Mapa de memória

KurtWylde
Author - personKurtWylde
0

HTC Raphael/MemoryMap

mkwincesplphyssizedescription raph100raph800
--a8000000000000009SRAM 32MB



+0x000000256KSPL, heap_index5



+0x081000
driver_globals, DEX'd



+0x0810301PCB XC (copy of smem)



+0x081034
panel_id (copy of smem)



+0x081038
CPLD MISC1 (copy of smem)



+0x08103C
CPLD MISC2 (copy of smem)



+0x081040
CPLD MISC3 (copy of smem)



+0x081044
CPLD GPO (copy of smem)



+0x081054
CPLD INT4 (copy of smem)




+0x08105C
dwPowerOnReason



+0x081068




+0x0811000x200



+0x081131
TVOut Cable in / out ( 1 / 0 )



+0x081160
uc_waked_up_by_bt



+0x0811EC




+0x0811D8
pmem_heap_phy_addr



+0x0811DC
pmem_heap_size



+0x0811EC
model_name



+0x0812000x100




+0x081250
Radio status ( 0 = reset / 1 is okey )



+0x0814000x80battery struct



+0x081410
battery.battery_id_kohm.



+0x081414
battery.



+0x081418
battery.



+0x08141C
battery.vendor, if ( battery.battery_id_kohm > 0x800 ) battery.vendor = 0xff; if ( battery.battery_id_kohm > 280 ) battery.vendor = 1; else battery.vendor = 2;



+0x081420
battery.capacity, set by battery driver. if ( batt_vendor != 1 ) capacity = 1340 else capacity = 1800



+0x081424
battery.



+0x081430
battery.predict_percentage



+0x081434
battery.




+0x081438
battery.charged_capacity ??



+0x08143C
battery.



+0x081440
battery.ADC_A



+0x081444
battery.ADC_B



+0x081448
battery.charge_full_time_diff



+0x08144C
battery.temp_flag



+0x081450
battery.



+0x081458
battery.



+0x08145C
battery.poweron_reason



+0x081464
battery.




+0x08146C
battery.charged_capacity



+0x081470
battery.



+0x0814800x80power struct



+0x081481
power.



+0x081482
power.battery_life_percent



+0x081498
power.battery_voltage



+0x08149C
power.battery_current



+0x0814A0
power.



+0x0814AC
power.battery_temperature



+0x0814B4
power.




+0x0814B6
power.



+0x0814C4
power.



+0x0814CD
power. (USB related)



+0x0814CE
power. (AC related)



+0x0814D0
system_power_state



+0x0814F4
clock_enabled



+0x0814F8
pmic_clock_enabled



+0x081500
config_data.debug_method



+0x081504
config_data.kitl_fixed_IP



+0x081508
config_data.kitl_fixed_net_mask




+0x081524
config.driver_disable



+0x0819000x100



+0x081C00
SKUID PCBA PN[0]



+0x081C01
SKUID PCBA PN[1]



+0x081C02
SKUID PCBA PN[2]



+0x081C03
SKUID SKU Num



+0x081C04
SKUID PCB ID



+0x081C080x1FSKUID RF SKU ID



+0x081C283SKUID Check Sum



+0x081d000x108




+0x082100
+0x1100, *DEX



+0x083000
+0x2000, gpio1



+0x084000
+0x3000, gpio2



+0x085000
+0x4000, gpio1shared



+0x086000
+0x5000, gpio2shared



+0x0d0000
DEX related

0x50621000
+0x0f60004KBT TX

0x50620000
+0x0f70004KBT RX

0x5061f000
+0x0f80004KBT Clp

0x5061e000
+0x0f90004KBT TX cmd


0x50622000
+0x0fa0004KBT RX cmd



+0x0fb0004KBT related

0x5a000000
+0x1000008heap_index0



+0x2000007pmem_heap

-ac000000+0x3000001-?

--+0x8000001qcsbl

--+0x9000001oemsbl
0xf0000000--+0xa00000
rwx, code, entry pistachio
0xf0020000--+0xa20000
rw-, data
0xb0100000--+0xa26000
r-x, code

0xb0140000--+0xa2d000
rw-, data
0xb0200000--+0xa2e000
r-x, code
0xb0240000--+0xa37000
rw-, data
0xb0d00000--+0xa380000x2000rw-, data
0xb0e00000--+0xa3a0000x4000rw-, data
0xb0000000--+0xa61000
r-x, code, iguana
0xb0300000--+0xa40000
rwx, code
0xb0040000--+0xaf0000
rw-, data
0x00b07000--+0xb070000x3000r-x
0x00b0a000--+0xb0a0000x86f000r-x, code thumb

0x01379000--+0x13790000x00ab9a60rwx


aa00000001f000001SMEM



+0x0000x40PROC_COMM?



+0x0400x80VERSION_INFO



+0x0c00x10HEAP_INFO



+0x0d00x800ALLOCATION_TABLE



+0x8d00x8HW_RESET_DETECT



+0x8d80x4AARM_WARM_BOOT



+0x8dc0xc8DIAG_ERR_MESSAGE



+0x9a40x20SPINLOCK_ARRAY




+0x9c40x4MEMORY_BARRIER_LOCATION



+0x9c80x8



+0x9d00x258



+0xc280x10SHARED_STATE, ARM11 state



+0xc2c
ARM11 state, 0x200 < - resume



+0xc30
ARM9 state



+0xc34
ARM9 state



+0xc380x10int_info



+0xc480x8sleep_delay



+0xc500x8sleep_limit




+0xc580x10WM_UUID



+0xc680x70gpio_int



+0xcd80x9c40SMEM_LOG_EVENTS



+0x3fc82bradio



+0x3fca2bradio



+0x3fcc2bradio



+0x3fce2bradio



+0xa9180x8SMEM_LOG_IDX



+0xa9200xbb8SMEM_STATIC_LOG_EVENTS



+0xb4d80x8SMEM_STATIC_LOG_IDX




+0xb4e00x8SMEM_SLOW_CLOCK_VALUE



+0xb4e80x8



+0xb4f00x480*char[9]=APROC, QDSP, USBOTG, GPS



+0xb9700x800CHANNEL_ALLOC_TBL



+0xb9700x20DS, cid=0x00,4



+0xb9b00x20RPCCALL, cid=0x02,2



+0xba100x20CONTROL, cid=0x05,4



+0xba500x20DATA1, cid=0x07,2



+0xba700x20DATA2, cid=0x08,2



+0xba900x20DATA3, cid=0x09,2




+0xbb500x20DATA9, cid=0x0f(15),2



+0xbb900x20DATA11, cid=0x11(17),2



+0xbcd00x20GPSNMEA, cid=0x1b(27),4



+0x0c1700x14+0x2000CONTROL cid=5, TX empty



+0x0e1840x14+0x2000CONTROL cid=5, RX empty



+0x101980x14+0x2000RPCCALL cid=2, TX



+0x121ac0x14+0x2000RPCCALL cid=2, RX



+0x141c00x14+0x2000DATA11 cid=17, TX empty



+0x161d40x14+0x2000DATA11 cid=17, RX empty



+0x181e80x14+0x2000GPSNMEA, NMEA TX empty




+0x1a1fc0x14+0x2000GPSNMEA, NMEA RX



+0x1c210
SMD_BASE_ID



+0x1c2100x14+0x2000DS cid=0, ATCMD TX SMD_BASE_ID



+0x1e2240x14+0x2000DS cid=0, ATCMD RX



+0x202380x14+0x2000DATA1 cid=7, TX



+0x2224c0x14+0x2000DATA1 cid=7, RX



+0x242600x28+0x4000DATA2 cid=8, TX/RX



+0x282880x28+0x4000DATA3 cid=9, TX/RX



+0x2c2b00x28+0x4000DATA9 cid=15, TX/RX



+0x2e2c40x14+0x2000 ? empty




+0xef438
pcm module



+0xef440
pcm client0



+0xef444
pcm client1



+0xef448
pcm client2



+0xef44c
pcm client3



+0xef450
pcm client4



+0xef6000x140voc pcm rec xx buf0



+0xef8800x140voc pcm rec xx buf1



+0xefb000x140voc pcm rec xx buf0



+0xefd800x140voc pcm rec xx buf1




+0xf0000 *0x200-AT cmd RX buf



+0xf0200 *0x200-AT cmd TX buf



+0xf0000 *0x140voc pcm rx buf0



+0xf0280 *0x140voc pcm rx buf1



+0xf05000x140voc pcm tx buf0



+0xf07800x140voc pcm tx buf1



+0xf0a00 *0xd82-SMD1 RX buf



+0xf1782 *0x282-SMD1 TX buf



+0xf3fc8 *0x2,0x2-AT RX head & tail



+0xf3fcc *0x2,0x2-AT TX head & tail




+0xf3fd8 *0x2,0x2-SMD1 RX head & tail



+0xf3fdc *0x2,0x2-SMD1 TX head & tail



+0xfc0004Kflags?, DEX'd, init_radio=0,fm=1



+0xfc00c
Vbus status



+0xfc014
 ? gpio0x54=1 related if=2



+0xfc020
radio ver



+0xfc030
g23 ver(AMSS protocol)



+0xfc044
\"power reason\" =0?



+0xfc0484bmodel id (XC)



+0xfc04c





+0xfc054
radio dbg flags, init_radio=0



+0xfc060
IMEI



+0xfc070
CID



+0xfc0881bvoc pcm rec tx, tst 1



+0xfc0891bvoc pcm tx, tst 1



+0xfc08a1bvoc pcm rec rx, tst 1



+0xfc08b1bvoc pcm rx, tst 1



+0xfc08c
softreset =0x55aa00ff



+0xfc0a8




+0xfc0ac
flash type id




+0xfc0b0
clock pll related



+0xfc0b4
subsys clock related (semaphore?)



+0xfc0b8
DVFM pll ?(clock related)



+0xfc0d0
ADIE, x2=forceupd,x4=method,x8=Awake,x80000000=dbg



+0xfc0dc
battery id



+0xfc0e0
VREF



+0xfc0e4
1/2 VREF



+0xfc0ef1bpcb id



+0xfc0f0




+0xfc100
PC_COMMAND (a2m_cmd)




+0xfc104
PC_STATUS



+0xfc108
PC_NUMBER (a2m_counter)



+0xfc10c
PC_RESP_NUMBER (m2a_counter)



+0xfc1102bbatt ID



+0xfc1122bbatt Temperature



+0xfc1142bbatt Voltage



+0xfc1162bbatt Charge



+0xfc1182bbatt Discharge



+0xfc120
PC_DATA (a2m_data)



+0xfc124
PC_RESULT_DATA (m2a_data)




+0xfc128
irq



+0xfc130
PC_DATA2



+0xfc134
PC_RESULT_DATA2 ?? probably not.



+0xfc138
lock



+0xfc13c
DEX ready=1



+0xfc1404b-batt ID



+0xfc1444b-batt Temperature



+0xfc1484b-batt Voltage



+0xfc14c4b-batt Charge



+0xfc1504b-batt Discharge


ioremap
+0xfc2004Kaudio, params1 (0x50?)

ioremap
+0xfc3004Kaudio, params3 (0x140)

ioremap
+0xfc6004Kaudio, params2 (0xa0?)



+0xfc8000x800wifi eeprom tmp



+0xfd0004KDEX'd



+0xfd0000x2c



+0xfd0800x2c



+0xfd4000x2c

ioremap
+0xfdc000x1e0audio memcpy

ioremap
+0xfde00
ADIE, A Table


ioremap
+0xfe000
ADIE, B Table (HTC acoustic)

ioremap
+0xfea00
audio

ioremap
+0xfed00
audio (bit 0x100 = in_call ?)
--a6000000020000000x20SRAM +32MB








a0000000100000000x60SDRAM (bank 1)

0x52000000-15a000009heap_index1


aa100000160000000x12SDRAM bank 1

0x52900000-163000004heap_index4

0x57a00000-1666a0000x96000FBRAM


0x52d00000-167000000xaf0000heap_index3, for CAM (0x52d7*), QTV


ae20000016d000001unknown SDRAM bank 1


ae00000016e000001unknown SDRAM bank 1

0x537f0000-171f000064Kheap_index2


ae100000172000001wince dmesg
0x17300000--173000007fe000r-x, thumb, strings


bb100000176000001
wince dmesg, possibly others?
0x17afe000--17afe00035e000rw-
0x17e5c000--17e5c000500c0rw-

0xa5a00000-0x200000000x26SDRAM (bank 2)


0xa8900000-0x226000000x17SDRAM (bank 2)

0xab900000-0x23d000000x27SDRAM (bank 2)

0xab300000-0x264000000x1cSDRAM (bank 2)
mkwincesplphyssizedescription


b6000000880000002


b80000008c0000002


ba000000900000002


bc000000940000001was debug board ?


bd000000980000001DEBUG???, bt remapped, DEX'd



+0x02b



+0x22b



+0x42b



+0x62b


be0000009c0000002



bf000000800000001


b0000000ac0000000xdADSP (AD5) RAM


b0d00000a80000001


b0e00000a0e000001MPU



+0x400
=1



+0x408
=0x33c



+0x410
=0xffffffff



+0x418
=0xf



+0x440
=0xa9400000



+0x444
=0xa9700000




+0x448
=30



+0x450
=0



+0x458
=0n


b0f00000a0d000001



+0x00
0x3c9, 0x3c1, tst 0x10



+0x10




+0x14
0x88 (raph100), 0x602



+0x20
=0x2821104



+0x24
=0x1ef7bdef



+0x48
=0xc000f0



b1000000a0c000001


b1100000a0a000002NAND



a0b00000
mpu


b1300000a08000001HSUSB



+0x090




+0x124




+0x140




+0x144




+0x148




+0x14c





+0x150




+0x154




+0x158




+0x180




+0x184




+0x1a8




+0x1ac




+0x1b0




+0x1b4




+0x1b8





+0x1bc




+0x1c0




+0x1c4



b1400000a07000001SDIO3, DEX'd


b1500000a06000001SDIO2, DEX'd


b1600000a05000001SDIO1, DEX'd


b1700000a04000001SDIO0, DEX'd


b1800000a02000001uartDM1


b1900000a03000001uartDM2



+0x70
msmurf/msmutf



b1a00000a01000001


b1b00000a00000001HW3D graphics


b1c00000aa7000001EMDH (MDDI2 host), DEX'd


b1d00000aa6000001PMDH (MDDI1 host), DEX'd



+0x00
CMD



+0x48
DRIVE_HI



+0x4c
DRIVE_LO



+0x50
DISP_WAKE



+0x54
REVENCAPSZ



+0x68
PAD_CTL




+0x6c
DRIVERSTARTCNT


b1e00000aa5000001MDC (MDDI client), DEX'd


b1f00000aa4000001TV_ENC


b2000000aa3000001TSSC



+0x100
TSSC_CTL , bit1=enable



+0x104
init



+0x108
init



+0x10c
TSSC_STATUS



+0x110
dataloave



+0x114
dataupave




+0x118
datalo1



+0x11c
dataup1



+0x138
datalo2



+0x13c
dataup2



+0x158
datalo3



+0x15c
dataup3



+0x178
datalo4



+0x17c
dataup4


b2100000a81000001MSM_SSBI (TS init)



+0x00





+0x04




+0x08




+0x10




+0x14




+0x18
~7 orr 2, ~0x38 orr 8, ~0x1c0


b2200000a9d000001


b2300000a99000001I2C



+0x0
data write



+0xc
data read


b2400000a87000001



b2500000aa2000001MDP|


b2600000a9c000001UART3


b2700000a9b000001UART2


b2800000a9a000001UART1


b2900000a98000001USB

0x5061b000
+0xb000
uart1DM

0x5061c000
+0xc000
uart2DM


b2a00000a97000001DEX'd



+0xc00
AMDH03, aARM


b2b00000a96000001DEX'd




+0x800
AMDH02, aDSP


b2c00000a95000001DEX'd



+0x400
AMDH01, mARM nontrusted


b2d00000a94000001AMDH00, DEX'd, mARM trusted



+0x3b0




+0x3d0



b2e00000a93000001ARM11_GPIO2 (shadow), DEX'd



+0xc70
stat1


b2f00000a92000001ARM11_GPIO1 (shadow), DEX'd



+0x844
in5




+0x850
out5



+0x854
out5_en



+0x8a0
stat0



+0x8a4
stat2



+0x8a8
stat3



+0x8ac
stat4



+0x8b0
stat5



+0x8b4
clr_irqerr5



+0x8b8
intr5_en


b3000000a91000001ARM9_GPIO2, DEX'd




+0x400
out1



+0x408
out1_en



+0x410
GPIO_Num(Page2)



+0x414
ALT_FN(Config2)



+0x420
in1



+0x504
owner1


b3100000a90000001ARM9_GPIO1, DEX'd



+0x00
out0



+0x04
out2



+0x08
out3




+0x0c
out4



+0x10
out0_en



+0x14
out2_en



+0x18
out3_en



+0x1c
out4_en



+0x20
GPIO_Num(Page1)



+0x24
ALT_FN(Config1)



+0x34
in0



+0x38
in2



+0x3c
in3




+0x40
in4



+0x54
out5_en



+0x100
owner0



+0x108
owner2



+0x10c
owner3



+0x110
owner4



+0x114
owner5



+0x200
bic 1



+0x20c
and 0x1f, =0xb



+0x210
0 Dplus, 1




+0x218
=0 sd



+0x220
=0x7f



+0x244
0, 0x555555555



+0x270
tst 0x80000000: 7201A vs. 7200A
mkwincesplphyssizedescription

0x5060a000b3200000a86000001MSM_CLK, DEX'd


b3300000a85000001



+0x04
=9


b3400000a84000001


b3500000a83000001SDRAM_CTL ?




+0x40
cfg1, bic 8, orr 1



+0x44




+0x4c
=0x60(dia)



+0x50
=0xf55c(dia)



+0x58
=0x40ab



+0x6c




+0xd0
0xffff



+0xd4




+0x444
and 0xffbf



b3600000a82000001


b3700000a82000001


b3800000a82000001


b3900000a82000001


b3a00000a82000001


b3b00000a82000001



+0x10000x88 ? FM related



a8210000
wifi related,remapped



+0x80




b3c00000a80000001


b3d00000b00000001


b3e00000b02000001


b3f00000b03000001


b4000000b04000001


b4100000b05000001


b4200000b06000001


b4300000b10000000xdMDSP RAM+registers


b5000000b80000001




+0x10c
=1



+0x110
=1



+0x304




+0x314




+0x404



b5100000b81000001


b5200000b82000001sleep related


b5300000c00000001VIC



+0x00




+0x10




+0x40




+0x64




+0xb0




+0xb4



b5400000c01000001CSR/GPT, DEX'd



+0x004




+0x014




+0x018





+0x100
A11S_CLK_CNTL



+0x104
A11S_CLK_SEL



+0x124
A11S_VDD_SVS_PLEVEL



+0x400
A2M_INT0



+0x404
A2M_INT1



+0x408
A2M_INT2



+0x40c
A2M_INT3



+0x410
A2M_INT4



+0x414
A2M_INT5



+0x418
A2M_INT6



+0x41c
A2M_INT7



+0x420
A2M_INT8



+0x424
A2M_INT9



+0x428
A2M_INT10



+0x42c
A2M_INT11



+0x430
A2M_INT12



+0x434
A2M_INT13



+0x438
A2M_INT14



+0x43c
A2M_INT15


b5500000c02000001

Postar um comentário

0Comentários

Postar um comentário (0)
Compartilhar com outros aplicativos
Copy Post Link