Difference between revisions of "TL866 II PLUS/Bootloader"

From Proghq
Jump to: navigation, search
(Created page with " To reset from firmware: 3D 00 00 00 86 B9 78 A5 3F 00 00 00 00 00 00 00 To reset from bootloader: 3F 00 00 00 00 00 00 00")
 
Line 1: Line 1:
  
 +
== Reset ==
  
To reset from firmware:
+
Command <tt>3F</tt> seems to be used to reset the device. When used from the stock firmware the device resets into the bootloader, and when used from the bootloader the device resets to the stock firmware.
  3D 00 00 00  86 B9 78 A5
 
  3F 00 00 00  00 00 00 00
 
  
To reset from bootloader:
+
{| class="wikitable"
  3F 00 00 00  00 00 00 00
+
! Offset || Field || Size || Value || Description
 +
|-
 +
| 0 || command || 1 || <tt>3F</tt>
 +
| the command identifier
 +
|-
 +
| 1 || ''reserved'' || 7 || 0 || reserved, set to zero
 +
|}
 +
 
 +
When resetting from the stock firmware, another command is transmitted first. This may be some kind of key required to permit reset? Unknown until the firmware is dumped and analyzed.
 +
 
 +
{| class="wikitable"
 +
! Offset || Field || Size || Value || Description
 +
|-
 +
| 0 || command || 1 || <tt>3D</tt>
 +
| the command identifier
 +
|-
 +
| 1 || ''reserved'' || 3 || 0 || reserved, set to zero
 +
|-
 +
| 4 || key? || 4 || <tt>86 B9 78 A5</tt>
 +
| unknown, maybe just a fixed key? Set statically in the official client.
 +
|}

Revision as of 18:00, 26 August 2018

Reset

Command 3F seems to be used to reset the device. When used from the stock firmware the device resets into the bootloader, and when used from the bootloader the device resets to the stock firmware.

Offset Field Size Value Description
0 command 1 3F the command identifier
1 reserved 7 0 reserved, set to zero

When resetting from the stock firmware, another command is transmitted first. This may be some kind of key required to permit reset? Unknown until the firmware is dumped and analyzed.

Offset Field Size Value Description
0 command 1 3D the command identifier
1 reserved 3 0 reserved, set to zero
4 key? 4 86 B9 78 A5 unknown, maybe just a fixed key? Set statically in the official client.