how to dump firmware from broadcom based modems

[drewmerc]

i dont read my pm's unless i know the name, i dont do this stuff anymore so i generally ignore all requests for help
i dont get why you think the cfg should be 2mb as it will only be 32k or 64k, have you opened what ever you dumped with readmem
and looked it in a hex editor? you should be able to see the nonvol area (certs)
i am assuming you have looked at other verifed nonvols and you'll see the same sequence of text showing the start of the nonvol so just copy out 32k