I realise that this is an old post but I have done the same thing and come to the same conclusion that JTAG-Enable TCK and TMS all run to ground.
Taking this a step further and in the hope of being able repair this by cutting a few traces I decided to remove the chip from a second board and proceeded map each JTAG wire from the top of the chip to the balls underneath (unfortunately I could not find a datasheet for this chip and spent hours with a sewing needle taped to my multi-meter probe)
The result were as follows
JTAG-Enable TCK and TMS are attached to each other beneath the chip and then to ground
TDO is not attached to anything
TRST_N can be found on the bottom of the board beneath the chip
TDI can be found on the top of the board to the right of the chip
I think it is therefore safe to say that this box cannot be modified. (please prove me wrong)
The attached picture shows the pin outs on the SMP8634LF chip and also traces connecting JTAG-Enable TCK and TMS
Hello, Is there anybody in there? Just nod if you can hear me Is there anyone home !!
Picked up another of these boxes today --- this one boots up with a different screen and works as a Freeview box.
The menu looks different.
Is there any way of sniffing the software off this one and using it in the other one?
Is this info on the hard drive or written into the board?
I haven't tried swapping the hard drives over to see if it will make the bad one work.
Any help appreciated --- even if you read this please just reply with a hello !!
whoops, sorry for the delay. From how I understand the BTvision box works the new firmware is downloaded and written to the box itself, its not stored on the hard drive so there is no way to copy it.
C:\User\me\files\X300tpatch3>X300tpatch3.exe /yamon /wiggler
X300t bootloader patcher v3.0 by MCE2222 / Robert_S
based on WRT54G/GS EJTAG Debrick Utility which
is actually derived from Mips32 EJTAG from
TotalEmbedded without giving credit... ts ts ts
= This version only works on bootloader V1053,V1051,V1039 =
/wiggler ........... use wiggler cable
/linux ............. boot LX.BIN
/yamon ............. boot YA.BIN
using Wiggler interface
Probing bus ... Done
CPU Chip ID: 00001000011000110000000000000001 (08630001)
*** Found a SigmaDesigns SMP8634 Rev A CPU chip ***
Issuing Processor / Peripheral Reset ... Done
Halting Processor ... <Processor did NOT enter Debug Mode!> ... Done
Clearing Watchdog ...
<\0>xosPee serial#3713163027ffa953af755f8f350b17f4 subid 0xc4
xenv cs2 ok
power supply: ok
dram0 ok (8)
dram1 ok (8)
zboot (0) ok
Microsoft IPTV Bootloader, Build (1051)
Built by BM-DELL-167, Sep 11 2006 16:54:12
Well, that's easy... According to http://msdn.microsoft.com/en-us/library/aa453696.aspx the folder for MIPS CPUs is 4000...
The problem is... I'm quite sure the autorun functionality is implemented by the Windows shell (explorer.exe or whatever they use on Windows Mobile)
And the STB isn't running the shell