DCH box testing soon.

DCH 70 DCH3416
Locked
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

DCH box testing soon.

Post by usbbdm »

I will start testing those boxes. I will soon get one DCH70 and one DCH3416 to start collecting firmware and NVRAM on it. Please wait as those devices will only be supported on USB JTAG NT.
Haloplaya
Junior Member
Posts: 19
Joined: Fri Oct 28, 2005 10:45 pm

Post by Haloplaya »

looking forward to this!

I know that the firmware can somehow be manipulated in the future to enable disk usage on the 3416 somehow... Thus faster than real time data transfer from the hdd installed for capturing programs.


Thanks for the update and great work!
cypherstream
Junior Member
Posts: 8
Joined: Thu Jan 25, 2007 10:39 am

Post by cypherstream »

With the cablecards acting as the 'separable security' module, is there even an XC chip on DCH models? Is that all integrated within the cable card now?
DMH2
Junior Member
Posts: 12
Joined: Thu Jan 10, 2008 9:07 am

Post by DMH2 »

DCH70 please
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

Today, I have opened both DCH70 and DCH3416 box. Both seems to have JTAG port.
I will soon play with these boxes. Keep tuned.
santino
Junior Member
Posts: 197
Joined: Wed Jul 19, 2006 4:50 pm

Post by santino »

Nice I have 1 also. Let us know how it goes. Will be nice to change UID on these boxes.
sphinx
Junior Member
Posts: 121
Joined: Wed Oct 08, 2008 1:42 am

Post by sphinx »

I've got a DCH3416 and DCH3200 that were once used on Comcast but got "disabled" when i cancelled my service. Let me know if you need any help testing.
DMH2
Junior Member
Posts: 12
Joined: Thu Jan 10, 2008 9:07 am

Post by DMH2 »

some progress in dch70 ???
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Testing DCH70.

Post by usbbdm »

Today I hooked up DCT70. I can read CPU ID but not able to get IMPCODE.
The problem should be with the TDI. Can anybody read the IMPCODE, for the test you can use DCT2500 as test target.
UserName
Junior Member
Posts: 268
Joined: Sat Jun 07, 2008 2:56 pm

Post by UserName »

hehe...........:)
sphinx
Junior Member
Posts: 121
Joined: Wed Oct 08, 2008 1:42 am

DCH3200 Images

Post by sphinx »

I just opened my DCH3200 and took pictures. Since they are so large, I have put them in a zip. There are a few spots that look like jtag ports, but they are filled in with solder already.

Here are 2 mirrors for it:
http://www.sendspace.com/file/5llg8t
http://www.mediafire.com/?sharekey=e506 ... b9a8902bda

I will upload DCH3416 next.
sphinx
Junior Member
Posts: 121
Joined: Wed Oct 08, 2008 1:42 am

DCH3416 Images

Post by sphinx »

Here is the DCH3416 and 2 mirrors to download the images:

http://www.sendspace.com/file/huohlz
http://www.mediafire.com/?sharekey=e506 ... b9a8902bda

These boxes are just sitting around and were once activated on Comcast. They stopped working because I cancelled the service about 6 months ago. They are just sitting around and I would like to do whatever it takes to get them online again. Let me know if theres anything you guys need me to do.

Can someone identify which jtag port is the one to connect to? There seems to be 3 on both boxes that would require a 10-pin header. usbbdm, I'd appreciate any input.
shappyking
Junior Member
Posts: 192
Joined: Mon Oct 13, 2008 5:33 pm
Location: Jamaica

Post by shappyking »

usbbdm wrote:Today I hooked up DCT70. I can read CPU ID but not able to get IMPCODE.
The problem should be with the TDI. Can anybody read the IMPCODE, for the test you can use DCT2500 as test target.
I'm a programmer, so i will try to assist in anything i can, so can you tell me what the IMPCODE is? So i can go about trying to read the IMPCODE. There is this POKE command that i'm reading about, and it looks like it can help you with reading the IMPCODE, but i need to know exactly what the IMPCODE is..
Let's Share Info & Crack the XC Together ;)
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

You need to read the MIPS document about EJTAG.
Actually I found why the JTAG not directly working on DCT70. It is not the pin header was wrong. It is because there is another JTAG device in front of the Broadcom chip. We need to inject more bits after we inteject the data or IR. I will resume this project after the GUI for modem is finished.
UserName
Junior Member
Posts: 268
Joined: Sat Jun 07, 2008 2:56 pm

Post by UserName »

its simple by just disable that other part ;)
Locked

Who is online

Users browsing this forum: No registered users and 6 guests