Original video is flash format. Convert to MP4 for better viewing experience. The new NT software looks different than this one but the concept is the same. ... https://www.youtube.com/watch?v=AqolnsnJCnc
Backup Nand flash (1Gbit) of U10C135. (on board) Power on the u-Link NT.
Program Nand flash off board.
www.usbjtag.com
...
https://www.youtube.com/watch?v=zOebQftiGRw
This video shows the connection with u-Link NT and MIPS EJTAG.
EdgeRouter X uses MT7621 which is dual core. The challenge is to access the core that access the memory while bypassing all the other cores.
The read speed is about 196KB/s. Which reading entire flash takes about 23 5 minutes.
Hope this tool can help developers to develop better firmware for this router.
Diagrm
Name Pin on JTAG Pin on u-Link NT
GND 2 2(White)
TDI 3 10(Brown)
TDO 5 8(Orange)
TMS 7 4(Purple)
TCK 9 6(Green)
TRST 1 3(Gray)
RESET 11 5(Blue)
...
https://www.youtube.com/watch?v=pX6RE5zc25A
I have been asked many time to do remote support simply to create a new target XML. This video shows you how easy it can be. In this example, a test target called TestModem with 4M SPI flash is created.
...
https://www.youtube.com/watch?v=lYJhN8kMiCk
Added function of unlock instead of script in earlier version. (1.15).
1 wire BDM for 16 bit MC chip.
The same protocol to program MC9S chip in many ECUs. You simply connect GND, Reset, and BKGD pin to program the flash.
...
https://www.youtube.com/watch?v=9Qjb_nPXAvg
In software 1.23 we have solved issues that blocking the fast programming for ECU411.
1. We can get 6MHz BDM clock.
2. We can use fast programming.
The total programing include erase is less than six seconds.
If you need to get faster programming for your ECU (like Volvo), please let me know and I will help you to get the super faster programming.
...
https://www.youtube.com/watch?v=mh3yNFcB-Hc
Use serial port log to find out layout of the flash and put it into xml.
The 3.3v to SPI flash only draws 170ma power. It is safe to use 3.3v from u-Link NT directly to program the flash.
...
https://www.youtube.com/watch?v=TTNQ5Ac_050
When ECU is bricked, same setup as boot mode. Modified shadow to enable JTAG. The programming process takes less then two minutes to erase, program and verify. This is the suggested method if ECU is bricked.
...
https://www.youtube.com/watch?v=1VywVKFggM8
In u-link NT 1.57, each ECU can have two algos configured. E92 has the two byte seed key and new it is supported. E78 also can have five bytes seed key supported.
The algo scan brute force the ECU to get proper algorithm.
...
https://www.youtube.com/watch?v=8mKuGQXNvAI