Reverse Engineering Motorola Iridium 9505

I’ve started taking apart a Motorola 9505.

As I noted in a previous post, upgrading the firmware in the 9505 (not the 9505A) is very difficult to impossible.

I was looking into the possibility of a DIY, but it’s looking a bit difficult. Some bits I’ve found out about the 9505:

  • Uses a custom ASIC from Atmel, the at56406
  • Several custom Motorola parts
  • Exposes a FFC on the rear for debugging similar to the Motorola 9500
  • Has a ton of what appear to be debug pads on the main circuit board that are covered with tape.
RF parts from Raytheon seem mostly identical to the 9500.

May try to get a JTAGulator hooked up to this and see what I can see.

From here:
*#06# IMEI
*#300# software versiom
*#301# keypad functions
*#303# set defaults
*#304# engineering mode
19980722 Ok master unlock code