@Audioniek
You know more than I expected
BSKA
Board:
Anhang 15494
Tuner single STV0899:
Anhang 15495
BSLA
Board:
Anhang 15496
Tuner dual STV0899:
Anhang 15497
Both BSKA/BSLA has CPU STI7100-YWCE. YWCE means it has enabled descrambler (opensource stmdvb.ko can be used to decode not FTA channels).
Software pairing is used, access card is paired with motherboard with RSA key.
NOR and NAND chips are secured by manufacturer with hard to remove epoxy glue.
Both stb can be easily flashed with uboot. One method is to remove glue and solder already programmed NOR with uboots
Second method is to solder two motherboards. One called mother - has already uboot in and original software with version lower than v17 (testtool enabled), second called daughter is that one to program with uboot.
In doughter you need to access SM menu and enable UART. In daughter you need to solder nand enable/disable pin to 3V3 PIN so nand is disabled and daugter is run from mother NAND via cables. Then using blackbox (use of testtool's peek/poke) you load uboot to A20 address of NOR.
Then you need to make short from A20 to 3V3 so after all NOR start address is altered and uboot run.
img_5075977d.jpg
punkty BSKA.jpg
pobrane (1).jpg
This is very briefly described. I doubt you will ever try this method
Newer models are BXZB/BZZB (actually only BZZB tuner is worth calling it "newer". It is less power consumption/Better signal/And cooler than BSLA version. BXZB is poor quality laminate that can be easily broken with high temperature of solder)
BXZB
Board integrated with single tuner STV0899
BXZB-plyta-glowna-nie-grzebana.jpg
BZZB
Board:
plyta-glowna-tunera-nbox-bsla_1688.jpg
Tuner single STV090x
bzzb.jpeg
Both BXZB, BZZB has CPU STI7100-HWCE. HWCE means descrambler is disabled and hardware pairing used.
First option to run uboot/enigma2 is to swap CPU with jtag enabled and NOR memory. Then it run as normal BSKA/BSLA. Or to use modchip.
To decode channels you need modchip as in your BZZB you bought. It has two functions. Delay start of uboot. First of all STB run from A0000000 address and this disables reset of CPU. Second function is to pass cpu key to uboot and enable descrambler. Then actual uboot from address A0200000 (A20) or A0100000 (A19) is run. Preferably it should be A20. A19 should be backup uboot (this apply to all models). Worth to mention is that those all 4 motherboards has poor quality supply section. If STB hungs, or you hear sound from inside you should change capacitors.
In BSKA, BSLA, BZZB, BVXA (BVXA I will describe below)
plyta bska e2 - Copy.jpg
In BXZB
BXZB-plyta-glowna-nie-grzebana - Copy.jpg
Source code of modchip, MAGUS uboot and stmdvb.ko are not public. You can use existing modchip version of stmdvb.ko with your software just change vermagic if needed. Should work. I just did this way.
last model is very rare ADB-5800C MMP. This is cable STB used in Poland by Multimedia.
Motherboard is similar to BSKA. There is no card reader. What is really cool in opposite to BSKA/BSLA/BZZB/BXZB BVXA has enabled jtag. And can be really easly programmed uboot with STi compatible jtag.
With for example MMusb2232H FT2232H FTDI:
jtag.jpeg
BVXA with BSKA tuner and Enigma2 works very fine with sattelite.
All above tuners has 192MB or RAM. 128MB is main memory. 64MB is reserved as video memory. Some say SH4 STBs that has separate video coprocessors has much better video quality than popular VU/ZGEMMA etc MIPS stbs.
Back to what you wrote. When you have STB with uboot/enigma debug is already working.
Just connect those 3 pins GND/RX/TX:
plyta bska e2 - Copy (2).jpg
with TTL to USB converter like this USB RS232 UART FT232RL
6616724e-f7b7-47ea-a7a2-e47cc0ec21ea.jpg
And then just:
sudo screen /dev/ttyUSB0 115200
If you wish to load new uboot first to RAM then to NOR just type "loady" on uboot console
Then from another linux console run such script
that way:Code:#!/bin/sh DEV=/dev/ttyUSB0 stty -F $DEV 115200 sz --ymodem "$1" > $DEV < $DEV
sudo ./ysend.sh uboot.bin
I am not up to date with latest modchip revision. As wrote above last I knew required special MAGUS uboot version. I think when you connect to debug you will know.
Maybe you have new modchip revision that support old freebox/b4t uboots.
And you are right freebox and b4t are alternate uboots that run alternate softwares. b4t (pkteam) softs are very good but I think those STBs are not enough powerful to run them.
I would stick with pure freebox Enigma2. If you wish PM me I will send you links.
All boot methods nand/usb/hdd can be altered. Just issue "printenv" on uboot console, change what you need and hit "saveenv" (here you can find for details http://www.denx.de/wiki/publish/DULG/to-delete/ https://www.denx.de/wiki/U-Bootdoc/BasicCommandSet)
I added for example option to boot second EXT2 partition of USB flash drive. First partition is FAT32 so it can be accessible from both Windows/Linux:
With mod=$mod I can check from software if it is modchip version board or not.Code:modcmd=if itest *b9205e2c -eq 1000000; then set mod no; else set mod yes; fi bootdesc_8=USbC bootcmd_8=run modcmd; run bootargs_8; run bootkern_8 bootkern_8=usb reset; ext2load usb 0:2 a5000000 /boot/uImage; bootm a5000000 bootargs_8=set bootargs console=ttyAS0,115200 root=/dev/sda2 rw mem=128m coprocessor_mem=4m@0x10000000,4m@0x10400000 rootdelay=10 nwhwconf=device:eth0,hwaddr:00:03:91:85:01:01 init=/bin/devinit mod=$mod
I think that is enough for the beggining. If you want to play with uboots I can send you for free one BVXA motherboard. If you make mistake and brick it with wrong command on uboot it can be easily brigned up to life with jtag.
That is not possible with BSKA/BSLA/BZZB/BXZB. So be careful with playing uboots. If you have any questions feel free to ask.
I appreciate your contribution in software development and will always help you.