Skip to content

M88CS8001 Sat Receiver

Jonathan Neuschäfer edited this page May 19, 2022 · 7 revisions

Satellite TV receivers

  • SoC: M88CS8001
    • CPU: 2x MIPS 24KE
    • Embedded RAM: 64 MiB
  • Mainboard: HS1168-8001-02(B)
  • Case: Probably sold under many names, such as:
    • PremiumX FTA 521S Digital HD receiver
  • I/O:
    • back: LNB IN, USB type A , HDMI, SCART, "coaxial", RS-232, DC 12V in
    • front: IR detector, 7-seg display, buttons (left, right, power), USB type A

UART access

Connector J3 connects the RS-232 port to the mainboard. The port runs at 12V and 115200 baud.

pin description
1 TX (0V/12V)
2 RX
3 GND

Firmware

Firmware is stored on a 4 MiB flash chip (EN25Q32).

start     end       description
00000000  00010000  bootloader
00010000  00010400  partition table

Partition table format

Excerpt of two different partition tables:

0x00010000  2A 5E 5F 5E 2A 44 4D 28 5E 6F 5E 29 00 00 3F 00 |*^_^*DM(^o^)..?.| \ 2A 5E 5F 5E 2A 44 4D 28 5E 6F 5E 29 00 00 3F 00 |*^_^*DM(^o^)..?.|
0x00010010  00 00 00 04 00 00 40 00 14 00 30 00 FC 00 01 00 |[email protected].....| / 00 00 00 04 00 00 40 00 15 00 30 00 FC 00 01 00 |[email protected].....|
0x00010020  00 04 00 00 BD 56 04 00 43 F1 C1 B4 30 30 30 30 |.....V..C...0000| \ 00 04 00 00 56 72 04 00 5E F3 FD 3F 30 30 30 30 |....Vr..^..?0000|
0x00010030  30 30 30 31 61 76 5F 63 70 75 00 00 E3 07 02 0E |0001av_cpu......| / 30 30 30 31 61 76 5F 63 70 75 00 00 E6 07 01 06 |0001av_cpu......|
0x00010040  0C 15 1D 00 00 00 00 00 00 00 00 00 89 00 01 00 |................| \ 0A 2A 38 00 00 00 00 00 00 00 00 00 89 00 01 00 |.*8.............|
0x00010050  BD 5A 04 00 30 46 03 00 4E 43 52 43 30 30 30 30 |.Z..0F..NCRC0000| / 56 76 04 00 54 53 03 00 4E 43 52 43 30 30 30 30 |Vv..TS..NCRC0000|
0x00010060  30 30 30 31 69 6D 67 00 00 00 00 00 E3 07 02 0E |0001img.........| \ 30 30 30 31 69 6D 67 00 00 00 00 00 E6 07 01 06 |0001img.........|
0x00010070  0C 11 29 00 00 00 00 00 00 00 00 00 88 00 01 00 |..).............| / 0A 29 29 00 00 00 00 00 00 00 00 00 88 00 01 00 |.)).............|
0x00010080  ED A0 07 00 18 24 23 00 4E 43 52 43 30 30 30 30 |.....$#.NCRC0000| \ AA C9 07 00 6C 42 21 00 4E 43 52 43 30 30 30 30 |....lB!.NCRC0000|

Details:

                                                                                 Partition table header
0x00010000  2A 5E 5F 5E 2A 44 4D 28 5E 6F 5E 29             |*^_^*DM(^o^)    |   Magic value
                                                00 00 3F 00 |            ..?.|   unknown
0x00010010  00 00 00 04                                     |....            |
                                                                                 Partition entry
                        00 00 40 00 14 00 30 00 FC 00 01 00 |    [email protected].....|   
0x00010020  00 04 00 00 BD 56 04 00                         |.....V..C...0000|
                                    43 F1 C1 B4             |        C...    |   CRC32 or 'NCRC'
                                                30 30 30 30 |            0000|   always '00000001'
0x00010030  30 30 30 31                                     |0001            |
                        61 76 5F 63 70 75 00 00             |    av_cpu..    |   partition name
                                                E3 07 02 0E |            ....|   unknown
0x00010040  0C 15 1D 00 00 00 00 00 00 00 00 00 89 00 01 00 |................|

Code (e.g. in img) is loaded at 0x80200000.

References

Clone this wiki locally