FOLLOWING THESE DIRECTIONS WILL RESULT IN A WORKING KEYMASTER CHIP
FOR YOU VCII BOX. THIS CHIP WILL WORK IN VER. 2.4,2.6 AND 3.0 BOXES.
HAVE FUN, AND SPECIAL THANKS TO XACT FOR THIS CHIP, WE ONLY BROKE YOUR
CODE. IMPOSSIBLE AS IT MAY SEEM. TRY AGAIN DAN (have fun asshole ha!!!)
AND WE DID.

Making clone of keymaster 3M chip

Since Keymaster uses address offset addressing for two overlays
one must do the following to make a Keymaster working chip for 
each VCII box this chip is to be used in.

(1) Find address offset to load overlay Keyovr.dat
    convert thrid number of box S/N to binary, and it with 1D hex
    and add C1 hex to find offset address.

    VCII S/N= 01 01 A5 B7    
     
    Third number of S/N = A5      10100101 (A5 hex)
    AND with 1D hex               00011101 (1D hex)
    				  --------
    results of and =              00000101 (05 hex)
    ADD with C1 hex               11000001 (C1 hex)
                                  --------
    results of add =              11000110 (C6 hex)            

    The upper bit of address offset = C6 hex
    Now use the fourth number of S/N for lower address of overlay offset
    Offset address= C6B7

(2) You will also have to find checksum of box S/N, one could patch this 
    part of Keymaster code out, but to be on the safe side so you will not
    install cloned Keymaster in wrong box causing problems of not finding
    the right overlay address do the following.

    Add the four number of S/N together as following.
    
    S/N = 01 01 A5 B7

    First digit of S/N  01     00000001	(01 hex)
    Second digit of S/N 01     00000001 (01 hex)
                               --------
    Results                    00000010 (02 hex)
    Third digit of S/N  A5     10100101 (A5 hex)
                               --------
    Resutls                    10100111 (A7 hex)
    Four digit of S/N   B7     10110111 (B7 hex)
                               --------
    Results                   101011110 (15E hex carry bit + 5E )

(3) Now it is time to patch Keymaster with the following steps

    (a) Load upp512.exe in computer
    (b) From Upp512 menu select opt "L"
        (1) Load Address= C000
        (2) File name   = Keymaste.dat
    (c) Now load Keyovr.dat as follows
        (1) Select opt's "L"
        (2) Load address= offset address for part #1 (C6B7)
        (3) File name = Keyovr.dat
    (d) After file loads select opt "D"
    (e) The following will install corrert s/n should be installed
        to prevent wrong s/n chip from being installed in box.

        From this menu Type in SFFCC (patch in S/N starting at FFCC)
        screen will show:
        FFCC:-00 Type in First Digit of S/N  (01) CR
        FFCD:-00 Type in Second Digit of S/N (01) CR
        FFCE:-00 Type in Thrid Digit of S/N  (A5) CR
        FFCF:-00 Type in Fourth Digit of S/N (B7) CR
        
        Hit Space bar CR
        Type in DFFCC.FFCF CR
        Display Show Now Show S/N
        FFCC 01 01 A5 B7
     (f)Now Type in SFE7B  (patch in S/N Checksum for part #2
        Display will show:
        FE7B:-00 Type in upper bits of checksum (01) CR
        FE7C:-00 Type in lower bit of checksum  (5E) CR
        hit Space bar CR
	Type in DFE7B.FE7C CR
        Display will show S/N checksum
        FE7B 01 5E

     (g) Type in CC002.FFFF CR
        Display will now show Checksum of Code from C002 thru FFFF
        Type SC000 CR
				          
        Display will show ---- checksum = yyxx 
                                          AAC2 (with s/n 0101A5B7)
					  
        C000:-00 Type in upper part of checksum (yy) CR
        C001:-00 Type in lower part of checksum (xx) CR
        Hit Space bar CR
     (h)Patching of Keymaster clone is now complete
        Type in Q CR
     (i)From main menu select opt "S"
        Number of bits to save = 3FFF
        Start address of buffer =C000
        File name =you S/N (ex 0101a5b7.dat)
     (j)Now Clone Keymaster is ready to be burned for you box
        test of boxes using the method have alway resulted in
        a good working keymaster chip. The Keymaster code to destory
        you box has been removed. So wrong S/N will on result in chip
        entering idle loop.
     
					
					By The Keymaster Clone Club

Downloaded From P-80 International Information Systems 304-744-2253