Xrpc call list

From t-hack.com - Hack X300T / X301T
Revision as of 19:12, 15 June 2009 by Hoernchen (Talk | contribs)
Jump to: navigation, search

Contents

XRPC_ID_GETSERIAL (0)

Returns the chip serial number.

param0 param1 param2 param3 param4
input 0 0 0 0 0
output serial number [0..31](LSB) [32..63] [64..91] [92..127](MSB) 0

XRPC_ID_GETRANDOM (2)

Returns a random number generated by the chip hardware, this xrpc takes about ~10ms

param0 param1 param2 param3 param4
input 0 0 0 0 0
output Random Number 0 0 0 0

XRPC_ID_GETBONDINGCOMMENT (3)

Returns the chip bonding option string in param0 and param1, "developA" for development chips (ES4/ES5/ES6/ES7) or "productA" for production chips (revA/revB/revC/..)

param0 param1 param2 param3 param4
input 0 0 0 0 0
output Bonding comment [0..31] (LSB) Bonding comment [32..63] (MSB) 0 0 0

XRPC_ID_SHA1XOS (4)

Returns the SHA1 hash of the xos currently in serial flash.

For 'M' versions of xos (development versions), the last 3 hex digits of the hash are normally equal to the release version (since xosM7d), this is not true for 'P' (production) versions of xos.

param0 param1 param2 param3 param4
input 0 0 0 0 0
output xos SHA1 hash [0..31] (LSB) [32..63] [64..91] [92..127] [128..159](MSB)

XRPC_ID_XLOAD (5)

Load a secure binary in xload format (payload)

param0 param1 param2 param3 param4
input Size Depends on xload cert type 0 0 0
output Depends on xload cert type 0 0 0 0
  • Param0 is the size of the xload payload, before encryption and formatting, not the size of the xload packet !
  • For zboot/cpu type xloads, param1 is the load address.
  • For xtasks and ucode type xloads, and from xos version >= D0, param1 is the dram controller to load the xtask too.
  • Otherwise param1 is reserved (should be 0).

XRPC_ID_XUNLOAD (17)

Unload an xtask image previously loaded (payload is the corresponding xunload file)

param0 param1 param2 param3 param4
input Size of xunload payload image number to unload 0 0 0
output 0 0 0 0 0
Personal tools