JL UBOOT TOOL DOC V1.
0r1 24/11/2023
JLUBOOT
JL UBOOTTOOL
TOOL
Dumper | Flasher | Check Tool. For JL SoC
Software by kagaimiq | DOC by BIOS
USMI Micro - https://usmi.mybb.ru/ (test forum)
1
What is it and how to use it?
This tool was created for working with JL chips.
Namely:
1. Reading the chip key (for firmware decryption, re-encryption, etc.)
2. Reading from the chip’s flash, OTP, etc. (dumping)
3. Writing into the chip’s flash, OTP, etc.
4. Erasing chip’s flash.
5. Reading/writing memory, executing arbitrary code (via jlrunner)
Preparing for work, installing software. (Windows)
The program is written in Python,
therefore we need to install the latest version of it first.
1 - https://www.python.org/downloads/ - download the Windows version.
2 – Run the installer and select the “Add python to PATH” option.
Click the “Install Now” button and the installation is now complete.
2
3 - Run the command prompt, in order to install three extensions:
1 - crcmod
2 - pyyaml
3 - pycryptodomex
Install them via “pip”; enter the following command:
"pip install crcmod pyyaml pycryptodomex" – and push Enter.
Wait for the installation to complete, and we’re done.
That’s all what’s needed for the tool to work
3
4 – Download the JL UBOOT tool itself from:
https://github.com/kagaimiq/jl-uboot-tool
5 – Unzip the archive to your desktop.
The program is ready to use.
6 - Now you need to connect the chip to the computer via a special
USB updater dongle (aka “programmer” or “trigger”)
https://usmi.mybb.ru/viewtopic.php?id=12
The AC6951C board and an USB Updater V4.0 dongle
4
The chip should show up in device manager as an
“xxxx UBOOT1.00” USB Device
Where the “xxxx” denotes the chip’s name (e.g. BR17, BR21, DV15, etc.)
After this, you can launch the program itself.
The main utility for dumping, flashing, etc. is:
jluboottool.py
5
Just double-click on this file, and if everything is done correctly,
program should start and identify the chip:
To control the program, we simply enter commands.
Here’s the list of the important ones:
exit: Exit from the tool
read <address> <length> <file>: Dump chip’s flash into a file
write <address> <file>: Write the file into chip’s flash
erasechip: Erase the whole flash chip
erase <address> <length>: Erase an area in flash
dump <address> [<length>]: Hex dump the flash area into the console
