| 1 | /////////////////////////////////////////////////////////////////// READNAND |
|---|
| 2 | # ----------------------------------------- |
|---|
| 3 | # Init phone RAM |
|---|
| 4 | a 0x20010000 |
|---|
| 5 | f x-load.bin |
|---|
| 6 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
|---|
| 7 | a 0x20010da4 |
|---|
| 8 | c |
|---|
| 9 | |
|---|
| 10 | # ----------------------------------------- |
|---|
| 11 | # Upload FlashWriteNAND.bin program |
|---|
| 12 | a 0x10000000 |
|---|
| 13 | f FlashWriteNAND.bin |
|---|
| 14 | |
|---|
| 15 | # ----------------------------------------- |
|---|
| 16 | # ------------------X-LOAD----------------- |
|---|
| 17 | # ----------------------------------------- |
|---|
| 18 | # Setup read command for x-load.bin |
|---|
| 19 | a 0x1000ffec |
|---|
| 20 | p 0x00000003 |
|---|
| 21 | p 0x10010000 |
|---|
| 22 | p 0x00000000 |
|---|
| 23 | p 0x00004000 |
|---|
| 24 | p 0x00000000 |
|---|
| 25 | |
|---|
| 26 | // Just peek to control command is set as expected |
|---|
| 27 | a 0x1000ffec |
|---|
| 28 | P;P;P;P;P |
|---|
| 29 | |
|---|
| 30 | # ----------------------------------------- |
|---|
| 31 | # Call FlashWriteNAND program |
|---|
| 32 | a 0x10000000 |
|---|
| 33 | c |
|---|
| 34 | |
|---|
| 35 | # ----------------------------------------- |
|---|
| 36 | # Setup file to be updated |
|---|
| 37 | F /lib/firmware/tt-x-load.bin |
|---|
| 38 | C 0 |
|---|
| 39 | |
|---|
| 40 | # ----------------------------------------- |
|---|
| 41 | # Download phone memory into local buffer |
|---|
| 42 | a 0x10010000 |
|---|
| 43 | m 16 |
|---|
| 44 | |
|---|
| 45 | # ----------------------------------------- |
|---|
| 46 | # Save the local buffer into a file |
|---|
| 47 | D |
|---|
| 48 | |
|---|
| 49 | # ----------------------------------------- |
|---|
| 50 | # ------------------U-BOOT----------------- |
|---|
| 51 | # ----------------------------------------- |
|---|
| 52 | # Setup read command for u-boot.bin |
|---|
| 53 | a 0x1000ffec |
|---|
| 54 | p 0x00000000 |
|---|
| 55 | p 0x10010000 |
|---|
| 56 | p 0x00004000 |
|---|
| 57 | p 0x00030000 |
|---|
| 58 | p 0x00000000 |
|---|
| 59 | |
|---|
| 60 | // Just peek to control command is set as expected |
|---|
| 61 | a 0x1000ffec |
|---|
| 62 | P;P;P;P;P |
|---|
| 63 | |
|---|
| 64 | # ----------------------------------------- |
|---|
| 65 | # Call FlashWriteNAND program |
|---|
| 66 | a 0x10000000 |
|---|
| 67 | c |
|---|
| 68 | |
|---|
| 69 | # ----------------------------------------- |
|---|
| 70 | # Setup file to be updated |
|---|
| 71 | F /lib/firmware/tt-u-boot.bin |
|---|
| 72 | C 0 |
|---|
| 73 | |
|---|
| 74 | # ----------------------------------------- |
|---|
| 75 | # Download firmware to local file |
|---|
| 76 | a 0x10010000 |
|---|
| 77 | m 192 |
|---|
| 78 | D |
|---|
| 79 | |
|---|
| 80 | # ----------------------------------------- |
|---|
| 81 | # ------------------UNUSED----------------- |
|---|
| 82 | # ----------------------------------------- |
|---|
| 83 | # Setup read command for u-boot-params.bin |
|---|
| 84 | a 0x1000ffec |
|---|
| 85 | p 0x00000000 |
|---|
| 86 | p 0x10010000 |
|---|
| 87 | p 0x00034000 |
|---|
| 88 | p 0x00020000 |
|---|
| 89 | p 0x00000000 |
|---|
| 90 | |
|---|
| 91 | // Just peek to control command is set as expected |
|---|
| 92 | a 0x1000ffec |
|---|
| 93 | P;P;P;P;P |
|---|
| 94 | |
|---|
| 95 | # ----------------------------------------- |
|---|
| 96 | # Call FlashWriteNAND program |
|---|
| 97 | a 0x10000000 |
|---|
| 98 | c |
|---|
| 99 | |
|---|
| 100 | # ----------------------------------------- |
|---|
| 101 | # Setup file to be updated |
|---|
| 102 | F /lib/firmware/tt-u-boot-params.bin |
|---|
| 103 | C 0 |
|---|
| 104 | |
|---|
| 105 | # ----------------------------------------- |
|---|
| 106 | # Download firmware to local file |
|---|
| 107 | a 0x10010000 |
|---|
| 108 | m 128 |
|---|
| 109 | D |
|---|
| 110 | |
|---|
| 111 | # ----------------------------------------- |
|---|
| 112 | # ------------------SPLASH----------------- |
|---|
| 113 | # ----------------------------------------- |
|---|
| 114 | # Setup read command for splash.bin |
|---|
| 115 | a 0x1000ffec |
|---|
| 116 | p 0x00000000 |
|---|
| 117 | p 0x10010000 |
|---|
| 118 | p 0x00054000 |
|---|
| 119 | p 0x0002c000 |
|---|
| 120 | p 0x00000000 |
|---|
| 121 | |
|---|
| 122 | // Just peek to control command is set as expected |
|---|
| 123 | a 0x1000ffec |
|---|
| 124 | P;P;P;P;P |
|---|
| 125 | |
|---|
| 126 | # ----------------------------------------- |
|---|
| 127 | # Call FlashWriteNAND program |
|---|
| 128 | a 0x10000000 |
|---|
| 129 | c |
|---|
| 130 | |
|---|
| 131 | # ----------------------------------------- |
|---|
| 132 | # Setup file to be updated |
|---|
| 133 | F /lib/firmware/tt-splash.bin |
|---|
| 134 | C 0 |
|---|
| 135 | |
|---|
| 136 | # ----------------------------------------- |
|---|
| 137 | # Download firmware to local file |
|---|
| 138 | a 0x10010000 |
|---|
| 139 | m 176 |
|---|
| 140 | D |
|---|
| 141 | |
|---|
| 142 | # ----------------------------------------- |
|---|
| 143 | # ------------------KERNEL----------------- |
|---|
| 144 | # ----------------------------------------- |
|---|
| 145 | # Setup read command for uImage.bin |
|---|
| 146 | a 0x1000ffec |
|---|
| 147 | p 0x00000000 |
|---|
| 148 | p 0x10010000 |
|---|
| 149 | p 0x00080000 |
|---|
| 150 | p 0x00100000 |
|---|
| 151 | p 0x00000000 |
|---|
| 152 | |
|---|
| 153 | // Just peek to control command is set as expected |
|---|
| 154 | a 0x1000ffec |
|---|
| 155 | P;P;P;P;P |
|---|
| 156 | |
|---|
| 157 | # ----------------------------------------- |
|---|
| 158 | # Call FlashWriteNAND program |
|---|
| 159 | a 0x10000000 |
|---|
| 160 | c |
|---|
| 161 | |
|---|
| 162 | # ----------------------------------------- |
|---|
| 163 | # Setup file to be updated |
|---|
| 164 | F /lib/firmware/tt-uImage.bin |
|---|
| 165 | C 0 |
|---|
| 166 | |
|---|
| 167 | # ----------------------------------------- |
|---|
| 168 | # Download firmware to local file |
|---|
| 169 | a 0x10010000 |
|---|
| 170 | m 1024 |
|---|
| 171 | D |
|---|
| 172 | |
|---|
| 173 | # ----------------------------------------- |
|---|
| 174 | # ------------------ROOTFS----------------- |
|---|
| 175 | # ----------------------------------------- |
|---|
| 176 | # Setup read command for rootfs.raw |
|---|
| 177 | a 0x1000ffec |
|---|
| 178 | p 0x00000000 |
|---|
| 179 | p 0x10010000 |
|---|
| 180 | p 0x00180000 |
|---|
| 181 | p 0x00590000 |
|---|
| 182 | p 0x00000000 |
|---|
| 183 | |
|---|
| 184 | // Just peek to control command is set as expected |
|---|
| 185 | a 0x1000ffec |
|---|
| 186 | P;P;P;P;P |
|---|
| 187 | |
|---|
| 188 | # ----------------------------------------- |
|---|
| 189 | # Call FlashWriteNAND program |
|---|
| 190 | a 0x10000000 |
|---|
| 191 | c |
|---|
| 192 | |
|---|
| 193 | # ----------------------------------------- |
|---|
| 194 | # Setup file to be updated |
|---|
| 195 | F /lib/firmware/tt-rootfs.raw |
|---|
| 196 | C 0 |
|---|
| 197 | |
|---|
| 198 | # ----------------------------------------- |
|---|
| 199 | # Download firmware to local file |
|---|
| 200 | a 0x10010000 |
|---|
| 201 | m 5696 |
|---|
| 202 | D |
|---|
| 203 | |
|---|
| 204 | # ----------------------------------------- |
|---|
| 205 | # ------------------E28-FS----------------- |
|---|
| 206 | # ----------------------------------------- |
|---|
| 207 | # Setup read command for e28fs.raw |
|---|
| 208 | a 0x1000ffec |
|---|
| 209 | p 0x00000000 |
|---|
| 210 | p 0x10010000 |
|---|
| 211 | p 0x00710000 |
|---|
| 212 | p 0x01200000 |
|---|
| 213 | p 0x00000000 |
|---|
| 214 | |
|---|
| 215 | // Just peek to control command is set as expected |
|---|
| 216 | a 0x1000ffec |
|---|
| 217 | P;P;P;P;P |
|---|
| 218 | |
|---|
| 219 | # ----------------------------------------- |
|---|
| 220 | # Call FlashWriteNAND program |
|---|
| 221 | a 0x10000000 |
|---|
| 222 | c |
|---|
| 223 | |
|---|
| 224 | # ----------------------------------------- |
|---|
| 225 | # Setup file to be updated |
|---|
| 226 | F /lib/firmware/tt-e28fs.raw |
|---|
| 227 | C 0 |
|---|
| 228 | |
|---|
| 229 | # ----------------------------------------- |
|---|
| 230 | # Download firmware to local file |
|---|
| 231 | a 0x10010000 |
|---|
| 232 | m 18432 |
|---|
| 233 | D |
|---|
| 234 | |
|---|
| 235 | # ----------------------------------------- |
|---|
| 236 | # ------------------RSC-FS----------------- |
|---|
| 237 | # ----------------------------------------- |
|---|
| 238 | # Setup read command for resource.raw |
|---|
| 239 | a 0x1000ffec |
|---|
| 240 | p 0x00000000 |
|---|
| 241 | p 0x10010000 |
|---|
| 242 | p 0x01910000 |
|---|
| 243 | p 0x00500000 |
|---|
| 244 | p 0x00000000 |
|---|
| 245 | |
|---|
| 246 | // Just peek to control command is set as expected |
|---|
| 247 | a 0x1000ffec |
|---|
| 248 | P;P;P;P;P |
|---|
| 249 | |
|---|
| 250 | # ----------------------------------------- |
|---|
| 251 | # Call FlashWriteNAND program |
|---|
| 252 | a 0x10000000 |
|---|
| 253 | c |
|---|
| 254 | |
|---|
| 255 | # ----------------------------------------- |
|---|
| 256 | # Setup file to be updated |
|---|
| 257 | F /lib/firmware/tt-resource.raw |
|---|
| 258 | C 0 |
|---|
| 259 | |
|---|
| 260 | # ----------------------------------------- |
|---|
| 261 | # Download firmware to local file |
|---|
| 262 | a 0x10010000 |
|---|
| 263 | m 5120 |
|---|
| 264 | D |
|---|
| 265 | |
|---|
| 266 | # ----------------------------------------- |
|---|
| 267 | # ------------------USERFS----------------- |
|---|
| 268 | # ----------------------------------------- |
|---|
| 269 | # Setup read command for user_jffs2.raw |
|---|
| 270 | a 0x1000ffec |
|---|
| 271 | p 0x00000000 |
|---|
| 272 | p 0x10010000 |
|---|
| 273 | p 0x01e10000 |
|---|
| 274 | p 0x00dc0000 |
|---|
| 275 | p 0x00000000 |
|---|
| 276 | |
|---|
| 277 | // Just peek to control command is set as expected |
|---|
| 278 | a 0x1000ffec |
|---|
| 279 | P;P;P;P;P |
|---|
| 280 | |
|---|
| 281 | # ----------------------------------------- |
|---|
| 282 | # Call FlashWriteNAND program |
|---|
| 283 | a 0x10000000 |
|---|
| 284 | c |
|---|
| 285 | |
|---|
| 286 | # ----------------------------------------- |
|---|
| 287 | # Setup file to be updated |
|---|
| 288 | F /lib/firmware/tt-user_jffs2.raw |
|---|
| 289 | C 0 |
|---|
| 290 | |
|---|
| 291 | # ----------------------------------------- |
|---|
| 292 | # Download firmware to local file |
|---|
| 293 | a 0x10010000 |
|---|
| 294 | m 14080 |
|---|
| 295 | D |
|---|
| 296 | |
|---|
| 297 | # ----------------------------------------- |
|---|
| 298 | # -----------------RESERVE----------------- |
|---|
| 299 | # ----------------------------------------- |
|---|
| 300 | # Setup read command for reserve.raw |
|---|
| 301 | a 0x1000ffec |
|---|
| 302 | p 0x00000000 |
|---|
| 303 | p 0x10010000 |
|---|
| 304 | p 0x02bd0000 |
|---|
| 305 | p 0x01200000 |
|---|
| 306 | p 0x00000000 |
|---|
| 307 | |
|---|
| 308 | // Just peek to control command is set as expected |
|---|
| 309 | a 0x1000ffec |
|---|
| 310 | P;P;P;P;P |
|---|
| 311 | |
|---|
| 312 | # ----------------------------------------- |
|---|
| 313 | # Call FlashWriteNAND program |
|---|
| 314 | a 0x10000000 |
|---|
| 315 | c |
|---|
| 316 | |
|---|
| 317 | # ----------------------------------------- |
|---|
| 318 | # Setup file to be updated |
|---|
| 319 | F /lib/firmware/tt-reserve.raw |
|---|
| 320 | C 0 |
|---|
| 321 | |
|---|
| 322 | # ----------------------------------------- |
|---|
| 323 | # Download firmware to local file |
|---|
| 324 | a 0x10010000 |
|---|
| 325 | m 18432 |
|---|
| 326 | D |
|---|
| 327 | |
|---|
| 328 | # ----------------------------------------- |
|---|
| 329 | # ------------------PART1------------------ |
|---|
| 330 | # ----------------------------------------- |
|---|
| 331 | # Setup read command for part1.raw |
|---|
| 332 | a 0x1000ffec |
|---|
| 333 | p 0x00000000 |
|---|
| 334 | p 0x10010000 |
|---|
| 335 | p 0x03dd0000 |
|---|
| 336 | p 0x00008000 |
|---|
| 337 | p 0x00000000 |
|---|
| 338 | |
|---|
| 339 | // Just peek to control command is set as expected |
|---|
| 340 | a 0x1000ffec |
|---|
| 341 | P;P;P;P;P |
|---|
| 342 | |
|---|
| 343 | # ----------------------------------------- |
|---|
| 344 | # Call FlashWriteNAND program |
|---|
| 345 | a 0x10000000 |
|---|
| 346 | c |
|---|
| 347 | |
|---|
| 348 | # ----------------------------------------- |
|---|
| 349 | # Setup file to be updated |
|---|
| 350 | F /lib/firmware/tt-part1.raw |
|---|
| 351 | C 0 |
|---|
| 352 | |
|---|
| 353 | # ----------------------------------------- |
|---|
| 354 | # Download firmware to local file |
|---|
| 355 | a 0x10010000 |
|---|
| 356 | m 32 |
|---|
| 357 | D |
|---|
| 358 | |
|---|
| 359 | # ----------------------------------------- |
|---|
| 360 | # ------------------PART2------------------ |
|---|
| 361 | # ----------------------------------------- |
|---|
| 362 | # Setup read command for part2.raw |
|---|
| 363 | a 0x1000ffec |
|---|
| 364 | p 0x00000000 |
|---|
| 365 | p 0x10010000 |
|---|
| 366 | p 0x03dd8000 |
|---|
| 367 | p 0x00008000 |
|---|
| 368 | p 0x00000000 |
|---|
| 369 | |
|---|
| 370 | // Just peek to control command is set as expected |
|---|
| 371 | a 0x1000ffec |
|---|
| 372 | P;P;P;P;P |
|---|
| 373 | |
|---|
| 374 | # ----------------------------------------- |
|---|
| 375 | # Call FlashWriteNAND program |
|---|
| 376 | a 0x10000000 |
|---|
| 377 | c |
|---|
| 378 | |
|---|
| 379 | # ----------------------------------------- |
|---|
| 380 | # Setup file to be updated |
|---|
| 381 | F /lib/firmware/tt-part2.raw |
|---|
| 382 | C 0 |
|---|
| 383 | |
|---|
| 384 | # ----------------------------------------- |
|---|
| 385 | # Download firmware to local file |
|---|
| 386 | a 0x10010000 |
|---|
| 387 | m 32 |
|---|
| 388 | D |
|---|
| 389 | |
|---|
| 390 | # ----------------------------------------- |
|---|
| 391 | # ------------------GSMFS------------------ |
|---|
| 392 | # ----------------------------------------- |
|---|
| 393 | # Setup read command for gsmfs.raw |
|---|
| 394 | a 0x1000ffec |
|---|
| 395 | p 0x00000000 |
|---|
| 396 | p 0x10010000 |
|---|
| 397 | p 0x03de0000 |
|---|
| 398 | p 0x00020000 |
|---|
| 399 | p 0x00000000 |
|---|
| 400 | |
|---|
| 401 | // Just peek to control command is set as expected |
|---|
| 402 | a 0x1000ffec |
|---|
| 403 | P;P;P;P;P |
|---|
| 404 | |
|---|
| 405 | # ----------------------------------------- |
|---|
| 406 | # Call FlashWriteNAND program |
|---|
| 407 | a 0x10000000 |
|---|
| 408 | c |
|---|
| 409 | |
|---|
| 410 | # ----------------------------------------- |
|---|
| 411 | # Setup file to be updated |
|---|
| 412 | F /lib/firmware/tt-gsmfs.raw |
|---|
| 413 | C 0 |
|---|
| 414 | |
|---|
| 415 | # ----------------------------------------- |
|---|
| 416 | # Download firmware to local file |
|---|
| 417 | a 0x10010000 |
|---|
| 418 | m 128 |
|---|
| 419 | D |
|---|
| 420 | |
|---|
| 421 | # ----------------------------------------- |
|---|
| 422 | # -----------------GSMCODE----------------- |
|---|
| 423 | # ----------------------------------------- |
|---|
| 424 | # Setup read command for gsm_code.raw |
|---|
| 425 | a 0x1000ffec |
|---|
| 426 | p 0x00000000 |
|---|
| 427 | p 0x10010000 |
|---|
| 428 | p 0x03e00000 |
|---|
| 429 | p 0x00200000 |
|---|
| 430 | p 0x00000000 |
|---|
| 431 | |
|---|
| 432 | // Just peek to control command is set as expected |
|---|
| 433 | a 0x1000ffec |
|---|
| 434 | P;P;P;P;P |
|---|
| 435 | |
|---|
| 436 | # ----------------------------------------- |
|---|
| 437 | # Call FlashWriteNAND program |
|---|
| 438 | a 0x10000000 |
|---|
| 439 | c |
|---|
| 440 | |
|---|
| 441 | # ----------------------------------------- |
|---|
| 442 | # Setup file to be updated |
|---|
| 443 | F /lib/firmware/tt-gsm_code.raw |
|---|
| 444 | C 0 |
|---|
| 445 | |
|---|
| 446 | # ----------------------------------------- |
|---|
| 447 | # Download firmware to local file |
|---|
| 448 | a 0x10010000 |
|---|
| 449 | m 2048 |
|---|
| 450 | D |
|---|
| 451 | |
|---|
| 452 | # ----------------------------------------- |
|---|
| 453 | end |
|---|
| 454 | /////////////////////////////////////////////////////////////////// READNAND END |
|---|
| 455 | |
|---|
| 456 | /////////////////////////////////////////////////////////////////// U-BOOT |
|---|
| 457 | // Send an address |
|---|
| 458 | a 0x20010000 |
|---|
| 459 | // Load a file in phone memory at the previous given address |
|---|
| 460 | f x-load.bin |
|---|
| 461 | |
|---|
| 462 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
|---|
| 463 | a 0x20010da4 |
|---|
| 464 | c |
|---|
| 465 | |
|---|
| 466 | // Load another program to a new address, check README to generate u-boot.bin |
|---|
| 467 | a 0x11080000 |
|---|
| 468 | f u-boot.usb |
|---|
| 469 | |
|---|
| 470 | a 0x10000000 |
|---|
| 471 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
|---|
| 472 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
|---|
| 473 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko |
|---|
| 474 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko |
|---|
| 475 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko |
|---|
| 476 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko |
|---|
| 477 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko |
|---|
| 478 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko |
|---|
| 479 | |
|---|
| 480 | a 0x1103F800 |
|---|
| 481 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
|---|
| 482 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
|---|
| 483 | |
|---|
| 484 | // dump depuis _bss_start |
|---|
| 485 | //a 0x11098160 |
|---|
| 486 | a 0x1029f300 |
|---|
| 487 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
|---|
| 488 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
|---|
| 489 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko |
|---|
| 490 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko |
|---|
| 491 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko |
|---|
| 492 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko |
|---|
| 493 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko |
|---|
| 494 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko |
|---|
| 495 | |
|---|
| 496 | // dump zone malloc |
|---|
| 497 | a 0x11060800 |
|---|
| 498 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
|---|
| 499 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
|---|
| 500 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko |
|---|
| 501 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko |
|---|
| 502 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko |
|---|
| 503 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko |
|---|
| 504 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko |
|---|
| 505 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko |
|---|
| 506 | |
|---|
| 507 | // Send u-boot start address and boot there |
|---|
| 508 | a 0x11080000 |
|---|
| 509 | b |
|---|
| 510 | |
|---|
| 511 | end |
|---|
| 512 | /////////////////////////////////////////////////////////////////// U-BOOT END |
|---|
| 513 | |
|---|
| 514 | /////////////////////////////////////////////////////////////////// U-BOOT |
|---|
| 515 | # Booting TT with hosted u-boot |
|---|
| 516 | a 0x20010000 |
|---|
| 517 | f x-load.bin |
|---|
| 518 | |
|---|
| 519 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
|---|
| 520 | a 0x20010da4 |
|---|
| 521 | c |
|---|
| 522 | |
|---|
| 523 | // Load u-boot.bin |
|---|
| 524 | a 0x10280000 |
|---|
| 525 | f u-boot.bin |
|---|
| 526 | |
|---|
| 527 | // Send u-boot start address and boot there |
|---|
| 528 | a 0x10280000 |
|---|
| 529 | b |
|---|
| 530 | |
|---|
| 531 | end |
|---|
| 532 | /////////////////////////////////////////////////////////////////// U-BOOT END |
|---|
| 533 | |
|---|
| 534 | /////////////////////////////////////////////////////////////////// X-LOAD |
|---|
| 535 | # Booting TT with hosted x-load |
|---|
| 536 | // Load x-load in the phone |
|---|
| 537 | a 0x20010000 |
|---|
| 538 | // Check README to generate x-load.bin |
|---|
| 539 | f x-load.bin |
|---|
| 540 | |
|---|
| 541 | // Boot with x-load |
|---|
| 542 | a 0x20010c00 |
|---|
| 543 | b |
|---|
| 544 | |
|---|
| 545 | end |
|---|
| 546 | /////////////////////////////////////////////////////////////////// X-LOAD END |
|---|
| 547 | |
|---|
| 548 | /////////////////////////////////////////////////////////////////// DUMP MEM |
|---|
| 549 | // Send an address |
|---|
| 550 | a 0x20000000 |
|---|
| 551 | |
|---|
| 552 | // Dump from that address |
|---|
| 553 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M |
|---|
| 554 | |
|---|
| 555 | end |
|---|
| 556 | /////////////////////////////////////////////////////////////////// DUMP MEM END |
|---|
| 557 | |
|---|
| 558 | |
|---|
