Can you make the same for Escam pt202????

[carlosvelosa]

Can you make the same for Escam pt202????

[roleoroleo]

I don't know. If it's based on the same platform, I could try. Please, take some pictures of the board.

[carlosvelosa]

Sorry for the time. I took pictures from the board.

[carlosvelosa]

This camera have SV6255P chip and the board is B102QP KB V1

[carlosvelosa]

The interior board have qg2101b and xmc chip

[carlosvelosa]

Another thing the firmware is 9.0.41.99_202103111513

[roleoroleo]

Ok. Probably the hack already exists. But... create a dump of your fw and share it with me: https://github.com/roleoroleo/yi-hack-Allwinner-v2/wiki/Dump-your-backup-firmware-(SD-card)

[carlosvelosa]

https://www.sendspace.com/filegroup/kEnw16yfVGY25i77A6znhArwi3RpIkhpcl%2BlXrNVYHagmEbOtZYkVMl1%2BsAZ2cLRSDLDjoUCqnanfnysLGohQw

[carlosvelosa]

There you have, i think all you need

[carlosvelosa]

mtd (1).txt

[roleoroleo]

Try b091qp, it should work. https://github.com/roleoroleo/yi-hack-Allwinner-v2/discussions/249#discussioncomment-1378470

[carlosvelosa]

Tente b091qp, ele deve funcionar. # 249 (responder no tópico)

It's working!!!! Fantastic, thanks @roleoroleo :D. This hack is the same on Escam pt202

[carlosvelosa]

ALL WORKING :DDDDDDDDDDDD

[roleoroleo]

I will add to the next release.

[roobbb]

Hello. I even bought one and hacked it successfully. It works very well. Thank you very much! One question: does the performance advice even apply to this device?

[roleoroleo]

One question: does the performance advice even apply to this device?

Yes, It's the same cpu/ram architecture.

[kirch-cam]

I have an almost identical (unbranded) model, the only difference is the wifi module Main board: QG2101b and xmc chip B102QP KB V1 board has Realtek chip instead of SV6255P. The Realtek wifi chip is marked 8188FTV KCF03G1 GK53Q1 Firmware is 9.0.41.99_202103301400 I assume they use the wifi module just as a serial modem, so the b091qp should work?

[roleoroleo]

I don't know if it works. Send me a backup copy and I will check.

[kirch-cam]

LINK REMOVED

[roleoroleo]

It's different from other supported b091qp. I could try to support your cam but I need some time.

[kirch-cam]

Thank you very much. That would be great.

[GqSteve]

@carlosvelosa Is the hack working also, when the cam is connected through the network interface?

[carlosvelosa]

@carlosvelosa Is the hack working also, when the cam is connected through the network interface?

Yes it's working without problems @GqSteve

[GqSteve]

@carlosvelosa I set up one with WiFi. I connected the camera per wire and disabled the WiFi AP. The cam is not requesting any IP from DHCP over the wired connection. How can I get it working? Btw, if the wired connection is going to work, how can I disable the WiFi on the cam?

[roobbb]

@GqSteve I started with LAN first and had to pair my cam with my LAN via the app. But was not able to connect it to Wifi. Therefore I paired my Cam again with Wifi via app. Both connections are working fine since. My Cam has two MAC-ID's and separate IP's. Maybe you could get it work with LAN if you try to pair your Cam with LAN too. This "Cable" option is very small and easy to miss Maybe it's worth a try 😀

[GqSteve]

My bad...the network interface supports 100M port speed...my port was fixed to 1000M...grrrrr But I can confirm that the hack works! Thanks!

[napalmpt]

Hi. I have one of these cams that somehow got bricked. it now only lights up the led and stays like that. I followed instructions for soft recovery, converted the backup mtdblock4.bin into backup_b091qp but didn't work. I tried to find the rs232 pads, but no luck or nothing happens on boot... should I return it?

[orion131313]

@carlosvelosa Is the hack working also, when the cam is connected through the network interface?

Yes it's working without problems @GqSteve

@carlosvelosa Yi YoT android app still working? Are there any better apps?

[kirch-cam]

It's different from other supported b091qp. I could try to support your cam but I need some time. @roleoroleo have you had a chance yet to support it?

[roleoroleo]

Yes, I think it's possible. Please, send me 3-4 copies of the file /dev/shm/fshare_frame_buf

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[elsie940313]

Good day guys!

I have the exact same camera ( b091qp) as @carlosvelosa but flashed it with the the wrong firmware (h51ga) , as seen below in the "init.sh" file:

root@(none):/backup# cat init.sh

!/bin/sh

echo "--------------------------home app init.sh--------------------------" SUFFIX=h51ga enable_4g=

PATH="/usr/bin:/usr/sbin:/bin:/sbin:/home/base/tools:/home/app/localbin:/home/ba LD_LIBRARY_PATH="/lib:/usr/lib:/home/lib:/home/qigan/lib:/home/app/locallib:/tmp export PATH export LD_LIBRARY_PATH

NETWORK_IFACE=

if [ "${enable_4g}" = "y" ];then NETWORK_IFACE=eth1 else NETWORK_IFACE=wlan0 fi

echo "NETWORK_IFACE=${NETWORK_IFACE}"

ulimit -c unlimited ulimit -s 1024

echo /tmp/sd/core.exe[%e].pid[%p].sig[%s] > /proc/sys/kernel/core_pattern

echo 100 > /proc/sys/vm/dirty_writeback_centisecs echo 50 > /proc/sys/vm/dirty_expire_centisecs

echo 2048 > /proc/sys/vm/extra_free_kbytes

echo 400 > /proc/sys/vm/vfs_cache_pressure echo 0 > /proc/sys/vm/drop_caches echo 256 > /proc/sys/vm/min_free_kbytes

sysctl -w vm.dirty_background_ratio=2 sysctl -w vm.dirty_expire_centisecs=500 sysctl -w vm.dirty_ratio=2 sysctl -w vm.dirty_writeback_centisecs=100

sysctl -w fs.mqueue.msg_max=256 mkdir /dev/mqueue mount -t mqueue none /dev/mqueue

mount tmpfs /tmp -t tmpfs -o size=32m mkdir /tmp/sd mkdir /dev/shm mkdir /tmp/var mkdir /tmp/var/run mkdir /tmp/run

checkdisk rm -fr /tmp/sd/FSCK*.REC umount -l /tmp/sd mount -t vfat /dev/mmcblk0p1 /tmp/sd

----insmod hardware cyption------

extract files

mkdir /tmp/ko/ mkdir /tmp/app/ mkdir /tmp/tools/

if [ -f /home/home${SUFFIX}m ]; then echo "---/home/home${SUFFIX}m exist, update begin---" dd if=/home/home_${SUFFIX}m of=/tmp/newver bs=22 count=1 newver=$(cat /tmp/newver) if [ -f /home/homever ]; then curver=$(cat /home/homever) else curver=0 fi echo check version: newver=$newver, curver=$curver if [ $newver != $curver ]; then

cipher

            sleep 1
            mkdir /tmp/update
            cp -rf /home/base/tools/extpkg.sh /tmp/update/extpkg.sh
            /tmp/update/extpkg.sh /home/home_v429m
            rm -rf /tmp/update
            rm -rf /home/home_${SUFFIX}m
            #sync
            echo "update finish"
            reboot -f
    fi
    echo "---same version ? update fail---"
    rm -rf mv /home/home_${SUFFIX}m

elif [ -f /tmp/sd/home${SUFFIX}m ]; then echo "---tmp/sd/home${SUFFIX}m exist, update begin---" dd if=/tmp/sd/home_${SUFFIX}m of=/tmp/newver bs=22 count=1 newver=$(cat /tmp/newver) if [ -f /home/homever ]; then curver=$(cat /home/homever) else curver=0 fi echo check version: newver=$newver, curver=$curver if [ $newver != $curver ]; then

cipher

            sleep 1
            mkdir /tmp/update
    cp -rf /tmp/sd/home_${SUFFIX}m /tmp/update/
            cp -rf /backup/tools/extpkg.sh /tmp/update/extpkg.sh
            /tmp/update/extpkg.sh /tmp/sd/home_${SUFFIX}m
            rm -rf /tmp/update
            mv /tmp/sd/home_${SUFFIX}m      /tmp/sd/home_${SUFFIX}m.done
            sync
            echo "update finish"
            reboot -f
    fi
    echo "---same version ? update fail---"
    mv /tmp/sd/home_${SUFFIX}m      /tmp/sd/home_${SUFFIX}m.done

else echo "---update file(home_${SUFFIX}m) Not exist---" fi

if [ -f /backup/url ];then

if [ "${enable_4g}" = "y" ];then
    /home/app/4g &
    # sleep 40
else
    #when ota upgrade failure, will enter this
    echo "--------------------------insmod sensor--------------------------"
    if [ -f /backup/ko/icplus.ko ];then
        insmod /backup/ko/icplus.ko
    fi

    if [ -f /backup/ko/8188fu.ko ];then
        insmod /backup/ko/8188fu.ko
    fi

    if [ -f /backup/ko/8189fs.ko ];then
        insmod /backup/ko/8189fs.ko
    fi
    sleep 1
    ifconfig lo up
    ifconfig ${NETWORK_IFACE} up
    ethmac=d2:`ifconfig ${NETWORK_IFACE} |grep HWaddr|cut -d' ' -f10|cut -d:
    ifconfig eth0 hw ether $ethmac
    ifconfig eth0 up
fi

echo "============================================= begin to upgrade...... =

Attached photo shows my cam I have as confirmation:

Can someone please send me the stock firmware mtdblock4.bin backup file, as i don't have a backup one to unbrick my cam.

Thanks Guys

[roleoroleo]

b091qp is used for different hardware models. Try to make a backup copy (if the cam reaches the backup script during the boot) and send me your current mtdblock4. I will create a new mtdblock4.bin for you.

[elsie940313]

Did the back as you requested. Attached is the mtdblock4.bin. LINK REMOVED

[roleoroleo]

Your mtdblock4 is completely wrong. I don't understand... Did you restore the mtdblock4 of the h51ga? This should be the right file: backup_b091qp.gz

[elsie940313]

I restored the backup you sent me.

Good news is I can connect to the cam using the YI IOT app.

Below is the current firmware version.

Should I try the b091 hack?

Thanks for the help so far, much appreciated!

[roleoroleo]

Yes, b091qp.

[AditaNi]

can you please improve this firmware, bucase for example after one week of functioning i cannot logon onto camera. And in HA i have alot of errors. It will be very nice if you have some time to improve the b091qp firmware for pt202 camera.

[elsie940313]

tried it, its not working, after loading the hack I tried "http://ip-cam:8080/" (replacing the ip-cam part with the ip assigned to the camera via my router.

I do have a serial coms with the board, connected straight to the serial pins on the board so i can troubleshoot if need be.

[roleoroleo]

I do have a serial coms with the board, connected straight to the serial pins on the board so i can troubleshoot if need be.

Yes, please. Send me a log of the boot.

[elsie940313]

Logged the boot sequence to the attached log.txt file as well as copied below.

156]HELLO! BOOT0 is starting!
[160]BOOT0 commit : aacdf0e
[162]board init start
[165]set pll start
[167]set pll end
[169][pmu]: bus read error
[171][pmu]: bus read error
[174]board init ok
[176]chip id check OK
[178]DRAM BOOT DRIVE INFO: V0.41
[181]DRAM CLK = 528 MHz
[183]DRAM Type = 2 (2:DDR2,3:DDR3)
[187]DRAMC read ODT  off.
[189]DRAM ODT off.
[191]DRAM SIZE =64 M
[199]DRAM simple test OK.
[201]rtc standby flag is 0x0, super standby flag is 0x0
[206]dram size =64
[210]spinor id is: 20 70 17, read cmd: 0b
[214]Succeed in reading toc file head.
[217]The size of toc is 4c000.
[305]Entry_name        = optee
[308]Entry_name        = u-boot
[312]Entry_name        = dtb
[316]Jump to second Boot.
MESSAGE: [0x0] TEE-CORE: OP-TEE version: sun8iw19p1_v0.6.0-27-g7f6d3375 #1 Thu Dec 10 03:28:16 UTC 2020 arm
ERROR:   [0x0] TEE-CORE:platform_standby_fdt_parse:126: no pmu node
ERROR:   [0x0] TEE-CORE:sunxi_twi_parse_from_dt:127: no pmu node

U-Boot 2018.05 (Mar 11 2021 - 15:12:01 +0800) Allwinner Technology

[00.359]DRAM:  64 MiB
[00.361]Relocation Offset is: f9f94000
[00.373]secure enable bit: 0
[00.375]CPU=816 MHz,PLL6=600 Mhz,AHB=200 Mhz, APB1=100Mhz  MBus=132Mhz
[00.382]gic: sec monitor mode
[00.384]flash init start
[00.386]workmode = 0,storage type = 3
SF: Detected XM25QH64A with page size 256 Bytes, erase size 4 KiB, total 8 MiB
[00.403]sunxi flash init ok
[00.406]Loading Environment from SUNXI_FLASH... start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x3e00, len: 0x100
OK
[00.467]try sprite_led_gpio config
xxxxxxxxxxxxxxlijun uboot xiaoyiledinit
[00.475]sprite_led_gpio start
[00.478](weak)update dtb dram start
[00.482]update dtb dram  end
[00.484]update dts
root_partition is rootfs
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
set root to /dev/mtdblock2
[00.547]update part info
[00.550]update bootcmd
mmc driver ver uboot2018:2019-8-15 16:34:00
get mem for descripter OK !
[00.562]get sdc_wipe fail.
[00.564]get sdc0 sdc_erase fail.
[00.567]get sdc0 sdc_boot fail.
[00.570]get sdc0 sdc_odly_50M fail.
[00.573]get sdc0 sdc_sdly_50M fail.
[00.577]get sdc0 sdc_odly_50M_ddr fail.
[00.580]get sdc0 sdc_sdly_50M_ddr fail.
[00.584]get sdc0 sdc_freq fail.
[00.587]get sdc0 sdc_b0p fail.
[00.589]get card0_boot_para:sdc_ex_dly_used fail
[00.594]get card-pwr-gpios handler:1119307304
[00.598]get card0_boot_para:time_pwroff:200ms
[00.604]Using default timing para
[00.807]init mmc 0 clock and io
devnum 0, prv 43fbd4b8, bdesc 42b7476c
SUNXI SD/MMC: 0
[00.814]==================== work mode: 0 0, sample_mode:0
[00.820]=============== start mmc_init_boot...
card_caps:0x3000000a
host_caps:0x3000003f
[00.958]unable to read ssr
[00.960]unable to read ssr
[00.963]the mode SD Legacy (freq : 25 MHz)
check_file [/one_b091qp.bin] exsit 
check_file [/one_b091qp.bin] exsit 
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:boot start_offset:0x20 part_size:2031616 
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:rootfs start_offset:0xfa0 part_size:1179648 
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:home start_offset:0x18a0 part_size:3145728 
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:backup start_offset:0x30a0 part_size:1376256 
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:env start_offset:0x3b20 part_size:131072 
Nothing updated, start normal boot
Hit any key to stop autoboot:  1  0 
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
[02.082]partinfo: name boot, start 0x20, size 0xf80
start: 0x300, len: 0x40
start: 0x340, len: 0xf3c
[02.583]android.hardware = sun8iw19p1
## Booting kernel from Legacy Image at 45000000 ...
   Image Name:   ARM OpenWrt Linux-4.9.118
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2029280 Bytes = 1.9 MiB
   Load Address: 40008000
   Entry Point:  40008000
[02.651]Starting kernel ...

** 2 printk messages dropped ** [    0.000000] ion_mem_reserve: err format for ion reserve list!
[    0.100284] ion_heap_create: Invalid heap type 4
[    0.107215] sunxi_i2c_probe()2213 - [i2c1] warning: failed to get regulator id
[    0.134416] uart uart0: get regulator failed
[    0.164863] sunxi-wlan wlan: request pincrtl handle for device [wlan] failed
[    0.173037] sunxi-wlan wlan: get gpio wlan_regon failed
[    0.178962] sunxi-wlan wlan: get gpio chip_en failed
[    0.184573] sunxi-wlan wlan: get gpio wlan_hostwake failed
[    0.208583] mtd: partition "UDISK" is out of reach -- disabled
[    0.300623] VE: get debugfs_mpp_root is NULL, please check mpp
[    0.300623] 
[    0.575191] mmc:failed to get gpios
[    0.623540] sunxi-mmc sdc1: smc 1 p1 err, cmd 52, RTO !!
[    0.630415] sunxi-mmc sdc1: smc 1 p1 err, cmd 52, RTO !!
[    0.640868] sunxi-mmc sdc1: smc 1 p1 err, cmd 8, RTO !!
[    0.647635] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.654411] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.661187] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.667641] --->sunxi_daudio_dev_probe<--- strat.
[    0.672982] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.679223] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.685268] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.691337] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.697432] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.703605] sunxi-mmc sdc1: smc 1 p1 err, cmd 1, RTO !!
[    0.710920] --->sunxi_daudio_dev_probe<--- end.
[    0.806188] write_efuse_to_reg_ver_3:getting efuse data bit out of 12-bit limit
starting pid 563, tty '': '/etc/init.d/rcS boot'
[RCS]: /etc/init.d/S01udev
Populating /dev using udev: [    1.348574] udevd[568]: could not create /run/udev: No such file or directory
done
[RCS]: /etc/init.d/S02app
[RCS]: /etc/init.d/S20urandom
--------------------------home app init.sh--------------------------
NETWORK_IFACE=wlan0
product_name=b091qp
sh: write error: Invalid argument
read-only file system detected...done
vm.dirty_background_ratio = 2
starting pid 581, tty '/dev/console': '-/bin/sh'

BusyBox v1.27.2 () built-in shell (ash)

vm.dirty_expire_centisecs = 500
vm.dirty_ratio = 2
vm.dirty_writeback_centisecs = 100
fs.mqueue.msg_max = 256

            __    __   _
            \ \  / /  | |
             \ \/ /   | |
              \  /    | |
              / /     | |
             /_/      |_|
 ------------------------------------
 Welcome to XiaoYi Linux.
 ------------------------------------

root@(none):/# 
checkdisk.c(get_tfcard_size_v2-105)[00:00:05.572]:TF card total size : 15193 MB

checkdisk.c(get_fs_type-251)[00:00:05.597]:FS TYPE : VFAT

checkdisk.c(get_cluster_size-313)[00:00:05.615]:cluster_size = 8192 Bytes

checkdisk.c(main-450)[00:00:05.615]:FS cluster size is too little. cluster_size = 8192 
checkdisk, main() ret_status(10002) 
checkdisk, main() ret_status(10002),g_sysconf_ptr->tf_status.stat(10002) 
umount: can't unmount /tmp/sd: Invalid argument
14425525523223523625525523723814525525525502552242252262272292302312280000000000000000000000000000000000000000000000000000000000
1222110113501218003000020001400109512111250000115000000000000000
WIFI_TYPE:1
SENSOR_TYPE:11
---update file(home_b091qpm) Not exist---
[    4.422873] SSV6XXX HCI TX Task started.
--------------------------insmod sensor--------------------------
[    7.344315] SSV WLAN driver SSV6006C: VIF 0c:cf:89:98:e0:b2 of type 2 is added.
============================================= home low_half_init.sh... =========================================
============================================= begin to start app... =========================================
mount: mounting /tmp/sd/yi-hack/script/wifidhcp.sh on /home/app/script/wifidhcp.sh failed: No such file or directory
mount: mounting /tmp/sd/yi-hack/script/wifidhcp.sh on /backup/tools/wifidhcp.sh failed: No such file or directory
chmod: /tmp/sd/debug.sh: No such file or directory
chmod: /tmp/sd/yi-hack/script/system.sh: No such file or directory
sh: can't open '/tmp/sd/debug.sh'
sh: can't open '/tmp/sd/yi-hack/script/system.sh'

dispatch.c(get_productinfo-1820)[00:00:10.461]:get system did info: did[], key[], key_mi[], p2pid[], did_mi[]

dispatch.c(sync_did_to_backup_region-1528)[00:00:10.467]:Backup DID info is right

dispatch.c(get_productinfo-1878)[00:00:10.467]:hardware version is valid, update system hw info!

dispatch.c(get_productinfo-1880)[00:00:10.468]:System hw info: ptz_en[1] ptz_dir hor[2] ver[2] check_daynight_mode[2] mirror[1] resolution[1] def_x[50] def_y[3] isp[1] ir_cut[2]                         lower_limit1[1] lower_limit2[8] lower_limit3[0] lower_limit4[0] upper_limit1[3] upper_limit2[0] upper_limit3[0] upper_limit4[0] ptz_func[0]                         ao_volume[095] white_led_close[1] pix[2] mic_volume[25] ap_mode[1]

dispatch.c(sync_hw_to_backup_region-1754)[00:00:10.473]:Backup hw info is right

dispatch.c(get_productinfo-1894)[00:00:10.473]:GPIO_MAGIC(0xbb)! sizeof(gpio_type_t)(128) 

dispatch.c(sync_gpio_to_backup_region-1639)[00:00:10.479]:Backup gpio info is right
evnet file /tmp/sd/alarm_event.db not exsit.

dispatch.c(cpld_ptz_init-1345)[00:00:10.479]:open_cpld hw:1222110113501218003000020001400109512111250000115000000000000000  64

libcommon.c(open_cpld-617)[00:00:10.480]:/dev/cpld_periph ok retfd:12

hw12_ab_cd_ratio[49],hw23_26_x_step:[2000],hw27_30_y_step:[1400]

dispatch.c(moto_config_init-2490)[00:00:11.892]:hw12_ab_cd_ratio[1],AB_RATIO[1],CD_RATIO[1],STEP_TIME_X[45],STEP_TIME_Y[20]

dispatch.c(moto_config_init-2515)[00:00:11.893]:PTZ_MAX_X[2000],PTZ_MAX_Y[1400]

dispatch.c(get_config-2729)[00:00:11.904]:got sn()

dispatch.c(get_config-2730)[00:00:11.904]:got pwd()

dispatch.c(get_config-2731)[00:00:11.904]:got ssid()

dispatch.c(get_config-2732)[00:00:11.904]:got tnp_init_string(MJFKICLCIBEKKKHPODECPEEIGDDPFBHJGAEKLAJKJBBNCIAAODIPBEMEOCDKAAKKOALGCJPJMDCPAFDNAOBI)

dispatch.c(get_config-2733)[00:00:11.904]:got ts:7200

dispatch.c(get_config-2798)[00:00:11.911]:def_x:1000,def_y:420
>>>>>>>>>>>>>#########is_sd_exit chg to: 10002<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>is_sd_exit chg to: 1<<<<<<<<<<<<<<<<<<<
dispatch.c(choose_server-1061)[00:00:11.911]:in choose_server, region_id = 1, api_server = https://plt-api.xiaoyi.com, sname = RealPJ, dlproto = micn

dispatch.c(choose_server-1061)[00:00:11.911]:in choose_server, region_id = 16, api_server = https://plt-api-de.xiaoyi.com, sname = RealPJ, dlproto = mieu

dispatch.c(main-6571)[00:00:11.918]:init ok, cost time(1488 ms)

ptz_ctl.c(p_ptz-2588)[00:00:11.918]:hue, ptz running.....
g_dispatch_info.mmap_info->hw_type =1
now ptz_info----x:0,y:0

ptz_ctl.c(ptz_stop-170)[00:00:11.919]:PTZ stop OK

~~~~~~~dir = 3, speed = 10, run time = 90000~~~~~~

Failed to connect to non-global ctrl_ifname: wlan0  error: No such file or directory

dispatch.c(do_monitor_wifi-3272)[00:00:13.032]:wifi disconnected, now reconnect wifi

cat: can't open '/proc/timeout_cnt': No such file or directory
ash: 100: unknown operand
ash: 0: unknown operand
killall: hostapd: no process killed
killall: udhcpd: no process killed
killall: wpa_supplicant: no process killed
killall: udhcpc: no process killed
killall: p2p_tnp: no process killed
killall: cloud: no process killed
ash: 1: unknown operand
cat: can't open '/proc/timeout_cnt': No such file or directory
ash: 100: unknown operand
ash: 0: unknown operand
killall: hostapd: no process killed
killall: udhcpd: no process killed
killall: udhcpc: no process killed
killall: p2p_tnp: no process killed
killall: cloud: no process killed
ash: 1: unknown operand

dispatch.c(p_worker-3835)[20:00:36.097]:DISPATCH_SET_DEFAULT_TIME 1683230436
after right half
now ptz_info----x:2000,y:0

ptz_ctl.c(ptz_stop-170)[20:00:39.838]:PTZ stop OK

~~~~~~~dir = 1, speed = 10, run time = 28000~~~~~~

[   18.815658] SSV WLAN driver SSV6006C: Set key VIF 0 VIF type 2 STA 0 algorithm = 4, key->keyidx = 0, cmd = 0
[   18.829941] SET KEY 0
[   18.833128] SSV WLAN driver SSV6006C: Set key VIF 0 VIF type 2 STA -1 algorithm = 4, key->keyidx = 2, cmd = 0
[   18.847435] SET KEY 0

dispatch.c(do_monitor_wifi-3301)[20:00:41.168]:wpa connected , now dhcp

killall: udhcpc: no process killed
udhcpc: started, v1.27.2
udhcpc: sending discover
[   19.760737] AMPDU_TX_START 4C:ED:FB:8C:F3:50 0.
[   19.769987] AMPDU_TX_OPERATIONAL 4C:ED:FB:8C:F3:50 0.
udhcpc: sending select for 192.168.1.10
[   19.813017] IEEE80211_AMPDU_RX_START 4C:ED:FB:8C:F3:50 0.
udhcpc: lease of 192.168.1.10 obtained, lease time 86400

dispatch.c(do_monitor_wifi-3303)[20:00:41.402]:wpa connected , now dhcp finish

dispatch.c(check_wifi_connect-3015)[20:00:42.417]:bssid()

dispatch.c(check_wifi_connect-3037)[20:00:42.417]:ip()

dispatch.c(check_wifi_connect-3048)[20:00:42.424]:gw(2)
after up ptz_origin_start
now ptz_info----x:2000,y:0

ptz_ctl.c(ptz_stop-170)[20:00:42.745]:PTZ stop OK
ptz_jmp_def x:1000,y:420
now.x:2000 dst_x:1000
now ptz_info----x:2000,y:0

ptz_ctl.c(ptz_stop-170)[20:00:42.746]:PTZ stop OK

~~~~~~~dir = 4, speed = 10, run time = 45000~~~~~~

dispatch.c(check_wifi_connect-3057)[20:00:43.461]:gwmac()

dispatch.c(check_wifi_connect-3067)[20:00:43.468]:mask()

dispatch.c(check_wifi_connect-3077)[20:00:43.484]:mac()

dispatch.c(check_wifi_connect-3091)[20:00:43.561]:signal_quality(61)
cmd(rm /tmp/sd/log_wifi_connected.tar.gz;rm /tmp/sd/wifi_connected -r;mkdir /tmp/sd/wifi_connected;ps > /tmp/sd/wifi_connected/ps1.txt;cp /home/homever /tmp/sd/wifi_connected;lsmod > /tmp/sd/wifi_connected/lsmod.txt;ls -laSR /home > /tmp/sd/wifi_connected/file.txt;cp /tmp/wpa_supplicant.conf  /tmp/sd/wifi_connected;cp /tmp/log.txt /tmp/sd/wifi_connected;cp /tmp/log_oss.txt /tmp/sd/wifi_connected;df /home > /tmp/sd/wifi_connected/df.txt;df / >> /tmp/sd/wifi_connected/df.txt;tar -cf /tmp/sd/log_wifi_connected.tar.gz /tmp/sd/wifi_connected;mkdir /tmp/sd/log; mv /tmp/sd/log_wifi_connected.tar.gz /tmp/sd/log;rm /tmp/sd/wifi_connected -r &)
rm: can't remove '/tmp/sd/log_wifi_connected.tar.gz': No such file or directory
rm: can't remove '/tmp/sd/wifi_connected': No such file or directory
cp: can't stat '/tmp/log.txt': No such file or directory
cp: can't stat '/tmp/log_oss.txt': No such file or directory
tar: removing leading '/' from member names
mkdir: can't create directory '/tmp/sd/log': File exists

dispatch.c(check_wifi_connect-3109)[20:00:44.863]:signal_quality(62)
now ptz_info----x:1000,y:0

ptz_ctl.c(ptz_stop-170)[20:00:47.264]:PTZ stop OK
now.y:0,dst_y:420

~~~~~~~dir = 2, speed = 10, run time = 8400~~~~~~

now ptz_info----x:1000,y:420
ptz_ctl.c(ptz_stop-170)[20:00:48.169]:PTZ stop OK

[elsie940313]

log.txt

[roleoroleo]

checkdisk.c(main-450)[00:00:05.615]:FS cluster size is too little. cluster_size = 8192

Maybe the sd card is not properly formatted.

[elsie940313]

I swapped out sd cards, does not give me the error anymore.

I can seen the unit on the network but still no access to the webpage.

MY LOG FOR THE NEW sd CARD:

[134]HELLO! BOOT0 is starting!
[137]BOOT0 commit : aacdf0e
[140]board init start
[142]set pll start
[144]set pll end
[146][pmu]: bus read error
[149][pmu]: bus read error
[151]board init ok
[153]chip id check OK
[155]DRAM BOOT DRIVE INFO: V0.41
[158]DRAM CLK = 528 MHz
[161]DRAM Type = 2 (2:DDR2,3:DDR3)
[164]DRAMC read ODT  off.
[166]DRAM ODT off.
[169]DRAM SIZE =64 M
[176]DRAM simple test OK.
[178]rtc standby flag is 0x0, super standby flag is 0x0
[184]dram size =64
[187]spinor id is: 20 70 17, read cmd: 0b
[191]Succeed in reading toc file head.
[194]The size of toc is 4c000.
[279]Entry_name        = optee
[282]Entry_name        = u-boot
[286]Entry_name        = dtb
[289]Jump to second Boot.
MESSAGE: [0x0] TEE-CORE: OP-TEE version: sun8iw19p1_v0.6.0-27-g7f6d3375 #1 Thu D
ERROR:   [0x0] TEE-CORE:platform_standby_fdt_parse:126: no pmu node
ERROR:   [0x0] TEE-CORE:sunxi_twi_parse_from_dt:127: no pmu node

U-Boot 2018.05 (Mar 11 2021 - 15:12:01 +0800) Allwinner Technology

[00.333]DRAM:  64 MiB
[00.335]Relocation Offset is: f9f94000
[00.347]secure enable bit: 0
[00.349]CPU=816 MHz,PLL6=600 Mhz,AHB=200 Mhz, APB1=100Mhz  MBus=132Mhz
[00.356]gic: sec monitor mode
[00.358]flash init start
[00.360]workmode = 0,storage type = 3
SF: Detected XM25QH64A with page size 256 Bytes, erase size 4 KiB, total 8 MiB
[00.377]sunxi flash init ok
[00.380]Loading Environment from SUNXI_FLASH... start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x3e00, len: 0x100
OK
[00.441]try sprite_led_gpio config
xxxxxxxxxxxxxxlijun uboot xiaoyiledinit
[00.449]sprite_led_gpio start
[00.452](weak)update dtb dram start
[00.456]update dtb dram  end
[00.459]update dts
root_partition is rootfs
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
set root to /dev/mtdblock2
[00.521]update part info
[00.524]update bootcmd
mmc driver ver uboot2018:2019-8-15 16:34:00
get mem for descripter OK !
[00.536]get sdc_wipe fail.
[00.538]get sdc0 sdc_erase fail.
[00.541]get sdc0 sdc_boot fail.
[00.544]get sdc0 sdc_odly_50M fail.
[00.547]get sdc0 sdc_sdly_50M fail.
[00.551]get sdc0 sdc_odly_50M_ddr fail.
[00.554]get sdc0 sdc_sdly_50M_ddr fail.
[00.558]get sdc0 sdc_freq fail.
[00.561]get sdc0 sdc_b0p fail.
[00.563]get card0_boot_para:sdc_ex_dly_used fail
[00.569]get card-pwr-gpios handler:1119307304
[00.572]get card0_boot_para:time_pwroff:200ms
[00.578]Using default timing para
[00.781]init mmc 0 clock and io
devnum 0, prv 43fbd4b8, bdesc 42b7476c
SUNXI SD/MMC: 0
[00.789]==================== work mode: 0 0, sample_mode:0
[00.794]=============== start mmc_init_boot...
card_caps:0x3000000a
host_caps:0x3000003f
[00.847]unable to read ssr
[00.849]unable to read ssr
[00.852]the mode SD Legacy (freq : 25 MHz)
check_file [/one_b091qp.bin] exsit
check_file [/one_b091qp.bin] exsit
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:boot start_offset:0x20 part_size:2031616
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:rootfs start_offset:0xfa0 part_size:1179648
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:home start_offset:0x18a0 part_size:3145728
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:backup start_offset:0x30a0 part_size:1376256
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:env start_offset:0x3b20 part_size:131072
Nothing updated, start normal boot
Hit any key to stop autoboot:  0
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
[01.979]partinfo: name boot, start 0x20, size 0xf80
start: 0x300, len: 0x40
start: 0x340, len: 0xf3c
[02.480]android.hardware = sun8iw19p1
## Booting kernel from Legacy Image at 45000000 ...
   Image Name:   ARM OpenWrt Linux-4.9.118
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2029280 Bytes = 1.9 MiB
   Load Address: 40008000
   Entry Point:  40008000
[02.547]Starting kernel ...

** 2 printk messages dropped ** [    0.000000] ion_mem_reserve: err format for i
[    0.100281] ion_heap_create: Invalid heap type 4
[    0.107199] sunxi_i2c_probe()2213 - [i2c1] warning: failed to get regulator i
[    0.134970] uart uart0: get regulator failed
[    0.165396] sunxi-wlan wlan: request pincrtl handle for device [wlan] failed
[    0.173614] sunxi-wlan wlan: get gpio wlan_regon failed
[    0.179548] sunxi-wlan wlan: get gpio chip_en failed
[    0.185161] sunxi-wlan wlan: get gpio wlan_hostwake failed
[    0.209376] mtd: partition "UDISK" is out of reach -- disabled
[    0.304683] VE: get debugfs_mpp_root is NULL, please check mpp
[    0.304683]
[    0.579248] mmc:failed to get gpios
[    0.627618] sunxi-mmc sdc1: smc 1 p1 err, cmd 52, RTO !!
[    0.634494] sunxi-mmc sdc1: smc 1 p1 err, cmd 52, RTO !!
[    0.644925] sunxi-mmc sdc1: smc 1 p1 err, cmd 8, RTO !!
[    0.651684] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.658441] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.665229] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.672023] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.678822] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.685727] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.692602] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.698863] --->sunxi_daudio_dev_probe<--- strat.
[    0.704209] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.705221] sunxi-mmc sdc1: smc 1 p1 err, cmd 1, RTO !!
[    0.719218] --->sunxi_daudio_dev_probe<--- end.
[    0.812599] write_efuse_to_reg_ver_3:getting efuse data bit out of 12-bit lim
starting pid 564, tty '': '/etc/init.d/rcS boot'
[RCS]: /etc/init.d/S01udev
Populating /dev using udev: [    1.353774] udevd[569]: could not create /run/ude
done
[RCS]: /etc/init.d/S02app
[RCS]: /etc/init.d/S20urandom
--------------------------home app init.sh--------------------------
NETWORK_IFACE=wlan0
product_name=b091qp
sh: write error: Invalid argument
read-only file system detected...done
starting pid 581, tty '/dev/console': '-/bin/sh'
vm.dirty_background_ratio = 2

BusyBox v1.27.2 () built-in shell (ash)

vm.dirty_expire_centisecs = 500
vm.dirty_ratio = 2
vm.dirty_writeback_centisecs = 100
            __    __   _
            \ \  / /  | |
             \ \/ /   | |
              \  /    | |
              / /     | |
             /_/      |_|
 ------------------------------------
 Welcome to XiaoYi Linux.
 ------------------------------------

root@(none):/#
fs.mqueue.msg_max = 256

checkdisk.c(get_tfcard_size_v2-105)[00:00:05.573]:TF card total size : 7648 MB

checkdisk.c(get_fs_type-251)[00:00:05.596]:FS TYPE : VFAT

checkdisk.c(get_cluster_size-313)[00:00:05.615]:cluster_size = 32768 Bytes

checkdisk.c(check_partion_vfat-152)[00:00:05.615]:TF Card  checking ....

checkdisk.c(do_fat_check-117)[00:00:05.615]:Can fat check

checkdisk.c(do_fat_check-121)[00:00:05.806]:retBuf(fsck.fat 3.0.26 (2014-03-07)
step 0 5
0x41: Dirty bit is set. Fs was not properly unmounted and some data may be corru
step 1 5
step 2 5
step 3 5
step 4 5
step 5 5
Free cluster summary wrong (244424 vs. really 244472)
1) Correct
2) Don't correct
step 6 5
/dev/mmcblk0p1: 9 files, 8/244480 clusters
)

checkdisk.c(do_fat_check-140)[00:00:05.834]:Mount sd ok.

checkdisk.c(check_partion_vfat-156)[00:00:05.834]:TF Card check finished.

checkdisk, main() ret_status(10000)
checkdisk, main() ret_status(10000),g_sysconf_ptr->tf_status.stat(10000)
/backup/init.sh: line 273: /tmp/sd/Factory/write_hw_gpio.sh: not found
14425525523223523625525523723814525525525502552242252262272292302312280000000000
1222110113501218003000020001400109512111250000115000000000000000
WIFI_TYPE:1
SENSOR_TYPE:11
---update file(home_b091qpm) Not exist---
[    4.650500] SSV6XXX HCI TX Task started.
--------------------------insmod sensor--------------------------
[    7.608425] SSV WLAN driver SSV6006C: VIF 0c:cf:89:98:e0:b2 of type 2 is adde
============================================= home low_half_init.sh... =========
============================================= begin to start app... ============
############## Starting Firmware Dump ##############
############## Starting Firmware Dump ##############
############## Starting Firmware Dump ##############
############## Starting Firmware Dump ##############
768+0 records in
768+0 records out
393216 bytes (384.0KB) copied, 0.136569 seconds, 2.7MB/s
3968+0 records in
3968+0 records out
2031616 bytes (1.9MB) copied, 0.787619 seconds, 2.5MB/s
2304+0 records in
2304+0 records out
1179648 bytes (1.1MB) copied, 0.237505 seconds, 4.7MB/s
6144+0 records in
6144+0 records out
3145728 bytes (3.0MB) copied, 1.413513 seconds, 2.1MB/s
2688+0 records in
2688+0 records out
1376256 bytes (1.3MB) copied, 0.511730 seconds, 2.6MB/s
256+0 records in
256+0 records out
131072 bytes (128.0KB) copied, 0.045706 seconds, 2.7MB/s
128+0 records in
128+0 records out
65536 bytes (64.0KB) copied, 0.022915 seconds, 2.7MB/s
128+0 records in
128+0 records out
65536 bytes (64.0KB) copied, 0.024494 seconds, 2.6MB/s
############## Starting Hack ##############
############## Starting Hack ##############
############## Starting Hack ##############
############## Starting Hack ##############
### Hacking
Hack already applied
### Disabling hack for next reboot
starting pid 682, tty '': '/etc/init.d/rcK'
mount: mounting /dev/mtdblock3 on /home failed: Resource busy
mount: mounting /dev/mtdblock4 on /backup failed: Resource busy
sh: you need to specify whom to kill
mount: mounting /dev/mtdblock3 on /home failed: Resource busy
mount: mounting /dev/mtdblock4 on /backup failed: Resource busy
sh: you need to specify whom to kill
killall: udevd: no process killed
starting pid 705, tty '': '/sbin/swapoff -a'
starting pid 706, tty '': '/bin/umount -a -r'
umount: devtmpfs busy - remounted read-only
The system is going down NOW!
Sent SIGTERM to all processes
Sen[   17.746016] reboot: Restarting system
[   17.750173] Restarting Linux version 4.9.118 (zhangdeng@dell-PowerEdge-R740)
[   17.750173]
[167]HELLO! BOOT0 is starting!
[170]BOOT0 commit : aacdf0e
[173]board init start
[175]set pll start
[177]set pll end
[179][pmu]: bus read error
[182][pmu]: bus read error
[184]board init ok
[186]chip id check OK
[188]DRAM BOOT DRIVE INFO: V0.41
[191]DRAM CLK = 528 MHz
[193]DRAM Type = 2 (2:DDR2,3:DDR3)
[197]DRAMC read ODT  off.
[199]DRAM ODT off.
[202]DRAM SIZE =64 M
[209]DRAM simple test OK.
[211]rtc standby flag is 0x0, super standby flag is 0x0
[217]dram size =64
[220]spinor id is: 20 70 17, read cmd: 0b
[224]Succeed in reading toc file head.
[227]The size of toc is 4c000.
[315]Entry_name        = optee
[318]Entry_name        = u-boot
[322]Entry_name        = dtb
[326]Jump to second Boot.
MESSAGE: [0x0] TEE-CORE: OP-TEE version: sun8iw19p1_v0.6.0-27-g7f6d3375 #1 Thu D
ERROR:   [0x0] TEE-CORE:platform_standby_fdt_parse:126: no pmu node
ERROR:   [0x0] TEE-CORE:sunxi_twi_parse_from_dt:127: no pmu node

U-Boot 2018.05 (Mar 11 2021 - 15:12:01 +0800) Allwinner Technology

[00.369]DRAM:  64 MiB
[00.372]Relocation Offset is: f9f94000
[00.383]secure enable bit: 0
[00.385]CPU=816 MHz,PLL6=600 Mhz,AHB=200 Mhz, APB1=100Mhz  MBus=132Mhz
[00.392]gic: sec monitor mode
[00.394]flash init start
[00.397]workmode = 0,storage type = 3
SF: Detected XM25QH64A with page size 256 Bytes, erase size 4 KiB, total 8 MiB
[00.413]sunxi flash init ok
[00.417]Loading Environment from SUNXI_FLASH... start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x3e00, len: 0x100
OK
[00.477]try sprite_led_gpio config
xxxxxxxxxxxxxxlijun uboot xiaoyiledinit
[00.485]sprite_led_gpio start
[00.488](weak)update dtb dram start
[00.492]update dtb dram  end
[00.495]update dts
root_partition is rootfs
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
set root to /dev/mtdblock2
[00.557]update part info
[00.560]update bootcmd
mmc driver ver uboot2018:2019-8-15 16:34:00
get mem for descripter OK !
[00.572]get sdc_wipe fail.
[00.575]get sdc0 sdc_erase fail.
[00.577]get sdc0 sdc_boot fail.
[00.580]get sdc0 sdc_odly_50M fail.
[00.584]get sdc0 sdc_sdly_50M fail.
[00.587]get sdc0 sdc_odly_50M_ddr fail.
[00.590]get sdc0 sdc_sdly_50M_ddr fail.
[00.594]get sdc0 sdc_freq fail.
[00.597]get sdc0 sdc_b0p fail.
[00.600]get card0_boot_para:sdc_ex_dly_used fail
[00.605]get card-pwr-gpios handler:1119307304
[00.609]get card0_boot_para:time_pwroff:200ms
[00.614]Using default timing para
[00.817]init mmc 0 clock and io
devnum 0, prv 43fbd4b8, bdesc 42b7476c
SUNXI SD/MMC: 0
[00.825]==================== work mode: 0 0, sample_mode:0
[00.830]=============== start mmc_init_boot...
card_caps:0x3000000a
host_caps:0x3000003f
[00.883]unable to read ssr
[00.885]unable to read ssr
[00.888]the mode SD Legacy (freq : 25 MHz)
check_file [/one_b091qp.bin] exsit
check_file [/one_b091qp.bin] exsit
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:boot start_offset:0x20 part_size:2031616
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:rootfs start_offset:0xfa0 part_size:1179648
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:home start_offset:0x18a0 part_size:3145728
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:backup start_offset:0x30a0 part_size:1376256
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
part_name:env start_offset:0x3b20 part_size:131072
Nothing updated, start normal boot
Hit any key to stop autoboot:  0
start: 0x2e0, len: 0x1
start: 0x2e1, len: 0x1
start: 0x2e2, len: 0x2
[02.013]partinfo: name boot, start 0x20, size 0xf80
start: 0x300, len: 0x40
start: 0x340, len: 0xf3c
[02.514]android.hardware = sun8iw19p1
## Booting kernel from Legacy Image at 45000000 ...
   Image Name:   ARM OpenWrt Linux-4.9.118
   Image Type:   ARM Linux Kernel Image (uncompressed)
   Data Size:    2029280 Bytes = 1.9 MiB
   Load Address: 40008000
   Entry Point:  40008000
[02.582]Starting kernel ...

** 2 printk messages dropped ** [    0.000000] ion_mem_reserve: err format for i
[    0.100587] ion_heap_create: Invalid heap type 4
[    0.107440] sunxi_i2c_probe()2213 - [i2c1] warning: failed to get regulator i
[    0.134717] uart uart0: get regulator failed
[    0.165271] sunxi-wlan wlan: request pincrtl handle for device [wlan] failed
[    0.173470] sunxi-wlan wlan: get gpio wlan_regon failed
[    0.179400] sunxi-wlan wlan: get gpio chip_en failed
[    0.185011] sunxi-wlan wlan: get gpio wlan_hostwake failed
[    0.208742] mtd: partition "UDISK" is out of reach -- disabled
[    0.300816] VE: get debugfs_mpp_root is NULL, please check mpp
[    0.300816]
[    0.575435] mmc:failed to get gpios
[    0.623785] sunxi-mmc sdc1: smc 1 p1 err, cmd 52, RTO !!
[    0.630656] sunxi-mmc sdc1: smc 1 p1 err, cmd 52, RTO !!
[    0.641103] sunxi-mmc sdc1: smc 1 p1 err, cmd 8, RTO !!
[    0.647847] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.654630] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.661435] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.668211] sunxi-mmc sdc1: smc 1 p1 err, cmd 5, RTO !!
[    0.674908] --->sunxi_daudio_dev_probe<--- strat.
[    0.680253] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.686936] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.687803] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.694070] sunxi-mmc sdc1: smc 1 p1 err, cmd 55, RTO !!
[    0.700453] sunxi-mmc sdc1: smc 1 p1 err, cmd 1, RTO !!
[    0.715206] --->sunxi_daudio_dev_probe<--- end.
[    0.808750] write_efuse_to_reg_ver_3:getting efuse data bit out of 12-bit lim
starting pid 563, tty '': '/etc/init.d/rcS boot'
[RCS]: /etc/init.d/S01udev
Populating /dev using udev: [    1.351974] udevd[568]: could not create /run/ude
done
[RCS]: /etc/init.d/S02app
[RCS]: /etc/init.d/S20urandom
--------------------------home app init.sh--------------------------
NETWORK_IFACE=wlan0
product_name=b091qp
sh: write error: Invalid argument
read-only file system detected...done
vm.dirty_background_ratio = 2
starting pid 581, tty '/dev/console': '-/bin/sh'

BusyBox v1.27.2 () built-in shell (ash)

vm.dirty_expire_centisecs = 500
vm.dirty_ratio = 2
vm.dirty_writeback_centisecs = 100
fs.mqueue.msg_max = 256

            __    __   _
            \ \  / /  | |
             \ \/ /   | |
              \  /    | |
              / /     | |
             /_/      |_|
 ------------------------------------
 Welcome to XiaoYi Linux.
 ------------------------------------

root@(none):/#
checkdisk.c(get_tfcard_size_v2-105)[00:00:24.577]:TF card total size : 7648 MB

checkdisk.c(get_fs_type-251)[00:00:24.599]:FS TYPE : VFAT

checkdisk.c(get_cluster_size-313)[00:00:24.644]:cluster_size = 32768 Bytes

checkdisk.c(check_partion_vfat-152)[00:00:24.644]:TF Card  checking ....

checkdisk.c(do_fat_check-117)[00:00:24.644]:Can fat check

checkdisk.c(do_fat_check-121)[00:00:24.837]:retBuf(fsck.fat 3.0.26 (2014-03-07)
step 0 24
step 1 24
step 2 24
step 3 24
step 4 24
step 5 24
step 6 24
/dev/mmcblk0p1: 20 files, 267/244480 clusters
)

checkdisk.c(do_fat_check-140)[00:00:24.840]:Mount sd ok.

checkdisk.c(check_partion_vfat-156)[00:00:24.840]:TF Card check finished.

checkdisk, main() ret_status(10000)
checkdisk, main() ret_status(10000),g_sysconf_ptr->tf_status.stat(10000)
14425525523223523625525523723814525525525502552242252262272292302312280000000000
1222110113501218003000020001400109512111250000115000000000000000
WIFI_TYPE:1
SENSOR_TYPE:11
---update file(home_b091qpm) Not exist---
[    4.654703] SSV6XXX HCI TX Task started.
--------------------------insmod sensor--------------------------
[    7.612635] SSV WLAN driver SSV6006C: VIF 0c:cf:89:98:e0:b2 of type 2 is adde
============================================= home low_half_init.sh... =========
============================================= begin to start app... ============
mount: mounting /tmp/sd/yi-hack/script/wifidhcp.sh on /home/app/script/wifidhcp.
mount: mounting /tmp/sd/yi-hack/script/wifidhcp.sh on /backup/tools/wifidhcp.sh
chmod: /tmp/sd/debug.sh: No such file or directory
chmod: /tmp/sd/yi-hack/script/system.sh: No such file or directory
sh: can't open '/tmp/sd/debug.sh'
sh: can't open '/tmp/sd/yi-hack/script/system.sh'

dispatch.c(get_productinfo-1820)[00:00:29.686]:get system did info: did[A202D803

dispatch.c(sync_did_to_backup_region-1528)[00:00:29.691]:Backup DID info is righ

dispatch.c(get_productinfo-1878)[00:00:29.692]:hardware version is valid, update

dispatch.c(get_productinfo-1880)[00:00:29.692]:System hw info: ptz_en[1] ptz_dir                                                     er_limit4[0] ptz_func[0]                         ao_volume[095] white_led_close[

dispatch.c(sync_hw_to_backup_region-1754)[00:00:29.698]:Backup hw info is right

dispatch.c(get_productinfo-1894)[00:00:29.698]:GPIO_MAGIC(0xbb)! sizeof(gpio_typ

dispatch.c(sync_gpio_to_backup_region-1639)[00:00:29.704]:Backup gpio info is ri
evnet file /tmp/sd/alarm_event.db not exsit.

dispatch.c(cpld_ptz_init-1345)[00:00:29.704]:open_cpld hw:1222110113501218003000

libcommon.c(open_cpld-617)[00:00:29.704]:/dev/cpld_periph ok retfd:12

hw12_ab_cd_ratio[49],hw23_26_x_step:[2000],hw27_30_y_step:[1400]

dispatch.c(moto_config_init-2490)[00:00:31.141]:hw12_ab_cd_ratio[1],AB_RATIO[1],

dispatch.c(moto_config_init-2515)[00:00:31.141]:PTZ_MAX_X[2000],PTZ_MAX_Y[1400]

dispatch.c(get_config-2729)[00:00:31.152]:got sn(fajmctI541lL1BKMIGT4EQ565IrzPgW

dispatch.c(get_config-2730)[00:00:31.152]:got pwd(XXXXXX)

dispatch.c(get_config-2731)[00:00:31.152]:got ssid(7 Sterhuis Crescent)

dispatch.c(get_config-2732)[00:00:31.152]:got tnp_init_string(MJFKICLCIBEKKKHPOD

dispatch.c(get_config-2733)[00:00:31.152]:got ts:7200

dispatch.c(get_config-2798)[00:00:31.159]:def_x:1000,def_y:420
>>>>>>>>>>>>>#########is_sd_exit chg to: 10000<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>is
dispatch.c(choose_server-1061)[00:00:31.291]:in choose_server, region_id = 1, ap

dispatch.c(choose_server-1061)[00:00:31.292]:in choose_server, region_id = 16, a

dispatch.c(main-6571)[00:00:31.303]:init ok, cost time(1630 ms)

ptz_ctl.c(p_ptz-2588)[00:00:31.303]:hue, ptz running.....
g_dispatch_info.mmap_info->hw_type =1
now ptz_info----x:0,y:0

ptz_ctl.c(ptz_stop-170)[00:00:31.304]:PTZ stop OK

~~~~~~~dir = 3, speed = 10, run time = 90000~~~~~~

Failed to connect to non-global ctrl_ifname: wlan0  error: No such file or direc

dispatch.c(do_monitor_wifi-3272)[00:00:32.394]:wifi disconnected, now reconnect

cat: can't open '/proc/timeout_cnt': No such file or directory
ash: 100: unknown operand
ash: 0: unknown operand
killall: hostapd: no process killed
killall: udhcpd: no process killed
killall: wpa_supplicant: no process killed
killall: udhcpc: no process killed
killall: p2p_tnp: no process killed
killall: cloud: no process killed
ash: 1: unknown operand
cat: can't open '/proc/timeout_cnt': No such file or directory
ash: 100: unknown operand
ash: 0: unknown operand
killall: hostapd: no process killed
killall: udhcpd: no process killed
killall: udhcpc: no process killed
killall: p2p_tnp: no process killed
killall: cloud: no process killed
ash: 1: unknown operand

dispatch.c(p_worker-3835)[14:37:15.097]:DISPATCH_SET_DEFAULT_TIME 1683556635
after right half
now ptz_info----x:2000,y:0

ptz_ctl.c(ptz_stop-170)[14:37:19.177]:PTZ stop OK

~~~~~~~dir = 1, speed = 10, run time = 28000~~~~~~

[   19.379718] SSV WLAN driver SSV6006C: Set key VIF 0 VIF type 2 STA 0 algorith
[   19.394010] SET KEY 0
[   19.397150] SSV WLAN driver SSV6006C: Set key VIF 0 VIF type 2 STA -1 algorit
[   19.410883] SET KEY 0

dispatch.c(do_monitor_wifi-3301)[14:37:20.170]:wpa connected , now dhcp

killall: udhcpc: no process killed
udhcpc: started, v1.27.2
udhcpc: sending discover
[   19.708963] AMPDU_TX_START 4C:ED:FB:8C:F3:50 0.
[   19.718165] AMPDU_TX_OPERATIONAL 4C:ED:FB:8C:F3:50 0.
udhcpc: sending select for 192.168.1.10
[   19.764713] IEEE80211_AMPDU_RX_START 4C:ED:FB:8C:F3:50 0.
udhcpc: lease of 192.168.1.10 obtained, lease time 86400

dispatch.c(do_monitor_wifi-3303)[14:37:20.408]:wpa connected , now dhcp finish

dispatch.c(check_wifi_connect-3015)[14:37:21.423]:bssid(4c:ed:fb:8c:f3:50)

dispatch.c(check_wifi_connect-3037)[14:37:21.424]:ip(192.168.1.10)

dispatch.c(check_wifi_connect-3048)[14:37:21.430]:gw(192.168.1.2)
after up ptz_origin_start
now ptz_info----x:2000,y:0

ptz_ctl.c(ptz_stop-170)[14:37:22.084]:PTZ stop OK
ptz_jmp_def x:1000,y:420
now.x:2000 dst_x:1000
now ptz_info----x:2000,y:0

ptz_ctl.c(ptz_stop-170)[14:37:22.085]:PTZ stop OK

~~~~~~~dir = 4, speed = 10, run time = 45000~~~~~~

dispatch.c(check_wifi_connect-3057)[14:37:22.464]:gwmac(4C:ED:FB:8C:F3:50)

dispatch.c(check_wifi_connect-3067)[14:37:22.470]:mask(255.255.255.0)

dispatch.c(check_wifi_connect-3077)[14:37:22.485]:mac(0C:CF:89:98:E0:B2)

dispatch.c(check_wifi_connect-3091)[14:37:22.562]:signal_quality(63)
cmd(rm /tmp/sd/log_wifi_connected.tar.gz;rm /tmp/sd/wifi_connected -r;mkdir /tmp                                                     cp /tmp/log.txt /tmp/sd/wifi_connected;cp /tmp/log_oss.txt /tmp/sd/wifi_connecte                                                     ed -r &)
rm: can't remove '/tmp/sd/log_wifi_connected.tar.gz': No such file or directory
rm: can't remove '/tmp/sd/wifi_connected': No such file or directory
cp: can't stat '/tmp/log.txt': No such file or directory
cp: can't stat '/tmp/log_oss.txt': No such file or directory
tar: removing leading '/' from member names

dispatch.c(check_wifi_connect-3109)[14:37:23.863]:signal_quality(63)
now ptz_info----x:1000,y:0

ptz_ctl.c(ptz_stop-170)[14:37:26.589]:PTZ stop OK
now.y:0,dst_y:420

~~~~~~~dir = 2, speed = 10, run time = 8400~~~~~~

now ptz_info----x:1000,y:420

ptz_ctl.c(ptz_stop-170)[14:37:27.494]:PTZ stop OK
hue, ptz_x_runtime get (13) to (13)
hue, ptz_y_runtime get (3) to (3)

dispatch.c(p_worker-3865)[14:38:15.722]:rcd may crashed

killall: mp4record: no process killed

[roleoroleo]

The hack process seems to be ok:

############## Starting Firmware Dump ##############
############## Starting Hack ##############

Are you using port 8080 to access the webpage?

[nexuspolaris]

Try b091qp, it should work. #249 (reply in thread)

Is there any chance this could work for ESCAM PT201 ? Thank you ! PS: Sorry , I should first have checked your supported firmware codes table!

[roleoroleo]

I think it's not supported. But try to make a backup.