Motorola C140

The internal name of the hardware is E86

The shielding covers of this model are soldered, not snap-on :(

Specification

• GSM 900 / GSM 1800 dual-band
• 101 x 47,8 x 21,9 mm, 80 grams
• 920mAh Li-Ion battery
• TI Calypso/Iota/Rita? chipset

Schematics

The schematics can be found e.g. at ​http://files.shrak-mobile.com/schem/motorola/C139_schem.rar. They apply to C139 as well as C140, as they are very similar.

Hardware

Board with different flash and GSM850/PCS1900 layout, large version here​

GSM Chipset:

• DBB: TI Calypso Baseband, D751749ZHH model (Calypso Lite G2), includes 256kBytes of internal SRAM
• ABB: TI TWL3025BZ
• RF: TRF6151CJ
• RF PA: SKY77325-12

Flash / SRAM:

• Intel (RD38F)1010C0ZTLO
  • Stacked-CSP Flash Stacked Memory (32MBit flash, 4MBit SRAM, Advanced Boot Block Flash Memory, 3.0V I/O, Top Blocking)

Display:

• Toppoly TD014THEA3 (1.4 inch LCD, 96 x 64, 64K colors)
• Controller: integrated Toppoly controller (no datasheet available)
• We have a working driver, but most commands are not yet decoded

Test points:

• Test points surrounding Iota:
• Test points surrounding Calypso:
• Test points accessible from battery compartment:

Miscellaneous

Bootloader

The loader is pretty much identical to the loader in the C123. However, it has one additional nastiness:

• After the download has completed, it expects the magic string "1003" (0x31 0x30 0x30 0x33) at the RAM address 0x803ce0
• To bypass this limitation, use the Calypso romloader to chainload the application. Here's an example for loading layer1.bin:

$ ./osmocon -p /dev/ttyUSB0 -m c140 -c ../../target/firmware/board/compal_e86/layer1.highram.bin ../../target/firmware/board/compal_e86/chainload.compalram.bin