Napadlo ma použiť Putty nastavené na serial a sledovať čo sa deje po pripojení boxu. Box sa prihlásil ale len nejakými písmenami a číslom modelu a tam sa booting zastavil.
Po zadaní príkazu help sa objavila ponuka
Kód: Vybrat vše
HDK7111> help
? - alias for 'help'
askenv - get environment variables from stdin
autoscr - run script from memory
base - print or set address offset
bdinfo - print Board Info structure
boot - boot default, i.e., run 'bootcmd'
bootd - boot default, i.e., run 'bootcmd'
bootide - nfs boot command'
bootm - boot application image from memory
bootnfs - nfs boot command'
bootp - boot image via network using BootP/TFTP protocol
cmp - memory compare
coninfo - print console devices and information
cp - memory copy
crc32 - checksum calculation
echo - echo args to console
eeprom - EEPROM sub-system
erase - erase FLASH memory
ethaddr - save mac address to EEPROM
exit - exit script
fatinfo - print information about filesystem
fatload - load binary file from a dos filesystem
fatls - list files in a directory (default /)
flinfo - print FLASH memory information
go - start application at address 'addr'
help - print online help
i2c - I2C sub-system
icrc32 - checksum calculation
iloop - infinite loop on address range
imd - i2c memory display
iminfo - print header information for application image
imls - list all images found in flash
imm - i2c memory modify (auto-incrementing)
imw - memory write (fill)
inm - memory modify (constant address)
iprobe - probe to discover valid I2C chip addresses
test - vfd string
itest - return true/false on integer compare
loadb - load binary file over serial line (kermit mode)
loads - load S-Record file over serial line
loady - load binary file over serial line (ymodem mode)
loop - infinite loop on address range
md - memory display
mii - MII utility commands
mm - memory modify (auto-incrementing)
mtd_update - update mtd enviroment found in flash
mtest - simple RAM test
mw - memory write (fill)
nfs - boot image via network using NFS protocol
nm - memory modify (constant address)
pmb - displays the contents of the PMB
ppbread status
ppbset
printenv- print environment variables
protect - enable or disable FLASH write protection
rarpboot- boot image via network using RARP/TFTP protocol
reset - Perform RESET of the CPU
romfs_info - print header information for application image
run - run commands in an environment variable
sataenv - Determine internal or external sata hdd usage
saveenv - save environment variables to persistent storage
setenv - set environment variables
sleep - delay execution for some time
squash_info - print header information for application image
test - minimal test like /bin/sh
tftpboot- boot image via network using TFTP protocol
test - vfd string
uart_loader - Uart loader
usb - USB sub-system
usb_loader - Usb loader
usbboot - boot from USB device
usbenv - save usb upgrade bit to EEPROM
version - print monitor version
vfd - vfd string
Vo výpise ma zaujala možnosť bootu z USB a tak som naformátoval USB na FAT32 a skopíroval som na neho len rozbalený fw, odpojil box od el. siete, zasunul USB, Putty som nechal spustené a čakal som čo sa stane :-)
Box sa znovu dostal len po číslo modelu a tak som znovu príkazom help vyvolal ponuku príkazov.
Zadal som príkaz usbboot a box oznámil že USB je zastavené a vypýtal si príkaz usb start
Kód: Vybrat vše
HDK7111> usbboot
** No boot device **
HDK7111> usb
USB is stopped. Please issue 'usb start' first.
Kód: Vybrat vše
HDK7111> usb start
(Re)start USB...
Front USB: scanning bus for devices... 2 USB Device(s) found
scanning bus for storage devices... 1 Storage Device(s) found
Kód: Vybrat vše
HDK7111> usb_loader
(Re)start USB...
Front USB: scanning bus for devices... 2 USB Device(s) found
scanning bus for storage devices... 1 Storage Device(s) found
24287882 fac.hd box.fs7110hdpvr.v2.10.11.2012feb01.ird
==> find ird fac.hd box.fs7110hdpvr.v2.10.11.2012feb01.ird [24287882 ] <==
1 file(s), 0 dir(s)
==> usb_loading start fac.hd box.fs7110hdpvr.v2.10.11.2012feb01.ird
reading fac.hd box.fs7110hdpvr.v2.10.11.2012feb01.ird
........................................................................................................................................................................... a veľa bodiek asi dve minúty :-)
ret=> 24287882
Loader_CopyData: index(0) size(190812)
Loader_CopyData: index(1) size(5193431)
Loader_CopyData: index(6) size(1763279)
Loader_CopyData: index(7) size(2949729)
Loader_Parser: index(0) addr[84000000] size(190812), resize(262144)
Loader_Parser: index(1) addr[84040000] size(5193431), resize(5242880)
Loader_Parser: index(6) addr[84540000] size(1763279), resize(1835008)
Loader_Parser: index(7) addr[84700000] size(2949729), resize(3014656)
Loader_Parser: index(8) addr[849e0000] size(14324444), resize(14417920)
Loader_Parser: flash write[idx 6, addr 60000, size (1835008)]
Loader_WriteFlash size=0x1c0000 offset=0xa0060000 data_start 84540000
..............==> unprotect 0
.............. done
==> erase firtst 3 last 16
.....................==> protect 0
==> write[2] 60000 addr 84540000 size 1c0000
Loader_Parser: flash write[idx 8, addr 220000, size (14417920)]
Loader_WriteFlash size=0xdc0000 offset=0xa0220000 data_start 849e0000
..............................................................................................................==> unprotect 0
.............................................................................................................. done
==> erase firtst 17 last 126
.....................................................................................................................................................................==> protect 0
==> write[4] 220000 addr 849e0000 size dc0000
Loader_Parser: flash write[idx 7, addr fe0000, size (3014656)]
Loader_WriteFlash size=0x2e0000 offset=0xa0fe0000 data_start 84700000
.......................==> unprotect 0
....................... done
==> erase firtst 127 last 149
..................................==> protect 0
==> write[3] fe0000 addr 84700000 size 2e0000
Loader_Parser: flash write[idx 1, addr 12c0000, size (5242880)]
Loader_WriteFlash size=0x500000 offset=0xa12c0000 data_start 84040000
........................................==> unprotect 0
........................................ done
==> erase firtst 150 last 189
............................................................==> protect 0
==> write[1] 12c0000 addr 84040000 size 500000
Loader_Parser: flash write etc[idx 0, addr 0, size (190812)]
Loader_WriteFlash size=0x2e95c offset=0xa0000000 data_start 84000000
..==> unprotect 0
.. done
==> erase firtst 0 last 1
..==> protect 0
% Ó7111> FrTs
init started: BusyBox v1.14.2 (2010-08-12 22:27:17 KST)
root::0:0:root:/root:/bin/sh
ERROR: Module rt5370 does not exist in /proc/modules
Starting app: ==============================
== Start Main Application =============
##### Get System Information OK! #####
///////////////////////////////
STFAE_Init......
///////////////////////////////
STFAE_Init 1
STFAE_Init 5
STFAE_Init 6
STFAE_Init 7
STFAE_Init 14
STFAE_Init 15
STFAE_Init 16
STFAE_Init 17
STFAE_Init 18
STFAE_Init 19
STFAE_Init 20
STFAE_Init 21
STFAE_Init 23
STFAE_Init 24
STFAE_Init 25
STFAE_Init 26
STFAE_Init 27
STFAE_Init 28
STFAE_Init 29
STFAE_Init 32
STFAE_Init 32
STFAE_Init 33
STFAE_Init 34
STFAE_Init 35
STFAE_Init 36
STFAE_Init 37
STFAE_Init 38
VOUT_FindI2cNumForHDMI 2
STFAE_Init 42
STFAE_Init OK
Front_IrInit : et6202_fd(ffffffff)
fd_front 30
# VFD type : 10002, ver : 1
_micom_type : 65538
..... [WiA8293_IicInit] error 0
DVB-CI mode 1 disable
..... pes start [0][0], buffer 0
..... pes start [0][0], signal 0
..... pes start [1][0], buffer 0
..... pes start [1][0], signal 0
..... pes start [0][1], buffer 0
..... pes start [0][1], signal 0
..... pes start [1][1], buffer 0
..... pes start [1][1], signal 0
Init Wi OK
Appl> Fri Jul 1 00:06:00 UTC 2011
Fri Jul 1 00:06:00 UTC 2011
Fri Jul 1 00:06:00 UTC 2011
Fri Jul 1 00:06:00 UTC 2011
Fri Jul 1 00:06:00 UTC 2011