河北联通机IPTV顶盒烽火HG680

设置com口与波特率，然后点击打开

接下来打开盒子的电源，putty就开始接收到数据了

AC_ON

MIU0_DQS-OK

MIU00_U

Relocation Offset is: 011d7000

[AT][MB][start ub][334]

U-Boot 2011.06 (Apr 02 2016 - 22:51:05)

[MIU INFO] miu opencreate instance at 559e9418 with private size 80 bytes at 559e9460

create instance at 559e94b8 with private size 52 bytes at 559e9500

uboot held at [557ddf60~56b00000],size=013220a0

CPU : Clippers

Board: BD_MST207C_D01A_S_CLIPPERS

DRAM: 875 MiB

Now running in RAM - U-Boot at: 55c00000

eMMC: HS200 200MHz

下面的省略，还有很多，到此如果跟教程一样的话就说明前期操作完美，可以进行下一步的操作了。

三、放入U盘文件并进行安装即破解

找一个FAT32格式的U盘，最好是空盘，以免出现莫名其妙的问题

把刚刚下载好的当贝桌面放入U盘的根目录，然后插入盒子的usb里面

然后输入命令：df

这里的 /mnt/usb/sda1就是我的U盘所在的目录，你的可能不一样，不过一般都是在mnt文件夹下面的sda1文件夹里面。

然后输入命令进入U盘文件夹下面：cd /mnt/usb/sda1

接下来输入命令：ls

shell@orange:/mnt/usb/sda1 # ls

DangBeiTvLauncher_2.1.2_znds.apk

LOST.DIR

上面的DangBeiTvLauncher_2.1.2_znds.apk就是我下载的当贝桌面apk

接下来输入命令进行安装：pm install DangBeiTvLauncher_2.1.2_znds.apk

shell@orange:/mnt/usb/sda1 # pm install DangBeiTvLauncher_2.1.2_znds.apk

pkg: DangBeiTvLauncher_2.1.2_znds.apk

caller: integrator_set_target_on_demand

[INFO] Data Exchange Count to User Space: 11

[INFO] Voltage: 115

on_demand_handshake: [cpu 3] [Binder_4] woken up, copy cpu_voltage:115 cpu_voltage_type:0 change_cnt: 11 to userspace

[result is 0] input: 11, wake_up wait_queue for write_down

[INFO] VoltageType: 0

[INFO] Data Exchange Count from User Space: 11

Function = change_cpus_timer, Line = 792, cpu0 do: [cpu0] adjust cpufreq for 701000 KHZ to 1200000 KHZ

caller: integrator_set_target_on_demand

[INFO] Data Exchange Count to User Space: 12

on_demand_handshake: [cpu 3] [Binder_4] woken up, copy cpu_voltage:115 cpu_voltage_type:0 change_cnt: 12 to userspace

[result is 0] input: 12, wake_up wait_queue for write_down

[INFO] Voltage: 115

[INFO] VoltageType: 0

[INFO] Data Exchange Count from User Space: 12

Function = change_cpus_timer, Line = 792, cpu0 do: [cpu0] adjust cpufreq for 1200000 KHZ to 701000 KHZ

Success

直到显示Success为止即为安装成功，下面我们来验证一下，输入命令：pm list packages

shell@orange:/mnt/usb/sda1 # pm list packages

package:com.boyaa.scmj.tv.youle

package:com.mstar.android.providers.tv

package:com.android.printspooler

package:com.android.defcontainer

package:android

package:com.android.settings

package:com.android.externalstorage

package:com.hbunicom.iptv

package:com.ipanel.ime

package:com.android.proxyhandler

package:cn.cheerz.ihw

package:com.android.dummyactivity

package:com.android.systemui

package:com.android.inputdevices

package:com.ipanel.home.ctc.upgrade

package:com.android.smspush

package:com.android.packageinstaller

package:com.mstar.miscsetting

package:com.cloud.cyber

package:com.mstar.tvsetting

package:com.ipanel.apps.loading

package:com.dangbei.tvlauncher

package:com.svox.pico

package:com.android.smart.terminal.nativeplayer

package:com.hpplay.happyplay.aw

package:com.huawei.iptv.stb.videotalk.activity

package:tvtests.com.mstar.android.tv

package:com.android.mcast

package:com.voole.vooledesktop

package:com.android.documentsui

package:com.live.firsttv

package:com.CTC_ChinaNet.android.tm

package:com.broadcom.bluetoothmonitor

package:com.android.wallpapercropper

package:com.android.sharedstoragebackup

package:com.android.location.fused

package:com.android.backupconfirm

package:com.android.providers.settings

package:com.android.vpndialogs

package:com.vogins.wodou

package:com.voole.webepg

package:com.android.keyguard

package:com.android.pacprocessor

package:com.huawei.dsm

package:com.android.shell

package:com.suning.tv.ebuy

package:com.mstar.tv.service

package:rca.rc.tvtaobao

仔细找，可以发现里面有我们安装好的当贝桌面apk程序com.dangbei.tvlauncher

然后我们来让当贝桌面启动起来，如果盒子连接这电视机的话就可以看到显示桌面已经换成了当贝桌面，命令如下：am start com.dangbei.tvlauncher

shell@orange:/mnt/usb/sda1 # am start com.dangbei.tvlauncher

Starting: Intent { act=android.intent.action.MAIN cat=[android.intent.category.LAUNCHER] pkg=com.dangbei.tvlauncher }

[dvfs_boost] this client is not running

Function = write_cpufreq_to_RIU, Line = 516, write cpu_freq to RIU: 0x3E8

caller: integrator_set_target_on_demand

[INFO] Data Exchange Count to User Space: 13

on_demand_handshake: [cpu 3] [Binder_4] woken up, copy cpu_voltage:115 cpu_voltage_type:0 change_cnt: 13 to userspace

[result is 0] input: 13, wake_up wait_queue for write_down

[INFO] Voltage: 115

[INFO] VoltageType: 0

[INFO] Data Exchange Count from User Space: 13

shell@orange:/mnt/usb/sda1 # cfg80211: Calling CRDA to update world regulatory domain

rtusb init rt2870 --->

此处省略几百行代码不需要纠结显示了什么

[result is 0] input: 14, wake_up wait_queue for write_down

[INFO] Voltage: 115

[INFO] VoltageType: 0

[INFO] Data Exchange Count from User Space: 14

Function = change_cpus_timer, Line = 792, cpu0 do: [cpu0] adjust cpufreq for 1000000 KHZ to 701000 KHZ

显示到这里，出现[INFO] Function 就表示已经启动当贝桌面完成了，到此，破解完成。

原文链接>>>返回搜狐，查看更多