V212 Notes
From ASULUG AirPanel Wiki
ViewSonic V212 Notes
Research and Notes on the ViewSonic V212 Devices.
Contents |
V212 Hardware
- CPU: PXA270 at 520 Mhz (PXA270C5C520)
- RAM: 128MB SDRAM
- ROM: 64MB flash (specifics??)
- Graphics: PXA270??
- Graphics CoProcessor: intel 2700G (2700G5 L608TA04 SL7K6)
- LCD: AU Optonics G104SN03
- Audio/TouchScreen controller: Phillips UCB1400 (UCB1400BE)
- Battery Charger Controller: LTC4100 (LTC4100EG)
- 2 CF slots (One inside with wireless card)
- Wireless CF Unex Technology Corp DRCB-M1 shows up as BCMCF in WinCE
- CIR - Consumer IR - Have yet to find how to use this in WinCE (no irda driver) or what hardware is behind this. Anybody have software that uses the IR effectively so might be able to trace how it is being used? Or ViewSonic v212 tech stuff?
- Interesting chips on MB in case useful
- THSB135 - Triple 10-bit, 240 MSPS Video Dac with Tri-Level Sync and Video.
- TUSB2077A - 7-Port hub Universal serial bus
- P89LPC936F
- DS90C363BMT
- EM78P447NASJ
- Maxim Max3221 (is not wired directly to JDBG)
- 4 - K4556163LF (ZG75) 4M x 16Bit x 4 Banks Mobile SDRAM
- 1 - K4S28323LF-HN75 1M x 32Bit x 4 banks Mobil SDram
- 2 - 256P30T A5497735 Z5492165A (flash??)
JDBG Port
12 pin port connector labeled JDBG in same spot as V210. But NOTHING like the v210. The Max3221 is not wired directly to and with 3V on pin 11 and pin 12 - can not be same as V210. Voltage seen when powered on.
JDBG 7 = GND
JDBG 1=0, 2=3.25, 3=0, 4=0, 5=3.3, 6=0, 7=0, 8=0, 9=.66, 10=.66, 11=3.22, 12=3.30
So unknown if serial console available with out some activation and which ports.
Flashing and Rom Image Backup
Access the Image Update Main Menu by removing battery and power. Hold in the Keyboard button and plug in power and at the same time hit the power button. Keep holding in the Keyboard button until the Image Update Main Menu comes up. Does not work on a V212x unit - unknown why.
Flash reset the User area
Warning - Clears Settings .
Enter the Image Update Main Menu. Note the Keyboard key moves the selector down and wraps, while the Web key selects the item.
Select the 5. Clear PSM Flash Data When told to reboot - hit the reset. First time boot usually takes a while with a blank screen.
Backup of Rom
Backing up rom - likely many methods. XDA utils is easy enough using pmemdump - but requires a Windows PC with MS ActiveSync.
http://wiki.xda-developers.com/index.php?pagename=XdaUtils
Haret might be another method to back up to a compact flash card.
http://www.handhelds.org/moin/moin.cgi/HaRET
Boot rom = 0x80020000 with typical entry at 0x80021000.
Wince rom = 0x80100000 with entry at 0x80101000
I've just been dumping 64M from 0x80000000
pmemdump 0x80000000 0x04000000 v212_1.9.0003.1_from800_64m_rom.raw
Building flash b000ff bin images
Very similar to v210 - just address are different and research is not as clear cut for locating end. Same tools...
The eboot.bin and NK.bin versions seem closely match on the v212 units.
A 1.9.0001.9 eboot loader can not boot a 1.9.0003.1 NK image. A 1.9.0002.3 eboot can boot a 1.9.0003.1 NK image though. Wish I could get a 1.9.0003.1 eboot.bin image - but have not found. So as I was flashing v212 with wince builds 1.9.0003.1 on older 1.9.0001.9 units - they were bricked. Hacked out the 1.9.0002.3 eboot loader and created a eboot.bin and was able to fix my not booting units. So 1.9.0002.3 eboot.bin will boot a 1.9.0003.1 NK.bin. A 1.9.0001.9 eboot.bin will not boot at all a 1.9.0003.1 NK.bin.
Linux stuff
Too early - work in progress. V212 has been registered for Machine ID - http://www.arm.linux.org.uk
vs_v212 MACH_VS_V212 VS_V212 2253
GPIO / IRQ haret explores
Unorganized and in early stages of discovery.
spamming gpio at idle: 11 28 29 30? 31 98 114 117 118 spamming irq at idle: 26 178 No change between screen display off or on keyboard button: GPIOS 38 IRQS GEDR1: GPIO38(102) web button: GPIOS 37 IRQS GEDR1 GPIO37(101) pointer control, button clicks: GPIOS 42 IRQS ICIP: BTUART(21) Touch screen: No gpios showed under watch gpio IRQS GEDR3: GPIO101(165) at press and once at release IRQS ICIP: TMR1(27) continues as held Power button cycle: GPIOS 19 = 1 GPIOS 19 = 0 GPIOS 82=1 83=0 GPIOS 19 = 1 IRQS GEDR0: GPIO19(83) IRQS GEDR0: GPIO19(83) IRQS ICIP: USBh1(3) During power on resume IRQS ICIP: BTUART(21) BUNCH of USBh1(3) Battery latch or battery hook - unhook GPIOS 19 IRQS GEDR0: GPIO19(83) Power cord unhook: GPIOS 16=0 GPIOS 19=1 GPIOS 16=1 GPIOS 19=0 IRQS GEDR0: GPIO19(83) one time Power Hook: GPIOS 19 (back and forth) IRQS GEDR0: GPIO19(83) two times CF top card: plugin: GPIOS 104 = 0 GPIOS 10=0 GPIOS 79 back and forth IRQS GEDR0: GPIO9(73) a bunch in first second unplug: GPIOS 10=1 GPIOS 104=1 No IRQS seen when unhooked headphone: plugin: GPIOS 53=1 GPIOS 81=0 82=1 unplug: GPIOS 53=0 GPIOS 81=1 82=0 usb: IRQS ICIP: USBh1(3) sound: IRQS ICIP: DMA(25) CIR: Can't picking anything up on IRQ or GPIOS using the V212CirTest program.
