中兴B860AV1.1寻找固件和刷机方法

luoren123 · 发表于 2018-1-14 16:15

本帖最后由 wuli小茶于 2018-1-14 21:26 编辑

第一次用STB和盒子助手破解成功，但重新启动后系统升级，失败了。恢复到出厂设置用5位随机码打开ADB安装成功，再重新启动又被强制升级，再也回不到出厂设置了。随机码是C12345的六位数，PUTTY跑码但不能进入命令提示行。目前版本附图。

AC_ON
MIU0_DQS-OK
BIST0-▒▒▒
MIU0-1024_U
Start uboot

Relocation Offset is: 015d7000
[AT][MB][start ub][556]

U-Boot 2011.06-00114-ga7f97e5-dirty (Oct 23 2017 - 23:15:16)

[MIU INFO] miu opencreate instance at 51be9418 with private size 80 bytes at 51be9460
create instance at 51be94b8 with private size 52 bytes at 51be9500

uboot held at [519ddf60~52d00000],size=013220a0
CPU  : Clippers
Board: BD_MST207C_D01A_S_CLIPPERS
DRAM:  813 MiB
Now running in RAM - U-Boot at: 51e00000

eMMC: HS200 200MHz
eMMC 7.28 GB [E8FFF8h]
In: serial
Out: serial
Err: serial
Net: zte_shutdow =false
No ethernet found.
Set MAC default
MAC:  0x0: 0x30: 0x1b: 0xba:0x2: 0xdb
msIR_Initialize

[CPU INFO] cpu opencreate instance at 51bf99c0 with private size 44 bytes at 51bf9a08
CPUIoctl - MDrv_CMD_CPU_QueryClock
[UTOPIA INFO] close moduleNames[38]: MODULE_CPU

[AT][MBoot][Driver Init][765]
### main_loop entered: s is true

### main_loop entered: bootdelay=1

Starting logo
============= set bootargs ===============
[setup_com_controlenv] COMControlFlag=> value[1]=, val=0
zte_mac=D0:71:C4:16:05:F5,ethaddr=D0:71:C4:16:05:F5
Hit any key to stop autoboot: 1@
step1 error...
abort=0                                                                      0
do_bootcheck called
MMC_CAPACITY_512 =15269880
current emmc size is =0xe8fff8 (should by 512)
MMCusrdata_size =11773944

current userdata size =0xb3a7f8 (should by 512)
this is 8G emmc
get_boot1_ver cmd_boot1=mmc read.boot 1 0x25000000 0x0 0x200000
set hdmi hdcp mode 0!
Saving Environment to MMC...
Writing to MMC(0)... 128 blocks written: OK
128 blocks written: OK
done
iTVSTandard2Resolution = 2
value[29] = 50100499007034400000D071C41605F5
[setup_bootenv] COMControlFlag=> value[30]=, val=0
ethaddr =D0:71:C4:16:05:F5
jy ....
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
search ....
waldo msIR_GetIRKeyCode line:482 breturn false
fore uup IRKey [0xff]
BootMode=0
[ztebsp] BootMode=0
[do_bootcheck,1181][ZTEWatchdog]PATCH FOR zte BEGIN
[do_bootcheck,1185][ZTEWatchdog] Watchdog_enable TRUE
[do_bootcheck,1191][ZTEWatchdog] Watchdog start, MAXTIME 120
create instance at 51bf9bb0 with private size 256 bytes at 51bf9bf8
MDrv_PNL_Init u32PnlRiuBaseAddr = 1f200000
MDrv_PNL_Init u32PMRiuBaseAddr = 1f000000
PNL:[MDrv_PNL_SetPanelType][613]
[_MDrv_PNL_Init_LPLL][323]pstPanelInitData->u16Width=1280, pstPanelInitData->u16Height=720
[_MDrv_PNL_Init_LPLL][325]u16HTotal=1980,u16VTotal=750,pstPanelInitData->u16HTotal=1980,pstPanelInitData->u16VTotal=750, u16DefaultVFreq=500
[_MDrv_PNL_Init_Output_Dclk][369]pstPanelInitData->u16Width=1280, pstPanelInitData->u16Height=720
[_MDrv_PNL_Init_Output_Dclk][371]u16HTotal=1980,u16VTotal=750,pstPanelInitData->u16HTotal=1980,pstPanelInitData->u16VTotal=750, u16DefaultVFreq=500
PNL:CalculateLPLLSETbyDClk u32KHz = 742500000, u64DefaultLdHz = 742500000
PNL:CalculateLPLLSETbyDClk u32LpllSet = 3531df
[MApi_XC_MLG_GetStatus, 1603]No instance existed, please get an instance by calling MApi_XC_Init() first
msHdmitx_Disp_Init
create instance at 51bf9d00 with private size 1720 bytes at 51bf9d48
[XC,Version]
no need to patchcreate instance at 51bfa948 with private size 80 bytes at 51bfa990
Rx Support HDMI mode!
setHDMITxAnalogTuning: Error: MApi_HDMITx_GetRxDCInfoFromEDID EDID is not ready, at 262
shift -8 pixels in PAL mode
Create Dolby single part name task failed!![Hal_VE_Set_PreHSD][1826] ERROR!!! HVSD H input = 0, HVSD H output = 720
[Hal_VE_Set_PreVSD][2002] ERROR!!! HVSD V input = 0, HVSD V output = 576
[Hal_VE_EnableDI][2110] bEnable = 0, bIsDNR2VE = 0
lyndon Hal_VE_Set_PreVSD 1mmc change mount : tvcustomer
Size of file "/720.jpg" from mmc device 0 partition tvcustomer: 151757 bytes
Loading file "/720.jpg" at offset 0x0 from mmc device 0 partition tvcustomer
151757 bytes read
create instance at 51bfa9e8 with private size 304 bytes at 51bfaa30
[AT][MB][JPD Decode][2424]

[UTOPIA INFO] close moduleNames[35]: MODULE_NJPEG_EX

create instance at 51bfa9e8 with private size 132280 bytes at 51bfaa30

[GOP INFO] gop opencreate instance at 51c1aef0 with private size 6908 bytes at 51c1af38
[AT][MB][Show Logo][2463]
## Booting kernel from Legacy Image at 25000800 ...
Image Name: MStar-linux
Image Type: ARM Linux Multi-File Image (uncompressed)
Data Size: 5317432 Bytes = 5.1 MiB
Load Address: 20208000
Entry Point:  20208000
Contents:
   Image 0: 4627208 Bytes = 4.4 MiB
   Image 1: 690212 Bytes = 674 KiB
## Loading init Ramdisk from multi component Legacy Image at 25000800 ...
-usb_stop(USB_PORT0)
-usb_stop(USB_PORT1)
-usb_stop(USB_PORT2)
Loading Multi-File Image ... OK
[AT][MB][start kr][2708]

Starting kernel ...

[PROTECT ERROR], not expected dram size: 0x0
#######################################################################
# [PROTECT WARNING], miu kernel protect is not enabled on second dram #
#######################################################################
Uncompressing Linux... done, booting the kernel.
KERN-3.10.23.001049551
tommy: thread_info_cache_init
mtdoops: mtd device (mtddev=name/number) must be supplied
[drivers/mstar2/drv/emac/mdrv_emac.c MDev_EMAC_HW_init 2196] ready init mutex

[drivers/mstar2/drv/emac/mdrv_emac.c MDev_EMAC_HW_init 2197] after init mutex
RBQP_BASE = 50304000
init: /init.clippers.rc: 455: ignored duplicate definition of service 'mdnsd'
init: /zte_init.rc: 38: ignored duplicate definition of service 'xiriservice'
init: ## ProductID: strlen (32)!
healthd: No charger supplies found
init: cannot find '/system/bin/xiriservice_ChinaMobile_SiChuan', disabling 'bluetoothd'
init: cannot find '/system/bin/bleservice', disabling 'bleservice'

luoren123 · 发表于 2018-1-16 15:16

286890528 发表于 2018-1-16 14:33
你找找自带的网络测速我的系统自带的是当贝助手图标名字是网络测速里面有文件快传的功能在电脑网 ...

贝当助手没有电脑版的，手机版的网络测速里面没有别的功能

eggttbaby · 发表于 2018-1-14 21:26

帮顶，祝早日解决

xxxjguo · 发表于 2018-1-15 10:46

老铁666！必须支持一波！

ronin0215 · 发表于 2018-1-15 14:45

我的是s905的u，直接直接线刷了事。。。。。。。

luoren123 · 发表于 2018-1-15 19:57

ronin0215 发表于 2018-1-15 14:45
我的是s905的u，直接直接线刷了事。。。。。。。

有B860AV1.1的固件吗?用B860AV2.1的固件刷可以吗?

luoren123 · 发表于 2018-1-15 19:59

ronin0215 发表于 2018-1-15 14:45
我的是s905的u，直接直接线刷了事。。。。。。。

有B860AV1.1的固件吗?用B860AV2.1的固件刷可以吗?
我的邮箱:13914274104ren@sina.com.

286890528 · 发表于 2018-1-16 11:05

和我的一样无法TTL 无法ADB 无法U盘降级最后用系统自带的网络测试（当贝助手）中的文件快传功能从电脑上传软件安装在盒子上成功破解

luoren123 · 发表于 2018-1-16 14:18

286890528 发表于 2018-1-16 11:05
和我的一样无法TTL 无法ADB 无法U盘降级最后用系统自带的网络测试（当贝助手）中的文件快传功能从电 ...

关键是如何打开盒子传送文件，当贝助手可以传文件到盒子？这要试试。

286890528 · 发表于 2018-1-16 14:33

luoren123 发表于 2018-1-16 14:18
关键是如何打开盒子传送文件，当贝助手可以传文件到盒子？这要试试。

你找找自带的网络测速我的系统自带的是当贝助手图标名字是网络测速里面有文件快传的功能在电脑网页上输网址就能传软件到机顶盒

› 你问我答 / 玩机教程 / 固件 › ROM固件下载

中兴B860AV1.1寻找固件和刷机方法

中兴B860AV1.1寻找固件和刷机方法

相关帖子