FORUMS

Hacking MiraScreen5G dongle to become EZCast5G dongle

566 posts
Thanks Meter: 16
 
By Chatty, Senior Member on 17th December 2017, 01:19 AM
Post Reply Email Thread
Hi,

I always found it saddening to notice EZCast5G (the "original") is updated at first and their knock offs are updated way later (as of writing this, there is 16602000 for EZCast5G, 16403000 for MiraScreen5G).

The update tool let's you easily analyze the update process. And if you fake the reply from this URL with (for example) miniweb to always dish out latest EZCast5G firmware then your knock off will become an original.

These are the requests made for a legit EZCast5G and a MiraScreen5G:
Code:
curl http://www.iezvu.com/upgrade/ota_rx.php -d "{\"version\":1,\"vendor\":\"ezcast5g\",\"mac_address\":\"authorshxj\",\"softap_ssid\":\"000000-00000000\",\"firmware_version\":\"16602000\"}"
curl http://www.iezvu.com/upgrade/ota_rx.php -d "{\"version\":1,\"vendor\":\"am8252_nand_mirascreen\",\"mac_address\":\"authorshxj\",\"softap_ssid\":\"000000-00000000\",\"firmware_version\":\"16403000\"}"
These are the official replys where you need to always dish out the first one and the update tool will do the rest:
Code:
{"ota_conf_file":"http://cdn.iezvu.com/upgrade/ezcast5g/ezcast5g-16602000.conf","ota_fw_file":"http://cdn.iezvu.com/upgrade/ezcast5g/ezcast5g-16602000.gz","ota_enforce":true}
{"ota_conf_file":"http://cdn.iezvu.com/upgrade/am8252_nand_mirascreen/am8252_nand_mirascreen-16403000.conf","ota_fw_file":"http://cdn.iezvu.com/upgrade/am8252_nand_mirascreen/am8252_nand_mirascreen-16403000.gz","ota_enforce":true}
When I opened mine it even read "5G EZCAST V1.4" on it - so I was pretty sure it should work. And it did. So for $17 one year ago I got myself a neat working EZCast5G. The MiraScreen5G gets into bootloader mode by pressing the one and only button right when you plug it into USB - no need to shorten pin 19 and 20 of the AM8252.
Attached Thumbnails
Click image for larger version

Name:	All.jpg
Views:	604
Size:	267.4 KB
ID:	4362608  
6th March 2018, 08:16 AM |#2  
Junior Member
Thanks Meter: 0
 
More
Thank you.
Some questions.
How to use this curl command with miniWeb?
27th September 2018, 01:20 PM |#3  
Senior Member
Thanks Meter: 17
 
More
Hi,
BUMP

No honestly, could you elaborate how this works ? Have 2 MiraScreen5G dongles...

Ender
5th November 2018, 01:30 PM |#4  
Senior Member
Thanks Meter: 17
 
More
Hi,
with some help from Chatty and another forum i got it done !

First i needed to add a line to my hosts file:
(On windows its found in C:\Windows\System32\drivers\etc)
Code:
127.0.0.1 www.iezvu.com
Then i downloaded miniweb and created a file containing the desired server answer.
Miniwebs web root resides in the "htdocs" folder by default, so i created a folder named "upgrade" and in that folder a file named "ota_rx.php.
I edited that file to contain this text:
Code:
{"ota_conf_file":"http://cdn.iezvu.com/upgrade/ezcast5g/ezcast5g-16602000.conf","ota_fw_file":"http://cdn.iezvu.com/upgrade/ezcast5g/ezcast5g-16602000.gz","ota_enforce":true}
I fired up miniweb with the parameter "-p 80" to listen on the stabdard web port.
THEN i started the EZ Updater app, connected my dongle in Flash mode and VOILA it detected the version i wanted it to detect.
So it flashed (took forever with several loops) my MiraScreen5G to a EZCast5G !!!!

After that initial update the dongle detected a newer version and updated okay.

Please note that AFTER the update you cannot get into flash mode by simply pressing the key. I assume that key is not considered existing anymore since the EZCast5G has none as well
So for further flash-fun we need to short the Pin like its descived by Chatty !


THANKS Chatty & all,

Ender
4th December 2018, 06:02 PM |#5  
Senior Member
Thanks Meter: 259
 
More
Just opened a K6 mirascreen and found these

nanya nt5cb64m16fp-dh 128mb ddr3 ram
am8272
samsung k9f1g08u0d 16mb flash
the pcb reads S?-EZCAST-8271-V2F

im unable to find a suitable firmware for it and no idea how to enter download mode....

---------- Post added at 06:02 PM ---------- Previous post was at 05:35 PM ----------

the firmware says 1.3707.11 btw
10th February 2020, 12:37 PM |#6  
SweenWolf's Avatar
Senior Member
Flag Paradise
Thanks Meter: 93
 
More
Hey Guys,
If someone knows, please share the knowledge.

Few Months ago when I was updating the firmware, my Dongle died due to power cut.
after reconnecting my PC couldn't read the version of my dongle. Today I wanted to revive my Dongle But have no to little experience on the Windows Debugging. I know my Dongle is not dead and it has no firmware, I also know that EZCast Repair tool can Flash the Firmware to it, I can download the firmware using the OP, I can also see that The App has options for Manually flashing the Firmware.
But I don't know how and what to do to access the areas shown in the Screenshot.
anyone please help me and point me to right direction.

Thanks in Advance.
Attached Thumbnails
Click image for larger version

Name:	Screenshot (173).png
Views:	20
Size:	84.1 KB
ID:	4947083  
Post Reply Subscribe to Thread

Guest Quick Reply (no urls or BBcode)
Message:
Previous Thread Next Thread
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes