Seca2 V7.3B and extracting Data

[adinani01]

Hi again,

i've managed to get a Status bug 9028. Let me know if my approach is good please
Here's what i did :
I used G1 to go from 0200h to 0700h but i didn't manage to get 9028.
So i saw in another post that if i get a status bug of 9B00 then i fix G1 and try to change G2 in order to get 9028.
I managed to get it with G1 = 0277h and G2 = 090Bh
I tried Inb4 again with these fixed values and after doing 3 loops with those same values i got 1F00, 6700 and again 9028 respectively.

Does it means i managed to get the Glitch point for G1 and G2 to 9028 ?

Also note that G3 is fixed to 9DC2h

Here is the full script i found and modified. If that is the right Glitch can you give me the next approach in order to dump eeprom please ?

thanks :)

Sub TestG()
Dim ins1,entete,compt,part1,part2,part3,g1,g 2,g3,ECO,EEP,REP,pp

call reset()
Sc.print(" *** Test MovxBug ***" & vbcr)
sc.print(vbcr)
sc.print(vbcr)
sc.print " Unlooper stop when anwser = 9028" & (vbcr)
sc.print " ------------------------------"
sc.print (vbcr)


g3=&h9DC2

for g1=&h0200 to &h0700 step &h01
for g2=&h0900 to &h09FF step &h01

sc.verbose=1
for pp=0 to 1
Sc.Write("A1")
SendGP("100EFF018F")
sc.delay(300)

sc.write("0A 0E 20 C4 C1 0E 00 00 08 8a 00")
sc.read(13)
sc.write("20 0E 30 02 40 00 00 00 00 00 00 40 20" & HexString(g1,4) & "0A 20" & HexString(g2,4) & "0B 02 00 24 00 20 00 38 0A 20 9D C2 0C 00")

sc.delay(3200)
sc.read(3)
GPR(0) = Sc.GetByte(0)
GPR(1) = Sc.GetByte(1)
GPR(2) = Sc.GetByte(2)

sc.print ( "Status bug : "& HexInv(GPR(1),2) & HexInv(GPR(2),2)& vbcr)
sc.print ( "Glitch use : "& (HexString(g1,4)) & (HexString(g2,4)) & vbcr)

if HexInv(GPR(1),2) & HexInv(GPR(2),2) = "9028" then
sc.print (vbcr)
sc.print "9028 FOUND" & (vbcr)
sc.print "----------------------"& (vbcr)& (vbcr)
call reset()
exit sub
end if


next
sc.print (vbcr)
sc.print " !!" & (vbcr)
sc.print "--------------------------"& (vbcr)& (vbcr)
sc.print (" whe go on ")
sc.print (vbcr)
next
next
call reset()

End Sub

[RayhTec]

You will need 9B08. For G1 start at 500, G2 and G3 not change. Be patient.

Regards,

[Grizou0]

9028 with 2G???? no possible.
But your script is bad,
Use only G to have 9028 with this code:
sc.write("10 0E 30 02 40 00 00 00 00 00 00 40 20" & HexString(g1,4) & "0C 00")
with 10, len of this trame.

[adinani01]

Strangely yes i managed to get 9028 with 2 G....
anyway i've tried again and only 6700 with 1G and the correction of 10 len.
I think my capa is the issue. I'll change it to a 2pf green capa and see if it change.
I'll update you when i get the capa ;)

Thanks

[adinani01]

Hello,

While waiting for my CV1 (green 2pf) i've did some checking on the power of the regulator.
I have 3,27V instead of the 3,3V...
Can that be the issue i'm getting 6700 ?

I've tried the following :

G1 from 0200 to 0700 step 1 by 1
sc.write("10 0E 30 02 40 00 00 00 00 00 00 40 20" & HexString(g1,4) & "0C 00")

And i've looped the whole at least 20 time to make sure i get quite some possible values (as it seems i'm getting random value for the same G) and i didn't get at all 9028.
I wonder if my unlooper is not the issue.

Anyone can tell me if 3,27v is correct or should i change something in the unlooper ?

Thanks