[Upgrading, Modifying and Unlocking] Georgi Krivoshiiski:
Here is my haret log

===== HaRET 0.5.2 =====

Setting KMode to true.

Old KMode was 1

Finished initializing output

Loading dynamically bound functions

Function 'AllocPhysMem' in library 'coredll' at 03F61E74

Function 'FreePhysMem' in library 'coredll' at 03F61EE0

Function '?GXOpenDisplay@@YAHPAUHWND__@@K@Z' in library 'gx' at 02D539EC

Function '?GXCloseDisplay@@YAHXZ' in library 'gx' at 02D53DD8

Function '?GXBeginDraw@@YAPAXXZ' in library 'gx' at 02D532A8

Function '?GXEndDraw@@YAHXZ' in library 'gx' at 02D5336C

Function 'LoadLibraryExW' in library 'coredll' at 03F6201C

Function 'NLedSetDevice' in library 'coredll' at 03F89578

Function 'GetSystemPowerStatusEx2' in library 'coredll' at 03F689A0

Function 'SleepTillTick' in library 'coredll' at 03F61F3C

Function 'CreateToolhelp32Snapshot' in library 'toolhelp' at 0326105C

Function 'CloseToolhelp32Snapshot' in library 'toolhelp' at 0326107C

Function 'Process32First' in library 'toolhelp' at 03261140

Function 'Process32Next' in library 'toolhelp' at 032611AC

Function 'Module32First' in library 'toolhelp' at 03261340

Function 'Module32Next' in library 'toolhelp' at 032613B0

Function 'Heap32ListFirst' in library 'toolhelp' at 0326144C

Function 'Heap32ListNext' in library 'toolhelp' at 032614D4

Function 'Heap32First' in library 'toolhelp' at 0326156C

Function 'Heap32Next' in library 'toolhelp' at 03261620

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Detecting current machine

Trying to detect machine (Plat='PocketPC' OEM='hp iPAQ hw6915')

Wince reports processor: core=PXA270-416MHz name=?O ????O?? cat= vend=INTEL

Looking at machine Alpine

Looking at machine Apache

Looking at machine AximX50

Looking at machine AximX5

Looking at machine Beetles

Looking at machine Blueangel

Looking at machine Himalaya

Looking at machine Magician

Looking at machine Universal

Looking at machine H1910

Looking at machine H1940

Looking at machine H2200

Looking at machine H3600b

Looking at machine H3700

Looking at machine H3800

Looking at machine H3900

Looking at machine H4000

Looking at machine H4300

Looking at machine H5000

Looking at machine H6340

Looking at machine HX2000

Looking at machine HX4700

Looking at machine Sable

Detecting ram size

WinCE reports memory size 67108864 (phys=50552832 store=52850176)

Mapping mmu table

Build L1 reverse map

Found 331 uncached and 332 cached L1 mappings (ignored 2).

Registering command IGPIO

Registering command WG|PIO

Registering command GPLR

Registering command GPDR

Registering command GAFR

Registering command GPIO

Registering command GPIOST

Registering command LOADLIBRARYEX

Registering command NLEDSET

Registering command TRACE

Registering command TRACEMASK

Registering command TRACE2

Registering command TRACETYPE

Registering command TRACE2TYPE

Registering command TRACEFORWATCH

Registering command INSN

Registering command INSNREENABLE

Registering command INSNREG1

Registering command INSNREG2

Registering command INSN2

Registering command INSN2REENABLE

Registering command INSN2REG1

Registering command INSN2REG2

Registering command KILL

Registering command PS

Registering command LSMOD

Registering command ADDR2MOD

Registering command AC97

Not registering command ATIDBG

Initializing for machine 'Sable'

HaRET(1)# set ramaddr 0xa0000000

HaRET(2)# addlist IRQS p2v(0x40D00000) 0x480 32 0

HaRET(3)# addlist IRQS p2v(0x40D0009c) 0xfffffffc 32 0

HaRET(4)# addlist IRQS p2v(0x40E00048) 0 32 0

HaRET(5)# addlist IRQS p2v(0x40E0004c) 0 32 0

HaRET(6)# addlist IRQS p2v(0x40E00050) 0 32 0

HaRET(7)# addlist IRQS p2v(0x40E00148) 0 32 0

HaRET(8)# addlist GPIOS p2v(0x40E00000)

HaRET(9)# addlist GPIOS p2v(0x40E00004)

HaRET(10)# addlist GPIOS p2v(0x40E00008)

HaRET(11)# addlist GPIOS p2v(0x40E00100)

HaRET(12)# addlist GPIOS p2v(0x40E0000C)

HaRET(13)# addlist GPIOS p2v(0x40E00010)

HaRET(14)# addlist GPIOS p2v(0x40E00014)

HaRET(15)# addlist GPIOS p2v(0x40E0010C)

HaRET(16)# addlist GPIOS p2v(0x40E00054)

HaRET(17)# addlist GPIOS p2v(0x40E00058)

HaRET(18)# addlist GPIOS p2v(0x40E0005c)

HaRET(19)# addlist GPIOS p2v(0x40E00060)

HaRET(20)# addlist GPIOS p2v(0x40E00064)

HaRET(21)# addlist GPIOS p2v(0x40E00068)

HaRET(22)# addlist GPIOS p2v(0x40E0006c)

HaRET(23)# addlist GPIOS p2v(0x40E00070)

HaRET(24)# newvar CLOCKS GPIOS 'Architecture clock registers'

HaRET(25)# addlist CLOCKS p2v(0x41300000)

HaRET(26)# addlist CLOCKS p2v(0x41300004)

HaRET(27)# addlist CLOCKS p2v(0x41300008)

HaRET(28)# addlist CLOCKS p2v(0x4130000C)

HaRET(29)# addlist CLOCKS cp 14 0 6 0 0

HaRET(30)# addlist CLOCKS cp 14 0 7 0 0

HaRET(1)# set ramsize 64*1024*1024

HaRET(2)# addlist GPIOS p2v(0x10000018) 0x0000 16

HaRET(3)# addlist GPIOS p2v(0x10000098) 0x0000 16

HaRET(4)# addlist GPIOS p2v(0x10000118) 0x0000 16

HaRET(5)# addlist GPIOS p2v(0x10000198) 0x0000 16

Welcome, this is HaRET 0.5.2 running on WindowsCE v5.2

Minimal virtual address: 00010000, maximal virtual address: 7FFFFFFF

Detected machine Sable/PXA27x (Plat='PocketPC' OEM='hp iPAQ hw6915')

CPU is Intel ARM arch 5TE revision 0 product 17 stepping 7 running in system mode

Enter 'HELP' for a short command summary.

Running WSAStartup

Starting gui

In initdialog

Found machine Sable

executing startup.txt

HaRET(1)# set RAMSIZE 0x08000000

HaRET(2)# set MTYPE 1667

HaRET(3)# set KERNEL zImage

HaRET(4)# set initrd initrd.gz

HaRET(25)# set cmdline "ppp.nostart=0 mddi.width=240 mddi.height=320 msm_sdcc.msmsdcc_fmax=32000000 pm.sleep_mode=0 no_console_suspend"

HaRET(26)# boot

boot KERNEL=zImage INITRD=initrd.gz

Opening file zImage

Opening file initrd.gz

boot params: RAMADDR=a0000000 RAMSIZE=08000000 MTYPE=1667 CMDLINE='ppp.nostart=0 mddi.width=240 mddi.height=320 msm_sdcc.msmsdcc_fmax=32000000 pm.sleep_mode=0 no_console_suspend'

Boot FB feedback: 1

Built virtual to physical page mapping

Allocated 663 pages (tags=4A300000/a2cf3000 kernel=4A301000/a2cf6000 initrd=4A468000/a2b8d000 index=4A593000/a2828000)

Built kernel tags area

Built page index

Video buffer at A8500020 sx=240 sy=240 mx=60 my=40

Video Phys FB=5c000020 Fonts=a2826064

preload=2260@4A596000/a2825000 sj=4A596000 stack=4A594000/a2827000 data=4A595000/a2826000 exec=a2825128

Reading 1469884 bytes...

Read complete

Reading 1222150 bytes...

Read complete

Launching to physical address a2825010

Trampoline setup (tram=136@000255F4/140255f4/a0b2d5f4)

MMU setup: mmu=B0910000/a0910000

Go Go Go...

===== HaRET 0.5.2 =====

Setting KMode to true.

Old KMode was 1

Finished initializing output

Loading dynamically bound functions

Function 'AllocPhysMem' in library 'coredll' at 03F61E74

Function 'FreePhysMem' in library 'coredll' at 03F61EE0

Function '?GXOpenDisplay@@YAHPAUHWND__@@K@Z' in library 'gx' at 02D539EC

Function '?GXCloseDisplay@@YAHXZ' in library 'gx' at 02D53DD8

Function '?GXBeginDraw@@YAPAXXZ' in library 'gx' at 02D532A8

Function '?GXEndDraw@@YAHXZ' in library 'gx' at 02D5336C

Function 'LoadLibraryExW' in library 'coredll' at 03F6201C

Function 'NLedSetDevice' in library 'coredll' at 03F89578

Function 'GetSystemPowerStatusEx2' in library 'coredll' at 03F689A0

Function 'SleepTillTick' in library 'coredll' at 03F61F3C

Function 'CreateToolhelp32Snapshot' in library 'toolhelp' at 0326105C

Function 'CloseToolhelp32Snapshot' in library 'toolhelp' at 0326107C

Function 'Process32First' in library 'toolhelp' at 03261140

Function 'Process32Next' in library 'toolhelp' at 032611AC

Function 'Module32First' in library 'toolhelp' at 03261340

Function 'Module32Next' in library 'toolhelp' at 032613B0

Function 'Heap32ListFirst' in library 'toolhelp' at 0326144C

Function 'Heap32ListNext' in library 'toolhelp' at 032614D4

Function 'Heap32First' in library 'toolhelp' at 0326156C

Function 'Heap32Next' in library 'toolhelp' at 03261620

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Detecting current machine

Trying to detect machine (Plat='PocketPC' OEM='hp iPAQ hw6915')

Wince reports processor: core=PXA270-416MHz name=?S???—?P?? cat= vend=INTEL

Looking at machine Alpine

Looking at machine Apache

Looking at machine AximX50

Looking at machine AximX5

Looking at machine Beetles

Looking at machine Blueangel

Looking at machine Himalaya

Looking at machine Magician

Looking at machine Universal

Looking at machine H1910

Looking at machine H1940

Looking at machine H2200

Looking at machine H3600b

Looking at machine H3700

Looking at machine H3800

Looking at machine H3900

Looking at machine H4000

Looking at machine H4300

Looking at machine H5000

Looking at machine H6340

Looking at machine HX2000

Looking at machine HX4700

Looking at machine Sable

Detecting ram size

WinCE reports memory size 67108864 (phys=50552832 store=52850176)

Mapping mmu table

Build L1 reverse map

Found 331 uncached and 332 cached L1 mappings (ignored 2).

Registering command IGPIO

Registering command WG|PIO

Registering command GPLR

Registering command GPDR

Registering command GAFR

Registering command GPIO

Registering command GPIOST

Registering command LOADLIBRARYEX

Registering command NLEDSET

Registering command TRACE

Registering command TRACEMASK

Registering command TRACE2

Registering command TRACETYPE

Registering command TRACE2TYPE

Registering command TRACEFORWATCH

Registering command INSN

Registering command INSNREENABLE

Registering command INSNREG1

Registering command INSNREG2

Registering command INSN2

Registering command INSN2REENABLE

Registering command INSN2REG1

Registering command INSN2REG2

Registering command KILL

Registering command PS

Registering command LSMOD

Registering command ADDR2MOD

Registering command AC97

Not registering command ATIDBG

Initializing for machine 'Sable'

HaRET(1)# set ramaddr 0xa0000000

HaRET(2)# addlist IRQS p2v(0x40D00000) 0x480 32 0

HaRET(3)# addlist IRQS p2v(0x40D0009c) 0xfffffffc 32 0

HaRET(4)# addlist IRQS p2v(0x40E00048) 0 32 0

HaRET(5)# addlist IRQS p2v(0x40E0004c) 0 32 0

HaRET(6)# addlist IRQS p2v(0x40E00050) 0 32 0

HaRET(7)# addlist IRQS p2v(0x40E00148) 0 32 0

HaRET(8)# addlist GPIOS p2v(0x40E00000)

HaRET(9)# addlist GPIOS p2v(0x40E00004)

HaRET(10)# addlist GPIOS p2v(0x40E00008)

HaRET(11)# addlist GPIOS p2v(0x40E00100)

HaRET(12)# addlist GPIOS p2v(0x40E0000C)

HaRET(13)# addlist GPIOS p2v(0x40E00010)

HaRET(14)# addlist GPIOS p2v(0x40E00014)

HaRET(15)# addlist GPIOS p2v(0x40E0010C)

HaRET(16)# addlist GPIOS p2v(0x40E00054)

HaRET(17)# addlist GPIOS p2v(0x40E00058)

HaRET(18)# addlist GPIOS p2v(0x40E0005c)

HaRET(19)# addlist GPIOS p2v(0x40E00060)

HaRET(20)# addlist GPIOS p2v(0x40E00064)

HaRET(21)# addlist GPIOS p2v(0x40E00068)

HaRET(22)# addlist GPIOS p2v(0x40E0006c)

HaRET(23)# addlist GPIOS p2v(0x40E00070)

HaRET(24)# newvar CLOCKS GPIOS 'Architecture clock registers'

HaRET(25)# addlist CLOCKS p2v(0x41300000)

HaRET(26)# addlist CLOCKS p2v(0x41300004)

HaRET(27)# addlist CLOCKS p2v(0x41300008)

HaRET(28)# addlist CLOCKS p2v(0x4130000C)

HaRET(29)# addlist CLOCKS cp 14 0 6 0 0

HaRET(30)# addlist CLOCKS cp 14 0 7 0 0

HaRET(1)# set ramsize 64*1024*1024

HaRET(2)# addlist GPIOS p2v(0x10000018) 0x0000 16

HaRET(3)# addlist GPIOS p2v(0x10000098) 0x0000 16

HaRET(4)# addlist GPIOS p2v(0x10000118) 0x0000 16

HaRET(5)# addlist GPIOS p2v(0x10000198) 0x0000 16

Welcome, this is HaRET 0.5.2 running on WindowsCE v5.2

Minimal virtual address: 00010000, maximal virtual address: 7FFFFFFF

Detected machine Sable/PXA27x (Plat='PocketPC' OEM='hp iPAQ hw6915')

CPU is Intel ARM arch 5TE revision 0 product 17 stepping 7 running in system mode

Enter 'HELP' for a short command summary.

Running WSAStartup

Starting gui

In initdialog

Found machine Sable

executing startup.txt

HaRET(2)# set RAMSIZE 0x08000000

HaRET(3)# set MTYPE 1723

HaRET(4)# set KERNEL zImage

HaRET(5)# set initrd initrd.gz

HaRET(19)# set cmdline "ppp.nostart=0 pm.sleep_mode=1 mddi.width=240 mddi.height=240 no_console_suspend clock-7x00.mddi=0xa51"

HaRET(20)# boot

boot KERNEL=zImage INITRD=initrd.gz

Opening file zImage

Opening file initrd.gz

boot params: RAMADDR=a0000000 RAMSIZE=08000000 MTYPE=1723 CMDLINE='ppp.nostart=0 pm.sleep_mode=1 mddi.width=240 mddi.height=240 no_console_suspend clock-7x00.mddi=0xa51'

Boot FB feedback: 1

Built virtual to physical page mapping

Allocated 663 pages (tags=4A800000/a2b94000 kernel=4A801000/a2b93000 initrd=4A968000/a2a2c000 index=4AA93000/a2901000)

Built kernel tags area

Built page index

Video buffer at A8500020 sx=240 sy=240 mx=60 my=40

Video Phys FB=5c000020 Fonts=a28ff064

preload=2260@4AA96000/a28fe000 sj=4AA96000 stack=4AA94000/a2900000 data=4AA95000/a28ff000 exec=a28fe128

Reading 1469884 bytes...

Read complete

Reading 1222150 bytes...

Read complete

Launching to physical address a28fe010

Trampoline setup (tram=136@000255F4/200255f4/a0bc05f4)

MMU setup: mmu=B0910000/a0910000

Go Go Go...

===== HaRET 0.5.2 =====

Setting KMode to true.

Old KMode was 1

Finished initializing output

Loading dynamically bound functions

Function 'AllocPhysMem' in library 'coredll' at 03F61E74

Function 'FreePhysMem' in library 'coredll' at 03F61EE0

Function '?GXOpenDisplay@@YAHPAUHWND__@@K@Z' in library 'gx' at 02D539EC

Function '?GXCloseDisplay@@YAHXZ' in library 'gx' at 02D53DD8

Function '?GXBeginDraw@@YAPAXXZ' in library 'gx' at 02D532A8

Function '?GXEndDraw@@YAHXZ' in library 'gx' at 02D5336C

Function 'LoadLibraryExW' in library 'coredll' at 03F6201C

Function 'NLedSetDevice' in library 'coredll' at 03F89578

Function 'GetSystemPowerStatusEx2' in library 'coredll' at 03F689A0

Function 'SleepTillTick' in library 'coredll' at 03F61F3C

Function 'CreateToolhelp32Snapshot' in library 'toolhelp' at 0326105C

Function 'CloseToolhelp32Snapshot' in library 'toolhelp' at 0326107C

Function 'Process32First' in library 'toolhelp' at 03261140

Function 'Process32Next' in library 'toolhelp' at 032611AC

Function 'Module32First' in library 'toolhelp' at 03261340

Function 'Module32Next' in library 'toolhelp' at 032613B0

Function 'Heap32ListFirst' in library 'toolhelp' at 0326144C

Function 'Heap32ListNext' in library 'toolhelp' at 032614D4

Function 'Heap32First' in library 'toolhelp' at 0326156C

Function 'Heap32Next' in library 'toolhelp' at 03261620

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Unable to load library 'ace_ddi'

Detecting current machine

Trying to detect machine (Plat='PocketPC' OEM='hp iPAQ hw6915')

Wince reports processor: core=PXA270-416MHz name=?O???—?O?? cat= vend=INTEL

Looking at machine Alpine

Looking at machine Apache

Looking at machine AximX50

Looking at machine AximX5

Looking at machine Beetles

Looking at machine Blueangel

Looking at machine Himalaya

Looking at machine Magician

Looking at machine Universal

Looking at machine H1910

Looking at machine H1940

Looking at machine H2200

Looking at machine H3600b

Looking at machine H3700

Looking at machine H3800

Looking at machine H3900

Looking at machine H4000

Looking at machine H4300

Looking at machine H5000

Looking at machine H6340

Looking at machine HX2000

Looking at machine HX4700

Looking at machine Sable

Detecting ram size

WinCE reports memory size 67108864 (phys=50552832 store=52850176)

Mapping mmu table

Build L1 reverse map

Found 331 uncached and 332 cached L1 mappings (ignored 2).

Registering command IGPIO

Registering command WG|PIO

Registering command GPLR

Registering command GPDR

Registering command GAFR

Registering command GPIO

Registering command GPIOST

Registering command LOADLIBRARYEX

Registering command NLEDSET

Registering command TRACE

Registering command TRACEMASK

Registering command TRACE2

Registering command TRACETYPE

Registering command TRACE2TYPE

Registering command TRACEFORWATCH

Registering command INSN

Registering command INSNREENABLE

Registering command INSNREG1

Registering command INSNREG2

Registering command INSN2

Registering command INSN2REENABLE

Registering command INSN2REG1

Registering command INSN2REG2

Registering command KILL

Registering command PS

Registering command LSMOD

Registering command ADDR2MOD

Registering command AC97

Not registering command ATIDBG

Initializing for machine 'Sable'

HaRET(1)# set ramaddr 0xa0000000

HaRET(2)# addlist IRQS p2v(0x40D00000) 0x480 32 0

HaRET(3)# addlist IRQS p2v(0x40D0009c) 0xfffffffc 32 0

HaRET(4)# addlist IRQS p2v(0x40E00048) 0 32 0

HaRET(5)# addlist IRQS p2v(0x40E0004c) 0 32 0

HaRET(6)# addlist IRQS p2v(0x40E00050) 0 32 0

HaRET(7)# addlist IRQS p2v(0x40E00148) 0 32 0

HaRET(8)# addlist GPIOS p2v(0x40E00000)

HaRET(9)# addlist GPIOS p2v(0x40E00004)

HaRET(10)# addlist GPIOS p2v(0x40E00008)

HaRET(11)# addlist GPIOS p2v(0x40E00100)

HaRET(12)# addlist GPIOS p2v(0x40E0000C)

HaRET(13)# addlist GPIOS p2v(0x40E00010)

HaRET(14)# addlist GPIOS p2v(0x40E00014)

HaRET(15)# addlist GPIOS p2v(0x40E0010C)

HaRET(16)# addlist GPIOS p2v(0x40E00054)

HaRET(17)# addlist GPIOS p2v(0x40E00058)

HaRET(18)# addlist GPIOS p2v(0x40E0005c)

HaRET(19)# addlist GPIOS p2v(0x40E00060)

HaRET(20)# addlist GPIOS p2v(0x40E00064)

HaRET(21)# addlist GPIOS p2v(0x40E00068)

HaRET(22)# addlist GPIOS p2v(0x40E0006c)

HaRET(23)# addlist GPIOS p2v(0x40E00070)

HaRET(24)# newvar CLOCKS GPIOS 'Architecture clock registers'

HaRET(25)# addlist CLOCKS p2v(0x41300000)

HaRET(26)# addlist CLOCKS p2v(0x41300004)

HaRET(27)# addlist CLOCKS p2v(0x41300008)

HaRET(28)# addlist CLOCKS p2v(0x4130000C)

HaRET(29)# addlist CLOCKS cp 14 0 6 0 0

HaRET(30)# addlist CLOCKS cp 14 0 7 0 0

HaRET(1)# set ramsize 64*1024*1024

HaRET(2)# addlist GPIOS p2v(0x10000018) 0x0000 16

HaRET(3)# addlist GPIOS p2v(0x10000098) 0x0000 16

HaRET(4)# addlist GPIOS p2v(0x10000118) 0x0000 16

HaRET(5)# addlist GPIOS p2v(0x10000198) 0x0000 16

Welcome, this is HaRET 0.5.2 running on WindowsCE v5.2

Minimal virtual address: 00010000, maximal virtual address: 7FFFFFFF

Detected machine Sable/PXA27x (Plat='PocketPC' OEM='hp iPAQ hw6915')

CPU is Intel ARM arch 5TE revision 0 product 17 stepping 7 running in system mode

Enter 'HELP' for a short command summary.

Running WSAStartup

Starting gui

In initdialog

Found machine Sable

executing startup.txt

HaRET(2)# set RAMSIZE 0x08000000

HaRET(3)# set MTYPE 1768

HaRET(4)# set KERNEL zImage

HaRET(5)# set initrd initrd.gz

HaRET(19)# set cmdline "ppp.nostart=0 pm.sleep_mode=1 mddi.width=240 mddi.height=240 no_console_suspend clock-7x00.mddi=0xa51"

HaRET(20)# boot

boot KERNEL=zImage INITRD=initrd.gz

Opening file zImage

Opening file initrd.gz

boot params: RAMADDR=a0000000 RAMSIZE=08000000 MTYPE=1768 CMDLINE='ppp.nostart=0 pm.sleep_mode=1 mddi.width=240 mddi.height=240 no_console_suspend clock-7x00.mddi=0xa51'

Boot FB feedback: 1

Built virtual to physical page mapping

Allocated 663 pages (tags=4AA00000/a2be9000 kernel=4AA01000/a2be8000 initrd=4AB68000/a2a81000 index=4AC93000/a2956000)

Built kernel tags area

Built page index

Video buffer at A8500020 sx=240 sy=240 mx=60 my=40

Video Phys FB=5c000020 Fonts=a2954064

preload=2260@4AC96000/a2953000 sj=4AC96000 stack=4AC94000/a2955000 data=4AC95000/a2954000 exec=a2953128

Reading 1469884 bytes...

Read complete

Reading 1222150 bytes...

Read complete

Launching to physical address a2953010

Trampoline setup (tram=136@000255F4/200255f4/a0bd25f4)

MMU setup: mmu=B0910000/a0910000

Go Go Go...