Przesyłam ci to co jest potrzebne:
===============================================================================
jKeys Version 2.9.10 by Dave2
jKeys is a program primarily used to access memory on IRDs. It works by utlizing processor diagnostic devices via the JTAG port. This software has been used on STMicroelectronics STiXXXX (ST20 based core) and LSI SC2000 processors.
As of version 2.9.10, jKeys supports a new device called jInterface. This device connects to a PC using the serial port as opposed to the parallel port. It uses a microcontroller to perform the majority of JTAG communications, removing the burden from the PC. In doing so it alleviates many of the problems associated with poor timing and electrical characteristics exhibited by computers. It provides buffering and standard level signals at consistent clock rates to provide stable and reliable reads/writes. It is completely hands free, and with the exception of 2 simple removable adapters, is configured totally by jKeys operation.
Basic
-----
- works on Windows 95/98/Me/NT/2K/XP
- auto detects STMicroelectronics ST20 base processors and LSI SC2000
(ST micros STi5500, STi5505, STi5508, STi5510, STi5518, ST20-TP2, ST20-TP4, ST20-GP6) (LSI micro SC2000).
- auto detects most Echostar IRDs (2700, 2800, 3700, 3800, 3900, 4700, 4900, 501/5100, 301/3100, 6000)
- for IRDs detected, automatically read IRD number, Box Keys, Build Config, Model ID, Boot Strap and Software version
- works on several DTV IRDs (DRD420RE, DRD431RG, DRD220)
- for all IRDs known by jKeys, base memory flash configuration is provided
- allows flash reads for non-16 bit wide memory layouts
- reads memory and saves to file
- parallel port diagnostics
Advanced
--------
- Development Panel (STi based mostly)
- check and adjust EMI configuration registers
- trap read/write byte, word ,dword
- DCU Peek/Poke
- EJTAG DMA Read/Write (SC2000)
- upload user's function, pass arguments, trigger function , read back values
- Passive Trap (STiXXXX)
- Flash Programming (STi and LSI)
- auto detects flash memory (shows base, size, mfg/dev codes, manufacturer and part number)
(29F400BT, 29DL323T, 29F400BB, 29LV160DT/DB, M29F400T, M29W800AT, 28F320/J5/J3A/S3/S5, 28F160, 28F800B/B5-B)
- user specified base address for manually detecting flash memory
- blank check prior to write (STi only)
- read/erase/program complete flash/sector
- EEPROM Programming
- now reads/writes to I2C EEPROM via JTAG
===============================================================================
Release History
---------------
Version 2.9.11 (Build 026) (January 23, 2004)
Modify for STi5516.
Modify internal routines for DCU trigerring
Add in auto EMI config 0 data register to provision write to flash in bank 5
Added new EEPROM interface for IRD definition, STi5516 Pio3:1,0
Full support for DRD435-455, STi5516 based IRD
For development purposes, allowed user specific trap address via registry
Device recognition fail resolved.
Version 2.9.10 (Build 019) (June 4, 2003)
Fixed up problems programming 28Fxxx flash chips where failure would occur immediately
Added to jKeys.def file (see file for specifics)
Version 2.9.9 (Build 016) (February 3, 2003)
Added jInterface support (serial universal JTAG adapter)
Added external Flash/Micro/IRD definition file
Fixed hang up on progress bar
Added Build jEEPers jfg file function
Several minor fixups (over time I forgot how many)
Version 2.0.1 (Build 008) (May 27, 2002)
Added checksum calc for IRD#
Added full notation naming for flash and EEPROM
Added user selectable default directory for files (File | Preferences)
Version 2.0.0 (Build 007) (May 22, 2002)
Added STi based 301/3100 IRD
Added EEPROM routines for 501/5100
Fixed EEPROM read/write on (LSI Version) DP301/3100, LSI main command routine not responding immediately after load causing false EEPROM read completion indication.
Fixed DP301/3100 (LSI Version) IC22/IC23 base address reference.
Version 2.0.0 (Build 002) (May 13, 2002)
Major re-work, many internals re-worked, you gotta try it!!
Version 1.3.3 (Build 106) (December 31,2001)
Added support for ST M29F400T (Expanded instruction addresses to 4 octets)
Version 1.3.2 (Build 105) (December 21, 2001)
Added STi5505, Corrected ST20-TP4 and STi5508 detection
Added support for AM29DL323 flash support
Version 1.3.1 (Build 104) (October 21, 2001)
Allowed Flash Detect/DCU Peek/Poke on Flash Tools page even if flash not detected
Version 1.3.1 (October 14, 2001)
Added 28Fxxx flash support (RCA Model drd420re DTV)
Automatically pulls IRD and Box Keys on start up
Added passive trap for STiXXXX processors
Added user definable flash base address and flash detect button in flash tools
Added performance indicator option to indicate erase/detect/programming times
Added Get Flash ID in Flash Tools
Added user definable base address in flash tools
Flash Tools now additionally displays flash size, manufacturer and part number
Added DCU Peek/Poke to Flash Tool
Added EMI config register display/modify dialog accessible from Flash Tools
Version 1.2.2(a/b)
Automatically detects STiXXXX and SC2000 processors.
Added SC2000 EJTAG and DMA Read/Write.
Version 1.2.1
Added 29x160 flash detection (2M flash) for programming.
Version 1.2.0
Added Flash Tools for flash programming using IRD side code for fast writes (to 29040 flash currently).
Version 1.1.0
Slight enhancements, dialog allowed DCU Poke/Peek, JTAG comm logging
Version 1.0.0 (August 2001)
First version - read memory only, STi55xx processor, port diagnostics
===============================================================================
Contributions and Credits
Of course I can't take all the credit for everthing that jKeys does. In creating the program I've had several people make suggestions and provide a great deal of assistance. This includes some program segments, algorithm sequencing, interface communications, and of course beta testing. I can't recall all of the people, but as many as I can are noted below:
blaknite, rerobs, *SatHackr, *Inssomniak, *satFTA, *dishwasher, *shellot, vankanma, Crispy, DishNightOwl, MageMinds, bula, TRoN, netsurge, manshank, Davez, Meister, Stibby, *tedgreen, *jandv, ds9luvr, rerobs, scanrite, and Dave2.
Original Version - well I can't recall everyone and as I try to I can't read the posts any further.
Anonymous - as well there were a few who sent me hard to find information or would give me some insight, and thanks to those.
OPIS RATOWANIA TUNERÓW NA PROCESORACH STi55xx ZA POMOC¥ J-TAG-a Opticum Hevet Sigma Ferguson Comsat Neotion itp.
1.Pod³¹cz komputer z tunerem za pomoc¹ progrmatora J-TAG (ja doatkowo spinam kabelkiem RS-232 dla wyrównania potencja³ów)
2.Uruchamiamy program " Jtg.w1 " (do³¹czony do archiwum) powinien wywietliæ identyfikacje [Id]=Porocesora
JAK TAK NIE WY£ANCZAC GO SAM MUSI SIÊ WY£¥NCZÆ.
3.NASTEPNIE URUCHAMIAMY PROGRAM " JTG.B " (do³¹czony do archiwum) I WCISKAMY TU NA START , W OKIENKU KO£O STARTU
TESZ MUSI WYWIETLIÆ SIÊ [Id]=Porocesora
NASTEPNIE ZAZNACZAMY W " JT PROPERTIES " okienko 16
U GÓRY W " CONTROL " w³¹cz 29 wy³¹cz 29
W tym samym polu w³¹cz kolejno 30 27 26 31
W tym samym polu wy³¹cz kolejno 31 27 26 w³¹cz 29 wy³¹cz 29 i wy³¹cz 30
W polu " JTFrom " i " JTIptr " powinny pojawiæ siê wartoci 80000409- 800003e0 (ta druga wartoæ bêdzie siê zmieniaæ w pêtli)
Jeli jest inaczej to wcinij " STOP " poodznaczaj wszyskie okienka i ponownie nacinij " START " i zacznij zaznaczaæ okienka od nowa.
Jeli wartoci s¹ poprawne to przechodzimy dalej (nie dotykaæ guzika STOP ani nie zamykamy programu)
3.NASTEPNIE URUCHAMIAMY PROGRAM jKeys.exe i Detect powinie pokazaæ
Device ID 0xyyyyyyyy i Device STi55xx.
Nastêpnie " Flash Programming "
(jezeli w polu " Base Address jest wartoæ 7FF80000 lub inna to koniecznie zminiamy j¹ na 7FE00000 i klikamy na przycisk " Detect " , w polu " Size " powinna byæ wartoæ 200000).
Nastêpnie przechdzimy do okna programu JTG.B i klikamy na STOP i zamykamy program.
Z powrotem przechozimy do " jKeys " i klikamy na wyczyciæ flasha (Erase),
Nastêpnie na Program i wskazujemy poprawny sprawdzony plik i czekamy a¿ siê za³aduje flesh :)
Po zakoñczeniu wgrywania flesh-a od³anczamy tuner od zasilania i roz³¹czamy wszyskie kable.
W³¹czamy tuner do zasilania i je¿eli wszystko zrobilimy dobrze to powinien siê uruchomiæ.