[lightning0009]

Here is how I modded my Kickass Clone H card unlooper so it would be able to unloop dish rom 10 rev a23's. Pull out the max232 chip and bend leg 10 up. Solder the bent up leg to one side of a switch. Solder from underneath the board on leg 10 to the other side of the switch. With the switch closed you can program your atmel, with it open, you can unlock cards. Now take out the 74HC00N chip. Bend legs 4 and 9 up. Solder a wire to leg 4 and run it to leg 18 of the amtel 2313. Now solder a wire to pin 9 of the 74HC00N and run it to pin 9 of the 74HC74AN. Now you can hook one of the outer legs of your 5k pot to pin 7 of the 74HC4053 chip(not the other 74HC4053) that is closest to the atmel 2313 chip. Hook the middle leg of the 5k pot to pin 4 of the same 74HC4053. Ok, you are now done with the mods to the top side of the kickass clone unlooper. On the bottom side, solder a wire from pin 14 of the 2313 atmel to pin 13 of the 74HC00N. Now solder a real short one from pin 9 to pin 12 of the 74HC00N. Now solder a wire from pin 11 of the 74HC00N to pin 11 of the same 74HC4053 chip that you hooked your 5k pot to. I was able to unlock a stream locked rom 10 a23 with switch 4 on.



Executing Script: C:\winexplorer5\Rom10-A23 OPENworks.XVB
TX Data : A0
TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 06 00
TX Data : 12 15 AB 21 00 08 A0 CA 00 00 02 12 00 06 55 0E
03 85 00
RX Data : 11 00

Now we will try 1252 delay
RESET FFFFFFFFFFFF6F6F6F6FFFFFFFFFFF6FFFFFFFFFFFFF6F6FFF FF RESET FFFFFF6F6F6FFFFFFFFFFFFF6FFF6F6FFFFFFF6FFFFFFFFFFF FFFF6FFFFFFFFFFFFFFF6F6FFFFFFFFFFFFF6FFFFFFF6FFFFF FF6FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF6FFFFFFF6FFFFFFF FFFFFFFFFFFFFFFF6F6FFF6FFFFFFFFF6F6F6FFFFFFFFFFF6F FFFFFFFFFFFFFF6F6F6FFFFFFFFFFFFFFFFFFFFFFFFFFFFF6F FFFFFFFFFFFFFFFFFFFFFFFFFFFFFF6FFFFFFFFFFFFF6F6F6F FFFFFFFFFFFFFFFFFFFFFFFFFF6F6FFFFFFFFFFFFF6F6FFFFF FFFFFFFFFF6FFF6FFFFFFFFFFFFFFFFFFFFFFFFF6F6F6FFFFF FFFFFFFFFFFFFFFFFFFFFF6F6F6FFFFFFFFFFF6FFFFF6FFFFF FFFF6FFFFFFFFFFFFFFFFF6FFFFFFFFFFFFF6FFFFFFFFFFFFF FF6FFFFFFFFFFFFFFF6FFFFFFFFFFFFFFF6FFF6F RESET FFFFFFFF
now we will try 1253 delay
6FFFFFFFFF6FFFFFFF6FFFFFFFFFFFFF6FFFFFFFFFFFFFFFFF 6F6FFF RESET FFFFFF6F6FFFFF6FFFFFFFFF RESET FFFFFFFFFFFF6F6FFFFFFFFFFFFFFF6FFFFFFFFFFFFFFF6FFF FFFF6FFFFF6F6FFFFFFFFFFFFFFFFFFFFFFFFFFFFF RESET 6FFFFFFFFFFFFF6F6FFFFFFFFFFFFF6F6F6FFFFFFFFFFF6FFF FFFFFFFFFFFFFFFF6F6FFFFFFFFFFFFFFFFFFFFFFFFF6FFFFF 6FFFFFFFFF6FFFFFFFFFFFFFFF6F6FFFFFFFFFFFFF6FFF6FFF FFFFFFFFFF6FFFFFFFFFFFFF6FFFFFFFFFFFFFFFFF6FFFFF6F FFFFFFFF6FFFFFFFFFFFFF6FFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFF6FFFFFFFFFFFFFFFFFFFFFFF6FFFFFFFFFFFFFFF 6FFFFFFF6FFFFFFFFF6FFFFFFF6FFFFFFF6FFFFFFFFFFFFF6F FFFFFFFFFFFFFFFF6F6FFFFFFFFFFF
now we will try 1254 delay
6F6FFFFFFFFFFFFF6FFF RESET 6FFFFFFFFF6F6FFF6F6FFFFFFF6FFF6FFFFFFFFFFF6F6F6F6F FFFFFFFF6F6F6F6FFFFFFFFF6FFFFF6FFFFFFFFF6FFF6F6FFF FFFFFF6F6F6FFF6FFFFFFF6F6FFFFFFFFF6FFF6FFFFF6F6FFF FFFF6FFFFFFFFFFFFFFF6FFF6FFFFF6FFFFF6FFF6FFF6FFFFF FF6F6F6FFFFF6FFFFF6F6FFFFF6FFFFFFF6F6FFF6FFFFF6FFF 6F6F6F6F6FFFFFFF6F6FFFFFFF6F6FFFFFFFFFFFFFFF6FFF6F FF6FFF6FFF6FFF6F6F6FFF6FFFFFFF6F6F6F6FFFFFFFFF6F6F 6FFF RESET FFFFFF6F6FFFFF6F6FFFFF6F6FFF6FFF6FFFFF6F6FFFFF6FFF FFFF6FFF6FFF6FFFFFFF6F6F RESET FFFFFFFF6F6FFF6FFFFFFFFFFF6F6FFFFFFFFFFFFF6F6F6FFF FFFFFFFF6F6F6F6FFFFF6FFF6F6F6FFFFFFFFFFF6F6F6F6FFF FFFFFF6FFF6F6FFFFFFFFF6FFFFFFFFFFFFFFF6F6F6FFF6FFF FFFF
now we will try 1255 delay
6F6F6FFFFFFFFFFF6F6FFF6FFFFFFFFFFF6F6FFFFFFFFF6F6F FFFFFFFFFFFFFF6F6F6FFF6FFFFFFF6F6F6FFFFF6FFFFF6F6F FFFF6FFFFFFF6F6F6F6FFFFFFFFF6F6FFFFF6F6FFFFF6FFF6F 6FFF6FFFFF6F6F6F6FFF6FFFFFFF6FFF6F6FFFFFFF6F6F6F RESET FFFFFFFF6F6F6F6FFFFFFFFF6F6F6FFFFFFFFFFF6F6F6F6FFF FFFFFF6F6FFFFF6FFFFFFF6F6FFF6FFFFFFFFF6F6F RESET FF6FFFFFFF6FFFFF6FFFFFFFFF6F6F6F6F6FFFFFFF6F6FFFFF 6FFFFFFF6F6FFFFFFFFFFFFF6FFFFF6FFFFFFFFF6FFF6FFF6F FFFFFF6F6F6FFFFFFFFFFF6FFFFFFF6FFFFFFF6F6F6F6F RESET FFFFFF6F6FFF6FFFFFFFFF6FFF6FFFFFFFFFFF6F6FFFFFFF6F FFFF6F6F6FFFFFFF6FFF6F6FFF6F6FFFFFFF6FFFFFFFFFFFFF FF6F6FFF6FFFFFFFFF6F6F6FFF6FFFFFFF6F6FFF6FFFFFFFFF 6F6FFF RESET FFFFFFFF6F
now we will try 1256 delay
6F6FFFFFFFFFFF6F6FFF6FFFFFFFFF6FFFFFFFFFFFFFFF6F6F FF6F6FFFFFFF6F6FFFFF6FFFFFFF6F6F6F6F6FFFFFFF6F6FFF 6FFFFFFF6F6FFFFFFF6FFFFFFF6FFF RESET 6FFFFFFFFF6F6FFFFFFFFFFFFF6F6FFF6FFFFFFFFF6F6F6F6F 6FFFFFFF6F6F6FFFFFFFFFFF6F6F6FFFFFFFFFFF6F83

*********** we hit our bug *************
1200078303
===========================================
83 was hit at 1256 delay ----VCC WAS 19
TX Data : 0A 15 A3 21 92 00 B3 0E 03 85 00
RX Data : 0A 06
RX Data : 12 92 00 80 21
***************************
* A23 CAM should be OPEN *
* test in Nagra to see. *
* if not, try again. *
***************************

Script C:\winexplorer5\Rom10-A23 OPENworks.XVB Transmission Completed

[petedog]

Thanks lightning0009 for the KAC mod and as soon as I figure out how to Flash it I will make the changes and give it a try. If you would post or PM me a step-by on Flashing this sucker I sure would appreciate it very much. Thanks again for your work on the KAC clone mod!

:BoomSmili

[wtp]

I have a kickass clone unlooper also. Could you send a pic or so to go along with your description? I would love to try this. can u upload the flash or tell me where to find it?

[csalmon]

I would also love to see some pics of that mod. Please post if you can.
Thanks

[lightning0009]

Ok, the yellow arrows are where I bent the pin up and soldered the wire to the bent up pin. The red arrows are where I just pushed the wire down in the slot with the pin still there. The flashes can be found on this site in the other unlocking threads. One flash for rom3's and a different one for rom10's. You program the 2313 with the switch closed. Open the switch for unlooping. I used xpatmel to program the unlooper.

Is it possible to provide a schematic with your mod. I dont have the kickass unlooper, but would love to try your mod with some of the older Little red unloopers.

[lightning0009]

It's Pengras mod for unlocking. It's number ten in the rom files in the download section. Rom10unlocker-Glitcher.zip it is called. It has the tucker schematic with the modified sections highlighted. That is the mod I did to this kickass clone. I just figured out how to do it from the schematic for this unlooper.

[Eldune]

Originally Posted by nofear

Is it possible to provide a schematic with your mod. I dont have the kickass unlooper, but would love to try your mod with some of the older Little red unloopers.

ME TOO on the little Red! Or the Timeshift Repair Station Thanks

[petedog]

lightning0009 Well after I got this sucker Flashed I noticed you and I must have different KAC Clones! The only socketed chip on mine is the 2313 Atmel, yet you say remove 232. and the 74HC00N. You also say some wires you just put in the slot! With no socket,no place to push the wires in! Is yours socketed or are you de-soldering and removing? Thanks for your help!

:BoomSmili

Ya, its nice to see what is actually supposed to happen when it runs... I let it go for hours with all OOOooooOoooOoOo until I tried it with no card in it and got the same thing, and changed some things around.

I have a different loader not talked about here, and got 2 rom3 softlocked, spoofed 383 to unlock in about 1 second apiece. I have one other stream locked R3 that will not unlock. Should I let this run or should I look at changing the resistance? When I run the test on the open cards, it ends fast so I don't know if it is saving the 'right' points or what....wish there was more documentation on it.

[lightning0009]

My Kickass clone has all socketed chips. I recommend going from the schematic and figuring it out from there if yours is different than mine. The main thing with mine that was different than Pengras schematic modifications was with the 74HC00 chip. In the original tucker schematic that Pengra used to show his changes from the pins used for the 74HC00 chip were 2,1,3 and 4,5,6. My kickass clone used pins 9,10,8 and 5,4,6. I figured this out using an ohm meter and metering out the pins on the chips and wrote everything down kind of making my own schematic for my kickass, but only the parts that were different and that was the only part. So basically I took the two gates that were coming out of the clock divider switch and changed there input so they are now coming out of the 74HC74 like Pengra showed in his modded schematic to do only my pins were a little different. Everything else schematic wise was pretty much the same pertaining to the modifications that needed to be done, so I just figured out how to do the mod to this kickass the easiest way possible but with socketed chips because that is what this one has.

[lightning0009]

Originally Posted by petedog

lightning0009 Well after I got this sucker Flashed I noticed you and I must have different KAC Clones! The only socketed chip on mine is the 2313 Atmel, yet you say remove 232. and the 74HC00N. You also say some wires you just put in the slot! With no socket,no place to push the wires in! Is yours socketed or are you de-soldering and removing? Thanks for your help!

:BoomSmili

Petedog,
If I had your unlooper I would just desolder the one leg and bend it up and then solder a wire to the bent up leg and run it over to the leg on the other chip and solder it to that or you could run it around and underneath the board and solder it to the underside of the chip leg. Or you could cut traces underneath or you could take out the whole chip and put in a socket.

[petedog]

Yea, it looks like I am going to cut some traces, which shouldn't be a problem. I just found out that the clones are not the same. Thanks alot lightning0009, you get all my Atta-Boy points for a good job!

:BoomSmili

Have you been able to open a rom3 or get good test glitches with the test bin?

I have about 10 KAC unloopers and would love to get rid of them all but one. They were very solid pieces back in the H and HU days.

I have a KAC Mikobu Glitcher Rev.B (bLACK), that is almost the same as a Mik3 but I have a 20 pin Ic behind the serial port plug,it looks just like the Atmel,the Mik3 has a Sip232 16pin behide the serial port anyone tried to mod this,or would know which Ic would be the 232 on this.

[robo]

all 6f6f6f6f6f6f6f6f6f nothing else any ideas

[Crazy1_79]

I have a old hu wild 2000 loader, "I believe it is a wildthing clone but am not sure" I need mods for this, I am going to tackle it.

[Crazy1_79]

If someone can post a link or have any idea about these please let me know, I didn't at first think it would be possible to mod becuase of the lack of dip switches, but after seeing the mikobu three mod I see now that maybe it is possible. Any help would be appreciated, I use this loader strictly for sorrynagra so I know it does work.

[lightning0009]

Crazy, I seen a bunch of different pics of different unloopers and even one guy posted one like mine wanting to know how to mod it, all at cardcoders. I am not familiar with the one you got, so not sure, but it probably can be.

[Crazy1_79]

you aren't going to believe this lightning, I followed the mods you did on yours, except I didn't have a 5K trimmer, So I stuck a 2.2k ohm resistor in there just to make the connection, this is what I have in running the script, although I am unable to flash the atmel as of this time. (I already had it flashed)
Executing Script: C:\Documents and Settings\nathan\My Documents\Rom 3 unlocking mods\3-TESTFILES\TESTglitchFIND.XVB
TX Data : A0
TX Data : A1
TX Data : 07 0E 03 10 01 03 9A 00
RX Data : 07 1B
RX Data : 0C FF 95 00 FF 91 81 71 64 47 00 44 4E 41 53 50
30 30 33 20 52 65 76 33 37
OVERFLOW WAS SENT TO 00 E050, READ CAM LATER WITH NAGRA EDIT TO SEE E050
CHANGED FROM FF TO 00. IF IT DID WE KNOW OVERFLOW IS WORKING.
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAA--- try to hit 0C bug at 10A5
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A6
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A7
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAA--- try to hit 0C bug at 10A8
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

[petedog]

Well I have started the "mod" on the old KAC WTII , cut the 232 and C00N out, installing sockets , drilling hole for wires, installing "Red Oak Socket Towers" etc.,he! he!, and hope to build a fire in it Wednesday evening. If it don't go UP in smoke, I will post the results, and a Pic of the "Towers" later in the week "The BranchRanch Mod" Hello!
Thanks again for your mod on that "Letter" getter!


You have PM !

[lightning0009]

Petedog, for this old H unlooper I decided to cut the traces on the bottom. They are the purple lines I drew in these pics. THe layout was different than the KAC, but the pinouts were the same. It didn't have a jumper switch installed. #2 on the jumper switch was always on, so I cut that with a razor on the topside, that's the only cut on the topside of the board,(I marked it on the bottom in the pic) all the rest were on the bottom. I then installed the switch on the top. #3 on worked for me for rom3 testglitching. I glue gunned the 5k pot to the top of the 4053 and just pushed the wires down into slots 4 and 7. I took out the white Led on this one. I installed the switch for programming the atmel.

lightning0009
I have the same as you have but have an iso programmer attatched to it also.Can you show a better diagram of the wiring diagram..I Mean i see a switch and a knob there.Im alittle lost..thanks

[lightning0009]

Here is how to mod your kickass clone if you don’t have socketed chips.

On the top side you will need to cut the trace that goes from the switch to the 74HC00 chip. It is directly below the O in the OFF letters on the switch. There are two other traces that run right next to the one you need to cut and they are closer to the card socket. Don’t cut those.That is the only trace that needs to be cut on the top side of the board. On the bottom side there are two traces to cut. Look at the picture. Now on the max232 chip Solder from underneath the board on leg 10 to one side of the switch. The other side of the switch solder a wire and run it to pin 18 of the 2313 atmel chip. There will be two wires you will need to solder to this pin so you should do both at the same time. The other wire will go from pin 18 of the 2313 atmel chip to pin 4 of the 74HC00 chip. With the switch closed you can program your atmel, with it open, you can unlock cards.

Now the 74HC00N chip. Solder that other wire from pin 18 of the 2313 atmel chip to leg 4 of the 74HC00 chip. Now solder a wire from pin 9 of the 74HC00 chip to pin 9 of the 74HC74 chip. Now solder a wire from pin 11 of the 74HC00 chip to pin 11 of the 74HC4053 chip. Now solder a wire from pin 12 of the 74HC00 chip to the pin that’s labeled 1 on the rocker switch. Now solder a wire from pin 13 of the 74HC00 chip to pin 14 of the 2313 atmel chip

Now you will need to hook your 5k potentiometer to pins 4 and 7 of the 74HC4053 chip. The center wire from the pot is postive and would go to pin 4 of the chip and one of the outer legs of the pot would go to pin 7. Now you can push the wire down in the slot if you chip is socketed or you can solder wires underneath to the pins and run them to the topside to your pot. I took out the white LED labeled D2 on my board, you can too.

lightning0009

lightning0009
Thanks so much for the work you went threw to help me out.Im done adding the wires just 2 more things i would like to add is the 2 wires you got going to a switch...What is that for and what flash do i use to flash my chip..Oh ya and that know you use where can i find one of them...thanks again for the help..

[lightning0009]

The switch is to enable programing the atmel 2313 chip with the newd6 flash for rom3 unlocking or the newd7, 8, or 9 for rom10 a23 unlocking. They can be found in the file download area or in other unlocking threads so I ain't gonna attach them here. You will need that switch so you might as well put it in. You should read all the different threads on unlocking, even the ones about other unlooper mods because they all have good info on all this stuff and a bunch of the files you will need.

Can someone tell me how to flash a newb6.asm fileit says you must flash with new6b.hex and newb6.asm but i cant load the asm file.Any help would be great

[lightning0009]

Gold, you only flash the newb6.hex file to your unlooper. Use the UP16flasher program. Click the verify button after you flash it to make sure it flashed correctly. In the other threads or in the files download there are other versions of the newb6.hex file for xpflasher if you want to use that to flash with.

[Steventoo]

Can anyone tell me if one of these h/hu unloopers has a mod for them. If so...what can I do to get into my rom10 a.23 card? The green one is a ALL-IN-ONE and the red one is a SU.