Skip to content

Latest commit

 

History

History
160 lines (124 loc) · 6.82 KB

index.md

File metadata and controls

160 lines (124 loc) · 6.82 KB

Mercury 5

The mercury 5 family seems to be targetted at dash recorders. So far all of the devices that have been obtained have been running something that seems to be based on eCOS and not Linux. It's cli looks like this

The mercury 5 seems to be very close to the infinity3.

Specs

  • Probably a 800MHz Cortex A7
  • 32KB Boot ROM
  • 128KB SRAM (based on where the boot rom sets the stack pointer)
  • MIPI DSI for an LCD panel
  • 1 or 2 MIPI CSI for cameras
  • Most if not all of the peripherals from the infinity3.

Boot pin strapping

mode pm_spi_hld pm_spi_sdo pm_spi_sck
SPI NAND (no ecc) 0 0 0
SLC NAND 0 0 1
UART 0 1 0
EMMC 0 1 1
SDIO 3.0 (SD card) 1 0 0
SPI NAND (ecc) 1 0 1
SPI Nor 1 1 0
USB device 1 1 1

Memory Map

A very rough memory map. Note that the register locations are in "RIU bank" format. They need to be shifted left once and have 0x1f000000 added to get the cpu address.

Chips

SSC8336

Probably the same chip as the SSC8336N but in QFP instead of QFN. Pinout seems to be identical.

  • Chip id: 0xd9

Known Devices

cheapiemirrordashcam

SSC8336N

  • Chip id: 0xee

Pinout

128 Pin QFP/QFN

  • this was sourced from a schematic and reverse engineering with a meter. Don't trust it!! *
# name # name
1 aud_lineout_lo 65 pada_ctrl
2 aud_miccm0 66 avdd_sdio_3318
3 aud_micin0 67 sd_d1
4 aud_vrm_adc 68 sd_d0
5 aud_vag 69 sd_clk
6 avdd_aud_3v3 70 sd_cmd
7 usb_dm1 71 sd_d3
8 usb_dp1 72 sd_d2
9 usb_dm 73 camera mipi?
10 usb_dp 74 camera mipi?
11 avdd_usb_3v3 75 camera mipi?
12 usb_cid 76 camera mipi?
13 vdd_1v0 - core 77 camera mipi?
14 poc_pwr_en 78 camera mipi?
15 reset 79 camera mipi?
16 vbus_5v 80 camera mipi?
17 pwr_key_det 81 camera mipi?
18 avdd_poc 82 camera mipi?
19 xtal_in_32k 83 vdd_1v0
20 avss_xtal_pos 84 psda/sr0_gpio1
21 xtal_out_32k 85 psck/sr0_gpio0
22 dvdd_nodie 86
23 avdd_nodie_3v3 87
24 sar_gpio0 88
25 sar_gpio1 89
26 sar_gpio3 90
27 pm_spi_cz 91 vddp_2_1v8/3v3
28 pm_spi_mosi 92
29 pm_spi_wpz 93
30 pm_spi_miso 94
31 pm_spi_ck 95
32 pm_spi_hold 96
33 gnd_efuse 97 ccir1_y2/sr1_d0p
34 pm_gpio8/dvfs1 98 ccir1_y3/sr1_d0n
35 pm_gpio6 99 ccir1_y4/sr1_ckp
36 pm_gpio5 100 ccir1_y5/sr1_ckn
37 pm_gpio4/sleep 101 ccir1_y6/sr1_d1p
38 pm_gpio2 102 ccir1_y7/sr1_d1n
39 pm_gpio0 103 avdd1p2_mipi
40 pm_uart_tx 104 lcd_hsync
41 pm_uart_rx 105 lcd_vsync
42 pm_irin 106 lcd_pclk
43 pm_sd_cdz 107 lcd_de
44 avddio_dram_1v8 108 mipi dsi d0p
45 vdd_1v0 109 mipi dsi d0n
46 avddio_dram_1v8 110 mipi dsi d1p
47 vddio_data_1v8 111 mipi dsi d1n
48 vddio_data_1v8 112 mipi dsi clkp
49 avdd_pll_3v3 113 mipi dsi clkn
50 dvdd_ddr_rx 114 mipi dsi d2p
51 dvdd_ddr_1v0 115 mipi dsi d2n
52 fuart_rx 116 mipi dsi d3p
53 fuart_tx 117 mipi dsi d3n
54 fuart_cts 118 lcd_d10
55 fuart_rts 119 lcd_d11
56 spi0_miso 120 lcd_d12
57 spi0_mosi 121 lcd_d13
58 spi0_ck 122 lcd_d14
59 spi0_cz 123 lcd_d15
60 spi0_cz1 124 vddp_3_3v3
61 i2c0_scl 125 avdd_mipi_3v3
62 i2c0_sda 126 avdd_xtal
63 vdd_1v0 127 xtal_in
64 vddp_1_3v3 128 xtal_out

Boot ROM Tag

This is slighly interesting. Presumably I3 is infinity3 so maybe this chip's ROM is a hacked up version of the infinity3 one?

MVX1##I3gb83f2cbCMN_ROM######XVM

Known Devices

70mai Midrive D06 drive recorder
70mai Midrive D08 Smart dash cam
Tips

  • Inside the camera, next to the battery connector there is a button that tells the camera to boot from SD card. This might be accessible externally but it's not much use without the UART.

  • A buildroot setup that creates bootable SD cards can be found here.

More info here

SSC8339D

Have a data brief but no real world devices yet.