Step 2

Start Tftpd32 and make sure it says 192.168.100.10 in the Server Interfaces part,

if it does not say it then close down Tftpd32, and attach the modem you

are hacking to the Ethernet lead and power supply, wait 5 seconds and start Tftpd32 again, it should
now say 192.168.100.10, remove the power from the

modem again as its not time to have it on yet.

Browse to the dir where you put the haxorware10rc3_Ambit250_fullflash highlight it and
click ok.

Then click on show dir.

haxorware10rc3_Ambit250_fullflash.bin file and click ok.

Once that is done minimise tftpserver.

Step 3

Now start hyperterminal and make a new connection.

Use the com port that your serial is connected to on your PC using these settings:
Bits per second: 115200
Data bits: 8
Parity: None
Stop bits: 1
Flow control: None

Power the modem up.(without the cable feed in)

Code:

Enter '1', '2', or 'p' within 2 seconds or take default...

Code:

Main Menu:
==========
d) Download and save to flash
g) Download and run from RAM
c) Store icePROM bootloader to flash
b) Boot from flash
e) Erase flash sector
m) Set mode
s) Store bootloader parameters to flash
i) Re-init ethernet
r) Read memory
w) Write memory

Choose option D and enter the text as below

Code:

Board TFTP Server IP Address [0.0.0.0]: 192.168.100.10 (press enter)

Enter TFTP filename []:haxorware10rc3_Ambit250_fullflash.bin (press enter)
You should now see the following appear:

Code:

Free store: a0500000

Starting TFTP of haxorware10rc3_Ambit250_fullflash.bin from 192.168.100.10
Getting haxorware10rc3_Ambit250_fullflash.bin using octet mode
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
...........................................................................
.....
.................................................................
Tftp
complete
Received 2097152 bytes
HCS failed on Image 0 Program Header

Next you should get:

Code:

Image does not have standard header. Do you wish to store it? [n] Y
(press enter)
Programming 2097152 bytes
Enter sector to start store: 0 (type 0 press enter)

The modem will now write the new firmware to the flash.

Code:

Store parameters to flash ? [n] (press enter)

Now you should get the main menu again.

The modem is now flashed and you can close your copy of HyperTerminal and disconnect
your MAX232 lead. (Make sure you power off the modem before you remove your
max lead)

Should take you to the Haxorware page to sort out the settings, cool well the settings are as follows-

Press Save

Preferred DS Freq 1 402750000 this is for NTL, TW is 331000000 and others are different
Press Save
Press save

Next you need to set your config file for your speed.

If you want to force the 20mb option, then use cmreg-ntlhm250-rts22.cm for NTL area, And
cm-cpe2-20480-768 for TW area.
Press save
Press save

Step 5

Now put your IP options back to - Obtain IP address Automatically and attach your cable feed then
reboot your modem.

And that is that, that should be everything done and you should now be able to get online.

I hope this tutorial will help

Thanks to PokerPlayer where i got most of this tut from. I have only rewritten it and added pictures

Good luck

WDC8Ball

DISCLAIMER: Hacking is bad. don't do it.