alunfennell
2nd February, 2009, 02:33 AM
This is a Manual for repairing a dead Dreambox 500 (clone or not) and all other models with faulty bootloader.
You can find 2 methods to do this. The first one is with a Cas Interface 3 (thanks to Duolabs) and second one is with a selfmade jtag (thanks to Satr3x).
METHOD 1
The Cas Interface 3
Duolabs - Official Web Site (http://www.duolabs.com)
The Kit supplied with Cas Interface 3 comprises:
• 1 Cas Interface 3 device
• 1 20-pin female cable, length 30 cm
• 1 J-Card
• 1 Dummy Card
• 1 Case for the Cam Module
http://dreambox.890m.com/images/bootloader/cas_kid.JPG
With the Cas Studio Application (Duolabs - Official Web Site (http://www.duolabs.com))
Click the button that corresponds to the DreamBox and perform the
following operations:
• If you are using Cas Interface 2 with the Add-on, connect the flat
cable to the Add-O and to the DreamBox as shown in the figure:
http://dreambox.890m.com/images/bootloader/cas1.JPG
• If you are using Cas Interface 3, insert one end of the flat cable
into the external connector and the other end into the DreamBox
as shown in the figure (the figures refer to two models of
DreamBox: refer to the photo of the model you are using
http://dreambox.890m.com/images/bootloader/cas2.JPG
http://dreambox.890m.com/images/bootloader/cas3.JPG
Click “Connect” when the receiver is on.
If the application is able to correctly detect the device, additional
buttons are displayed (“Open File” and “Write”).
Click “Open File” and select the desired file.
Note: the file to use must be a 128k boot file, which can be
downloaded from Web sites dedicated to Dreambox (Duolabs shall
not be liable for damages originating from the files used).
Click “Write”.
METHOD 2
Selfmade jtag
You can see below a memmap of the dreambox flash:
0x00000000-0x00600000 : "DreamBOX cramfs+squashfs"
0x00600000-0x007c0000 : "DreamBOX jffs2"
0x007c0000-0x00800000 : "DreamBOX OpenBIOS"
0x00000000-0x007c0000 : "DreamBOX (w/o bootloader)"
0x00000000-0x00800000 : "DreamBOX (w/ bootloader)"
0x00120000-0x00600000 : "DreamBOX SquashedFS"
0x00000000-0x00120000 : "DreamBOX Cramfs"
What dream multimedia did in their release of gemini 4.3.1 is that it detects on the basis of your fake mac adress that it has to destory your box and a timer is activated. This will destroy the first part of your memory... Which contains the "Open bios" and the bootloader to give your dreambox the basic inputs/outputs working (like the serial port).
To repair this damage done by dream multimedia we need a jtagger. Jtag devices/cables are used by hardware developpers and testers but are quite easy to build. (and cheap!).
To build jtag for dreambox.
Please use this link:
http://www.digital-kaos.co.uk/forums/f39/jtag-repair-dreambox-11795/#post65591
Requirements:
- 74LS245 IC (74LS245 is an Octal Bus Transmitter/Receiver designed for 8-line asynchronous 2-way data communication between data buses.)
- LPT (25pins D-sub connector)
- A bit of copper cable or Flat ribon cable (like ide cable is ideal)
- Solder iron
- Pin header
Optionally: 5 x 100ohm resistors (use max 10cm cable otherwise u will have voltage problems)
The build.
The build is quite easy if you look at this schematic
http://dreambox.890m.com/images/bootloader/satr3x_1.jpg
http://dreambox.890m.com/images/bootloader/satr3x_2.jpg
When are done with this. your cable is ready. You can have on one end a connector thats fits on your pin header. This way you can just put the pin header onto the dreambox jtag connector and flash away without soldering on the mainboard of the dreambox.
You can use a pinheader.
When you are done with the build its all a matter of connecting your jtag cable to your pc and to your dreambox. Then you just need to see which type of tuner you have. Alps or Philips.... This is important to have the right bootimg in your dreambox.
There is a flashtool for Windows:
jtagwin5xxx
(windows tool is quite straight forward. Just load the correct blimg)
And a flashing tool for PC linux (this is a binary compile tested on fedora, mandrake, redhat )
JTAG_Linux
For linux you need:
A Pc with Linux like Madrake or Redhat or an other distribution.
A parallel port (LPT)
A parallel cable to your JTag Interface
A point on the pcb of Dreambox for the +3.3V to Chip LS245 Vcc
All GND are the same
Login with root to your Linux system.
All files must be in the same folder!
to flash the bootloader:
a) connect the JTag
b) power on Dreambox
c) Linux console with user "root"
command: ./ flash write
when the flash is write protected: ./flash unprotect
The part that is destoryed on your dreambox is about 128Kb so we need to put the correct image on it. There might be many images on the net but these are tested & working. The file is usually called Blimg or Bootimg please make sure u select the write image for your box:
For philips / alps (orignal blimges ? ):
dm500-alps_philips-boot
Other Dm 500 clones with diffrent tuners
bootloader_500.tar
After you downloaded the correct files its all a matter of flashing your box.
To do this make sure the timing between pressing connect and powerup of the dreambox is simultanious.
The connect and powerup timing is slightly diffrent. U must make sure u press connect before it powers up. But also the box may not powerup 1 second after the connect.
This is the only tricky part as soon as flash is done correctly you can use your serial cable and use dreamup to flash your favorite image again.
Regards:
Alun
You can find 2 methods to do this. The first one is with a Cas Interface 3 (thanks to Duolabs) and second one is with a selfmade jtag (thanks to Satr3x).
METHOD 1
The Cas Interface 3
Duolabs - Official Web Site (http://www.duolabs.com)
The Kit supplied with Cas Interface 3 comprises:
• 1 Cas Interface 3 device
• 1 20-pin female cable, length 30 cm
• 1 J-Card
• 1 Dummy Card
• 1 Case for the Cam Module
http://dreambox.890m.com/images/bootloader/cas_kid.JPG
With the Cas Studio Application (Duolabs - Official Web Site (http://www.duolabs.com))
Click the button that corresponds to the DreamBox and perform the
following operations:
• If you are using Cas Interface 2 with the Add-on, connect the flat
cable to the Add-O and to the DreamBox as shown in the figure:
http://dreambox.890m.com/images/bootloader/cas1.JPG
• If you are using Cas Interface 3, insert one end of the flat cable
into the external connector and the other end into the DreamBox
as shown in the figure (the figures refer to two models of
DreamBox: refer to the photo of the model you are using
http://dreambox.890m.com/images/bootloader/cas2.JPG
http://dreambox.890m.com/images/bootloader/cas3.JPG
Click “Connect” when the receiver is on.
If the application is able to correctly detect the device, additional
buttons are displayed (“Open File” and “Write”).
Click “Open File” and select the desired file.
Note: the file to use must be a 128k boot file, which can be
downloaded from Web sites dedicated to Dreambox (Duolabs shall
not be liable for damages originating from the files used).
Click “Write”.
METHOD 2
Selfmade jtag
You can see below a memmap of the dreambox flash:
0x00000000-0x00600000 : "DreamBOX cramfs+squashfs"
0x00600000-0x007c0000 : "DreamBOX jffs2"
0x007c0000-0x00800000 : "DreamBOX OpenBIOS"
0x00000000-0x007c0000 : "DreamBOX (w/o bootloader)"
0x00000000-0x00800000 : "DreamBOX (w/ bootloader)"
0x00120000-0x00600000 : "DreamBOX SquashedFS"
0x00000000-0x00120000 : "DreamBOX Cramfs"
What dream multimedia did in their release of gemini 4.3.1 is that it detects on the basis of your fake mac adress that it has to destory your box and a timer is activated. This will destroy the first part of your memory... Which contains the "Open bios" and the bootloader to give your dreambox the basic inputs/outputs working (like the serial port).
To repair this damage done by dream multimedia we need a jtagger. Jtag devices/cables are used by hardware developpers and testers but are quite easy to build. (and cheap!).
To build jtag for dreambox.
Please use this link:
http://www.digital-kaos.co.uk/forums/f39/jtag-repair-dreambox-11795/#post65591
Requirements:
- 74LS245 IC (74LS245 is an Octal Bus Transmitter/Receiver designed for 8-line asynchronous 2-way data communication between data buses.)
- LPT (25pins D-sub connector)
- A bit of copper cable or Flat ribon cable (like ide cable is ideal)
- Solder iron
- Pin header
Optionally: 5 x 100ohm resistors (use max 10cm cable otherwise u will have voltage problems)
The build.
The build is quite easy if you look at this schematic
http://dreambox.890m.com/images/bootloader/satr3x_1.jpg
http://dreambox.890m.com/images/bootloader/satr3x_2.jpg
When are done with this. your cable is ready. You can have on one end a connector thats fits on your pin header. This way you can just put the pin header onto the dreambox jtag connector and flash away without soldering on the mainboard of the dreambox.
You can use a pinheader.
When you are done with the build its all a matter of connecting your jtag cable to your pc and to your dreambox. Then you just need to see which type of tuner you have. Alps or Philips.... This is important to have the right bootimg in your dreambox.
There is a flashtool for Windows:
jtagwin5xxx
(windows tool is quite straight forward. Just load the correct blimg)
And a flashing tool for PC linux (this is a binary compile tested on fedora, mandrake, redhat )
JTAG_Linux
For linux you need:
A Pc with Linux like Madrake or Redhat or an other distribution.
A parallel port (LPT)
A parallel cable to your JTag Interface
A point on the pcb of Dreambox for the +3.3V to Chip LS245 Vcc
All GND are the same
Login with root to your Linux system.
All files must be in the same folder!
to flash the bootloader:
a) connect the JTag
b) power on Dreambox
c) Linux console with user "root"
command: ./ flash write
when the flash is write protected: ./flash unprotect
The part that is destoryed on your dreambox is about 128Kb so we need to put the correct image on it. There might be many images on the net but these are tested & working. The file is usually called Blimg or Bootimg please make sure u select the write image for your box:
For philips / alps (orignal blimges ? ):
dm500-alps_philips-boot
Other Dm 500 clones with diffrent tuners
bootloader_500.tar
After you downloaded the correct files its all a matter of flashing your box.
To do this make sure the timing between pressing connect and powerup of the dreambox is simultanious.
The connect and powerup timing is slightly diffrent. U must make sure u press connect before it powers up. But also the box may not powerup 1 second after the connect.
This is the only tricky part as soon as flash is done correctly you can use your serial cable and use dreamup to flash your favorite image again.
Regards:
Alun