|
IRD Interaction
Jtag for 6000
Posted by kittie2171 at ID-Discussions
Very simple jtag BEV 6000 - this works
This is a basic overview of how to do a TSOP read via the JTAG interface on a BEV 6000. This work is based on the "Very Simple JTAG" document produced by "Jim Skinny". Also addition info taken from the
id-discussions.com forums. Please note that this document is for the BEV 6000 only, other BEV receivers will have different JTAG solder points.
Also we have found that most of this software is very flaky in Windows 2000/NT/XP
So if you can find a machine running Windows 98 that would best.
The parts:
This JTAG interface requires 5 100ohm 1/4 watt or 1/2 watt resistors (brown-black-brown). Next you will need a DB25 connector. One with a hood assembly works well but comes is hard to find at Radio shack. You will need a gender changed to hook to the cable you use with your avr without you can find a female DB25 connector. Lastly, an 7" to 9" of cable. Some people used old floppy cable, we used telephone cable with the 5 different colors. We also put the resistors on a small circuit board that you can get from radio shack.
The procedure to build (see pictures):
1) First cut a lenght of 9" cable from the Telephone cable. Open it up to expose the red, yellow, green, and black wires. You will need a second lenght of wire to get another yellow and green. Mark these two with a black marker so u can tell them from the other yellow and green.
2) Next, solder one wire (wire #1) to pins 18-25 on the DB25 connector. Strip this wire more from then others, so you lie out the wire across all of the pins. Put a drop of solder on each one to connect the wire
3) Then solder 5 100 OHM resistors the circuit board and connect them to each the following pins on the DB25 connector. Pins 2, 3, 4, 5, and 13.
4) Then solder a wire to the other end of each resistor. Use the wires in sequential order. Wire #2 to pin 2, wire #3 to pin 3, wire #4 to pin 4, wire# 5 to pin 5 and wire #6 to pin 13.
Making the connections:
Once you have completed the JTAG assembly, you are ready to connect to your receiver. Disconnect your receiver from the power outlet, TV and satellite antenna. When you flip over the receiver you will see the JTAG port.
Looking at the IRD underside, with the front of case at the top, looking into the rectangular hole, the connections would be as follows:
Gnd NC NC NC NC NC NC
--7--6--5--4--3--2--1
Ground is easy, just solder the first wire (wire #1 with red tracer) that came
from pins 18-25 to one of the ground pad above the number 7 pad.
Next solder the wires that came from the DB25 connector as follows:
25Pin (2) Wire #2 to IRD pad 2
25Pin (3) Wire #3 to IRD pad 3
25Pin (4) Wire #4 to IRD pad 4
Now things change a bit:
25Pin (5) Wire #5 to IRD pad 7
25Pin (13) Wire #6 to IRD pad 5
Pads 1 and 6 are left empty. For added protection and maneuverability, lay the ribbon cable flat against the bottom of the receiver and apply some wide masking tape. This will secure the JTAG cable and make it easier to move the receiver around.
Using th JTAG:
Now you are ready to connect to you receiver and read the box keys and dump the TSOP to disk. You will be needing the JKEYS 1.3.1 program written by Dave2. This file has been included. Connect the 6000 IRD to your new JTAG interface. You can use the same cable you use with your AVR3. Plug in the IRD.
Now run the JKEYS program. When you dump a 6000 with jkeys it will not display properly. Here is how to read it:
Leave the starting address to 7FFFFFC0 and 16 in the Bytes field.
Hit save flash and save the small file somewhere.
Open the .bin file with the HEX editor included.
Here is the format:
ii ii FF FF ii ii FF FF bb bb FF FF bb bb FF FF bb bb FF FF bb bb
where ii represents IRD bytes and bb reprsents box key bytes.
Ignore the FF FF
Use the hex converter (under Tools) in the editor program to convert the hex ird keys to numeral so you can verify against your ird tag # on the back of the receiver. That way you know that your boxkeys are good.
Connection Points:
FIGURE #1 (LOOKING FROM BOTTOM)
Front of IRD
Gnd NC NC NC NC NC NC
--7--6--5--4--3--2--1
(LPT Port) EJTAG
PIN 2 - PAD 2 Wire # 2
PIN 3 - PAD 3 Wire # 3
PIN 4 - PAD 4 Wire # 4
PIN 5 - PAD 7 Wire # 5
PIN 13 - PAD 5 Wire # 6
PIN 18-25 GROUND Ground Above Pad 7
Prepared by K3/SB
February7, 2002
