1 | /////////////////////////////////////////////////////////////////// READNAND |
---|
2 | # ----------------------------------------- |
---|
3 | # Init phone RAM |
---|
4 | a 0x20010000 |
---|
5 | f x-load.bin |
---|
6 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
---|
7 | a 0x20010da4 |
---|
8 | c |
---|
9 | |
---|
10 | # ----------------------------------------- |
---|
11 | # Upload FlashWriteNAND.bin program |
---|
12 | a 0x10000000 |
---|
13 | f FlashWriteNAND.bin |
---|
14 | |
---|
15 | # ----------------------------------------- |
---|
16 | # ------------------X-LOAD----------------- |
---|
17 | # ----------------------------------------- |
---|
18 | # Setup read command for x-load.bin |
---|
19 | a 0x1000ffec |
---|
20 | p 0x00000003 |
---|
21 | p 0x10010000 |
---|
22 | p 0x00000000 |
---|
23 | p 0x00004000 |
---|
24 | p 0x00000000 |
---|
25 | |
---|
26 | // Just peek to control command is set as expected |
---|
27 | a 0x1000ffec |
---|
28 | P;P;P;P;P |
---|
29 | |
---|
30 | # ----------------------------------------- |
---|
31 | # Call FlashWriteNAND program |
---|
32 | a 0x10000000 |
---|
33 | c |
---|
34 | |
---|
35 | # ----------------------------------------- |
---|
36 | # Setup file to be updated |
---|
37 | F /lib/firmware/tt-x-load.bin |
---|
38 | C 0 |
---|
39 | |
---|
40 | # ----------------------------------------- |
---|
41 | # Download phone memory into local buffer |
---|
42 | a 0x10010000 |
---|
43 | m 16 |
---|
44 | |
---|
45 | # ----------------------------------------- |
---|
46 | # Save the local buffer into a file |
---|
47 | D |
---|
48 | |
---|
49 | # ----------------------------------------- |
---|
50 | # ------------------U-BOOT----------------- |
---|
51 | # ----------------------------------------- |
---|
52 | # Setup read command for u-boot.bin |
---|
53 | a 0x1000ffec |
---|
54 | p 0x00000000 |
---|
55 | p 0x10010000 |
---|
56 | p 0x00004000 |
---|
57 | p 0x00030000 |
---|
58 | p 0x00000000 |
---|
59 | |
---|
60 | // Just peek to control command is set as expected |
---|
61 | a 0x1000ffec |
---|
62 | P;P;P;P;P |
---|
63 | |
---|
64 | # ----------------------------------------- |
---|
65 | # Call FlashWriteNAND program |
---|
66 | a 0x10000000 |
---|
67 | c |
---|
68 | |
---|
69 | # ----------------------------------------- |
---|
70 | # Setup file to be updated |
---|
71 | F /lib/firmware/tt-u-boot.bin |
---|
72 | C 0 |
---|
73 | |
---|
74 | # ----------------------------------------- |
---|
75 | # Download firmware to local file |
---|
76 | a 0x10010000 |
---|
77 | m 192 |
---|
78 | D |
---|
79 | |
---|
80 | # ----------------------------------------- |
---|
81 | # ------------------UNUSED----------------- |
---|
82 | # ----------------------------------------- |
---|
83 | # Setup read command for u-boot-params.bin |
---|
84 | a 0x1000ffec |
---|
85 | p 0x00000000 |
---|
86 | p 0x10010000 |
---|
87 | p 0x00034000 |
---|
88 | p 0x00020000 |
---|
89 | p 0x00000000 |
---|
90 | |
---|
91 | // Just peek to control command is set as expected |
---|
92 | a 0x1000ffec |
---|
93 | P;P;P;P;P |
---|
94 | |
---|
95 | # ----------------------------------------- |
---|
96 | # Call FlashWriteNAND program |
---|
97 | a 0x10000000 |
---|
98 | c |
---|
99 | |
---|
100 | # ----------------------------------------- |
---|
101 | # Setup file to be updated |
---|
102 | F /lib/firmware/tt-u-boot-params.bin |
---|
103 | C 0 |
---|
104 | |
---|
105 | # ----------------------------------------- |
---|
106 | # Download firmware to local file |
---|
107 | a 0x10010000 |
---|
108 | m 128 |
---|
109 | D |
---|
110 | |
---|
111 | # ----------------------------------------- |
---|
112 | # ------------------SPLASH----------------- |
---|
113 | # ----------------------------------------- |
---|
114 | # Setup read command for splash.bin |
---|
115 | a 0x1000ffec |
---|
116 | p 0x00000000 |
---|
117 | p 0x10010000 |
---|
118 | p 0x00054000 |
---|
119 | p 0x0002c000 |
---|
120 | p 0x00000000 |
---|
121 | |
---|
122 | // Just peek to control command is set as expected |
---|
123 | a 0x1000ffec |
---|
124 | P;P;P;P;P |
---|
125 | |
---|
126 | # ----------------------------------------- |
---|
127 | # Call FlashWriteNAND program |
---|
128 | a 0x10000000 |
---|
129 | c |
---|
130 | |
---|
131 | # ----------------------------------------- |
---|
132 | # Setup file to be updated |
---|
133 | F /lib/firmware/tt-splash.bin |
---|
134 | C 0 |
---|
135 | |
---|
136 | # ----------------------------------------- |
---|
137 | # Download firmware to local file |
---|
138 | a 0x10010000 |
---|
139 | m 176 |
---|
140 | D |
---|
141 | |
---|
142 | # ----------------------------------------- |
---|
143 | # ------------------KERNEL----------------- |
---|
144 | # ----------------------------------------- |
---|
145 | # Setup read command for uImage.bin |
---|
146 | a 0x1000ffec |
---|
147 | p 0x00000000 |
---|
148 | p 0x10010000 |
---|
149 | p 0x00080000 |
---|
150 | p 0x00100000 |
---|
151 | p 0x00000000 |
---|
152 | |
---|
153 | // Just peek to control command is set as expected |
---|
154 | a 0x1000ffec |
---|
155 | P;P;P;P;P |
---|
156 | |
---|
157 | # ----------------------------------------- |
---|
158 | # Call FlashWriteNAND program |
---|
159 | a 0x10000000 |
---|
160 | c |
---|
161 | |
---|
162 | # ----------------------------------------- |
---|
163 | # Setup file to be updated |
---|
164 | F /lib/firmware/tt-uImage.bin |
---|
165 | C 0 |
---|
166 | |
---|
167 | # ----------------------------------------- |
---|
168 | # Download firmware to local file |
---|
169 | a 0x10010000 |
---|
170 | m 1024 |
---|
171 | D |
---|
172 | |
---|
173 | # ----------------------------------------- |
---|
174 | # ------------------ROOTFS----------------- |
---|
175 | # ----------------------------------------- |
---|
176 | # Setup read command for rootfs.raw |
---|
177 | a 0x1000ffec |
---|
178 | p 0x00000000 |
---|
179 | p 0x10010000 |
---|
180 | p 0x00180000 |
---|
181 | p 0x00590000 |
---|
182 | p 0x00000000 |
---|
183 | |
---|
184 | // Just peek to control command is set as expected |
---|
185 | a 0x1000ffec |
---|
186 | P;P;P;P;P |
---|
187 | |
---|
188 | # ----------------------------------------- |
---|
189 | # Call FlashWriteNAND program |
---|
190 | a 0x10000000 |
---|
191 | c |
---|
192 | |
---|
193 | # ----------------------------------------- |
---|
194 | # Setup file to be updated |
---|
195 | F /lib/firmware/tt-rootfs.raw |
---|
196 | C 0 |
---|
197 | |
---|
198 | # ----------------------------------------- |
---|
199 | # Download firmware to local file |
---|
200 | a 0x10010000 |
---|
201 | m 5696 |
---|
202 | D |
---|
203 | |
---|
204 | # ----------------------------------------- |
---|
205 | # ------------------E28-FS----------------- |
---|
206 | # ----------------------------------------- |
---|
207 | # Setup read command for e28fs.raw |
---|
208 | a 0x1000ffec |
---|
209 | p 0x00000000 |
---|
210 | p 0x10010000 |
---|
211 | p 0x00710000 |
---|
212 | p 0x01200000 |
---|
213 | p 0x00000000 |
---|
214 | |
---|
215 | // Just peek to control command is set as expected |
---|
216 | a 0x1000ffec |
---|
217 | P;P;P;P;P |
---|
218 | |
---|
219 | # ----------------------------------------- |
---|
220 | # Call FlashWriteNAND program |
---|
221 | a 0x10000000 |
---|
222 | c |
---|
223 | |
---|
224 | # ----------------------------------------- |
---|
225 | # Setup file to be updated |
---|
226 | F /lib/firmware/tt-e28fs.raw |
---|
227 | C 0 |
---|
228 | |
---|
229 | # ----------------------------------------- |
---|
230 | # Download firmware to local file |
---|
231 | a 0x10010000 |
---|
232 | m 18432 |
---|
233 | D |
---|
234 | |
---|
235 | # ----------------------------------------- |
---|
236 | # ------------------RSC-FS----------------- |
---|
237 | # ----------------------------------------- |
---|
238 | # Setup read command for resource.raw |
---|
239 | a 0x1000ffec |
---|
240 | p 0x00000000 |
---|
241 | p 0x10010000 |
---|
242 | p 0x01910000 |
---|
243 | p 0x00500000 |
---|
244 | p 0x00000000 |
---|
245 | |
---|
246 | // Just peek to control command is set as expected |
---|
247 | a 0x1000ffec |
---|
248 | P;P;P;P;P |
---|
249 | |
---|
250 | # ----------------------------------------- |
---|
251 | # Call FlashWriteNAND program |
---|
252 | a 0x10000000 |
---|
253 | c |
---|
254 | |
---|
255 | # ----------------------------------------- |
---|
256 | # Setup file to be updated |
---|
257 | F /lib/firmware/tt-resource.raw |
---|
258 | C 0 |
---|
259 | |
---|
260 | # ----------------------------------------- |
---|
261 | # Download firmware to local file |
---|
262 | a 0x10010000 |
---|
263 | m 5120 |
---|
264 | D |
---|
265 | |
---|
266 | # ----------------------------------------- |
---|
267 | # ------------------USERFS----------------- |
---|
268 | # ----------------------------------------- |
---|
269 | # Setup read command for user_jffs2.raw |
---|
270 | a 0x1000ffec |
---|
271 | p 0x00000000 |
---|
272 | p 0x10010000 |
---|
273 | p 0x01e10000 |
---|
274 | p 0x00dc0000 |
---|
275 | p 0x00000000 |
---|
276 | |
---|
277 | // Just peek to control command is set as expected |
---|
278 | a 0x1000ffec |
---|
279 | P;P;P;P;P |
---|
280 | |
---|
281 | # ----------------------------------------- |
---|
282 | # Call FlashWriteNAND program |
---|
283 | a 0x10000000 |
---|
284 | c |
---|
285 | |
---|
286 | # ----------------------------------------- |
---|
287 | # Setup file to be updated |
---|
288 | F /lib/firmware/tt-user_jffs2.raw |
---|
289 | C 0 |
---|
290 | |
---|
291 | # ----------------------------------------- |
---|
292 | # Download firmware to local file |
---|
293 | a 0x10010000 |
---|
294 | m 14080 |
---|
295 | D |
---|
296 | |
---|
297 | # ----------------------------------------- |
---|
298 | # -----------------RESERVE----------------- |
---|
299 | # ----------------------------------------- |
---|
300 | # Setup read command for reserve.raw |
---|
301 | a 0x1000ffec |
---|
302 | p 0x00000000 |
---|
303 | p 0x10010000 |
---|
304 | p 0x02bd0000 |
---|
305 | p 0x01200000 |
---|
306 | p 0x00000000 |
---|
307 | |
---|
308 | // Just peek to control command is set as expected |
---|
309 | a 0x1000ffec |
---|
310 | P;P;P;P;P |
---|
311 | |
---|
312 | # ----------------------------------------- |
---|
313 | # Call FlashWriteNAND program |
---|
314 | a 0x10000000 |
---|
315 | c |
---|
316 | |
---|
317 | # ----------------------------------------- |
---|
318 | # Setup file to be updated |
---|
319 | F /lib/firmware/tt-reserve.raw |
---|
320 | C 0 |
---|
321 | |
---|
322 | # ----------------------------------------- |
---|
323 | # Download firmware to local file |
---|
324 | a 0x10010000 |
---|
325 | m 18432 |
---|
326 | D |
---|
327 | |
---|
328 | # ----------------------------------------- |
---|
329 | # ------------------PART1------------------ |
---|
330 | # ----------------------------------------- |
---|
331 | # Setup read command for part1.raw |
---|
332 | a 0x1000ffec |
---|
333 | p 0x00000000 |
---|
334 | p 0x10010000 |
---|
335 | p 0x03dd0000 |
---|
336 | p 0x00008000 |
---|
337 | p 0x00000000 |
---|
338 | |
---|
339 | // Just peek to control command is set as expected |
---|
340 | a 0x1000ffec |
---|
341 | P;P;P;P;P |
---|
342 | |
---|
343 | # ----------------------------------------- |
---|
344 | # Call FlashWriteNAND program |
---|
345 | a 0x10000000 |
---|
346 | c |
---|
347 | |
---|
348 | # ----------------------------------------- |
---|
349 | # Setup file to be updated |
---|
350 | F /lib/firmware/tt-part1.raw |
---|
351 | C 0 |
---|
352 | |
---|
353 | # ----------------------------------------- |
---|
354 | # Download firmware to local file |
---|
355 | a 0x10010000 |
---|
356 | m 32 |
---|
357 | D |
---|
358 | |
---|
359 | # ----------------------------------------- |
---|
360 | # ------------------PART2------------------ |
---|
361 | # ----------------------------------------- |
---|
362 | # Setup read command for part2.raw |
---|
363 | a 0x1000ffec |
---|
364 | p 0x00000000 |
---|
365 | p 0x10010000 |
---|
366 | p 0x03dd8000 |
---|
367 | p 0x00008000 |
---|
368 | p 0x00000000 |
---|
369 | |
---|
370 | // Just peek to control command is set as expected |
---|
371 | a 0x1000ffec |
---|
372 | P;P;P;P;P |
---|
373 | |
---|
374 | # ----------------------------------------- |
---|
375 | # Call FlashWriteNAND program |
---|
376 | a 0x10000000 |
---|
377 | c |
---|
378 | |
---|
379 | # ----------------------------------------- |
---|
380 | # Setup file to be updated |
---|
381 | F /lib/firmware/tt-part2.raw |
---|
382 | C 0 |
---|
383 | |
---|
384 | # ----------------------------------------- |
---|
385 | # Download firmware to local file |
---|
386 | a 0x10010000 |
---|
387 | m 32 |
---|
388 | D |
---|
389 | |
---|
390 | # ----------------------------------------- |
---|
391 | # ------------------GSMFS------------------ |
---|
392 | # ----------------------------------------- |
---|
393 | # Setup read command for gsmfs.raw |
---|
394 | a 0x1000ffec |
---|
395 | p 0x00000000 |
---|
396 | p 0x10010000 |
---|
397 | p 0x03de0000 |
---|
398 | p 0x00020000 |
---|
399 | p 0x00000000 |
---|
400 | |
---|
401 | // Just peek to control command is set as expected |
---|
402 | a 0x1000ffec |
---|
403 | P;P;P;P;P |
---|
404 | |
---|
405 | # ----------------------------------------- |
---|
406 | # Call FlashWriteNAND program |
---|
407 | a 0x10000000 |
---|
408 | c |
---|
409 | |
---|
410 | # ----------------------------------------- |
---|
411 | # Setup file to be updated |
---|
412 | F /lib/firmware/tt-gsmfs.raw |
---|
413 | C 0 |
---|
414 | |
---|
415 | # ----------------------------------------- |
---|
416 | # Download firmware to local file |
---|
417 | a 0x10010000 |
---|
418 | m 128 |
---|
419 | D |
---|
420 | |
---|
421 | # ----------------------------------------- |
---|
422 | # -----------------GSMCODE----------------- |
---|
423 | # ----------------------------------------- |
---|
424 | # Setup read command for gsm_code.raw |
---|
425 | a 0x1000ffec |
---|
426 | p 0x00000000 |
---|
427 | p 0x10010000 |
---|
428 | p 0x03e00000 |
---|
429 | p 0x00200000 |
---|
430 | p 0x00000000 |
---|
431 | |
---|
432 | // Just peek to control command is set as expected |
---|
433 | a 0x1000ffec |
---|
434 | P;P;P;P;P |
---|
435 | |
---|
436 | # ----------------------------------------- |
---|
437 | # Call FlashWriteNAND program |
---|
438 | a 0x10000000 |
---|
439 | c |
---|
440 | |
---|
441 | # ----------------------------------------- |
---|
442 | # Setup file to be updated |
---|
443 | F /lib/firmware/tt-gsm_code.raw |
---|
444 | C 0 |
---|
445 | |
---|
446 | # ----------------------------------------- |
---|
447 | # Download firmware to local file |
---|
448 | a 0x10010000 |
---|
449 | m 2048 |
---|
450 | D |
---|
451 | |
---|
452 | # ----------------------------------------- |
---|
453 | end |
---|
454 | /////////////////////////////////////////////////////////////////// READNAND END |
---|
455 | |
---|
456 | /////////////////////////////////////////////////////////////////// KERNEL |
---|
457 | # Booting TT with modified hosted u-boot |
---|
458 | a 0x20010000 |
---|
459 | f x-load.bin |
---|
460 | |
---|
461 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
---|
462 | a 0x20010da4 |
---|
463 | c |
---|
464 | |
---|
465 | // Load updated u-boot.bin |
---|
466 | a 0x10280000 |
---|
467 | f u-boot-updated.bin |
---|
468 | |
---|
469 | a 0x11800000 |
---|
470 | f uImage.bin |
---|
471 | |
---|
472 | // Send u-boot start address and boot there, u-boot "bootcmd" must has |
---|
473 | // fixed to not download kernel from NAND but always boot the kernel |
---|
474 | // loaded at 0x11800000 address in RAM |
---|
475 | a 0x10280000 |
---|
476 | b |
---|
477 | |
---|
478 | end |
---|
479 | /////////////////////////////////////////////////////////////////// KERNEL END |
---|
480 | |
---|
481 | /////////////////////////////////////////////////////////////////// U-BOOT |
---|
482 | // Send an address |
---|
483 | a 0x20010000 |
---|
484 | // Load a file in phone memory at the previous given address |
---|
485 | f x-load.bin |
---|
486 | |
---|
487 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
---|
488 | a 0x20010da4 |
---|
489 | c |
---|
490 | |
---|
491 | // Load another program to a new address, check README to generate u-boot.bin |
---|
492 | a 0x11080000 |
---|
493 | f u-boot.usb |
---|
494 | |
---|
495 | a 0x10000000 |
---|
496 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
---|
497 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
---|
498 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko |
---|
499 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko |
---|
500 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko |
---|
501 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko |
---|
502 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko |
---|
503 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko |
---|
504 | |
---|
505 | a 0x1103F800 |
---|
506 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
---|
507 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
---|
508 | |
---|
509 | // dump depuis _bss_start |
---|
510 | //a 0x11098160 |
---|
511 | a 0x1029f300 |
---|
512 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
---|
513 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
---|
514 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko |
---|
515 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko |
---|
516 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko |
---|
517 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko |
---|
518 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko |
---|
519 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko |
---|
520 | |
---|
521 | // dump zone malloc |
---|
522 | a 0x11060800 |
---|
523 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 1ko |
---|
524 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 2ko |
---|
525 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 3ko |
---|
526 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 4ko |
---|
527 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 5ko |
---|
528 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 6ko |
---|
529 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 7ko |
---|
530 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M // 8ko |
---|
531 | |
---|
532 | // Send u-boot start address and boot there |
---|
533 | a 0x11080000 |
---|
534 | b |
---|
535 | |
---|
536 | end |
---|
537 | /////////////////////////////////////////////////////////////////// U-BOOT END |
---|
538 | |
---|
539 | /////////////////////////////////////////////////////////////////// U-BOOT |
---|
540 | # Booting TT with hosted u-boot |
---|
541 | a 0x20010000 |
---|
542 | f x-load.bin |
---|
543 | |
---|
544 | // Call a sub from x-load.bin: TT BoardInit (should only work with TT) |
---|
545 | a 0x20010da4 |
---|
546 | c |
---|
547 | |
---|
548 | // Load u-boot.bin |
---|
549 | a 0x10280000 |
---|
550 | f u-boot.bin |
---|
551 | |
---|
552 | // Send u-boot start address and boot there |
---|
553 | a 0x10280000 |
---|
554 | b |
---|
555 | |
---|
556 | end |
---|
557 | /////////////////////////////////////////////////////////////////// U-BOOT END |
---|
558 | |
---|
559 | /////////////////////////////////////////////////////////////////// X-LOAD |
---|
560 | # Booting TT with hosted x-load |
---|
561 | // Load x-load in the phone |
---|
562 | a 0x20010000 |
---|
563 | // Check README to generate x-load.bin |
---|
564 | f x-load.bin |
---|
565 | |
---|
566 | // Boot with x-load |
---|
567 | a 0x20010c00 |
---|
568 | b |
---|
569 | |
---|
570 | end |
---|
571 | /////////////////////////////////////////////////////////////////// X-LOAD END |
---|
572 | |
---|
573 | /////////////////////////////////////////////////////////////////// DUMP MEM |
---|
574 | // Send an address |
---|
575 | a 0x20000000 |
---|
576 | |
---|
577 | // Dump from that address |
---|
578 | M;M;M;M;M;M;M;M;M;M;M;M;M;M;M;M |
---|
579 | |
---|
580 | end |
---|
581 | /////////////////////////////////////////////////////////////////// DUMP MEM END |
---|
582 | |
---|
583 | |
---|