4200 and usbtag, all lights, failure commands

SB4XXX,SBV4XXX.
Locked
Neocristobal
Junior Member
Posts: 61
Joined: Sun Sep 30, 2007 10:22 pm

4200 and usbtag, all lights, failure commands

Post by Neocristobal »

My 4200 This surfboard modem have all leds lighting

I open usbjtag program
this is mensage of usbjtag program

Code: Select all

-detect 
 IDCODE 334517F
 Broadcom BCM3345
 IMPCODE 800908
 DMA supoorted
-ldram 9fc00000  (I choose full flash mod hackware)
 [b]Address out of range[/b]
whats up?

help
Blob
Junior Member
Posts: 15
Joined: Sun Nov 11, 2007 5:27 pm
Location: Cyberspace!
Contact:

Post by Blob »

mmm is it bricked?? Might want to do a recovery method...
Blob
Neocristobal
Junior Member
Posts: 61
Joined: Sun Sep 30, 2007 10:22 pm

Post by Neocristobal »

Blob wrote:mmm is it bricked?? Might want to do a recovery method...
Probe with blackcat, and recognizes the full flash also use techniques of recovery, deploying the full flash and nothing ....

Any suggestions please
tester5
Junior Member
Posts: 21
Joined: Wed Jul 27, 2005 9:16 pm
Location: NewYork&Chicago
Contact:

Post by tester5 »

guys never program boot sector on any device unless there is a good reason for it,
never program cfg and mac are or certificates...even if looks like log dont....

there are 2 images in every modem each same size....
Blob
Junior Member
Posts: 15
Joined: Sun Nov 11, 2007 5:27 pm
Location: Cyberspace!
Contact:

Toss the blackcat

Post by Blob »

Toss the blackcat it's crap on 4200s.... Use the USBJTAG and check out the debrick / recover video on SB4200 in the downloads section.... I was able to get 3 of my bricked SB4xxxs back up and running following excatly what the readme included w/ that video said to do... If you need a 2mb dump of intel or tosh or fustiju just let me know I can send you a set.
Blob
Neocristobal
Junior Member
Posts: 61
Joined: Sun Sep 30, 2007 10:22 pm

Post by Neocristobal »

Blob wrote:Toss the blackcat it's crap on 4200s.... Use the USBJTAG and check out the debrick / recover video on SB4200 in the downloads section.... I was able to get 3 of my bricked SB4xxxs back up and running following excatly what the readme included w/ that video said to do... If you need a 2mb dump of intel or tosh or fustiju just let me know I can send you a set.
thanks blob, I have full flash 2mb, I use intel flah datasheet in my 4200i

hackware full flash mod

I think reschedule the boot, whit blackcat, for not have lpt port in my pc, and using sbrider for a new firmware update

thanks for all
Neocristobal
Junior Member
Posts: 61
Joined: Sun Sep 30, 2007 10:22 pm

Post by Neocristobal »

ok, in console

Code: Select all

Compair data Failed address 9FC0033E,target 40,PC memory 00
I try any times programming full flash, and output is allways this code

help me please

???
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

Neocristobal
Can you cut and paste the whole output window here? I need both your command and the result.
Tell me which version of software do you use now.
Neocristobal
Junior Member
Posts: 61
Joined: Sun Sep 30, 2007 10:22 pm

Post by Neocristobal »

HI usbdm

ver. soft: 0.141

out of commands

I: "detect"
out: -detect
IDCODE 334517F
Broadcom BCM3345
IMPCODE 800908
DMA supoorted
Found Address= 9fc00000 Intel 28F160C3T

I: ldram 9fc00000 (choise full flash 4200)
out: -ldram 9fc00000

I: program 9fc00000 200000

out: program 9fc00000 200000
Erase starts...
Erase time 00:00:19 .081
Program speed 143.70 KB/s
Program time 00:00:14 .075
Program pass, if no further programming needed, power off/on the target

I:cmpram 9fc00000 200000

out: -cmpram 9fc00000 200000
Compair data Failed address 9FC0033E,target 40,PC memory 00



all text output

Code: Select all

-detect 
 IDCODE 334517F
 Broadcom BCM3345
 IMPCODE 800908
 DMA supoorted
 Found Address= 9fc00000 Intel 28F160C3T	
-ldram 9fc00000 
-ld 
-ldram 9fc00000 
 Sript finished
-program 9fc00000 200000 
 Erase starts...
 Erase time 00:00:19 .081
 Program speed 143.70 KB/s
 Program time 00:00:14 .075
 Program pass, if no further programming needed, power off/on the target
-cmpram 9fc00000 200000 
 Compair data Failed address 9FC0033E,target 40,PC memory 00

Try different flashs, original and hackware


The only led of power is ON

thanks
Neocristobal
Junior Member
Posts: 61
Joined: Sun Sep 30, 2007 10:22 pm

Post by Neocristobal »

Ok, repair, basically repaired the bios of the flash, using a flash boteable, specifically the 0.4.5.5
This method is always applied with blackcat and sbrider, but Tired after I turned to writing usbjtag


If someone is interested in what I did next:

ldram 9fc00000 25600 ----- flash boteable 0.4.4.5
Program 9fc00000 25600

Check writing sector

Cmpram 9fc00000 25600 .---- if everything is fine

Data OK

Continue, if not, we repeat the same thing until you write well

Then we use the sbrider and we climb the firmware temporary

Greetings
Neo
ecuajosh
Junior Member
Posts: 2
Joined: Thu May 14, 2009 4:06 pm

Post by ecuajosh »

hi there i need some help debrickin my sb4200 it has a intel flash it seen i installed the wrong firmware and it doesn't detect the flash. i didn't back up the flash som i need a 2mb dump to debrick it i guess can any one help me.
i tryed soldering the the 2 point on the flash chip but i get no results.

Read IDCODE: 0x0334517f
Manufacturer: Broadcom
Part: BCM3345
Version: 0x0
---------------------------------
Create & Clear RAM Buffer (0x80000000 - 0x80800000)
Load Configuration File: bcm3345.def
IR Length: 0x5
Endian: Big
Protocol: EJTAG
RAM Start Address: 0x80000000
RAM Size: 0x800000
FLASH Start Address: 0x9fc00000
---------------------------------
Read IMPCODE: 0x00800908
EJTAG Version: 1 or 2.0
EJTAG DMA Support: Yes
---------------------------------
Detect FLASH : Unknown (Manufacturer’s: 0xffff Device: 0xffff)
jtag> ldram ofc00000
Usage: ldram address (filename)
Usage: ldram tabname
Load memory.
jtag> poke fffe230c 3
Write Address: 0xfffe230c, Value = 0x00000003
jtag> poke fffe2304 0
Write Address: 0xfffe2304, Value = 0x00000000
jtag> poke fffe2300 a
Write Address: 0xfffe2300, Value = 0x0000000a
jtag> poke fffe2300 9
Write Address: 0xfffe2300, Value = 0x00000009
jtag> poke fffe2300 9
Write Address: 0xfffe2300, Value = 0x00000009
jtag> poke fffe2300 9
Write Address: 0xfffe2300, Value = 0x00000009
jtag> poke fffe2300 9
Write Address: 0xfffe2300, Value = 0x00000009
jtag> poke fffe2300 9
Write Address: 0xfffe2300, Value = 0x00000009
jtag> poke fffe2300 9
Write Address: 0xfffe2300, Value = 0x00000009
jtag> poke fffe2300 9
Write Address: 0xfffe2300, Value = 0x00000009
jtag> poke fffe2300 9
Write Address: 0xfffe2300, Value = 0x00000009
jtag> poke fffe2300 1c
Write Address: 0xfffe2300, Value = 0x0000001c
jtag> detect

Read IDCODE: 0x0334517f
Manufacturer: Broadcom
Part: BCM3345
Version: 0x0
---------------------------------
Load Configuration File: bcm3345.def
IR Length: 0x5
Endian: Big
Protocol: EJTAG
RAM Start Address: 0x80000000
RAM Size: 0x800000
FLASH Start Address: 0x9fc00000
---------------------------------
Read IMPCODE: 0x00800908
EJTAG Version: 1 or 2.0
EJTAG DMA Support: Yes
---------------------------------
Detect FLASH : Unknown (Manufacturer’s: 0xffff Device: 0xffff)
jtag> program 9fc00000 200000
First Detect Flash Memory...
am i doing something wrong? did i miss something.
thanks
usbbdm
Junior Member
Posts: 8962
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

This is not USB JTAG NT or old USB JTAG NT software, there will not be any support for this. What I know it was a software written on PJTAG with commands copied from USB JTAG.
meminking
Junior Member
Posts: 5
Joined: Fri Sep 25, 2009 4:05 pm

sb 4200

Post by meminking »

First cable you're using that are not the same commands but if you have the NT test usbjtag I look at this file works only with NT usbjtag you give in all the flash and then choose this file after you give him ready to write and
After many tests aser this works well leave me comment if they sirbe http://rapidshare.com/files/289637407/S ... minkig.zip
Locked

Who is online

Users browsing this forum: No registered users and 4 guests