This receiver has Two kind of Flashes
1. TE28F800C3TA (8MB)
2. TE28F160C3TA (16MB)
Intel Flashes are blocked from pin 13 and 14
U need to unblock first
unlock Flashes ....
As we know only there are two types of locked flashes :
The first type is hardware lock.
The second is hardware and software lock
The Flashes at the below of the picture have the Same pin configurations and same hardware unlock
Type1 " Harsdware Unlock" :
Intel : TE28F400B3, 28F800B3, 28F160B3, 28F320B3
Sharp : LH28F800XXX, LH28F160XXX
Atmel : AT49BV16x4A(T), AT49BV162A(T)
1- WP# pin not found in Atmel flashes and Vpp,WP# pins found in the other listed flashes above.
2- Vpp,WP# pins are Control pins
3- Verify your computer’s parallel port is set to EPP/ECP in your computer’s BIOS settings. Make note of the parallel port address – it’s usually 378.
1- In case of Atmel Check if Vpp pin is connected directly to the processor or to the collector of a PNP transistor.
In case of the others Check if Vpp and WP# pins are connected directly to the processor or to the collector of a PNP transistor.
2- if connected directly to the processor, cut the line whitch connect them and wire the Vpp (Atmel) ,Vpp and WP# ( the other ) to any 3.3V line.
if control pins connected to the collector of a PNP transistor connect them directly to any 3.3V line " no need to cut any line" .
most of receivers have WP# and Vpp pins connected together or WP# connected to 3.3V Vcc " pin 47 on the flash " and Vpp connected to collector of PNP transistor.
Attach the JTAG parallel plug to your computer’s parallel port.and Power up your receiver.
4- Start Wall
a. Click OK through the ID warning box – and ignore the message.
b. Click Reset uP three times. After each, click OK through the ID warning box.
c. Leave Wall open on your Windows desktop.
5- Start jKeys must first recognize the Processor type in the area under “JTAG Info” must read:
Device ID : 0x1D405041
Device : STi5518BVC
6- Select your IRD model.
7- Click Flash Programming – the programming panel should open right up.
8- jKeys should recognize the flash type, and open the Programming Panel. If you get an error box about the Mfg or Device ID, then something is wrong. Verify the jKeys.def file is the one
9- You can erase and program the flash now.
10- When you finish power-down the IRD and remove all connection.
Type2 " Harsdware and software Unlock" :
Intel : TE28F400C3, 28F800C3, 28F160C3, 28F320C3
ST : M28W800CB , M28W800CT, M28W160CB , M28W160CT
same as above until step 6
7- This step sends a command to the processor (Omega) chip to make it cooperate with us and enable flashing.
Click Development Panel and Ignore the instructions in the box and click OK!
8- On the left side of the Development Panel, enter:
Address: 2000E020 (all ‘0’s are zeros)
Data: 01 Click Write Byte
9- This step “unlocks” the special locking feature of the Listed flash chips.
For example if you want to unlock sector 0 SA0 At the address 7FE00000 you must do the following steps:
With the Development Panel still open enter:
Address: 7FE00000 (all ‘0’s are zeros)
Data: 60 (six-zero) Click Write Byte
Data: D0 (‘D’-zero) Click Write Byte
Data: FF Click Write Byte
now SA0 unlocked
if you need to unlock all sectors you must repeat Step 9 for eatch sector with its Starting address.
10- close Development Panel
11- click flash programming and complete the other steps
This all Information From FANNANSAT TEAM Word by Word