Pionero v4.0 (FINAL)
With this program you will be able to update the Eeprom and firmware contents from your Pioneer decoder and some Pace decoders. Please, read the entire document before doing anything. A simple mistake can damage one of the ports or the flash memory.
SYSTEM REQUIEREMENTS:
1- Windows 95, 98, ME, NT, 2000
2- One serial port.
3- One parallel port in ECP mode.
4- 1024x768 Screen resolution
WHAT’S NEW:
- Added an eeprom writing function through the Jtag interface thanks again to pio’s code.
- Now it’s possible to change all the Status bits from the Tuning section without having to edit every channel.
- Improved writing function in Sanyo ICs. Now you can erase blocks or sectors without problems.
- Support for the new Symbol Rates found in Dynamit’s v4.31 firmware.
- Minor bug fixes.
- Added an eeprom reading function through the Jtag interface thanks to Pio’s code.
- Now it’s possible to select the encryption system of every channel from the channels table and it’s also possible to configure an unknown bit in that table.
- Added an option to completely erase a Flash IC. BE CAREFUL !!!!!!
- Support for some PACE decoders.
- New section to edit some parameters stored in the eeprom.
- Configuration of all Flash ICs depending on the decoder model and board.
- Now you can generate the firmware checksum of BCT15xx and BCT16xx automatically.
- The number of bits in the start delay (WaitStart) can be changed. This improves notably all the transmissions through the Jtag interface.
- More security measures have been added to the Jtag code to avoid hung-ups with defective Jtag interfaces.
- Added a “Cut” button in the Tuning section.
- Now Pionero recognizes channels and transponders tables mixed with upgrades.
- All INI and DOC files are now inside subdirectories.
- New GUI translation : Arabic.
- Flash ICs writing option implemented :
- Configuration from INI files for BCT14xx, BCT15xx y BCT16xx.
- Automatic verification after writing.
- Flash contents check before writing to save time in case they are the same.
- Automatic block erasure when needed.
- Added a small LPT port check for the decoder.
- Improved Jtag writing and reading speed.
- Now the speed indicator show the average speed and not the instantaneous speed.
- New manual translation : Russian.
- Added eeprom’s partial reading and writing functions from 0x000 to 0x0AF.
- Now it’s possible to change the maximum number of channels and transponders.
- New option to add more channels and transponders from a second file.
- Resizing window bug fixed.
- New section to see frozen images from the decoder:
- The images can be saved in BMP or JPEG formats.
- Supported image sizes: 352x576, 528x576, 544x576, 704x576 and 720x576.
- Supported image formats: 4:3 and 16:9
- Added new functions in the “Tuning” section:
- Copy and paste channels and transponders.
- Move and erase transponders.
- Keyboard shortcuts for those who like to use the keyboard.
- Added new indicators of speed and remaining time in every transmission.
- Now you can resize more windows in the “Tuning” section.
- New GUI translation: Swedish.
- The code has been reorganized and every function has been commented.
- Bug fixes.
- Support for DiSEqC in the transponders table.
- Substitution of the status byte for the number of channels in that transponder (I didn’t know its meaning till now).
- Support for the transponders tables in Dynamit’s firmware. Now all its values, even those from estrange transponders, are stored correctly.
- Support for C Band transponders.
- Now all the values of the Symbol Rate can be configured with INI files. This way the firmware developers will be able to change the ordering of the channels without having to modify the editor each time they add or remove a Symbol Rate value.
- Added an option to save the channels and transponders tables as text or html files.
- Slightly improved Jtag functions. In theory Pionero should have no problems with fast computers and it won’t freeze with defective Jtag interfaces. It will simply inform of an error and the address where it happened.
- Much faster and efficient INI file handling. You’ll notice this when you start Pionero or when you change the GUI language.
- Small improvements in the graphical interface. I hope that the tuning section will be easier to use. Now it’s possible to change the window size and every time you select a channel you’ll see the transponder information to the left.
- Added instructions to send the channels list and the eeprom to BCT13xx decoders.
- Channel and transponder tables editing :
- It's possible to edit the tables from Flash memory or RAM.
- Editor fully integrated with the rest of the other functions.
- You can even change the TCS or TPT positions, the way the
Symbol Rate is stored and the L.O. frequencies.
- And of course, you can also change all the settings of every
channel or transponder.
- Now its possible to write in RAM through the JTag interface.
- GGF1367 eeprom file format now supported.
- New GUI translations : Russian and Italian.
- New manual translations : French, Polish and Italian.
- New Logo.
- Firmware update now possible through the parallel and serial cables
for bct14xx and compatible decoder models.
- JTag reading function implemented.
- CPU Code reading through JTag interface.
- Terminal section added.
- Configuration section added.
- All the settings are now stored in INI files.
- GUI translations now possible by using INI files.
- GUI in Spanish, English, Catalan, Polish and French.
- Now manuals in Spanish and English.
- Hexadecimal editor for the EEPROM
- Binary Eeprom file format now supported
- First manual just in Spanish.
- EEPROM send, receive, erase and verify functions implemented.
- GUI only in Spanish.
INSTRUCTIONS :
Before explaining how Pionero works I’ll have to clarify some aspects of Pioneer decoders.
This devices have all it’s necessary to be repaired by the technical service using of a serial port, parallel port, Jtag, I2C…
Pionero only uses the serial, parallel and jtag ports. With them you can reach the eeprom and firmware contents without problems.
Pionero needs a couple of cables (serial and parallel extension cords) to communicate with the decoder. Each pin from one end must be connected to the pin of the same number at the other end (1->1, 2->2, etc...). Having said this, it’s clear that the parallel cables used to connect two computers don’t work with Pionero. In addition to this, we’ll have to activate a service mode in the decoder
Before doing anything you’ll have to check that :
1. The cables are not damaged.
2. The serial port is configured with a baud rate of 9600 bauds or more in the control panel.
3. The parallel port is in ECP mode in the BIOS.
4. None of the ports must be used by any other program or driver. In some occasions, some drivers block the use of ports and Pionero cannot communicate with the decoder.
Recommendations :
1. It would be prudent to fix interrupt-sharing conflicts before using this program.
2. If you have any cooler from an old computer, attach it to the decoder’s CPU. It gets very hot sometimes and it’s never a bad idea to cool it. In my case, it’s enough with a 486 cooler without the fan.
3. Always screw the parallel and serial connectors!
4. Although Pionero can work with an screen resolution of 800x600, it’s not recommended because you won’t see part of the Configuration and Screenshot sections. It’ better to have a 1024x1768 (real or virtual) screen resolution.
If your operating system is Windows 2000, NT or XP, then you’ll have to copy “gwiopm.sys” to the same folder where “Pionero.exe” is located, if you don’t do this, the parallel port cannot be used. If you have any other Windows version you can delete that file.
As you can see, there are eight sections in this program: Eeprom, Firmware (Parallel+Serial), Firmware (Jtag), Terminal, Tuning, Screenshot, Configuration and About. I don’t think I have to explain the last one, so I’ll focus on the others ;-)
EEPROM SECTION :
A lot of information is stored in your decoder’s eeprom. Inside this data there is the serial number, the stereo settings, etc…
We still don’t know the meaning of every byte but I think that this program will be very helpful to experiment and investigate this issue.
In this section I make no distinction between decoder models because all of the have the same way to upgrade its eeprom.
First of all, connect the computer and the decoder with the serial cable. Then remove the decoder’s metallic cover and turn the computer on. At this moment you can see all the decoder’s components, and between all those components there is a point called K2002 in the BCT14xx, BCT15xx and BCT16xx, or K2501 in the BCT13xx, that looks like a nail.
Before turning on the decoder you must use any cable to connect the K2002 or K2501 point to ground (the metallic box where you connect the antenna is a good place).
If you connected the K2002 point, then you’ll see “DL1” on the display and after a few seconds you’ll see “DL1o”. At this moment you can remove the cable connecting K2002 to ground and you are ready to use the eeprom section of Pionero.
If you connected the K2501 point, then you have to turn the decoder on with the general switch and then you have to press the ON button in the remote control. Some numbers will be shown on the decoder’s display and after a few seconds you’ll see 88:88. At this moment you can remove the cable connecting the K2501 point to ground and you are ready to use the eeprom section of Pionero.
It’s also possible to use the eeprom functions conecting the K6003 point in BCT14xx decoders or the K7003 in BCT15xx and BCT16xx decoders. The method is the same than the one explained with the K2501 point of the BCT13xx decoders.
The basic functionality is this :
1) Receiving the Eeprom’s data :
a) Click on "Receive" and the Eeprom’s contents will appear on the table next to the log of what happened. Depending on the selected length, you’ll receive all the eeprom, the 0x000 to 0x0AF address range or just one line. Remember that in some decoder models, after entering in service mode, the eeprom is erased but in other decoder models it’s intact.
b) Click on "Save as..." and write the file’s name where you wish to store the data.
2) Modifying the Eeprom’s data :
a) If you click over the table you’ll be able to edit every byte individually but, in addition to this, if you click on “Read File...” you can load eeprom data from other files. It doesn’t matter if it is the whole eeprom data or just a few lines (addresses).
3) Sending the Eeprom data :
a) Click on “Send” to send the table data to the decoder’s eeprom. Depending on the selected length, you’ll send all the eeprom, the 0x000 to 0x0AF address range or just one line.
b) If you configured correctly the serial port you’ll see some text lines in the log window.
c) At the end, if there are no errors, Pionero will inform you if it was written correctly or not.
d) If you just want to send a few bytes, there’s a button called “Send Slcted Row”. If you click on it, Pionero will send the last edited line (16 bytes).
4) Eeprom erasure :
a) Clicking on "Erase" you’ll only set the table contents to FF.
b) If you want to erase the eeprom you’ll have to send those values by clicking on “Send”.
5) Verifying the Eeprom :
a) Click on "Verify" to compare the Eeprom data with the table contents. Depending on the selected length, you’ll verify all the eeprom, the 0x000 to 0x0AF address range or just one line.
b) If you configured correctly the serial port you’ll see some text lines in the log window letting you know if the data is the same.
To do all these functions all you need is to connect the decoder to the PC with a serial cable but you can also read and write the eeprom through the Jtag interface using the table in this section as the origin or destination of what you write or read, respectively.
Remember that you have three options to read and save eeprom files corresponding to three eeprom file formats that Pionero can handle :
1- Pionero’s Text File : Original format of TTSherpa in his method to update the eeprom with HyperTerminal. This files have text lines with the commands that the decoder understand “%EE=...”. this commands are explained in the Terminal section.
2- GGF1367’s Text File : Format of the GGF1367 and GGF1351 programs. It consists in text lines with the eeprom contents in hexadecimal notation
3- Binary File : Format used in some programs like ICPROG. It’s only useful if you have the eeprom unsoldered from the main board.
From all these formats the most reliable is the first because each line have the address where those values should be located and it also have a checksum to prevent errors.
To save the log, right click on the log window and then click on “Save as...”.
Dynamit and other people sent me some information about the meaning of data inside the eeprom. These are some interesting eeprom’s values :
Position
0x02 – 0x04
Country
ESP, ITA, NLD, POL, GBR...
0x07 – 0x08
Provider ID
000C, 0019, 0004 ...
0x09
Software’s version
0x0B – 0x20
Satellite 1 name
ASTRA, HOTBIRD
0x021
Band
00 – Ku, 01 – C ???
0x022
Antenna number
PokePatryk