I found some undocumented registers while testing some LCD stuff, and decided to scan all memory-mapped stuff of th S3C2440 to determine if there are more. Here are the findings: GPIO controller: 0x560000C0 - read-only (value: 007f0000) LCD controller: 0x4D00002C - 16 bits - read/write (default: 0000a5a5) 0x4D000030 - 28 bits - read/write (default: 0ba5da65) 0x4D000034 - 20 bits - read/write (default: 000a5a5f) 0x4D000038 - 12 bits - read/write (default: 00000d6b) 0x4D00003C - 28 bits - read/write (default: 0eb7b5ed) 0x4D000040 - 16 bits - read/write (default: 00007dbe) 0x4D000044 - 20 bits - read/write (default: 0007ebdf) 0x4D000048 - 28 bits - read/write (default: 07fdfbfe) Realtime Clock: 0x5700006C - 4 bits - read/write (default: 00000000) 0x5700008C - 6 bits - read-only; always changing, seems to be a sub-second counter Also, JTAG chain 3 is the boundary scan register for all pins bits 0-287: external pins (bit 0 is U17, bit 1 is U16, etc.) bits 288-471: ARM9 core internal boundary scan

