source: tt-loader/commands.txt

Last change on this file was 16, checked in by guillaume, 11 years ago

Publication tt-loader v0.2.2

File size: 13.0 KB
Line 
1/////////////////////////////////////////////////////////////////// READNAND
2# -----------------------------------------
3# Init phone RAM
4a 0x20010000
5f x-load.bin
6// Call a sub from x-load.bin: TT BoardInit (should only work with TT)
7a 0x20010da4
8c
9
10# -----------------------------------------
11# Upload FlashWriteNAND.bin program
12a 0x10000000
13f FlashWriteNAND.bin
14
15# -----------------------------------------
16# ------------------X-LOAD-----------------
17# -----------------------------------------
18# Setup read command for x-load.bin
19a 0x1000ffec
20p 0x00000003
21p 0x10010000
22p 0x00000000
23p 0x00004000
24p 0x00000000
25
26// Just peek to control command is set as expected
27a 0x1000ffec
28P;P;P;P;P
29
30# -----------------------------------------
31# Call FlashWriteNAND program
32a 0x10000000
33c
34
35# -----------------------------------------
36# Setup file to be updated
37F /lib/firmware/tt-x-load.bin
38C 0
39
40# -----------------------------------------
41# Download phone memory into local buffer
42a 0x10010000
43m 16
44
45# -----------------------------------------
46# Save the local buffer into a file
47D
48
49# -----------------------------------------
50# ------------------U-BOOT-----------------
51# -----------------------------------------
52# Setup read command for u-boot.bin
53a 0x1000ffec
54p 0x00000000
55p 0x10010000
56p 0x00004000
57p 0x00030000
58p 0x00000000
59
60// Just peek to control command is set as expected
61a 0x1000ffec
62P;P;P;P;P
63
64# -----------------------------------------
65# Call FlashWriteNAND program
66a 0x10000000
67c
68
69# -----------------------------------------
70# Setup file to be updated
71F /lib/firmware/tt-u-boot.bin
72C 0
73
74# -----------------------------------------
75# Download firmware to local file
76a 0x10010000
77m 192
78D
79
80# -----------------------------------------
81# ------------------UNUSED-----------------
82# -----------------------------------------
83# Setup read command for u-boot-params.bin
84a 0x1000ffec
85p 0x00000000
86p 0x10010000
87p 0x00034000
88p 0x00020000
89p 0x00000000
90
91// Just peek to control command is set as expected
92a 0x1000ffec
93P;P;P;P;P
94
95# -----------------------------------------
96# Call FlashWriteNAND program
97a 0x10000000
98c
99
100# -----------------------------------------
101# Setup file to be updated
102F /lib/firmware/tt-u-boot-params.bin
103C 0
104
105# -----------------------------------------
106# Download firmware to local file
107a 0x10010000
108m 128
109D
110
111# -----------------------------------------
112# ------------------SPLASH-----------------
113# -----------------------------------------
114# Setup read command for splash.bin
115a 0x1000ffec
116p 0x00000000
117p 0x10010000
118p 0x00054000
119p 0x0002c000
120p 0x00000000
121
122// Just peek to control command is set as expected
123a 0x1000ffec
124P;P;P;P;P
125
126# -----------------------------------------
127# Call FlashWriteNAND program
128a 0x10000000
129c
130
131# -----------------------------------------
132# Setup file to be updated
133F /lib/firmware/tt-splash.bin
134C 0
135
136# -----------------------------------------
137# Download firmware to local file
138a 0x10010000
139m 176
140D
141
142# -----------------------------------------
143# ------------------KERNEL-----------------
144# -----------------------------------------
145# Setup read command for uImage.bin
146a 0x1000ffec
147p 0x00000000
148p 0x10010000
149p 0x00080000
150p 0x00100000
151p 0x00000000
152
153// Just peek to control command is set as expected
154a 0x1000ffec
155P;P;P;P;P
156
157# -----------------------------------------
158# Call FlashWriteNAND program
159a 0x10000000
160c
161
162# -----------------------------------------
163# Setup file to be updated
164F /lib/firmware/tt-uImage.bin
165C 0
166
167# -----------------------------------------
168# Download firmware to local file
169a 0x10010000
170m 1024
171D
172
173# -----------------------------------------
174# ------------------ROOTFS-----------------
175# -----------------------------------------
176# Setup read command for rootfs.raw
177a 0x1000ffec
178p 0x00000000
179p 0x10010000
180p 0x00180000
181p 0x00590000
182p 0x00000000
183
184// Just peek to control command is set as expected
185a 0x1000ffec
186P;P;P;P;P
187
188# -----------------------------------------
189# Call FlashWriteNAND program
190a 0x10000000
191c
192
193# -----------------------------------------
194# Setup file to be updated
195F /lib/firmware/tt-rootfs.raw
196C 0
197
198# -----------------------------------------
199# Download firmware to local file
200a 0x10010000
201m 5696
202D
203
204# -----------------------------------------
205# ------------------E28-FS-----------------
206# -----------------------------------------
207# Setup read command for e28fs.raw
208a 0x1000ffec
209p 0x00000000
210p 0x10010000
211p 0x00710000
212p 0x01200000
213p 0x00000000
214
215// Just peek to control command is set as expected
216a 0x1000ffec
217P;P;P;P;P
218
219# -----------------------------------------
220# Call FlashWriteNAND program
221a 0x10000000
222c
223
224# -----------------------------------------
225# Setup file to be updated
226F /lib/firmware/tt-e28fs.raw
227C 0
228
229# -----------------------------------------
230# Download firmware to local file
231a 0x10010000
232m 18432
233D
234
235# -----------------------------------------
236# ------------------RSC-FS-----------------
237# -----------------------------------------
238# Setup read command for resource.raw
239a 0x1000ffec
240p 0x00000000
241p 0x10010000
242p 0x01910000
243p 0x00500000
244p 0x00000000
245
246// Just peek to control command is set as expected
247a 0x1000ffec
248P;P;P;P;P
249
250# -----------------------------------------
251# Call FlashWriteNAND program
252a 0x10000000
253c
254
255# -----------------------------------------
256# Setup file to be updated
257F /lib/firmware/tt-resource.raw
258C 0
259
260# -----------------------------------------
261# Download firmware to local file
262a 0x10010000
263m 5120
264D
265
266# -----------------------------------------
267# ------------------USERFS-----------------
268# -----------------------------------------
269# Setup read command for user_jffs2.raw
270a 0x1000ffec
271p 0x00000000
272p 0x10010000
273p 0x01e10000
274p 0x00dc0000
275p 0x00000000
276
277// Just peek to control command is set as expected
278a 0x1000ffec
279P;P;P;P;P
280
281# -----------------------------------------
282# Call FlashWriteNAND program
283a 0x10000000
284c
285
286# -----------------------------------------
287# Setup file to be updated
288F /lib/firmware/tt-user_jffs2.raw
289C 0
290
291# -----------------------------------------
292# Download firmware to local file
293a 0x10010000
294m 14080
295D
296
297# -----------------------------------------
298# -----------------RESERVE-----------------
299# -----------------------------------------
300# Setup read command for reserve.raw
301a 0x1000ffec
302p 0x00000000
303p 0x10010000
304p 0x02bd0000
305p 0x01200000
306p 0x00000000
307
308// Just peek to control command is set as expected
309a 0x1000ffec
310P;P;P;P;P
311
312# -----------------------------------------
313# Call FlashWriteNAND program
314a 0x10000000
315c
316
317# -----------------------------------------
318# Setup file to be updated
319F /lib/firmware/tt-reserve.raw
320C 0
321
322# -----------------------------------------
323# Download firmware to local file
324a 0x10010000
325m 18432
326D
327
328# -----------------------------------------
329# ------------------PART1------------------
330# -----------------------------------------
331# Setup read command for part1.raw
332a 0x1000ffec
333p 0x00000000
334p 0x10010000
335p 0x03dd0000
336p 0x00008000
337p 0x00000000
338
339// Just peek to control command is set as expected
340a 0x1000ffec
341P;P;P;P;P
342
343# -----------------------------------------
344# Call FlashWriteNAND program
345a 0x10000000
346c
347
348# -----------------------------------------
349# Setup file to be updated
350F /lib/firmware/tt-part1.raw
351C 0
352
353# -----------------------------------------
354# Download firmware to local file
355a 0x10010000
356m 32
357D
358
359# -----------------------------------------
360# ------------------PART2------------------
361# -----------------------------------------
362# Setup read command for part2.raw
363a 0x1000ffec
364p 0x00000000
365p 0x10010000
366p 0x03dd8000
367p 0x00008000
368p 0x00000000
369
370// Just peek to control command is set as expected
371a 0x1000ffec
372P;P;P;P;P
373
374# -----------------------------------------
375# Call FlashWriteNAND program
376a 0x10000000
377c
378
379# -----------------------------------------
380# Setup file to be updated
381F /lib/firmware/tt-part2.raw
382C 0
383
384# -----------------------------------------
385# Download firmware to local file
386a 0x10010000
387m 32
388D
389
390# -----------------------------------------
391# ------------------GSMFS------------------
392# -----------------------------------------
393# Setup read command for gsmfs.raw
394a 0x1000ffec
395p 0x00000000
396p 0x10010000
397p 0x03de0000
398p 0x00020000
399p 0x00000000
400
401// Just peek to control command is set as expected
402a 0x1000ffec
403P;P;P;P;P
404
405# -----------------------------------------
406# Call FlashWriteNAND program
407a 0x10000000
408c
409
410# -----------------------------------------
411# Setup file to be updated
412F /lib/firmware/tt-gsmfs.raw
413C 0
414
415# -----------------------------------------
416# Download firmware to local file
417a 0x10010000
418m 128
419D
420
421# -----------------------------------------
422# -----------------GSMCODE-----------------
423# -----------------------------------------
424# Setup read command for gsm_code.raw
425a 0x1000ffec
426p 0x00000000
427p 0x10010000
428p 0x03e00000
429p 0x00200000
430p 0x00000000
431
432// Just peek to control command is set as expected
433a 0x1000ffec
434P;P;P;P;P
435
436# -----------------------------------------
437# Call FlashWriteNAND program
438a 0x10000000
439c
440
441# -----------------------------------------
442# Setup file to be updated
443F /lib/firmware/tt-gsm_code.raw
444C 0
445
446# -----------------------------------------
447# Download firmware to local file
448a 0x10010000
449m 2048
450D
451
452# -----------------------------------------
453end
454/////////////////////////////////////////////////////////////////// READNAND END
455
456/////////////////////////////////////////////////////////////////// KERNEL
457# Booting TT with modified hosted u-boot
458a 0x20010000
459f x-load.bin
460
461// Call a sub from x-load.bin: TT BoardInit (should only work with TT)
462a 0x20010da4
463c
464
465// Load updated u-boot.bin
466a 0x10280000
467f u-boot-updated.bin
468
469a 0x11800000
470f uImage.bin
471
472// Send u-boot start address and boot there, u-boot "bootcmd" must has
473// fixed to not download kernel from NAND but always boot the kernel
474// loaded at 0x11800000 address in RAM
475a 0x10280000
476b
477
478end
479/////////////////////////////////////////////////////////////////// KERNEL END
480
481/////////////////////////////////////////////////////////////////// U-BOOT
482// Send an address
483a 0x20010000
484// Load a file in phone memory at the previous given address
485f x-load.bin
486
487// Call a sub from x-load.bin: TT BoardInit (should only work with TT)
488a 0x20010da4
489c
490
491// Load another program to a new address, check README to generate u-boot.bin
492a 0x11080000
493f u-boot.usb
494
495a 0x10000000
496M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko
497M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko
498M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko
499M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko
500M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko
501M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko
502M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko
503M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko
504
505a 0x1103F800
506M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko
507M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko
508
509// dump depuis _bss_start
510//a 0x11098160
511a 0x1029f300
512M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko
513M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko
514M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko
515M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko
516M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko
517M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko
518M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko
519M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko
520
521// dump zone malloc
522a 0x11060800
523M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko
524M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko
525M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko
526M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko
527M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko
528M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko
529M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko
530M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko
531
532// Send u-boot start address and boot there
533a 0x11080000
534b
535
536end
537/////////////////////////////////////////////////////////////////// U-BOOT END
538
539/////////////////////////////////////////////////////////////////// U-BOOT
540# Booting TT with hosted u-boot
541a 0x20010000
542f x-load.bin
543
544// Call a sub from x-load.bin: TT BoardInit (should only work with TT)
545a 0x20010da4
546c
547
548// Load u-boot.bin
549a 0x10280000
550f u-boot.bin
551
552// Send u-boot start address and boot there
553a 0x10280000
554b
555
556end
557/////////////////////////////////////////////////////////////////// U-BOOT END
558
559/////////////////////////////////////////////////////////////////// X-LOAD
560# Booting TT with hosted x-load
561// Load x-load in the phone
562a 0x20010000
563// Check README to generate x-load.bin
564f x-load.bin
565
566// Boot with x-load
567a 0x20010c00
568b
569
570end
571/////////////////////////////////////////////////////////////////// X-LOAD END
572
573/////////////////////////////////////////////////////////////////// DUMP MEM
574// Send an address
575a 0x20000000
576
577// Dump from that address
578M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M
579
580end
581/////////////////////////////////////////////////////////////////// DUMP MEM END
582
583
Note: See TracBrowser for help on using the repository browser.