25 03 38 B0 04 FF FF 4A 50 00 00 29 48 55 54 00 00
5b - 3F 7F 13 25 03 38 B0 04 FF FF 4A 50 00 00 29 48 55 55 00 00
6b - 3F 7F 13 25 03 38 B0 04 FF FF 4A 50 00 00 29 48 55 56 00 00

Another way to check is at address 201D:

77 = 6B
74 = 5B