Reverse engineering the Meizu players
M6
The main component of the M6 is the S5L8700. datasheet. These are mostly guesses made by looking at the various debug strings in the firmware files and which addresses get accessed in those functions.Memory
| Address | Device |
|---|---|
| 0x0 | Boot ROM (50KB) |
| 0x8000000 | SDRAM (16MB) |
| 0x22000000 | SRAM (256KB) |
| 0x24000000 | NOR Flash (1MB)* |
Registers
Hopefully the registers behave the same as the ones in other Samsung CPUs of which we can find the datasheets.| Address | Register | Comment |
|---|---|---|
| 0x38200000 | MIU | Memory Interface Unit, it's used for remapping the SRAM and SDRAM, set the refresh timing |
| 0x38400000 | DMA | |
| 0x38600000 | USB 1.1 Host Controller | |
| 0x38800000 | USB 2.0 Function | |
| 0x39000000 | CalmADM | |
| 0x39200000 | LCD controller | |
| 0x39C00000 | ICU | Interrupt Control Unit, which controls the mask/priority/pend bit of various interupt sources. |
| 0x3C100000 | ||
| 0x3C200000 | NAND Flash Controller | |
| 0x3C400000 | ||
| 0x3C500000 | Clock setup | |
| 0x3C700000 | TIMER registers block | |
| 0x3C800000 | Watchdog | it's been disabled by write a 0x00A5 value! |
| 0x3C900000 | I2C | |
| 0x3CA00000 | I2S | |
| 0x3CC00000 | UART | |
| 0x3CD00000 | SPI | |
| 0x3CE00000 | ADC block | where we get the touch panel reading. |
| 0x3CF00000 | GPIO block | we can config the I/O pins and get the state of buttons from here. |
| 0x3D100000 | Chip ID | |
| 0x3D200000 | RTC |
GPIO
| Pin | I/O/F | M6SP | M6SL | M3 |
|---|---|---|---|---|
| P0.0 | QT411: SS | QT1106: CS | QT1106: CS | |
| P0.1 | QT411: SCLK | QT1106: SCLK | QT1106: SCLK | |
| P0.2 | Backlight: EN | Backlight: EN | ||
| P0.3 | QT411: SDO | QT1106: MISO | QT1106: MISO | |
| P0.4 | QT411: DETECT | |||
| P0.5 | Button: Hold | |||
| P0.7 | Button: Enter | |||
| P1.0 | LV24000: DATA | button: Menu | Buttons: Menu | |
| P1.1 | LV24000: NR_W | LCD Driver: MISO | ||
| P1.2 | LV24000: CLOCK | button: Lock switch | ||
| P1.3 | Button: Power | LTC3455: PWRON | LTC3455: PWRON | |
| P1.4 | LTC3455: PBSTAT (Play button) | button: Play | Buttons: Play | |
| P1.5 | QT411: DRDY | |||
| P1.6 | QT411: SDI | QT1106: MOSI | QT1106: MOSI | |
| P3.2 | LCD Driver: MISO SDO | I2C 0x22: SDA | EEPROM?: SDA | |
| P3.3 | N/C | button: RW | Buttons: <> | |
| P3.4 | N/C | I2C 0x22: SCL | EEPROM?: SCL | |
| P3.6 | LCD Driver: MOSI SDI | |||
| P3.7 | LCD Driver: SCLK SCL | |||
| P4.2 | N/C | LCD Driver: SCLK | ||
| P4.3 | N/C | LCD Driver: MOSI | ||
| P4.7 | N/C | button: FF | ||
| P5.1 | BEEP+ | BEEP+ | BEEP+ | |
| P5.2 | BEEP- | BEEP- | BEEP- | |
| P5.7 | LTC3455: CHRG | LTC3455: CHRG | LTC3455: CHRG | |
| P7.1 | LCD Driver: CE CS | LCD Driver: CS | ||
| P10.0 | I2C: SCL | I2C: SCL | I2C: SCL | |
| P10.1 | I2C: SDA | I2C: SDA | I2C: SDA |
ADC
| Channel | M6SP | M6SL | M3 |
|---|---|---|---|
| ADC0 | Buttons | ||
| ADC2 | Battery voltage |
r19 - 29 Jul 2008 - 21:45:27 - SamuelKatz
| Edit | View raw | Attach | Ref-By | History: r19 < r18 < r17 < r16 < r15 | More | Refresh cache | ||
|
Copyright © 1999-2008 by the contributing authors.
|
||