Vorlon's Quick Guide to ExtremeHU
Guides are maintained and hosted by The Vorlon Homeworld. Linking to this guide
is ok, however anyone interested in hosting this guide must first contact Vorlon001
READ, VERY IMPORTANT:
The use, possession or importation of Test (Programmed/Pirate) Cards is Illegal in the United States. If you are a U.S. resident, you are required by law to subscribe and use of Test Cards of any kind is unlawful and subject to Criminal and Civil penalties according to U.S. law. We do not condone use of Test Cards to U.S. residents. You and you alone are SOLELY responsible for abiding by the laws of your Country, State, Province or Territory. THE DSS UNDERGROUND and THE VORLON HOMEWORLD WILL NOT BE HELD RESPONSIBLE FOR THE ACTIONS OF THE PEOPLE USING THIS DOCUMENT. This Guide is strictly for Canada and EDUCATIONAL USE ONLY. Also the DSS Underground and The Vorlon Homeworld does not and will not take any responsibility for what might happen to any card using the following procedures. In other words, USE THESE GUIDES AT YOUR OWN RISK.
To work on HU cards you will first need a modified Unlooper or an HU Loader. This device is necessary to read the EEprom from the card and to write to the card.
The Modified Unlooper can be any unit that is ICP...in circuit programmable. Since all of the HU Loaders now come without a program in the Atmel chip, you will require a file called Atmel-load.exe or any of the other loader programs with the HU Atmel code. If you need more info on the art of Flashing, there is a Stickey Post in the H Unlooper forum that explains it in great detail. There is also a program called KK that works from a DOS window and gives you the option for all major flash programs.
If you are using an older unlooper design that does not support ICP, then you will either have to purchase an Atmel that is already programmed or build an Atmel programmer and use the current software to program the chip.
If you have an HU loader, then it already comes with a daughter board circuit. If you are adapting an older Unlooper, it is probably a very good idea to buy or build one of these. If you don't use one to start, you will probably have to short pins 13 & 14 of the Atmel chip to make your modified unit work.
If you purchase an HU Loader and it comes with a power supply, good. If not, invest in one of the variable voltage designes available at Radio Shack and other electronic supply houses. You will find many forum posts referring to setting these a particular way for a particular Unlooper or Loader.
Extreme HU is currently the most powerful and best piece of HU Software that is currently available as freeware and probably any Payware as well!
The most current version is ExtremeHU 1.62. It was introduced because of the new release of HU Activation. It supports full PPV Wipe and it uses Extreme Hex files that will fully activate a card. It also works with any Extreme Hex 3M file that is supported by Mex....the NewEra series of files.
The full featured interface is pictured below. Since this is only a text guide we will keep it simple.
The toolbar can be used to navigate the program: The features are listed below from left to right. The functions are divided into the left side for working on a bin or image and the right side for working on a card directly. The new toolbar varies only slightly from the one in ExtremeHU1.52. It has added the PPV clean toilet paper icon.
The Left side of the toolbar is for opening files, configuration, and working on a bin loaded into the program.
Open eeprom file..This will open
an existing .bin file.
save bin..Allow you save the bin after modification.
settings...Allows for the setting of program colors, com ports, glitch settings, and other changable program features.
View decoded eeprom (edit mode)...Decrypts all known encrypted areas of an eeprom for viewing in the editor.
clean current eeprom...Allows you to clean an image in memory without any I/O operation.
Unmarry IRD in current eeprom (pulldown choice)-unmarry/virgin...in memory unmarry of the loaded .bin file
Fix ATR 4th byte...4th byte repair of the image in memory incase it was read with a bad 4th byte.
Cmd90 (pulldown choice)blocking on/off...Same for CMD90 blocking.
Patch hexfile to eeprom (pulldown choice) Normal/extreme..You can patch an image in memory with a .hex file. Useful if a new clean hex is available or a new 3M.
Below are the direct card operation toolbar functions. These are all on the right side of the active toolbar with no image loaded into the program.
Check ATR...This will reset the loader and request a card insert. ATR will be read.
Clean card...This function will reset the loader and request a card insert for cleaning.
Unmarry IRD...This function as above and will Unmarry/virgin a card.
Fix 4th byte on card...4th byte fix in the ATR
Cmd90 on/off on card...Direct card operation to set CMD90 blocking on/off.
Change area settings...Prompt screen will allow you to just change area settings.
Read eeprom from card...Direct card operation to read the card.
Read USW...Direct card operation to just read the USW.
Write loaded image to card (lightning bolt)...Like BasicH, will write image in memory to the card. This can be after you modified it in memory for area, zip code, ID, etc.
Clear PPV... This feature will do a PPV Wipe. Use only on a Subbed card or on card with activation. This is not for use on a 3M'ed card. Write hex to card (select screen comes up)...This will prompt for a .hex file and write it to the card.
To setup the program, the way you want it, select the 3rd icon on the toolbar which is for program setup. Make your changes from the default and save the changes.
Before you attempt a read or write to the card, you should use the Check Mark feature of ExtremeHU to check the ATR and card info. You should especially check for the status of the 4th byte of the ATR. This must be 25. If it is not, then follow the steps below to correct this before you do anything else!
There are cases, where canceled subs are marked with a 4th byte of 24 instead of 25. The cleaning programs will correct this also but it may make the cards a little harder to glitch.
If you get the 4th byte problem, the card will probably not glitch to program or it will glitch forever without ever programming. The reason is, that the programs are looking for a byte that is 25 and will not accept the 00. Fortunately, this can be corrected in a number of ways.
1. You can use Winexplorer and Eclipse 1.7 or NewEra2.3 in the clean mode. These will fix the 4th byte problem. Winexplorer 4.6 must be set to the Unlooper setting to do this!
2. ExtremeHU1.63 also has the ability to fix this because in the clean mode, the 4th byte is ignored. It can do this also by using the syringe icon in the tool bar to the right. (if you have a .bin file loaded, the syringe on the left will correct the image in memory.)
3. Cleaning in Arrowpoint4.9 will also fix this using a good clean hex file.
If your 4th ATR byte is correct, then the first and most important thing to do is to save your original card image before you do anything else!
1. Select the EEprom icon from the toolbar.
2. The program will reset the loader and prompt you to insert the card.
3. Insert the card into the loader.
4. The program will now glitch it's way into the card, read the eeprom into program memory.
5. Once loaded, the toolbar will be active on the left side. Select the second icon (Save bin) icon and save your bin.
Now that you have saved your card's original Eeprom, you are ready to program.
APPLY A 3M HEX FILE TO THE CARD:
PROGRAMMING THE VIRGIN OR TEST CARD:
You should have all of the Extreme Hex
files you will be using located in the Hex directory of ExtremeHU as the program
defaults to this directory when you request a .hex file.
a. Bring up ExtremeHU1.63
b. On the right side of the toobar under HEX, use the pulldown and select the Extreme Hex option.
c. From the window that opens up in the hex directory, select the NewEra3.3hex file that you placed there. If you want the baseball, sports stuff, etc. and 1-99 locals use the newest NewEra3.31hex for this...released 8/2/01. NewEraLSv2...8/5/01 allows locals control from remote.
ExtremeActV1...8/25/01 allows full activation with PPV ordering and the ExtremeHU 1.63 gives you PPV Wipe. The latest recommended release is ExtremeActV1.3.
d. Follow the screens as they execute. They will ask for zip code, local bytes, etc.
e. The program will then clean and 3M the card in one operation!
If you have any doubts about the above program, and the instructions that come with it leave you unsure, download the visual guides for this program from the Premium Members File area of the DSSUNDERGROUND or the Vorlon Homeworld, and study them to become familiar with the workings of this very fancy and involved program.
Using a subbed card for testing has the following drawback. While you can read the sub and save the image, while testing, the card will not update like normal. If you put the original image back on the card at some later date, the card will not work because it has not been updated like it's legitimate counterparts. You will have to allow the card to remain in the stream for some time to allow the tiers you had, refresh.
APPLY AN ACTIVATION HEX FILE TO THE CARD:
If you are going to apply activation to a card, you must first use the clean function of ExtremeHU 1.63 to clean any 3M you previously installed on the card. Select the Clean Card icon from the toolbar on the right, and follow the Main Message Window prompts. Once the card is clean, you can apply an activation. This step is not necessary when using a Virgin, never programmed card.
The procedure is the same as for applying a 3M. Simply select ExtremeActv1.3 .hex and follow the screen prompts to install it.
Applying activation to a subbed card will allow additional channels than what was subscribed. However, the added tiers will fall off after a period of time and you will be left with the original subbed tiers.
In applying activation to a virgin card, the tiers will also eventually fall off. While you can use the tier blocking feature to prevent this, it is not recommended as this will make the card more of an ECM target.
HU CARD CLONING:
Cloning an HU card may be required under some circumstances.
a. The card was a canceled sub and is blacklisted. Some correct with the CMD90 blocking feature of ExtremeHU1.63 but not all.
b. The card's eeprom was corrupted and you do not have the original .bin.
c. You wish to clone a current paid sub .bin to your test card. (Save it's original image.)
The method you use to clone a card will depend on the program you are using to do this. HUExtreme 1.63 will work with Normal .hex files. You can also load in a .txt file saved in HUPro, or a .bin file saved in Eclipse or other program that saves a card read in .bin format.
If using another program and you have to convert file types....txt to hex or text to bin, etc. a good utility program to use is HUeeputil 1.4a. This allows you to load...say a .txt file, change timezone, zip code, etc. and save the image in any format you need. You can also extract the CAMID and ZKT table for use on an H card. This will be saved in a WT Image format. This can be used with an unlooper or as an image patch in BasicH3.2.
CLONE THE CARD:
1. In ExtremeHU 1.63 select File and Load eeprom. Load the selected .bin into the program.
2. If you have only the HU card and have not saved the .bin as yet, use the read eeprom icon on the right side of the toolbar and follow the instructions in the message window. Once the image is in memory, you can alter the zipcode, and other features selected on the right side of the main screen and then select File, and Save as...and save the file in the format you want.
3. Either way, since the image is in program memory, it can now be written to the card. Simply click on the Lightning Bolt on the toolbar and follow the instructions on the message screen.
4. When using ExtremeHU 1.63 always wait a second or two as the program always resets the HU Loader before performing an I/O function to a card.
FINAL NOTES ON THE HU CARD:
1. The method used to get into these cards by means of glitching, allows the card to be hacked. However, the problem is that this method, unlike the H card, can often loop a card under certain conditions. ANY TIME YOU GLITCH A CARD TO READ, WRITE, CLONE, 3M, YOU TAKE A CHANCE OF LOOPING A CARD.
2. Looped Cards: YOUR CARD IS LOOPED....IF
a. When inserted in the IRD, you get no preview channels.
b. A read in Winex in a programmer or in another program gives an ATR of FF.
c. A read in Winex in a programmer set to the P3 mode, gives a reset failed.
d. A read in any program gives an ATR of FF, 00, 90 00, or any other such reading.
A card with a few bytes corrupted at the end or the 4th byte being 00 can often be cleaned, using the clean function in one of the above programs. Just remember that if the ATR is corrupted, there is a greater chance of looping the card!
In this section, I will address the cards that will glitch but not load. If the 4th byte of the ATR is 25, then the card will read and write. If it won't, it is a voltage or timing problem with the loader and has nothing to do with the software. The glitch sequences used to get into a card are standard. They all work. If you are having a problem, it is usually that the glitch voltage reference is too high, or the timing of the loader oscillator is off (Usually too high in frequency). Those are the causes, not the software. If you do not have a daughter board and are not using a loader and you have good success, then excellent. If not, add one. It does help.
This Document is (c) copyright 2001 by Vorlon001, all rights reserved