Merge pull request #17 from Bs0Dd/main

New ROMS + 5mx PRO BootLoader dumping solution

5mxPRO/BootLoader/5mxPRO_BL_v1.08_ger/readme.txt

@@ -0,0 +1,8 @@
+Psion 5mx Pro BootLoader.
+Version 1.08 DE
+
+The bootloader is the program stored in PRO's Flash memory instead of the EPOC32 system.
+It loads the OS into RAM from the CF card or via RS232 (YMODEM protocol).
+Placed in AT29LV010A (128k x 8 Flash) at 0x00000000.
+
+Dumped by castaway_uk.

5mxPRO/BootLoader/5mxPRO_BL_v1.09_ger/readme.txt

@@ -0,0 +1,8 @@
+Psion 5mx Pro BootLoader.
+Version 1.09 DE
+
+The bootloader is the program stored in PRO's Flash memory instead of the EPOC32 system.
+It loads the OS into RAM from the CF card or via RS232 (YMODEM protocol).
+Placed in AT29LV010A (128k x 8 Flash) at 0x00000000.
+
+Dumped by Bs(/)Dd.

MC218/MC218_v1.05(256)_eng/readme.txt

@@ -0,0 +1,3 @@
+Ericsson MC218
+ROM Dump
+UK Version 256

README.md

@@ -94,7 +94,12 @@ Utilities:
 
 | Device             | EPOC32 Version | ROM  Version | Language | Filename                                                                 | MD5 Checksum                       |
 | ------------------ | -------------- | ------------ | -------- | ------------------------------------------------------------------------ | ---------------------------------- |
-| Psion Series 5     | Release 1      | 1.01 (144)   | English  | [S5_v1.01(144)_eng.bin](Series5/S5_v1.01(144)_eng/S5_v1.01(144)_eng.bin) | `d5e5c2aa32f9888e7fec8d2214f1547e` |
+| Psion Series 5     | Release 1      | 1.00 (113)   | English  | [S5_v1.00(113)_eng.bin](Series5/S5_v1.00(113)_eng/S5_v1.00(113)_eng.bin) | `1770762d4abddc79e861b5747315945b` |
+| Psion Series 5     | Release 1      | 1.01 (145)   | English  | [S5_v1.01(145)_eng.bin](Series5/S5_v1.01(145)_eng/S5_v1.01(145)_eng.bin) | `cec9ed502a648fcf19d0f2712d0ac54c` |
+
+> [!NOTE]
+>
+> - Early 1.00 (113) version was found on the rare (and probably unreleased) 4MB RAM machine. Written to 3x 2MB Flash chips.
 
 ## Psion Series 5mx / Ericsson MC218
 
@@ -104,6 +109,7 @@ Utilities:
 | Psion Series 5mx   | Release 5      | 1.05 (255)   | English (10MB) | [5mx_v1.05(255)_10_eng.bin](5mx/5mx_v1.05(255)_10_eng/5mx_v1.05(255)_10_eng.bin) | `5f9d1d23a05c84859a070723cc9d83bc` |
 | Psion Series 5mx   | Release 5      | 1.05 (255)   | English (16MB) | [5mx_v1.05(255)_16_eng.bin](5mx/5mx_v1.05(255)_16_eng/5mx_v1.05(255)_16_eng.bin) | `206220fd3316e6e950bdc814d748d542` |
 | Psion Series 5mx   | Release 5      | 1.05 (260)   | English        | [5mx_v1.05(260)_eng.bin](5mx/5mx_v1.05(260)_eng/5mx_v1.05(260)_eng.bin)          | `105df0efa78e573387c9b813475d6577` |
+| Ericsson MC218     | Release 5      | 1.05 (256)   | English        | [MC218_v1.05(256)_eng.bin](MC218/MC218_v1.05(256)_eng/MC218_v1.05(256)_eng.bin)  | `a30ff9f82f64bfa0680846cdb8b78576` |
 | Ericsson MC218     | Release 5      | 1.05 (259)   | English        | [MC218_v1.05(259)_eng.bin](MC218/MC218_v1.05(259)_eng/MC218_v1.05(259)_eng.bin)  | `637d95ae610c5e99b6108e158a323629` |
 | Ericsson MC218     | Release 5      | 1.05 (260)   | German         | [MC218_v1.05(260)_ger.bin](MC218/MC218_v1.05(260)_ger/MC218_v1.05(260)_ger.bin)  | `1209cb6189b2f4c119786608d222ab6b` |
 
@@ -111,7 +117,7 @@ Utilities:
 >
 > - The 1.05 (250) differs from the 1.05 (255) 16MB only by the version header. Maybe because the device contains 8MB V250 BASE Mask ROM and 2MB V255 UK Flash ROM.
 >
-> - The 1.05 (255) 10MB and 16MB versions differs only by size (8MB Mask + 2MB Flash vs 16MB Mask) and by one unknown header.
+> - The 1.05 (255) 10MB and 16MB versions differs only by size (8MB Mask + 2MB Flash vs 16MB Mask) and by one modified (by jump) subroutine. The 1.05 (250) has the same jump as in 1.05 (255) 16MB.
 >
 > - Ericsson MC218 is a 5mx with a custom design and additional Ericsson software in ROM.
 >
@@ -126,10 +132,17 @@ Utilities:
 | Psion Series 5mx PRO  | Release 5      | 1.05 (319)   | German (MC218 stuff)   | [sys$rom.bin](5mxPRO/5mxPRO_v1.05(319)_patch_ger/sys$rom.bin) | `d5523fc08e5aca31c1b9e9087f977e49` |
 | Psion Series 5mx PRO  | Release 5      | 1.05 (319)   | English (MC218 stuff)  | [sys$rom.bin](5mxPRO/5mxPRO_v1.05(319)_patch_eng/sys$rom.bin) | `dcd42f29f332a6052e4431040aae4483` |
 
+| Additional files                | Version | Language | Filename                                                                                 | MD5 Checksum                       |
+| ------------------------------- | ------- | -------- | ---------------------------------------------------------------------------------------- | ---------------------------------- |
+| Psion Series 5mx PRO BootLoader | 1.08    | German   | [5mxPRO_BL_v1.08_ger.bin](5mxPRO/BootLoader/5mxPRO_BL_v1.08_ger/5mxPRO_BL_v1.08_ger.bin) | `cfd1e6b78add173b996f8ee89608ce64` |
+| Psion Series 5mx PRO BootLoader | 1.09    | German   | [5mxPRO_BL_v1.09_ger.bin](5mxPRO/BootLoader/5mxPRO_BL_v1.09_ger/5mxPRO_BL_v1.09_ger.bin) | `518c4afee6a1bbf4eaefa3455c6c96f6` |
+
 > [!NOTE]
 >
 > - The 5mx PRO model is released only for the German market and does not have an official English ROM. The English version presented here is based on the 5mx ROM.
 >
+> - The bootloader is the program stored in PRO's Flash memory instead of the EPOC32 system. It loads the OS into RAM from the CF card or via RS232 (YMODEM protocol). Placed at `0x00000000`.
+>
 > - The name `sys$rom.bin` is standard for these files, as the 5mx PRO bootloader expects a file with this name to be present in the root of the CF card in order to load it into RAM.
 >
 > - The version 1.05 (273) contains untranslated (English) Email and EPOC Web programs.
@@ -185,3 +198,5 @@ Update your device with `Build 75x` to the `Build 756` - [English](Series7/Updat
 ## Guides
 
 * [Using EDisAsm to dump EPOC16 ROMs](https://doc.psion.info/books/siboepoc16/page/using-edisasm-to-dump-epoc16-roms)
+
+* [Dumping Psion 5mx PRO BootLoader](<Tools/Dumping 5mx PRO BootLoader/README.md>)

Series5/S5_v1.00(113)_eng/readme.txt

@@ -0,0 +1,8 @@
+Series 5
+English (UK)
+ROM version 1.00(113)
+
+Early (test?) version from the rare 4MB RAM machine (looks like only 8MB RAM version was released).
+3x 2MB Flash chips on the card.
+
+Dumped by zedstarr.

Tools/Dumping 5mx PRO BootLoader/README.md

@@ -0,0 +1,75 @@
+# Dumping Psion 5mx PRO BootLoader
+
+<p align="center">
+  <img src="Pictures/splash.png" alt="Splash">
+</p>
+
+The Psion 5mx PRO has no embedded OS in the Mask ROM, unlike other machines. It has only a small (128 KB) BootLoader chip.  
+It's an AT29LV010A Flash, attached to the CS7 signal.
+
+<table align="center">
+  <tr>
+    <td><img src="Pictures/snowrom.png" alt="Snowdrop scheme" width="500"></td>
+    <td><img src="Pictures/BLGEv109.jpg" alt="5mx PRO BootLoader chip" width="500"></td>
+  </tr>
+</table>
+
+Normally, the device at CS7 is mapped to address 0x70000000, but in PRO, unlike other 5mx machines, MCU (Windermere) runs in Alternate Test ROM (yep, Test!).
+
+<table align="center">
+  <tr>
+    <td><img src="Pictures/snowatestm.png" alt="Snowdrop test mode" width="500"></td>
+    <td><img src="Pictures/reverser.jpg" alt="Motherboards" width="500"></td>
+  </tr>
+</table>
+
+So this actually reverses the address mapping for all devices (ETNA and PCMCIA interface too), and now BL Flash is at 0x00000000, and the machine can boot from it.  
+(There is no Windermere documentation, but CL-PS7110 (used in Series 5) has a similar mode).
+
+<p align="center">
+  <img src="Pictures/cltestmode.png" alt="CL-PS7110 test mode">
+</p>
+
+Normally, there is no access to the BootLoader chip from the OS, as it's not MMU-mapped.  
+A [special version](sys$rom.bin) of the standard 5mx PRO OS (Build 319) is modified to be able to dump this BootLoader Flash chip.
+
+<p align="center">
+  <img src="Pictures/modspl.png" alt="Modified OS">
+</p>
+
+If you have a machine with BootLoader different than **"S5mx BLGE v109"** (check the sticker on the chip); please dump it using the following steps:
+
+1. Run ***PsiROMx*** (embedded);  
+![PsiROMx](Pictures/psiromx.png)
+
+2. Open ***Advanced options***;
+3. Set ***Start address*** at **51200000**;
+4. Set ***Size (KB)*** to **128**, ***End address*** must be at **51220000**;  
+![Advanced options](Pictures/psiroaddr.png)
+
+5. Select ***Save ROM***, set name (for example: **sys$bl.bin**);  
+![Save ROM](Pictures/psironam.png)
+
+6. Wait until dumping is done;  
+![Dumping](Pictures/psirord.png) ![Dumped](Pictures/psirodn.png)
+
+7. Check the file size, it must be **128 KB** or **131072 Bytes**;  
+![File properties](Pictures/sysblprop.png)
+
+8. If all is ok, offer your file to this repository.
+
+<br>
+
+You can also dump your **EEPROM** (128 Bytes). Unpack additional software by installing **Special Tools.SIS**, then run **Show EEPROM.exe** (at **C:\\**) to list your EEPROM's contents to the screen.
+Take a photo or make an MBM screenshot (**Shift + Ctrl + Fn + S**) and offer it to [bs0dd@bs0dd.net](<mailto:bs0dd@bs0dd.net?subject=Psion 5mx PRO EEPROM>).
+
+<p align="center">
+  <img src="Pictures/toolinst.png" alt="Tools installation">
+  <img src="Pictures/showep.png" alt="Show EEPROM">
+  <img src="Pictures/eeprom.png" alt="EEPROM">
+</p>
+
+***For advanced users***: there is also an **ARLO** tool (Linux loader for Psions) in the Special Tools pack. It's not configured to run Linux, but it's included due to the advanced and expert modes functionality. You can use it for reading and researching some memory sections. **Enjoy!**
+
+------------------------------------------
+**2026 © Bs0Dd [[bs0dd.net](http://bs0dd.net)]**