Just wondering if your going to give up?

Test on DCT 2224/2244 using USB BDM.
Post Reply
[email protected]
Junior Member
Posts: 13
Joined: Tue Sep 24, 2013 4:24 pm

Just wondering if your going to give up?

Post by [email protected] »

Are you guys really going to give up? No more testing?
pussybills
Junior Member
Posts: 22
Joined: Tue Oct 15, 2013 9:35 am

Post by pussybills »

Never ever!
moddog
Junior Member
Posts: 638
Joined: Fri Aug 20, 2010 1:47 pm
Location: Some ware just like you.
Contact:

Post by moddog »

[email protected] wrote:Are you guys really going to give up? No more testing?
What testing or you talking about?
Good better best
[email protected]
Junior Member
Posts: 13
Joined: Tue Sep 24, 2013 4:24 pm

Dct

Post by [email protected] »

Converters, HD's, DCT's video cable.
Skyhigh
Junior Member
Posts: 40
Joined: Tue Dec 14, 2010 12:02 pm

Post by Skyhigh »

[email protected] wrote:Are you guys really going to give up? No more testing?
Here is a copy and paste for you to start with and lets see what you come up with

SPICommand is a interactive tool which can send and recieve data over the PC serial port com1 only. It cannot be used while the SPILog program or any other program is using com1.

It provides three commands.

g = get data from XC
s = send data to XC
play = load formated binary file and play back the content of it.

The XC chip command structure is complex and dangerous this should only be used by advanced users.


The play back command was developed to provide the replay of a capture authorization from the SPIlog utility.

SPICommand requires that a program be uploaded and excuted on the DCT before it can operate.

To invoke this routine you must use the USBBDM debuging program to preprare the DCT. The DCT Testing tool menu provides help with this setup by moving the program into the USBBDM memory and displaying the commands you must type to invoke it.

Steps to run the play back.

1. Connect BDM Interface and run USBBDM program.
2. Connect serial cable from DCT to com1.
2. Select DCT Testing from the USDBDM menu and chose SPI Commander.
3. Type in the commands sequence displayed which is shown here.

reset 1
init
setram ea0000 500
go= ea0000

4. Run SPICommand
5. Enter the following command

play

5. Select the auth00.bin file you wish to play back.
6. In USBBDM issue a reset command


and



Steps for using SPI log.
1. Configure the firmware to allow SPI log, program the flash.
2. Use serial cable connect your PC's COM1 to serial port of the DCT box. http://www.usbjtag.com/image/spicable.jpg
3. Start the SPILog.exe. Download at http://www.usbjtag.com/filedownload/
4. Note there will be text files saved. One is SPI0E000log.txt and the other SPI07000log.txt. A binary file auth.bin will also be captured.

The SPI replay now automated with 0.3 of SPICommand.exe. Download at
http://www.usbjtag.com/filedownload/
The video demo for play auth command now show at
http://www.usbjtag.com/filedownload/
DeanOfTears
Junior Member
Posts: 37
Joined: Wed Apr 16, 2014 4:51 am
Location: Illinois

Post by DeanOfTears »

Thanks Skyhigh for putting this together. Now that this technique is a little more visible to everyone, what is the main challenge here? I remember MrRogers posted before that he couldn't make any changes to the XC Chip data permanent. Is that your roadblock as well?
Killswitch
Junior Member
Posts: 439
Joined: Tue Mar 23, 2010 6:12 am

Post by Killswitch »

Unless you're Harry Houdini and know how to escape from shackles with your mind (like CAPONE and Mr. Merkin) this technique applies ONLY to the DCT 2000 series and the DCT 700 series. And, the technique is a) specific to the one single unit you read from and b) you can read but you can't write it back (on 700's - you CAN with DCT2000. This is how our humble Admin made his mark. Still haven't figured out how to do this in a progressive manner. That's because I'm a Bobo - just another Clown caught in the shuffle of Rocket Science at this fine site. Goodday.
Skyhigh
Junior Member
Posts: 40
Joined: Tue Dec 14, 2010 12:02 pm

Post by Skyhigh »

Killswitch wrote:Unless you're Harry Houdini and know how to escape from shackles with your mind (like CAPONE and Mr. Merkin) this technique applies ONLY to the DCT 2000 series and the DCT 700 series. And, the technique is a) specific to the one single unit you read from and b) you can read but you can't write it back (on 700's - you CAN with DCT2000. This is how our humble Admin made his mark. Still haven't figured out how to do this in a progressive manner. That's because I'm a Bobo - just another Clown caught in the shuffle of Rocket Science at this fine site. Goodday.


he did post in the DCT 2000 series forum so it applies to him, and its something to test, you and every1 else should carry at least a min sub so test away
stomperz
Junior Member
Posts: 321
Joined: Sun Nov 11, 2007 7:07 am
Location: Chicago

Post by stomperz »

Killswitch wrote:Unless you're Harry Houdini and know how to escape from shackles with your mind (like CAPONE and Mr. Merkin) this technique applies ONLY to the DCT 2000 series and the DCT 700 series. And, the technique is a) specific to the one single unit you read from and b) you can read but you can't write it back (on 700's - you CAN with DCT2000. This is how our humble Admin made his mark. Still haven't figured out how to do this in a progressive manner. That's because I'm a Bobo - just another Clown caught in the shuffle of Rocket Science at this fine site. Goodday.
Another reason to use SEARCH, it works so well.
(try "writeback" one of many verbs you may use)
The above method workED exactly as stated above. (execpt for the 700)
Sorry for my poor English, it is my primary language.:rolleyes:
[email protected]
Junior Member
Posts: 13
Joined: Tue Sep 24, 2013 4:24 pm

Next step

Post by [email protected] »

Yes there is some challenges in the write back... So as stated above, you can only write back to the same unit. Now the NEXT STEP is to modify the data before you write it.

Here is the next clue.

The way a converter get its commands is in a package.

the package contains;

uni-address
length of package
data (activation and deactivation of channels)

Like I said before "we need to be able to manipulate the uni-address"
dennisB
Junior Member
Posts: 36
Joined: Sat Oct 22, 2011 6:08 am

Post by dennisB »

Am trying to spilog am stuck on step 1, configure to log and program flash. Do I put the program in the usbjtag scrip file? None of the videos work
Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests