河北联通IPTV机顶盒破解烽火HG680R.docx

1、河北联通IPTV机顶盒破解烽火HG680R河北联通IPTV机顶盒破解烽火HG680-R 零、杂言一、 硬件连接篇二、开机检查三、放入U盘文件并进行安装即破解四、个人理解的名词解释五、附录办理宽带的时候顺便带了IPTV机顶盒，到手吃灰了俩月找了找网上的破解资料，发现只有拆解的，没有破解的，索性自己摸索着破解试试看，没想到还真的成功了，特此发帖供有这个盒子的玩家折腾，cpu是MSO9280，RAM 1G,ROM 4G EMMC，编写by洗洗枣这个帖子应该算是首次破解680-r结尾的盒子，其他盒子只要是安卓的，方法都大同小异，可以试试。前言：所有的重要东西都用了黄色字体，命令使用了红色字体，教程结尾

2、处会有各个红色字体命令的解释用途说明，教程内有所用到的软件链接，直接点击或者复制链接到下载器即可下载，要分清你我的概念，你的是你的，我的是我的，你的不是我的，我的不是你的，里面的命令是固定的，但是有可能U盘查到盒子以后的路径是不一样的，不要按照我的抄写，要按照教程操作，并不是抄，谢谢！需要物品清单电脑一台，配置随意，win系统，linux系统的不会TTL一个，我用的5块多包邮的CH340机顶盒一个，河北版联通IPTV烽火HG680-RFAT32格式的U盘一个，容量我用的4G，仅作为参考电视机一台（可选）需要软件清单Putty下载地址当贝桌面下载地址一、 硬件连接篇为了方便小白，步骤写清楚一点，

3、首先把TTL不接任何东西插到电脑上面重要 需要注意如下设置：TTL设置电平 重要计算机（我的电脑）-管理-设备管理器-CH340-波特率选择115200点确定硬件连接完毕=华丽丽的分割线=二、 开机检查首先把所有的线连接好，机顶盒处需要的线是ttl线，电源线，其他的不需要接，电脑方面只需要插上TTL就准备完毕了。打开Putty设置com口与波特率，然后点击打开接下来打开盒子的电源，putty就开始接收到数据了AC_ONMIU0_DQS-OKMIU00_URelocation Offset is: 011d7000ATMBstart ub334U-Boot (Apr 02 2016 - 22:5

4、1:05)MIU INFO miu opencreate instance at 559e9418 with private size 80 bytes at 559e9460create instance at 559e94b8 with private size 52 bytes at 559e9500uboot held at 557ddf6056b00000,size=013220a0CPU : ClippersBoard: BD_MST207C_D01A_S_CLIPPERSDRAM: 875 MiBNow running in RAM - U-Boot at: 55c00000eM

5、MC: HS200 200MHz下面的省略，还有很多，到此如果跟教程一样的话就说明前期操作完美，可以进行下一步的操作了。=华丽丽的分割线=三、放入U盘文件并进行安装即破解找一个FAT32格式的U盘，最好是空盘，以免出现莫名其妙的问题把刚刚下载好的当贝桌面放入U盘的根目录，然后插入盒子的usb里面然后输入命令：df这里的 /mnt/usb/sda1就是我的U盘所在的目录，你的可能不一样，不过一般都是在mnt文件夹下面的sda1文件夹里面。然后输入命令进入U盘文件夹下面：cd /mnt/usb/sda1接下来输入命令：lsshellorange:/mnt/usb/sda1 # ls上面的就是我下载

6、的当贝桌面apk接下来输入命令进行安装：pm install # pm install pkg: integrator_set_target_on_demandINFO Data Exchange Count to User Space: 11INFO Voltage: 115on_demand_handshake: cpu 3 Binder_4 woken up, copy cpu_voltage:115 cpu_voltage_type:0 change_cnt: 11 to userspaceresult is 0 input: 11, wake_up wait_queue for wr

7、ite_downINFO VoltageType: 0INFO Data Exchange Count from User Space: 11Function = change_cpus_timer, Line = 792, cpu0 do: cpu0 adjust cpufreq for 701000 KHZ to 1200000 KHZcaller: integrator_set_target_on_demandINFO Data Exchange Count to User Space: 12on_demand_handshake: cpu 3 Binder_4 woken up, co

8、py cpu_voltage:115 cpu_voltage_type:0 change_cnt: 12 to userspaceresult is 0 input: 12, wake_up wait_queue for write_downINFO Voltage: 115INFO VoltageType: 0INFO Data Exchange Count from User Space: 12Function = change_cpus_timer, Line = 792, cpu0 do: cpu0 adjust cpufreq for 1200000 KHZ to 701000 KH

9、ZSuccess直到显示Success为止即为安装成功，下面我们来验证一下，输入命令：pm list packagesshellorange:/mnt/usb/sda1 # pm list packagespackage:仔细找，可以发现里面有我们安装好的当贝桌面apk程序然后我们来让当贝桌面启动起来，如果盒子连接这电视机的话就可以看到显示桌面已经换成了当贝桌面，命令如下：am start # am start Intent act= cat= pkg= dvfs_boost this client is not runningFunction = write_cpufreq_to_RIU,

10、Line = 516, write cpu_freq to RIU: 0x3E8caller: integrator_set_target_on_demandINFO Data Exchange Count to User Space: 13on_demand_handshake: cpu 3 Binder_4 woken up, copy cpu_voltage:115 cpu_voltage_type:0 change_cnt: 13 to userspaceresult is 0 input: 13, wake_up wait_queue for write_downINFO Volta

11、ge: 115INFO VoltageType: 0INFO Data Exchange Count from User Space: 13shellorange:/mnt/usb/sda1 # cfg80211: Calling CRDA to update world regulatory domainrtusb init rt2870 -此处省略几百行代码不需要纠结显示了什么 result is 0 input: 14, wake_up wait_queue for write_downINFO Voltage: 115INFO VoltageType: 0INFO Data Excha

12、nge Count from User Space: 14Function = change_cpus_timer, Line = 792, cpu0 do: cpu0 adjust cpufreq for 1000000 KHZ to 701000 KHZ显示到这里，出现INFO Function 就表示已经启动当贝桌面完成了，到此，破解完成。四、 个人理解的名词解释df列出操作系统下的所有分区cd /mnt/usb/sda1进入我的U盘文件夹下ls列出我的U盘文件夹下的所有文件pm install 安装当贝桌面命令pm list packages列出所有安装在系统下的apk软件am sta

13、rt 运行安装在系统下的apk软件附录：cpuinfo * cpuinfo start*shellorange:/ $ cat /proc/cpuinfoprocessor : 0model name : ARMv7 Processor rev 3 (v7l)BogoMIPS : Features : swp half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva id ivtCPU implementer : 0x41CPU architecture: 7CPU variant : 0x0CPU part : 0xc07CPU revi

14、sion : 3processor : 1model name : ARMv7 Processor rev 3 (v7l)BogoMIPS : Features : swp half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva id ivtCPU implementer : 0x41CPU architecture: 7CPU variant : 0x0CPU part : 0xc07CPU revision : 3processor : 2model name : ARMv7 Processor rev 3 (v7l)BogoMIPS

15、 : Features : swp half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 idiva id ivtCPU implementer : 0x41CPU architecture: 7CPU variant : 0x0CPU part : 0xc07CPU revision : 3processor : 3model name : ARMv7 Processor rev 3 (v7l)BogoMIPS : Features : swp half thumb fastmult vfp edsp neon vfpv3 tls vfpv4 i

16、diva id ivtCPU implementer : 0x41CPU architecture: 7CPU variant : 0x0CPU part : 0xc07CPU revision : 3Hardware : clippersRevision : 0020Serial : 0000000000000000* cpuinfo end*meminfo* meminfo start*shellorange:/proc # cat meminfoMemTotal: 832964 kBMemFree: 368180 kBBuffers: 5256 kBCached: 205304 kBSw

17、apCached: 0 kBActive: 166216 kBInactive: 189372 kBActive(anon): 145036 kBInactive(anon): 4332 kBActive(file): 21180 kBInactive(file): 185040 kBUnevictable: 0 kBMlocked: 0 kBHighTotal: 72704 kBHighFree: 1092 kBLowTotal: 760260 kBLowFree: 367088 kBSwapTotal: 102396 kBSwapFree: 102396 kBDirty: 4 kBWrit

18、eback: 0 kBAnonPages: 145000 kBMapped: 88716 kBShmem: 4368 kBSlab: 12596 kBSReclaimable: 4404 kBSUnreclaim: 8192 kBKernelStack: 4376 kBPageTables: 14560 kBNFS_Unstable: 0 kBBounce: 0 kBWritebackTmp: 0 kBCommitLimit: 518876 kBCommitted_AS: 8711976 kBVmallocTotal: 245760 kBVmallocUsed: 53248 kBVmalloc

19、Chunk: 137216 kBCMA Free: 540 kBCMA heap info(name,alloc,in cache,fail,total free): DEFAULT_CMA_BUFFER (1496kb 0kb 0kb 2600kb) vdec (0kb 0kb 0kb 163840kb)* meminfo end*mount* mount start*shellorange:/proc # mountrootfs / rootfs ro,relatime 0 0tmpfs /dev tmpfs rw,nosuid,relatime,mode=755 0 0devpts /d

20、ev/pts devpts rw,relatime,mode=600 0 0proc /proc proc rw,relatime 0 0sysfs /sys sysfs rw,relatime 0 0debugfs /sys/kernel/debug debugfs rw,relatime 0 0none /acct cgroup rw,relatime,cpuacct 0 0none /sys/fs/cgroup tmpfs rw,relatime,mode=750,gid=1000 0 0tmpfs /mnt/secure tmpfs rw,relatime,mode=700 0 0tm

21、pfs /mnt/asec tmpfs rw,relatime,mode=755,gid=1000 0 0tmpfs /mnt/obb tmpfs rw,relatime,mode=755,gid=1000 0 0none /dev/cpuctl cgroup rw,relatime,cpu 0 0tmpfs /mnt/usb tmpfs rw,relatime,mode=755,gid=1000 0 0tmpfs /mnt/iso tmpfs rw,relatime,mode=755,gid=1000 0 0tmpfs /mnt/samba tmpfs rw,relatime,mode=75

22、5,gid=1000 0 0tmpfs /var tmpfs rw,relatime,mode=775,gid=1000 0 0/dev/block/platform/by-name/system /system ext4 ro,relatime,data=ordered 0 0/dev/block/platform/by-name/cache /cache ext4 rw,nosuid,nodev,noatime,data=ordered 0 0/dev/block/platform/by-name/userdata /data ext4 rw,nosuid,nodev,noatime,da

23、ta=ordered 0 0/dev/block/platform/by-name/tvservice /tvservice ext4 ro,relatime,data=ordered 0 0/dev/block/platform/by-name/tvconfig /tvconfig ext4 ro,relatime,data=ordered 0 0/dev/block/platform/by-name/tvdatabase /tvdatabase ext4 rw,nosuid,nodev,noatime,data=ordered 0 0/dev/block/platform/by-name/

24、tvcustomer /tvcustomer ext4 rw,nosuid,nodev,noatime,data=ordered 0 0adb /dev/usb-ffs/adb functionfs rw,relatime 0 0/dev/fuse /mnt/shell/emulated fuse rw,nosuid,nodev,relatime,user_id=1023,group_id=1023,default_permissions,allow_other 0 0* mount end*ps* ps start*shellorange:/ # psUSER PID PPID VSIZE

25、RSS WCHAN PC NAMEroot 1 0 604 440 c0109e40 0001a09c S /initroot 2 0 0 0 c0046d64 00000000 S kthreaddroot 3 2 0 0 c004e8f0 00000000 S ksoftirqd/0root 4 2 0 0 c00408dc 00000000 S kworker/0:0root 5 2 0 0 c00408dc 00000000 S kworker/0:0Hroot 6 2 0 0 c00408dc 00000000 S kworker/u8:0root 7 2 0 0 c004e8f0

26、00000000 S migration/0root 8 2 0 0 c008b5e0 00000000 S rcu_preemptroot 9 2 0 0 c008b378 00000000 S rcu_bhroot 10 2 0 0 c008b378 00000000 S rcu_schedroot 11 2 0 0 c004e8f0 00000000 S migration/1root 12 2 0 0 c004e8f0 00000000 S ksoftirqd/1root 13 2 0 0 c00408dc 00000000 S kworker/1:0root 14 2 0 0 c00

27、408dc 00000000 S kworker/1:0Hroot 15 2 0 0 c004e8f0 00000000 S migration/2root 16 2 0 0 c004e8f0 00000000 S ksoftirqd/2root 18 2 0 0 c00408dc 00000000 S kworker/2:0Hroot 19 2 0 0 c004e8f0 00000000 S migration/3root 20 2 0 0 c004e8f0 00000000 S ksoftirqd/3root 21 2 0 0 c00408dc 00000000 S kworker/3:0

28、root 22 2 0 0 c00408dc 00000000 S kworker/3:0Hroot 23 2 0 0 c0040650 00000000 S khelperroot 24 2 0 0 c034b640 00000000 S kdevtmpfsroot 25 2 0 0 c00408dc 00000000 S kworker/u8:1root 30 2 0 0 bf04e9fc 00000000 S kworker/1:1root 31 2 0 0 c00408dc 00000000 S kworker/2:1root 277 2 0 0 c0040650 00000000 S

29、 writebackroot 279 2 0 0 c0040650 00000000 S biosetroot 281 2 0 0 c0040650 00000000 S kblockdroot 293 2 0 0 c03a7e88 00000000 S khubdroot 307 2 0 0 c045729c 00000000 S ion_system_heaproot 399 2 0 0 c0040650 00000000 S rpciodroot 411 2 0 0 c00c775c 00000000 S kswapd0root 456 2 0 0 c0135d48 00000000 S fsnotify_markroot 473 2 0 0 c0040650 00000000 S nfsiodroot 477 2 0 0 c0040650 00000000 S cifsiodroot 489 2