KEY LISTER


    This chip is based on V2.4, but will also list keys on V2.6
and V3.0 units.  On V3.0 units, no picture/sound will be received
while lister is in the socket (assuming the unit has already been
authorized).

    Install chip in U30 socket and tune to authorized service.
Press SETUP and observe menu.  SETUP and 7 will dump R00-R7F from
U7 to the 6600-667F area of U-20.  The keys are located as
follows:

         (assume serial number is X1 X2 X3 X4 FF xx)

               R18 - R19:  Can be 00 00 or FF FF
               R1A - R1D:  X4 X3 X2 X1 (Serial Number in
                           reverse order)
               R1E - R24:  Key 0 (total of 7 bytes)
               R25 - R2B:  Key 1 (total of 7 bytes)
               R2C - R32:  Key 2 (total of 7 bytes)
               R33 - R39:  Key 3 (total of 7 bytes)
               R3A      :  usually 1F

    To view the keys and additional registers from U7, press SETUP 7,
then press SETUP 8.  The Audio and video will be lost while unit does
a warm boot (goes back to F0E3) when the SETUP 7 is pressed.  When
SETUP 8 is pressed, the "DATA REPORT" screen will start at R00.  To
display all the keys simultaneously, press the ">" key 3 times
after SETUP 8.  If all 00's are displayed, press CANCEL, SETUP 7 and
SETUP 8 again.  The format displayed after the ">" key is pressed
3 times will be as follows:

       0000  X4X3  X2X1  K0K0
       K0K0  K0K0  K0K1  K1K1
       K1K1  K1K1  K2K2  K2K2
       K2K2  K2K3  K3K3  K3K3
       K3K3  1Fxx  xxxx  xxxx

    Where K0 is 1 byte of Key 0, etc.  Note that what is actually
displayed above are U7 registers R18 thru R3F.  The 0000 may be FFFF
in some units.

    To clear the keys from U20, press CANCEL (only the keys will be
cleared: the remainder of U20 will not be affected).  To force a warm
restart (RESET), press HELP.  This is sometimes necessary to get the
unit back in the right mode after listing.