Turbo Quattro

**Kastrati** » Вт янв 05, 2021 6:31 pm

congo писал(а):A0000 -> qb_recovery.img 262144

120000 -> qb_primary.img 262144

760000 -> mifs-stage1.img 3145728

A60000 -> mifs-stage2.img 48234496

160000 -> eifs.img 6291456

0x03600000 -> efs-system.img 2097152

0x03800000 -> efs-persist.img

Some of my notes.

Only to correct this, if "A60000 -> mifs-stage2.img 48234496" it is long to 0x0385FFFF therefore overwrites 0x03600000 -> efs-system.img 2097152 and 0x03800000 -> efs-persist.img, My correction is:

120000 -> qb_primary.img 262144

760000 -> mifs-stage1.img 3145728

A60000 -> mifs-stage2.img 48234496

160000 -> eifs.img 6291456

0x03A40000 -> efs-system.img 2097152

0x03EC0000 -> efs-persist.img

**Kastrati** » Ср ноя 18, 2020 4:03 pm

aleka писал(а):You can not write full flash due reboot, but first part of mmx dump have Emergency tool. Due the Emergency tool you can write whole flash.

Hi @aleka , Do you now if is possible to flash eifs.img from emergency mode?. (MIB1 MHIG)
I have full time access to emergency by Uart but i dont know telnet passwd. The unit have some problems and I try to repair it reflashing.

**Kastrati** » Ср ноя 18, 2020 12:16 am

Kastrati писал(а):Somebody can explain how to restart or pause watchdog in MIB1? or copy here, I dont have acess to this link... :-(

Info: for Mib1, after login in emergency mode you must execute "slay -9 MIBEmergency" and it stop reboot and counter.

**chris2011** » Вт ноя 17, 2020 2:04 pm

reading is working fine , but i never could write it , i think there maybe must set TRST low maybe

**Kastrati** » Вт ноя 17, 2020 1:53 pm

congo писал(а):This does not work?
https://cartechnology.co.uk/showthread. ... #pid566411

Regards.

Somebody can explain how to restart or pause watchdog in MIB1? or copy here, I dont have acess to this link... :-(

**chris2011** » Ср сен 30, 2020 7:50 am

mine is also completly dead i flashed the QB_primary and QB_Recovery to the adresses which was posted here in this thread, after it shows stage2 bootloader failed to load.

Using nvflash you are supposed to able to flash MMX as well ��.

with nvflash it should be possible to flash the NOR then no Jtag is need , ;-)

**TT-2016** » Вт сен 29, 2020 9:47 pm

How far gone is your MMX?

Mine is completly dead and I do not have success with the qboot and BCT I extracted from my MMX backup.

Could you share your setting or compare with mine I postet earlier?

**chris2011** » Вт сен 29, 2020 7:45 am

i tested tegrarcm uploaded BCT and qboot works, connection for JTAG is then unlocked and working it start to read SGL512 but the unit reboots after 1min

so i cant read or write the flash.

**TT-2016** » Пн сен 28, 2020 11:09 pm

@aleka

I'm still stuck with the issue:
[ATTACH=CONFIG]69214[/ATTACH]

Any ideas?

**chris2011** » Пн сен 28, 2020 8:44 am

thanks congo, i am stuck in EFU red menu flash is damaged , JTAG can't connect, and i have no backup :-( , so only way is to desolder and read SGL ?

**congo** » Пн сен 28, 2020 8:35 am

BCT is specific for board model.

**chris2011** » Пн сен 28, 2020 8:30 am

Are these BCT files uniqe for each MMX board ?? or are the working if it is same FW on other MMX board ?

**TT-2016** » Вс сен 27, 2020 2:20 pm

No, the solution was for MIB1.
I tried to follow a similar way on my MIB2, but git stuck. I think the NVFlash Version I got is still not the right one.

**congo** » Чт сен 10, 2020 8:41 am

This does not work?
https://cartechnology.co.uk/showthread. ... #pid566411

Regards.

**onyx4** » Ср сен 09, 2020 2:31 pm

HI,
HOW TO PAUSE restart (WATCHDOG) AFTER 2 MINUTES
THANKS A LOT

**TT-2016** » Вт сен 08, 2020 9:23 pm

Still stuck with the situation mentioned above.

Вложение error_001.PNG больше недоступно

ROM Table and Corex-9 are missing in the ROM Table.

**congo** » Вт сен 08, 2020 2:52 pm

// qb_recovery.img 0xA0000
// qb_primary.img 0x120000
// eifs.img 0x600000

**aleka** » Вт сен 08, 2020 12:21 pm

TT-2016 писал(а):Which hex range from the Original MMX dump would this be?

I don’t remember and my laptop not with me now, but it seems to me it located at beginning position of MMX dump.

**TT-2016** » Вт сен 08, 2020 9:28 am

Which hex range from the Original MMX dump would this be?

**aleka** » Вт сен 08, 2020 8:21 am

You can not write full flash due reboot, but first part of mmx dump have Emergency tool. Due the Emergency tool you can write whole flash.

Turbo Quattro

MIB JITAG

Ответить

Развернуть Обзор темы: MIB JITAG