小米 ax3600 spi 启动固件

心想事成

本固件可以用于ipq807x系列芯片的spi启动，比如ax3600 红米ax6等。固件大小16M，写入w25q128fw spi flash，然后调整板子从spi启动即可。
用spi 启动后，即可以在uboot 中复制nand芯片的数据或者写入数据，用于救砖等用途了！
具体用法在：
【硬改】小米AX3600 补齐SPI焊盘实现NAND和SPI双启动实战记录，救砖必备！-小米无线路由器及小米网络设备-恩山无线论坛
AX3600 改SPI启动的探索 可救砖-小米无线路由器及小米网络设备-恩山无线论坛

启动的日志：

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset),  D - Delta,  S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00158
S - IMAGE_VARIANT_STRING=HAABANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e1
B -       201 - PBL, Start
B -      2736 - bootable_media_detect_entry, Start
B -      2882 - bootable_media_detect_success, Start
B -      2887 - elf_loader_entry, Start
B -     11376 - auth_hash_seg_entry, Start
B -     11620 - auth_hash_seg_exit, Start
B -    250657 - elf_segs_hash_verify_entry, Start
B -    311326 - PBL, End
B -    490775 - SBL1, Start
B -    569557 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B -    579347 - pm_device_init, Start
B -    761158 - PM_SET_VAL:Skip
D -    179889 - pm_device_init, Delta
B -    763567 - pm_driver_init, Start
D -      5368 - pm_driver_init, Delta
B -    769911 - clock_init, Start
D -      2135 - clock_init, Delta
B -    773968 - boot_flash_init, Start
D -      3385 - boot_flash_init, Delta
B -    781013 - boot_config_data_table_init, Start
D -      1067 - boot_config_data_table_init, Delta - (575 Bytes)
B -    791383 - Boot Setting :  0x00000600
B -    795226 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:16
B -    802150 - sbl1_ddr_set_params, Start
B -    805993 - CPR configuration: 0x300
B -    809439 - cpr_init, Start
B -    812245 - Rail:0 Mode: 5 Voltage: 800000
B -    817461 - CL CPR settled at 752000mV
B -    820206 - Rail:1 Mode: 5 Voltage: 880000
B -    824476 - Rail:1 Mode: 7 Voltage: 896000
D -     16470 - cpr_init, Delta
B -    831277 - Pre_DDR_clock_init, Start
B -    835303 - Pre_DDR_clock_init, End
B -    838689 - DDR Type : PCDDR3
B -    844331 - do ddr sanity test, Start
D -      1067 - do ddr sanity test, Delta
B -    849181 - DDR: Start of HAL DDR Boot Training
B -    853847 - DDR: End of HAL DDR Boot Training
B -    859612 - DDR: Checksum to be stored on flash is 1411650261
B -    869921 - Image Load, Start
D -    336384 - QSEE Image Loaded, Delta - (1376448 Bytes)
B -   1206397 - Image Load, Start
D -        61 - SEC Image Loaded, Delta - (0 Bytes)
B -   1214052 - Image Load, Start
D -      9760 - DEVCFG Image Loaded, Delta - (26008 Bytes)
B -   1223904 - Image Load, Start
D -     25986 - RPM Image Loaded, Delta - (86584 Bytes)
B -   1249981 - Image Load, Start
D -    141642 - APPSBL Image Loaded, Delta - (576177 Bytes)
B -   1391745 - QSEE Execution, Start
D -        61 - QSEE Execution, Delta
B -   1397540 - USB D+ check, Start
D -         0 - USB D+ check, Delta
B -   1403945 - SBL1, End
D -    915458 - SBL1, Delta
S - Flash Throughput, 4430 KB/s  (2065792 Bytes,  466216 us)
S - DDR Frequency, 466 MHz
S - Core 0 Frequency, 800 MHz


U-Boot 2016.01 (Oct 30 2024 - 08:39:44 +0000)

DRAM:  smem ram ptable found: ver: 1 len: 4
512 MiB
NAND:  Could not find nand_gpio in dts, using defaults
ONFI device found
ID = 1590aaef
Vendor = ef
Device = aa
SPI_ADDR_LEN=3
SF: Detected W25Q128FW with page size 256 Bytes, erase size 4 KiB, total 16 MiB
ipq_spi: page_size: 0x100, sector_size: 0x1000, size: 0x1000000
272 MiB
MMC:   sdhci: Node Not found, skipping initialization

PCI Link Intialized
PCI1 is not defined in the device tree
In:    serial@78B3000
Out:   serial@78B3000
Err:   serial@78B3000
machid: 8010010
MMC Device 0 not found
Hit any key to stop autoboot:  0
MMC Device 0 not found
Invalid block device name

Net:   MAC0 addr:24:5e:be:55:77:5a
PHY ID1: 0x4d
PHY ID2: 0xd0b1
EDMA ver 1 hw init
Num rings - TxDesc:1 (0-0) TxCmpl:1 (7-7)
RxDesc:1 (15-15) RxFill:1 (7-7)
ipq807x_edma_alloc_rings: successfull
ipq807x_edma_setup_ring_resources: successfull
ipq807x_edma_configure_rings: successfull
ipq807x_edma_hw_init: successfull
eth0
IPQ807x# nand read 0x44000000 0x0 0x4000000

NAND read: device 0 offset 0x0, size 0x4000000
67108864 bytes read: OK
IPQ807x# tftp
Unknown command 'tftp' - try 'help'
IPQ807x# tftpput
ipq807x_eth_halt: done
eth0 PHY0 Down Speed :10 Half duplex
eth0 PHY1 up Speed :1000 Full duplex
eth0 PHY2 Down Speed :10 Half duplex
eth0 PHY3 Down Speed :10 Half duplex
eth0 PHY4 up Speed :10 Full duplex
eth0 PHY5 up Speed :10 Full duplex
ipq807x_eth_init: done