Analysis of Scroll Essential 2
Posted: December 2nd, 2012, 2:59 pm
Hi guys,
I have a Scroll Essential 2. Got it for good price with aim of turning it into a custom photo-frame/skype device. So, some serious changes to the Android bring-up process are required.
I've been looking at it's innards for a few days now.
/proc/cpuinfo:
/proc/partitions:
Explanation of nand partitions, got from kmsg:
I've uploaded the most interesting bits:
bootloader (nand partition 0)
https://www.dropbox.com/s/j8oi0g75i9fdpq7/nanda.img
environment (partition 1)
https://www.dropbox.com/s/7wln5a7diqai6ca/nandb.img
boot img (partition 2, containing kernel and initrd)
https://www.dropbox.com/s/di8p8h1yixxsa6y/nandc.img
To save you some work, the initrd starts at the 18352 sector (1 sector = 512B).
The size is 1008304 bytes.
The recovery kernel is identical to the boot kernel (bit for bit) so I've only uploaded the initrd (cpio archive)
https://www.dropbox.com/s/5iv4hm3tabmg7 ... ery_initrd
Some initial observations:
1. The contents of the boot image are strange. According to the format (mkbootimg header) the kernel comes to >9MB. Also, it doesn't look like a kernel.
2. I can't get the darn thing into a recovery mode where options can be selected. I get to the Android with open belly image, but there are no options to select. ADB reports the device in recovery mode, but there's nothing I can do. Fastboot doesn't work either.
What I'm looking for is:
- retrieving the kernel binary, so I can have the original backed-up
- putting a recovery mechanism in place, so I can re-flash in peace.
At the moment I'm trying to install the shell in the recovery initrd and hope I can run the recovery executable (in sbin/ in the recovery initrd).
Hope this gets the ball rolling.
Best,
moussevic
I have a Scroll Essential 2. Got it for good price with aim of turning it into a custom photo-frame/skype device. So, some serious changes to the Android bring-up process are required.
I've been looking at it's innards for a few days now.
/proc/cpuinfo:
- Code: Select all
Processor : ARMv7 Processor rev 2 (v7l)
BogoMIPS : 1001.88
Features : swp half thumb fastmult vfp edsp neon vfpv3
CPU implementer : 0x41
CPU architecture: 7
CPU variant : 0x3
CPU part : 0xc08
CPU revision : 2
Hardware : sun5i
Revision : a13a
Serial : 0201d94131373030504b503116254155
/proc/partitions:
- Code: Select all
major minor #blocks name
93 0 26384 nanda
93 8 16384 nandb
93 16 32768 nandc
93 24 524288 nandd
93 32 1228800 nande
93 40 16384 nandf
93 48 32768 nandg
93 56 262144 nandh
93 64 262144 nandi
93 72 5445872 nandj
179 0 976896 mmcblk0
179 1 976831 mmcblk0p1
Explanation of nand partitions, got from kmsg:
- Code: Select all
The 0 disk name = bootloader
The 1 disk name = env
The 2 disk name = boot
The 3 disk name = system
The 4 disk name = data
The 5 disk name = misc
The 6 disk name = recovery
The 7 disk name = cache
The 8 disk name = databk
The 9 disk name = UDISK
The 9 disk size = 10891744
I've uploaded the most interesting bits:
bootloader (nand partition 0)
https://www.dropbox.com/s/j8oi0g75i9fdpq7/nanda.img
environment (partition 1)
https://www.dropbox.com/s/7wln5a7diqai6ca/nandb.img
boot img (partition 2, containing kernel and initrd)
https://www.dropbox.com/s/di8p8h1yixxsa6y/nandc.img
To save you some work, the initrd starts at the 18352 sector (1 sector = 512B).
The size is 1008304 bytes.
The recovery kernel is identical to the boot kernel (bit for bit) so I've only uploaded the initrd (cpio archive)
https://www.dropbox.com/s/5iv4hm3tabmg7 ... ery_initrd
Some initial observations:
1. The contents of the boot image are strange. According to the format (mkbootimg header) the kernel comes to >9MB. Also, it doesn't look like a kernel.
2. I can't get the darn thing into a recovery mode where options can be selected. I get to the Android with open belly image, but there are no options to select. ADB reports the device in recovery mode, but there's nothing I can do. Fastboot doesn't work either.
What I'm looking for is:
- retrieving the kernel binary, so I can have the original backed-up
- putting a recovery mechanism in place, so I can re-flash in peace.
At the moment I'm trying to install the shell in the recovery initrd and hope I can run the recovery executable (in sbin/ in the recovery initrd).
Hope this gets the ball rolling.
Best,
moussevic