I'm realizing I'm not setting up the TLB correctly. I've modified code to this, but get the same results. I'm still missing something.
ba 0xFFFFF000
lis r5, 0x1001
ori r5, r5, 0x0000
mtspr 624, r5 //MAS0
lis r5, 0xC000
ori r5, r5, 0x0500
mtspr 625, r5 //MAS1
lis r5, 0xe000
ori r5, r5, 0x000a
mtspr 626, r5 //MAS2
lis r5, 0xe000
ori r5, r5, 0x003f
mtspr 627, r5 //MAS3
tlbwe 1,1,0 //TLB1
msync
isync
lis r5, 0x1002
ori r5, r5, 0x0000
mtspr 624, r5 // MAS0
lis r5, 0xC000
ori r5, r5, 0x0900
mtspr 625, r5 //MAS1
lis r5, 0xf000
ori r5, r5, 0x000a
mtspr 626, r5 //MAS2
lis r5, 0xf000
ori r5, r5, 0x003f
mtspr 627, r5 //MAS3
tlbwe 1,2,0 /TLB2 to set up eLBC and CCSRBAR
msync
isync
//////////////////////////////////
// relocate CCSRBAR at 0xe0000000
//////////////////////////////////
// read current value (forces all accesses to configuration space to complete)
lis r5, 0xff70
ori r5, r5, 0x0000
lwz r4, 0(r5)
isync
//Write the new value to CCSRBAR
lis r5, 0x000e
ori r5, r5, 0x0000
lis r4, 0xFF700000@ha
stw r5, 0xFF700000@l(r4) //hangs up on this command