Mili AIO mods for 101 & 102 glitching

[t160hq]

I checked out several how-to's on this
loader and found them to be
incorrect. I changed the stuff that was
wrong. This is how mine is modded and
it has opened up multiple 101 and 102
cams. All cams opened by this mod were
former subs. I have yet to open a virgin
101 or 102. For me best results have been
achived using a variable 12v power supply
set for 7.5vdc.

I have also included a picture of mine to
show what loader I'm talking about.

Here we go modding the mili all-in-one.

I modded the dip switch version but the jumper version
should be the same.

All IC reference numbers are the silk screened numbers
on the pc board.

For the Atmel I just removed and carefully bent the
pins up reinstalled in the socket then soldered the
wires to the exposed pins.

Warning! These are surface mount IC's. Those pins
are very small and are more likely to break then
bend. So if you have any doubt about your ability
find a junk board from almost any modern electronic
unit. Then practice a lot till you know you can do
it. I found a dental pick was best for lifting the pins.
The trick is to heat the pin and pad before bending.

Pins to lift from their connnections on the PCB.

IC7 (74HC00)
1,2,3,4,5,11,12,13

IC2 (AT90S2313)
7,14,18


Those are the only pins that need to be disconnected
from the pads on the PCB. All other pin connections
are left connected to the pads when you solder the
wires on.

Instructions for wire connections.

IC7 pin 1 to IC2 pin 7
IC7 pin 2 to IC3 pin 9
IC7 pin 3 to IC7 pin 4 (no wire necessary just solder the pins together
take care not to solder them to the orginal pads on the pcb)
IC7 pin 5 to outside connection on switch
IC7 pin 11 to IC5 pin 10
IC7 pin 12 to IC3 pin 3
IC7 pin 13 to IC2 pin 14
IC2 pin 18 to center connection of switch
IC4 pin 10 to last outside connection of switch

For the pot I changed the orginal pot to a rat
shack p/n 271-342 15-turn cermet potentiometer 1k ohms.
On the pot solder the middle pin (wiper) to one of
the end pins.

IC6 pin 8 to two soldered together pins of pot (wiper and one outside
pin)
IC6 pin 14 to leftover outside pin of pot.

That's it for connections. To flash the Atmel
you need to set dip switch (SW1) Switch 4 to on.
Then the added switch to the side that connects
IC2 pin 18 to IC4 pin 10.

After flashing move both switches back to normal
settings. SW1 switch 4 to off. Added switch to side
that connects IC2 pin 18 to IC7 pin 5.

t160hq

[rustysteel]

That is a great step-by-step.....

I used it to a tee on my all-in-one h/hu loader......worked like a charm!!
The difference I came across is mine has no dip switches....jumpers instead, and also has a jumper that says flash.....that's about it....oh and power plug in is turned sideways....

Must be some sort of clone of Millis AIO......anyways....

I just wanted to pop back and say thanks to T160HQ for the great post....got me up and running.....glitching a card with it as I type this :)

[legend0319]

t160hq,

I noticed that your orginal connections (IC7 pin 6 to IC5 pin 9) is now missing on your new setup to unlock 101 & 102. Do we have to remove IC7 pin 6 to IC5 pin 9 connection in order to glitch 101 & 102 properly or can we leave this connection in place?

Great job by the way.

[t160hq]

t160hq,

I noticed that your orginal connections (IC7 pin 6 to IC5 pin 9) is now missing on your new setup to unlock 101 & 102. Do we have to remove IC7 pin 6 to IC5 pin 9 connection in order to glitch 101 & 102 properly or can we leave this connection in place?

Great job by the way.

Yes. If you have it modded according to the old instructions remove that wire and reconnect IC7 pin 6 and IC5 pin 9 to their orginal connections on the PCB.

The most important change is the pot though. While experminting I found the old 4k pot would work. But, it was damn tricky getting it just right and keeping it that way. That very fine adjustment using the new pot while glitching makes getting the right response eaiser. Even with the new pot as little as 1/8 of a turn either way means the difference of good vs bad response to the script. That applies to both 101 and 102 glitching.

Also I have yet to glitch two cam's with the same setting. Usually a very small adjustment is necessary to achieve proper response with the script bewteen different cams.

t160hq

[tester69]

t160hq

I have made the mods to my AIO but am not able to pop any 101's. I am using 101romreader script with newd9 flash. In the VCC Analyzer mode, all I can get is a mix of +'s and #'s, or all +'s but no -'s. Can you list the details of your setup?

What Winex script are you using for 101's?
What script settings that are working for you (VCC and delay settings)?
What flash are you using?
What responses are you getting in Winex VCC Analyzer and Install Intercept?
Dip switch settings?

Any help would be greatly appreciated!

[io3]

Would like some details on software & settings used. Also, this mod can't be considered complete until it can pop virgins. Maybe use a rheostat instead of the trim pot, don't know for sure. Have a couple of these aio's and they have never failed. Prob try to do this & make the additional corrections this weekend.

[dakazman]

just a bookmark

[zelly]

Does anyone know if AIO can be upgraded with pair of 4619 chip? If so, does it work?

[rj11]

I checked out several how-to's on this
loader and found them to be
incorrect. I changed the stuff that was
wrong. This is how mine is modded and
it has opened up multiple 101 and 102
cams. All cams opened by this mod were
former subs. I have yet to open a virgin
101 or 102. For me best results have been
achived using a variable 12v power supply
set for 7.5vdc.

I have also included a picture of mine to
show what loader I'm talking about.

Here we go modding the mili all-in-one.

I modded the dip switch version but the jumper version
should be the same.

All IC reference numbers are the silk screened numbers
on the pc board.

For the Atmel I just removed and carefully bent the
pins up reinstalled in the socket then soldered the
wires to the exposed pins.

Warning! These are surface mount IC's. Those pins
are very small and are more likely to break then
bend. So if you have any doubt about your ability
find a junk board from almost any modern electronic
unit. Then practice a lot till you know you can do
it. I found a dental pick was best for lifting the pins.
The trick is to heat the pin and pad before bending.

Pins to lift from their connnections on the PCB.

IC7 (74HC00)
1,2,3,4,5,11,12,13

IC2 (AT90S2313)
7,14,18


Those are the only pins that need to be disconnected
from the pads on the PCB. All other pin connections
are left connected to the pads when you solder the
wires on.

Instructions for wire connections.

IC7 pin 1 to IC2 pin 7
IC7 pin 2 to IC3 pin 9
IC7 pin 3 to IC7 pin 4 (no wire necessary just solder the pins together
take care not to solder them to the orginal pads on the pcb)
IC7 pin 5 to outside connection on switch
IC7 pin 11 to IC5 pin 10
IC7 pin 12 to IC3 pin 3
IC7 pin 13 to IC2 pin 14
IC2 pin 18 to center connection of switch
IC4 pin 10 to last outside connection of switch

For the pot I changed the orginal pot to a rat
shack p/n 271-342 15-turn cermet potentiometer 1k ohms.
On the pot solder the middle pin (wiper) to one of
the end pins.

IC6 pin 8 to two soldered together pins of pot (wiper and one outside
pin)
IC6 pin 14 to leftover outside pin of pot.

That's it for connections. To flash the Atmel
you need to set dip switch (SW1) Switch 4 to on.
Then the added switch to the side that connects
IC2 pin 18 to IC4 pin 10.

After flashing move both switches back to normal
settings. SW1 switch 4 to off. Added switch to side
that connects IC2 pin 18 to IC7 pin 5.

t160hq


hi , i did the mod to mine exactly like your picture in this post to the T ..and its working but i cant pop one card with it .. i have a 2 rom 102's rev 103 ex subbed , and im flashed with newd13 and using winex with the NEW script with the intercept i cannot pop either one of those cards .... i have tried diff power supplies , no go ... in winex i get norsp+-+-+-norsp-+-+-norsp and then some +-+-+-+-------+-+----+--+--+ but no numbers at all ... ive tweaked the pot and still no numbers ,,, i dont know if im supposed to get numbers , but i dont ........ any help would be appreciated .... once again ,. i have duplicated yours exactly as the picture shows even though the text diagram is wrong on some of the pins .... so which is right ? the picture or the diagram of text ? ..... maybe it is something simple . im hoping it is .... thanks , rj

[legend0319]

hi , i did the mod to mine exactly like your picture in this post to the T ..and its working but i cant pop one card with it .. i have a 2 rom 102's rev 103 ex subbed , and im flashed with newd13 and using winex with the NEW script with the intercept i cannot pop either one of those cards .... i have tried diff power supplies , no go ... in winex i get norsp+-+-+-norsp-+-+-norsp and then some +-+-+-+-------+-+----+--+--+ but no numbers at all ... ive tweaked the pot and still no numbers ,,, i dont know if im supposed to get numbers , but i dont ........ any help would be appreciated .... once again ,. i have duplicated yours exactly as the picture shows even though the text diagram is wrong on some of the pins .... so which is right ? the picture or the diagram of text ? ..... maybe it is something simple . im hoping it is .... thanks , rj


I have been trying to unlock a 102 rev 105 the last couple of days. This AIO is very sensitive and I have to keep on pulling the card in and out every thirty seconds or I will get a bad reponse. I am getting the same mixes of +--+-+-+-NoResp+--+--+-NoResp+--+-+, which is good but I cannot pop it. I have tried many different setting and good signs but no luck. My 1K pot has to be set very low (6 ohms) to get a good response. I have a couple of 4619 chips on order.....don't know if it will work but its worth a shot. I'll keep at it.

[legend0319]

Does anyone know if AIO can be upgraded with pair of 4619 chip? If so, does it work?
Yes!

I removed both of the 4053 and replaced with MAX4619 chips and unlocked a 102 rev 105 with nagramaster 2.0 loader version in under a minute. 1K pot was set at 60 ohms. I have been trying to unlock this cam for a week with the 4053 but to no avail. As soon as I placed the MAX4619 it popped open right away. Recommend you replace the 4053 or you will be waisting your time.

[rj11]

Yes!

I removed both of the 4053 and replaced with MAX4619 chips and unlocked a 102 rev 105 with nagramaster 2.0 loader version in under a minute. 1K pot was set at 60 ohms. I have been trying to unlock this cam for a week with the 4053 but to no avail. As soon as I placed the MAX4619 it popped open right away. Recommend you replace the 4053 or you will be waisting your time.

AWESOME !!! that makes me get a stiffy ! going to get some 4619's right now ... im bound to find some in the bone pile , if not i can get some free form maxim .... thanks for the update ,,, excellent news ... 60 ohms is where she will be ... thanks legend

[tvguyXXX]

Correct me if I'm wrong but isn't this incorrect?:

IC7 pin 2 to IC3 pin 9

When I look at the picture it looks to me more like:


IC7 pin 2 to IC3 pin 13

[geargrinder]

Correct me if I'm wrong but isn't this incorrect?:

IC7 pin 2 to IC3 pin 9

When I look at the picture it looks to me more like:


IC7 pin 2 to IC3 pin 13

I think you are counting wrong. Pin 7 and 8 are across from each other.



:)

[onetomany]

Did this mod to my aio no go. Replace chips pot around 60 like legend suggested and 311 at 281 BAM less than two minutes 102 at 105 BAM BAM less than 2 minutes. I am now happy.

Thank you!!!

[onetomany]

One more thing I should add when running on my p3 1 gig it was using 100% of the cpu running on my p4 3.6 gig ran about 50% I also used 6 volt transformer read somewhere to use 12 volts but if you like to heat up your voltage regulator go ahead.

[legend0319]

Did this mod to my aio no go. Replace chips pot around 60 like legend suggested and 311 at 281 BAM less than two minutes 102 at 105 BAM BAM less than 2 minutes. I am now happy.

Thank you!!!


Congrats onetomany. What program did you use to unlock these puppies?

[onetomany]

The one you mentioned in your post nargmaster 2 default settings

[gregdep]

Where would someone get the 4619 chips at? I am having zero luck on 2 modified mili aio's.