Debrick an RCA modem. (Not recommend)
-
- Junior Member
- Posts: 8962
- Joined: Mon Jul 18, 2005 9:33 pm
Debrick an RCA modem. (Not recommend)
Today I debricked an RCA DCM 315 modem. This is programmed with bad boot. The detect always get stuck. When set debrick on, the detect gives you 0000,0000.
Here is how to debrick it.
First solder a wire on 3.3V on the flash.
The step to do.
1.Start the JTAG 0.22
2. Carefully use the wire touch the CE pin. Start the power.
3. set debrick on by command "debrick"
4. power on the modem. Please note, because the CE pin is connected to the 3.3V. The modem will not function properly.
5. use command "bk". At this time you should see "DEBUG ON"
6. Remove the pin from CE
7. Use "flshset" command to set the flash. In this example command, "flshset boot 1 2249
8. type command "erase boot"
You have erased the boot.
Now you can use the method 1 or method 2 of http://www.usbjtag.com/jtagdevices/sb5100.php to recover the modem.
I am searching new method to debrick device with software only. Please use this method with caution.
Here is how to debrick it.
First solder a wire on 3.3V on the flash.
The step to do.
1.Start the JTAG 0.22
2. Carefully use the wire touch the CE pin. Start the power.
3. set debrick on by command "debrick"
4. power on the modem. Please note, because the CE pin is connected to the 3.3V. The modem will not function properly.
5. use command "bk". At this time you should see "DEBUG ON"
6. Remove the pin from CE
7. Use "flshset" command to set the flash. In this example command, "flshset boot 1 2249
8. type command "erase boot"
You have erased the boot.
Now you can use the method 1 or method 2 of http://www.usbjtag.com/jtagdevices/sb5100.php to recover the modem.
I am searching new method to debrick device with software only. Please use this method with caution.
-
- Junior Member
- Posts: 8962
- Joined: Mon Jul 18, 2005 9:33 pm
I normally check the register view when configure.santino wrote:tried that and did get to erase boot but still detect 0000. did the poke and would stay stuck on the program.
After bk command you should see the PC as BFC0XXXX. If not normally the bk does not really gives you the trick.
You also need to give proper flash type and if erase properly, the modem will be able to use rescue method.
-
- Junior Member
- Posts: 404
- Joined: Tue Jan 01, 2008 2:01 pm
Hi usbbdm, i have done that method, is great, no more 000 on detect, but now when i places debrick i got just ffff. what can i do. My flash is Intel 28F160CEB of an SB5100 modem.usbbdm wrote:I normally check the register view when configure.
After bk command you should see the PC as BFC0XXXX. If not normally the bk does not really gives you the trick.
You also need to give proper flash type and if erase properly, the modem will be able to use rescue method.
thanks
-
- Junior Member
- Posts: 404
- Joined: Tue Jan 01, 2008 2:01 pm
That's good, could you please tell me if you can debrick it, i also having some problems with my SB5100. The comand is:blowhard7 wrote:Could someone tell me the proper "flshset" command for the Intel TE28F160C3BD70.
Trying to debrick SB5100. Detect will not detect the flash.
Thanks.
"flshset boot 89 88C3" for that Flash. I would be pleased if you can inform me if you debrick your modem.
Bye
-
- Junior Member
- Posts: 43
- Joined: Sat Aug 12, 2006 9:01 am
Successfully debricked the modem. USBjtag hung at "erasing" every time.
I finally gave up and used the Blackcat to rewrite the boot block. USBjtag now successfully restored the modem. I then used the USBjtag to install the Sigma firmware.
Apparently there is a problem erasing the boot block after it is damaged. I honestly tried everything.
I finally gave up and used the Blackcat to rewrite the boot block. USBjtag now successfully restored the modem. I then used the USBjtag to install the Sigma firmware.
Apparently there is a problem erasing the boot block after it is damaged. I honestly tried everything.
-
- Junior Member
- Posts: 8962
- Joined: Mon Jul 18, 2005 9:33 pm
Have you tried to use debrick mode? If in debrick on mode you can detect the flash, you canblowhard7 wrote:Successfully debricked the modem. USBjtag hung at "erasing" every time.
I finally gave up and used the Blackcat to rewrite the boot block. USBjtag now successfully restored the modem. I then used the USBjtag to install the Sigma firmware.
Apparently there is a problem erasing the boot block after it is damaged. I honestly tried everything.
1. use erase to erase the flash.
2. Use poke command to erase flash.
The USB JTAG erase command use the debug port and sometime when CPU is in bad mode it can not enter debug mode properly. Thus it hangs. Same thing happened on detect the flash. Use the short pin (be careful about this, might be a better idea to use a 100ohm resistor is to force the CPU enter the known state and can safely enter the debug mode.
-
- Junior Member
- Posts: 404
- Joined: Tue Jan 01, 2008 2:01 pm
Do you debrick an sb5100, what were the symptoms, please tell how you debrick it.blowhard7 wrote:Successfully debricked the modem. USBjtag hung at "erasing" every time.
I finally gave up and used the Blackcat to rewrite the boot block. USBjtag now successfully restored the modem. I then used the USBjtag to install the Sigma firmware.
Apparently there is a problem erasing the boot block after it is damaged. I honestly tried everything.
Thanks
-
- Junior Member
- Posts: 8962
- Joined: Mon Jul 18, 2005 9:33 pm
I have programmed the SB5101 original to SB5100 with ST flash chip. (M28W160CB)
The modem is NOT bricked. I can easily debrick it.
I have one flash chip Intel TE28F160C3B. It is bricked. I can get the flash type. But erase hangs. The flash must have been written some command and the chip is bad now. After I replace the flash, the modem works just fine.
For those who have bricked modem, knowing how to replace the flash chip is a must when all the JTAG options have been used.
To replace the flash you need a good heat gun and a fine solder iron and a magnifier and a steady hand. Sometime you have to do it.
You do not have to find a new flash chip, those flash chips can be found on older modems.
The modem is NOT bricked. I can easily debrick it.
I have one flash chip Intel TE28F160C3B. It is bricked. I can get the flash type. But erase hangs. The flash must have been written some command and the chip is bad now. After I replace the flash, the modem works just fine.
For those who have bricked modem, knowing how to replace the flash chip is a must when all the JTAG options have been used.
To replace the flash you need a good heat gun and a fine solder iron and a magnifier and a steady hand. Sometime you have to do it.
You do not have to find a new flash chip, those flash chips can be found on older modems.
Who is online
Users browsing this forum: No registered users and 10 guests