1 |
<html> |
<html><head><title>Gavare's eXperimental Emulator: Experimenting with GXemul</title> |
2 |
<head><title>GXemul documentation: Experimenting with GXemul</title> |
<meta name="robots" content="noarchive,nofollow,noindex"></head> |
|
</head> |
|
3 |
<body bgcolor="#f8f8f8" text="#000000" link="#4040f0" vlink="#404040" alink="#ff0000"> |
<body bgcolor="#f8f8f8" text="#000000" link="#4040f0" vlink="#404040" alink="#ff0000"> |
4 |
<table border=0 width=100% bgcolor="#d0d0d0"><tr> |
<table border=0 width=100% bgcolor="#d0d0d0"><tr> |
5 |
<td width=100% align=center valign=center><table border=0 width=100%><tr> |
<td width=100% align=center valign=center><table border=0 width=100%><tr> |
6 |
<td align="left" valign=center bgcolor="#d0efff"><font color="#6060e0" size="6"> |
<td align="left" valign=center bgcolor="#d0efff"><font color="#6060e0" size="6"> |
7 |
<b>GXemul documentation:</b></font> |
<b>Gavare's eXperimental Emulator:</b></font><br> |
8 |
<font color="#000000" size="6"><b>Experimenting with GXemul</b> |
<font color="#000000" size="6"><b>Experimenting with GXemul</b> |
9 |
</font></td></tr></table></td></tr></table><p> |
</font></td></tr></table></td></tr></table><p> |
|
<!-- The first 10 lines are cut away by the homepage updating script. --> |
|
|
|
|
10 |
|
|
11 |
<!-- |
<!-- |
12 |
|
|
13 |
$Id: experiments.html,v 1.68 2005/05/27 07:29:23 debug Exp $ |
$Id: experiments.html,v 1.104 2006/10/07 01:40:33 debug Exp $ |
14 |
|
|
15 |
Copyright (C) 2003-2005 Anders Gavare. All rights reserved. |
Copyright (C) 2003-2006 Anders Gavare. All rights reserved. |
16 |
|
|
17 |
Redistribution and use in source and binary forms, with or without |
Redistribution and use in source and binary forms, with or without |
18 |
modification, are permitted provided that the following conditions are met: |
modification, are permitted provided that the following conditions are met: |
48 |
<ul> |
<ul> |
49 |
<li><a href="#hello">Hello world</a> |
<li><a href="#hello">Hello world</a> |
50 |
<li><a href="#expdevices">Experimental devices</a> |
<li><a href="#expdevices">Experimental devices</a> |
|
<li><a href="#experiments">Experiments with other kernels and guest OSes</a> |
|
51 |
</ul> |
</ul> |
52 |
|
|
53 |
|
|
65 |
|
|
66 |
<p> |
<p> |
67 |
<ul> |
<ul> |
68 |
<li>Build and install a cross-compiler for MIPS. |
<li>Build and install a cross-compiler for your chosen target. |
69 |
<li>Compile this hello world program, and run it in the emulator. |
GCC is usually a good compiler choice, because it is portable |
70 |
</ul> |
and in wide-spread use. (Other compilers should work too.) |
|
|
|
|
<p> |
|
|
<table border="0"><tr><td width="40"> </td><td> |
|
|
<pre> |
|
|
<font color=#f00000>/* Hello world for GXemul */ |
|
|
|
|
|
/* Note: The cast to a signed int causes the address to be sign-extended |
|
|
correctly to 0xffffffffb00000xx when compiled in 64-bit mode */ |
|
|
</font><font color=#a0a0a0>#define PUTCHAR_ADDRESS ((signed int)0xb0000000) |
|
|
#define HALT_ADDRESS ((signed int)0xb0000010) |
|
|
|
|
|
</font><font color=#c000c0>void </font><font color=#000000><a name="printchar">printchar</a>(</font><font color=#c000c0>char </font><font color=#000000>ch) |
|
|
{ |
|
|
*((</font><font color=#c000c0>volatile unsigned char </font><font color=#000000>*) PUTCHAR_ADDRESS) = ch; |
|
|
} |
|
|
|
|
|
</font><font color=#c000c0>void </font><font color=#000000><a name="halt">halt</a>(</font><font color=#c000c0>void</font><font color=#000000>) |
|
|
{ |
|
|
*((</font><font color=#c000c0>volatile unsigned char </font><font color=#000000>*) HALT_ADDRESS) = 0; |
|
|
} |
|
|
|
|
|
</font><font color=#c000c0>void </font><font color=#000000><a name="printstr">printstr</a>(</font><font color=#c000c0>char </font><font color=#000000>*s) |
|
|
{ |
|
|
</font><font color=#c000c0>while </font><font color=#000000>(*s) |
|
|
printchar(*s++); |
|
|
} |
|
|
|
|
|
</font><font color=#c000c0>void </font><font color=#000000>f(</font><font color=#c000c0>void</font><font color=#000000>) |
|
|
{ |
|
|
printstr(</font><font color=#00c000>"Hello world\n"</font><font color=#000000>); |
|
|
halt(); |
|
|
} |
|
|
</font></pre> |
|
|
</td></tr></table> |
|
|
|
|
|
<p> |
|
|
(This hello world program is available here as well: |
|
|
<a href="hello_mips.c">hello_mips.c</a>) |
|
|
|
|
|
<p> |
|
|
I recommend that you build a GCC cross compiler for the |
|
|
<b>mips64-unknown-elf</b> target, and install it. Other compilers could |
|
|
work too, but GCC is good because of its portability. Then try to compile |
|
|
the hello world program: |
|
|
<pre> |
|
|
$ <b>mips64-unknown-elf-gcc -O2 hello_mips.c -mips4 -mabi=64 -c</b> |
|
|
$ <b>mips64-unknown-elf-ld -Ttext 0xa800000000030000 -e f hello_mips.o -o hello_mips --oformat=elf64-bigmips</b> |
|
|
$ <b>file hello_mips</b> |
|
|
hello_mips: ELF 64-bit MSB mips-4 executable, MIPS R3000_BE, version 1 (SYSV), statically linked, not stripped |
|
|
$ <b>gxemul -q -E testmips hello_mips</b> |
|
|
Hello world |
|
|
|
|
|
$ <b>mips64-unknown-elf-gcc -O2 hello_mips.c -c</b> |
|
|
$ <b>mips64-unknown-elf-ld -Ttext 0x80030000 -e f hello_mips.o -o hello_mips</b> |
|
|
$ <b>file hello_mips</b> |
|
|
hello_mips: ELF 32-bit MSB mips-3 executable, MIPS R3000_BE, version 1 (SYSV), statically linked, not stripped |
|
|
$ <b>gxemul -q -E testmips hello_mips</b> |
|
|
Hello world |
|
|
</pre> |
|
|
|
|
|
<p> |
|
|
As you can see above, a GCC configured for mips64-unknown-elf can produce |
|
|
both 64-bit and 32-bit binaries. If you don't want to run the entire |
|
|
Hello World program, but want to single-step through the execution to |
|
|
learn more about how MIPS programs run, then add -V to the command line: |
|
|
|
|
|
<p> |
|
|
<pre> |
|
|
$ <b>gxemul -V -E testmips hello_mips</b> |
|
|
.. |
|
|
GXemul> <b>r</b> |
|
|
cpu0: pc = a800000000030078 <f> |
|
|
cpu0: hi = 0000000000000000 lo = 0000000000000000 |
|
|
cpu0: zr = 0000000000000000 at = 0000000000000000 |
|
|
cpu0: v0 = 0000000000000000 v1 = 0000000000000000 |
|
|
.. |
|
|
cpu0: gp = a8000000000780c0 sp = ffffffffa0007f00 |
|
|
cpu0: fp = 0000000000000000 ra = 0000000000000000 |
|
|
GXemul> <b>s 15</b> |
|
|
<f> |
|
|
a800000000030078: 67bdfff0 daddiu sp,sp,-16 |
|
|
a80000000003007c: 3c04a800 lui a0,0xa800 |
|
|
a800000000030080: 3c010003 lui at,0x3 |
|
|
a800000000030084: 64840000 daddiu a0,a0,0 |
|
|
a800000000030088: 642100b8 daddiu at,at,184 |
|
|
a80000000003008c: 0004203c dsll32 a0,a0,0 |
|
|
a800000000030090: 0081202d daddu a0,a0,at |
|
|
a800000000030094: ffbf0000 sd ra,0(sp) [0xffffffffa0007ef0, data=0x0000000000000000] |
|
|
a800000000030098: 0c00c00a jal 0xa800000000030028 <printstr> |
|
|
a80000000003009c: 00000000 (d) nop |
|
|
<printstr("Hello world\n",0,0,0,..)> |
|
|
<printstr> |
|
|
a800000000030028: 67bdfff0 daddiu sp,sp,-16 |
|
|
a80000000003002c: ffb00000 sd s0,0(sp) [0xffffffffa0007ee0, data=0x0000000000000000] |
|
|
a800000000030030: ffbf0008 sd ra,8(sp) [0xffffffffa0007ee8, data=0xa8000000000300a0] |
|
|
a800000000030034: 90820000 lbu v0,0(a0) [0xa8000000000300b8 = $LC0, data=0x48] |
|
|
a800000000030038: 00021600 sll v0,v0,24 |
|
|
GXemul> <b>print v0</b> |
|
|
v0 = 0x0000000048000000 |
|
|
GXemul> <b><blink>_</blink></b> |
|
|
</pre> |
|
71 |
|
|
72 |
<p> |
<p> |
73 |
The syntax of the single-step debugger shouldn't be too hard to grasp. |
<li>Compile the Hello World demo program for your chosen target, and run |
74 |
Type 's' to single-step one instruction. Just pressing enter after that |
it in the emulator. |
75 |
will repeat the 's' command. Type 'quit' to quit. |
</ul> |
|
|
|
|
<p> |
|
|
Hopefully this is enough to get you inspired. :-) |
|
|
|
|
|
|
|
|
|
|
|
<p><br> |
|
|
<h4>Hello World for GXemul's PPC mode</h4> |
|
76 |
|
|
77 |
GXemul also has an experimental PowerPC emulation mode. |
<p>The Hello World demo program is included in the GXemul source |
78 |
<a href="hello_ppc.c">hello_ppc.c</a> is similar to hello_mips.c, but |
code distribution, in the <a href="../demos/hello/"><tt>demos/hello/</tt></a> |
79 |
should be compiled and run as follows: |
subdirectory. The README files in the demo directories have several |
80 |
<p> |
examples of how the demo programs can be built. |
|
<pre> |
|
|
$ <b>ppc-unknown-elf-gcc -O2 hello_ppc.c -c</b> |
|
|
$ <b>ppc-unknown-elf-ld -e f hello_ppc.o -o hello_ppc</b> |
|
|
$ <b>file hello_ppc</b> |
|
|
hello_ppc: ELF 32-bit MSB executable, PowerPC or cisco 4500, |
|
|
version 1 (SYSV), statically linked, not stripped |
|
|
$ <b>gxemul -q -E testppc hello_ppc</b> |
|
|
Hello world |
|
|
</pre> |
|
81 |
|
|
82 |
<p> |
<p>Hopefully this is enough to get you inspired. :-) |
|
[ 2005-02-18: I haven't yet been able to build a GCC for ppc64 (only the |
|
|
binutils toolchain), because the gcc sources seem to include Linux header files |
|
|
that aren't present on my FreeBSD system. 32-bit PPC works ok, though. ] |
|
83 |
|
|
84 |
|
|
85 |
|
|
95 |
(just the CPU), or in a "test" mode where some simple devices are |
(just the CPU), or in a "test" mode where some simple devices are |
96 |
emulated. |
emulated. |
97 |
|
|
98 |
<p> |
<p>The test machines (<tt>testmips</tt>, <tt>testppc</tt>, etc) have the |
99 |
The "test" MIPS machine has the following experimental devices: |
following experimental devices: |
100 |
|
|
101 |
<p> |
<p> |
102 |
<center><table border="0" width="80%"> |
<center><table border="0" width="80%"> |
103 |
|
|
104 |
<tr> |
<tr> |
105 |
<td align="left" valign="top" width="200"> |
<td align="left" valign="top" width="200"> |
106 |
<b>cons:</b> |
<a name="expdevices_cons"><b><tt>cons</tt>:</b></a> |
107 |
<p>This is a simple console device, for writing |
<p>A simple console device, for writing |
108 |
characters to the controlling terminal. |
characters to the controlling terminal |
109 |
<p>Source code: <font color="#0000f0">devices/dev_cons.c</font> |
and receiving keypresses. |
110 |
|
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_cons.c</tt></font> |
111 |
|
<p>Include file: <font color="#0000f0"><tt>dev_cons.h</tt></font> |
112 |
<br>Default physical address:  <font color="#0000f0">0x10000000</font> |
<br>Default physical address:  <font color="#0000f0">0x10000000</font> |
113 |
</td> |
</td> |
114 |
<td align="left" valign="top" width="25"> </td> |
<td align="left" valign="top" width="25"> </td> |
119 |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
120 |
</tr> |
</tr> |
121 |
<tr> |
<tr> |
122 |
<td align="left" valign="top">0x0000</td> |
<td align="left" valign="top"><tt>0x00</tt></td> |
123 |
<td align="left" valign="top"> |
<td align="left" valign="top"> |
124 |
Read: <b>getchar()</b> (non-blocking)<br> |
Read: <b><tt>getchar()</tt></b> (non-blocking; returns |
125 |
Write: <b>putchar(ch)</b></td> |
<tt>0</tt> if no char was available)<br> |
126 |
|
Write: <b><tt>putchar(ch)</tt></b></td> |
127 |
</tr> |
</tr> |
128 |
<tr> |
<tr> |
129 |
<td align="left" valign="top">0x0010</td> |
<td align="left" valign="top"><tt>0x10</tt></td> |
130 |
<td align="left" valign="top">Read or write: <b>halt()</b><br> |
<td align="left" valign="top">Read or write: <b><tt>halt()</tt></b><br> |
131 |
(Useful for exiting the emulator.)</td> |
(Useful for exiting the emulator.)</td> |
132 |
</tr> |
</tr> |
133 |
</table> |
</table> |
140 |
|
|
141 |
<tr> |
<tr> |
142 |
<td align="left" valign="top"> |
<td align="left" valign="top"> |
143 |
<b>mp:</b> |
<a name="expdevices_mp"><b><tt>mp</tt>:</b></a> |
144 |
<p>This device controls the behaviour of CPUs in an emulated |
<p>This device controls the behaviour of CPUs in an emulated |
145 |
multi-processor system. |
multi-processor system. |
146 |
<p>Source code: <font color="#0000f0">devices/dev_mp.c</font> |
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_mp.c</tt></font> |
147 |
|
<p>Include file: <font color="#0000f0"><tt>dev_mp.h</tt></font> |
148 |
<br>Default physical address:  <font color="#0000f0">0x11000000</font> |
<br>Default physical address:  <font color="#0000f0">0x11000000</font> |
149 |
</td> |
</td> |
150 |
<td></td> |
<td></td> |
155 |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
156 |
</tr> |
</tr> |
157 |
<tr> |
<tr> |
158 |
<td align="left" valign="top">0x0000</td> |
<td align="left" valign="top"><tt>0x0000</tt></td> |
159 |
<td align="left" valign="top">Read: <b>whoami()</b>. |
<td align="left" valign="top">Read: <b><tt>whoami()</tt></b>. |
160 |
Returns the id of the CPU doing the read.</td> |
Returns the id of the CPU doing the read.</td> |
161 |
</tr> |
</tr> |
162 |
<tr> |
<tr> |
163 |
<td align="left" valign="top">0x0010</td> |
<td align="left" valign="top"><tt>0x0010</tt></td> |
164 |
<td align="left" valign="top">Read: <b>ncpus()</b>. |
<td align="left" valign="top">Read: <b><tt>ncpus()</tt></b>. |
165 |
Returns the number of CPUs in the system.</td> |
Returns the number of CPUs in the system.</td> |
166 |
</tr> |
</tr> |
167 |
<tr> |
<tr> |
168 |
<td align="left" valign="top">0x0020</td> |
<td align="left" valign="top"><tt>0x0020</tt></td> |
169 |
<td align="left" valign="top">Write: <b>startupcpu(i)</b>. |
<td align="left" valign="top">Write: <b><tt>startupcpu(i)</tt></b>. |
170 |
Starts CPU i. It begins execution at the address |
Starts CPU i. It begins execution at the address |
171 |
set by a write to startupaddr (see below).</td> |
set by a write to startupaddr (see below).</td> |
172 |
</tr> |
</tr> |
173 |
<tr> |
<tr> |
174 |
<td align="left" valign="top">0x0030</td> |
<td align="left" valign="top"><tt>0x0030</tt></td> |
175 |
<td align="left" valign="top">Write: <b>startupaddr(addr)</b>. |
<td align="left" valign="top">Write: <b><tt>startupaddr(addr)</tt></b>. |
176 |
Sets the starting address for CPUs.</td> |
Sets the starting address for CPUs.</td> |
177 |
</tr> |
</tr> |
178 |
<tr> |
<tr> |
179 |
<td align="left" valign="top">0x0040</td> |
<td align="left" valign="top"><tt>0x0040</tt></td> |
180 |
<td align="left" valign="top">Write: <b>pause_addr(addr)</b>. |
<td align="left" valign="top">Write: <b><tt>pause_addr(addr)</tt></b>. |
181 |
Sets the pause address. (TODO: This is not |
Sets the pause address. (NOTE: This is not |
182 |
used anymore?)</td> |
used anymore.)</td> |
183 |
</tr> |
</tr> |
184 |
<tr> |
<tr> |
185 |
<td align="left" valign="top">0x0050</td> |
<td align="left" valign="top"><tt>0x0050</tt></td> |
186 |
<td align="left" valign="top">Write: <b>pause_cpu(i)</b>. |
<td align="left" valign="top">Write: <b><tt>pause_cpu(i)</tt></b>. |
187 |
Stops all CPUs <i>except</i> CPU i.</td> |
Pauses all CPUs <i>except</i> CPU i.</td> |
188 |
</tr> |
</tr> |
189 |
<tr> |
<tr> |
190 |
<td align="left" valign="top">0x0060</td> |
<td align="left" valign="top"><tt>0x0060</tt></td> |
191 |
<td align="left" valign="top">Write: <b>unpause_cpu(i)</b>. |
<td align="left" valign="top">Write: <b><tt>unpause_cpu(i)</tt></b>. |
192 |
Unpauses all CPUs <i>except</i> CPU i.</td> |
Unpauses CPU i.</td> |
193 |
</tr> |
</tr> |
194 |
<tr> |
<tr> |
195 |
<td align="left" valign="top">0x0070</td> |
<td align="left" valign="top"><tt>0x0070</tt></td> |
196 |
<td align="left" valign="top">Write: <b>startupstack(addr)</b>. |
<td align="left" valign="top">Write: <b><tt>startupstack(addr)</tt></b>. |
197 |
Sets the startup stack address. (CPUs started with |
Sets the startup stack address. (CPUs started with |
198 |
startupcpu() above will have their stack pointer |
startupcpu() above will have their stack pointer |
199 |
set to this value.)</td> |
set to this value.)</td> |
200 |
</tr> |
</tr> |
201 |
<tr> |
<tr> |
202 |
<td align="left" valign="top">0x0080</td> |
<td align="left" valign="top"><tt>0x0080</tt></td> |
203 |
<td align="left" valign="top">Read: <b>hardware_random()</b>. |
<td align="left" valign="top">Read: <b><tt>hardware_random()</tt></b>. |
204 |
This produces a "random" number.</td> |
This produces a "random" number.</td> |
205 |
</tr> |
</tr> |
206 |
<tr> |
<tr> |
207 |
<td align="left" valign="top">0x0090</td> |
<td align="left" valign="top"><tt>0x0090</tt></td> |
208 |
<td align="left" valign="top">Read: <b>memory()</b>. |
<td align="left" valign="top">Read: <b><tt>memory()</tt></b>. |
209 |
Returns the number of bytes of RAM in the system.</td> |
Returns the number of bytes of RAM in the system.</td> |
210 |
</tr> |
</tr> |
211 |
|
<tr> |
212 |
|
<td align="left" valign="top"><tt>0x00a0</tt></td> |
213 |
|
<td align="left" valign="top">Write: <b><tt>ipi_one((nr << 16) + cpuid)</tt></b>. |
214 |
|
Sends IPI <tt>nr</tt> to a specific CPU.</td> |
215 |
|
</tr> |
216 |
|
<tr> |
217 |
|
<td align="left" valign="top"><tt>0x00b0</tt></td> |
218 |
|
<td align="left" valign="top">Write: <b><tt>ipi_many((nr << 16) + cpuid)</tt></b>. |
219 |
|
Sends IPI <tt>nr</tt> to all CPUs <i>except</i> |
220 |
|
the specified one.</td> |
221 |
|
</tr> |
222 |
|
<tr> |
223 |
|
<td align="left" valign="top"><tt>0x00c0</tt></td> |
224 |
|
<td align="left" valign="top">Read: <b><tt>ipi_read()</tt></b>. |
225 |
|
Returns the next pending IPI. 0 is returned if there is no |
226 |
|
pending IPI (so 0 shouldn't be used for valid IPIs). |
227 |
|
Hardware int 6 is deasserted when the IPI queue is empty. |
228 |
|
<br>Write: <b><tt>ipi_flush()</tt></b>. |
229 |
|
Clears the IPI queue, discarding any pending IPIs.</td> |
230 |
|
</tr> |
231 |
|
<tr> |
232 |
|
<td align="left" valign="top"><tt>0x00d0</tt></td> |
233 |
|
<td align="left" valign="top">Read: <b><tt>ncycles()</tt></b>. |
234 |
|
Returns approximately the number of cycles executed. |
235 |
|
Note: this value is not updated for every instruction, |
236 |
|
so it cannot be used for small measurements.</td> |
237 |
|
</tr> |
238 |
</table> |
</table> |
239 |
</td> |
</td> |
240 |
</tr> |
</tr> |
245 |
|
|
246 |
<tr> |
<tr> |
247 |
<td align="left" valign="top"> |
<td align="left" valign="top"> |
248 |
<b>fb:</b> |
<a name="expdevices_fb"><b><tt>fb</tt>:</b></a> |
249 |
<p>A simple linear framebuffer, for graphics output. |
<p>A simple linear framebuffer, for graphics output. |
250 |
640 x 480 pixels, 3 bytes per pixel (red, green, blue, 8 bits each). |
640 x 480 pixels, 3 bytes per pixel (red, green, blue, 8 bits each). |
251 |
<p>Source code: <font color="#0000f0">devices/dev_fb.c</font> |
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_fb.c</tt></font> |
252 |
|
<p>Include file: <font color="#0000f0"><tt>dev_fb.h</tt></font> |
253 |
<br>Default physical address:  <font color="#0000f0">0x12000000</font> |
<br>Default physical address:  <font color="#0000f0">0x12000000</font> |
254 |
</td> |
</td> |
255 |
<td></td> |
<td></td> |
260 |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
261 |
</tr> |
</tr> |
262 |
<tr> |
<tr> |
263 |
<td align="left" valign="top">...</td> |
<td align="left" valign="top"><tt>0x00000-</tt><br><tt>0xe0fff</tt></td> |
264 |
<td align="left" valign="top">Read: read pixel values. |
<td align="left" valign="top">Read: read pixel values. |
265 |
<br>Write: write pixel values.</td> |
<br>Write: write pixel values.</td> |
266 |
</tr> |
</tr> |
268 |
</td> |
</td> |
269 |
</tr> |
</tr> |
270 |
|
|
271 |
</table></center> |
<tr height="15"> |
272 |
|
<td height="15"> </td> |
273 |
<p> |
</tr> |
|
While these devices may resemble real-world hardware, they are |
|
|
intentionally made simpler to use. (An exception is the framebuffer; |
|
|
some machines actually have simple linear framebuffers like this.) |
|
|
|
|
|
<p> |
|
|
If the physical address is 0x10000000, then for MIPS that means that it |
|
|
can be accessed at virtual address 0xffffffffb0000000. (Actually it can be |
|
|
accessed at 0xffffffff90000000 too, but devices should usually be accessed |
|
|
in a non-cached manner.) |
|
|
|
|
|
<p> |
|
|
(When using the PPC test machine, "testppc", the addresses are |
|
|
0x10000000, 0x11000000 etc., so no need to add any virtual displacement.) |
|
|
|
|
|
<p> |
|
|
The <b>mp</b> device is agnostic when it comes to |
|
|
word-length. For example, when reading offset 0x0000 of the <b>mp</b> |
|
|
device, you may use any kind of read (an 8-bit read will work just as well |
|
|
as a 64-bit read, although the value will be truncated to 8 bits in the |
|
|
first case). |
|
|
|
|
|
<p> |
|
|
The <b>cons</b> device should be accessed using 8-bit reads and writes. |
|
|
Doing a getchar() (ie reading from offset 0x0000) returns 0x00 if no |
|
|
character was available. |
|
|
|
|
|
<p> |
|
|
On MIPS, the <b>cons</b> device is hardwired to interrupt 2 (the lowest |
|
|
hardware interrupt). Whenever a character is available, the interrupt is |
|
|
asserted. When there are no more available characters, the interrupt is |
|
|
deasserted. (Remember that the interrupt has to be enabled in the status |
|
|
register of the system coprocessor.) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<p><br> |
|
|
<a name="experiments"></a> |
|
|
<h3>Experiments with other kernels and guest OSes:</h3> |
|
|
|
|
|
<p> |
|
|
Free Operating system kernels and other test programs can be |
|
|
downloaded from various places on the Internet. Other kinds of software |
|
|
(non-Free), if obsolete enough (such as Ultrix or Windows NT), can |
|
|
sometimes be found in garbage containers, or perhaps be found for a cheap |
|
|
price on ebay or at a flea market. |
|
|
|
|
|
<p> |
|
|
<font color="#ff0000"> |
|
|
NOTE: This is <i>not</i> a list of kernels that work in the emulator. |
|
|
It is a list of kernels that I experiment with. |
|
|
</font> |
|
|
|
|
|
<p> |
|
|
For more information about which of these that actually work, read the |
|
|
<a href="intro.html#guestos">section in the Introduction chapter</a> |
|
|
that lists guest operating systems. If a system is not listed there, it |
|
|
probably doesn't work in GXemul. |
|
|
|
|
|
<p> |
|
|
<ul> |
|
|
<li>DECstation: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/pmax/">NetBSD/pmax</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmax/binary/kernel/netbsd-INSTALL.symbols.gz</a> |
|
|
<br>gunzip the files, and run the emulator with <b><tt>-E dec -e 3max -q -N -XY2</tt></b> |
|
|
for a graphical framebuffer console. Remove <b><tt>-XY2</tt></b> and <b><tt>-N</tt></b> to use serial (stdin/stdout) console. |
|
|
Read <a href="guestoses.html#netbsdinstall">this section</a> about how to install NetBSD/pmax onto a harddisk image. |
|
|
<p> |
|
|
<li><a href="http://www.openbsd.org/pmax.html">OpenBSD/pmax</a>: |
|
|
<br><a href="ftp://ftp.se.openbsd.org/pub/OpenBSD/2.8/pmax/bsd">ftp://ftp.se.openbsd.org/pub/OpenBSD/2.8/pmax/bsd</a> |
|
|
<br>This is an old OpenBSD kernel in a.out format. Try <b><tt>-E dec -e 3max</tt></b>. |
|
|
<br>Read <a href="guestoses.html#openbsdinstall">this section</a> about how to install OpenBSD/pmax onto a harddisk image. |
|
|
It's a bit more complicated than installing NetBSD/pmax, but |
|
|
it usually works. |
|
|
<p> |
|
|
<li>Linux for DECstation: |
|
|
<br>Read <a href="guestoses.html#declinux">this section</a> about how to run a Debian Linux install kernel. |
|
|
<br>Here are some older kernels (these don't support framebuffer, I think): |
|
|
<a href="http://www.xs4all.nl/~vhouten/mipsel/kernels.html">http://www.xs4all.nl/~vhouten/mipsel/kernels.html</a> |
|
|
<br>Note: Make sure you add <b><tt>-CR4400</tt></b> to the command line for |
|
|
R4000 kernels, as Linux doesn't autodetect CPU type at runtime. |
|
|
<br>Linux also doesn't detect automatically whether you are booting |
|
|
in graphical or serial console mode, so you need to add |
|
|
<tt><b>-o 'console=ttyS3'</b></tt> or similar for serial |
|
|
console mode. |
|
|
<p> |
|
|
<li><a href="http://www.cs.berkeley.edu/projects/sprite/retrospective.html">Sprite</a>: |
|
|
<br>The Unix Heritage Society (TUHS, <a href="http://www.tuhs.org">www.tuhs.org</a>) |
|
|
has preserved a copy of a harddisk image for a DECstation |
|
|
5000/200 (3MAX). |
|
|
<br>Read <a href="guestoses.html#sprite">this section</a> for more information |
|
|
about running this harddisk image in the emulator. |
|
|
<p> |
|
|
<li><a href="http://www-2.cs.cmu.edu/afs/cs/project/mach/public/www/mach.html">Mach</a>: |
|
|
<br>Important! Run <b><tt>./configure --caches; make</tt></b> |
|
|
<br>Also important: This is broken right now. :-( |
|
|
<br>Download <a href="http://lost-contact.mit.edu/afs/athena/user/d/a/daveg/Info/Links/Mach/src/release/">http://lost-contact.mit.edu/afs/athena/user/d/a/daveg/Info/Links/Mach/src/release</a>/<a href="http://lost-contact.mit.edu/afs/athena/user/d/a/daveg/Info/Links/Mach/src/release/pmax.tar.Z">pmax.tar.Z</a> |
|
|
<br><tt><b>tar xfvz pmax.tar.Z pmax_mach/special/mach.boot.MK83.STD+ANY</b></tt> |
|
|
<br><tt><b>gxemul -E dec -e 3max -X pmax_mach/special/mach.boot.MK83.STD+ANY</b></tt> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>SGI: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/sgimips/">NetBSD/sgimips</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP3x.symbols.gz</a> |
|
|
<br>gunzip, and try running with <b><tt>-E sgi -e ip32</tt></b>. |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sgimips/binary/kernel/netbsd-INSTALL32_IP2x.symbols.gz</a> |
|
|
<br>gunzip, and try running with <b><tt>-E sgi -e ip22</tt></b> (or <b><tt>ip24</tt></b> or <b><tt>ip20</tt></b>). |
|
|
<p> |
|
|
<li>Linux/SGI: |
|
|
<br>Some kernels are available here: <a href="http://www.linux-mips.org/~glaurung/">http://www.linux-mips.org/~glaurung/</a> |
|
|
<br>Try running with <b><tt>-E sgi -e ip32 -X</tt></b> for a graphical framebuffer, or |
|
|
<b><tt>-E sgi -e ip32 -o 'console=ttyS0'</tt></b> for serial console. |
|
|
<br>Adding <b><tt>-b</tt></b> (bintrans) might work sometimes. |
|
|
<br>(You need to add <b><tt>-CR5000</tt></b> if you're trying to run |
|
|
a kernel compiled for R5000, because Linux doesn't autodetect |
|
|
the CPU type at runtime.) |
|
|
<br>Also: <a href="http://www.tal.org/~milang/o2/kernels/">http://www.tal.org/~milang/o2/kernels</a>/<a href="http://home.tal.org/~milang/o2/kernels/vmlinux64-2.6.8.1-IP32">vmlinux64-2.6.8.1-IP32</a> |
|
|
<br>Try <b><tt>-E sgi -e ip32 -b -X -CR5000 vmlinux64-2.6.8.1-IP32</tt></b>. |
|
|
<br>And also some IP27 kernels: |
|
|
<a href="http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040428">http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040428</a> |
|
|
and |
|
|
<a href="http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040528.bz2">http://www.total-knowledge.com/progs/mips/kernels/vmlinux.ip27-20040528.bz2</a> |
|
|
(but unfortunately these lack symbols). |
|
|
<br>Try the IP27 kernels with <b><tt>-E sgi -e ip27 -t</tt></b>. |
|
|
<p> |
|
|
<li><a href="http://www.openbsd.org/sgi.html">OpenBSD/sgi</a>: |
|
|
<br><a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.7/sgi/bsd.rd">ftp://ftp.openbsd.org/pub/OpenBSD/3.7/sgi/bsd.rd</a> |
|
|
<br>More recent snapshots can be found at <a href="ftp://ftp.OpenBSD.org/pub/OpenBSD/snapshots/sgi/">ftp://ftp.OpenBSD.org/pub/OpenBSD/snapshots/sgi/</a>. |
|
|
<br>Try <b><tt>gxemul -b -E sgi -e ip32 bsd.rd</tt></b> |
|
|
<p> |
|
|
<li><a href="http://www.freebsd.org/platforms/mips.html">FreeBSD/MIPS</a>: |
|
|
I don't think public binary snapshots are available yet. |
|
|
<p> |
|
|
<li>arcdiag: |
|
|
<br>The NetBSD people have also made available an "arcdiag" for SGI-IP22: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/sgimips/arcdiag.ip22">ftp://ftp.netbsd.org/pub/NetBSD/arch/sgimips/arcdiag.ip22</a> |
|
|
<br>Try running <tt><b>gxemul -E sgi -e ip22 -x arcdiag.ip22</b></tt>. |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>ARC: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/arc/">NetBSD/arc</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/arc/binary/kernel/netbsd-RAMDISK.symbols.gz</a> |
|
|
<br>gunzip, and try with <b><tt>-E arc -e rd94</tt></b>. |
|
|
<br>(You may also try other ARC models.) |
|
|
<br>Read <a href="guestoses.html#netbsdarcinstall">this section</a> about how |
|
|
to install NetBSD/arc 1.6.2 onto a harddisk image. |
|
|
<br>(NetBSD/arc 2.0 doesn't work with disk images yet in GXemul.) |
|
|
<p> |
|
|
<li><a href="http://www.openbsd.org/arc.html">OpenBSD/arc</a>: |
|
|
<br><a href="ftp://ftp.se.openbsd.org/pub/OpenBSD/2.3/arc/bsd.rd.elf">ftp://ftp.se.openbsd.org/pub/OpenBSD/2.3/arc/bsd.rd.elf</a> |
|
|
<br>Try running with <b><tt>-X -E arc -e pica</tt></b> or <b><tt>-X -E arc -e tyne</tt></b>. |
|
|
<br>Read <a href="guestoses.html#openbsdarcinstall">this section</a> about how |
|
|
to install OpenBSD/arc onto a harddisk image. |
|
|
<p> |
|
|
<li>Linux: |
|
|
<br><a href="ftp://ftp.linux-mips.org/pub/linux/mips/mipsel-linux/boot/vmlinux-m700-2.1.131.gz">ftp://ftp.linux-mips.org/pub/linux/mips/mipsel-linux/boot/vmlinux-m700-2.1.131.gz</a> |
|
|
<br>gunzip, and run with <b><tt>-v -J -X -N -E arc -e m700</tt></b> (Olivetti M700) |
|
|
<br>(This probably doesn't work anymore.) |
|
|
<p> |
|
|
<li>Pandora: |
|
|
<br><a href="ftp://ftp.linux-mips.org/pub/linux/mips/ancient/milo/">ftp://ftp.linux-mips.org/pub/linux/mips/ancient/milo</a>/<a href="ftp://ftp.linux-mips.org/pub/linux/mips/ancient/milo/milo-0.27.1.tar.gz">milo-0.27.1.tar.gz</a> |
|
|
<br>A generic test/diagnostics program for ARC-based machines. |
|
|
<br>Run with <b><tt>-E arc -e r94 milo-0.27.1/pandora</tt></b> |
|
|
<p> |
|
|
<li>arcdiag: |
|
|
<br>Precompiled binary:<a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/arc/arcdiag">ftp://ftp.netbsd.org/pub/NetBSD/arch/arc/arcdiag</a> |
|
|
<br>(alternative: <a href="http://www.sensi.org/~alec/mips/arcdiag">http://www.sensi.org/~alec/mips/arcdiag</a>) |
|
|
<br>A generic test/diagnostics program for ARC-based machines. |
|
|
<br>Run with <b><tt>-E arc -e pica arcdiag</tt></b> (or some other ARC mode). |
|
|
<br>Example arcdiag output (from real machines): |
|
|
<br><a href="http://mail-index.netbsd.org/port-arc/2000/10/18/0001.html">http://mail-index.netbsd.org/port-arc/2000/10/18/0001.html</a> (Olivetti M700-10) |
|
|
<br><a href="http://www.sensi.org/~alec/mips/arcdiag.txt">http://www.sensi.org/~alec/mips/arcdiag.txt</a> (PICA-61) |
|
|
<br><a href="http://mail-index.netbsd.org/port-arc/2000/10/14/0000.html">http://mail-index.netbsd.org/port-arc/2000/10/14/0000.html</a> (Deskstation Tyne) |
|
|
<br><a href="http://mail-index.netbsd.org/port-arc/2004/02/01/0001.html">http://mail-index.netbsd.org/port-arc/2004/02/01/0001.html</a> (NEC RISCserver 4200) |
|
|
<br><a href="http://mirror.aarnet.edu.au/pub/NetBSD/misc/chs/arcdiag.out">http://mirror.aarnet.edu.au/pub/NetBSD/misc/chs/arcdiag.out</a> (NEC-R96) |
|
|
<br>For some machines, such as <tt><b>-e pica</b></tt>, you can |
|
|
add <b><tt>-X</tt></b> to boot with a graphical VGA-style |
|
|
console. This however is probably a bit unstable and/or |
|
|
broken right now. |
|
|
<p> |
|
|
<li>Windows NT: |
|
|
<br>Put a "Windows NT 4.0 for MIPS" CDROM (or similar) into |
|
|
your CDROM drive. (On FreeBSD systems, it is usually called |
|
|
/dev/cd0c or similar. Change that to whatever the CDROM |
|
|
is called on your system, or the name of a raw .iso image.) |
|
|
<br>I have tried this with the Swedish version, but it might |
|
|
work with other versions too.<pre> |
|
|
$ <b><tt>dd if=/dev/zero of=winnt_test.img bs=1024 count=1 seek=999000</tt></b> |
|
|
$ <b><tt>gxemul -X -b -Earc -epica -d winnt_test.img -d bc6:/dev/cd0c -j MIPS\\ARCINST</tt></b> |
|
|
$ <b><tt>gxemul -X -b -Earc -epica -d winnt_test.img -d bc6:/dev/cd0c -j MIPS\\SETUPLDR</tt></b> |
|
|
</pre> <br><tt>ARCINST</tt> tries to prepare the disk image for installation. (It <i>almost</i> works.) |
|
|
<br><tt>SETUPLDR</tt> should load some drivers from the cdrom, but then it crashes with a bluescreen. |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>HPCmips: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/hpcmips/">NetBSD/hpcmips</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/installation/">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/installation</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/installation/netbsd.gz">netbsd.gz</a> |
|
|
<br>Try <b><tt>gxemul -X -b -E hpc -e mobilepro770 netbsd</tt></b> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/binary/kernel/netbsd-GENERIC.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/hpcmips/binary/kernel/netbsd-GENERIC.gz</a> |
|
|
<br>Try <b><tt>gxemul -X -b -E hpc -e mobilepro770 netbsd-GENERIC</tt></b> |
|
|
<p> |
|
|
<li>Linux for BE300: |
|
|
<br><a href="http://www.linux4.be/2004/linux4be20040908.zip">http://www.linux4.be/2004/linux4be20040908.zip</a> |
|
|
<br>Try <b><tt>gxemul -X -b -E hpc -e be300 vmlinux</tt></b> |
|
|
<p> |
|
|
<li>Linux for Agenda VR3: |
|
|
<br>Download <a href="http://agenda-snow.sourceforge.net/kernel-old-versions/binary/">http://agenda-snow.sourceforge.net/kernel-old-versions/binary</a>/<a href="http://agenda-snow.sourceforge.net/kernel-old-versions/binary/root1.2.6.kernel-8.00">root1.2.6.kernel-8.00</a> |
|
|
<br>and <a href="http://vr3.uid0.sk/cd/Software/VR3_Distributions/H2O/">http://vr3.uid0.sk/cd/Software/VR3_Distributions/H2O</a>/<a href="http://vr3.uid0.sk/cd/Software/VR3_Distributions/H2O/root1.2.6.cramfs">root1.2.6.cramfs</a>. |
|
|
<br>(or <a href="http://www.ipsec.info/~www/agenda/dream-1-noxip.cramfs">http://www.ipsec.info/~www/agenda/dream-1-noxip.cramfs</a>) |
|
|
<br>Try <b><tt>gxemul -b -X -E hpc -e vr3 -x 0xbf200000:root1.2.6.cramfs 0xbf000000:0:0xbf0005e0:root1.2.6.kernel-8.00</tt></b> |
|
|
<br>(or replace root1.2.6.cramfs with dream-1-noxip.cramfs) |
|
|
<br>Remove <b><tt>-X</tt></b> to try with serial console instead of X, and |
|
|
remove <b><tt>-b</tt></b> to try without (old) bintrans. |
|
|
<br>Add <b><tt>-o 'init=/bin/sh'</tt></b> to boot into a single-user shell. |
|
|
<br>Add <b><tt>-o 'init=/sbin/restore_defaults'</tt></b> to run |
|
|
a <tt>/sbin/restore_defaults</tt> (attempt to initialize the |
|
|
flash memory). |
|
|
<p> |
|
|
<li>Linux for MobilePro etc.: |
|
|
<br><a href="http://pc1.peanuts.gr.jp/~kei/Hard-Float/Kernels/">http://pc1.peanuts.gr.jp/~kei/Hard-Float/Kernels/</a> |
|
|
<br>Uncompress the archive to get a kernel, vmlinux-800 for example. |
|
|
<br>Try <b><tt>./gxemul -b -X -o 'root=/dev/hda1' -d r:disk.img -d r:disk.img -Ehpc -e mobilepro800 vmlinux-800</tt></b> |
|
|
<br>where disk.img is an ext2fs filesystem with contents from |
|
|
<a href="http://pc1.peanuts.gr.jp/~kei/Hard-Float/Miniroots/miniroot-20010330.tar.bz2">http://pc1.peanuts.gr.jp/~kei/Hard-Float/Miniroots/miniroot-20010330.tar.bz2</a> |
|
|
<br>(Note the double disk arguments.) |
|
|
<br>Note 2: This doesn't work yet. |
|
|
<p> |
|
|
<li><a href="http://www.disorder.ru/openbsd/be300/">OpenBSD/be300</a>: |
|
|
<br><a href="http://www.disorder.ru/openbsd/be300/bsd.rd">http://www.disorder.ru/openbsd/be300/bsd.rd</a> |
|
|
<br>Try <b><tt>gxemul -X -b -E hpc -e be300 bsd.rd</tt></b> |
|
|
<br>Note: -b might be buggy, so you can try without that if you want to. |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>Cobalt: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/cobalt/">NetBSD/cobalt</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6.2/cobalt/binary/kernel/netbsd-GENERIC.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6.2/cobalt/binary/kernel/netbsd-GENERIC.gz</a> |
|
|
<br>gunzip, and run with <b><tt>-E cobalt</tt></b> |
|
|
<br>(Or read <a href="guestoses.html#netbsdcobaltinstall">this |
|
|
section</a> on how to install NetBSD/cobalt onto a harddisk image.) |
|
|
<p> |
|
|
<li>Linux: |
|
|
<br><a href="http://people.debian.org/~pm/mips-cobalt/nfsroot/vmlinux_raq-2800.gz">http://people.debian.org/~pm/mips-cobalt/nfsroot/vmlinux_raq-2800.gz</a> |
|
|
<br>gunzip, and run with <b><tt>-E cobalt</tt></b> |
|
|
<p> |
|
|
<li>CoLo: |
|
|
<br><a href="http://www.colonel-panic.org/cobalt-mips/colo/colo-1.19.tar.gz">http://www.colonel-panic.org/cobalt-mips/colo/colo-1.19.tar.gz</a> |
|
|
<br><tt><b>tar zxvf colo-1.19.tar.gz colo-1.19/binaries/colo-rom-image.bin</b></tt> |
|
|
<br><tt><b>gxemul -Q -Ecobalt -v 0xbfc00000:colo-1.19/binaries/colo-rom-image.bin</b></tt> |
|
|
<br>(This doesn't work yet.) |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>Playstation 2: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/playstation2/">NetBSD/playstation2</a>: |
|
|
<br>NetBSD/playstation2 snapshot kernels are available here: (RAMDISK and GENERIC) |
|
|
<br><a href="ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/installation/netbsd.gz">ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/installation/netbsd.gz</a> |
|
|
<br><a href="ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/binary/kernel/netbsd-GENERIC.gz">ftp://ftp.NetBSD.org/pub/NetBSD/arch/playstation2/snapshot/20020327/binary/kernel/netbsd-GENERIC.gz</a> |
|
|
<br>Try running with <b><tt>-X -E playstation2</tt></b> (<b><tt>-X</tt></b> is required, for the framebuffer). |
|
|
|
|
|
<p> |
|
|
<li>Linux: |
|
|
<br>A Linux kernel (2.2.21-pre1-xr7) is available from |
|
|
<a href="http://playstation2-linux.com/projects/xrhino-kernel/">http://playstation2-linux.com/projects/xrhino-kernel/</a> |
|
|
<br>Try running with <b><tt>-X -E playstation2</tt></b> (<b><tt>-X</tt></b> is required, for the framebuffer). |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
</ul> |
|
|
|
|
|
<p> |
|
|
The following work even less than the ones listed above: |
|
|
|
|
|
<p> |
|
|
<ul> |
|
|
<li>Sony NeWS: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/newsmips/">NetBSD/newsmips</a>: |
|
|
<br>A NetBSD/newsmips kernel and corresponding symbols are |
|
|
available here: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.gz</a> |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.symbols.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/newsmips/binary/kernel/netbsd-INSTALL.symbols.gz</a> |
|
|
<br>Try running with <b><tt>-E sonynews</tt></b>. |
|
|
<br>There's also a boot floppy available, but the emulator currently |
|
|
doesn't support booting from it: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6/newsmips/installation/floppy/boot.fs">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-1.6/newsmips/installation/floppy/boot.fs</a> |
|
|
</ul> |
|
|
</li> |
|
274 |
|
|
275 |
<p> |
<tr> |
276 |
|
<td align="left" valign="top"> |
277 |
|
<a name="expdevices_disk"><b><tt>disk</tt>:</b></a> |
278 |
|
<p>Disk controller, which can read from and write |
279 |
|
to emulated IDE disks. It does not use interrupts; read and |
280 |
|
write operations finish instantaneously. |
281 |
|
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_disk.c</tt></font> |
282 |
|
<p>Include file: <font color="#0000f0"><tt>dev_disk.h</tt></font> |
283 |
|
<br>Default physical address:  <font color="#0000f0">0x13000000</font> |
284 |
|
</td> |
285 |
|
<td></td> |
286 |
|
<td align="left" valign="top"> |
287 |
|
<table border="0"> |
288 |
|
<tr> |
289 |
|
<td align="left" valign="top"><i><u>Offset:</u></i> </td> |
290 |
|
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
291 |
|
</tr> |
292 |
|
<tr> |
293 |
|
<td align="left" valign="top"><tt>0x0000</tt></td> |
294 |
|
<td align="left" valign="top">Write: Set the offset (in bytes) from the beginning |
295 |
|
of the disk image. This offset will be used for the next read/write operation.</td> |
296 |
|
</tr> |
297 |
|
<tr> |
298 |
|
<td align="left" valign="top"><tt>0x0010</tt></td> |
299 |
|
<td align="left" valign="top">Write: Select the IDE ID to be used in the next |
300 |
|
read/write operation.</td> |
301 |
|
</tr> |
302 |
|
<tr> |
303 |
|
<td align="left" valign="top"><tt>0x0020</tt></td> |
304 |
|
<td align="left" valign="top">Write: Start a read or write operation. |
305 |
|
(Writing <tt>0</tt> means a Read operation, a <tt>1</tt> means a |
306 |
|
Write operation.)</td> |
307 |
|
</tr> |
308 |
|
<tr> |
309 |
|
<td align="left" valign="top"><tt>0x0030</tt></td> |
310 |
|
<td align="left" valign="top">Read: Get status of the last operation. |
311 |
|
(Status 0 means failure, non-zero means success.)</td> |
312 |
|
</tr> |
313 |
|
<tr> |
314 |
|
<td align="left" valign="top"><tt>0x4000-</tt><br><tt>0x41ff</tt> </td> |
315 |
|
<td align="left" valign="top">Read/Write: 512 bytes data buffer.</td> |
316 |
|
</tr> |
317 |
|
</table> |
318 |
|
</td> |
319 |
|
</tr> |
320 |
|
|
321 |
<li><a href="http://www.meshcube.org/">MeshCube</a>: |
<tr height="15"> |
322 |
<ul> |
<td height="15"> </td> |
323 |
<li>Linux: |
</tr> |
|
<br>A Linux kernel is available from |
|
|
<a href="http://www.meshcube.org/feed/stable/">http://www.meshcube.org/feed/stable</a>/<a href="http://www.meshcube.org/feed/stable/kernel-image-mtx_2.4.24-3_mipsel.ipk">kernel-image-mtx_2.4.24-3_mipsel.ipk</a> |
|
|
<br>(This is a Debian package, you can use <tt><b>ar</b></tt> and |
|
|
<tt><b>tar</b></tt> to extract kernel.img from it.) |
|
|
<br>Try running with <b><tt>-E meshcube 0x80800000:kernel.img</tt></b>. |
|
|
</ul> |
|
|
</li> |
|
324 |
|
|
325 |
<p> |
<tr> |
326 |
|
<td align="left" valign="top"> |
327 |
|
<a name="expdevices_ether"><b><tt>ether</tt>:</b></a> |
328 |
|
<p>A simple ethernet controller, enough to send |
329 |
|
and receive packets on a simulated network. |
330 |
|
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_ether.c</tt></font> |
331 |
|
<p>Include file: <font color="#0000f0"><tt>dev_ether.h</tt></font> |
332 |
|
<br>Default physical address:  <font color="#0000f0">0x14000000</font> |
333 |
|
</td> |
334 |
|
<td></td> |
335 |
|
<td align="left" valign="top"> |
336 |
|
<table border="0"> |
337 |
|
<tr> |
338 |
|
<td align="left" valign="top"><i><u>Offset:</u></i> </td> |
339 |
|
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
340 |
|
</tr> |
341 |
|
<tr> |
342 |
|
<td align="left" valign="top"><tt>0x0000-</tt><br><tt>0x3fff</tt></td> |
343 |
|
<td align="left" valign="top">Read/write buffer for the packet to be sent/received.</td> |
344 |
|
</tr> |
345 |
|
<tr> |
346 |
|
<td align="left" valign="top"><tt>0x4000</tt></td> |
347 |
|
<td align="left" valign="top">Read: status word, one or more of these: |
348 |
|
<br><tt>0x01</tt> = something was received (because of |
349 |
|
the last command) |
350 |
|
<br><tt>0x02</tt> = more packets are available |
351 |
|
<br><i>NOTE:</i> Whenever the status word is non-zero, |
352 |
|
an interrupt is asserted. Reading the status word |
353 |
|
clears it, and deasserts the interrupt.</td> |
354 |
|
</tr> |
355 |
|
<tr> |
356 |
|
<td align="left" valign="top"><tt>0x4010</tt></td> |
357 |
|
<td align="left" valign="top">Read: get the Length of the received packet |
358 |
|
<br>Write: set the Length of the next packet to transmit</td> |
359 |
|
</tr> |
360 |
|
<tr> |
361 |
|
<td align="left" valign="top"><tt>0x4020</tt></td> |
362 |
|
<td align="left" valign="top">Write: command: |
363 |
|
<br><tt>0x00:</tt> receive a packet |
364 |
|
<br><tt>0x01:</tt> send a packet</td> |
365 |
|
</tr> |
366 |
|
</table> |
367 |
|
</td> |
368 |
|
</tr> |
369 |
|
|
370 |
<li><a href="http://www.seattlewireless.net/index.cgi/NetgearWG602">NetGear WG602</a>: |
<tr height="15"> |
371 |
<ul> |
<td height="15"> </td> |
372 |
<li>Linux: |
</tr> |
|
<br>A Linux kernel is available from |
|
|
<a href="ftp://downloads.netgear.com/files/wg602_v1715.zip">ftp://downloads.netgear.com/files/wg602_v1715.zip</a> |
|
|
<br>(Unzip wg602_v1715.zip to get WG602_V1715.img.) |
|
|
<br>Try running with <b><tt>-E netgear 0xbfc80000:0x40:WG602_V1715.img</tt></b>. |
|
|
<br>(It takes some time to decompress the kernel, so be patient.) |
|
|
<br>(This doesn't really work yet.) |
|
|
</ul> |
|
|
</li> |
|
373 |
|
|
374 |
</ul> |
<tr> |
375 |
|
<td align="left" valign="top"> |
376 |
|
<a name="expdevices_rtc"><b><tt>rtc</tt>:</b></a> |
377 |
|
<p>A Real-Time Clock, used to retrieve the current time |
378 |
|
and to cause periodic interrupts. |
379 |
|
<p>Source code: <font color="#0000f0"><tt>src/devices/dev_rtc.c</tt></font> |
380 |
|
<p>Include file: <font color="#0000f0"><tt>dev_rtc.h</tt></font> |
381 |
|
<br>Default physical address:  <font color="#0000f0">0x15000000</font> |
382 |
|
</td> |
383 |
|
<td></td> |
384 |
|
<td align="left" valign="top"> |
385 |
|
<table border="0"> |
386 |
|
<tr> |
387 |
|
<td align="left" valign="top"><i><u>Offset:</u></i> </td> |
388 |
|
<td align="left" valign="top"><i><u>Effect:</u></i></td> |
389 |
|
</tr> |
390 |
|
<tr> |
391 |
|
<td align="left" valign="top"><tt>0x0000</tt></td> |
392 |
|
<td align="left" valign="top">Read or Write: Trigger a clock update (a gettimeofday() on the host).</td> |
393 |
|
</tr> |
394 |
|
<tr> |
395 |
|
<td align="left" valign="top"><tt>0x0010</tt></td> |
396 |
|
<td align="left" valign="top">Read: Seconds since 1st January 1970</td> |
397 |
|
</tr> |
398 |
|
<tr> |
399 |
|
<td align="left" valign="top"><tt>0x0020</tt></td> |
400 |
|
<td align="left" valign="top">Read: Microseconds</td> |
401 |
|
</tr> |
402 |
|
<tr> |
403 |
|
<td align="left" valign="top"><tt>0x0100</tt></td> |
404 |
|
<td align="left" valign="top">Read: Get the current |
405 |
|
timer interrupt frequency.<br>Write: Set the timer |
406 |
|
interrupt frequency. (Writing 0 disables the timer.)</td> |
407 |
|
</tr> |
408 |
|
<tr> |
409 |
|
<td align="left" valign="top"><tt>0x0110</tt></td> |
410 |
|
<td align="left" valign="top">Read or Write: Acknowledge |
411 |
|
one timer interrupt. (Note that if multiple interrupts |
412 |
|
are pending, only one is acknowledged.)</td> |
413 |
|
</tr> |
414 |
|
</table> |
415 |
|
</td> |
416 |
|
</tr> |
417 |
|
|
418 |
<p> |
</table></center> |
|
The following don't work at all, actually, because the PPC and SPARC |
|
|
modes are just skeletons so far. |
|
419 |
|
|
420 |
<p> |
<p> |
421 |
<ul> |
While these devices may resemble real-world hardware, they are |
422 |
|
intentionally made simpler to use. (An exception is the framebuffer; |
423 |
<li>Walnut (evbppc): |
some machines actually have simple linear framebuffers like this.) |
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/evbppc/">NetBSD/evbppc</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/evbppc/binary/kernel/netbsd-INSTALL_WALNUT.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/evbppc/binary/kernel/netbsd-INSTALL_WALNUT.gz</a> |
|
|
<br>gunzip, and try the following: |
|
|
<br><tt><b>gxemul -E walnut -v -t netbsd-INSTALL_WALNUT</b></tt> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>Artesyn's PM/PPC board (pmppc): |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/pmppc/">NetBSD/pmppc</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmppc/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/pmppc/binary/kernel/netbsd-INSTALL.gz</a> |
|
|
<br>gunzip, and try the following: |
|
|
<br><tt><b>gxemul -E pmppc netbsd-INSTALL</b></tt> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>Motorola Sandpoint (sandpoint): |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/sandpoint/">NetBSD/sandpoint</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sandpoint/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sandpoint/binary/kernel/netbsd-INSTALL.gz</a> |
|
|
<br>gunzip, and try the following: |
|
|
<br><tt><b>gxemul -E sandpoint -v -t netbsd-INSTALL</b></tt> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>PReP: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/prep/">NetBSD/prep</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/prep/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/prep/binary/kernel/netbsd-INSTALL.gz</a> |
|
|
<br>gunzip, and try the following: |
|
|
<br><tt><b>gxemul -E prep -v -t netbsd-INSTALL</b></tt> |
|
|
<p> |
|
|
<li>Linux: |
|
|
<br><a href="http://jocelyn.mayer.free.fr/qemu-ppc/linux_images/2.4.25-PPC/vmlinux">http://jocelyn.mayer.free.fr/qemu-ppc/linux_images/2.4.25-PPC/vmlinux</a> |
|
|
<br><tt><b>gxemul -E prep -v -t vmlinux</b></tt> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>MacPPC: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/macppc/">NetBSD/macppc</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/macppc/binary/kernel/">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/macppc/binary/kernel</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/macppc/binary/kernel/netbsd-INSTALL.gz">netbsd-INSTALL.gz</a> |
|
|
<br><tt><b>gxemul -E macppc -e g4 -t netbsd-INSTALL</b></tt> |
|
|
<p> |
|
|
<li><a href="http://www.openbsd.org/macppc.html">OpenBSD/macppc</a>: |
|
|
<br><a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.6/macppc/">ftp://ftp.openbsd.org/pub/OpenBSD/3.6/macppc</a>/<a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.6/macppc/bsd.rd">bsd.rd</a> |
|
|
<br><tt><b>gxemul -E macppc -e g4 -t bsd.rd</b></tt> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
|
|
|
|
<li>BeBox: |
|
|
<ul> |
|
|
<li><a href="http://www.netbsd.org/Ports/bebox/">NetBSD/bebox</a>: |
|
|
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/bebox/snapshot/19981119/">ftp://ftp.netbsd.org/pub/NetBSD/arch/bebox/snapshot/19981119</a>/<a href="ftp://ftp.netbsd.org/pub/NetBSD/arch/bebox/snapshot/19981119/kern.tgz">kern.tgz</a> |
|
|
<br><tt><b>tar xvzf kern.tgz</b></tt> |
|
|
<br><tt><b>gxemul -E bebox netbsd</b></tt> |
|
|
<p> |
|
|
<li><a href="http://www.bebox.nu/os.php?s=os/linux/index">Linux/bebox</a>: |
|
|
<br><a href="http://www.bebox.nu/files/linux/BeBox-scsi-980610.gz">http://www.bebox.nu/files/linux/BeBox-scsi-980610.gz</a> |
|
|
<br><tt><b>gunzip BeBox-scsi-980610.gz</b></tt> |
|
|
<br><tt><b>gxemul -E bebox 0x3100:0x400:BeBox-scsi-980610</b></tt> |
|
|
</ul> |
|
|
</li> |
|
|
|
|
|
<p> |
|
424 |
|
|
425 |
<li>SPARC64: |
<p>If the physical address is <tt>0x10000000</tt>, then for MIPS that |
426 |
<ul> |
means that it can be accessed at virtual address |
427 |
<li><a href="http://www.netbsd.org/Ports/sparc64/">NetBSD/sparc64</a>: |
<tt>0xffffffffb0000000</tt>. (Actually it can be accessed at |
428 |
<br><a href="ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sparc64/binary/kernel/netbsd-INSTALL.gz">ftp://ftp.netbsd.org/pub/NetBSD/NetBSD-2.0/sparc64/binary/kernel/netbsd-INSTALL.gz</a> |
<tt>0xffffffff90000000</tt> too, but devices should usually be accessed in |
429 |
<br>gunzip, and try the following: |
a non-cached manner.) |
430 |
<br><tt><b>gxemul -E ultra1 -v -i netbsd-INSTALL</b></tt> |
|
431 |
<p> |
<p>When using the Alpha, ARM, or PPC test machines, the addresses are |
432 |
<li><a href="http://www.openbsd.org/sparc64.html">OpenBSD/sparc64</a>: |
<tt>0x10000000</tt>, <tt>0x11000000</tt> etc., so no need to add any |
433 |
<br><a href="ftp://ftp.openbsd.org/pub/OpenBSD/3.6/sparc64/bsd.rd">ftp://ftp.openbsd.org/pub/OpenBSD/3.6/sparc64/bsd.rd</a> |
virtual displacement. |
434 |
<br>rename to bsd.rd.gz, gunzip, and try the following: |
|
435 |
<br><tt><b>gxemul -E ultra1 -v -i bsd.rd</b></tt> |
<p>The <tt>mp</tt>, <tt>disk</tt>, and <tt>ether</tt> devices are agnostic |
436 |
</ul> |
when it comes to word-length. For example, when reading offset |
437 |
</li> |
<tt>0x0000</tt> of the <tt>mp</tt> device, you may use any kind of read |
438 |
</ul> |
(an 8-bit read will work just as well as a 64-bit read, although the value |
439 |
|
will be truncated to 8 bits in the first case). You can <i>not</i>, |
440 |
|
however, read one byte from <tt>0x0000</tt> and one from <tt>0x0001</tt>, |
441 |
|
and combine the result. The read from <tt>0x0001</tt> will be invalid. |
442 |
|
|
443 |
|
<p>The <tt>cons</tt> device should be accessed using 8-bit reads |
444 |
|
and writes. Doing a getchar() (ie reading from offset <tt>0x00</tt>) |
445 |
|
returns <tt>0</tt> if no character was available. Whenever a character is |
446 |
|
available, the <tt>cons</tt> device' interrupt is asserted. When there are |
447 |
|
no more available characters, the interrupt is deasserted. (Remember that |
448 |
|
the interrupt has to be unmasked to be able to actually cause an |
449 |
|
interrupt.) |
450 |
|
|
451 |
|
<p>IPIs (inter-processor interrupts) are controlled by the <tt>mp</tt> |
452 |
|
device. Whenever an IPI is "sent" from a source to one or more target |
453 |
|
CPUs, the interrupt is asserted on the target CPUs, and the IPI number is |
454 |
|
added last in the IPI queue for each of the target CPUs. It is then up to |
455 |
|
those CPUs to individually read from offset <tt>0x00c0</tt>, to figure out |
456 |
|
what kind of IPI it was. |
457 |
|
|
|
<p> |
|
|
The URISC emulation mode is just for fun. (Read |
|
|
<a href="http://en.wikipedia.org/wiki/URISC">http://en.wikipedia.org/wiki/URISC</a> |
|
|
for more info.) |
|
458 |
|
|
|
<p> |
|
|
<ul> |
|
459 |
|
|
460 |
<li>URISC: |
<p>Interrupt mappings are as follows: |
461 |
<ul> |
|
462 |
<li>I've placed a small test program in the experiments directory. |
<p><center> |
463 |
<br>Start like this: <tt><b>gxemul -E testurisc 0:urisc_test.bin</b></tt> |
<table border="1"> |
464 |
<br>or, if you want to single-step: |
<tr><td align="center"> |
465 |
<b><tt>gxemul -V -E testurisc 0:urisc_test.bin</b></tt> |
<b><tt>testmips</tt></b> |
466 |
<br>2005-03-01: All outputed characters are printed twice. I'll |
</td></tr> |
467 |
try to make a pseudo-device for outputing to "normal" devices |
<tr><td> |
468 |
later. |
<table border="0"> |
469 |
</ul> |
<tr><td align="center">IRQ:</td><td> </td> |
470 |
</li> |
<td>Used for:</td></tr> |
471 |
|
<tr><td align="center">7</td><td></td> |
472 |
</ul> |
<td>MIPS count/compare interrupt</td></tr> |
473 |
|
<tr><td align="center">6</td><td></td> |
474 |
|
<td><tt>mp</tt> (inter-processor interrupts)</td></tr> |
475 |
|
<tr><td align="center">4</td><td></td> |
476 |
|
<td><tt>rtc</tt></td></tr> |
477 |
|
<tr><td align="center">3</td><td></td> |
478 |
|
<td><tt>ether</tt></td></tr> |
479 |
|
<tr><td align="center">2</td><td></td> |
480 |
|
<td><tt>cons</tt></td></tr> |
481 |
|
</table> |
482 |
|
</td></tr> |
483 |
|
</table> |
484 |
|
</center> |
485 |
|
|
486 |
|
<p>Other machines: TODO |
487 |
|
|
488 |
|
|
489 |
|
<p><br> |
490 |
|
|
491 |
|
|
492 |
|
|