Ivor Hewitt
To remind me to finish this (and keep track) I've uploaded the initial script to @Codeberg - https://codeberg.org/ivor/RM200-tools
just a basic python script so far - todo change to a module.
just a basic python script so far - todo change to a module.
Not quite got firmware upload working... But wondering what "top secret" does in the menu. đ¤đ¤Ŗ
Script successfully flashed twice ok. đđ Then did something wrong. đŦ Not sure this is recoverable.
And no, left and or right do nothing. Oh well.
And no, left and or right do nothing. Oh well.
Yay. Kicked it back into existence with openocd and some flashing then reran the python firmware util.
Right, going to see if I can get the QC firmware doing anything.
Right, going to see if I can get the QC firmware doing anything.
So many interesting little tidbits in the firmware... I think I need to get another blog on the latest #hacking done this weekend.
Ok. So the bootloader has a NAND viewer, and in there you can see the chipid. Can't work out how to view and write it via JTAG yet.
#hacking
#hacking
Hmmm... Jtag can query and show the flash chip details:
> nand info 0 0
#0: NAND 256MiB 3.3V 8-bit (Hynix) pagesize: 2048, buswidth: 8, erasesize: 131072
#0: 0x00000000 (128kB) erase state unknown (block condition unknown) flash device 'NAND 256MiB 3.3V 8-bit (Hynix)' found
But fails trying a read. âšī¸đ¤
> nand dump 0 nand_full.bin 0x0 0x100000
reading NAND flash page failed