Advertisement
Astralix

rkflashtool traces

Sep 9th, 2013
182
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.82 KB | None | 0 0
  1. ++++++++++++++++++++++++ LOGIN ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  2.  
  3. <<Check Chip Success >>
  4. .----------------------------------------USBC: Command (out) or USBS Result (in)
  5. | .----------------------------CID: Command ID, USBS retuns with same ID
  6. | | .------------FLAG: Normally it just should toggle...
  7. | | | .-CMD: Command for bootloader action
  8. | | | | .--ADDRESS SIZE--.
  9. | | | | | |
  10. .--. .---------. .. .---------. .---------. .---------.
  11. 0 3|4 8| |12|13 16|17 20| |23 26|
  12. OUT USBC CF 31 90 00 00 00 00 00 80 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  13. IN USBS CF 31 90 00 00 00 00 06 00
  14. ^^------Watch this!
  15.  
  16. <<Get FlashInfo>>
  17.  
  18. Get BL Revision? Chip Revision? Who knows?
  19. OUT USBC E5 59 7A 95 00 00 00 00 80 00 06 1B 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  20. IN [42 30 31 33 32 31 30 32 30 33 31 31 30 30 31 56] B01321020311001V
  21. IN USBS E5 59 7A 95 00 00 00 00 00
  22.  
  23.  
  24. B013 21020311001V
  25.  
  26. Get Partition Table or Defects Table?
  27. OUT USBC DB 2C BF D2 00 00 00 00 80 00 05 1A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  28. IN [BULK 512 bytes]
  29. IN USBS DB 2C BF D2 00 00 00 00 00
  30.  
  31. <<Prepare IDB>>
  32.  
  33. OUT USBC 03 4D 83 B5 00 00 00 00 80 00 0A 03 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00
  34. IN [BULK 64 bytes data all 0x00]
  35. IN USBS 03 4D 83 B5 00 00 00 00 00
  36.  
  37. OUT USBC 2A 25 5D 17 00 00 00 00 80 00 0A 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00
  38. IN [BULK 2112 bytes data]
  39. IN USBS 2A 25 5D 17 00 00 00 00 00
  40.  
  41. OUT USBC 01 1E 72 FD 00 00 00 00 80 00 0A 04 00 00 00 10 00 00 00 04 00 00 00 00 00 00 00
  42. IN [BULK 2112 bytes data ]
  43. IN USBS 01 1E 72 FD 00 00 00 00 00
  44.  
  45. .----------------------------------------USBC: Command (out) or USBS Result (in)
  46. | .----------------------------CID: Command ID, USBS retuns with same ID
  47. | | .------------FLAG: Normally it just should toggle...
  48. | | | .-CMD: Command for bootloader action
  49. | | | | .--ADDRESS SIZE--.
  50. | | | | | |
  51. .--. .---------. .. .---------. .---------. .---------.
  52. 0 3|4 8| |12|13 16|17 20| |23 26|
  53. OUT USBC 92 88 60 02 00 00 00 00 80 00 0A 04 00 00 00 20 00 00 00 04 00 00 00 00 00 00 00
  54. IN [BULK 2112 bytes data ]
  55. IN USBS 92 88 60 02 00 00 00 00 00
  56.  
  57. OUT USBC A9 2A 9B 9A 00 00 00 00 80 00 0A 04 00 00 00 30 00 00 00 04 00 00 00 00 00 00 00
  58. IN [BULK 2112 bytes data ]
  59. IN USBS A9 2A 9B 9A 00 00 00 00 00
  60.  
  61. OUT USBC 9B 0E 5A 73 00 00 00 00 80 00 0A 04 00 00 00 40 00 00 00 04 00 00 00 00 00 00 00
  62. IN [BULK 2112 bytes data ]
  63. IN USBS 9B 0E 5A 73 00 00 00 00 00
  64.  
  65. OUT USBC 4D 85 CD C8 00 00 00 00 80 00 0A 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00
  66. ...
  67.  
  68. <<Download IDB>>
  69.  
  70. Erase
  71. OUT USBC 64 9C FF FF 00 00 00 00 00 00 0A 06 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00
  72. IN USBS 64 9C FF FF 00 00 00 00 00
  73.  
  74. Write
  75. OUT USBC 06 D7 4C 44 00 00 00 00 00 00 0A 05 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00
  76. OUT [BULK 8448 bytes data] incl. content of above bytes.
  77. IN USBS 06 D7 4C 44 00 00 00 00 00
  78.  
  79. Verify
  80. OUT USBC 0E AD 17 60 00 00 00 00 80 00 0A 04 00 00 00 00 00 00 00 10 00 00 00 00 00 00 00
  81. IN [BULK 8448 bytes data]
  82. IN USBS 0E AD 17 60 00 00 00 00 00
  83.  
  84. Write
  85. OUT USBC 45 46 EB 02 00 00 00 00 00 00 0A 05 00 00 00 00 10 00 00 10 00 00 00 00 00 00 00
  86. IN [BULK 8448 bytes data]
  87. IN USBS 45 46 EB 02 00 00 00 00 00
  88.  
  89. Verify
  90. OUT USBC B9 D6 B0 96 00 00 00 00 00 00 0A 04 00 00 00 00 10 00 00 10 00 00 00 00 00 00 00
  91. IN [BULK 8448 bytes data]
  92. IN USBS B9 D6 B0 96 00 00 00 00 00
  93. ....
  94. ....
  95. Erase?
  96. OUT USBC 1D 35 DA CE 00 00 00 00 00 00 0A 06 00 00 00 00 01 00 00 01 00 00 00 00 00 00 00
  97. IN USBS 1D 35 DA CE 00 00 00 00 00
  98.  
  99.  
  100.  
  101. Last Transfer before reboot
  102.  
  103. Buffer OUT
  104. OUT USBC C3 79 92 4E 00 00 00 00 00 00 0A 05 00 00 00 40 F0 00 00 10 00 00 00 00 00 00 00
  105. OUT [BULK 8448 bytes data]
  106. IN USBS C3 79 92 4E 00 00 00 00 00
  107.  
  108. Buffer In
  109. OUT USBC 03 FE BA 31 00 00 00 00 80 00 0A 04 00 00 00 40 F0 00 00 10 00 00 00 00 00 00 00
  110. IN [BULK 8448 bytes data]
  111. IN USBS 03 FE BA 31 00 00 00 00 00
  112.  
  113. Reboot
  114. OUT USBC 12 2C B1 A5 00 00 00 00 00 00 06 FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  115. IN USBS 12 2C B1 A5 00 00 00 00 00
  116.  
  117. ++++++++++++++++++++++++ DOWNLOAD ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
  118.  
  119. <<Check Chip Success >>
  120. OUT UDBC 8E D6 AD 46 00 00 00 00 80 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  121. IN UDBS 8E D6 AD 46 00 00 00 06 00
  122. ^^------Watch this!
  123.  
  124. OUT USBC A3 3B C7 5F 00 00 00 00 80 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  125. IN UDBS 8E D6 AD 46 00 00 00 06 00
  126. ^^------Watch this!
  127.  
  128. <<Download Firmware>> PARAMETERS
  129. >>
  130. >> PARAM Section is written 8 times in a row
  131. >>
  132. OUT USBC 48 F8 34 3B 00 00 00 00 00 00 0A 15 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00
  133. OUT [BULK 1024 bytes data] << PARM
  134. IN USBS 48 F8 34 3B 00 00 00 00 00
  135.  
  136. OUT USBC 0C 26 C4 05 00 00 00 00 00 00 0A 15 00 00 00 04 00 00 00 02 00 00 00 00 00 00 00
  137. OUT [BULK 1024 bytes data] << PARM
  138. IN USBS 0C 26 C4 05 00 00 00 00 00
  139.  
  140. OUT USBC 57 A4 59 02 00 00 00 00 00 00 0A 15 00 00 00 08 00 00 00 02 00 00 00 00 00 00 00
  141. OUT [BULK 1024 bytes data] << PARM
  142. IN USBS 57 A4 59 02 00 00 00 00 00
  143.  
  144. .----------------------------------------USBC: Command (out) or USBS Result (in)
  145. | .----------------------------CID: Command ID, USBS retuns with same ID
  146. | | .------------FLAG: Normally it just should toggle...
  147. | | | .-CMD: Command for bootloader action
  148. | | | | .--ADDRESS SIZE--.
  149. | | | | | |
  150. .--. .---------. .. .---------. .---------. .---------.
  151. 0 3|4 8| |12|13 16|17 20| |23 26|
  152. OUT USBC 8B 17 6A 6A 00 00 00 00 00 00 0A 15 00 00 00 0C 00 00 00 02 00 00 00 00 00 00 00
  153. OUT [BULK 1024 bytes data] << PARM
  154. IN USBS 8B 17 6A 6A 00 00 00 00 00
  155.  
  156. [...]
  157.  
  158. OUT USBC C7 B5 90 16 00 00 00 00 00 00 0A 15 00 00 00 1C 00 00 00 02 00 00 00 00 00 00 00
  159. OUT [BULK 1024 bytes data] << PARM
  160. IN USBS C7 B5 90 16 00 00 00 00 00
  161.  
  162. <<Download Firmware>>
  163. misc??
  164. OUT USBC DD 4B D0 DD 00 00 00 00 00 00 0A 15 00 00 00 20 00 00 00 60 00 00 00 00 00 00 00
  165. OUT [BULK 49152 (0xc000) bytes of data]
  166. IN USBS DD 4B D9 DD 00 00 00 00 00
  167.  
  168. OUT USBC C3 D4 BF A5 00 00 00 00 00 00 0A 15 00 00 00 A0 00 00 08 00 00 00 00 00 00 00 00
  169. OUT [BULK 1048576 (0x100000) bytes of data] <-- ANDROID! Token
  170. IN USBS...
  171.  
  172. OUT USBC 85 E9 E8 DF 00 00 00 00 00 00 0A 15 00 00 00 A8 00 00 08 00 00 00 00 00 00 00 00
  173. OUT [BULK 1048576 (0x100000) bytes of data]
  174. IN USBS
  175.  
  176. OUT USBC 85 E9 E8 DF 00 00 00 00 00 00 0A 15 00 00 00 B0 00 00 08 00 00 00 00 00 00 00 00
  177. OUT [BULK 1048576 (0x100000) bytes of data]
  178. IN USBS
  179.  
  180. OUT USBC 85 E9 E8 DF 00 00 00 00 00 00 0A 15 00 00 00 B8 00 00 08 00 00 00 00 00 00 00 00
  181. OUT [BULK 1048576 (0x100000) bytes of data]
  182. IN USBS
  183.  
  184. OUT USBC 85 E9 E8 DF 00 00 00 00 00 00 0A 15 00 00 00 C0 00 00 08 00 00 00 00 00 00 00 00
  185. OUT [BULK 1048576 (0x100000) bytes of data]
  186. IN USBS
  187.  
  188. OUT USBC 85 E9 E8 DF 00 00 00 00 00 00 0A 15 00 00 00 C8 00 00 08 00 00 00 00 00 00 00 00
  189. OUT [BULK 1048576 (0x100000) bytes of data]
  190. IN USBS
  191.  
  192. OUT USBC 85 E9 E8 DF 00 00 00 00 00 00 0A 15 00 00 00 D0 00 00 08 00 00 00 00 00 00 00 00
  193. OUT [BULK 1048576 (0x100000) bytes of data]
  194. IN USBS
  195.  
  196. OUT USBC 85 E9 E8 DF 00 00 00 00 00 00 0A 15 00 00 00 D8 00 00 08 00 00 00 00 00 00 00 00
  197. OUT [BULK 1048576 (0x100000) bytes of data]
  198. IN USBS
  199.  
  200. OUT USBC 85 E9 E8 DF 00 00 00 00 00 00 0A 15 00 00 00 E0 00 00 08 00 00 00 00 00 00 00 00
  201. OUT [BULK 1048576 (0x100000) bytes of data]
  202. IN USBS
  203.  
  204. OUT USBC 85 E9 E8 DF 00 00 00 00 00 00 0A 15 00 00 00 E8 00 00 08 00 00 00 00 00 00 00 00
  205. OUT [BULK 1048576 (0x100000) bytes of data]
  206. IN USBS
  207.  
  208. OUT USBC FB 8C A2 23 00 00 00 00 00 00 0A 15 00 00 00 F0 00 00 01 80 00 00 00 00 00 00 00
  209. OUT [BULK 196608 (0x30000) bytes of data] ^^-^^--- End of file?
  210. IN USBS
  211.  
  212. <<Download Firmware>>
  213.  
  214. OUT USBC C8 4C 36 76 00 00 00 00 00 00 0A 15 00 00 01 20 00 00 08 00 00 00 00 00 00 00 00
  215. OUT [BULK 1048576 (0x100000) bytes of data] <-- ANDROID! Token
  216. IN USBS
  217.  
  218. OUT USBC C8 4C 36 76 00 00 00 00 00 00 0A 15 00 00 01 28 00 00 08 00 00 00 00 00 00 00 00
  219. OUT USBC C8 4C 36 76 00 00 00 00 00 00 0A 15 00 00 01 30 00 00 08 00 00 00 00 00 00 00 00
  220. OUT USBC C8 4C 36 76 00 00 00 00 00 00 0A 15 00 00 01 38 00 00 08 00 00 00 00 00 00 00 00
  221. OUT USBC C8 4C 36 76 00 00 00 00 00 00 0A 15 00 00 01 40 00 00 08 00 00 00 00 00 00 00 00
  222. OUT USBC C8 4C 36 76 00 00 00 00 00 00 0A 15 00 00 01 48 00 00 08 00 00 00 00 00 00 00 00
  223. OUT USBC C8 4C 36 76 00 00 00 00 00 00 0A 15 00 00 01 50 00 00 08 00 00 00 00 00 00 00 00
  224. OUT USBC C8 4C 36 76 00 00 00 00 00 00 0A 15 00 00 01 58 00 00 08 00 00 00 00 00 00 00 00
  225. OUT USBC C8 4C 36 76 00 00 00 00 00 00 0A 15 00 00 01 60 00 00 08 00 00 00 00 00 00 00 00
  226.  
  227.  
  228. <<Download Firmware>>
  229.  
  230. OUT USBC 1B CE F1 BD 00 00 00 00 00 00 0A 15 01 00 55 38 00 00 08 00 00 00 00 00 00 00 00
  231. OUT [BULK 1048576 bytes (0x100000) data]
  232. IN USBS 1B CE F1 BD 00 00 00 00 00
  233.  
  234. OUT USBC 70 F1 06 1E 00 00 00 00 00 00 0A 15 01 00 55 40 00 00 08 00 00 00 00 00 00 00 00
  235. OUT [BULK 1048576 bytes (0x100000) data]
  236. IN USBS 70 F1 06 1E 00 00 00 00 00
  237.  
  238.  
  239. #define RKFT_CID 4
  240. #define RKFT_FLAG 12
  241. #define RKFT_COMMAND 13
  242. #define RKFT_OFFSET 17
  243. #define RKFT_SIZE 23
  244.  
  245. RK2918 Login Bootloader
  246. .----------------------------------------USBC: Command (out) or USBS Result (in)
  247. | .----------------------------CID: Command ID, USBS retuns with same ID
  248. | | .------------FLAG: Normally it just should toggle...
  249. | | | .-CMD: Command for bootloader action
  250. | | | | .--ADDRESS SIZE--.
  251. | | | | | |
  252. .--. .---------. .. .---------. .---------. .---------.
  253. 0 3|4 8| |12|13 16|17 20| |23 26|
  254. OUT USBC CF 31 90 00 00 00 00 00 80 00 06 00 FD 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  255. IN USBS CF 31 90 00 08 00 00 00 01
  256. OUT USBC E5 59 7A 95 00 00 00 00 80 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  257. IN USBS E5 59 7A 95 08 00 01 2C 01
  258. OUT USBC DB 2C BF D2 00 00 00 00 80 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  259. IN USBS DB 2C BF D2 08 00 02 4D 01
  260. OUT USBC 03 4D 83 B5 00 00 00 00 80 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  261. IN USBS 03 4D 83 B5 08 00 03 6E 01
  262. OUT USBC 2A 25 5D 17 00 00 00 00 80 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  263. IN USBS 2A 25 5D 17 08 00 04 92 01
  264. OUT USBC 01 1E 72 FD 00 00 00 00 80 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  265. IN USBS 01 1E 72 FD 08 00 05 B1 01
  266. 08 00 06 C6 01
  267. 08 00 07 DB 01
  268. 00 00 00 06 00 <-- End Of Info Marker. RK3188 sends this directly.
  269.  
  270. Loox / RK2918 Verify Command before Reboot.
  271. OUT USBC BC 24 55 F4 00 00 00 00 80 00 0A 14 01 00 55 BF C0 00 00 20 00 00 00 00 00 00 00
  272.  
  273.  
  274. CF 31 90 00 = 009031CF = 0000 0000 1001 0000 0011 0001 1100 1111
  275. E5 59 7A 95 = 957A59E5 = 1001 0101 0111 1010 0101 1001 1110 0101
  276. DB 2C BF D2 = D2BF2CDB = 1101 0010 1011 1111 0010 1100 1101 1011
  277. 03 4D 83 B5 = B5834D03 =
  278. 2A 25 5D 17 = 175D252A
  279. 01 1E 72 FD = FD721E01
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement