开云体育

ctrl + shift + ? for shortcuts
© 2025 开云体育

Re: Has anyone fully decoded the X9000 memory mapping?


 

Did a read with the WG disabled. No obvious difference in the data visually which isn't unexpected.


On Sun, Aug 7, 2022 at 3:36 PM Dennis Boone <drb@...> wrote:
?> The first few reads are:
?> adr data
?> 0x108 0xe0
?> 0x108 0xe0
?> 0x108 0xe0
?> 0x009 0x18
?> 0x109 0x04
?> 0x009 0x18
?> 0x109 0x04

I would expect the code plug to start at address 0x8000.? I imagine
you're not decoding the whole address space here, of course.

The firmware seems to start at 0xC000.? A code plug whose first two
bytes are 0xFFFF is a 16k, not a 2k.

It looks like the watchdog lives at 0x4002 and 0x400A.? During startup,
the radio checksums both the firmware and the code plug.? During the
loops, every 0x100-0x200 bytes, it frobs the watchdog.

De





Join [email protected] to automatically receive all group messages.