Newbie here, I don't know if this is stupid question but please understand that I don't have any experience in this field. I own EPC2203 since 2009, a new modem is arriving soon so I've decided to experiment with this old one. I've bought a cheap USB to TTL cable and hooked it to my modem. After I access the terminal I get this:
Is possible that this modem has locked bootloader or something as it seems that there is no available console? Any ideas how to unlock it? I just want to dump whole firmware and analyse it.
Code:
b00
BCM3368A1 TP1
1
Asymmetric VCDL shmoo:
DDR1 DDR2 DDR3 DDR4 VCDL
0000 0000 0424 0008 0D0D
Reduced DDR drive strength
PI sync init:1
346890
MemSize: .........................32M
Flash detected @0xbf000000
Signature: a010
SA BootLoader Version: 2.1.6l_R7 Release Gnu
Build Date: Aug 7 2006
Build Time: 21:16:19
(A). Image 2 Program Header:
Location: 0xbf200000
Signature: a010
Control: 0005
Major Rev: 0003
Minor Rev: 0000
Build Time: 2011/5/20 09:51:20 Z
File Length: 2005312 bytes
Load Address: 80004000
Filename: epc2203-ESIP-16-v202r1262-110520s.bin
HCS: 0c7d
CRC: 163af4b2
(B). Image 1 Program Header:
Location: 0xbf010000
Signature: a010
Control: 0005
Major Rev: 0003
Minor Rev: 0000
Build Time: 2007/11/20 05:43:42 Z
File Length: 2030952 bytes
Load Address: 80010000
Filename: epc2203-ESIP-13-v202r1262-071120.bin
HCS: 5485
CRC: 412a9f90
. .
Performing CRC on location (A)...
CRC time = 97397859
Detected LZMA compressed image... decompressing...
Target Address: 0x80004000
..................................Elapsed time 1053369552
Decompressed length: 8913900
Executing Image (A)...
eCos - hal_diag_init
Init device '/dev/BrcmTelnetIoDriver'
Init device '/dev/ttydiag'
Init tty channel: 8085e628
Init device '/dev/tty0'
Init tty channel: 8085e648
Init device '/dev/haldiag'
HAL/diag SERIAL init
Init device '/dev/ser0'
BCM 33XX SERIAL init - dev: 0.2
Set output buffer - buf: 0x8090c7b0 len: 2048
Set input buffer - buf: 0x8090cfb0 len: 2048
BCM 33XX SERIAL config
BcmEmtaBlindDataNonVolSettings::GetSingletonInstance: WARNING - the singleton instance is NULL, and someone is accessing it!
ERROR: Unable to get GetCountry blind data. (BcmEmtaBlindDataNonVolSettings = NULL)
WARNING: ResetDefaultBlindEmtaData() -Resetting EMTA non-vol data section to defaultIs possible that this modem has locked bootloader or something as it seems that there is no available console? Any ideas how to unlock it? I just want to dump whole firmware and analyse it.
