I have never unlocked a rom 103 rev 380 (bga mounted on wafer), so I am not sure what setting I am supposed to use.
I have both chips 4053 and 4619. I first tried unlocking with 4619 chips and didn't really get anywhere.
From what I read, it says that its best to use DIP 1 ON (inverted clock)

My settings:
Dip 1 ON
Pot set at: I tried a lot of different settings 2.2K, 1.5K, 250, 200, 100, 70, and 50 ohms
It would give nothing but Resets with 50 ohms pot so I stopped the script right away and didn't continue.


I tried different scripts:
Evilroms interceptor 103.xvb
RebelSerf Rom103 OmniUnlocker_F.xvb
NagraMaster4[1].0.9
Final Intercept 103 FM .xvb

I ran the scripts for about 30 minutes and none of them unlocked the card. I read here that it should only take 3 minutes or so to unlock.
Do I just continue on playing with the pot until it works, or are my settings wrong all together.
Maybe someone can give me correct settings for Winexplorer, because I am unsure on the delays, etc. Also, should I use 4053 or 4619 chips to unlock this revision ?

This is what i get with omniunlocker script:

Buffer Intercept Installed. Trying to Open the 103.... Delay:03C9 VCC:1A Glitch Type:09

Elapsed = 00:31:12

-----------------------------------------


Also, can 103 rev 380 be used for emulation with max & mel board and an iso (cemu)?

You are correct. The Rom 103 rev 380 should open very quickly.

Try 80ohms and switch1 on if you are using a Powersync with 4053 chips. Try Rebleserf103_306-387 and see if that helps. If you are not getting any response then it is possible that you may have a bad chip or cold solder joint. Thanks

cut and paste from another site:

i leave all the settings parameters on winex as i do it all my 102 loader2

so use again the rebelself omniunlocker and put pot on 1.50 k
on my powersync with 4619 and this time i sacrifice this so put on dip 3 (not the dip1 that was used for 3 days and nothing) and the same powersupply i use 12 volts
so put on dip 3 and you know what???

check this out:::

Buffer Intercept Installed. Trying to Open the 103.... Delay:03C3 VCC:27 Glitch Type:09

Elapsed = 00:00:11

------------------------------------------------------------------- Rst06 !!!!!!!

******* Good response received! *********
69
===========================================
69 was hit at: Delay:03C3 VCC:06 GlitchType:06
Elapsed: 00:00:16
VCC Resolution: 0.5
Delay Range: 03C0 to 0420

********************************
* 103 CAM NOW OPEN!! *
* WRITE A VIRGIN IMAGE TO CARD *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *

Thanks for your post.
Unfortunately the Rebleserf103_306-387 script won't even run, because it says that revision 306/386 or higher code is not active on card. unable to continue.

I have two bga's mounted on the wafer with good ATR and both do the same thing, so I think its not the chip - I am doing something wrong. I'll play around with it a little more to see if I get anywhere. Should i try setting pin 3to ON position ??
I can not get Bad CMD04 command or whatever when the pot is set too low. It gives me a different error, saying that there is no ATR. When the pot is above 50 ohms, it runs but all I get is either all ------------- or I get -------Rst09--- etc.

i got one card unlocked with omniunlocker. I don't really know what was the difference, but I switched from 12v power supply to 9V power supply and changed to 4619 chips. Unlocked in 90 seconds. Second card isn't popping though, over 5 minutes already.

So does anyone know if you can use rom 103 rev 380 with cemu ?

Well 4619 chips are always better than 4053 chips :p that might be part of the fix.

thanks everyone. The second card got unlocked too. Took a little longer

Buffer Intercept Installed. Trying to Open the 103.... Delay:03EE VCC:05 Glitch Type:09

Elapsed = 00:17:21

---------------------------------------------------------------------------+00 !!!!!!!

******* Good response received! *********
69
===========================================
69 was hit at: Delay:03EE VCC:08 GlitchType:06
Elapsed: 00:17:28
VCC Resolution: 0.5
Delay Range: 03C0 to 0420

********************************
* 103 CAM NOW OPEN!! *
* WRITE A VIRGIN IMAGE TO CARD *
* PROCEED AS NORMAL *
* GOOD LUCK! :-) *
********************************

Sladoton, will these settings you used to unlock that 103 - 380 work for a rev 381

I am assuming that this will work for cards up to rev 382, so the answer is yes, it will work for rev 381. I think they are equivalent in terms of unlocking to rom 102 rev 103 through 105.
You just have to be patient and let the script run. I almost canceled my last attempt since I wasn't getting anything.

I've never dealt with these 103's. How do I proceed now ?
I haven't really seen it covered anywhere. Is there a public blocker that you can use? Is everything else the same for rom 103 as it is for 102 ? I.E. Clean code space, setup your own tiers and then put the blocker on ?

I have a 522 dvr with card slot activated and now rom 103 open. Do i need to jtag 522 in order to get this setup to work? i read some stuff and it looks really involved since you can't build just a simple jtag for it, it has to be buffered.

Could someone help me with this.
Thanks.

sladoton , I'm not sure myself, I have that 103 that I'm trying to unlock that why I got that powersync from you, I;ve found some other files for the 103 on other sites , if you want I will email you some files. email me if you want to look at what I have found.

The settings that unlocked 2 bga cards for me were:
Pin 1 On and pot set to 85 ohms with 9V power supply and 4619 chips.
Omniunlocker script

Let the script run and be patient. I am sure it will unlock the 382 for you

Well, that was a waste of time....I think I just looped both cards. At least one for sure because there is no ATR (not a connection problem). The other one I can't write to because of failed bug write in nagramaster 4.0.9 (both cards had the same problem when I wrote the image).
I followed 103 guide pretty closely and I think I did everything correctly, however I think the problem was the delay in nagramaster is set to 20 by default and I think its too short. The delay needs to be increased. I don't know to what value but maybe 100 would be better.
Anyway, it started to write the image that I cleaned codespace, consolidated and defraged, wrote my tiers to and then put the latest non-autorolling blocker on and now I can't read from card. It changed to rom 103 rev 38B now, so now I am stuck. I tried unlocking the card by puttin in the password and it gives good response and says that the card is unlocked, try reading eeprom, but when read, nagramaster says that the card is locked.
I tried doing a force write the original image with NagraMaster and it lets me do that, however it still stuck on rev 38B and won't let me read the eeprom. My guess is that the card isn't taking the force write. When I put the card in the receiver, the receiver freezes and then reboots.
Any thoughts on how I can possibly save my last card ? Is there a D2C script for fixing this ?