SBV4200

Motorola SBV4200 surfboard
The CPU of the board uses BCM3345. The tool to debug the CPU is EJTAG (DMA).

Picture showing board:

This is not a JTAG:

Jtag Points (Top):

JTAG Points (Bottom):

Neat Job:

Flash One 4MB 28F320C3T
Firmware 4MB $9FC00000-$9FFFFFFF
RAM 16MB $80000000-$81000000

 

Definition in usbjtag.def Commands (usbjtag 0.12):
Name=SBV4200
Endian=Big
Memory=Ram,0,0x80000000,800000
Memory=Bootloader,1,0x9fC00000,8000
Memory=NonVol,1,0x9fC08000,8000
Memory=Image1,1,0x9fC10000,1F0000
Memory=Image2,1,0x9fE00000,1F0000
Memory=Dyn,1,0x9fFF0000,10000
Programram=0x80400000
Endian=Big
IRLength=5
Protocol=EJTAG
DMA=Yes
ProbTrap=1
DebugMem=0
// watch dog
Init=0xfffe0224,0
Backup firmware
getram 9fc00000 400000
save 9fc00000 400000

Program whole firmware. (Should not interrupt)
detect
ldram 9fc00000
program 9fc00000 400000
cmpram 9fc00000 400000

cmpram is optional. It can be used after program only when DMA is supported.After that you should see DEBUG ON. You should see "Compair data OK"


Rescue SB4200. When box not fire up. Normal programming will not work. You can not use sprogram or erase for SB4200!!
ldram 9fc00000(Select the backed up file)
poke fffe230c 3
poke fffe2304 0
poke fffe2300 a
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 9
poke fffe2300 1c
detect
program 9fc00000 400000
cmpram 9fc00000 400000
if cmpram failed, power off and on the box again and do
detect
program 9fc00000 400000
cmpram 9fc00000 400000

Lasted Updated:December 31 2016

Vists since Jan 4,2009