MDZ-16-AB bootloader unlocked - Android Stick & Console AMLogic based Computers

I unlock the bootloader of mdz-16-ab by disassembling uboot and write the cracked instructions back to the box using 'mw' command in uboot.
I've only cracked r454 firmware virsion(android 6.0). And I'm looking for someone who have a UART cable to do more tests on this work. My final purpose is to crack the final firmware release (android pie).
Though my work, I can decrypt the boot image and recovery image and boot decrypted images.
If you want to boot any image: mw 77eff124 14000007
If you want to decrypt the boot image and copy it out from RAM: mw 77eff120 d280ccc0; mw 77eff124 aa0003f4
(this is different for different firmware versions, this one is for r454)
You can add 'mw 77eff124 14000007' to the beginning of uboot env 'preboot' and 'saveenv' to autocrack during boot. After that, you can replace the encrypted boot images with decrypted boot images and use twrp and magisk.
If you have upgraded to oreo or pie, don't worry. I need you to do some tests too. I will soon crack these new versions.

---

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

---

i flash r454 firmware (once r454 update.zip) into my mdz19aa, cant power on, only show MI.

---

intel_outside said:
I unlock the bootloader of mdz-16-ab by disassembling uboot and write the cracked instructions back to the box using 'mw' command in uboot.
I've only cracked r454 firmware virsion(android 6.0). And I'm looking for someone who have a UART cable to do more tests on this work. My final purpose is to crack the final firmware release (android pie).
Though my work, I can decrypt the boot image and recovery image and boot decrypted images.
If you want to boot any image: mw 77eff124 14000007
If you want to decrypt the boot image and copy it out from RAM: mw 77eff120 d280ccc0; mw 77eff124 aa0003f4
(this is different for different firmware versions, this one is for r454)
You can add 'mw 77eff124 14000007' to the beginning of uboot env 'preboot' and 'saveenv' to autocrack during boot. After that, you can replace the encrypted boot images with decrypted boot images and use twrp and magisk.
If you have upgraded to oreo or pie, don't worry. I need you to do some tests too. I will soon crack these new versions.
Click to expand...
Click to collapse
Could you please make a guide that how to found the address(77eff124) ? Thank you.