sb4100 debrick

This is JTAG to debrick any JTAG device. Modem, cable boxes, dish boxes routers.
Post Reply
slugworth
Junior Member
Posts: 267
Joined: Sun Feb 17, 2008 1:13 pm

sb4100 debrick

Post by slugworth »

I wasted an evening trying to debrick an sb4100,it turns out I was using a +3.3v (measured with a digital voltmeter)from a different spot that wasn't good enough.Once I used the spot from this page it worked 1st try.I did throw 2 different scripts at it,but that may have just been a coincidence.
http://www.usbjtag.com/jtagnt/sb4100.php
The 1st script still had the jumper from CE to +3.3v,hence the FFFF/FFFF id.
Then I took the jumper off and ran the second script which gave me the correct id.

Code: Select all

CE pin 26 shorted to +3.3v
-poke fffe230c 3
-poke fffe2304 0
-poke fffe2300 a
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 43c
-detect
IDCODE 0335017F
Broadcom BCM3350
IMPCODE 008009E8
EJTAG V1, V2.0
DMA supported
Unknown flash type!
Report these values http://www.usbjtag.com/vbforum ffff,ffff
remove short from flash
-poke fffe230c 3
-poke fffe2304 0
-poke fffe2300 a
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 9
-poke fffe2300 1c
-detect
IDCODE 0335017F
Broadcom BCM3350
IMPCODE 008009E8
EJTAG V1, V2.0
DMA supported
Found Address= 9fc00000 Intel 28F160C3T
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

Strange you Had to go thru all that. I fix those Easy with the LPT JTAG and Toms JTAGUtility Proggy.
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

4100 no longer need those pokes. If LPT works and NT does not work then it is the JTAG clock (use 3M or 6M with "speed 2" or "speed 1") might work.
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

usbbdm wrote:4100 no longer need those pokes. If LPT works and NT does not work then it is the JTAG clock (use 3M or 6M with "speed 2" or "speed 1") might work.
Intresting. I Always Recommend Using the Slowest Speeds For DeBricking any Target.
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
slugworth
Junior Member
Posts: 267
Joined: Sun Feb 17, 2008 1:13 pm

tommy

Post by slugworth »

TUNDRA wrote:Strange you Had to go thru all that. I fix those Easy with the LPT JTAG and Toms JTAGUtility Proggy.
I had toms jtag at one time but that hardrive got wasted and I couldn't find my lpt jtag cable.
I would have to start from scratch with toms.
Important note:remove the CE wire when done.I left mine on for future use
and it wreaks havoc with programming and normal modem operation.The wire
acts like an antenna an puts noise on the CE line.
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

slugworth wrote:I had toms jtag at one time but that hardrive got wasted and I couldn't find my lpt jtag cable.
I would have to start from scratch with toms.
Important note:remove the CE wire when done.I left mine on for future use
and it wreaks havoc with programming and normal modem operation.The wire
acts like an antenna an puts noise on the CE line.
Why? Its simple and stragit foward. and you use same commands as with the USBJTAG NT So its very Difficult to Forget if your used to using the USBJTAG NT. ;)

Just detect
ldram 9fc00000
program 9fc00000 200000

Can't get any Easyer than That.
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
slugworth
Junior Member
Posts: 267
Joined: Sun Feb 17, 2008 1:13 pm

solder

Post by slugworth »

TUNDRA wrote:Why?
Michael J. Fox soldering school.
I would have to find the diagram and make a cable.And we are having a blizzard and I can't get out to buy the parts.
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

slugworth wrote:Michael J. Fox soldering school.
I would have to find the diagram and make a cable.And we are having a blizzard and I can't get out to buy the parts.
LOL :D

Here See if this Helps
You do not have the required permissions to view the files attached to this post.
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
slugworth
Junior Member
Posts: 267
Joined: Sun Feb 17, 2008 1:13 pm

shakies

Post by slugworth »

I've been soldering since 1974,the eyes and other body parts ain't what they used to be.
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

slugworth wrote:I've been soldering since 1974,the eyes and other body parts ain't what they used to be.
Well I have FAITH In You Bro. :D
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
slugworth
Junior Member
Posts: 267
Joined: Sun Feb 17, 2008 1:13 pm

33ohm

Post by slugworth »

I just found the cable I made long time ago for toms.
It was a variation of that pic,it uses a 33ohm for TDO instead of the usual 100ohms,since that is an output from the device to pc.
Were there different versions of toms jtag?I don't remember.
slugworth
Junior Member
Posts: 267
Joined: Sun Feb 17, 2008 1:13 pm

tnetc4401 processor

Post by slugworth »

Toms had a problem with the tnetc4401 processor,and then I ended up bricking the dcm202 at that time.So I stayed with using usbjtagnt for my working modems.
CAPONE
Junior Member
Posts: 5011
Joined: Sat Dec 27, 2008 3:25 pm

Post by CAPONE »

slugworth wrote:I just found the cable I made long time ago for toms.
It was a variation of that pic,it uses a 33ohm for TDO instead of the usual 100ohms,since that is an output from the device to pc.
Were there different versions of toms jtag?I don't remember.
As you will notice theres a Schematic with out the resistors and works just as well, So going with 33 Ohms on all Resistors instead of the 100Ohms is No Big Deal.
"If you give a man a fish you feed him for a day. If you teach a man to fish you feed him for a lifetime."
Post Reply

Who is online

Users browsing this forum: No registered users and 13 guests