看论坛上拆解的已经很多了，咱就也不多罗嗦，浪费论坛服务器硬盘了，我在这就发一张屏蔽罩下的照片，及TTL的接口改造，最后贴一下TTL下的启动信息和bootloader的编程器备份。
4MB SPI Flash中的bootloader【编程器备份】：http://pan.baidu.com/s/1o6LidkA
PCB背面的屏蔽罩，CPU和内存芯片都在里头
拆了屏蔽罩，CPU一颗，内存芯片两片
镁光的内存颗粒，两颗一共1GB
处理器是AML8726-MX，最高频率1.5G
4MB的SPI flash，里头放的只是bootloader而已，固件在NAND flash中，左上角的是复位键
PCB上预留的TTL引脚，定义很好找的
补上引脚
TTL查看启动信息
折弯，改造用
TTL针对应位置掏洞
位置还算OK
这样就不用每次都拆壳了，感觉这盒子改造成个小服务器不是啥问题，关键是配置还算可以
串口启动信息：
EEEE I3000000032940xf300110003877520EEEE I400000004294_M6_BL1_3431>2534313
device is 16bit ddr
wait pll-0x03 target is 0204 now it is 0x00000203
DDR clock is 516MHz with 1T mode
DX0DLLCR:40000000
DX0DQTR:ffffffff
DX0DQSTR:3db05001
DX1DLLCR:40000000
DX1DQTR:ffffffff
DX1DQSTR:3db05001
DX2DLLCR:40000000
DX2DQTR:ffffffff
DX2DQSTR:3db05001
DX3DLLCR:40000000
DX3DQTR:ffffffff
DX3DQSTR:3db05001
Stage 00 Result 00000000
Stage 01 Result 00000000
Stage 02 Result 00000000
Stage 03 Result 00000000
HHH
Boot From SPI0x12345678
Boot from internal device 1st SPI RESERVED
System Started
8a-dirty(m6_mbx_g32@jb42-0630) (Oct 18 2013 - 10:09:42)
aml_rtc_init
aml rtc init first time!
Clear HDMI KSV RAM
DRAM: 1 GiB
relocation Offset is: 105e8000
NAND: Amlogic nand flash uboot driver, Version U1.06.017 (c) 2010 Amlogic Inc.
SPI BOOT : continue i 0
No NAND device found!!!
NAND device id: 2c 68 4 4a a9 0
NAND device: Manufacturer ID: 0x2c, Chip ID: 0x2c (Micron C revision NAND 4GiB M
T29F32G-C)
1 NAND chips detected
onfi timing mode set failed: 49
#####aml_nand_init, with RB pins and chip->chip_delay:20
bus_cycle=10, bus_timing=10, start_cycle=10, end_cycle=10,system=5.0ns
oob size is not enough for selected bch mode: NAND_BCH60_1K_MODE force bch to mo
de: NAND_BCH30_1K_MODE
aml_chip->oob_fill_cnt =0,aml_chip->oob_size =224,bch_bytes =54
aml_nand_init:oobmul =2,chip->ecc.layout->oobfree[0].length=16,aml_chip->oob_siz
e=224
aml nand env valid addr: 10000
key start_blk=2040,end_blk=2047,aml_nand_key_init:684
aml nand key valid addr: ff010000
aml nand key valid addr: ff210000
aml nand key valid addr: ff410000
aml nand key valid addr: ff610000
CONFIG_KEYSIZE=0x10000; KEYSIZE=0xfffc; bbt=0x1330; default_keyironment_size=0xe
ccc
i=0,register --- nand_key
NAND bbt detect factory Bad block at 5a00000
Creating 8 MTD partitions on "nandnormal":
0x000000800000-0x000001000000 : "logo"
0x000001000000-0x000001800000 : "aml_logo"
0x000001800000-0x000002000000 : "recovery"
0x000002000000-0x000002800000 : "boot"
0x000002800000-0x000042a00000 : "system"
NAND bbt detect factory Bad block at 5a00000
0x000042a00000-0x000062a00000 : "cache"
0x000062a00000-0x000072a00000 : "backup"
0x000072a00000-0x0000ff000000 : "data"
nandnormal initialized ok
detect mx chiprevD :1 and nand_type: 0
nand_curr_device =1
MMC: SDIO Port B: 0, SDIO Port C: 1
SPI BOOT,spi_env_relocate_spec : env_relocate_spec 53
SPI NOR Flash NO write protect!!!, So I will enable it...
In: serial
Out: serial
Err: serial
register usb cfg[0] = 9fe82910
Net: Meson_Ethernet
init suspend firmware done. (ret:0)
detect_storage
nand exist return 0
setenv storage nand
reboot_mode=charging
ir init
switch_boot_mode
current factory:3
Hit Enter key to stop autoboot: 0
compatible nand
Booting from nand ...
NAND read: logo whole chip
8388608 bytes read: OK
NAND read: boot offset 0x0, size 0x600000
6291456 bytes read: OK
pre-clear hdmi ram
hdcp get form storage medium: nand
name=nand_key nand_key
read:addr:0xff010000,phy_blk_addr:2040,phy_page_addr:8,aml_nand_get_key:125
device:nand, init key ok!!
don't found keyname,uboot_key_read:1502
prefetch hdcp keys from nand failed
## Booting kernel from Legacy Image at 82000000 ...
Image Name: Linux-3.0.50-00035-gdc73e56
Image Type: ARM Linux Kernel Image (lzma compressed)
Data Size: 3400943 Bytes = 3.2 MiB
Load Address: 80008000
Entry Point: 80008000
Verifying Checksum ... OK
Ramdisk start addr = 0x8233f000, len = 0x10051b
Uncompressing Kernel Image ... OK
machid from environment: 0x4e27
EFUSE machid is not set.
Using machid 0x4e27 from environment
Starting kernel ...
[ 4.295692@0] kobject (df0f1610): tried to init an initialized object, someth
ing is seriously wrong.
[ 4.315334@0] dvb_io_setup start
[ 4.319445@0] DVB: cannot get resource "frontend0_LNBON/OFF"
[ 4.319477@0] DVB: cannot get resource "frontend0_POWERON/OFF"
[ 4.325359@0] DVB: cannot get resource "frontend0_ANTOVERLOAD"
[ 4.325359@0] DVB: cannot get resource "frontend0_ANTOVERLOAD"
[ 5.725647@1] init: hdmi hpd_status is :48
[ 5.743301@0] init: cannot open '/initlogo.rle'
[ 5.743497@0] init: load_565rle_image_mbx result is: 0
[ 5.903820@0] init: Before e2fsck_main...
[ 6.074208@0] init: After e2fsck_main...
[ 6.209699@0] init: cannot find '/system/bin/getaplog', disabling 'aliyun_get
aplog'
[ 6.218083@0] init: cannot execve('/system/etc/install-recovery.sh'): Permiss
ion denied
[ 6.249240@0] init: property 'ro.usb.vendor.string' doesn't exist while expan
ding '${ro.usb.vendor.string}'
[ 6.253872@0] init: cannot expand '${ro.usb.vendor.string}' while writing to
'/sys/class/android_usb/android0/f_mass_storage/vendor_string'
[ 6.268318@0] init: property 'ro.usb.product.string' doesn't exist while expa
nding '${ro.usb.product.string}'
[ 6.276449@0] init: cannot expand '${ro.usb.product.string}' while writing to
'/sys/class/android_usb/android0/f_mass_storage/product_string'
[ 6.293325@0] android_usb:disable, not bind to controller
[ 6.294345@0] android_usb:disable, not bind to controller
[ 6.300979@0] android_usb:enable, not bind to controller
root@android :/ # [ 16.659450@0] init: no such service 'wififix'
[ 20.296590@0] init: sys_prop: permission denied uid:1003 name:service.bootan
im.exit
root@android :/ #
CPU的信息：
root@android :/ # cat /proc/cpuinfo
Processor : ARMv7 Processor rev 0 (v7l)
processor : 0
BogoMIPS : 191.49
processor : 1
BogoMIPS : 191.49
Features : swp half thumb fastmult vfp edsp neon vfpv3
CPU implementer : 0x41
CPU architecture: 7
CPU variant : 0x3
CPU part : 0xc09
CPU revision : 0
Hardware : Amlogic Meson6 g02 customer platform
Revision : 0020
Serial : 000000000000000c
内存信息：
root@android :/ # cat /proc/meminfo
MemTotal: 789692 kB
MemFree: 315892 kB
Buffers: 5500 kB
Cached: 167144 kB
SwapCached: 0 kB
Active: 216512 kB
Inactive: 159088 kB
Active(anon): 202980 kB
Inactive(anon): 288 kB
Active(file): 13532 kB
Inactive(file): 158800 kB
Unevictable: 0 kB
Mlocked: 0 kB
HighTotal: 524288 kB
HighFree: 105540 kB
LowTotal: 265404 kB
LowFree: 210352 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 12 kB
Writeback: 0 kB
AnonPages: 202952 kB
Mapped: 46428 kB
Shmem: 324 kB
Slab: 13016 kB
SReclaimable: 4452 kB
SUnreclaim: 8564 kB
KernelStack: 4200 kB
PageTables: 8552 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 394844 kB
Committed_AS: 10803512 kB
VmallocTotal: 262144 kB
VmallocUsed: 58220 kB
VmallocChunk: 170948 kB
root@android :/ #
root@android :/mnt # df
Filesystem Size Used Free Blksize
/dev 385M 64K 385M 4096
/mnt/secure 385M 0K 385M 4096
/mnt/asec 385M 0K 385M 4096
/mnt/obb 385M 0K 385M 4096
/storage/external_storage 385M 0K 385M 4096
/system 881M 457M 424M 4096
/data 1G 404M 1G 4096
/cache 440M 7M 433M 4096
/mnt/shell/emulated 1G 404M 1G 4096
root@android :/mnt #
STM32
MCU
通讯及无线技术
物联网技术
电子DIY
板卡试用
基础知识
软件与操作系统
我爱生活
小e食堂