Letcool N350JP

焊接UART接頭


由於N350JP掌機的顯示螢幕算是不錯的品質,不會有左右視差的問題,只可惜亮度暗了點,司徒也不忍將它擱置不玩,因此,司徒心想,這一台掌機或許可以進行改機或嘗試破解韌體,目前國外網站已經有相當多的高手將此台掌機逆向還原並移植到Linux系統,因此,司徒覺得有空也可以玩看看,當然,最基本的除錯管道就是必須有一個UART介面,因此,依據國外高手的介紹,在PCB板上可以找到TP1(RX)、TP2(TX)腳位,如下圖

UART輸出訊息(Baudrate: 115200bps)

+++MMP RomCode ver 8000.4.0 2009/02/18
pwrc_cfg=a0000006
vic1_rawSts=00000020
keyscan4=00001880
iotraps=00000000
Read Id : 00-00-00-00-00-00-00-00-00-00
NAND_TYPE: UNKNOWN
u16PageNoPerBlk               :128
u16PyldLen                    :2048
u16TotalBlkNo                 :4096
ecc_mode                      :0
Start to read DRAM_Init code from flash...
Enter Load_PF
u16PageNoPerBlk               :256
u16PageSize                   :4352
u16PyldLen                    :4096
u16TotalBlkNo                 :4096
ecc_mode                      :1


Enter Load_PF
u16PageNoPerBlk               :256
u16PageSize                   :4352
u16PyldLen                    :4096
u16TotalBlkNo                 :4096
ecc_mode                      :1


offset512
g_pSysInfo->u8PagePerBlkShift8
REDBOOT_FLG blk(2, 530)
start to extract DRAM_Init code...
call DRAM_Init(0x9d806600, 0x0)...
Enter Load_PF
u16PageNoPerBlk               :256
u16PageSize                   :4352
u16PyldLen                    :4096
u16TotalBlkNo                 :4096
ecc_mode                      :1


offset512
g_pSysInfo->u8PagePerBlkShift8
REDBOOT_FLG blk(2, 514)
Enter Load_PF
u16PageNoPerBlk               :256
u16PageSize                   :4352
u16PyldLen                    :4096
u16TotalBlkNo                 :4096
ecc_mode                      :1


retrieving dramcfg...
+ScanRam ver v2.0.0.1
new rDRAM10=070b0e22

DRAM Type Scan Start 

00000020 

init DRAM done
Enter the bypass mode!
Enter Load_PF
u16PageNoPerBlk               :256
u16PageSize                   :4352
u16PyldLen                    :4096
u16TotalBlkNo                 :4096
ecc_mode                      :1


Enter Load_PF
u16PageNoPerBlk               :256
u16PageSize                   :4352
u16PyldLen                    :4096
u16TotalBlkNo                 :4096
ecc_mode                      :1


offset512
g_pSysInfo->u8PagePerBlkShift8
REDBOOT_FLG blk(2, 512)
+ver=00030000

RedBoot_ver=01000005

Scanram_ver=02000001

chgSpdState=CHG_SPD_AT_27MHZ

version=5a0104a5

usb sno=46ed5beb

g_delay2ExitSelfRefresh=600, delayForDllLock=0, g_clk_sw_check=00000000

g_LcdRatio[0]=0

g_spll_ratio[0]=000e0a00

g_LcdRatio[1]=7

g_spll_ratio[1]=000e082c

g_LcdRatio[2]=11

g_spll_ratio[2]=000e082c

g_LcdRatio[3]=8

g_spll_ratio[3]=000e0a44

g_LcdRatio[4]=10

g_spll_ratio[4]=000e0828

-RetrieveSysInfo

romfs_mount g_IsFirst_Mount:0

dev sel :0

ReadID(1,0)

begin ReSet(1,0)

end ReSet(1,0)

ReadID(1, 0)buf:0x10007120



2c 68  4 46 89  0  0  0 - 2c 68  4 46 89  0  0  0 

2c 68  4 46 89  0  0  0 - 2c 68  4 46 89  0  0  0 

######################################



g_ChipMap[0]=0

g_ChipMap[1]=255

g_ChipMap[2]=255

g_ChipMap[3]=255

ReadID(1,0)

buf:0x10007120



2c 68  4 46 89  0  0  0 - 2c 68  4 46 89  0  0  0 

2c 68  4 46 89  0  0  0 - 2c 68  4 46 89  0  0  0 

XXXXXID : 2c 68  4 46 89 

#############pstSysInfo->u16PyldLen:4096

#############pstSysInfo->u16PageNoPerBlk:256

#############pstSysInfo->u16TotalBlkNo:4096

XXpstSysInfo->u8Internal_Chip_Number:0

###################sysinfo###################

pstSysInfo->u16PageNoPerBlk:256

pstSysInfo->u16PageSize:4224

pstSysInfo->u16PyldLen:4096

pstSysInfo->u16ReduntLen:64

pstSysInfo->u16TotalBlkNo:4096

pstSysInfo->u8TotalBlkNoShift:12

pstSysInfo->u8MultiChannel:0

pstSysInfo->u8Support_Internal_Interleave:0

pstSysInfo->u8Support_External_Interleave:0

pstSysInfo->u8Internal_Chip_Number:0

pstSysInfo->u8PagePerBlkShift:8

pstSysInfo->u8Support_TwoPlan:0

g_IsNand_4CS:0

#############################################

begin ReadPage_Test

dev sel :0

g_IsInit_nf:1

end ReadWritePage_ex(256) is fail.

begin ReadPage_Test

rFM_AC_TIMING:0x1f2222

end of AutoSettingACTiming:0x1f2222

retAddr:0x1000000 currNFRCAddr:0x1001040

retAddr:0x1001040 currNFRCAddr:0x1002080

retAddr:0x1002080 currNFRCAddr:0x10030c0

retAddr:0x10030c0 currNFRCAddr:0x1004100

g_nbi.RomFs_Max_BlkCount : 90

**********************NFRC INFO*************************

nfrc.rom.start : 64

nfrc.rom.count : 90

nfrc.rom1.start : 154

nfrc.rom1.count : 90

nfrc.rom_a.start : 244

nfrc.rom_a.count : 0

nfrc.block_count : 90

nfrc.page_per_block : 256

nfrc.pagesize : 4096

nfrc.phy_pagesize : 4096

nfrc.sectors_per_page : 8

nfrc.u8Support_TwoPlan : 0

nfrc.u8Support_Internal_Interleave : 0

nfrc.u8Support_External_Interleave : 0

nfrc.u8Internal_Chip_Number : 0

********************************************************

retAddr:0x1004100 currNFRCAddr:0x10041b4

retAddr:0x10041c0 currNFRCAddr:0x1004274

flg:1

p_nbi->heard : 0x524f4653

p_nbi->version : 4

p_nbi->size : 90

p_nbi->RomFs_Max_BlkCount : 90

p_nbi->RomFs1_Max_BlkCount : 0

p_nbi->flg : 0

p_nbi->IsSuppurtencryption : 0

p_nbi->IsSuppurtenCompress : 0

flg:2

p_nbi->heard : 0x524f4653

p_nbi->version : 4

p_nbi->size : 90

p_nbi->RomFs_Max_BlkCount : 90

p_nbi->RomFs1_Max_BlkCount : 0

p_nbi->flg : 1

p_nbi->IsSuppurtencryption : 0

p_nbi->IsSuppurtenCompress : 0

g_PageSize:4096

pdisk->magic:0x526f6d2e 

pdisk->nodecount:0x4ab 

sizeof(romfs_node):32 

g_romfs_version:0x1 

retAddr:0x1004280 currNFRCAddr:0x100e7ff

page count:10

g_Cfg_s.redbootCfg:0xc0000004




pwrc_cfg=a0000006

vic1_rawSts=00000020

keyscan4=00001880

iotraps=00000000






ref_clk: 297000000 Hz

sys_clk: 148500000, sys_ahb=74250000, sys_apb=37125000 Hz

ceva_clk: 297000000, ceva_ahb=148500000, ceva_apb=74250000 Hz

arm_clk: 297000000, arm_ahb=148500000, arm_apb=18562500 Hz



g_Cfg_s.redbootCfg:0xc0000004

do_bootcfg: [Exec kernel][Load romfs]

========= usbmsd_init: enter

if_dm9000.c debug var(0x00017d74)=0

sysCtrl.c debug var(0x00017d7c)=1

msd debug var(0x00017d84)=1

net_io.c debug var(0x00017d8c)=0

standalone eth_drv.c debug var(0x00017d94)=0

main.c debug var(0x00017d9c)=3

enet.c debug var(0x00017da4)=0

[UDC ]::init_msd(394) ==========  init_msd:enter ========== 

g_sysInfo_s.bootInfo_s.UsbNo:0x46ed5beb

Id=46ed5beb

g_sysInfo_s.bootInfo_s.UsbNo:0x46ed5beb

[UDC ]::genRandomSerial_UDC(2784) read have Id=46ed5beb

[UDC ]::genRandomSerial_UDC(2838) finish genRandomSerial_UDC()

[UDC ]::init_msd(402) ========== disconnect UDC =========

[UDC ]::initial_udc(1992) --UDC_Init() finish--[UDC ]::start_udc(2022) ---- start_udc()------- 

 

[UDC ]::init_msd(419) ======= init udc finish ======== 

[UDC ]::poll_udc_connected(2622) ====== poll..======= 

[UDC ]::poll_udc_connected(2650) ====== poll.EXIT EXIT .======= 

 usbmsd_init: exit

net_init: skip init ethernet



RedBoot(tm) bootstrap and debug environment [ROM]

Non-certified release, version v2_0_28 - built 17:41:15, Apr 27 2010



Platform: SUNPLUS_MMP (ARM 9) 

Copyright (C) 2000, 2001, 2002, 2003, 2004 Red Hat, Inc.

Copyright (C) 2003, 2004, eCosCentric Limited



Copyright (C) 2008, Sunplusmm v1.0.0.3



RAM: 0x00000000-0x00f00000, [0x00200000-0x00f0000ID av2c 68  4 
6 89 
h
########f####pstSy/Info->u16PylmLen:4096

# image from#psmfysI
fo->u16the image entry p

#t: 0x280040

g_Cfg_s.redbootCfg:0xc0000004

== tSycuting boot script in 0.010 seconds - enter ^C to abort

fo#Bo### go -c 0x280040
pst_Cfg_s.redbootCeNo0xc0000004

+stSgo

image sel: 0, image_sel_set: 0

rmvb enaben:

Mask interrupts on all channels

ID-CACHE sync and invalidate

set up a temporary coBlkxt. workspace_end=0x00f00000, entry=0x00280040

switch context to trampoline. workspace_end=0x00efffb0

pport_font: (height lea0) found builtifo-ont System (0)

createfont: (height == u8Pfound builtin font System (0)

8Su5poread:00000003;0f_Is1f0000;0d:9df7bfd3;#9####


返回上一頁