北京移動(dòng)魔百和 CM211-1 MC022 原系統(tǒng)固件分享

獅緣雅隱 · 發(fā)表于 2022-8-26 14:14

本帖最后由獅緣雅隱于 2022-8-26 22:47 編輯

注意這是盒子的原系統(tǒng)固件
盒子型號(hào)是北京移動(dòng) CM211-1
板子號(hào)是MC022
盒子照片看下面鏈接
http://m.81jnr2m.cn/tv-1221967-1-1.html
跑碼如下
GXLX2:BL1:3cfee7:42a5ae;FEAT:ADFD318C:0;POC:3;RCY:0;EMMC:0;READ:0;0.0;CHK:0;
TE: 42763

BL2 Built : 13:36:55, Jun 22 2020.
gxl g85d6ad1 - longyong.chen@droid02-sz

Board ID = 4, adc=302
set vcck to 1070 mv
set vddee to 1070 mv
sunniwell 4L/8bit_ddr board
CPU clk: 1200MHz
DDR3
DDR3 chl: Rank0+1 @ 792MHz - FAIL
DDR3 chl: Rank0 @ 792MHz
bist_test rank: 0 29 03 4f 3e 1b 62 27 00 4f 44 20 68 28 02 4e 3f 19 65 2a 02 52    3e 18 64 568 - PASS

Rank0: 2048MB(auto)-2T-11
AddrBus test pass!
-s
Load fip header from eMMC, src: 0x0000c200, des: 0x01400000, size: 0x00004000
New fip structure!
Load bl30 from eMMC, src: 0x00010200, des: 0x013c0000, size: 0x00007600
Load bl301 from eMMC, src: 0x00018200, des: 0x01380000, size: 0x00002200
Load bl31 from eMMC, src: 0x0001c200, des: 0x10100000, size: 0x00019600
Load bl33 from eMMC, src: 0x00038200, des: 0x01000000, size: 0x00069e00
NOTICE:  BL3-1: v1.0(debug):361f8a7
NOTICE:  BL3-1: Built : 16:43:26, Dec 19 2018
NOTICE:  BL31: GXL normal boot!
NOTICE:  BL31: BL33 decompress pass
[Image: gxl_v1.1.3103-9234004 2018-12-27 10:43:23 yao.zhang@droid07]
efuse init ops = c5
efuse init hdcp = c, cf9=7
x2_hp_e = 0
bl30: check_permit, count is 1
bl30: check_permit: ok!
chipid: 0 0 3 c c 0 51 b4 a0 a0 0 c5 not ES chip
[0.575503 Inits done]
INFO: BL3-1: Initializing runtime services
WARNING: No OPTEE provided by BL2 boot loader
ERROR: Error initializing runtime service opteed_fast
INFO: BL3-1: Preparing for EL3 exit to normal world
INFO: BL3-1: Next image address = 0x1000000
INFO: BL3-1: Next image spsr = 0x3c9

U-Boot 2015.01-g3b799e1-dirty (Apr 17 2021 - 17:49:32)

DRAM:  2 GiB
Relocation Offset is: 76eaf000
gpio: pin GPIODV_25 (gpio 44) value is 1
gpio: pin GPIOZ_14 (gpio 73) value is 1
register usb cfg[0][1] = 0000000077f5c8c0
[CANVAS]canvas init
vpu: error: vpu: check dts: FDT_ERR_BADMAGIC, load default parameters
vpu: clk_level = 7
vpu: set clk: 666667000Hz, readback: 666660000Hz(0x300)
vpp: vpp_init
boot_device_flag : 1
Nand PHY Ver:1.01.001.0006 (c) 2013 Amlogic Inc.
init bus_cycle=6, bus_timing=7, system=5.0ns
reset failed
get_chip_type and ret:fffffffe
get_chip_type and ret:fffffffe
chip detect failed and ret:fffffffe
nandphy_init failed and ret=0xfffffff1
MMC: aml_priv->desc_buf = 0x0000000073e9fbf0
aml_priv->desc_buf = 0x0000000073ea1f10
SDIO Port B: 0, SDIO Port C: 1
emmc/sd response timeout, cmd8, status=0x1ff2800
emmc/sd response timeout, cmd55, status=0x1ff2800
[mmc_init] mmc init success
dtb magic 08088b1f
   Amlogic multi-dtb tool
   GZIP format, decompress...
   Multi dtb detected
   unified board, board id = 4
   Multi dtb tool version: v2 .
   Support 16 dtbs.
      aml_dt soc: gxlx2 platform: p291 variant: 2g
      dtb 0 soc: gxl plat: p211 vari: 1g
      dtb 1 soc: gxl plat: p211 vari: 512m
      dtb 2 soc: gxl plat: p215 vari: 1g
      dtb 3 soc: gxlx plat: p261 vari: 1g
      dtb 4 soc: gxlx plat: p261 vari: 2g
      dtb 5 soc: gxlx plat: p261 vari: 2g028
      dtb 6 soc: gxlx plat: p261 vari: 2g2
      dtb 7 soc: gxlx plat: p261 vari: 512m
      dtb 8 soc: gxlx plat: p265 vari: 1g
      dtb 9 soc: gxlx plat: p265 vari: 2g
      dtb 10 soc: gxlx2 plat: p291 vari: 1g
      dtb 11 soc: gxlx2 plat: p291 vari: 2g
      dtb 12 soc: gxlx2 plat: p291 vari: 2g028
      dtb 13 soc: gxlx2 plat: p291 vari: 512m
      dtb 14 soc: gxlx2 plat: p295 vari: 1g
      dtb 15 soc: gxlx2 plat: p295 vari: 2g
   Find match dtb: 11
start dts,buffer=0000000073ea4740,dt_addr=0000000073ea4740
   Amlogic multi-dtb tool
   Single dtb detected
parts: 14
00:    logo 0000000002000000 1
01:  recovery 0000000002000000 1
02:    rsv 0000000000800000 1
03:    tee 0000000000800000 1
04:    crypt 0000000002000000 1
05:    misc 0000000002000000 1
06: instaboot 0000000020000000 1
07:    boot 0000000002000000 1
08: system 0000000040000000 1
09:    cache 0000000020000000 2
10: params 0000000004000000 2
11: bootfiles 0000000020000000 2
12:    swdb 0000000001000000 2
13:    data ffffffffffffffff 4
eMMC/TSD partition table have been checked OK!
check pattern success
mmc env offset: 0x27400000
In: serial
Out: serial
Err: serial
board id is : 4
hpd_state=0
cvbs performance type = 7, table = 1
[store]To run cmd[emmc dtb_read 0x1000000 0x40000]
_verify_dtb_checksum()-924: calc 6d686a2f, store 6d686a2f
_verify_dtb_checksum()-924: calc 6d686a2f, store 6d686a2f
dtb_read()-1046: total valid 2
dtb_read()-1113: do nothing
   Amlogic multi-dtb tool
   GZIP format, decompress...
   Multi dtb detected
   unified board, board id = 4
   Multi dtb tool version: v2 .
   Support 16 dtbs.
      aml_dt soc: gxlx2 platform: p291 variant: 2g
      dtb 0 soc: gxl plat: p211 vari: 1g
      dtb 1 soc: gxl plat: p211 vari: 512m
      dtb 2 soc: gxl plat: p215 vari: 1g
      dtb 3 soc: gxlx plat: p261 vari: 1g
      dtb 4 soc: gxlx plat: p261 vari: 2g
      dtb 5 soc: gxlx plat: p261 vari: 2g028
      dtb 6 soc: gxlx plat: p261 vari: 2g2
      dtb 7 soc: gxlx plat: p261 vari: 512m
      dtb 8 soc: gxlx plat: p265 vari: 1g
      dtb 9 soc: gxlx plat: p265 vari: 2g
      dtb 10 soc: gxlx2 plat: p291 vari: 1g
      dtb 11 soc: gxlx2 plat: p291 vari: 2g
      dtb 12 soc: gxlx2 plat: p291 vari: 2g028
      dtb 13 soc: gxlx2 plat: p291 vari: 512m
      dtb 14 soc: gxlx2 plat: p295 vari: 1g
      dtb 15 soc: gxlx2 plat: p295 vari: 2g
   Find match dtb: 11
wipe_data=successful
wipe_cache=successful
bmp pixel: 24
[OSD]load fb addr from dts
[OSD]fb_addr for logo: 0x3dc00000
[OSD]load fb addr from dts
[OSD]fb_addr for logo: 0x3dc00000
[CANVAS]addr=0x3dc00000 width=5760, height=2160
upgrade_step=2
amlkey_init() enter!
[EFUSE_MSG]keynum is 4
[BL31]: tee size: 0
rebootmode=cold_boot
key1 = 7d82dd22
key2 = 7e81dd22
key3 = 728ddd22
time_out = 7a120
ir init
irkey - irkey key_value1 key_value2 key_value3 time_value

Usage:
irkey
ee_gate_off ...
## Booting Android Image at 0x01080000 ...
reloc_addr =73f24990
copy done
   Amlogic multi-dtb tool
   Single dtb detected
load dtb from 0x1000000 ......
Uncompressing Kernel Image ... OK
kernel loaded at 0x01080000, end = 0x020950f0
Loading Ramdisk to 73da0000, end 73e9c471 ... OK
Loading Device Tree to 000000000fff3000, end 000000000ffffc7b ... OK
signature:
fdt_instaboot: get header err

Starting kernel ...

uboot time: 2675020 us
[ 0.000000@0] Initializing cgroup subsys cpu
[ 0.000000@0] Initializing cgroup subsys cpuacct
[ 0.000000@0] Linux version 3.14.29-g18c40508-dirty (luqian@T2) (gcc version    4.9.1 20140529 (prerelease) (crosstool-NG linaro-1.13.1-4.9-2014.07 - Linaro GCC    4.9-2014.06) ) #1 SMP PREEMPT Thu Mar 4 14:40:26 CST 2021
[ 0.000000@0] CPU: ARMv71 Processor [410fd034] revision 4
[ 0.000000@0] bootconsole [earlycon0] enabled
get_dvfs_info 0004
INFO: HDCP22 key read fail!
INFO: p1d 0
INFO: pd1 0
[BL31]: tee size: 0
[BL31]: tee size: 0
[BL31]: tee size: 0
[BL31]: tee size: 0
WARNING: Unimplemented Sip Call: 0x82000036
root@p201_iptv:/ #
下載鏈接見附件

獅緣雅隱 · 發(fā)表于 2022-8-26 14:18

本帖最后由獅緣雅隱于 2022-8-26 21:41 編輯

盒子固件信息如下
root@p201_iptv:/ # ll /dev/block
brw------- root    root    179,  12 2015-01-01 08:00 boot
brw------- root    root    179,  15 2015-01-01 08:00 bootfiles
brw------- root    root    179, 1 2015-01-01 08:00 bootloader
brw------- root    root    179, 3 2015-01-01 08:00 cache
brw------- root    root    179, 9 2015-01-01 08:00 crypt
brw------- root    root    179,  17 2015-01-01 08:00 data
brw------- root    root    179, 4 2015-01-01 08:00 env
brw------- root    root    179,  11 2015-01-01 08:00 instaboot
brw------- root    root    179, 5 2015-01-01 08:00 logo
brw------- root    root    7, 0 2015-01-01 08:00 loop0
brw------- root    root    7, 1 2015-01-01 08:00 loop1
brw------- root    root    7, 2 2015-01-01 08:00 loop2
brw------- root    root    7, 3 2015-01-01 08:00 loop3
brw------- root    root    7, 4 2015-01-01 08:00 loop4
brw------- root    root    7, 5 2015-01-01 08:00 loop5
brw------- root    root    7, 6 2015-01-01 08:00 loop6
brw------- root    root    7, 7 2015-01-01 08:00 loop7
brw------- root    root    179,  10 2015-01-01 08:00 misc
brw------- root    root    179, 0 2015-01-01 08:00 mmcblk0
brw------- root    root    179,  32 2015-01-01 08:00 mmcblk0boot0
brw------- root    root    179,  64 2015-01-01 08:00 mmcblk0boot1
brw------- root    root    179,  96 2015-01-01 08:00 mmcblk0rpmb
brw------- root    root    179,  14 2015-01-01 08:00 params
drwxr-xr-x root    root             2015-01-01 08:00 platform
brw------- root    root    179, 6 2015-01-01 08:00 recovery
brw------- root    root    179, 2 2015-01-01 08:00 reserved
brw------- root    root    179, 7 2015-01-01 08:00 rsv
brw------- root    root    179,  16 2015-01-01 08:00 swdb
brw------- root    root    179,  13 2015-01-01 08:00 system
brw------- root    root    179, 8 2015-01-01 08:00 tee
drwxr--r-- root    root             2015-01-01 08:00 vold
brw------- root    root    253, 0 2015-01-01 08:00 zram0
root@p201_iptv:/ # ls
acct
backup
boot
bootfiles
cache
config
d
data
default.prop
dev
etc
file_contexts
fstab.data.amlogic
fstab.other.amlogic
fstab.system.amlogic
init
init.amlogic.board.rc
init.amlogic.rc
init.amlogic.usb.rc
init.amlogic.wifi.rc
init.amlogic.wifibt.unisoc.rc
init.environ.rc
init.mtk.rc
init.rc
init.trace.rc
init.usb.rc
mnt
params
proc
property_contexts
root
sbin
sdcard
seapp_contexts
sepolicy
storage
swap_zram0
swdb
sys
system
tmp
ueventd.amlogic.rc
ueventd.rc
vendor
root@p201_iptv:/ #

不愛(ài)耍脾氣小孩 · 發(fā)表于 2022-8-26 14:39

提示: 作者被禁止或刪除內(nèi)容自動(dòng)屏蔽

獅緣雅隱 · 發(fā)表于 2022-8-26 21:43

備份固件跑碼如下
f=/storage/external_storage/sda1/boot.img                                  <
65536+0 records in
65536+0 records out
33554432 bytes transferred in 0.652 secs (51463852 bytes/sec)
s of=/storage/external_storage/sda1/bootfiles.img                            <
1048576+0 records in
1048576+0 records out
536870912 bytes transferred in 64.861 secs (8277253 bytes/sec)
er of=/storage/external_storage/sda1/bootloader.img                         <
8192+0 records in
8192+0 records out
4194304 bytes transferred in 0.100 secs (41943040 bytes/sec)
=/storage/external_storage/sda1/cache.img                                  <
1048576+0 records in
1048576+0 records out
536870912 bytes transferred in 108.108 secs (4966060 bytes/sec)
=/storage/external_storage/sda1/crypt.img                                  <
65536+0 records in
65536+0 records out
33554432 bytes transferred in 0.759 secs (44208737 bytes/sec)
/storage/external_storage/sda1/data.img                                     <
^[A/storage/external_storage/sda1/data.img: write error: File too large
8388608+0 records in
8388607+1 records out
4294967295 bytes transferred in 965.564 secs (4448143 bytes/sec)
/storage/external_storage/sda1/env.img                                     <
16384+0 records in
16384+0 records out
8388608 bytes transferred in 0.195 secs (43018502 bytes/sec)
t of=/storage/external_storage/sda1/instaboot.img                            <
1048576+0 records in
1048576+0 records out
536870912 bytes transferred in 106.170 secs (5056710 bytes/sec)
/storage/external_storage/sda1/logo.img                                     <
65536+0 records in
65536+0 records out
33554432 bytes transferred in 0.717 secs (46798370 bytes/sec)
=/storage/external_storage/sda1/loop0.img                                  <
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
=/storage/external_storage/sda1/loop1.img                                  <
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
=/storage/external_storage/sda1/loop2.img                                  <
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
=/storage/external_storage/sda1/loop3.img                                  <
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
=/storage/external_storage/sda1/loop4.img                                  <
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
=/storage/external_storage/sda1/loop5.img                                  <
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
=/storage/external_storage/sda1/loop6.img                                  <
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
=/storage/external_storage/sda1/loop7.img                                  <
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
/storage/external_storage/sda1/misc.img                                     <
65536+0 records in
65536+0 records out
33554432 bytes transferred in 0.721 secs (46538740 bytes/sec)
of=/storage/external_storage/sda1/mmcblk0.img                               <
/storage/external_storage/sda1/mmcblk0.img: write error: File too large
8388608+0 records in
8388607+1 records out
4294967295 bytes transferred in 936.216 secs (4587581 bytes/sec)
of=/storage/external_storage/sda1/mmcblk0boot0.img                         <
8192+0 records in
8192+0 records out
4194304 bytes transferred in 0.109 secs (38479853 bytes/sec)
of=/storage/external_storage/sda1/mmcblk0boot1.img                         <
8192+0 records in
8192+0 records out
4194304 bytes transferred in 0.101 secs (41527762 bytes/sec)
f=/storage/external_storage/sda1/mmcblk0rpmb.img                            <
8192+0 records in
8192+0 records out
4194304 bytes transferred in 0.098 secs (42799020 bytes/sec)
orage/external_storage/sda1/params.img                                     <
131072+0 records in
131072+0 records out
67108864 bytes transferred in 1.270 secs (52841625 bytes/sec)
storage/external_storage/sda1/platform.img                                  <
/dev/block/platform: read error: Is a directory
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
/storage/external_storage/sda1/recovery.img                                  <
65536+0 records in
65536+0 records out
33554432 bytes transferred in 0.644 secs (52103155 bytes/sec)
storage/external_storage/sda1/reserved.img                                  <
131072+0 records in
131072+0 records out
67108864 bytes transferred in 1.283 secs (52306207 bytes/sec)
ge/external_storage/sda1/rsv.img                                           <
16384+0 records in
16384+0 records out
8388608 bytes transferred in 0.175 secs (47934902 bytes/sec)
ge/external_storage/sda1/sda.img                                           <
/storage/external_storage/sda1/sda.img: write error: File too large
8388608+0 records in
8388607+1 records out
4294967295 bytes transferred in 1136.847 secs (3777964 bytes/sec)
rage/external_storage/sda1/sda1.img                                        <
/storage/external_storage/sda1/sda1.img: write error: File too large
8388608+0 records in
8388607+1 records out
4294967295 bytes transferred in 1085.282 secs (3957466 bytes/sec)

age/external_storage/sda1/vold.img                                           <
/dev/block/vold: read error: Is a directory
0+0 records in
0+0 records out
0 bytes transferred in 0.001 secs (0 bytes/sec)
1|root@p201_iptv:/ #
age/external_storage/sda1/tee.img                                           <
16384+0 records in
16384+0 records out
8388608 bytes transferred in 0.190 secs (44150568 bytes/sec)
age/external_storage/sda1/swdb.img                                           <
32768+0 records in
32768+0 records out
16777216 bytes transferred in 0.332 secs (50533783 bytes/sec)
orage/external_storage/sda1/system.img                                     <
2097152+0 records in
2097152+0 records out
1073741824 bytes transferred in 210.877 secs (5091792 bytes/sec)
root@p201_iptv:/ #
其中bootloader同時(shí)也備份有bin格式

獅緣雅隱 · 發(fā)表于 2022-8-26 22:39

現(xiàn)在刷了一個(gè)IPTV的固件
安卓4.42的
下面是新固件跑碼信息
北京移動(dòng)魔百和 CM211-1 MC022 原系統(tǒng)固件分享

獅緣雅隱 · 發(fā)表于 2022-8-27 20:49

我這盒子很是特殊
注意看圖片，閃存是nand的，但注意看跑碼信息，確實(shí)emmc
還有就是這個(gè)款機(jī)子的芯片是晶晨S905L3-B，而同型號(hào)同板號(hào)的也有S905L的
所以刷機(jī)的時(shí)候一定要看清楚
其中3-B刷armbian是沒(méi)有網(wǎng)的
而S905L是有有線的，但無(wú)線似乎不行

ddythink · 發(fā)表于 2023-1-17 20:53

請(qǐng)教一下，下載的固件解壓出來(lái)好多個(gè)img怎么刷呢？

w77379228 · 發(fā)表于 2023-3-25 13:11

這個(gè)恢復(fù)是要TTL？

XYUU · 發(fā)表于 2023-4-1 22:32

本帖最后由 XYUU 于 2023-4-3 18:52 編輯

我的ZXV10 B860AV2.1-A2中興的盒子刷這個(gè)原版固件恢復(fù)成功，但I(xiàn)PTV無(wú)法使用，因?yàn)闆](méi)法恢復(fù)三碼。備份固件的時(shí)候沒(méi)用列出EMCC的區(qū)塊信息，所以不知道swdb這個(gè)分區(qū)實(shí)際在哪個(gè)區(qū)里，我看了swdb分區(qū)里邊沒(méi)有三碼信息。另外，樓主這個(gè)固件備份的時(shí)候沒(méi)看分區(qū)就直接把所有虛擬分區(qū)都備份了，然后目標(biāo)存儲(chǔ)空間又不足，導(dǎo)致最關(guān)鍵的備份：of=/storage/external_storage/sda1/mmcblk0.img <
/storage/external_storage/sda1/mmcblk0.img: write error: File too large
8388608+0 records in
8388607+1 records out
4294967295 bytes transferred in 936.216 secs (4587581 bytes/sec)
報(bào)錯(cuò)了，沒(méi)有備份成功。

taory · 發(fā)表于 2023-5-17 18:27

備份怎么恢復(fù)？能講一下嗎？

不愛(ài)耍脾氣小孩頭像被屏蔽	板凳發(fā)表于 2022-8-26 14:39 \| 只看該作者 \| 來(lái)自江西提示: 作者被禁止或刪除內(nèi)容自動(dòng)屏蔽
不愛(ài)耍脾氣小孩頭像被屏蔽
	回復(fù) 支持反對(duì) 使用道具舉報(bào)

› 運(yùn)營(yíng)商IPTV / 有線電視 / 廣電機(jī)頂盒 › 中國(guó)移動(dòng)魔百盒

北京移動(dòng)魔百和 CM211-1 MC022 原系統(tǒng)固件分享 ...

北京移動(dòng)魔百和 CM211-1 MC022 原系統(tǒng)固件分享

相關(guān)帖子

北京移動(dòng)魔百和 CM211-1 MC022 原系統(tǒng)固件