NEW J-TAG 3.6 BYTES please read before the questions are asked

[spikebaby]

FIRSTLY BIG THANKS TO MY MATE RED21 BABY AND THE LEGEND ISO_MICK

3.6 Will be rolling out pretty soon so your byte address will change, it has already started in some areas, here is how to find your bk from your stb. once the bytes are known fron your specific area, please post below failing that i will post when i have them...

Use flashprogrammer (download from same site as ocd commander)

Select flash from tab, then chip (intel 28F640J3), tick endian box, start it at $000000.

Select CPU tab, then ARM 940T.

Select program tab and check that u have these details in all boxs:

CPU Type = ARM940T
Target RAM Starts at:$00000000
Flash EEPROM Device: 28F640J3
Start at:$00000000
WIdth 16 x 1

I think the biggest chip is 28f640 or something which is 8mb (the ram space on sammy is 32mb)

Start at $000000 then once you have read the 1st 8mb ($000000 - $7fffffff i think) ,
repeat the process but tell it the chip starts at $8000000

I only ever read the 1st two blocks of ram (1st 16meg) which usually and hopefully contains the info you require.
You MUST do this on a box you know the BK !
Otherwise you wont know what your looking for in the dump.

I used ultraedit (use google to download) or notepad to search the dump for the BK

Also note if the endian box is ticked or unticked this makes a BIG difference to what you read.
Just read a small part 1st until you get the hang of it.

I think hex workshop (use google to download) converts the file from flash programmer file into a bin file)

Then load the bin into ultraedit.
You should be able to see some english words in their if all is working ok.
If its back to front or jumbled , play with the endian tick boxes
(think they both need ticked if I remeber right but not 100%).

If using notepad then just use the search facility within that program

I hope this,

This info comes courtesy of ISO-MICK with a few tweaks by me!

[addyb]

has anyone tried this yet? my ex C&W samsung 2100 has updated to 3.6 and i'm struggling to find the bk... i dont have any other box's that i know the bk for, so i cant try this... but any help would be greatly apreciated

[Marc]

The above should work no problem mate,prividing you know the bk of the box your doing then it should work out ok,pure boxes have been dumped afaik, IF its definatley no there then they could have encrypted the bk location !!!

Marc

[addyb]

Originally Posted by Marc

The above should work no problem mate,prividing you know the bk of the box your doing then it should work out ok,pure boxes have been dumped afaik, IF its definatley no there then they could have encrypted the bk location !!!

Marc

thats just my problem, i DONT know the bk for my box...

[Marc]

Lmao then theres no point in you trying to dump the file then mate!!
From the first post by spikebaby

You MUST do this on a box you know the BK !

Thats the idea you see ,you use a box with a known BK that way when you dump the box and read the hex you KNOW what your looking for and thus find the correct byte address at the same time,this would then help you get the bk from boxes you dont know the bk of using a jtag,at the moment theres no point in you dumping it until the byte is known,as you dont know the bk you cannot find it in the hex.

Marc

[addyb]

Originally Posted by Marc

Lmao then theres no point in you trying to dump the file then mate!!
From the first post by spikebaby
Thats the idea you see ,you use a box with a known BK that way when you dump the box and read the hex you KNOW what your looking for and thus find the correct byte address at the same time,this would then help you get the bk from boxes you dont know the bk of using a jtag,at the moment theres no point in you dumping it until the byte is known,as you dont know the bk you cannot find it in the hex.

Marc

yeah i know mate. i wasn't asking for help on how to do this, as we both no i have no chance... in my original post, i was asking if anyone had
already done it, or are willing to do it, to find the bytes for others...

[Marc]

Well mate there are people working on it myself and spikebaby included,thing is the update hasnt hit this area of cw yet,so just goin to try a forced update to see if we can get it down,rest assure tho the minute we do then we will post it.

Marc

[spikebaby]

Originally Posted by Marc

Well mate there are people working on it myself and spikebaby included,thing is the update hasnt hit this area of cw yet,so just goin to try a forced update to see if we can get it down,rest assure tho the minute we do then we will post it.

Marc

my area is running 3.2 and marcs 3.5 until we are running 3.6 we cannot post the byte but in the meantime we might be able to get hold of it watch this space

[addyb]

ok, cheers fellas...

i've been on 3.6 since feb... lol

if i can find a mate who will lend me their box, i'll give it a go myself... but u might have to talk me through it...

i'll see what i can do

[reddiesel]

This is off another forum.
If you re-set net id to 41047 and force a downgrade 3.6 back to 3.5. (same as if your updating) a few people have said that works.