【刷机实战】海信液晶LED58K280J砖机在线写EMMC引导和U盘升级

不能忘了你

高手的维修经验是我要学习的，谢谢

普陀小史

谢谢分享，我们要多多学习

女人不哭

是我U盘不行吗

vtkwxf

Boot-
DRAM Channel A Calibration.
Byte 0 : Gating(2 ~ 67), Size=66, Mid=34, Set=34.
Byte 1 : Gating(2 ~ 57), Size=56, Mid=29, Set=29.
Byte 2 : Gating(2 ~ 72), Size=71, Mid=37, Set=37.
Byte 3 : Gating(2 ~ 67), Size=66, Mid=34, Set=34.
HW Byte 0 : DQS(10 ~ 43), Size 34, Set 26, HW_Set 29.
HW Byte 1 : DQS(10 ~ 43), Size 34, Set 26, HW_Set 27.
HW Byte 2 : DQS(10 ~ 41), Size 32, Set 25, HW_Set 27.
HW Byte 3 : DQS(9 ~ 41), Size 33, Set 25, HW_Set 27.
DRAM A Size = 768 Mbytes.
Boot
Start Pmain
0x0000a000
EMMC boot

CID:0x24186e19
:0x2056000b
:0x594e4958
:0x90014a48
LZHS addr:0x00100040
LZHS size:0x000a7368
LZHS checksum:0x000000f1
Boot
Start Lmain

MT5880 Boot Loader v0.9
Boot reason: A/C power on!!
Load VGA internal EDID.................
use code based  EDID.................
Load HDMI internal EDID.................
CEC Physical offset 152
HDMI1 Physical adr 0x10
HDMI1 PA 0x10
HDMI1 checksum 0xdf
HDMI2 PA 0x10
HDMI2 checksum 0xdf
HDMI3 PA 0x20
HDMI3 checksum 0xcf
HDMI4 PA 0x30
HDMI4 checksum 0xbf
SIF_Master0: new design
IR DATA register : 0x       0
Boot reason: A/C power on!!T8032 init A/C on case loader stage...
Load T8032 FW (addr: 0x  d81700, size: 24576)success!!
T8032 FW version: 73
T8032 change to loader stage...
LDR_FlashCopy 0xf010 0x59f80 0x80
1st MAC in EEP is valid (c8:16:bd:01:6e:48)
1st : (c8:16:bd:01:6e:48)
2nd : (ff:ff:ff:ff:ff:ff)
PDWNC_Init
Boot reason: A/C power on!!
Do USB upgrade
USB: Vbus turn up time = 199 ms, Max =0 ms.
USB-0: insert.
USB-0: ClassCode= 0x8, u4Diff=138 ms.

FIND_CLASS_MASS_STORAGE.
Wait USB medium to be mounted...
USB Medium on Device, Time = 1117 ms.
USB block size = 512 bytes.
[_LdrUsbFileRead].
[_LdrUsbFileRead]..
[_LdrUsbFileRead]upgrade_loader.pkg
upgrade file upgrade_loader.pkg was found
Upgrade File Name: upgrade_loader.pkg
Upgrade File Size: 351575442 Bytes
Display 0x00dac9d0 Idx:1 BG:0x00eeeeee
[JW]LDR_PmxDisplayHWinit!!!
---------- [SA7] vErrorHandleInit ----------
[SA7] Error handling init
[SA7] PANEL_GetPanelWidth=0x780, PANEL_GetPanelHeight=0x438 , wDrvGetOutputHTotal=0x898 , wDrvGetOutputVTotal=0x465
[SA7] PANEL_GetHTotalMax=0x92c, PANEL_GetHTotalMin=0x840, PANEL_GetVTotalMax=0x546, PANEL_GetVTotalMin=0x456
[SA7] PANEL_GetPixelClkMax=154000000, PANEL_GetPixelClkMin=119260000
[SA7] PANEL_GetPixelClk60Hz = 0x8d9ee20
---------- [SA7] vErrorHandleSetByTiming ----------
[SA7] u2HSyncWidth=260, u2HSyncStart=1930, u2VSyncWidth=26, u2VSyncStart=1094
---------- [SA7] vErrorHandleSetByTiming end----------
---------- [SA7] vErrorHandleSetByPanel end----------
[SA7] vDDDSInit
H_POS_60HZ=2064
HLEN_TOTAL_TYPI=2200
HSYNCLEN_TYPI=32
u4HPorchF=16
wDISPLAY_WIDTH=1920
---------- [SA7] vErrorHandleSetByTiming ----------
[SA7] u2HSyncWidth=32, u2HSyncStart=1936, u2VSyncWidth=8, u2VSyncStart=1117
---------- [SA7] vErrorHandleSetByTiming end----------
[JW][LVDS] u4Freq=148500000
vDrvSetOCLKClockSchemaInit.
[SA7] _fgVopllUseDDDS = True
[JW] @vSetVOPLLFreq u4Syspll=648000000
[JW] @vSetVOPLLFreq #1 u8Cw=0
[JW] @vSetVOPLLFreq _u1DddsCWMul=2
[JW] @vSetVOPLLFreq #2 u8Cw=10
[JW] @vSetVOPLLFreq DDDS_00_DDDS_FREQ_CW=73209669
[LVDS] VOPLL Initialize successful !
[JW]vApiPanelPowerSequence @ LDR_PmxDisplayHWInit
[JW]vDrvLVDSConfig @ vApiPanelPowerSequence LVDS
LED42K610X3D LED55K610X3D: CC_MEMC_MODULE_EXTERNAL
Color:14 BmpAddr:0x00d46d80 Width:600 Height:100
Panel 1920 x 1080

*************u4BmpPitch=2400******************
LDR_OsdDisplay(14, 0x00d46d80, 600, 100) return 0
Msdc Erase Unit:0x100000
Use internal integrity check API
open File = /mnt/usb_0/Hisense_5505/upgrade_loader.pkg
open File = /mnt/usb_0/Hisense_5505/upgrade_loader.pkg
Encrypted header:
52 6f f3 37 9c cd d2 43 9d d8 e3 86 8a c0 b6 09    Ro.7...C........
af cd 58 3b 01 9c e2 2a 8c f4 3a 6e dc 3c 75 86    ..X;...*..:n.<u.
09 01 25 b0 02 6e 07 58 43 fa d9 08 ca 8e ea 3f    ..%..n.XC......?
d9 6d 34 76 44 87 61 13 46 1a 9c 06 98 da ab 53    .m4vD.a.F......S
de b0 4d 50 94 00 f8 3d 81 87 a2 94 72 73 7e a3    ..MP...=....rs~.
fc 8c 20 8b 92 6f 80 ee 36 c5 9b 22 0a 74 ef d9    .....o..6..".t..
b2 96 d1 db e3 ff 28 d9 38 0d 44 36 c9 f6 f8 01    ......(.8.D6....
37 46 d0 a5 2e c7 cd 31
Header:
68 69 73 65 23 44 48 40 46 69 52 6d 49 44 54 56    hise#DH@FiRmIDTV
30 38 30 31 5f 30 30 32 31 37 31 5f 31 5f 30 30    0801_002171_1_00
31 5f 31 34 38 5f 30 30 31 5f 36 33 5f 30 30 31    1_148_001_63_001
5f 33 30 5f 30 30 31 5f 32 31 5f 31 34 36 30 35    _30_001_21_14605
39 33 36 36 35 00 00 00 00 00 00 00 00 00 00 00    93665...........
64 a3 6b 20 00 00 00 00 6d 74 35 38 38 30 5f 63    d.k.....mt5880_c
6e 5f 61 6e 64 72 6f 69 64 5f 32 64 5f 64 74 6d    n_android_2d_dtm
62 00 00 00 00 00 00 00
open File = /mnt/usb_0/Hisense_5505/upgrade_loader.pkg
Validate codefile HMAC
open File = /mnt/usb_0/Hisense_5505/upgrade_loader.pkg
Encrypted digest:
80 a3 26 2c ba 9e 1a 99 a8 22 a0 9a d7 99 47 45    ..&,....."....GE
7d 0d 0a 77 4f 5d 41 8f 09 66 2f aa 29 17 7b 93    }..wO]A..f/.).{.

Download digest
48 a5 ca 06 ad b7 69 02 b8 fc 73 b9 7d ec 8b 21    H.....i...s.}..!
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................

New HMAC
48 a5 ca 06 ad b7 69 02 b8 fc 73 b9 7d ec 8b 21    H.....i...s.}..!
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    ................

Signature matched
Erase All eMMC before any upgrade...
CMD13 ARG 0x00010000 - CMD Timeout (AccuVect 0x00000200 INTR 0x00000000).
MsdcSendCmd : CMD13 ARGU00010000 : CMD0000008D ARGU00010000 BLK_NUM00000001!!
Return Value:00000001

0X00000000 | 00000098 00000000 810F0002 00000000
0X00000010 | 00000000 00000000 00000000 00000000
0X00000020 | 00000000 00000000 00000000 00000000
0X00000030 | 00100000 00000000 00000000 00000001
0X00000040 | 00000000 00000000 00000000 00000000
0X00000050 | 00000001 00000000 00000000 00000000
0X00000060 | 00000000 00000000 00000000 00000000
0X00000070 | 00000000 00200002 00000040 00000000
0X00000080 | 00000000 00000000 00000000 00000000
0X00000090 | 00000000 00000000 00006000 00000000
0X000000A0 | 00000000 00000000 00000000 00000000
0X000000B0 | 403C004F 00000009 00000000 00000000
0X000000C0 | 00000000 00000000 00000000 00000000
0X000000D0 | 00000000 00000000 00000000 00000000
0X000000E0 | 00098000 000A0000 000A0000 00000000
0X000000F0 | 00000000 00000000 00000000 00000000
0X00000100 | 20111025
Clock Src Setting - 0xF000D380: 0x00000000
Pinmux Setting - 0xF000D604: 0x00001568
DBG_SEL:0 - 00000000
DBG_SEL:1 - 00000000
DBG_SEL:2 - 00000000
DBG_SEL:3 - 00000200
DBG_SEL:4 - 00000000
DBG_SEL:5 - 02000200
DBG_SEL:6 - 00000000
DBG_SEL:7 - 00000001
DBG_SEL:8 - 00000000
DBG_SEL:9 - 00000000
DBG_SEL:10 - 00000000
DBG_SEL:11 - 00000000
DBG_SEL:12 - 00000000
DBG_SEL:13 - 00000000
DBG_SEL:14 - 00000000
DBG_SEL:15 - 00000000
DBG_SEL:16 - 00000000
DBG_SEL:17 - 00000000
DBG_SEL:18 - 00000000
DBG_SEL:19 - 00000000
DBG_SEL:20 - 00000000
DBG_SEL:21 - 00000000
DBG_SEL:22 - 00000000
DBG_SEL:23 - 00000000
DBG_SEL:24 - 00000000
DBG_SEL:25 - 00000001、
请教楼主，我也是更换EMMC。写了引导文件。插上U盘开绍升级。但是上面打印信息显示开始升级前把EMMC清空了。升级也不能完成。打印信息停在这里。屏上一直显示在升级中。死机了。
关机再开。没有打印信息显示。应该 是升级时EMMC清空了。
试了，几次。都 不行。
不知道 该咋弄了。

山精野怪

楼主要是遇到主芯片加密的换主芯片改如何处理？

cgl1089

感谢版主分享宝贵经验！  

Luan471

谢谢分享实战经验。

qxcs

进来学习

乌海宇翔

山精野怪 发表于 2021-3-8 21:28
楼主要是遇到主芯片加密的换主芯片改如何处理？

写量产软件   

fangrihe

感谢楼主的分享