In the run chip SETUP 9 will bring up the full menu.
Entering the keyless (wiz) #': Enter the normal Wiz sequence, key 00,01,02,03
and for keys 04 set enter A510, A520, C430, C440 whichever applies.
The 10 20 30 refer to the first, second, third, etc. set of numbers.
Refer to the ram image example in this doc file. 

Trap 23 at ffd0 has been zeroed (nop-ed) to circumvent GI's latest ECM's. 
This should also be done ARMADIL.RUN and all other version 2.4 run files. 
Change FFD0 from DA33 to 0000 in the run files.

This info was collected by looking at both loader and run chips.
If anyone has info on how to activate the secondary (backup) clone,
please EDIT this info into this doc file and upload it to this BBs.

Note: The DIL02000.RUN file is an ARMADILLO.RUN file modified for
use in 2000 series (C4) VCII's. It will work with  C4 or A5 sid.
Also look at 2000v24 & 2000v3.run files, they are also modified 2100 run
files so they work in the older VCII's with the current blues brother loaders
loader24 and clone.cfg.



Locations for the ARMADILO LOADER CHIPS ----  Version 2.4 software

	Place primary CLONE ID# at location 0235 (forward)
            Current month and service ID# at 0246 & 0247 (28a5)
	Make sure 0223 is D0
            Even month key starting at 0100, 
	Odd  month key starting at 0163
            
            Seed Keys at 2000
            Example - 2000 ** ** ** ** ** ** ** 00 ** ** ** ** ** ** ** 00
                           ** ** ** ** ** ** ** 00 ** ** ** ** ** ** ** 00
            Seven bytes of key then a 00 then seven more then 00 seven more
            then 00 last seven then 00.
	----------------------------------------------
	Secondary SEED keys at 2E00 in the same order,
	immediately followed by the secondary ID# at
	EE20. This second set is not necessary unless
	you want the backup.
	----------------------------------------------
	The keyless keys may be pre-entered if known, or
	may be entered through the keyboard. In the loader
	chip they go into 0640, 0650, 0660, 0670, 0680, 0690, etc.
	
EXAMPLE:	@0640   9A DB 51 A5 51 A9 33 28 A5 10  	
	@0650   6A DA C9 76 5C 78 60 29 A5 20
	@0660   AB 64 B7 CF 87 3F 0D 28 C4 30




THEORY OF OPERATION:
 
The SEED keys at 2000 are encrypted by the writer and stored
at 6740-675f in U-20. 
The secondary seed keys are and ID # are also encrypted and are stored 
at 66c0-66df in U-20. The secondary ID# (encrypted) is at 66E0-66E3.

If you need to know and can't figure out the encryption key(s) for these,
leave a message on the BBS and I will respond in a private message.
Hint: You DO need DESCALC.EXE to de-cypher these keys.


				Enjoy,   Pete
Downloaded From P-80 International Information Systems 304-744-2253