中興B860AV1.1尋找固件和刷機(jī)方法

luoren123 · 發(fā)表于 2018-1-14 16:15

本帖最后由 wuli小茶于 2018-1-14 21:26 編輯

第一次用STB和盒子助手破解成功，但重新啟動(dòng)后系統(tǒng)升級(jí)，失敗了。恢復(fù)到出廠(chǎng)設(shè)置用5位隨機(jī)碼打開(kāi)ADB安裝成功，再重新啟動(dòng)又被強(qiáng)制升級(jí)，再也回不到出廠(chǎng)設(shè)置了。隨機(jī)碼是C12345的六位數(shù)，PUTTY跑碼但不能進(jìn)入命令提示行。目前版本附圖。

AC_ON
MIU0_DQS-OK
BIST0-???
MIU0-1024_U
Start uboot

Relocation Offset is: 015d7000
[AT][MB][start ub][556]

U-Boot 2011.06-00114-ga7f97e5-dirty (Oct 23 2017 - 23:15:16)

[MIU INFO] miu opencreate instance at 51be9418 with private size 80 bytes at 51be9460
create instance at 51be94b8 with private size 52 bytes at 51be9500

uboot held at [519ddf60~52d00000],size=013220a0
CPU  : Clippers
Board: BD_MST207C_D01A_S_CLIPPERS
DRAM:  813 MiB
Now running in RAM - U-Boot at: 51e00000

eMMC: HS200 200MHz
eMMC 7.28 GB [E8FFF8h]
In: serial
Out: serial
Err: serial
Net: zte_shutdow =false
No ethernet found.
Set MAC default
MAC:  0x0: 0x30: 0x1b: 0xba:0x2: 0xdb
msIR_Initialize

[CPU INFO] cpu opencreate instance at 51bf99c0 with private size 44 bytes at 51bf9a08
CPUIoctl - MDrv_CMD_CPU_QueryClock
[UTOPIA INFO] close moduleNames[38]: MODULE_CPU

[AT][MBoot][Driver Init][765]
### main_loop entered: s is true

### main_loop entered: bootdelay=1

Starting logo
============= set bootargs ===============
[setup_com_controlenv] COMControlFlag=> value[1]=, val=0
zte_mac=D0:71:C4:16:05:F5,ethaddr=D0:71:C4:16:05:F5
Hit any key to stop autoboot: 1@
step1 error...
abort=0                                                                      0
do_bootcheck called
MMC_CAPACITY_512 =15269880
current emmc size is =0xe8fff8 (should by 512)
MMCusrdata_size =11773944

current userdata size =0xb3a7f8 (should by 512)
this is 8G emmc
get_boot1_ver cmd_boot1=mmc read.boot 1 0x25000000 0x0 0x200000
set hdmi hdcp mode 0!
Saving Environment to MMC...
Writing to MMC(0)... 128 blocks written: OK
128 blocks written: OK
done
iTVSTandard2Resolution = 2
value[29] = 50100499007034400000D071C41605F5
[setup_bootenv] COMControlFlag=> value[30]=, val=0
ethaddr =D0:71:C4:16:05:F5
jy ....
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
[ztebsp] BootMode=0
[do_bootcheck,1181][ZTEWatchdog]PATCH FOR zte BEGIN
[do_bootcheck,1185][ZTEWatchdog] Watchdog_enable TRUE
[do_bootcheck,1191][ZTEWatchdog] Watchdog start, MAXTIME 120
create instance at 51bf9bb0 with private size 256 bytes at 51bf9bf8
MDrv_PNL_Init u32PnlRiuBaseAddr = 1f200000
MDrv_PNL_Init u32PMRiuBaseAddr = 1f000000
PNL:[MDrv_PNL_SetPanelType][613]
[_MDrv_PNL_Init_LPLL][323]pstPanelInitData->u16Width=1280, pstPanelInitData->u16Height=720
[_MDrv_PNL_Init_LPLL][325]u16HTotal=1980,u16VTotal=750,pstPanelInitData->u16HTotal=1980,pstPanelInitData->u16VTotal=750, u16DefaultVFreq=500
[_MDrv_PNL_Init_Output_Dclk][369]pstPanelInitData->u16Width=1280, pstPanelInitData->u16Height=720
[_MDrv_PNL_Init_Output_Dclk][371]u16HTotal=1980,u16VTotal=750,pstPanelInitData->u16HTotal=1980,pstPanelInitData->u16VTotal=750, u16DefaultVFreq=500
PNL:CalculateLPLLSETbyDClk u32KHz = 742500000, u64DefaultLdHz = 742500000
PNL:CalculateLPLLSETbyDClk u32LpllSet = 3531df
[MApi_XC_MLG_GetStatus, 1603]No instance existed, please get an instance by calling MApi_XC_Init() first
msHdmitx_Disp_Init
create instance at 51bf9d00 with private size 1720 bytes at 51bf9d48
[XC,Version]
no need to patchcreate instance at 51bfa948 with private size 80 bytes at 51bfa990
Rx Support HDMI mode!
setHDMITxAnalogTuning: Error: MApi_HDMITx_GetRxDCInfoFromEDID EDID is not ready, at 262
shift -8 pixels in PAL mode
Create Dolby single part name task failed!![Hal_VE_Set_PreHSD][1826] ERROR!!! HVSD H input = 0, HVSD H output = 720
[Hal_VE_Set_PreVSD][2002] ERROR!!! HVSD V input = 0, HVSD V output = 576
[Hal_VE_EnableDI][2110] bEnable = 0, bIsDNR2VE = 0
lyndon Hal_VE_Set_PreVSD 1mmc change mount : tvcustomer
Size of file "/720.jpg" from mmc device 0 partition tvcustomer: 151757 bytes
Loading file "/720.jpg" at offset 0x0 from mmc device 0 partition tvcustomer
151757 bytes read
create instance at 51bfa9e8 with private size 304 bytes at 51bfaa30
[AT][MB][JPD Decode][2424]

[UTOPIA INFO] close moduleNames[35]: MODULE_NJPEG_EX

create instance at 51bfa9e8 with private size 132280 bytes at 51bfaa30

[GOP INFO] gop opencreate instance at 51c1aef0 with private size 6908 bytes at 51c1af38
[AT][MB][Show Logo][2463]
## Booting kernel from Legacy Image at 25000800 ...
Image Name: MStar-linux
Image Type: ARM Linux Multi-File Image (uncompressed)
Data Size: 5317432 Bytes = 5.1 MiB
Load Address: 20208000
Entry Point:  20208000
Contents:
   Image 0: 4627208 Bytes = 4.4 MiB
   Image 1: 690212 Bytes = 674 KiB
## Loading init Ramdisk from multi component Legacy Image at 25000800 ...
-usb_stop(USB_PORT0)
-usb_stop(USB_PORT1)
-usb_stop(USB_PORT2)
Loading Multi-File Image ... OK
[AT][MB][start kr][2708]

Starting kernel ...

[PROTECT ERROR], not expected dram size: 0x0
#######################################################################
# [PROTECT WARNING], miu kernel protect is not enabled on second dram #
#######################################################################
Uncompressing Linux... done, booting the kernel.
KERN-3.10.23.001049551
tommy: thread_info_cache_init
mtdoops: mtd device (mtddev=name/number) must be supplied
[drivers/mstar2/drv/emac/mdrv_emac.c MDev_EMAC_HW_init 2196] ready init mutex

[drivers/mstar2/drv/emac/mdrv_emac.c MDev_EMAC_HW_init 2197] after init mutex
RBQP_BASE = 50304000
init: /init.clippers.rc: 455: ignored duplicate definition of service 'mdnsd'
init: /zte_init.rc: 38: ignored duplicate definition of service 'xiriservice'
init: ## ProductID: strlen (32)!
healthd: No charger supplies found
init: cannot find '/system/bin/xiriservice_ChinaMobile_SiChuan', disabling 'bluetoothd'
init: cannot find '/system/bin/bleservice', disabling 'bleservice'

luoren123 · 發(fā)表于 2018-1-16 15:16

286890528 發(fā)表于 2018-1-16 14:33
你找找自帶的網(wǎng)絡(luò)測(cè)速我的系統(tǒng)自帶的是當(dāng)貝助手圖標(biāo)名字是網(wǎng)絡(luò)測(cè)速里面有文件快傳的功能在電腦網(wǎng) ...

貝當(dāng)助手沒(méi)有電腦版的，手機(jī)版的網(wǎng)絡(luò)測(cè)速里面沒(méi)有別的功能

eggttbaby · 發(fā)表于 2018-1-14 21:26

幫頂，祝早日解決

xxxjguo · 發(fā)表于 2018-1-15 10:46

老鐵666！必須支持一波！

ronin0215 · 發(fā)表于 2018-1-15 14:45

我的是s905的u，直接直接線(xiàn)刷了事。。。。。。。

luoren123 · 發(fā)表于 2018-1-15 19:57

ronin0215 發(fā)表于 2018-1-15 14:45
我的是s905的u，直接直接線(xiàn)刷了事。。。。。。。

有B860AV1.1的固件嗎?用B860AV2.1的固件刷可以嗎?

luoren123 · 發(fā)表于 2018-1-15 19:59

ronin0215 發(fā)表于 2018-1-15 14:45
我的是s905的u，直接直接線(xiàn)刷了事。。。。。。。

有B860AV1.1的固件嗎?用B860AV2.1的固件刷可以嗎?
我的郵箱:13914274104ren@sina.com.

286890528 · 發(fā)表于 2018-1-16 11:05

和我的一樣無(wú)法TTL 無(wú)法ADB 無(wú)法U盤(pán)降級(jí) 最后用系統(tǒng)自帶的網(wǎng)絡(luò)測(cè)試（當(dāng)貝助手）中的文件快傳功能從電腦上傳軟件安裝在盒子上成功破解

luoren123 · 發(fā)表于 2018-1-16 14:18

286890528 發(fā)表于 2018-1-16 11:05
和我的一樣無(wú)法TTL 無(wú)法ADB 無(wú)法U盤(pán)降級(jí) 最后用系統(tǒng)自帶的網(wǎng)絡(luò)測(cè)試（當(dāng)貝助手）中的文件快傳功能從電 ...

關(guān)鍵是如何打開(kāi)盒子傳送文件，當(dāng)貝助手可以傳文件到盒子？這要試試。

286890528 · 發(fā)表于 2018-1-16 14:33

luoren123 發(fā)表于 2018-1-16 14:18
關(guān)鍵是如何打開(kāi)盒子傳送文件，當(dāng)貝助手可以傳文件到盒子？這要試試。

你找找自帶的網(wǎng)絡(luò)測(cè)速我的系統(tǒng)自帶的是當(dāng)貝助手圖標(biāo)名字是網(wǎng)絡(luò)測(cè)速里面有文件快傳的功能在電腦網(wǎng)頁(yè)上輸網(wǎng)址就能傳軟件到機(jī)頂盒

› 你問(wèn)我答 / 玩機(jī)教程 / 固件 › ROM固件下載

中興B860AV1.1尋找固件和刷機(jī)方法

中興B860AV1.1尋找固件和刷機(jī)方法

相關(guān)帖子