BSBOOT public version 01 README.txt


What is BSBOOT?
-----------------

BSBOOT is a modification of the wtplus2 code.  It allows an unlooper act like a phoenix style interface (aka card reader/programmer) with 'Black Sunday' (BS) ECM'd cards, while still preserving existing unlooper functionality.


How does it work?
-----------------

Like wtplus2, phoenix mode is enabled by placing a card in the unlooper when the atmel is reset.  If the atmel is reset without a card inserted, it will be in 'unlooper' mode.  Note that current software supporting the phoenix interface (BasicH, WinExplorer, SLE44e_p, etc) does not know how to reset the atmel.  Because of this, it is necessary that the atmel reset pin (pin 1) not be connected to the circuit in most unloopers. Disconnecting this pin causes the atmel to be reset only at power up.

Once in phoenix mode, the unlooper waits for PC software to reset the card.  When a card reset attempt is detected,  the card is reset and the unlooper applies a glitch to get by the damage cause by the BS ECM.  At that point, the card should function normally while in the unlooper, returning an ATR (assuming you have no other damage to your cards EEPROM).  The unlooper then forwards all communication between the PC and card.


Will it work with any H card?
-----------------------------

If your card was not hit by the BS ECM or does not have damage to the 8000h location, you should not use this software, you don't need it and it won't do you any good.  It will end up glitching your card unnecessarily, though it may work fine with such cards,

This software will not repair any damage done to your cards EEPROM, nor will it remove any existing software on your card.  So if your card is looped or damaged in other ways, you will need to use other software to repair your card first.  All this software will do is glitch past the ROM code that checks whether or not location 8000h contains a 33h (or 83h).

If you have attempted to unloop your BS card with WTX, there is a good chance that your EEPROM is now corrupt and you will need to repair it before using this software.


How can I repair my card if locations other than 8000h are corrupt?
-------------------------------------------------------------------

Su2v2 should be able to repair your cards EEPROM so that your card is usable with this software (look for other guides for info on installing su2 atmel code and using su2v2).  Try reading or repairing your card with su2v2 first, it will probably only be readable/repairable in setup 3 mode.  If you are able to do this successfully, then there is a good chance your card will work with wtbsboot.


But what good is this software?
-------------------------------

If your card works in this set up, you will be able to use BasicH, WinExplorer, SLE44{e|a}_p, and other software designed to work with the phoenix interface.  That means you can use that software to clean, program or emulate with your BS card.


What will it NOT do?
--------------------

It will not repair, reprogram, or modify your card.  Your card will only work in an unlooper with this software or in another device like a bootsleeve.
It will not work with Hu cards.
It will not assist unlooper software in unlooping your card...WTX will still not unloop your card.


Installation Instructions.
--------------------------

First, make sure your cards EEPROM is not damaged (other than the 8000h area).  If you had software installed on your card during the ECM, there is a good chance nothing was damaged other than the 8000h area.  If you tried to unloop your card with WTX, there is likely damage.  Use SU2V2 to check or repair your card.

Second, if your unlooper supports ICP (In-Circuit-Programming), shut off power to your unlooper, place the atmel you want programmed securely in the socket (ALL pins in socket).  Boot to dos, turn unlooper power on and connect it to your PC com1, and run wtbsboot.exe.  Your chip should program and verify correctly.  If your unlooper does NOT support ICP, you will need to program the atmel with another device, look for the binary or hex versions of this program.

Once your chip has been programmed, shut off the power, remove the chip and bend pin 1 slightly -- carefully! -- and reinsert the chip into its socket.  Pin 1 should not be in the socket.  Pin 1 is the top left pin when viewing the atmel vertically, pins facing away from you with notch end up.  It may have a small dot next to it.


Using your unlooper in 'PHOENIX' mode.
--------------------------------------

Shut off power to your unlooper, insert card in slot, restore power to your unlooper.  One of the leds besides the power led (assuming you have one) should light up.  Start up BasicH or WinExplorer and read your card info.  You may remove your card and insert other cards if you want.  Once started in phoenix mode, the unlooper will stay in that mode until it is powered off.


Using your unlooper in 'UNLOOPER' mode.
---------------------------------------

Remove your card from unlooper, turn power off and back on.  Start your unlooper software.  You may now insert your card when the unlooper software tells you to.


Using your BS card with WTBS to emulate.
----------------------------------------

First, you need to 'Aux' your card. To do this, put your unlooper in 'phoenix' mode as described above.  Clean card to 26 updates in BasicH. Quit Windows and drop to dos. Put your Unlooper on Com 1 and go into the directory where you have your emulator files. Type: sle44a_p. This will create your aux card.

Finally, move your unlooper to com 2 and setup your ird interface on com 1. Start your emulator like you'd normally would. 


Versions.
---------

su2bs01 - supports SU2 protocol 
wt2bs01 - supports WT2 protocol
wtxbs01 - supports WTX protocol

Note that the above versions do support full unlooper operations except for the atmel eeprom counter information; counters will always report 0 in these versions.

While SU2 code normally supports WT2 encryption as well as SU2 encryption, this version does not support WT2 encryption.

EXE files are dos loaders for unloopers suporting ICP.  Binary and HEX files are also included in separate directories.

Troubleshooting.
----------------

If you have done all the above correctly, your card is repaired with su2v2, and you still get 'reset failed' in BasicH, etc., then the glitch may not work with your card.  You will need to wait for an update.


Things you should know.
-----------------------

This version only uses one set of glitch parameters, and upon a card reset it will try that glitch forever until it succeeds.  On most cards, it only takes one or two attempts to successfully get an ATR after a reset, but there may be cards that will not respond to this glitch and the repeated glitch attempts may harm it.

This program should not be used illegally, it is for educational purposes only. Nor should it be offered for sale.  This work was made possible by the efforts of several individuals and thanks go to those who offer the efforts of their work freely.

Feel free to distribute to those who have a legal use for it.

020501-01
