Desoldering the flash chip and overwriting the bootloader with this patch got me past the bootloader and into the main OS:. This is just a one bit change to the instruction opcode:. Besides being a PITA, this approach turned out to be impractical due to the following piece of earlier code:. May 2, at Your email address will not be published.

Uploader: Karisar
Date Added: 27 July 2006
File Size: 44.51 Mb
Operating Systems: Windows NT/2000/XP/2003/2003/7/8/10 MacOS 10/X
Downloads: 30496
Price: Free* [*Free Regsitration Required]

Did you physically just remove the flash chip and if so why and how did you put zyxel p-320w changes onto the bootloader? February 5, at 2: Missing R 0-ohm jumper.

All pins zyxel p-320w directly connected to the chip. May 24, at 7: May 2, at See my previous posts for more details on the programmer that I used to read and write to the flash chip. Your email address will not zyxel p-320w published. Leave a Reply Cancel reply Your email address will not be published.

Besides being a PITA, this approach turned out to be impractical due to the following piece of earlier code:. This one has two which according to Cisco RF engineer is for redundancy, but with the two built-in omni-directional 2dbi antennas,there should be of little effect. I traversed paths from zyxel p-320w to micro controller.

After a reboot, lo and behold, JTAG o-320w up zyxel p-320w running without issues:. May 1, at 2: However, this means that JTAG is likely being disabled in software.

Neither of this seemed to work. Since the OS image had been modified, I ayxel needed to figure zyxel p-320w the zyxel p-320w for the firmware update file. Hi Craig, thx for a cool write-up! This was easily remedied with a quick solder blob:. No idea to copy the dump of The individually calibrated ART parttion. Just connect to this pin rather than TDO pin? On both routers zyxel p-320w have 0. I soldered headers on JTAG port and tried to connect with flyswatter and openocd.

On ZyXEL jumper is ok. February 21, at 1: This is just a one bit change to the instruction opcode:.

Re-enabling JTAG and Debugging the WRTN – /dev/ttyS0

Hooked with logic analyser and noticed zyxel p-320w there zxel signals on some pins of header and some of them correlate very well with LEDs blinking.

What this means is that I would have to enter JTAG debug mode after the PLL was configured, but before the reset button was checked; a race condition that was difficult to reliably to win.

Thanks in no small part to copious zyxel p-320w strings littered throughout the code and some leaked Atheros datasheetsI made good progress syxel statically disassembling the zyxel p-320w. November 12, at So i think I have similar issue as you described.

Configuration du routeur pour eMule

Hi, James Shaw, Sure it can. February 21, at 7: I especially appreciate that you develop highly p-30w open source software zyxel p-320w as for example the reaver. Paypal or Webmoney would be best, if you can send me the recipient details by email. Instead, I opted to simply patch the bootloader on the flash chip. zyxel p-320w

Please, turn Javascript on in your browser then reload the page.

February 5, at 9: June 18, at Not wanting to de-solder the flash zyxel p-320w yet again, I opted to apply the patches via a firmware update. So i thought i gonna try what you mentioned: Having patched the OS, I needed to write it back to the flash chip.

Luckily both were relatively easy to fix. Or I can buy any of your products, if you sell something. First, I could simply set a breakpoint on this zyxel p-320w branch and change the register contents so zyxeo the recovery image is zyxel p-320w loaded.