Post by Spanner on Dec 23, 2023 0:03:32 GMT
Just 2 pics here at the moment:
The chip side of the amstrad em@iler.
The solder side of the amstrad em@iler.
My reason for prodding about in the emailer is mostly just because i needed something to test a jtag lead on, but it would be nice if it could be made to do something useful.
The board is quite a low spec with 8MB of ram and 8MB of flash but it is a cheap enough toy to have a play with. The Jtag port appears to be the round pads on the solder side just above and to the left of the SD card slot, marked TP 7, 8, 10, 11 and 12. I havent had a chance to find out which pin is which but im pretty sure those pads are the jtag port.
I have metered out the test points and they are the jtag port!
Im still not sure about drawing 3.3v from the point i marked but this is where the jtag lines are pulled up to so it should be 3.3v
Ground can be found all round the edge of the board i think, obviously i may have made some mistakes so dont blame me if im wrong (not that i expect you care).
UPDATE:
The jtag port does work, im using a jtag pod from www.amontec.com in raven mode, i havent been able to get the wiggler mode to work yet, i think its a config problem with my printer port. At the moment it looks like the bootloader chip is mirrored through memory as the external bus interface isnt configured properly, So im seeing the same 64Kb of flash repeated every 0x10000 bytes. Below is some of what i have been looking at:
>endian little
Little Endian set for WORD and DASM commands
>dasm 0x00000000
00000000: B 132 <<< i think this is the reset vector
00000004: B 348
00000008: B 384
0000000C: B 344
00000010: B 344
00000014: NOP
00000018: B 396
0000001C: B 396
00000020: AND R0, R0, R0
00000024: AND R0, R0, R0
Some strings found with patience and ocd commander ( i havent dumped the flash yet)
0000324F: .........SYS.ATZ
0000325F: .....AT+GCI=B4;E
0000326F: 0....AT+FCLASS=8
0000327F: .....AT+FCLASS=0
0000328F: .....ATM1L0..ATS
0000329F: 0=0..ATZ.....AT+
000032AF: GCI=B4;E0....AT+
000032BF: FCLASS=8.....AT+
000032CF: FCLASS=0.....ATM
000032DF: 1L0..ATS0=1..OK.
000032EF: .ERROR...NO DIAL
000032FF: TONE.BUSY....NO
0000330F: CARRIER..NO ANSW
0000331F: ER...HANG....CON
0000332F: NECT...-........
0000387F: .ATDT....9,..... << only noteworthy as this is the string for dialing a modem
0000819F: . ...Divide by z
000081AF: ero.......@-..@. << i guess this is for when bad things happen
000085FF: .@(#)PBL V3.1 Bu
0000860F: ild:1277......{.
00011D1F: . ...........SDR
00011D2F: AM...FLASH...PBL
00011D3F: Info....EPLD...
00011D4F: .Strap Pins..Int
00011D5F: . Data FLASH.Int
00011D6F: . Data Extra.Ext
00011D7F: . Data FLASH.Ext
00011D8F: . Data Extra.p@-
00012B4F: .SVC.User....FIQ << looks like strings for a BSOD
00012B5F: .IRQ.Abort...Und
00012B6F: ef...System..
00012B7F: ......... ...PBL
00012B8F: Exception at PC
00012B9F: =....(...CPSR=..
00012BAF: .) SPSR=.)... R0
00012BBF: =.... R1=.... R2
00012BCF: =.... R3=.... R4
00012BDF: =.... R5=.... R6
00012BEF: =.... R7=.... R8
00012BFF: =.... R9=....R10
00012C0F: =....R11=....R12
00012C1F: =.....C-...M..P.
0001324F: .........SYS.ATZ
0001325F: .....AT+GCI=B4;E
0001326F: 0....AT+FCLASS=8
0001327F: .....AT+FCLASS=0
0001328F: .....ATM1L0..ATS
0001329F: 0=0..ATZ.....AT+
000132AF: GCI=B4;E0....AT+
000132BF: FCLASS=8.....AT+ << Odd it appears whatever bit of memory im reading isnt fully decoded
000132CF: FCLASS=0.....ATM << as this string appeard 0x10000 bytes earlier ??
000132DF: 1L0..ATS0=1..OK.
000132EF: .ERROR...NO DIAL
000132FF: TONE.BUSY....NO
0001330F: CARRIER..NO ANSW
0001331F: ER...HANG....CON
0001332F: NECT...-........
0002324F: .........SYS.ATZ
0002325F: .....AT+GCI=B4;E
0002326F: 0....AT+FCLASS=8
0002327F: .....AT+FCLASS=0
0002328F: .....ATM1L0..ATS
0002329F: 0=0..ATZ.....AT+
000232AF: GCI=B4;E0....AT+ <<< and again! hmm i need to learn more
000232BF: FCLASS=8.....AT+
000232CF: FCLASS=0.....ATM
000232DF: 1L0..ATS0=1..OK.
000232EF: .ERROR...NO DIAL
000232FF: TONE.BUSY....NO
0002330F: CARRIER..NO ANSW
0002331F: ER...HANG....CON
0002332F: NECT...-........
000533EF: .ZZZZ....H...080
000533FF: 07835231..O-.4@. << should have spotted it sooner perhaps a dialup number?? 08007835231
Dont check back soon as this will hardly ever be updated
en4rab
The chip side of the amstrad em@iler.
The solder side of the amstrad em@iler.
My reason for prodding about in the emailer is mostly just because i needed something to test a jtag lead on, but it would be nice if it could be made to do something useful.
The board is quite a low spec with 8MB of ram and 8MB of flash but it is a cheap enough toy to have a play with. The Jtag port appears to be the round pads on the solder side just above and to the left of the SD card slot, marked TP 7, 8, 10, 11 and 12. I havent had a chance to find out which pin is which but im pretty sure those pads are the jtag port.
I have metered out the test points and they are the jtag port!
Im still not sure about drawing 3.3v from the point i marked but this is where the jtag lines are pulled up to so it should be 3.3v
Ground can be found all round the edge of the board i think, obviously i may have made some mistakes so dont blame me if im wrong (not that i expect you care).
UPDATE:
The jtag port does work, im using a jtag pod from www.amontec.com in raven mode, i havent been able to get the wiggler mode to work yet, i think its a config problem with my printer port. At the moment it looks like the bootloader chip is mirrored through memory as the external bus interface isnt configured properly, So im seeing the same 64Kb of flash repeated every 0x10000 bytes. Below is some of what i have been looking at:
>endian little
Little Endian set for WORD and DASM commands
>dasm 0x00000000
00000000: B 132 <<< i think this is the reset vector
00000004: B 348
00000008: B 384
0000000C: B 344
00000010: B 344
00000014: NOP
00000018: B 396
0000001C: B 396
00000020: AND R0, R0, R0
00000024: AND R0, R0, R0
Some strings found with patience and ocd commander ( i havent dumped the flash yet)
0000324F: .........SYS.ATZ
0000325F: .....AT+GCI=B4;E
0000326F: 0....AT+FCLASS=8
0000327F: .....AT+FCLASS=0
0000328F: .....ATM1L0..ATS
0000329F: 0=0..ATZ.....AT+
000032AF: GCI=B4;E0....AT+
000032BF: FCLASS=8.....AT+
000032CF: FCLASS=0.....ATM
000032DF: 1L0..ATS0=1..OK.
000032EF: .ERROR...NO DIAL
000032FF: TONE.BUSY....NO
0000330F: CARRIER..NO ANSW
0000331F: ER...HANG....CON
0000332F: NECT...-........
0000387F: .ATDT....9,..... << only noteworthy as this is the string for dialing a modem
0000819F: . ...Divide by z
000081AF: ero.......@-..@. << i guess this is for when bad things happen
000085FF: .@(#)PBL V3.1 Bu
0000860F: ild:1277......{.
00011D1F: . ...........SDR
00011D2F: AM...FLASH...PBL
00011D3F: Info....EPLD...
00011D4F: .Strap Pins..Int
00011D5F: . Data FLASH.Int
00011D6F: . Data Extra.Ext
00011D7F: . Data FLASH.Ext
00011D8F: . Data Extra.p@-
00012B4F: .SVC.User....FIQ << looks like strings for a BSOD
00012B5F: .IRQ.Abort...Und
00012B6F: ef...System..
00012B7F: ......... ...PBL
00012B8F: Exception at PC
00012B9F: =....(...CPSR=..
00012BAF: .) SPSR=.)... R0
00012BBF: =.... R1=.... R2
00012BCF: =.... R3=.... R4
00012BDF: =.... R5=.... R6
00012BEF: =.... R7=.... R8
00012BFF: =.... R9=....R10
00012C0F: =....R11=....R12
00012C1F: =.....C-...M..P.
0001324F: .........SYS.ATZ
0001325F: .....AT+GCI=B4;E
0001326F: 0....AT+FCLASS=8
0001327F: .....AT+FCLASS=0
0001328F: .....ATM1L0..ATS
0001329F: 0=0..ATZ.....AT+
000132AF: GCI=B4;E0....AT+
000132BF: FCLASS=8.....AT+ << Odd it appears whatever bit of memory im reading isnt fully decoded
000132CF: FCLASS=0.....ATM << as this string appeard 0x10000 bytes earlier ??
000132DF: 1L0..ATS0=1..OK.
000132EF: .ERROR...NO DIAL
000132FF: TONE.BUSY....NO
0001330F: CARRIER..NO ANSW
0001331F: ER...HANG....CON
0001332F: NECT...-........
0002324F: .........SYS.ATZ
0002325F: .....AT+GCI=B4;E
0002326F: 0....AT+FCLASS=8
0002327F: .....AT+FCLASS=0
0002328F: .....ATM1L0..ATS
0002329F: 0=0..ATZ.....AT+
000232AF: GCI=B4;E0....AT+ <<< and again! hmm i need to learn more
000232BF: FCLASS=8.....AT+
000232CF: FCLASS=0.....ATM
000232DF: 1L0..ATS0=1..OK.
000232EF: .ERROR...NO DIAL
000232FF: TONE.BUSY....NO
0002330F: CARRIER..NO ANSW
0002331F: ER...HANG....CON
0002332F: NECT...-........
000533EF: .ZZZZ....H...080
000533FF: 07835231..O-.4@. << should have spotted it sooner perhaps a dialup number?? 08007835231
Dont check back soon as this will hardly ever be updated
en4rab