How To Add Tiers to an HU card.

Here is the step by step process to manually add tiers to your

subbed or cloned subbed card leaving the subbed tier information

undisturbed so they will not fall off.

1. Read and save your original bin in extreme 1.7x or greater.

2. Your epprom will still show in the epprom dump display.

3. Use the pulldown menu under VIEW, and take a look at "tier data".

4. You will see all the tiers you sub to along with their expiration

dates. This info changes each month and is subscriber specific.

All subscribers are assigned one of 256 groups and each group has

unique sets of expiration dates and checksum numbers for every

possible tier. If that date or checksum doesn't match your group's

date for that tier, it will go down very shortly. This is why we

don't want to disturb them.

Unfortunately activation scripts replace all of them with their

own dates that rarely if ever match your group's data. We need to

add the non subbed tiers manually to the bin and write it back to

your card.

5. Next you need access to the latest tier list. Write down a list of

the non subbed tiers you want to add. Let's use HBO for example.

I like to add 3 tiers for the same channels, as they get wiped one

at a time. This helps them stay up longer. In HBO's case, I'll add

3335,61FA, and 62BF. Do the same for all others you want.

6. Now decide what expiration date you want. This doesn't matter, but

the later the better within reason. Remember, once this date passes,

you will have to go and edit your bin with a new one. I like about 90

days ahead, so in our example, pick 06/15/2002.

7. In extreme under tools, open the date conversation utility. Plug in

06/15/2002 and click on the = sign. You'll get a two byte code of

7DCF. Write this next to each of your new tiers, for example: 3335 7DCF,

61FA 7DCF, 62BF 7DCF.

8. You now have 4 of the required 6 bytes for each of your new tiers.

You now need to calculate the checksum bytes for each tier. Please

note, that the checksum generater is on the card, and each card

generates a different and unique checksum. You can not use a cloned

bin from one card and get the correct check sum from another card.

9. In extremeHU under tools, open the checksum calculator. You will

need your card in the loader as the calculator uses routines only

found on the card's rom. For each tier, enter the 4 bytes without

any spaces and hit return. The checksum for that one will be generated

in the message window of extremeHU. Write that down next to the

corresponding 4 bytes on you tier list. Example: 33 35 7D CF 2B 3C.

Remeber that this is only an example, the checksum you get will be

different. Repeat this until you have all checksums for the tiers

you're adding.

10.Open your saved bin in extremeHU and save it under another name.

11.Now you will edit your copy to add the new non subbed tiers to

your undisturbed subbed tiers, and then save it.

12.If you are not looking at the epprom dump, go to the pulldown menu

under VIEW, and select EPPROM dump. Place cursor in the data area

of the message window and right click. Select edit mode - on. You'll

notice the epprom data has changed in some areas. This is because

those areas are encrypted. They are decrypted in the edit mode.

13.The area you're interested in begins at address 2106-22F1. Look at

address 2106. This is the first address of the first tier. If you

have had a sub located there and then later canceled it that address

may be 00 00 00. You may see the first of two bytes of your first

subbed tier. 2107 has the second, 2108 & 2109 are the expiration date

bytes, and 210A & 210B are the checksum bytes. The next 6 bytes are

your second subbed tier data, and so on. It is important to note

that the tier addresses are in six byte blocks. Once again the first

one starts at 2106, and the second one starts at 210C, the third one

starts at 2112,etc. You can see how this goes. You can not just add

new tiers any where in this area, they must start at, and end at

specific addresses. Using the large arrows to the left side of the

popup window of the edit line, scroll down until you come to bytes

containing 00. Make sure you have counted down by blocks of six bytes

for each block of tiers, so you can start from the correct place.

Then you may start to add your new tier info, just like the subbed

ones above.

14.Enter the data carefully one byte at a time until you reach the end

of the row. Click on "write row" before moving on the the next one or

the data will not be saved. Also you will not always end each row with

the sixth byte of a tier, so remember where you left off when you

start the next row. Continue adding all your new tier data and recheck

as necessary.

15.When you are satisfied that your entries are complete and accurate,

close the editor and save your bin. Write this bin to your card, and

you're in business. Just re-write the bin when the non-subs fall off

below your comfort level.

I realize this is time consuming, but that is part of the fun. The

easy way would be to chip in with a couple friends for a platinum sub

and clone it to all cards. Just do ppv wipes as needed.

Note:

Your subbed tiers will be updated monthly as their expiration

dates near. It is a good idea to read your card when refreshing the

bin to see just when this occurs. Just view the tier data after

reading. If they have been updated, go to the epprom dump, activate

the edit mode, and write down the tier data for each subbed tier. You

can also cut and paste the data into notepad if you like. The go back

to saved bin you used to refresh the card and open that up. Edit the

subbed tier data on that bin and save it. Write this new bin to the

card and you are back in business.

Remember, that each card will generate a different checksum number,

so you can not use just any card to generate your checksum. Dave will

re-generate this checksum, from several times a day to several times

a month, the new number he gets will be stored on the card, this

how he knows if you tier is legit. I have updated the tier list, and

then read the card hours later, only to find the checksum has been

changed. If the tier hex, date hex, and checksum hex don't match, you

don't watch TV.

I hope this helps. Enjoy.

MowerX's Reverse Tier List

==========================

This list contains 238 tiers comprising 225 channels.

Report compiled on March 06, 2002.

Raw list, sorted by tier number:

--------------------------------

332A: MAX 512, MAXW 514, MMAX 513, SUND 549

332C: A&E 265

332D: ABCE 386

332E: BTV 353

332F: CBSE 380

3330: CMT 327

3331: CNBC 355

3332: CNN 202

3333: CRT 203

3334: CSP1 350

3335: HB2W 505, HBFW 508, HBO 501, HBO2 502, HBOF 507, HBOS 503, HBOW

504,

SUND 549

3336: EXTR 542, FLIX 547, SHO 537, SHO2 538, SHO3 539, SHOW 540, SUND

549,

TMC 544, TMCW 545

3337: DSC 278

3338: DIS1 290

333A: E! 236

333B: ENCE 526, ENCW 527

333C: BSTZ 523, ENCE 526, ENCW 527, STZE 520, STZT 522, STZW 521, SUND

549

333E ?

333F: ESN 207, ESPN 206

3340: FAM 311

3341: FOX 388, FOXW 389

3342: CSP1 350, DSTW 212, DTV 200, DTV 201, DTV 220, DTV 246, DTV 390,

DTV 488, DTV 490, DTV 492, DTV 496, DTV 499, DTV 500, DTV 516,

DTV 551, DTV 603, DTV 611, DTV 633, DTV 801, LINK 375, MLB 219,

NCAA 218, NFL 213, PBSU 377, PPV 100s, SHOP 234, SPPV 700s, TBN 372,

WORD 373

3343: HLN 204

3344: MUCH 339

3345: NBCE 382

@3346: PBTV 595

3347: CNN 202, DIS1 290, DIS2 291, DSC 278, FN I 358, HLN 204, HSN

240,

QVC 317, TBS 247, TCM 256, TNN 325, TOON 296, TWC 362, USA 242,

VH1 335

3349: VH1C 337

334A: DSCI 284

334B: DCIV 285

334C: PBTV 595

334D: HINT 271

334E: A&E 265, AMC 254, ANC 364, APL 282, BBCA 264, BET 329, BIO 266,

BOOM 297, BRVO 273, BTV 353, CMT 327, CNBC 355, CNN 202, CNSI 205,

COM 249, CRT 203, CSP2 351, DCIV 285, DH&L 286, DHC 279, DIS1 290,

DIS2 291, DIY 230, DSC 278, DSCI 284, DSTR 369, DWNG 287, E! 236,

FAM 311, FMC 258, FN I 358, FNC 360, FOOD 231, FX 248, GALA 404,

GAME 309, HALL 312, HGTV 229, HINT 271, HIST 269, HLN 204, HLTH 368,

HSN 240, IFC 550, KIDS 294, LIFE 252, LMN 253, MNBC 356, MTV 331,

MTV2 333, MUCH 339, NGC 276, NIK1 299, NIK2 300, NOG 298, NWI 366,

OLN 608, OXGN 251, PAX 255, PBS 384, PBSK 295, QVC 317, SCFI 244,

SNBC 370, SOAP 262, SPD 607, TBS 247, TCC 371, TCM 256, TDIS 292,

TECH 354, TLC 280, TNN 325, TOON 296, TRAV 277, TRIO 315, TSO 631,

TVLD 301, TWC 362, UNIV 402, USA 242, VH1 335, VH1C 337, WE 260,

WGN 307

334F: ABCE 386, CBSE 380, FOX 388, FOXW 389, NBCE 382

@3350: ABCE 386, ABCW 387, CBSE 380, CBSW 381, FOX 388, FOXW 389, NBCE

382,

NBCW 383

3351: SCFI 244

3352: TBS 247

3353: TCM 256

3354: TLC 280

3355: TNN 325

3356: TNT 245

3357: TOON 296

3358: TWC 362

335C: A&E 265, AMC 254, APL 282, BET 329, BIO 266, BOOM 297, BRVO 273,

BTV 353, CMT 327, CNN 202, COM 249, CRT 203, DCIV 285, DH&L 286,

DIY 230, DSC 278, DSCI 284, DSTR 369, DWNG 287, E! 236, FAM 311,

FOOD 231, FX 248, GALA 404, GAME 309, HALL 312, HGTV 229, HINT 271,

HIST 269, HLN 204, HLTH 368, HSN 240, IFC 550, KIDS 294, LIFE 252,

MNBC 356, MTV 331, MTV2 333, NGC 276, NIK1 299, NIK2 300, NOG 298,

NWI 366, OLN 608, OXGN 251, PBSK 295, QVC 317, SCFI 244, SNBC 370,

SOAP 262, SPD 607, TBS 247, TCC 371, TCM 256, TDIS 292, TLC 280,

TNN 325, TOON 296, TRAV 277, TRIO 315, TVLD 301, TWC 362, UNIV 402,

USA 242, VH1 335, VH1C 337, WE 260

335E: USA 242

3364: MLB 219

3368: CSP1 350, CSP2 351

3369: PBS 384, PBS 384

336A: TRIO 315

336B: NWI 366

336E: DIS2 291

336F: LOVE 528

3370: WSTN 529

3371: MYST 530

3372: ACTN 532

3373: TRUE 531

3374: WAM 533

3375: ESN2 209

@3376: ACTN 532, BSTZ 523, ENCE 526, ENCW 527, LOVE 528, MYST 530,

STZE 520,

STZT 522, STZW 521, SUND 549, TRUE 531, WAM 533, WSTN 529

3377: MC1 822, MC10 818, MC11 817, MC12 816, MC13 819, MC14 823, MC15

824,

MC16 825, MC17 821, MC18 828, MC19 829, MC20 842, MC21 833, MC22 830,

MC23 831, MC24 805, MC25 836, MC26 834, MC27 843, MC29 804, MC3 812,

MC3 814, MC30 802, MC31 813, MC4 811, MC5 808, MC6 839, MC6 841,

MC64 806, MC7 840, MC9 838

3378: A&E 265, AMC 254, ANC 364, APL 282, BBCA 264, BET 329, BRVO 273,

BTV 353, CMT 327, CNBC 355, CNN 202, CNSI 205, COM 249, CRT 203,

CSP2 351, DHC 279, DIS1 290, DIS2 291, DSC 278, DSTR 369, DTV 488,

DTV 490, DTV 492, DTV 496, DTV 499, E! 236, ECS 208, FAM 311,

FMC 258, FN I 358, FNC 360, FOOD 231, FX 248, GALA 404, GAME 309,

HALL 312, HGTV 229, HIST 269, HLN 204, HLTH 368, HSN 240, IFC 550,

LIFE 252, LMN 253, MNBC 356, MTV 331, MTV2 333, MUCH 339, NGC 276,

NIK1 299, NIK2 300, NOG 298, NWI 366, OLN 608, OXGN 251, PAX 255,

QVC 317, SCFI 244, SNBC 370, SPD 607, TBS 247, TCC 371, TCM 256,

TDIS 292, TECH 354, TLC 280, TNN 325, TOON 296, TRAV 277, TRIO 315,

TSO 631, TVLD 301, TWC 362, UNIV 402, USA 242, VH1 335, WE 260,

WGN 307

337A: DTV 644, FSSW 643

337B: HITS 629

337C: FOXP 628

337D: MSG 621

337E: FSRM 645

337F: FOXW 652, FSW2 653

3380: FOXD 636

3381: FOXC 639

3382: FOXE 620

3383: FSNY 624

3384: FXOH 637

3385: FOXB 654

3387: DTV 627, FXSS 630

3388: SUN 632

@3389: DTV 627, DTV 644, DTV 648, EMP 626, FOXB 654, FOXC 639, FOXD

636,

FOXE 620, FOXN 641, FOXP 628, FOXW 652, FSAZ 649, FSFL 634, FSMW 647,

FSNW 651, FSNY 624, FSRM 645, FSSW 643, FSW2 653, FSWD 613, FXCN 638,

FXOH 637, FXSS 630, GOLF 605, HITS 629, MSG 621, NESN 623, OLN 608,

SPD 607, SUN 632

338A: ACTN 532, ENCE 526, ENCW 527, LOVE 528, MYST 530, TRUE 531, WAM

533,

WSTN 529

338E: FN I 358

338F: GOLF 605

3390: GOLF 605

3391: A&E 265, AMC 254, BET 329, BRVO 273, BTV 353, CMT 327, CNBC 355,

CNN 202, CNSI 205, COM 249, CRT 203, CSP2 351, DSC 278, E! 236,

FAM 311, FN I 358, FNC 360, FOOD 231, GAME 309, HGTV 229, HIST 269,

HLN 204, HLTH 368, HSN 240, LIFE 252, MNBC 356, MTV 331, MTV2 333,

MUCH 339, NGC 276, NIK1 299, NIK2 300, NWI 366, QVC 317, SCFI 244,

TBS 247, TCM 256, TECH 354, TLC 280, TNN 325, TOON 296, TRIO 315,

TSO 631, TVLD 301, TWC 362, USA 242, VH1 335

3395: NRTC 581

3396: MC32 803, MC33 807, MC35 810, MC50 820, MC54 809

3397: BTV 353, CRT 203, CSP2 351, ESN 207, HLTH 368, HSN 240, MNBC 356

3398: MC1 822, MC17 821, MC19 829, MC21 833, MC7 840

3399: FXCN 638

339A: EMP 626, FOXB 654, FOXC 639, FOXD 636, FOXE 620, FOXW 652, FSMW

647,

FSNW 651, FSRM 645, FSW2 653, FXCN 638, FXOH 637, FXSS 630, HITS 629,

NESN 623

339B: ABCE 386, ABCW 387, CBSE 380, CBSW 381, FOX 388, FOXW 389, NBCE

382,

NBCW 383, PBS 384

339F: AMC 254

33A0: NESN 623

33A3: CSP1 350, LINK 375, PBSU 377, TBN 372, WORD 373

33A6: FOXN 641

33A7: HSN 240

33A8: HGTV 229

33A9: BET 329

33AA: HIST 269

33AB: IFC 550

33AC: BRVO 273

33AD: SHOP 234

33B9: DH&L 286

33BA: DWNG 287

33BC: NCAA 218

33C0: ACTN 532, LOVE 528, MYST 530, TRUE 531, WAM 533, WSTN 529

33C3: DSTR 369

33C4: TCC 371

@33C5: BIO 266, BOOM 297, DCIV 285, DH&L 286, DIY 230, DSCI 284, DWNG

287,

HINT 271, KIDS 294, PBSK 295, SOAP 262, VH1C 337

33C6: MC32 803, MC33 807, MC35 810, MC50 820, MC54 809

33D1: EMP 626

33E2: ABCW 387

33E3: CBSW 381

33E4: NBCW 383

33E5: ABCE 386, ABCW 387, CBSE 380, CBSW 381, FOX 388, FOXW 389, NBCE

382,

NBCW 383

33E6: OLN 608

33E7: ECS 208

33E8: SPD 607

33E9: FSNW 651

33FF: ABCW 387, CBSW 381, DTV 488, DTV 490, DTV 492, DTV 496, DTV 499,

NBCW 383

3414: A&E 265, ANC 364, BET 329, CMT 327, CNBC 355, DIS1 290, DIS2

291,

DSC 278, E! 236, ECS 208, FAM 311, FN I 358, FNC 360, HGTV 229,

HIST 269, MTV 331, NIK1 299, NIK2 300, PAX 255, QVC 317, SCFI 244,

SNBC 370, TLC 280, TNN 325, TRIO 315, VH1 335

341D: FNC 360

342C: FOOD 231

342D: HLTH 368

342E: QVC 317

343F: APL 282

3441: WE 260

3442: ENCW 527

3443: WGN 307

3444: TBN 372

3447: FSFL 634

3448: DTV 648, FSMW 647

3449: FSAZ 649

344A: BSTZ 523

3450: STZT 522

*345D: ESN 207

345E: DHC 279

3460: GAME 309

3476: NIK1 299

3477: NIK2 300

3478: TVLD 301

3479: LIFE 252

347A: COM 249

347B: MTV 331

347C: MTV2 333

347D: VH1 335

347E: DIS1 290, DIS2 291

34AA: TDIS 292

34BB: MNBC 356

61A8: TECH 354

61B2: WE 260

61C5: TRAV 277

61C9: CNSI 205

61CD: CSP1 350, DTV 488, DTV 490, DTV 492, DTV 496, DTV 499, DTV 611,

DTV 633, LINK 375, PBSU 377, TBN 372, WORD 373

61D6: ANC 364

61D7: HBO 501

61D8: HBOW 504

61D9: HBO2 502

61DA: HB2W 505

61DB: HBOF 507

61DC: HBFW 508

61DD: HBOS 503

61DE: SHO 537

61DF: SHOW 540

61E0: SHO2 538

61E1: SHO3 539

61E2: EXTR 542

61E3: MAX 512

61E4: MAXW 514

61E5: MMAX 513

61E6: TMC 544

61E7: TMCW 545

61E8: FLIX 547

61E9: SUND 549

61EC: FOXW 389

61ED: FMC 258

61F1: BBCA 264

61FA: HB2W 505, HBFW 508, HBO 501, HBO2 502, HBOF 507, HBOS 503, HBOW

504,

SUND 549

61FB: MAX 512, MAXW 514, MMAX 513, SUND 549

61FC: SUND 549, TMC 544, TMCW 545

61FD: EXTR 542, FLIX 547, SHO 537, SHO2 538, SHO3 539, SHOW 540, SUND

549

61FE: IFC 550, SUND 549

620A: STZE 520, STZW 521

620D: CSP1 350, DSTW 212, DTV 200, DTV 201, DTV 220, DTV 246, DTV 390,

DTV 488, DTV 490, DTV 492, DTV 496, DTV 499, DTV 500, DTV 516,

DTV 551, DTV 603, DTV 611, DTV 633, DTV 801, LINK 375, MLB 219,

NCAA 218, NFL 213, PBSU 377, PPV 100s, SHOP 234, SPPV 700s, TBN 372,

WORD 373

6216: GALA 404

6217: UNIV 402

6220: SNBC 370

6228: FX 248

6229: FSWD 613

6237: AMC 254, CMT 327, CNN 202, CRT 203, FAM 311, FOOD 231, GALA 404,

GAME 309, HIST 269, HLN 204, HLTH 368, HSN 240, MNBC 356, MTV 331,

MTV2 333, NIK1 299, NIK2 300, QVC 317, SNBC 370, TBS 247, TDIS 292,

TLC 280, TOON 296, TRAV 277, TWC 362, UNIV 402, USA 242, VH1 335

6245: ABCE 386, ABCW 387, CBSE 380, CBSW 381, FOX 388, FOXW 389,

Locals 900s,

NBCE 382, NBCW 383

6246: ABCE 386, ABCW 387, CBSE 380, CBSW 381, FOX 388, FOXW 389,

Locals 900s,

NBCE 382, NBCW 383

6250: PBSU 377

6251: LINK 375

6275: WORD 373

6289: PAX 255

628E: DIY 230

628F: SOAP 262

6290: BIO 266

6291: BOOM 297

6292: HALL 312

6293: OXGN 251

6294: PBSK 295

6295: KIDS 294

6297: BIO 266, BOOM 297, DCIV 285, DIY 230, DSCI 284, HALL 312, HINT

271,

KIDS 294, OXGN 251, PBS 384, PBSK 295, SOAP 262, VH1 335, VH1C 337

629D: NOG 298

62A1: A&E 265, APL 282, BOOM 297, BTV 353, CNBC 355, CRT 203, DSC 278,

ECS 208, ESN 207, FOOD 231, GAME 309, GOLF 605, HGTV 229, HIST 269,

HLN 204, KIDS 294, MNBC 356, TLC 280, TRAV 277, TWC 362

62A2: MNBC 356

62A4: LMN 253

62AA: BSTZ 523

62B1: A&E 265, ANC 364, APL 282, BBCA 264, BET 329, BIO 266, BOOM 297,

BRVO 273, BTV 353, CNBC 355, CNN 202, CNSI 205, CRT 203, CSP2 351,

DHC 279, DIS1 290, DIS2 291, DIY 230, DSC 278, FAM 311, FN I 358,

FOOD 231, GALA 404, GAME 309, HALL 312, HGTV 229, HIST 269, HLN 204,

HLTH 368, KIDS 294, LIFE 252, MNBC 356, MTV 331, MTV2 333, NGC 276,

NIK1 299, NIK2 300, NOG 298, OXGN 251, PBS 384, SCFI 244, TBS 247,

TCM 256, TDIS 292, TECH 354, TLC 280, TOON 296, TRAV 277, TVLD 301,

TWC 362, UNIV 402, USA 242, VH1 335, WGN 307

62B2: STZW 521

62B3: AMC 254, APL 282, BIO 266, BOOM 297, BRVO 273, COM 249, CRT 203,

CSP2 351, DIS2 291, DIY 230, E! 236, FMC 258, FNC 360, FOOD 231,

FX 248, GALA 404, HALL 312, HGTV 229, HIST 269, HSN 240, KIDS 294,

LIFE 252, MNBC 356, MTV 331, MTV2 333, NIK2 300, NOG 298, OXGN 251,

PAX 255, PBSK 295, QVC 317, SCFI 244, SNBC 370, SOAP 262, TDIS 292,

TLC 280, TRAV 277, TVLD 301, UNIV 402, VH1 335

62BC: EXTR 542, FLIX 547, SHO 537, SHO2 538, SHO3 539, SHOW 540

62BD: TMC 544, TMCW 545

62BE: MAX 512, MAXW 514, MMAX 513

62BF: HB2W 505, HBFW 508, HBO 501, HBO2 502, HBOF 507, HBOS 503, HBOW

504,

SUND 549

62C0: SUND 549

62C2: HBO 501

62C3: HBOW 504

62C4: HBO2 502

62C5: HB2W 505

62C6: HBOF 507

62C7: HBFW 508

62C8: HBOS 503

62C9: SHO 537

62CA: SHOW 540

62CB: SHO2 538

62CC: SHO3 539

62CD: EXTR 542

62D1: TMC 544

62D2: TMCW 545

62D3: FLIX 547

62D4: FMC 258

62D5: MAX 512

62D6: MAXW 514

62D7: MMAX 513

62E3: DTV 644, FSSW 643

62E7: DTV 627, FOXN 641, FOXP 628, FSAZ 649

62EF: NGC 276

62F2: TSO 631

6311: A&E 265, APL 282, BET 329, BRVO 273, BTV 353, COM 249, DSC 278,

DSTR 369, E! 236, FX 248, HALL 312, HGTV 229, IFC 550, LIFE 252,

NGC 276, NOG 298, NWI 366, OLN 608, OXGN 251, SCFI 244, SPD 607,

TCC 371, TCM 256, TNN 325, TRIO 315, TVLD 301, WE 260