Hama Mediaplayer PRN 45HD - Realtek RTD1283 recovery

Zpráva

#1 Příspěvek od **rnbw** » 13 říj 2017, 21:49

Mam tu umrtveny mediaplayer Hama PRN 45HD.

Najprv bootoval, ale watchdog ho dokola restartoval z neznamej priciny. Potom som sa hral so seriovou konzolou a "podarilo" sa mi vymazat flash... :roll:

Nastastie som si predtym urobil zalohu (zo suborov /dev/mtdblock*).

Malo by to ist obnovit pomocou tohoto:
https://github.com/pbatard/xtreamerdev/ ... README.txt

Lenze mam problem s konzolou v tom bootloaderi - ked nastavim parametre na 115200 8n1, tak su data poskodene, ale som schopny znakom "s" spustit prenos cez Ymodem (ten sa, samozrejme, nepodari):

Kód: Vybrat vše

����Ƞ
s���g/c>
s䯯��g/c>䯍
����d/g�����s/d/��c>
�졯d/g/�s
Y���em:㾍�CC

Ked nastavim 115200 7n1, ak to vyzera lepsie, ale ziadny Ymodem:

Kód: Vybrat vše

s/d/g/c>
s/d/g/c>
s/d/g/c>s
s/d/g/c>s
s/d/g/c>

Pouzivam TTL-RS232 prevodnik od nejakeho stareho mobilu, doteraz to so vsetkym fungovalo. Dokonca aj tu - ked este bezal ten Linux, tak v nom konzola fungovala bez problemov. Co je to za bordel?

PC-maniak · #2 Příspěvek od **PC-maniak** » 13 říj 2017, 21:57

Zdravim podobnej bordel sem videl kdyz sem zapomel prehodit rychlost z 115200 na 9600 .. zkus nastavit i jine rychlosti zda to nema v tomhle modu s prazdnout flash nastaveny nejaky pomalejsi nouzovej prenos ..

ale zas tohle : Set it to 115200 8N1. mluvi za sebe :-/

tady to resi prolitl sem to opravdu rychle ale taky se tam zminujou o 9600

odkaz

lesana87 · #3 Příspěvek od **lesana87** » 13 říj 2017, 22:35

Co tam v reálu chodí za ty zmršený znaky? Tady se zobrazuje nějaké unicode smetí.

#4 Příspěvek od **rnbw** » 13 říj 2017, 22:37

Pri 115200 8S1 (parity = Space) to nejako funguje, ale ten YMODEM ide hrozne pomaly (niekolko minut) a zlyhava:

Kód: Vybrat vše

s/d/g/c>
s/d/g/c>s
Ymodem:
CCC
Sending: mars.BGA.64x2.bin
Ymodem sectors/kbytes sent:   0/ 0kRetry 0: Got 0d for sector ACK
Retry 0: Got 86 for sector ACK
Ymodem sectors/kbytes sent:   2/ 0kRetry 0: Got 86 for sector ACK
Ymodem sectors/kbytes sent:   4/ 0kRetry 0: Got 86 for sector ACK
Retry 0: Got 86 for sector ACK
Retry 0: Got 86 for sector ACK
Retry 0: Got 86 for sector ACK
Retry 0: Got 86 for sector ACK
Retry 0: Got 86 for sector ACK

#5 Příspěvek od **rnbw** » 13 říj 2017, 22:40

Chodi tam napr.:
<0x8a><0xbf> <0xc8><0xa0><0x8d>
s/d<0xaf><0xe7>/c>s
Y<0xed><0xef><0xe4>em:<0x8d><0x8a><0x8d>

f<0xe1><0xe9><0xec>!<0x8d><0x8a><0xf3>/d/g<0xaf><0xe3>>

lesana87 · #6 Příspěvek od **lesana87** » 13 říj 2017, 22:48

ACK je v Ymodemu 0x06 a chodí 0x86, takže problém je v nejvyšším bitu. Vypadá to, že je moc velký rozdíl v baudrate na straně vysílače a přijímače a tak stop bit přelézá do posledního bitu a vlastní stop bit pak chybí, proto pomohly ty dva stop bity.

#7 Příspěvek od **rnbw** » 13 říj 2017, 23:22

Naozaj to vyzera tak! Vyhrabal som USB-RS232 prevodnik s pl2303 a tam sa to pri 115200 8N1 sprava normalne. YMODEM blbne menej, ale stale to trva dlho a nie je to OK:

Kód: Vybrat vše

? H
s/d/g/c>s
Ymodem:
CCC
Sending: mars.BGA.64x2.bin
Ymodem sectors/kbytes sent:   0/ 0kRetry 0: Got 0d for sector ACK
Retry 0: NAK on sector
Bytes Sent:    896   BPS:14
Sending:
Ymodem sectors/kbytes sent:   0/ 0k
Transfer complete

lesana87 · #8 Příspěvek od **lesana87** » 14 říj 2017, 08:43

X/Ymodem má při ztrátě ACK nebo NAK 10s timeouty, tak se to při chybě potvrzení na dost dlouho seká.
Třeba je v tom recovery fw chyba v nastavení nějakýho PLL (typicky chyba +1) a generují se nepřesné hodiny pro sériovou linku. Na potvrzení téhle doměnky by to ale chtělo digitální osciloskop, možná by se to dalo i se slušným analogem. A pak případně harwarově poladit hodiny na vysílací/přijímací straně. Nebo by ten digitál ukázal jiný problém v komunikaci, nějaké zákmity nebo tak něco.

#9 Příspěvek od **rnbw** » 14 říj 2017, 10:09

Mam len neslusny analog (BM574), takze nezistim nic.

Tento nudzovy bootloader je v internej ROM toho RTD1283. Takze ked to niekomu funguje, nejako by to malo aj mne. Skusim este ine porty, pripadne iny USB prevodnik alebo UART na Raspberry Pi.

Standa99 · #10 Příspěvek od **Standa99** » 14 říj 2017, 11:02

Mám doma WiFi kameru, která taky cykluje při bootování. Zkusil jsem k ní připojit jen ten USB převodník (asi taky s pl2303) a dostal jsem se k podobnému výpisu z tvého prvního postu, dál už jsem na to neměl nervy. Je v ní nějaký chipset Nuvoton, našel jsem i uloženou stránku. Díky tvé trpělivosti zjišťuji, že by mohla být ještě šance

Pardon za OT.

#11 Příspěvek od **rnbw** » 15 říj 2017, 23:09

Nejaky pokrok, ale stale to odolava.

Na druhom PC to funguje cez seriovy port normalne. Ale zistil som, ze bootloader je nekompatibilny s linuxovou implementaciou Ymodemu (lrzsz). V HyperTerminali vo Windows sa upload podari. Nefungovalo to vsak s mars.BGA.64x2.bin (nevypisalo nic, len zamrzlo) ani s mars.QFP.128x1.bin (vypisalo "hello w" a zamrzlo). Nasiel som este mars.QFP.128x1.t1.bin, s ktorym to ide:

Kód: Vybrat vše

? H
s/d/g/c>s
Ymodem:
CCCCCCCC
checksum:0x0000A2B1
crc32:0x392AFC99, len:0x00000328hello  world!

s/d/g/c>

Nemam ale vhodny bootloader, ktory by sa tam dal uploadnut. Nasiel som nejaky z Asusu, ale odmietol sa spustit. Skusil som teda rtdsr, podarilo sa mi ho (po miernej uprave) skompilovat toolchainom Mips_toolchain-4.4.6-bin.tar.bz2. Dokonca sa aj spusti a funguje, akurat zamrzne po akomkolvek uploade cez Ymodem:

Kód: Vybrat vše

s/d/g/c>d
Ymodem:
CCCCCC
checksum:0x001F395F
crc32:0x377225EF, len:0x0000CF34
s/d/g/c>g
rtdsr v0.6, Copyright (c) 2011 Pete B. <xtreamerdev@gmail.com>

rtdsr comes with ABSOLUTELY NO WARRANTY.
This program is free software, you are welcome to redistribute it under
certain conditions. See http://www.gnu.org/licenses/gpl.html for details.

Configured with CPU:27.0MHz, RAM_BASE:0xa0500000, FLASH_BST:0xa0400000
Numeric parameters are to be provided in hexadecimal
rtdsr> help
The following commands are supported:
* finfo    [fi]
* fread    [fr]
* fwrite   [fw]
* help     [h]
* info     [i]
* memdump  [m]
* quit     [q]
* reset    [r]
* wbyte    [wb]
* wword    [ww]
* wlong    [wl]
* yreceive [yr]
* ysend    [ys]
All numeric parameters must be provided in hexa (with or without '0x' prefix)
Use "help command" to get help on a specific command
rtdsr> fi
NAND Flash: Type:HY27UF082G2B, Size:256MB, PageSize:0x800, BlockSize:0x20000
rtdsr> yr
Ymodem rcv:
CCCC
read:boot-test.bin
crc32:0xd9d8b4c6, len:0x00040000

#12 Příspěvek od **rnbw** » 16 říj 2017, 21:22

Bug odhaleny (buffer overflow) a opraveny:

Kód: Vybrat vše

diff -urp xtreamerdev-master-orig/rtdsr/ymodem.c xtreamerdev-master/rtdsr/ymodem.c
--- xtreamerdev-master-orig/rtdsr/ymodem.c      2011-01-31 20:23:00.000000000 +0100
+++ xtreamerdev-master/rtdsr/ymodem.c   2017-10-16 21:13:39.602009164 +0200
@@ -224,7 +224,7 @@ unsigned long ymodem_receive(unsigned ch
        unsigned char packet_data[PACKET_1K_SIZE + PACKET_OVERHEAD];
        int packet_length, i, file_done, session_done, crc_tries, crc_nak;
        unsigned int packets_received, errors, first_try = 1;
-       char file_name[FILE_NAME_LENGTH], file_size[FILE_SIZE_LENGTH], *file_ptr;
+       char file_name[FILE_NAME_LENGTH + 1], file_size[FILE_SIZE_LENGTH + 1], *file_ptr;
        unsigned char *buf_ptr;
        unsigned long size = 0;

Takze Ymodem receive v rtdsr funguje. Ked sa pokusim flashovat bootloader (0x40000 B na adrese 0x140000), tak to vypoti, ze bloky 0xA a 0xB su vadne (bad block detected - will try to erase it anyway). To prejde a nasledny zapis tiez. Ked po resete vydumpujem tuto cast flash, uploadnem cez Ymodem do PC a porovnam, tak to sedi. Akurat ten plny bootloader z flash nenabehne.

lesana87 · #13 Příspěvek od **lesana87** » 16 říj 2017, 21:29

To tam nejde prostě nahrát ten původní obsah, co máš zazálohovaný, to se musí takhle složitě? :oops:

#14 Příspěvek od **rnbw** » 16 říj 2017, 21:46

Flash je NAND a ma 256 MB, takze to nie je trivialna zalezitost...

Dokonca aj programator NAND som kupil, naflashoval tam zalohu, ale nejde to. Tak tam skusam nahrat aspon bootloader, ten by mal vediet obnovit hlavnu cast z USB disku.

#15 Příspěvek od **rnbw** » 17 říj 2017, 22:18

Takze prvych 32MB flash ma nejake oznacenie blokov, ktore reprezentuje tabulka na adrese 0xa0400000. Kazdy byte reprezentuje jeden blok flash (128KB). Vyznam je takyto:
0x00 = BAD
0x23 = HW SETTING
0x79 = BOOTCODE
0x80 = DATA
0xBB = BAD BLOCK TABLE
0xFF = EMPTY
U mna to vyzeralo dost biedne:

Kód: Vybrat vše

rtdsr> m a0400000
  a0400000  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400010  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400050  00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff  ................
  a0400060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a0400070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a0400080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000a0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000b0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000c0  00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000d0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000e0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000f0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................

Stav bloku sa ulozi pri flashovani. Takze prvy pokus:

Kód: Vybrat vše

? H
s/d/g/c>s
Ymodem:
CCCCCC
checksum:0x0000A2B1
crc32:0x392AFC99, len:0x00000328hello  world!

s/d/g/c>d
Ymodem:
CCCCC
checksum:0x001F4E6B
crc32:0x70EA2196, len:0x0000CF68
s/d/g/c>g
rtdsr v0.6, Copyright (c) 2011 Pete B. <xtreamerdev@gmail.com>

rtdsr comes with ABSOLUTELY NO WARRANTY.
This program is free software, you are welcome to redistribute it under
certain conditions. See http://www.gnu.org/licenses/gpl.html for details.

Configured with CPU:27.0MHz, RAM_BASE:0xa0500000, FLASH_BST:0xa0400000
Numeric parameters are to be provided in hexadecimal
rtdsr> fi
NAND Flash: Type:HY27UF082G2B, Size:256MB, PageSize:0x800, BlockSize:0x20000
blk_state_len=0x100
rtdsr> help yr
Usage: yreceive [address] [max_size]

Receive a file, through Ymodem (Ymodem-G not supported)
If <address> is not provided, <RAM_BASE> will be used
<max_size> can also be used to specify the maximum area to use from <address>
rtdsr> yr a0500000 200000
Ymodem rcv:
CCCCC
read:0-2m.bin
crc32:0xa66f6c77, len:0x00200000
rtdsr> wb a0400000 bb
rtdsr> wb a0400001 bb
rtdsr> wb a0400002 23
rtdsr> wb a0400003 23
rtdsr> wb a0400004 23
rtdsr> wb a0400005 23
rtdsr> wb a0400006 23
rtdsr> wb a0400007 23
rtdsr> wb a0400008 23
rtdsr> wb a0400009 23
rtdsr> wb a040000a 79
rtdsr> wb a040000b 79
rtdsr> wb a040000c 79
rtdsr> wb a040000d 79
rtdsr> wb a040000e 79
rtdsr> wb a040000f 79
rtdsr> m a0400000
  a0400000  bb bb 23 23 23 23 23 23 23 23 79 79 79 79 79 79  ..########yyyyyy
  a0400010  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400050  00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff  ................
  a0400060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a0400070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a0400080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000a0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000b0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000c0  00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000d0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000e0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000f0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
rtdsr> help fw
Usage: fwrite <offset> <size> [src]

Write <size> bytes, from address <src> into Flash, at offset <offset>
<offset> and <size> are mandatory and must be multiples of the NAND PageSize
If omitted, src=<RAM_BASE>
rtdsr> fw 0 200000
About to write 0x200000 bytes from RAM:0xa0500000 to Flash offset:0x00000000
If this is really what you want, press Y
erasing block 0x0... success
erasing block 0x1... success
erasing block 0x2... success
erasing block 0x3... success
erasing block 0x4... success
erasing block 0x5... success
erasing block 0x6... success
erasing block 0x7... success
erasing block 0x8... success
erasing block 0x9... success
erasing block 0xa... success
erasing block 0xb... success
erasing block 0xc... success
erasing block 0xd... success
erasing block 0xe... success
erasing block 0xf... success
writing block 0x0...............................................................
. success
writing block 0x1...............................................................
. success
writing block 0x2...............................................................
. success
writing block 0x3...............................................................
. success
writing block 0x4...............................................................
. success
writing block 0x5...............................................................
. success
writing block 0x6...............................................................
. success
writing block 0x7...............................................................
. success
writing block 0x8...............................................................
. success
writing block 0x9...............................................................
. success
writing block 0xa...............................................................
. success
writing block 0xb...............................................................
. success
writing block 0xc...............................................................
. success
writing block 0xd...............................................................
. success
writing block 0xe...............................................................
. success
writing block 0xf...............................................................
. success

Wrote 0x200000 bytes (0x10 blocks) starting at offset 0x00000000 (block 0x0)
rtdsr>

A restart:

Kód: Vybrat vše

?hello  world!
5528280 0 wwaaitiA

Nieco to robi! Vypinac svieti na modro, ale to je vsetko.

Takze pokracovanie (v takomto stave je potrebne drzat medzernik pri zapnuti, aby to zostalo v bootloaderi):

Kód: Vybrat vše

?
s/d/g/c>
s/d/g/c>
s/d/g/c>s
Ymodem:
CCCCCCC
checksum:0x0000A2B1
crc32:0x392AFC99, len:0x00000328hello  world!

s/d/g/c>d
Ymodem:
CCCCC
checksum:0x001F4E6B
crc32:0x70EA2196, len:0x0000CF68
s/d/g/c>g
rtdsr v0.6, Copyright (c) 2011 Pete B. <xtreamerdev@gmail.com>

rtdsr comes with ABSOLUTELY NO WARRANTY.
This program is free software, you are welcome to redistribute it under
certain conditions. See http://www.gnu.org/licenses/gpl.html for details.

Configured with CPU:27.0MHz, RAM_BASE:0xa0500000, FLASH_BST:0xa0400000
Numeric parameters are to be provided in hexadecimal
rtdsr> fi
NAND Flash: Type:HY27UF082G2B, Size:256MB, PageSize:0x800, BlockSize:0x20000
blk_state_len=0x100
rtdsr> m a0400000
  a0400000  bb bb 23 23 23 23 23 23 23 23 79 79 79 79 79 79  ..########yyyyyy
  a0400010  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400050  00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff  ................
  a0400060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a0400070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a0400080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000a0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000b0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000c0  00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000d0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000e0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000f0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
rtdsr> yr a0500000 200000
Ymodem rcv:
CCCC
read:2-4m.bin
crc32:0x80c74455, len:0x00200000
rtdsr> wb a0400010 79
rtdsr> wb a0400011 79
rtdsr> wb a0400012 79
rtdsr> wb a0400013 79
rtdsr> wb a0400014 79
rtdsr> wb a0400015 79
rtdsr> wb a0400016 79
rtdsr> wb a0400017 79
rtdsr> wb a0400018 79
rtdsr> wb a0400019 79
rtdsr> wb a040001a 80
rtdsr> wb a040001b 80
rtdsr> wb a040001c 80
rtdsr> wb a040001d 80
rtdsr> wb a040001e 80
rtdsr> wb a040001f 80
rtdsr> m a0400000
  a0400000  bb bb 23 23 23 23 23 23 23 23 79 79 79 79 79 79  ..########yyyyyy
  a0400010  79 79 79 79 79 79 79 79 79 79 80 80 80 80 80 80  yyyyyyyyyy......
  a0400020  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400030  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400040  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400050  00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff  ................
  a0400060  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a0400070  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a0400080  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a0400090  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000a0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000b0  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  a04000c0  00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000d0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000e0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
  a04000f0  ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
rtdsr> fw 200000 200000
About to write 0x200000 bytes from RAM:0xa0500000 to Flash offset:0x00200000
If this is really what you want, press Y
erasing block 0x10... success
erasing block 0x11... success
erasing block 0x12... success
erasing block 0x13... success
erasing block 0x14... success
erasing block 0x15... success
erasing block 0x16... success
erasing block 0x17... success
erasing block 0x18... success
erasing block 0x19... success
erasing block 0x1a... success
erasing block 0x1b... success
erasing block 0x1c... success
erasing block 0x1d... success
erasing block 0x1e... success
erasing block 0x1f... success
writing block 0x10..............................................................
.. success
writing block 0x11..............................................................
.. success
writing block 0x12..............................................................
.. success
writing block 0x13..............................................................
.. success
writing block 0x14..............................................................
.. success
writing block 0x15..............................................................
.. success
writing block 0x16..............................................................
.. success
writing block 0x17..............................................................
.. success
writing block 0x18..............................................................
.. success
writing block 0x19..............................................................
.. success
writing block 0x1a..............................................................
.. success
writing block 0x1b..............................................................
.. success
writing block 0x1c..............................................................
.. success
writing block 0x1d..............................................................
.. success
writing block 0x1e..............................................................
.. success
writing block 0x1f..............................................................
.. success

Wrote 0x200000 bytes (0x10 blocks) starting at offset 0x00200000 (block 0x10)
rtdsr>

Restart:

Kód: Vybrat vše

?hello  world!
55282800  wawitaiA?![HDMI]: Set I2C Speed = 100 kHz
[HDMI]: Chk_HotPlug() TV is not connected.
[HDMI]: Read_EDID abort, HDMI cable plug off.
[HDMI]: TV is not connected.
PAL logo

REALTEK ROM Monitor, Revision 0000.0201.0023.
Copyright (c) Realtek Semiconductor Corp. - All Rights Reserved.

For a list of available commands, type 'help'.

Compilation time /version=      Apr 30 2010  17:52:30  /0000.0201.0023
MAC address =                   00.11.22.33.44.55
Processor Company ID/options =  0x01 (MIPS Technologies, Inc.) / 0x00
Processor ID/revision =         0x93 / 0x78
Endianness =                    Little
Flash memory size =             256 MByte
SDRAM size =                    256 MByte
First free SDRAM address =      0x800fa800

Press 'ESC' to Monitor mode
____________________?!shell_golinux:251 read fw_desc_table_v1 fail!!
Realtek>

A sme doma

Teda ciastocne.