Winstars WS-AV601D1 RTD1185-PA Update Loop?

[bartokamouse]

Thank you for your continued assistance. Here are links to 0,1,2,disc;

Code: Select all

http://pastebin.com/2DVi98Xv


Do the circuit board connections sp1, nand (see pic) provide direct access to nand?

[Virtual]

...Here are links to 0,1,2,disc;

hmm for dead player?
show boot log.

[bartokamouse]

The links to the files in my previous post are from a working device. It was suggested that they may be helpful in fixing the broken device.

But, how to copy md0,1,2,disc to broken device? Can it be done with fread and tftp using realtek monitor?

[FarVoice]

In dead player you may copy mtd into rescue. Remove any usb sticks, power on, press twise enter and kill loader_a process. Then insert usb flash and copy /dev/mtdblock/disc to it.

[bartokamouse]

FarVoice, Would you please provide explicit commands to copy mtd into rescue on dead player, and explicit commands to copy mtdblock/disc to dead player? Thank you.

[FarVoice]

the same

Code: Select all

dd if=/dev/mtdblock/0 of=/mnt/usbmounts/sda1
sync

And on working player insert USB flash and exec the next commands:

Code: Select all

cd /tmp/usbmounts/sda1
mkdir realtek_boards
cp /sys/realtek_boards/* realtek_boards
tar cf realtek_boards.tar realtek_boards/*
rmdir -p realtek_boards

and send me realtek_boards.tar

[FarVoice]

and try to restore signature

Code: Select all

echo -en 'VERONA__\x00\x01\x44\xe6\x21\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00' | dd of=/dev/mtdblock/0 bs=2048 seek=8192

[bartokamouse]

Here is an archive of the files in the directory "realtek_boards"; http://www41.zippyshare.com/v/4W4aNKye/file.html

A quote of the prior information would help with clarity, but I feel that I will break the rules by quoting.
I've already copied the mtdblock(s) from the player to usb. How do I copy them back to the player? Wouldn't if/of locations for dd need to be reversed?

Restoring the signature should have worked. It probably would have worked in the beginning if I had used VERONA__\x00\x01 instead of VERONA__\x00\x00
But now, in all the attempts and experimentation, I have corrupted many areas in mtd0. It is safe to assume that all areas need to be restored. In reading another forum post here, I issued "erase -m" command (on dead player) based on the misunderstanding that it would clear memory (ram), but now I understand that it erased nand. (google translate is bad).

So, essentially I need to restore everything on the dead player. I can get dead player to boot to non-rescue mode by copying mtd0 (from good player) to 0x80100000 using fread in realtek monitor. How do I restore the other areas?

I apologize that this post was so long and used so many characters.

[FarVoice]

After erase -m you must flash original firmware, but you didn't have it
I'll analize mtd0 from dead player and will tell the diagnosis, but for now do not do anything.

[bartokamouse]

Well, it is over. I killed the rescue partition. The device is history.

I found a look-alike product for which the firmware was available. It looked very promising. The firmware installed and It actually changed the bootloader version! But in the end it killed the device. Here is the log now:

Code: Select all

hello_world!
hello_world!
55282080  wwaaititcheck_val=0x2700a0

REALTEK ROM Monitor, Revision 0000.0311.0021.
Copyright (c) Realtek Semiconductor Corp. - All Rights Reserved.

For a list of available commands, type 'help'.

Compilation time /version=      Feb  6 2014  10:06:45  /0000.0311.0021
MAC address =                   00.11.22.33.44.55
Processor Company ID/options =  0x01 (MIPS Technologies, Inc.) / 0x00
Processor ID/revision =         0x93 / 0x78
Endianness =                    Little
Flash memory size =             256 MByte
SDRAM size =                    256 MByte
First free SDRAM address =      0x800b0000

Press 'ESC' to Monitor mode
Signature(▒▒▒▒▒▒▒▒) error! Entering rescue linux...
[HDMI]: Set I2C Speed = 50 kHz
[HDMI]: Chk_HotPlug() TV is not connected.
[HDMI]: Read_EDID abort, HDMI cable plug off.
[HDMI]: TV is not connected.
NTSC logo
Rescue kernel in FLASH, total size = 0x145200

            seg.1 addr 0xa0a0219e, size = 0x145200

            seg.2 addr 0x0, size = 0x0
copy rescue0: from a0a0219e to 81000000, len = 145200
decrypt from 0x81000000 to 0x83000000, len:0x145200
decompressing rescue: from 83000000 to 80100000: size = 145200
,▒▒
Error: Too big uncompressed stream
decompess Rescue using LZMA error!!
Realtek>


I will throw the device into the landfill now. I did learn a lot from this experience, so that is something. Thanks to all for the help!