April 24, 2024

EBAZ4205 Bitcoin miner board - Dirty JTAG

It is April of 2024 and I have just finished flashing DirtyJTAG onto a blue pill. My ultimate interest (at this time) is in reading (and writing) NAND flash on my Ebaz-4205 board via JTAG.

I am running Fedora 39. There is no urjtag on my machine right now. I try "dnf install urjtag" and I have it!

Just typing "urjtag" does not work. But I can type "jtag" and I get: 

UrJTAG 2021.03 #
warning: UrJTAG may damage your hardware!
Type "quit" to exit, "help" for help.
jtag>
After this: 
cable DirtyJTAG
It accepts my adapter, now I need to solder some wires. With the wires soldered and after fixing one wiring error I get: 
jtag> cable dirtyjtag
jtag> detect
IR length: 10
Chain length: 2
Device Id: 00010011011100100010000010010011 (0x13722093)
  Manufacturer: Xilinx (0x093)
  Unknown part! (0011011100100010) (/usr/share/urjtag/xilinx/PARTS)
Device Id: 01001011101000000000010001110111 (0x4BA00477)
  Unknown manufacturer! (01000111011) (/usr/share/urjtag/MANUFACTURERS)
jtag> idcode
Reading 0 bytes of idcode
Read 10010011(0x93) 00100000(0x20) 01110010(0x72) 00010011(0x13) 01110111(0x77) 00000100(0x04) 10100000(0xa0) 01001011(0x4b) 00000000(0x00) 00000000(0x00) 00000000(0x00) 00000000(0x00)
I also type "discovery", but it goes on and on endlessly I really only have 3 parts of interest on my Ebaz board: Searching on the Winbond chip, I find this information in an openWRT boot log: 
nand: device found, Manufacturer ID: 0xef, Chip ID: 0xf1
nand: Winbond W29N01HV

I take a look at /usr/share/urjtag. There are no entries for Winbond. The entry for Xilinx in the MANUFACTURERS file looks like: 

00001001001     xilinx          Xilinx
How does this match 0x93 ?? And consider the published manufacturer code for Winbond, namely 0xef == 11101111. There are mysteries here.
Feedback? Questions? Drop me a line!

Tom's Computer Info / tom@mmto.org