[Android Software/Hacking General [Developers Only]] minescumarius:
Hardware RS-232 on flytouch

These tablets have implemented a serial port on the PCB ... I managed to connect with a serial interface to this port ... I attach a few results ...

Unfortunately my flash memory after nand scrub remained just 1G ... Any suggestions would be welcome ... Flash is H27UBG8T2ATR (4G capacity) ...

U-Boot 2009.08-svn676 (Mar 14 2011 - 09:26:47)

Shanghai InfoTM Microelectronics Co., Ltd.

Memory type: DDRII 256 MB, E0F10110F13131512

NAND: ADD7NAND ID: ad d7 94

Assigned as H27UBG8T2ATR

, 2048 MiB(Hynix)

Using embedded environment.

Battery: 618

, AdapterIn: 0

Console devices(i/o/e): serial, serial, serial

IMAP_SDHCI: 0, IMAP_SDHCI1: 1

Ethernet driver using: GMAC

Usage:

MMC sub system

Try booting from SD ...

Invalid boot SD!

Hit any key to stop autoboot: 1  0

Checking recovery key state ...

get boot para 7: 0xbdbeed01

Try load Image from NAND...

OEM NAND read finished.

Wrong NAND Image type!

Image is demaged, try to recover...

OEM NAND read finished.

Wrong NAND Image type!

Booting linux(normal) ...

Try load Image from NAND...

Skipping original bad block at 0x01800000

OEM NAND read finished.

Wrong NAND Image type!

Image is demaged, try to recover...

OEM NAND read finished.

Wrong NAND Image type!

Wrong Image Format for bootm command

ERROR: can't get kernel image!

[4. LookingForGroup]: ?

? - alias for 'help'

adr - adr (OEM implanted image burnning tool.)

autoscr - DEPRECATED - use "source" command instead

base - print or set address offset

bdinfo - print Board Info structure

boot - boot default, i.e., run 'bootcmd'

bootd - boot default, i.e., run 'bootcmd'

bootelf - Boot from an ELF image in memory

bootl - Boot pre-burned linux.

bootm - boot application image from memory

bootp - boot image via network using BOOTP/TFTP protocol

bootvx - Boot vxWorks from an ELF image

cls - clear screen

cmp - memory compare

coninfo - print console devices and information

cp - memory copy

crc32 - checksum calculation

dcache - enable or disable data cache

echo - echo args to console

exit - exit script

fatinfo - print information about filesystem

fatload - load binary file from a dos filesystem

fatls - list files in a directory (default /)

go - start application at address 'addr'

help - print online help

icache - enable or disable instruction cache

iminfo - print header information for application image

imxtract- extract a part of a multi-image

itest - return true/false on integer compare

iuw - iuw (InfoTM Update Wrap tools)

loadb - load binary file over serial line (kermit mode)

loads - load S-Record file over serial line

loady - load binary file over serial line (ymodem mode)

loop - infinite loop on address range

ls - ls.

md - memory display

mm - memory modify (auto-incrementing address)

mmc - MMC sub system

mmcinfo - mmcinfo <dev num>-- display MMC info

mmmt - mmmt (OEM implanted memory test tool.)

mtest - simple RAM read/write test

mw - memory write (fill)

nand - NAND sub-system

nboot - boot from NAND device

nfs - boot image via network using NFS protocol

nm - memory modify (constant address)

nor - nor (OEM implanted nor tool.)

ping - send ICMP ECHO_REQUEST to network host

printenv- print environment variables

rarpboot- boot image via network using RARP/TFTP protocol

reginfo - print register information

reset - Perform RESET of the CPU

run - run commands in an environment variable

saveenv - save environment variables to persistent storage

setenv - set environment variables

showvar - print local hushshell variables

sleep - delay execution for some time

source - run script from memory

test - minimal test like /bin/sh

tftpboot- boot image via network using TFTP protocol

version - print monitor version

[4. LookingForGroup]:nand

nand info - show available NAND devices

nand device [dev] - show or set current device

nand read - addr off|partition size

nand write - addr off|partition size

read/write 'size' bytes starting at offset 'off'

to/from memory address 'addr', skipping bad blocks.

nand erase [clean] [off size] - erase 'size' bytes from

offset 'off' (entire device if not specified)

nand bad - show bad blocks

nand dump[.oob] off - dump page

nand scrub - really clean NAND erasing bad blocks (UNSAFE)

nand markbad off [...] - mark bad block(s) at offset (UNSAFE)

nand biterr off - make a bit error at offset (UNSAFE)