Picture showing board:
This is not a JTAG:
Jtag Points (Top):
JTAG Points (Bottom):
Neat Job:
| SBV4200 |
Motorola SBV4200 surfboard
The CPU of the board uses BCM3345. The tool to
debug the CPU is EJTAG (DMA).
|
Picture showing board: |
This is not a JTAG:
|
|
Jtag Points (Top):
|
JTAG Points (Bottom):
|
|
Neat Job:
|
| Flash | One 4MB | 28F320C3T |
| Firmware | 4MB | $9FC00000-$9FFFFFFF |
| RAM | 16MB | $80000000-$81000000 |
| Definition in usbjtag.def | Commands (usbjtag 0.12): |
| Name=SBV4200 Endian=Big Memory=Ram,0,0x80000000,800000 Memory=Bootloader,1,0x9fC00000,8000 Memory=NonVol,1,0x9fC08000,8000 Memory=Image1,1,0x9fC10000,1F0000 Memory=Image2,1,0x9fE00000,1F0000 Memory=Dyn,1,0x9fFF0000,10000 Programram=0x80400000 Endian=Big IRLength=5 Protocol=EJTAG DMA=Yes ProbTrap=1 DebugMem=0 // watch dog Init=0xfffe0224,0 |
Backup firmware getram 9fc00000 400000 save 9fc00000 400000 Program whole firmware. (Should not interrupt) detect ldram 9fc00000 program 9fc00000 400000 cmpram 9fc00000 400000 cmpram is optional. It can be used after program only when DMA is supported.After that you should see DEBUG ON. You should see "Compair data OK" Rescue SB4200. When box not fire up. Normal programming will not work. You can not use sprogram or erase for SB4200!! ldram 9fc00000(Select the backed up file) poke fffe230c 3 poke fffe2304 0 poke fffe2300 a poke fffe2300 9 poke fffe2300 9 poke fffe2300 9 poke fffe2300 9 poke fffe2300 9 poke fffe2300 9 poke fffe2300 9 poke fffe2300 9 poke fffe2300 1c detect program 9fc00000 400000 cmpram 9fc00000 400000 if cmpram failed, power off and on the box again and do detect program 9fc00000 400000 cmpram 9fc00000 400000 |
