Rom11 RevB04 Real Solution Needed

[abaaba]

I have tried all the tricks in the book but nothin seems 2 work, any1 came up real solution for this rom11 RevB04?

[slufc]

I have the the exact same revision and like urself have tried everything with the same result as yourself.Been trying this last 3 weeks lol

[abaaba]

do u wana romstudio rev2.4 to try it lol.

[TheCoder]

A real RevB04 should be readable with NagraEdit. it doesn't need glitching etc as it responds quite nicely to the Nipper login string.

If NagraEdit wont read the card straight off then its not a real B04. Its likely to be a blockered image and you'll probably need to use some form of blocker removal technique (which can be quite complex, depending on the particular blocker).

Most blockers, btw, dont interfere with card reading. If you cant read the card then its likely to be a private trader image which can be far harder to crack than VM's/Kudelski's attempts !

There is likely no single solution to these 'fake' B04 cards as there are probably a large number of different trader images all pretending to be B04, each one requiring its own unique solution.

[slufc]

Originally Posted by abaaba

do u wana romstudio rev2.4 to try it lol.

have it mate,it wont work,tried everthing.It just wont open,tried mrom,rom studio,xncs and everything else you can think of.I dont need any info off the card but I would like to open it just to see if I could.Tried loads of scripts in winex,but still no good.The card reads


Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 34 4C
ROM Revision: 011
EEPROM Revision: RevB04
ProviderID: 54
CamID: 24 -- -- --
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
Error, BackDoor reported disable - Card may contain update
Reading ROM11 failed
Closing of COM2 was successful

Any ideas?

[abbs2002]

Originally Posted by slufc

have it mate,it wont work,tried everthing.It just wont open,tried mrom,rom studio,xncs and everything else you can think of.I dont need any info off the card but I would like to open it just to see if I could.Tried loads of scripts in winex,but still no good.The card reads


Opening of COM2 was successful
ATR String: 3F FF 95 00 FF 91 81 71 A0 47 00 44 4E 41 53 50
30 31 31 20 52 65 76 42 30 34 4C
ROM Revision: 011
EEPROM Revision: RevB04
ProviderID: 54
CamID: 24 -- -- --
Using BD3 Key: 4E 69 70 50 45 72 20 49 73 20 61 20 62 75 54 74
Attempting to login to BD3
Error, BackDoor reported disable - Card may contain update
Reading ROM11 failed
Closing of COM2 was successful

Any ideas?

Try this link m8, worked for me just fine...
A little backdoor key tutorial by me...

[slufc]

Originally Posted by abbs2002

Try this link m8, worked for me just fine...
A little backdoor key tutorial by me...

just tried it mate but as The Coder says,its probably a traders blocker and hes done a good job..Its coming up in XNCS as BD NOT OPEN.Its giving all the info about the card except the eeprom

[spikebaby]

Originally Posted by slufc

just tried it mate but as The Coder says,its probably a traders blocker and hes done a good job..Its coming up in XNCS as BD NOT OPEN.Its giving all the info about the card except the eeprom

run it twice in xncs, and let it dump the card, are you editing the settings, so all boxes are ticked apart from ghost must be in eeprom

and have you tried a backdoor script

[hethemlrijk]

try romstudio and use the backdoor tab and use the login apprendiz usually works on alot of blockered and or trader cards.
oh forgot aswell it may be a dodgy card thats been done and left on stream on b04 for that long its taken the new revisons and has now locked itself back up normal unlooper job for this mate

[MorriSoft]

Originally Posted by hethemlrijk

try romstudio and use the backdoor tab and use the login apprendiz usually works on alot of blockered and or trader cards.
oh forgot aswell it may be a dodgy card thats been done and left on stream on b04 for that long its taken the new revisons and has now locked itself back up normal unlooper job for this mate

I was thinking the same.

The nagra responses are very similar to those received when the card is not unlooped..

Worth a shot I'd say..