EEVblog #411 - MiniPro TL866 Universal Programmer Review

[bilko]

I hope that the manufacturer is reading this thread. After spending an inordinate amount of time trying to google an Eprom ID code for an unmarked device that I had, I wondered why the software for the 866 can't search its Eprom database and find the correct chip.

If it can do this already, would somebody care to explain how to do this, I couldn't find anything in the menus or in the Chinese help file that I have.

[sparkyuiop]

Hello. I'm hoping someone may be able to help me find the capacitance rating for the "C60" capacitor that I accidentally knocked off the PCB and lost from my TL866CS programmer.

I'm hoping it may also be possible to use a standard cap rather than the SMD type?

At present when I power it on it says the over-voltage protection is on and fails the self check. The yellow LED does also no longer flash.
Programming is still possible but it's not reliable.

Any help much much appreciated.
Regards

Phill Thorne

[bilko]

1uF

see here schematic

https://www.eevblog.com/forum/blog/eevblog-411-minipro-tl866-universal-programmer-review/msg222247/?topicseen#msg222247

[MrAureliusR]

Also, you can use any type of cap, as long as it is 1uF and you can get the pins neatly soldered, and you can bend the cap out of the way. I'd go for a disc ceramic or similar. I replaced the overcurrent cap (C22) with a higher value one to try and fix the overcurrent when programming EPROM's that are old (1980's and earlier) and I used a disc cap, just soldered it and flattened it against the board. Works like a charm.

Well, it didn't fix the problem (entirely) but it still passes all it's self-tests. By the way, upgrading the CS to the A is very easy! If you want help doing it just shoot me a PM.

[mos6502]

That update hack is neat. What I did was to hack the MiniPro.exe. All you have to do is change these bytes with a hex editor:

0x01648 0x75 to 0xEB
0x11BBA 0x75 to 0xEB
0x23B34 0x75 to 0xEB

These are valid for the 5.91 .exe.

This changes a few JNZs that check for the programmer version to JMPs ... so the program will think your programmer is a TL866A.

I'd love it if someone could try it out and confirm it's working. I haven't added the header to my programmer yet.

[radioman]

That update hack is neat. What I did was to hack the MiniPro.exe. All you have to do is change these bytes with a hex editor:

0x01648 0x75 to 0xEB
0x11BBA 0x75 to 0xEB
0x23B34 0x75 to 0xEB

These are valid for the 5.91 .exe.

This changes a few JNZs that check for the programmer version to JMPs ... so the program will think your programmer is a TL866A.

I'd love it if someone could try it out and confirm it's working. I haven't added the header to my programmer yet.

the program will think that but the firmware not, its not so easy!
Even if the program send the command correctly the firmware will ignore the icsp parameter and the programmer will perform only ZIF socket  programming.
Also if you change 0x01648 0x75 to 0xEB and do a firmware update you will end with random bytes programmed instead of correct firmware, see my updater here:https://www.eevblog.com/forum/blog/eevblog-411-minipro-tl866-universal-programmer-review/msg225443/#msg225443 ; load the update.dat file, check the TL866A version an click reflash. The programmer will be switched in bootloader mode,  reflashed and it will remain in bootloader mode instead of normal mode, because of main firmware is wrong. You will need to reflash the entire internal microcontroler firmware to A version because the CS is limited to ZIF operations only.

[mos6502]

Thanks for the explanation. Would've been too easy. I thought the difference was simply an ID string in the firmware.

I actually thought about trying to trick MiniProg.exe into flashing the A version of the firmware, but I really didn't get anywhere and eventually I gave up.

I did realize that the firmware was somehow encrypted. Do you know what encryption method is used?

[radioman]

I did realize that the firmware was somehow encrypted. Do you know what encryption method is used?

Just Xoring each byte of the firmware against to the two random generated lookup tables and biwise operations between some bytes. But the encryption is done with different tables; for ex. the update.dat file is encrypted against one table; the minipro.exe will decrypt this file and send the firmware to the bootloader, then the bootloader will decrypt the received data against another random table and will reprogram the internal PIC flash, so this is kind of two level encryption; also the first level encryption data has dummy bytes inserted at some offsets, the bootloader will just trim these dummy bytes before decryption and so on.

Moreover, the devcode and serial code encryption is evil, besides xoring against a random table  they added crc16 and byte swap! This is insane!
The weakness of this method is that if the data contains large blocks of FF's then you can detect the encryption pattern.

[bobkat2769]

I just got one of these programmers with all the adapters and I really like it. *=^.^=*

But, after reading all 18 pages of this thread... *thud!* =x.X=;;

... I was wondering if that programmer someone had been in contact with at Autoelectric would be willing to add more logic chips types to the software?

If they are, should I send them a list of the unsupported devices I'd like to be able to test?

Anyway, any help on this would be much appreciated if possible.

Thanks!

BobKat

[fluxcapacitor]

ask amarbir ,he`s the indian distributor for autoelectric.Send him a pm

https://www.eevblog.com/forum/microcontrollers/help-in-copying-a-set-of-eprom-%2827c256%29-and-programable-memory-9306/15/

[jinzo]

I have sent them a mail to the address posted in this thread asking for implementation of some NEC chips (Looks quite simple to program them with UART) but haven't heard back. So I don't know... If anyone gets ahold of a contact (that actually responds) I would appreciate it.

[fluxcapacitor]

I have sent them a mail to the address posted in this thread asking for implementation of some NEC chips (Looks quite simple to program them with UART) but haven't heard back. So I don't know... If anyone gets ahold of a contact (that actually responds) I would appreciate it.

try these.If you do try and contact them,you may have to translate your message to chinese, if they dont understand english ?

Haikou Xin Electronics Co. Workers
Address: Haikou City, Hainan Province, Nanhai West Avenue
Contact: Wang Xin EMAIL: autoelector@yahoo.com
Phone: 13198907988 QQ: 532007590
Phone 0898 -68,681,816
FAX :0898-68681815

http://www.autoelectric.cn China Hainan
TEL: 0898 68681816 FAX :0898-68681815 Mobile: 13198907988
Haikou Xin Engineering Electronics Co., Ltd. Technical support: Wang Xin QQ: 532007590

[sparkyuiop]

Also, you can use any type of cap...

Thanks for your help everyone but the 1uf didn't change anything. I tried a ceramic (orange type) and a 1uf / 50v canister type with same result. Going to check I have put LED's in right way. Don't know it that would cause an issue or not but the yellow one doesn't light up at all. It is connected to the correct circuit traces and the LED works so time to desolder again and have a butchers at the anode and cathode!

[jinzo]

Finally got a replay on one of my mails.
If anyone is writing to them on autoelector@yahoo.com - be sure to translate it to chinese (I used google translate) and they will replay.

But unfortunately they replayed that they'll think about adding new chips in 2014 if they have time (if that translated correctly). :/

[zerocool80]

Hi there,

is it also possible to upgrade my tl866cs to a tl866a with a 2013 build board inside?

regards Christian

[radioman]

Hi there,

is it also possible to upgrade my tl866cs to a tl866a with a 2013 build board inside?

regards Christian

Yes, you can. But please wait a little because I will release an update of my firmware generator with ability to backup your internal firmware first before reflashing. Also I will need an CS dump for my analysis purpose.

[olsenn]

I have to say that I am very impressed with my TL866CS. I was previously looking at the $500 - $1000 universal programmers from Batronic, Xeltek, etc; and this little guy seems to program even more chips than those, and it only costs $50. It might be a little slower, but I don't gang program with it -- only one chip at a time.

[zerocool80]

Yes, you can. But please wait a little because I will release an update of my firmware generator with ability to backup your internal firmware first before reflashing. Also I will need an CS dump for my analysis purpose.

Sounds good:-)
I can wait. what do you think is a little? ;-)
I have to organize another Pic Programmer at first , but thats no Problem..

[radioman]

Sounds good:-)
I can wait. what do you think is a little? ;-)
I have to organize another Pic Programmer at first , but thats no Problem..

Here is the updated firmware generator, now with the option to backup your firmware first.
TL866 firmware updater

How to backup your firmware:
1.In the hardware tab, browse for update.dat file (you will find this file in the minipro installation folder)
2.Check the option "Use firmware dumper"
3.Select your programmer version (CS/A). This is very important!
4.Press "Reflash" button
After reflash the "Dump" button will become active, just press this button and you will be prompted to save your own internal firmware in hex format.
Now your firmware is saved. Just unckeck the "Use firmware dumper" and press the "Reflash" button again. This will restore the normal function of the programmer.

This firmware dumper was tested on TL866A but not on CS because i don't have one. Good luck!

[zerocool80]

Here is the updated firmware generator, now with the option to backup your firmware first.
TL866 firmware updater

How to backup your firmware:
1.In the hardware tab, browse for update.dat file (you will find this file in the minipro installation folder)
2.Check the option "Use firmware dumper"
3.Select your programmer version (CS/A). This is very important!
4.Press "Reflash" button
After reflash the "Dump" button will become active, just press this button and you will be prompted to save your own internal firmware in hex format.
Now your firmware is saved. Just unckeck the "Use firmware dumper" and press the "Reflash" button again. This will restore the normal function of the programmer.

This firmware dumper was tested on TL866A but not on CS because i don't have one. Good luck!

Hi,
seems to work also on the CS Version :-)

[radioman]

Hi,
seems to work also on the CS Version :-)

Thanks for your feedback @zerocool80! the hex file dump is valid. Now you can upgrade CS to A if you want.

[BravoV]

Hi there,

is it also possible to upgrade my tl866cs to a tl866a with a 2013 build board inside?

regards Christian

Whats the different between old board and new 2013 board ?

[radioman]

Whats the different between old board and new 2013 board ?

Nothing! they are identical. Only the silkscreen marking with PCB manufacturing date.

[BravoV]

Whats the different between old board and new 2013 board ?

Nothing! they are identical. Only the silkscreen marking with PCB manufacturing date.

As I guessed, just don't believe they will be bothered with the troubles and extra cost revising the board layout and components changes if its not "desperately" needed.

Could this means radioman's hack is not that popular yet that A version sale is not affected significantly ? 

[radioman]

Could this means radioman's hack is not that popular yet that A version sale is not affected significantly ? 

Really? Then check this: http://www.sivava.com/slt866_willem-usb.html or this: http://www.sivava.com/willem_programmer-svv.html
Rebranded version or copy/clone? Ah! and the name SLT866 is funny also.