购买链接: https://s.click.taobao.com/s0JIBZw
参考链接0: 买个全志arm9 F1C100s 方案的唱戏机回来拆一拆
参考链接1: F1C100s 手册
参考链接2: 看戏机(唱戏机)F1C100原理图
参考链接3: 侨德实业有限公司VS (全志C100电脑升级)流程示意图
参考链接4: 先科唱戏机(看戏机)F1C100s方案运行XBOOT大神的XBOOT系统步骤
参考链接5: F1C100s入坑记录
参考链接A: 荔枝派Zero V3s开发板入坑记录
参考链接B: 【视频分享】制作荔枝派Zero开发板(全志V3s) TF/SD卡启动盘
下面是网友拆解图片:
离线
接串口线:
BOOT0 is starting
DBG: init jtag OK
init dram , base is 0x80000000
init dram , clk is 156
init dram , access_mode is 1
init dram , cs_num is 1
init dram , ddr8_remap is 0
init dram , sdr_ddr is 1
init dram , bwidth is 16
init dram , col_width is 10
init dram , row_width is 13
init dram , bank_size is 4
init dram , cas is 3
init dram , size is 0
dram init successed,size is 32
DBG: init heap OK, base address is 0x80000000, size is 0x00100000
DBG: load boot1 from spinor
DBG: init spinor OK
DBG: the size of BOOT1 is 71168
DBG: src_sum = 0x0x4dd22bba
DBG: sum = 0x0x4dd22bba
succeed in loading BOOT1
jump to BOOT1
DBG: boot1 starting!
DBG: init heap OK, base address is 0x80800000, size is 0x00100000
begin to init file system
DBG: init block device OK
DBG: init mini file system OK
DBG: mount c partition OK
0
jump to kernal
Mount Parts Thread running.....
\0partition [D] plug in..
\0Mount Parts Thread work now.....
\0.Start Shell from partion 'c'..................................................................................
\0Mount Parts Thread work end....
\0Execute startup script begin..............
\0Esh Error: \0OpenConfigFile y:\config\config.bin failed.
\01
\02
\03
\0.orange Installed and Openned!........................................................................................
\04
\0partition [E] plug in..
\05
\0.Desktop Installed and Openned!........................................................................................
\0...............Execute startup script end
\0Esh msg: \0shell main thread: Bye Bye!
\0pend event sem overtime!
\0*divider=7
\0b_interlace=0
\022212222 22222222 00222222
\0
以上是原版固件接上串口线后的打印输出
离线
SEGGER J-Link Commander V4.96l ('?' for help)
Compiled Feb 25 2015 10:24:24
DLL version V4.96l, compiled Feb 25 2015 10:24:11
Firmware: J-Link ARM V8 compiled Nov 28 2014 13:44:46
Hardware: V8.00
S/N: 20121126
Feature(s): RDI,FlashDL,FlashBP,JFlash
VTarget = 2.982V
Info: TotalIRLen = 4, IRPrint = 0x01
Info: CP15.0.0: 0x41069265: ARM, Architecure 5TEJ
Info: CP15.0.1: 0x1D152192: ICache: 32kB (4*256*32), DCache: 16kB (4*128*32)
Info: Cache type: Separate, Write-back, Format C (WT supported)
Found 1 JTAG device, Total IRLen = 4:
#0 Id: 0x07926F0F, IRLen: 04, IRPrint: 0x1, ARM926EJ-S Core
Found ARM with core Id 0x07926F0F (ARM9)
Target interface speed: 100 kHz
J-Link>
JLINK连接成功!
离线
下载EWARM-CD-8201-14188.exe
再到csdn下载了 IAR7.x破解文件.rar 破解工具,
根据 IAR for ARM介绍、下载、安装与注册终于把IAR破解了。
IAR 7.4下载链接:EWARM-CD-7401-8472.exe
离线
串口线和jlink的线接到板子哪里的?有标记吗?
参考链接: http://linux-sunxi.org/MicroSD_Breakout
Mapping
Pin MicroSD JTAG Connection 14-pin ARM JTAG Header UART Connection 5-pin UART Header
1 Data2 TCK 9 nc nc
2 CD/Data3 nc nc RX 2
3 Cmd TDO 11 nc nc
4 VDD VTG 1,13 VDD 3
5 CLK nc nc TX 1
6 VSS GND 2,4,6,8,10,14 GND 4, 5
7 Data0 TDI 5 nc nc
8 Data1 TMS 7 nc nc
nc nc nTRST 3 nc nc
nc nc nRESET 12 nc nc
然后再谷歌找一张带引脚序号的TF卡封装图,对照标出UART和JTAG, 然后用杜邦线引出贴上标签纸。
离线
离线
晕哥 说:agnd 说:晕啊,买了拆了还能退么?
据说热风枪 吹保修标签可以完整撕下 (逃
可以在tf卡位置怼一下jlink看一下芯片么
http://linux-sunxi.org/images/thumb/0/05/JTAG_MicroSD_UART-front.jpeg/180px-JTAG_MicroSD_UART-front.jpeg
优秀!
还有这种操作。
离线
Jin劲 说:晕哥 说:据说热风枪 吹保修标签可以完整撕下 (逃
可以在tf卡位置怼一下jlink看一下芯片么
http://linux-sunxi.org/images/thumb/0/05/JTAG_MicroSD_UART-front.jpeg/180px-JTAG_MicroSD_UART-front.jpegRK2806也是ARM926EJ_s,外加一个DSP组成的双核,小心以假乱真啊
不怕,看Core Id
离线
Jin劲 说:晕哥 说:据说热风枪 吹保修标签可以完整撕下 (逃
可以在tf卡位置怼一下jlink看一下芯片么
http://linux-sunxi.org/images/thumb/0/05/JTAG_MicroSD_UART-front.jpeg/180px-JTAG_MicroSD_UART-front.jpegRK2806也是ARM926EJ_s,外加一个DSP组成的双核,小心以假乱真啊
离线