Motorola SBG9000 surfboard
The CPU of the board uses BCM3348. The tool to debug the CPU is EJTAG (DMA).

Picture showing JTAG is connected
sgb900s
Flash One 8MB 28F640J3
Firmware 4MB $9FC00000-$9FFFFFFF
RAM 16MB $80000000-$80FFFFFF
Definition in usbjtag.def Commands (usbjtag 0.11):
Test:
Name=SBG900
DLL=SBG900.dll
Memory=Ram,0,0×80000000,0x1000000
// Boot loader Memory=boot,1,0x9fc00000,0x20000
Memory=App,1,0x9fc20000,0x3c0000
Memory=cfg,1,0x9fFe0000,0x20000
Programram=0x80400000
// watch dog Init=0xfffe0224,0
Endian=Big
IRLength=5
Protocol=EJTAG
DMA=Yes
ProbTrap=1
Backup firmware
getram 9Fc00000 400000
save 9fc00000 400000

Program whole firmware.
ldram 9fc00000
program 9fc00000 400000
Rescue SBG900. When box not fire up. Normal programming will not work. First need to program boot.
detect
ldram boot (Select proper boot file)
erase boot
sprogram boot (Slow programming)

Power off on modem

detect
ldram app(Any tabes you have backed up)
program app(Any tabs you want at normal speed)

Por admin

Deja una respuesta

Ads Blocker Image Powered by Code Help Pro

Ads Blocker Detected!!!

We have detected that you are using extensions to block ads. Please support us by disabling these ads blocker.

Powered By
100% Free SEO Tools - Tool Kits PRO