江苏有线创维HC2910机顶盒硬件配置是Hi3798mv200H cpu,2G运存+8G内存,标榜入门级4K盒子。
拆机,有ttl接口,焊上针脚,接CH340小板跑马。
跑码部分:
Bootrom start (CA)
Boot Media: eMMC (Default Speed)
Decrypt auxiliary code ...OK
lsadc voltage min: 000002FF, max: 00000300, aver: 000002FF, index:00000001
Enter boot auxiliary code
Auxiliary code - v1.00
DDR code - V1.1.2.1 20171011
Build: Sep 11 2018 - 19:55:16
Reg Version: v1.5.0x
Reg Time: 2018/11/2017:56:59
Reg Name: hi3798m2hdmg_hi3798mv200h_DDR3-1866-2rank-2rank-2rank_1GB_16bitx4_4layers_mii_A247 5.reet cpu freq
Boot auxiliary code success
Decrypting ASC code ...OK
Bootrom success
ASC start
Basic ACPU Start Code - 1.0.0
Build: Aug 31 2018 - 22:41:23
CPU:hi3798mv310
System startup
Relocate Boot
Jump to C code
Compressed-boot v1.0.0
Uncompress.............................Ok
System startup
Relocate Boot
Jump to C code
Fastboot 3.3.0 (www-data@rjyby07) (Jul 26 2019 - 10:43:44)
Fastboot: Version 3.3.0
Build Date: Jul 26 2019,10:45:19
CPU: Hi3798Mv200H(CA)
Boot Media: eMMC
DDR Size: 2GB
Found flash memory controller hifmc100.
no found nand device.
MMC/SD controller initialization.
scan edges:2 p2f:4 f2p:6
mix set temp-phase 1
scan elemnts: startp:90 endp:87
Tuning SampleClock. mix set phase:[01/07] ele:[13/15]
MMC/SD Card:
MID: 0x45
Read Block: 512 Bytes
Write Block: 512 Bytes
Chip Size: 7636800K Bytes (High Capacity)
Name: "DG4008"
Chip Type: MMC
Version: 5.1
Speed: 100000000Hz
Mode: HS400
Voltage: 1.8V
Bus Width: 8bit
Boot Addr: 0 Bytes
Net: up
Boot Env on eMMC
Env Offset: 0x00100000
Env Size: 0x00010000
Env Range: 0x00010000
SDK Version: HiSTBTVOSV100R001C00SPC052_20190122
Security begin read RSA CRC Key in USB disk
Security no RSA CRC Key in USB disk
[BOOT] tee enable
Burn to secure chipset success.
Set TEE enable sucesss.
TEE status: Enable.
mac:78:53:0D:5D:EB:C3
HI_Android_Authenticate,120: secure chip flag = 1
MMC read: dev # 0, block # 0, count 1 ... 1 blocks read: OK
…….略过。
看到CA这是高安,截取到跑分区信息:
Kernel command line: androidboot.selinux=disabledconsole=ttyAMA0,115200
blkdevparts=mmcblk0:1M(fastboot),1M(bootargs),1M(param),1M(misc),8M(baseparam),20M(logo),40M(manufactory),28M(recovery),40M(kernel),40M(trustedcore),20M(securestore),20M(atv),200M(skyworth),100M(factory),1024M(system),640M(cache),-(userdata)hbcomp=/dev/block/mmcblk0p15 initrd=0x4000000,0xCAF85 mem=2G mmz=ddr,0,0,48M
vmalloc=500M
按照分区信息上Hitool,对照分区做对应分区表,做好后上载分区镜像,备份各个分区。
分区备份后,对system分区用ROM制作工具解包修改,把logo分区用芒果嗨的logo替换,system分区media也用芒果嗨的开机动画替代。
在系统应用里加上当贝桌面4.1和当贝市场,加入小白文件管理器,在解开的镜像system\etc文件夹下将Q22的key.xml和keyfunction.xml复制覆盖原文件,使可以使用移动或电信这些遥控器,之后重新打包system镜像。
修改后的system和芒果嗨的logo用hitool烧写到盒子上。
烧写完成盒子启动。
开机是芒果嗨和动画界面,稍等,配置当贝桌面。在当贝桌面的设置可以进入原机的设置,设置有第三方应用的选择,要调整为允许。之后退出。
无线支持2.4G,支持蓝牙。有线是百兆网卡。
原机的mac和sn在paramf 分区上,00000240h头六位为MAC地址,00000330h-340h为18位SN。用烧写包如果是全分区烧写注意修改mac地址,否则烧写出来都一个mac。
下载地址:链接:https://pan.baidu.com/s/1zQhV_4AQ3LHpsRVBgnb5_A
提取码:o3mm
过期联系QQ:1337565980
|