munkustrap wrote:Hi
yes, the ESN it is on the COM1.
That simplifies things then, only one serial interface to sniff.
munkustrap wrote:When OS5.1 has booted up, there must be a Setup Windows somewhere where you can read the ESN (I think its the one where you can add your licences).
Yes, you have to explicitly click on the Setup window menu selection within the OS 5.1 GUI to get to that dialog box, and yes, the ESN from the Brain Board U16 DS2401 is reflected in that dialog box. This is useful when you have a properly functioning OS 5.1 system but may not have a record of what your ESN is.
munkustrap wrote:I' try to find out the command by analysing the hex code of the brain Firmware.
actual Status:
I found the place where the ESN is read from the small chip that holds the ESN. I also know how I can overwrite that with a fixed ESN with license code (I already got one, thanks !)
I fount the Position in the Firmware where the ESN is send out. the Format on the RS232 is something like
????????????c (???... stands for the ESN) The ESN seems to be terminated with a "c".
Yes, the ESN is 48 bits, so each of your 12 "?" above corresponds to a hex 4-bit nibble. I recall the "c" value termination from some older d8b RS232 discussions on this board.
munkustrap wrote:In fact my first hack Trial is ready, I only Need to verify it somehow.
As I do not have a Mackie CPU I Need this command to read out the ESN. Without this command it is only possible to
Exchange the original asc file with the hacked one, boot up and lokk what ESN the System Shows.
So you're understanding is that the console is explicitly solicited for the ESN by the OS 5.1 software and that the Brain Board firmware responds to that request, not that the Brain Board asynchronously volunteers the ESN when it's ready?
I believe I have what is needed to sniff the RS232 Console Data interface for the ESN exchange, everything except for time. I might have a chance this weekend if that's not too much of a delay for you.