DCH box testing soon.

DCH 70 DCH3416
Locked
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

Not that simple, the TDO and TDI is chained. You need to inject number of bits to be able to arrive to the device you want.
fdsa
Junior Member
Posts: 1
Joined: Mon Nov 24, 2008 7:48 pm

Post by fdsa »

Yes, TD lines basically just look like a long shift register.

if you want to get 8 bits out of a generic single shift register, you just shift 8 in. if you daisy chain 2, 8 bit shift registers and want to get 8 bits out of the first one, you have to shift 16 bits, thats what he is saying. If there was a device in front of the BCM and he doesnt know about it, he will never shift all the bits out w/o adding the additional device's register length to the TCK count.
UserName
Junior Member
Posts: 268
Joined: Sat Jun 07, 2008 2:56 pm

Post by UserName »

yea then i am wrong
maybe i got lucky worked for me.
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

First thing I will do is to find out the IR length of DCH70 and then write a slower version of EJTAG that will allow JTAG TDO/TDI to be chained. Then it will be the same as DCT2500 to read and programming.
As far as the XC chip, it is in the card now and there is MC68331 CPU talks to the XC chip. To access the CPU on the card we need to use BDM to talk to it.
shappyking
Junior Member
Posts: 192
Joined: Mon Oct 13, 2008 5:33 pm
Location: Jamaica

Post by shappyking »

usbbdm wrote:First thing I will do is to find out the IR length of DCH70 and then write a slower version of EJTAG that will allow JTAG TDO/TDI to be chained. Then it will be the same as DCT2500 to read and programming.
As far as the XC chip, it is in the card now and there is MC68331 CPU talks to the XC chip. To access the CPU on the card we need to use BDM to talk to it.
So the DCT2500's XC chip should be a easier nut to crack?
Let's Share Info & Crack the XC Together ;)
bassam19
Junior Member
Posts: 6
Joined: Fri Dec 07, 2007 3:57 pm

Post by bassam19 »

i just got a dch3416 that used to be on the comcast network any advances in this area?
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

DCH3416's JTAG does not generate any output.
DCH70 box only gives the CPUID and no other JTAG command was accepted.
merkin
Junior Member
Posts: 246
Joined: Thu Jun 28, 2007 8:49 pm

Post by merkin »

sphinx wrote:I just opened my DCH3200 and took pictures. Since they are so large, I have put them in a zip. There are a few spots that look like jtag ports, but they are filled in with solder already.

Here are 2 mirrors for it:
http://www.sendspace.com/file/5llg8t
http://www.mediafire.com/?sharekey=e506 ... b9a8902bda

I will upload DCH3416 next.
I was looking at dch-3200. How do you remove the black security clip on the back? I want to open'er up. What kind of bit are those screws?
sphinx
Junior Member
Posts: 121
Joined: Wed Oct 08, 2008 1:42 am

Post by sphinx »

I had to break the black clip in order to open it. You can use pliers to take the screws out but it requires a lot of effort. Otherwise you need to buy a security tool. Its like a female torx.
stomperz
Junior Member
Posts: 321
Joined: Sun Nov 11, 2007 7:07 am
Location: Chicago

Post by stomperz »

sphinx wrote:I just opened my DCH3200 and took pictures. Since they are so large, I have put them in a zip. There are a few spots that look like jtag ports, but they are filled in with solder already.

Here are 2 mirrors for it:
http://www.sendspace.com/file/5llg8t
http://www.mediafire.com/?sharekey=e506 ... b9a8902bda

I will upload DCH3416 next.
Hi

just got a dch3200 today and was wondering if you made any progress with your box?

Were you able to find the jtag pins?
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

I found JTAG pins on both DCH70 and DCH3416. But non of the JTAG can generate normal JTAG response. No success. DCH70 the TDI cannot be fed in. Seems the TDI is disabled.
elkora
Junior Member
Posts: 245
Joined: Wed Jan 03, 2007 8:57 pm

Post by elkora »

usbbdm wrote:I found JTAG pins on both DCH70 and DCH3416. But non of the JTAG can generate normal JTAG response. No success. DCH70 the TDI cannot be fed in. Seems the TDI is disabled.
so this new boxes have the same layout of DN cardless IRD's (322-522)
santino
Junior Member
Posts: 197
Joined: Wed Jul 19, 2006 4:50 pm

dch 70 rumor

Post by santino »

There is a rumor that the dch-70 are working with out having to put a filter. If true means someone was able to program something. Im gonna try to get one so we can really find out how it was made.
reactiv8ion
Junior Member
Posts: 1
Joined: Wed Sep 23, 2009 4:41 pm

Post by reactiv8ion »

updates? anyone?
UserName
Junior Member
Posts: 268
Joined: Sat Jun 07, 2008 2:56 pm

Post by UserName »

you must find yourself ....
do not believe what i say 10% its true :confused:
Locked

Who is online

Users browsing this forum: No registered users and 7 guests