中兴B860AV1.1寻找固件和刷机方法
本帖最后由 wuli小茶 于 2018-1-14 21:26 编辑第一次用STB和盒子助手破解成功，但重新启动后系统升级，失败了。恢复到出厂设置用5位随机码打开ADB安装成功，再重新启动又被强制升级，再也回不到出厂设置了。随机码是C12345的六位数，PUTTY跑码但不能进入命令提示行。目前版本附图。
AC_ON
MIU0_DQS-OK
BIST0-▒▒▒
MIU0-1024_U
Start uboot
Relocation Offset is: 015d7000
U-Boot 2011.06-00114-ga7f97e5-dirty (Oct 23 2017 - 23:15:16)
miu opencreate instance at 51be9418 with private size 80 bytes at 51be9460
create instance at 51be94b8 with private size 52 bytes at 51be9500
uboot held at ,size=013220a0
CPU: Clippers
Board: BD_MST207C_D01A_S_CLIPPERS
DRAM:813 MiB
Now running in RAM - U-Boot at: 51e00000
eMMC: HS200 200MHz
eMMC 7.28 GB
In: serial
Out: serial
Err: serial
Net: zte_shutdow =false
No ethernet found.
Set MAC default
MAC:0x0: 0x30: 0x1b: 0xba:0x2: 0xdb
msIR_Initialize
cpu opencreate instance at 51bf99c0 with private size 44 bytes at 51bf9a08
CPUIoctl - MDrv_CMD_CPU_QueryClock
close moduleNames: MODULE_CPU
### main_loop entered: s is true
### main_loop entered: bootdelay=1
Starting logo
============= set bootargs ===============
COMControlFlag=> value=, val=0
zte_mac=D0:71:C4:16:05:F5,ethaddr=D0:71:C4:16:05:F5
Hit any key to stop autoboot: 1@
step1 error...
abort=0 0
do_bootcheck called
MMC_CAPACITY_512 =15269880
current emmc size is =0xe8fff8 (should by 512)
MMCusrdata_size =11773944
current userdata size =0xb3a7f8 (should by 512)
this is 8G emmc
get_boot1_ver cmd_boot1=mmc read.boot 1 0x25000000 0x0 0x200000
set hdmi hdcp mode 0!
Saving Environment to MMC...
Writing to MMC(0)... 128 blocks written: OK
128 blocks written: OK
done
iTVStandard2Resolution = 2
value = 50100499007034400000D071C41605F5
COMControlFlag=> value=, val=0
ethaddr =D0:71:C4:16:05:F5
jy ....
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey
BootMode=0
BootMode=0
PATCH FOR zte BEGIN
Watchdog_enable TRUE
Watchdog start, MAXTIME 120
create instance at 51bf9bb0 with private size 256 bytes at 51bf9bf8
MDrv_PNL_Init u32PnlRiuBaseAddr = 1f200000
MDrv_PNL_Init u32PMRiuBaseAddr = 1f000000
PNL:
pstPanelInitData->u16Width=1280, pstPanelInitData->u16Height=720
u16HTotal=1980,u16VTotal=750,pstPanelInitData->u16HTotal=1980,pstPanelInitData->u16VTotal=750, u16DefaultVFreq=500
pstPanelInitData->u16Width=1280, pstPanelInitData->u16Height=720
u16HTotal=1980,u16VTotal=750,pstPanelInitData->u16HTotal=1980,pstPanelInitData->u16VTotal=750, u16DefaultVFreq=500
PNL:CalculateLPLLSETbyDClk u32KHz = 742500000, u64DefaultLdHz = 742500000
PNL:CalculateLPLLSETbyDClk u32LpllSet = 3531df
No instance existed, please get an instance by calling MApi_XC_Init() first
msHdmitx_Disp_Init
create instance at 51bf9d00 with private size 1720 bytes at 51bf9d48
no need to patchcreate instance at 51bfa948 with private size 80 bytes at 51bfa990
Rx Support HDMI mode!
setHDMITxAnalogTuning: Error: MApi_HDMITx_GetRxDCInfoFromEDID EDID is not ready, at 262
shift -8 pixels in PAL mode
Create Dolby single part name task failed!! ERROR!!! HVSD H input = 0, HVSD H output = 720
ERROR!!! HVSD V input = 0, HVSD V output = 576
bEnable = 0, bIsDNR2VE = 0
lyndon Hal_VE_Set_PreVSD 1mmc change mount : tvcustomer
Size of file "/720.jpg" from mmc device 0 partition tvcustomer: 151757 bytes
Loading file "/720.jpg" at offset 0x0 from mmc device 0 partition tvcustomer
151757 bytes read
create instance at 51bfa9e8 with private size 304 bytes at 51bfaa30
close moduleNames: MODULE_NJPEG_EX
create instance at 51bfa9e8 with private size 132280 bytes at 51bfaa30
gop opencreate instance at 51c1aef0 with private size 6908 bytes at 51c1af38
## Booting kernel from Legacy Image at 25000800 ...
Image Name: MStar-linux
Image Type: ARM Linux Multi-File Image (uncompressed)
Data Size: 5317432 Bytes = 5.1 MiB
Load Address: 20208000
Entry Point:20208000
Contents:
Image 0: 4627208 Bytes = 4.4 MiB
Image 1: 690212 Bytes = 674 KiB
## Loading init Ramdisk from multi component Legacy Image at 25000800 ...
-usb_stop(USB_PORT0)
-usb_stop(USB_PORT1)
-usb_stop(USB_PORT2)
Loading Multi-File Image ... OK
Starting kernel ...
, not expected dram size: 0x0
#######################################################################
# , miu kernel protect is not enabled on second dram #
#######################################################################
Uncompressing Linux... done, booting the kernel.
KERN-3.10.23.001049551
tommy: thread_info_cache_init
mtdoops: mtd device (mtddev=name/number) must be supplied
ready init mutex
after init mutex
RBQP_BASE = 50304000
init: /init.clippers.rc: 455: ignored duplicate definition of service 'mdnsd'
init: /zte_init.rc: 38: ignored duplicate definition of service 'xiriservice'
init: ## ProductID: strlen (32)!
healthd: No charger supplies found
init: cannot find '/system/bin/xiriservice_ChinaMobile_SiChuan', disabling 'bluetoothd'
init: cannot find '/system/bin/bleservice', disabling 'bleservice'
286890528 发表于 2018-1-16 14:33
你找找自带的网络测速我的系统自带的是当贝助手图标名字是网络测速里面有文件快传的功能在电脑网 ...
贝当助手没有电脑版的，手机版的网络测速里面没有别的功能 帮顶，祝早日解决{znds6} 老铁666！必须支持一波！ 我的是s905的u，直接直接线刷了事。。。。。。。 ronin0215 发表于 2018-1-15 14:45
我的是s905的u，直接直接线刷了事。。。。。。。
有B860AV1.1的固件吗?用B860AV2.1的固件刷可以吗? ronin0215 发表于 2018-1-15 14:45
我的是s905的u，直接直接线刷了事。。。。。。。
有B860AV1.1的固件吗?用B860AV2.1的固件刷可以吗?
我的邮箱:13914274104ren@sina.com. 和我的一样无法TTL无法ADB无法U盘降级最后用系统自带的网络测试（当贝助手）中的文件快传功能从电脑上传软件安装在盒子上成功破解 286890528 发表于 2018-1-16 11:05
和我的一样无法TTL无法ADB无法U盘降级最后用系统自带的网络测试（当贝助手）中的文件快传功能从电 ...
关键是如何打开盒子传送文件，当贝助手可以传文件到盒子？这要试试。 luoren123 发表于 2018-1-16 14:18
关键是如何打开盒子传送文件，当贝助手可以传文件到盒子？这要试试。
你找找自带的网络测速我的系统自带的是当贝助手图标名字是网络测速里面有文件快传的功能在电脑网页上输网址就能传软件到机顶盒 我的和你的一样，TTL不断重启，提示少文件。HDMI连电视也是不断重启，还没设置完就重启了，坑啊 286890528 发表于 2018-1-16 11:05
和我的一样无法TTL无法ADB无法U盘降级最后用系统自带的网络测试（当贝助手）中的文件快传功能从电 ...
OK，谢谢指点。{:121:} 尾号GA。高安检测的盒子。容易砖，千玩别折腾ROOT，一折腾救容易砖头 和你一毛一样，，，没办法了
1234