[12] | 1 | /////////////////////////////////////////////////////////////////// READNAND |
---|
| 2 | # ----------------------------------------- |
---|
| 3 | # Init phone RAM |
---|
[11] | 4 | a 0x20010000 |
---|
| 5 | f x-load.bin |
---|
[12] | 6 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
---|
| 7 | a 0x20010da4 |
---|
| 8 | c |
---|
[11] | 9 | |
---|
[12] | 10 | # ----------------------------------------- |
---|
| 11 | # Upload FlashWriteNAND.bin program |
---|
| 12 | a 0x10000000 |
---|
| 13 | f FlashWriteNAND.bin |
---|
[11] | 14 | |
---|
[12] | 15 | # ----------------------------------------- |
---|
| 16 | # ------------------X-LOAD----------------- |
---|
| 17 | # ----------------------------------------- |
---|
| 18 | # Setup read command for x-load.bin |
---|
| 19 | a 0x1000ffec |
---|
| 20 | p 0x00000003 |
---|
| 21 | p 0x10010000 |
---|
| 22 | p 0x00000000 |
---|
| 23 | p 0x00004000 |
---|
| 24 | p 0x00000000 |
---|
| 25 | |
---|
| 26 | // Just peek to control command is set as expected |
---|
| 27 | a 0x1000ffec |
---|
| 28 | P;P;P;P;P |
---|
| 29 | |
---|
| 30 | # ----------------------------------------- |
---|
| 31 | # Call FlashWriteNAND program |
---|
| 32 | a 0x10000000 |
---|
| 33 | c |
---|
| 34 | |
---|
| 35 | # ----------------------------------------- |
---|
| 36 | # Setup file to be updated |
---|
| 37 | F /lib/firmware/tt-x-load.bin |
---|
| 38 | C 0 |
---|
| 39 | |
---|
| 40 | # ----------------------------------------- |
---|
| 41 | # Download phone memory into local buffer |
---|
| 42 | a 0x10010000 |
---|
| 43 | m 16 |
---|
| 44 | |
---|
| 45 | # ----------------------------------------- |
---|
| 46 | # Save the local buffer into a file |
---|
| 47 | D |
---|
| 48 | |
---|
| 49 | # ----------------------------------------- |
---|
| 50 | # ------------------U-BOOT----------------- |
---|
| 51 | # ----------------------------------------- |
---|
| 52 | # Setup read command for u-boot.bin |
---|
| 53 | a 0x1000ffec |
---|
| 54 | p 0x00000000 |
---|
| 55 | p 0x10010000 |
---|
| 56 | p 0x00004000 |
---|
| 57 | p 0x00030000 |
---|
| 58 | p 0x00000000 |
---|
| 59 | |
---|
| 60 | // Just peek to control command is set as expected |
---|
| 61 | a 0x1000ffec |
---|
| 62 | P;P;P;P;P |
---|
| 63 | |
---|
| 64 | # ----------------------------------------- |
---|
| 65 | # Call FlashWriteNAND program |
---|
| 66 | a 0x10000000 |
---|
| 67 | c |
---|
| 68 | |
---|
| 69 | # ----------------------------------------- |
---|
| 70 | # Setup file to be updated |
---|
| 71 | F /lib/firmware/tt-u-boot.bin |
---|
| 72 | C 0 |
---|
| 73 | |
---|
| 74 | # ----------------------------------------- |
---|
| 75 | # Download firmware to local file |
---|
| 76 | a 0x10010000 |
---|
| 77 | m 192 |
---|
| 78 | D |
---|
| 79 | |
---|
| 80 | # ----------------------------------------- |
---|
| 81 | # ------------------UNUSED----------------- |
---|
| 82 | # ----------------------------------------- |
---|
| 83 | # Setup read command for u-boot-params.bin |
---|
| 84 | a 0x1000ffec |
---|
| 85 | p 0x00000000 |
---|
| 86 | p 0x10010000 |
---|
| 87 | p 0x00034000 |
---|
| 88 | p 0x00020000 |
---|
| 89 | p 0x00000000 |
---|
| 90 | |
---|
| 91 | // Just peek to control command is set as expected |
---|
| 92 | a 0x1000ffec |
---|
| 93 | P;P;P;P;P |
---|
| 94 | |
---|
| 95 | # ----------------------------------------- |
---|
| 96 | # Call FlashWriteNAND program |
---|
| 97 | a 0x10000000 |
---|
| 98 | c |
---|
| 99 | |
---|
| 100 | # ----------------------------------------- |
---|
| 101 | # Setup file to be updated |
---|
| 102 | F /lib/firmware/tt-u-boot-params.bin |
---|
| 103 | C 0 |
---|
| 104 | |
---|
| 105 | # ----------------------------------------- |
---|
| 106 | # Download firmware to local file |
---|
| 107 | a 0x10010000 |
---|
| 108 | m 128 |
---|
| 109 | D |
---|
| 110 | |
---|
| 111 | # ----------------------------------------- |
---|
| 112 | # ------------------SPLASH----------------- |
---|
| 113 | # ----------------------------------------- |
---|
| 114 | # Setup read command for splash.bin |
---|
| 115 | a 0x1000ffec |
---|
| 116 | p 0x00000000 |
---|
| 117 | p 0x10010000 |
---|
| 118 | p 0x00054000 |
---|
| 119 | p 0x0002c000 |
---|
| 120 | p 0x00000000 |
---|
| 121 | |
---|
| 122 | // Just peek to control command is set as expected |
---|
| 123 | a 0x1000ffec |
---|
| 124 | P;P;P;P;P |
---|
| 125 | |
---|
| 126 | # ----------------------------------------- |
---|
| 127 | # Call FlashWriteNAND program |
---|
| 128 | a 0x10000000 |
---|
| 129 | c |
---|
| 130 | |
---|
| 131 | # ----------------------------------------- |
---|
| 132 | # Setup file to be updated |
---|
| 133 | F /lib/firmware/tt-splash.bin |
---|
| 134 | C 0 |
---|
| 135 | |
---|
| 136 | # ----------------------------------------- |
---|
| 137 | # Download firmware to local file |
---|
| 138 | a 0x10010000 |
---|
| 139 | m 176 |
---|
| 140 | D |
---|
| 141 | |
---|
| 142 | # ----------------------------------------- |
---|
| 143 | # ------------------KERNEL----------------- |
---|
| 144 | # ----------------------------------------- |
---|
| 145 | # Setup read command for uImage.bin |
---|
| 146 | a 0x1000ffec |
---|
| 147 | p 0x00000000 |
---|
| 148 | p 0x10010000 |
---|
| 149 | p 0x00080000 |
---|
| 150 | p 0x00100000 |
---|
| 151 | p 0x00000000 |
---|
| 152 | |
---|
| 153 | // Just peek to control command is set as expected |
---|
| 154 | a 0x1000ffec |
---|
| 155 | P;P;P;P;P |
---|
| 156 | |
---|
| 157 | # ----------------------------------------- |
---|
| 158 | # Call FlashWriteNAND program |
---|
| 159 | a 0x10000000 |
---|
| 160 | c |
---|
| 161 | |
---|
| 162 | # ----------------------------------------- |
---|
| 163 | # Setup file to be updated |
---|
| 164 | F /lib/firmware/tt-uImage.bin |
---|
| 165 | C 0 |
---|
| 166 | |
---|
| 167 | # ----------------------------------------- |
---|
| 168 | # Download firmware to local file |
---|
| 169 | a 0x10010000 |
---|
| 170 | m 1024 |
---|
| 171 | D |
---|
| 172 | |
---|
| 173 | # ----------------------------------------- |
---|
| 174 | # ------------------ROOTFS----------------- |
---|
| 175 | # ----------------------------------------- |
---|
| 176 | # Setup read command for rootfs.raw |
---|
| 177 | a 0x1000ffec |
---|
| 178 | p 0x00000000 |
---|
| 179 | p 0x10010000 |
---|
| 180 | p 0x00180000 |
---|
| 181 | p 0x00590000 |
---|
| 182 | p 0x00000000 |
---|
| 183 | |
---|
| 184 | // Just peek to control command is set as expected |
---|
| 185 | a 0x1000ffec |
---|
| 186 | P;P;P;P;P |
---|
| 187 | |
---|
| 188 | # ----------------------------------------- |
---|
| 189 | # Call FlashWriteNAND program |
---|
| 190 | a 0x10000000 |
---|
| 191 | c |
---|
| 192 | |
---|
| 193 | # ----------------------------------------- |
---|
| 194 | # Setup file to be updated |
---|
| 195 | F /lib/firmware/tt-rootfs.raw |
---|
| 196 | C 0 |
---|
| 197 | |
---|
| 198 | # ----------------------------------------- |
---|
| 199 | # Download firmware to local file |
---|
| 200 | a 0x10010000 |
---|
| 201 | m 5696 |
---|
| 202 | D |
---|
| 203 | |
---|
| 204 | # ----------------------------------------- |
---|
| 205 | # ------------------E28-FS----------------- |
---|
| 206 | # ----------------------------------------- |
---|
| 207 | # Setup read command for e28fs.raw |
---|
| 208 | a 0x1000ffec |
---|
| 209 | p 0x00000000 |
---|
| 210 | p 0x10010000 |
---|
| 211 | p 0x00710000 |
---|
| 212 | p 0x01200000 |
---|
| 213 | p 0x00000000 |
---|
| 214 | |
---|
| 215 | // Just peek to control command is set as expected |
---|
| 216 | a 0x1000ffec |
---|
| 217 | P;P;P;P;P |
---|
| 218 | |
---|
| 219 | # ----------------------------------------- |
---|
| 220 | # Call FlashWriteNAND program |
---|
| 221 | a 0x10000000 |
---|
| 222 | c |
---|
| 223 | |
---|
| 224 | # ----------------------------------------- |
---|
| 225 | # Setup file to be updated |
---|
| 226 | F /lib/firmware/tt-e28fs.raw |
---|
| 227 | C 0 |
---|
| 228 | |
---|
| 229 | # ----------------------------------------- |
---|
| 230 | # Download firmware to local file |
---|
| 231 | a 0x10010000 |
---|
| 232 | m 18432 |
---|
| 233 | D |
---|
| 234 | |
---|
| 235 | # ----------------------------------------- |
---|
| 236 | # ------------------RSC-FS----------------- |
---|
| 237 | # ----------------------------------------- |
---|
| 238 | # Setup read command for resource.raw |
---|
| 239 | a 0x1000ffec |
---|
| 240 | p 0x00000000 |
---|
| 241 | p 0x10010000 |
---|
| 242 | p 0x01910000 |
---|
| 243 | p 0x00500000 |
---|
| 244 | p 0x00000000 |
---|
| 245 | |
---|
| 246 | // Just peek to control command is set as expected |
---|
| 247 | a 0x1000ffec |
---|
| 248 | P;P;P;P;P |
---|
| 249 | |
---|
| 250 | # ----------------------------------------- |
---|
| 251 | # Call FlashWriteNAND program |
---|
| 252 | a 0x10000000 |
---|
| 253 | c |
---|
| 254 | |
---|
| 255 | # ----------------------------------------- |
---|
| 256 | # Setup file to be updated |
---|
| 257 | F /lib/firmware/tt-resource.raw |
---|
| 258 | C 0 |
---|
| 259 | |
---|
| 260 | # ----------------------------------------- |
---|
| 261 | # Download firmware to local file |
---|
| 262 | a 0x10010000 |
---|
| 263 | m 5120 |
---|
| 264 | D |
---|
| 265 | |
---|
| 266 | # ----------------------------------------- |
---|
| 267 | # ------------------USERFS----------------- |
---|
| 268 | # ----------------------------------------- |
---|
| 269 | # Setup read command for user_jffs2.raw |
---|
| 270 | a 0x1000ffec |
---|
| 271 | p 0x00000000 |
---|
| 272 | p 0x10010000 |
---|
| 273 | p 0x01e10000 |
---|
| 274 | p 0x00dc0000 |
---|
| 275 | p 0x00000000 |
---|
| 276 | |
---|
| 277 | // Just peek to control command is set as expected |
---|
| 278 | a 0x1000ffec |
---|
| 279 | P;P;P;P;P |
---|
| 280 | |
---|
| 281 | # ----------------------------------------- |
---|
| 282 | # Call FlashWriteNAND program |
---|
| 283 | a 0x10000000 |
---|
| 284 | c |
---|
| 285 | |
---|
| 286 | # ----------------------------------------- |
---|
| 287 | # Setup file to be updated |
---|
| 288 | F /lib/firmware/tt-user_jffs2.raw |
---|
| 289 | C 0 |
---|
| 290 | |
---|
| 291 | # ----------------------------------------- |
---|
| 292 | # Download firmware to local file |
---|
| 293 | a 0x10010000 |
---|
| 294 | m 14080 |
---|
| 295 | D |
---|
| 296 | |
---|
| 297 | # ----------------------------------------- |
---|
| 298 | # -----------------RESERVE----------------- |
---|
| 299 | # ----------------------------------------- |
---|
| 300 | # Setup read command for reserve.raw |
---|
| 301 | a 0x1000ffec |
---|
| 302 | p 0x00000000 |
---|
| 303 | p 0x10010000 |
---|
| 304 | p 0x02bd0000 |
---|
| 305 | p 0x01200000 |
---|
| 306 | p 0x00000000 |
---|
| 307 | |
---|
| 308 | // Just peek to control command is set as expected |
---|
| 309 | a 0x1000ffec |
---|
| 310 | P;P;P;P;P |
---|
| 311 | |
---|
| 312 | # ----------------------------------------- |
---|
| 313 | # Call FlashWriteNAND program |
---|
| 314 | a 0x10000000 |
---|
| 315 | c |
---|
| 316 | |
---|
| 317 | # ----------------------------------------- |
---|
| 318 | # Setup file to be updated |
---|
| 319 | F /lib/firmware/tt-reserve.raw |
---|
| 320 | C 0 |
---|
| 321 | |
---|
| 322 | # ----------------------------------------- |
---|
| 323 | # Download firmware to local file |
---|
| 324 | a 0x10010000 |
---|
| 325 | m 18432 |
---|
| 326 | D |
---|
| 327 | |
---|
| 328 | # ----------------------------------------- |
---|
| 329 | # ------------------PART1------------------ |
---|
| 330 | # ----------------------------------------- |
---|
| 331 | # Setup read command for part1.raw |
---|
| 332 | a 0x1000ffec |
---|
| 333 | p 0x00000000 |
---|
| 334 | p 0x10010000 |
---|
| 335 | p 0x03dd0000 |
---|
| 336 | p 0x00008000 |
---|
| 337 | p 0x00000000 |
---|
| 338 | |
---|
| 339 | // Just peek to control command is set as expected |
---|
| 340 | a 0x1000ffec |
---|
| 341 | P;P;P;P;P |
---|
| 342 | |
---|
| 343 | # ----------------------------------------- |
---|
| 344 | # Call FlashWriteNAND program |
---|
| 345 | a 0x10000000 |
---|
| 346 | c |
---|
| 347 | |
---|
| 348 | # ----------------------------------------- |
---|
| 349 | # Setup file to be updated |
---|
| 350 | F /lib/firmware/tt-part1.raw |
---|
| 351 | C 0 |
---|
| 352 | |
---|
| 353 | # ----------------------------------------- |
---|
| 354 | # Download firmware to local file |
---|
| 355 | a 0x10010000 |
---|
| 356 | m 32 |
---|
| 357 | D |
---|
| 358 | |
---|
| 359 | # ----------------------------------------- |
---|
| 360 | # ------------------PART2------------------ |
---|
| 361 | # ----------------------------------------- |
---|
| 362 | # Setup read command for part2.raw |
---|
| 363 | a 0x1000ffec |
---|
| 364 | p 0x00000000 |
---|
| 365 | p 0x10010000 |
---|
| 366 | p 0x03dd8000 |
---|
| 367 | p 0x00008000 |
---|
| 368 | p 0x00000000 |
---|
| 369 | |
---|
| 370 | // Just peek to control command is set as expected |
---|
| 371 | a 0x1000ffec |
---|
| 372 | P;P;P;P;P |
---|
| 373 | |
---|
| 374 | # ----------------------------------------- |
---|
| 375 | # Call FlashWriteNAND program |
---|
| 376 | a 0x10000000 |
---|
| 377 | c |
---|
| 378 | |
---|
| 379 | # ----------------------------------------- |
---|
| 380 | # Setup file to be updated |
---|
| 381 | F /lib/firmware/tt-part2.raw |
---|
| 382 | C 0 |
---|
| 383 | |
---|
| 384 | # ----------------------------------------- |
---|
| 385 | # Download firmware to local file |
---|
| 386 | a 0x10010000 |
---|
| 387 | m 32 |
---|
| 388 | D |
---|
| 389 | |
---|
| 390 | # ----------------------------------------- |
---|
| 391 | # ------------------GSMFS------------------ |
---|
| 392 | # ----------------------------------------- |
---|
| 393 | # Setup read command for gsmfs.raw |
---|
| 394 | a 0x1000ffec |
---|
| 395 | p 0x00000000 |
---|
| 396 | p 0x10010000 |
---|
| 397 | p 0x03de0000 |
---|
| 398 | p 0x00020000 |
---|
| 399 | p 0x00000000 |
---|
| 400 | |
---|
| 401 | // Just peek to control command is set as expected |
---|
| 402 | a 0x1000ffec |
---|
| 403 | P;P;P;P;P |
---|
| 404 | |
---|
| 405 | # ----------------------------------------- |
---|
| 406 | # Call FlashWriteNAND program |
---|
| 407 | a 0x10000000 |
---|
| 408 | c |
---|
| 409 | |
---|
| 410 | # ----------------------------------------- |
---|
| 411 | # Setup file to be updated |
---|
| 412 | F /lib/firmware/tt-gsmfs.raw |
---|
| 413 | C 0 |
---|
| 414 | |
---|
| 415 | # ----------------------------------------- |
---|
| 416 | # Download firmware to local file |
---|
| 417 | a 0x10010000 |
---|
| 418 | m 128 |
---|
| 419 | D |
---|
| 420 | |
---|
| 421 | # ----------------------------------------- |
---|
| 422 | # -----------------GSMCODE----------------- |
---|
| 423 | # ----------------------------------------- |
---|
| 424 | # Setup read command for gsm_code.raw |
---|
| 425 | a 0x1000ffec |
---|
| 426 | p 0x00000000 |
---|
| 427 | p 0x10010000 |
---|
| 428 | p 0x03e00000 |
---|
| 429 | p 0x00200000 |
---|
| 430 | p 0x00000000 |
---|
| 431 | |
---|
| 432 | // Just peek to control command is set as expected |
---|
| 433 | a 0x1000ffec |
---|
| 434 | P;P;P;P;P |
---|
| 435 | |
---|
| 436 | # ----------------------------------------- |
---|
| 437 | # Call FlashWriteNAND program |
---|
| 438 | a 0x10000000 |
---|
| 439 | c |
---|
| 440 | |
---|
| 441 | # ----------------------------------------- |
---|
| 442 | # Setup file to be updated |
---|
| 443 | F /lib/firmware/tt-gsm_code.raw |
---|
| 444 | C 0 |
---|
| 445 | |
---|
| 446 | # ----------------------------------------- |
---|
| 447 | # Download firmware to local file |
---|
| 448 | a 0x10010000 |
---|
| 449 | m 2048 |
---|
| 450 | D |
---|
| 451 | |
---|
| 452 | # ----------------------------------------- |
---|
[11] | 453 | end |
---|
[12] | 454 | /////////////////////////////////////////////////////////////////// READNAND END |
---|
[11] | 455 | |
---|
| 456 | /////////////////////////////////////////////////////////////////// U-BOOT |
---|
| 457 | // Send an address |
---|
| 458 | a 0x20010000 |
---|
| 459 | // Load a file in phone memory at the previous given address |
---|
| 460 | f x-load.bin |
---|
| 461 | |
---|
| 462 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
---|
| 463 | a 0x20010da4 |
---|
| 464 | c |
---|
| 465 | |
---|
| 466 | // Load another program to a new address, check README to generate u-boot.bin |
---|
[12] | 467 | a 0x11080000 |
---|
| 468 | f u-boot.usb |
---|
| 469 | |
---|
| 470 | a 0x10000000 |
---|
| 471 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
---|
| 472 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
---|
| 473 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko |
---|
| 474 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko |
---|
| 475 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko |
---|
| 476 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko |
---|
| 477 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko |
---|
| 478 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko |
---|
| 479 | |
---|
| 480 | a 0x1103F800 |
---|
| 481 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
---|
| 482 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
---|
| 483 | |
---|
| 484 | // dump depuis _bss_start |
---|
| 485 | //a 0x11098160 |
---|
| 486 | a 0x1029f300 |
---|
| 487 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
---|
| 488 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
---|
| 489 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko |
---|
| 490 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko |
---|
| 491 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko |
---|
| 492 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko |
---|
| 493 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko |
---|
| 494 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko |
---|
| 495 | |
---|
| 496 | // dump zone malloc |
---|
| 497 | a 0x11060800 |
---|
| 498 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
---|
| 499 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
---|
| 500 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko |
---|
| 501 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko |
---|
| 502 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko |
---|
| 503 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko |
---|
| 504 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko |
---|
| 505 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko |
---|
| 506 | |
---|
| 507 | // Send u-boot start address and boot there |
---|
| 508 | a 0x11080000 |
---|
| 509 | b |
---|
| 510 | |
---|
| 511 | end |
---|
| 512 | /////////////////////////////////////////////////////////////////// U-BOOT END |
---|
| 513 | |
---|
| 514 | /////////////////////////////////////////////////////////////////// U-BOOT |
---|
| 515 | # Booting TT with hosted u-boot |
---|
| 516 | a 0x20010000 |
---|
| 517 | f x-load.bin |
---|
| 518 | |
---|
| 519 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
---|
| 520 | a 0x20010da4 |
---|
| 521 | c |
---|
| 522 | |
---|
| 523 | // Load u-boot.bin |
---|
[11] | 524 | a 0x10280000 |
---|
| 525 | f u-boot.bin |
---|
| 526 | |
---|
| 527 | // Send u-boot start address and boot there |
---|
| 528 | a 0x10280000 |
---|
| 529 | b |
---|
| 530 | |
---|
| 531 | end |
---|
| 532 | /////////////////////////////////////////////////////////////////// U-BOOT END |
---|
| 533 | |
---|
[12] | 534 | /////////////////////////////////////////////////////////////////// X-LOAD |
---|
| 535 | # Booting TT with hosted x-load |
---|
| 536 | // Load x-load in the phone |
---|
| 537 | a 0x20010000 |
---|
| 538 | // Check README to generate x-load.bin |
---|
| 539 | f x-load.bin |
---|
| 540 | |
---|
| 541 | // Boot with x-load |
---|
| 542 | a 0x20010c00 |
---|
| 543 | b |
---|
| 544 | |
---|
| 545 | end |
---|
| 546 | /////////////////////////////////////////////////////////////////// X-LOAD END |
---|
| 547 | |
---|
[11] | 548 | /////////////////////////////////////////////////////////////////// DUMP MEM |
---|
| 549 | // Send an address |
---|
| 550 | a 0x20000000 |
---|
| 551 | |
---|
[12] | 552 | // Dump from that address |
---|
| 553 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M |
---|
[11] | 554 | |
---|
| 555 | end |
---|
| 556 | /////////////////////////////////////////////////////////////////// DUMP MEM END |
---|
| 557 | |
---|
| 558 | |
---|