通过底层驱动破解正版地图

目录：/public/common/oak/csp/arm/.../src/drivers/sdcard/sdbusdriver

串口调试信息记录为：

slot0 is a SD20 DEVICE!!
pDevice->CachedRegisters.OCR[0x0]  = 0
pDevice->CachedRegisters.OCR[0x1]  = 128
pDevice->CachedRegisters.OCR[0x2]  = 255
pDevice->CachedRegisters.OCR[0x3]  = 128
CID 0x0 = 0
CID 0x1 = 147
CID 0x2 = 0
CID 0x3 = 71
CID 0x4 = 221
CID 0x5 = 24
CID 0x6 = 80
CID 0x7 = 128
CID 0x8 = 71
CID 0x9 = 50
CID 0xa = 48
CID 0xb = 68
CID 0xc = 83
CID 0xd = 68
CID 0xe = 83
CID 0xf = 3
++PDD_BATTERY_EOC
pDevice->RelativeAddress  36836
CSD 0x0 = 0
CSD 0x1 = 64
CSD 0x2 = 128
CSD 0x3 = 146
CSD 0x4 = 255
CSD 0x5 = 207
CSD 0x6 = 251
CSD 0x7 = 254
CSD 0x8 = 174
CSD 0x9 = 131
CSD 0xa = 90
CSD 0xb = 95
CSD 0xc = 50
CSD 0xd = 0
CSD 0xe = 38
CSD 0xf = 0
SDBusDriver: SD Memory Card supports high speed mode!
SDHCSetRate - Actual clock rate = 24000000
++OEMGpsRFPowerOn++
++OEMGpsRFPowerOff++
++PDD_BATTERY_EOC
++OEMGpsRFPowerOn++
MSIM: IM_ReadRegistry read KB 5
OVL successfully initialized!
Initial position not available
++PDD_BATTERY_EOC
AudioPowerOutput bPowerUp=1 m_iAudioPath=0
AudioPowerOutput bPowerUp=0 m_iAudioPath=0
WndProc MSG: WM_DESTROY
++PDD_BATTERY_EOC
++PDD_BATTERY_EOC
++PDD_BATTERY_EOC
++PDD_BATTERY_EOC

ClockInfo 0x00040174
Centrality NBOOT v5.0
Jan 10 2009 16:16:38
Windows CE Kernel for ARM (Thumb Enabled) Built on Jun 24 2004 at 18:25:00
ProcessorType=0926  Revision=4
sp_abt=ffff5000 sp_irq=ffff2800 sp_undef=ffffc800 OEMAddressTable = 8ca2506c
Sp=ffffc7cc
<<< OALIoCtlPostInit >>>
FMD: Manufacture ID = 0xad, Device ID = 0x76
FMD: IoClock = 124000000Hz, 8ns/clock, SM_WAIT = 0x1f77
FMD: tRP = 64ns, tWP = 64ns, tWB = 201ns, tWH = 32ns
<<< SET THE WATCHDOG FOR INIT! >>>
OEMIoControl: Unsupported Code 0x101008c - device 0x0101 func 35
OEMIoControl: Unsupported Code 0x1010104 - device 0x0101 func 65
use nocache
OEMIoControl: Unsupported Code 0x10100d0 - device 0x0101 func 52
OEMIoControl: Unsupported Code 0x10100f8 - device 0x0101 func 62
HWHnpStateProc: State transition from 0x0 to 0x2.
UFN_Init:g_IsActiveSync:0x1
UfnPdd_Init: is activesync function,create ResumeThread
+CHost::Initialize. Entry
CHW::Initialize->inten:0x73,intstatus:0x0
-CHost::Initialize. Success!!
OTG_IOCTRL::IOCTL_POWER_CAPABILITIES
Serial: port(2) intr (23)
Serial: port(4) intr (24)
Serial: port(5) intr (25)
+FM1182CTRL::DLL_PROCESS_ATTACH

 CSR_DllEntry DLL_PROCESS_ATTACH
CSR_Init: ok!
DeviceFolder::LoadDevice!Enumerate Found deprecated load instructions at (Drivers/BuiltIn/AFD). Driver cannot be unloaded.
++CSRControlThread 
--CSR_Open++ Enter:
UpdatePersistentStore: enter, hPort = 0xfb97732
++UpdatePersistentStore++ Succeed configure Bluetooth COM port
++PSConfig++ Enter 
PSConfig: open PSConfig.psr file,  line =  67
Debug Data p =  187550
Debug Data p =  187550
Debug Data p =  187550
Debug Data p =  187550
giPDUCount = 5
Hello Link Uninitialized
      6511 Send LE 0

>c0
>40 >41 > 0 >7e >da >dc >ed >ed >a9 >7a >c0

Read number =0x1
<c0

Read number =0xb
<40 <41 < 0 <7e <da <dc <ed <ed <a9 <7a <c0
Recv SYNC
      6577 Send LE 0

>c0
>40 >41 > 0 >7e >da >dc >ed >ed >a9 >7a >c0

Read number =0x1
<c0

Read number =0xb
<40 <41 < 0 <7e <ac <af <ef <ee <bb <84 <c0
Recv SYNC RESP
Link Initialized
      6630 Send LE 1

>c0
>40 >41 > 0 >7e >ac >af >ef >ee >bb >84 >c0

Read number =0x1
<c0

Read number =0xb
<40 <41 < 0 <7e <ad <ef <ac <ed <a1 <a6 <c0
Recv CONF
      6677 Send LE 2

>c0
>40 >41 > 0 >7e >ad >ef >ac >ed >a1 >a6 >c0

Read number =0x1
<c0

Read number =0xb
<40 <41 < 0 <7e <de <ad <d0 <d0 <83 <58 <c0
Recv CONF RESP
Link Active
++PSConfig++:: UBCSP_PACKET_SENT icount=0
++PSConfig++:: Link is now Established

GetSentState: enter
 GetSentState line =  489, giPDUIndex = 0
GetSentState line =  491

 giPDUCount = 5

 BCCMD COMMAND SENT  CMDID   = 0x3
++PSConfig++:: UBCSP_PACKET_SENT icount=1
      6800 Send LE 3

>c0
>40 >41 > 0 >7e >de >ad >d0 >d0 >83 >58 >c0

Read number =0x1
<c0

Read number =0xe
<db <dc <65 < 0 <da < f < 4 < 0 < 1 < 0 < 0 <11 <da <c0
:       6846         Recv SEQ 0 ACK 0
++PSConfig++:: UBCSP_PACKET_RECEIVED
>c0
++      6868 Send Seq 0 Ack 1
>c8 >82 > 1 >b4 > 2 > 0 > c > 0 > 1 > 0 > 3 >70 > 0 > 0 > 1 > 0 > 4 > 0 > 0 > 0 >10 > 0 >fd > 5 >6e > 0 > 6 > 0 >cf >56 >c0

Read number =0x1
<c0

Read number =0x27
<48 < 0 < 0 <b7 <5e <8c <c0
:       6929   ACK 1
<c0
<c9 <82 < 1 <b3 < 1 < 0 < c < 0 < 1 < 0 < 3 <70 < 0 < 0 < 1 < 0 < 4 < 0 < 0 < 0 <10 < 0 <fd < 5 <6e < 0 < 6 < 0 < 2 <2a <c0
:       6969         Recv SEQ 1 ACK 1
++PSConfig++:: UBCSP_PACKET_RECEIVED
++GetReceiveState++:: BCCMD COMMAND RECEIVED =.
++GetReceiveState++:: COMMAND COMPLETE =.
++PSConfig++:: UBCSP_PACKET_SENT icount=2

GetSentState: enter
 GetSentState line =  489, giPDUIndex = 1
GetSentState line =  491

 giPDUCount = 5

 BCCMD COMMAND SENT  CMDID   = 0x3
++PSConfig++:: UBCSP_PACKET_RECEIVED
++PSConfig++:: UBCSP_PACKET_SENT icount=3
>c0
++      7086 Send Seq 1 Ack 2
>d1 >22 > 1 > b > 2 > 0 > 9 > 0 > 2 > 0 > 3 >70 > 0 > 0 >be > 1 > 1 > 0 > 0 > 0 >d8 > 1 >b0 >4c >c0

Read number =0x1
<c0

Read number =0x21
<50 < 0 < 0 <af <53 <d1 <c0
:       7141   ACK 2
<c0
<d2 <22 < 1 < a < 1 < 0 < 9 < 0 < 2 < 0 < 3 <70 < 0 < 0 <be < 1 < 1 < 0 < 0 < 0 <d8 < 1 <51 <ca <c0
:       7175         Recv SEQ 2 ACK 2
++PSConfig++:: UBCSP_PACKET_RECEIVED
++GetReceiveState++:: BCCMD COMMAND RECEIVED =.
++GetReceiveState++:: COMMAND COMPLETE =.
++PSConfig++:: UBCSP_PACKET_SENT icount=4

GetSentState: enter
 GetSentState line =  489, giPDUIndex = 2
GetSentState line =  491

 giPDUCount = 5

 BCCMD COMMAND SENT  CMDID   = 0x3
++PSConfig++:: UBCSP_PACKET_RECEIVED
++PSConfig++:: UBCSP_PACKET_SENT icount=5
>c0
++      7292 Send Seq 2 Ack 3
>da >22 > 1 > 2 > 2 > 0 > 9 > 0 > 3 > 0 > 3 >70 > 0 > 0 >fe > 1 > 1 > 0 > 0 > 0 >80 >3e >da >a2 >c0

Read number =0x1
<c0

Read number =0x19
<58 < 0 < 0 <a7 <5a <47 <c0
:       7346   ACK 3
<c0
<db <dd <22 < 1 < 1 < 1 < 0 < 9 < 0 < 3 < 0 < 3 <70 < 0 < 0 <fe < 1
Read number =0x9
< 1 < 0 < 0 < 0 <80 <3e <2f < a <c0
:       7386         Recv SEQ 3 ACK 3
++PSConfig++:: UBCSP_PACKET_RECEIVED
++GetReceiveState++:: BCCMD COMMAND RECEIVED =.
++GetReceiveState++:: COMMAND COMPLETE =.
++PSConfig++:: UBCSP_PACKET_SENT icount=6

GetSentState: enter
 GetSentState line =  489, giPDUIndex = 3
GetSentState line =  491

 giPDUCount = 5

 BCCMD COMMAND SENT  CMDID   = 0x3
++PSConfig++:: UBCSP_PACKET_RECEIVED
++PSConfig++:: UBCSP_PACKET_SENT icount=7
>c0
++      7504 Send Seq 3 Ack 4
>e3 >42 > 1 >d9 > 2 > 0 > a > 0 > 4 > 0 > 3 >70 > 0 > 0 >b3 > 1 > 2 > 0 > 0 > 0 > 0 > 8 > 0 > 0 >ef >fe >c0

Read number =0x1
<c0

Read number =0x19
<60 < 0 < 0 <9f <dd <6f <c0
:       7560   ACK 4
<c0
<e4 <42 < 1 <d8 < 1 < 0 < a < 0 < 4 < 0 < 3 <70 < 0 < 0 <b3 < 1 < 2
Read number =0xa
< 0 < 0 < 0 < 0 < 8 < 0 < 0 <bd <95 <c0
:       7601         Recv SEQ 4 ACK 4
++PSConfig++:: UBCSP_PACKET_RECEIVED
++GetReceiveState++:: BCCMD COMMAND RECEIVED =.
++GetReceiveState++:: COMMAND COMPLETE =.
++PSConfig++:: UBCSP_PACKET_SENT icount=8

GetSentState: enter
 GetSentState line =  489, giPDUIndex = 4
GetSentState line =  491

 giPDUCount = 5

 BCCMD COMMAND SENT  CMDID   = 0x2
++PSConfig++:: UBCSP_PACKET_RECEIVED
++PSConfig++:: UBCSP_PACKET_SENT icount=9
>c0

packyload length = 18
++      7725 Send Seq 4 Ack 5
>ec >22 > 1 >f0 > 2 > 0 > 9 > 0 > 5 > 0 > 2 >40 > 0 > 0 > 0 > 0 > 0 > 0 > 0 > 0 > 0 > 0 >82 >c7 >c0

Read number =0x1
<c0

Read number =0x7
<68 < 0 < 0 <97 <d4 <f9 <c0
:       7780   ACK 5
++PSConfig++:: UBCSP_PACKET_SENT icount=10
delay = UBCSP_POLL_TIME_DELAY.
delay = UBCSP_POLL_TIME_DELAY.
delay = UBCSP_POLL_TIME_DELAY.
delay = UBCSP_POLL_TIME_DELAY.
delay = UBCSP_POLL_TIME_DELAY.
delay = UBCSP_POLL_TIME_DELAY.
delay = UBCSP_POLL_TIME_DELAY.
delay = UBCSP_POLL_TIME_DELAY.
delay = UBCSP_POLL_TIME_DELAY.
delay = UBCSP_POLL_TIME_DELAY.

Read number =0x1
<c0

Read number =0xb
<40 <41 < 0 <7e <da <dc <ed <ed <a9 <7a <c0
Recv SYNC
PEER RESET
PEER RESET
Hello Link Uninitialized
++PSConfig++:: uBCSP PEER RESET RECEIVED.
++PSConfig++:: EXIT_STATE.
EXITING
--CSR_Open++ Enter: g_hPort = fb97732
Entering VGD_Init
++OEMGpsRFPowerOn++
++OEMGpsRFPowerOff++
DeviceFolder::LoadDevice!Enumerate Found deprecated load instructions at (Drivers/BuiltIn/PPP). Driver cannot be unloaded.
MXC_Init: context Drivers/Active/30
Enter StartGpsApi...
RegQueryValueEx OK ! 1COM1:Createfile succeeded...
MXCThreadProc enter!
SDIO: dwSysIntr 20
SDHCSetRate - Actual clock rate = 24000000
v_pOSTRegs =0X00190000
*********PAGE ATTRIBUTE WAS C0020FF2, set to C0020FFA
AdvertisePowerInterface return 1!
*********lcd powerhandler

***********************
Haydom:****Into VIP****
Haydom:HalVpeInit
****InitChipByName:SAA7111A****
****DDVP_CamInit Succeed****
<<< STOP THE WATCHDOG FOR INIT! >>>
SDHCSetRate - Actual clock rate = 187500
ERROR: f:/wince500/public/common/oak/drivers/keybd/laymgr/laymgr.cpp line 3754: Keyboard: PDD 0 initialization failed
Lyg.p: Layout Manager successfully initialized to  2
Maximum Allowed Error 7:
AT_LCD::DrvEscape: IOCTL_POWER_CAPABILITIES
MXCThreadProc: Enviroment light turned into bright from dark
Enter StartGpsApi...
RegQueryValueEx OK ! 1COM1:Createfile succeeded...
GPSAPIExtension be called !
RegQueryValueEx dwSJEnable Failed!Enter StartGpsApi...
RegQueryValueEx OK ! 1COM1:Createfile succeeded...
SDHCSetRate - Actual clock rate = 187500
pDevice->CachedRegisters.OCR[0x0]  = 0
pDevice->CachedRegisters.OCR[0x1]  = 128
pDevice->CachedRegisters.OCR[0x2]  = 255
pDevice->CachedRegisters.OCR[0x3]  = 0
++PDD_BATTERY_EOC
slot0 is a SD20 DEVICE!!
pDevice->CachedRegisters.OCR[0x0]  = 0
pDevice->CachedRegisters.OCR[0x1]  = 128
pDevice->CachedRegisters.OCR[0x2]  = 255
pDevice->CachedRegisters.OCR[0x3]  = 128
CID 0x0 = 0
CID 0x1 = 147
CID 0x2 = 0
CID 0x3 = 71
CID 0x4 = 221
CID 0x5 = 24
CID 0x6 = 80
CID 0x7 = 128
CID 0x8 = 71
CID 0x9 = 50
CID 0xa = 48
CID 0xb = 68
CID 0xc = 83
CID 0xd = 68
CID 0xe = 83
CID 0xf = 3
pDevice->RelativeAddress  36836
CSD 0x0 = 0
CSD 0x1 = 64
CSD 0x2 = 128
CSD 0x3 = 146
CSD 0x4 = 255
CSD 0x5 = 207
CSD 0x6 = 251
CSD 0x7 = 254
CSD 0x8 = 174
CSD 0x9 = 131
CSD 0xa = 90
CSD 0xb = 95
CSD 0xc = 50
CSD 0xd = 0
CSD 0xe = 38
CSD 0xf = 0
SDBusDriver: SD Memory Card supports high speed mode!
SDHCSetRate - Actual clock rate = 24000000
++PDD_BATTERY_EOC
++OEMGpsRFPowerOn++
++OEMGpsRFPowerOff++
++OEMGpsRFPowerOn++
++PDD_BATTERY_EOC
Initial position not available
OVL successfully initialized!
MSIM: IM_ReadRegistry read KB 5
++PDD_BATTERY_EOC