x88 pro x3 encrypted, firmware for USB_Burning_tool

Search This thread
By:
Advanced…
R

Raxone

Member
May 8, 2012
30
7
vladakru said:
here is log... Rebooting in 5 seconds..
Click to expand...
Click to collapse
Booloader,boot and dtb.img is from stock/manufacturer firmware?
System partition is not burn correct on flash try burn again.
Maybe original boot.img(kernel) not mount system partition without some encryption security.
You need to stop u-boot with any key on keyboard (enter) and type "fastboot" in u-boot
example g12a_u212_v1#fastboot and you can use fastboot to flash firmware.
This is vortex firmware aosp v2.3.0 version but with beacon bi60r bootloader,boot,and dtb.img.
Download
 
V

vladakru

Member
Aug 17, 2009
45
3
Raxone said:
Booloader,boot and dtb.img is from stock/manufacturer firmware?
System partition is not burn correct on flash try burn again.
Maybe original boot.img(kernel) not mount system partition without some encryption security.
You need to stop u-boot with any key on keyboard (enter) and type "fastboot" in u-boot
example g12a_u212_v1#fastboot and you can use fastboot to flash firmware.
This is vortex firmware aosp v2.3.0 version but with beacon bi60r bootloader,boot,and dtb.img.
Download
Click to expand...
Click to collapse
I try when came home, thanky very much fror answer.
 
V

vladakru

Member
Aug 17, 2009
45
3
vladakru said:
I try when came home, thanky very much fror answer.
Click to expand...
Click to collapse

Raxone said:
Booloader,boot and dtb.img is from stock/manufacturer firmware?
System partition is not burn correct on flash try burn again.
Maybe original boot.img(kernel) not mount system partition without some encryption security.
You need to stop u-boot with any key on keyboard (enter) and type "fastboot" in u-boot
example g12a_u212_v1#fastboot and you can use fastboot to flash firmware.
This is vortex firmware aosp v2.3.0 version but with beacon bi60r bootloader,boot,and dtb.img.
Download
Click to expand...
Click to collapse
i connected the usb keyboard to the box but the box does not respond to the keyboard. I follow this via the uart connection
 
V

vladakru

Member
Aug 17, 2009
45
3
vladakru said:
I try when came home, thanky very much fror answer.
Click to expand...
Click to collapse

Raxone said:
Booloader,boot and dtb.img is from stock/manufacturer firmware?
System partition is not burn correct on flash try burn again.
Maybe original boot.img(kernel) not mount system partition without some encryption security.
You need to stop u-boot with any key on keyboard (enter) and type "fastboot" in u-boot
example g12a_u212_v1#fastboot and you can use fastboot to flash firmware.
This is vortex firmware aosp v2.3.0 version but with beacon bi60r bootloader,boot,and dtb.img.
Download
Click to expand...
Click to collapse
i connected the usb keyboard to the box but the box does not respond to the keyboard. I follow this via the uart connection
 
V

vladakru

Member
Aug 17, 2009
45
3
vladakru said:
i connected the usb keyboard to the box but the box does not respond to the keyboard. I follow this via the uart connection
Click to expand...
Click to collapse

i managed to run fastboot. a computer keyboard is used. I flashed again but again without success ... bootloop
 

Attachments

  • printscreen.jpg
    printscreen.jpg
    673.3 KB · Views: 212
K

kalehrl

Senior Member
Nov 22, 2017
930
378
Hi. I've got an X99 Max plus which is the same as X88 Pro X3. However, I'm unable to install slimbox and I get the following error. Please see the amlogic log. Thank you.
 

Attachments

  • 2021.09.25-13.txt
    190.8 KB · Views: 105
R

Raxone

Member
May 8, 2012
30
7
kalehrl said:
Would any of your ROMs work?
Click to expand...
Click to collapse
Try this. This is vortex firmware.
Problem is here:
[13:30:09 032][HUB3-4][Inf]--3-2-0-0
[13:30:09 032][HUB3-4][Inf]--Control write pll reg1 0xfffa0000:0x000000b1
[13:30:09 535][HUB3-4][Inf]--Control write pll reg1 0xfffa0000:0x00005183
[13:30:10 055][HUB3-4][Inf]--Control write pll reg1 0xfffa0000:0x000000b1
[13:30:10 576][HUB3-4][Inf]--Control write pll reg1 0xfffa0000:0x00005183
[13:30:11 091][HUB3-4][Inf]--Write initial succeed
[13:30:11 091][HUB3-4][Inf]--Upload encrypt at 0xff800228
[13:30:11 091][HUB3-4][Inf]--ulValue = 0xb2f831b0
[13:30:11 091][HUB3-4][Inf]--File change to DDR_ENC.USB
[13:30:11 091][HUB3-4][Inf]--Read encrypt value succeed
[13:30:11 091][HUB3-4][Inf]--Download DDR_ENC.USB,size: 0!
[13:30:11 091][Global][Err]--DDR_ENC.USB
[13:30:11 091][Global][Err]--DDR_ENC.USB
[13:30:11 091][HUB3-4][Err]--Read item data error, code -1
If use firmware for non encrypted s905x3.
 
  • Like
Reactions: kalehrl
D

Deleted member 11959327

Guest
Raxone said:
Dump bootrom,aeskey s905x2
github.com

GitHub - Raxone/amlogic-usbdl_s905x2: s905x2 Dump Bootrom BL1

s905x2 Dump Bootrom BL1. Contribute to Raxone/amlogic-usbdl_s905x2 development by creating an account on GitHub.
github.com github.com
Click to expand...
Click to collapse
Were you able to dump the bootrom keys with this script? If so, describe your process with maximum specificity.

If you have a log of a successful execution of this script, please post it.

Edit: I've resolved the issue, no response needed.
 
Last edited by a moderator:
R

Raxone

Member
May 8, 2012
30
7
goapy said:
Were you able to dump the bootrom keys with this script? If so, describe your process with maximum specificity.

If you have a log of a successful execution of this script, please post it.

Edit: I've resolved the issue, no response needed.
Click to expand...
Click to collapse
Like original owner of this git repo frederic i just modded this repo to work with s905x2.
If you just ask me how to dump key i help you.
 
D

Deleted member 11959327

Guest
Raxone said:
Like original owner of this git repo frederic i just modded this repo to work with s905x2.
If you just ask me how to dump key i help you.
Click to expand...
Click to collapse
Thanks, but as I mentioned in my post a couple of months ago, I resolved this issue.

My issue was that many certified devices using the s905x2 have password enabled for usb download mode. Even old certified devices. When password is enabled, the usbdl method can't work.

Once I used the script on a non-certified generic s905x2 box, it worked fine.

But I haven't found any certified s905x2 box that didn't have usb download mode protected by password.
 
R

Raxone

Member
May 8, 2012
30
7
Dump bootrom(BL1),Bootloader,DTB,AESkey,Decrypt Bootloader for s905x2.

git clone https://github.com/Raxone/amlogic-usbdl_s905x2.git

github.com

GitHub - Raxone/amlogic-usbdl_s905x2: s905x2 Dump Bootrom BL1

s905x2 Dump Bootrom BL1. Contribute to Raxone/amlogic-usbdl_s905x2 development by creating an account on GitHub.
github.com github.com

Dump bootrom(BL1),Bootloader,DTB,AESkey,Decrypt Bootloader for s905x3

git clone https://github.com/Raxone/amlogic-usbdl_s905x3.git

github.com

GitHub - Raxone/amlogic-usbdl_s905x3: Dump s905x3

Dump s905x3 . Contribute to Raxone/amlogic-usbdl_s905x3 development by creating an account on GitHub.
github.com github.com

Youtube
 
Last edited:
  • Like
Reactions: Deleted member 11959327
R

reza0511

Member
Dec 21, 2020
12
1
Teclast X98 Air 3G
hi Raxone , I have a gtmedia gtcombo hybrid tv box without A/V port and rest switch.
when I try to install temporary TWRP35_by_VIT , either from local update or in recovery mode , it gives error 21 ,is the bootloader Locked ? can you unlock it if I upload it here ?
 
You must log in or register to reply here.

Similar threads

ijrx001
[Help] Need Firmware For MXQ Pro 4k 5G RK3228A With WiFi ESP8089
Replies
6
Views
29K
darioxavier
darioxavier
M
MXQ TV Box 5G, RK 3128, 2G and 16GB storage, Rk 30 boards need firmware & ROM for Android TV Box
Replies
42
Views
33K
98skyblue
98skyblue
N
MXQ PRO 4K AllWinner H3 CPU... Anyone ?
Replies
14
Views
23K
malikwaqashaider
malikwaqashaider
alejb85
Hello.. I have a ZTE ZXV10 B866V2 and I need to restore the Firmware
Replies
28
Views
23K
T
TheMauro
D
  • Locked
[CLOSED] CUSTOM ROM FOR JIO STB INDIA (ALL MODELS)
Replies
121
Views
41K
Oswald Boelcke
Oswald Boelcke

Top Liked Posts

24 Hours All time
  • There are no posts matching your filters.
  • 1
    R
    Raxone
    AlienatedDiego said:
    Thank you very much, unfortunately the unlocked version has not worked for me either, so I may be doing something wrong. I'll leave you the log in case you want to see it, but I really don't want you to waste any more time
    Click to expand...
    Click to collapse
    Your box is unlocked version.I think problem is in usb cable or power from usb.
    Try change usb cable or plug power adapter when you starting flash.
    You use Usb Burning tool 2.1.9.0 try with version 2.2.0.0.
    View
    1
    R
    Raxone
    vladakru said:
    hi Raxone is my box locked? here is log from serial.
    is there any way to flash another firmware on this box?
    Code: 
    [    0.000000@0] vout: get cvbsmode: 576cvbs
[    0.000000@0] vpp_axis_reverse: bootargs is 0
[    0.000000@0] DI: di_read_canvas_reverse: bootargs is 0.
[    0.000000@0] vdin_get_video_reverse: bootargs is 0.
[    0.000000@0] phlock_phase_config: bootargs is 0.
[    0.000000@0] PID hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000@0] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
[    0.000000@0] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000@0] Memory: 1349520K/2097152K available (14336K kernel code, 1334K rwdata, 5012K rodata, 1024K init, 1399K bss, 43120K reserved, 704512K cma-reserved, 643072K highmem)
[    0.000000@0] Virtual kernel memory layout:
[    0.000000@0]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000@0]     fixmap  : 0xffc00000 - 0xfff00000   (3072 kB)
[    0.000000@0]     vmalloc : 0xf0800000 - 0xff800000   ( 240 MB)
[    0.000000@0]     lowmem  : 0xc0000000 - 0xf0000000   ( 768 MB)
[    0.000000@0]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000@0]     modules : 0xbc000000 - 0xbfe00000   (  62 MB)
[    0.000000@0]       .text : 0xc0108000 - 0xc1000000   (15328 kB)
[    0.000000@0]       .init : 0xc1600000 - 0xc1700000   (1024 kB)
[    0.000000@0]       .data : 0xc1700000 - 0xc184db68   (1335 kB)
[    0.000000@0]        .bss : 0xc184f000 - 0xc19ace04   (1400 kB)
[    0.000000@0] zone:Normal, spaned pages:196608, total:196608
[    0.000000@0] zone:HighMem, spaned pages:327680, total:524288
[    0.000000@0] page_trace_pre_work, trace buffer:ee800000, size:200000, used:eea00000, end:eea00000
[    0.000000@0] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000@0] Preemptible hierarchical RCU implementation.
[    0.000000@0]        Build-time adjustment of leaf fanout to 32.
[    0.000000@0]        RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=4.
[    0.000000@0] RCU: Adjusting geometry for rcu_fanout_leaf=32, nr_cpu_ids=4
[    0.000000@0] NR_IRQS:16 nr_irqs:16 16
[    0.000000@0] irq_meson_gpio: 100 to 8 gpio interrupt mux initialized
[    0.000000@0] g12a_aoclkc_init: register ao clk ok!
[    0.000000@0] Meson chip version = RevB (2B:B - 2:0)
[    0.000000@0] meson_g12a_sdemmc_init: register amlogic sdemmc clk
[    0.000000@0] meson_g12a_sdemmc_init: register amlogic sdemmc clk
[    0.000000@0] meson_g12a_gpu_init: register meson gpu clk
[    0.000000@0] meson_g12a_media_init: register meson media clk
[    0.000000@0] meson_g12a_misc_init: register amlogic g12a misc clks
[    0.000000@0] meson_g12a_misc_init: done.
[    0.000000@0] g12a_clkc_init initialization complete
[    0.000000@0] sm1 clk probe ok
[    0.000000@0] arm_arch_timer: Architected cp15 timer(s) running at 24.00MHz (virt).
[    0.000000@0] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x588fe9dc0, max_idle_ns: 440795202592 ns
[    0.000006@0] sched_clock: 56 bits at 24MHz, resolution 41ns, wraps every 4398046511097n▒
SM1:BL:511f6b:81ca2f;FEAT:B2F939B2:202B2060;POC:D;RCY:0;USB:0;EMMC:0;READ:0;0.0;0.0;CHK:0;
bl2_stage_init 0x01
bl2_stage_init 0x81
hw id: 0x0000 - pwm id 0x01
bl2_stage_init 0xc1
bl2_stage_init 0x02

L0:0000037f
L1:00000701
L2:00008067
L3:15000020
S1:00000000
B2:202b2060
B1:b2f939b2

TE: 1111935

BL2 Built : 14:25:30, Jan 16 2020. g12a g866f606 - luan.yuan@droid15-sz

Board ID = 1
Set cpu clk to 24M
Set clk81 to 24M
Use GP1_pll as DSU clk.
DSU clk: 1200 Mhz
CPU clk: 1200 MHz
Set clk81 to 166.6M
eMMC boot @ 0
sw8 s
OTP_ARB=00000001
DDR driver_vesion: LPDDR4_PHY_V_0_1_21 build time: Jan 16 2020 14:25:27
board id: 1
Load FIP HDR from eMMC, src: 0x00010200, des: 0xfffd0000, size: 0x00004000, part: 0
fw parse done
Load ddrfw from eMMC, src: 0x00060200, des: 0xfffd0000, size: 0x0000c000, part: 0
Load ddrfw from eMMC, src: 0x00038200, des: 0xfffd0000, size: 0x00004000, part: 0
PIEI prepare done
00000000
emmc switch 1 ok
ddr saved addr:00016000
Load ddr parameter from eMMC, src: 0x02c00000, des: 0xfffd0000, size: 0x00001000, part: 0
00000000
emmc switch 0 ok
fastboot data verify
result: 255
Cfg max: 12, cur: 1. Board id: 255. Force loop cfg
DDR4 probe
ddr clk to 1320MHz
Load ddrfw from eMMC, src: 0x00014200, des: 0xfffd0000, size: 0x0000c000, part: 0

dmc_version 0001
Check phy result
INFO : End of initialization
INFO : ERROR : Training has failed!
1D training failed
Cfg max: 12, cur: 2. Board id: 255. Force loop cfg
DDR4 probe
ddr clk to 1320MHz
Load ddrfw from eMMC, src: 0x00014200, des: 0xfffd0000, size: 0x0000c000, part: 0

dmc_version 0001
Check phy result
INFO : End of initialization
INFO : ERROR : Training has failed!
1D training failed
Cfg max: 12, cur: 3. Board id: 255. Force loop cfg
DDR3 probe
ddr clk to 912MHz
Load ddrfw from eMMC, src: 0x0002c200, des: 0xfffd0000, size: 0x0000c000, part: 0

dmc_version 0001
Check phy result
INFO : End of initialization
INFO : End of read enable training
INFO : End of fine write leveling
INFO : End of read dq deskew training
INFO : End of MPR read delay center optimization
INFO : End of Write leveling coarse delay
INFO : End of write delay center optimization
INFO : End of read delay center optimization
INFO : End of max read latency training
INFO : Training has run successfully!
dwc_ddrphy_apb_wr((0<<20)|(2<<16)|(0<<12)|(0xb0):00e4
1D training succeed
aml_ddr_fw_vesion: LPDDR4_PHY_V_0_1_21 build time: Jan 16 2020 14:25:32
auto size-- 65535DDR cs0 size: 1024MB
DDR cs1 size: 1024MB
DMC_DDR_CTRL: 0020001bDDR size: 2048MB
cs0 DataBus test pass
cs1 DataBus test pass
cs0 AddrBus test pass
cs1 AddrBus test pass

non-sec scramble use zero key
ddr scramble enabled

100bdlr_step_size ps== 464
result report
boot times 0Enable ddr reg access
00000000
emmc switch 3 ok
BL2: rpmb counter: 0x0000001c
00000000
emmc switch 0 ok
Load FIP HDR from eMMC, src: 0x00010200, des: 0x01700000, size: 0x00004000, part: 0
Load BL3X from eMMC, src: 0x0006c200, des: 0x0175c000, size: 0x00138200, part: 0
0.0;0.0;M3 CHK:0;cm4_sp_mode 0
MVN_1=0x00000000
MVN_2=0x00000000
[Image: g12a_v1.1.3392-3de94df0c 2020-01-08 17:07:13 luan.yuan@droid15-sz]
OPS=0x02
ring efuse init
2b 0b 02 00 01 2c 26 00 00 02 30 39 57 4b 52 50
[0.055837 Inits done]
secure task start!
high task start!
low task start!
boot bl31
NOTICE:  BL31: v1.3(release):6fcdbfdaa
NOTICE:  BL31: Built : 20:19:44, Nov 22 2019
NOTICE:  BL31: G12A secure boot!
NOTICE:  BL31: BL33 decompress pass
INFO:    BL3-2: ATOS-V2.4.4-30-g921539e #1 Fri Dec 6 01:21:23 2019 -0700 arm
INFO:    BL3-2: Chip: SM1 Rev: B (2B:B - 0:2)
INFO:    BL3-2: crypto engine DMA
INFO:    BL3-2: secure time TEE
INFO:    BL3-2: CONFIG_DEVICE_SECURE 0xb200000e


U-Boot 2015.01 (Feb 19 2021 - 16:22:38)

DRAM:  2 GiB
Relocation Offset is: 76d72000
mmu cfg end: 0x80000000
mmu cfg end: 0x80000000
spi_post_bind(spifc): req_seq = 0
register usb cfg[0][1] = 0000000077e98428
NAND:  get_sys_clk_rate_mtd() 292, clock setting 200!
bus cycle0: 6,timing: 7
NAND device id: 0 df df df df df
No NAND device found!!!
nand init failed: -6
get_sys_clk_rate_mtd() 292, clock setting 200!
bus cycle0: 6,timing: 7
NAND device id: 0 df df df df df
No NAND device found!!!
nand init failed: -6
MMC:   aml_priv->desc_buf = 0x0000000073d62c80
aml_priv->desc_buf = 0x0000000073d64fc0
SDIO Port B: 0, SDIO Port C: 1
co-phase 0x3, tx-dly 0, clock 400000
co-phase 0x3, tx-dly 0, clock 400000
co-phase 0x3, tx-dly 0, clock 400000
emmc/sd response timeout, cmd8, cmd->cmdarg=0x1aa, status=0x3df2800
emmc/sd response timeout, cmd55, cmd->cmdarg=0x0, status=0x3df2800
co-phase 0x3, tx-dly 0, clock 400000
co-phase 0x3, tx-dly 0, clock 40000000
[set_emmc_calc_fixed_adj][875]find fixed adj_delay=20
init_part() 297: PART_TYPE_AML
[mmc_init] mmc init success
      Amlogic multi-dtb tool
      Single dtb detected
start dts,buffer=0000000073d67830,dt_addr=0000000073d67830
get_partition_from_dts() 92: ret 0
      Amlogic multi-dtb tool
      Single dtb detected
parts: 18
00:      logo   0000000000800000 1
01:  recovery   0000000001800000 1
02:      misc   0000000000800000 1
03:      dtbo   0000000000800000 1
04:  cri_data   0000000000800000 2
05:     param   0000000001000000 2
06:      boot   0000000001000000 1
set has_boot_slot = 0
07:       rsv   0000000001000000 1
08:  metadata   0000000001000000 1
09:    vbmeta   0000000000200000 1
10:       tee   0000000002000000 1
11:    vendor   0000000014000000 1
12:       odm   0000000008000000 1
13:    system   0000000050000000 1
14:   product   0000000008000000 1
15:     cache   0000000046000000 2
16:cryptoguard  0000000001000000 2
17:      data   ffffffffffffffff 4
init_part() 297: PART_TYPE_AML
eMMC/TSD partition table have been checked OK!
crc32_s:0x1577dad == storage crc_pattern:0x1577dad!!!
crc32_s:0xee152b83 == storage crc_pattern:0xee152b83!!!
crc32_s:0x79f50f07 == storage crc_pattern:0x79f50f07!!!
mmc env offset: 0x4d400000
In:    serial
Out:   serial
Err:   serial
reboot_mode=cold_boot
[store]To run cmd[emmc dtb_read 0x1000000 0x40000]
_verify_dtb_checksum()-3476: calc bb234e99, store bb234e99
_verify_dtb_checksum()-3476: calc bb234e99, store bb234e99
dtb_read()-3691: total valid 2
update_old_dtb()-3672: do nothing
      Amlogic multi-dtb tool
      Single dtb detected
amlkey_init() enter!
[EFUSE_MSG]keynum is 4
vpu: driver version: v20190313
vpu: detect chip type: 11
vpu: clk_level default: 7(666667000Hz), max: 7(666667000Hz)
vpu: clk_level in dts: 7
vpu: vpu_power_on
vpu: set_vpu_clk
vpu: set clk: 666667000Hz, readback: 666666667Hz(0x100)
vpu: set_vpu_clk finish
vpu: vpu_module_init_config
vpp: vpp_init
vpp: vpp osd2 matrix rgb2yuv..............
hdr_func 4, hdr_process_select 0x1
cvbs: cpuid:0x2b
cvbs: find performance_pal config
Net:   dwmac.ff3f0000amlkey_init() enter!
amlkey_init() 71: already init!
[EFUSE_MSG]keynum is 4

CONFIG_AVB2: null
Start read misc partition datas!
info->magic =
info->version_major = 1
info->version_minor = 0
info->slots[0].priority = 15
info->slots[0].tries_remaining = 7
info->slots[0].successful_boot = 0
info->slots[1].priority = 14
info->slots[1].tries_remaining = 7
info->slots[1].successful_boot = 0
info->crc32 = -1075449479
active slot = 0
wipe_data=successful
wipe_cache=successful
upgrade_step=2
reboot_mode:::: cold_boot
s_version: U-Boot 2015.01
amlkey_init() enter!
amlkey_init() 71: already init!
[EFUSE_MSG]keynum is 4
[KM]Error:f[key_manage_query_size]L515:key[usid] not programed yet
[KM]Error:f[key_manage_query_size]L515:key[deviceid] not programed yet
[KM]Error:f[keymanage_dts_get_key_device]L105:oemkey key name is not exist
[KM]Error:f[_get_km_ops_by_name]L240:key oemkey not know device 4
[KM]Error:f[key_manage_query_exist]L554:There isn't dts cfg for key[oemkey]
[KM]Error:f[key_manage_query_size]L511:Fail in query key exist
hpd_state=0
do_hpd_detect: hdmimode=1080p60hz
do_hpd_detect: colorattribute=444,8bit
Saving Environment to aml-storage...
mmc env offset: 0x4d400000
Writing to MMC(1)... done
no sink, fallback to 720p60hz[4]
hdr mode is 0
dv  mode is ver:0  len: 0
hdr10+ mode is 0
read hdmichecksum 0x00000000, colorattribute 444,8bit
read hdmimode 1080p60hz, colorspace <NULL>, colordepth <NULL>
do_get_parse_edid: autoMode = false, manualMode=16
isYuv4kSink: false, maxTMDSRate=150
do_get_parse_edid: non-yuv4k sink: inColorSpace: HDMI_COLOR_FORMAT_RGB
do_get_parse_edid: default inColorDepth: HDMI_COLOR_DEPTH_24B
TV is same, initial mode is: 576cvbs attr: 444,8bit
dolby_status 0
dolby_status 0
dolby_vision_process: no tv and dv disabled
Saving Environment to aml-storage...
mmc env offset: 0x4d400000
Writing to MMC(1)... done
[OSD]load fb addr from dts:/meson-fb
[OSD]load fb addr from dts:/fb
[OSD]set initrd_high: 0x7f800000
[OSD]fb_addr for logo: 0x7f800000
[OSD]load fb addr from dts:/meson-fb
[OSD]load fb addr from dts:/fb
[OSD]fb_addr for logo: 0x7f800000
[OSD]VPP_OFIFO_SIZE:0xfff01fff
[CANVAS]canvas init
[CANVAS]addr=0x7f800000 width=3840, height=2160
[OSD]osd_hw.free_dst_data: 0,719,0,575
[OSD]osd1_update_disp_freescale_enable
vpp: vpp_matrix_update: 2
cvbs_performance_enhancement
cvbs_config_hdmipll_g12a
cvbs_set_vid2_clk
dolby_status 0
dolby_status 0
hdr_packet
vpp: hdr_policy = 0
vpp: Rx hdr_info.hdr_sup_eotf_smpte_st_2084 = 0
s_version: U-Boot 2015.01
amlkey_init() enter!
amlkey_init() 71: already init!
[EFUSE_MSG]keynum is 4
[KM]Error:f[key_manage_query_size]L515:key[usid] not programed yet
[KM]Error:f[key_manage_query_size]L515:key[deviceid] not programed yet
[KM]Error:f[keymanage_dts_get_key_device]L105:oemkey key name is not exist
[KM]Error:f[_get_km_ops_by_name]L240:key oemkey not know device 4
[KM]Error:f[key_manage_query_exist]L554:There isn't dts cfg for key[oemkey]
[KM]Error:f[key_manage_query_size]L511:Fail in query key exist
gpio: pin GPIOAO_3 (gpio 3) value is 1
Command: bcb uboot-command
Start read misc partition datas!
get bootloader message from misc partition:
[commannd:boot-recovery]
[status:]
[recovery:recovery
--update_package=@/cache/recovery/block.map
--locale=en-US

]
Start read misc partition datas!
info->magic =
info->version_major = 1
info->version_minor = 0
info->slots[0].priority = 15
info->slots[0].tries_remaining = 7
info->slots[0].successful_boot = 0
info->slots[1].priority = 14
info->slots[1].tries_remaining = 7
info->slots[1].successful_boot = 0
info->crc32 = -1075449479
active slot = 0
active_slot: normal
[imgread]secureKernelImgSz=0xa86f16
Unknown command 'wipeisb' - try 'help'

aml log : Sig Check -2
run command:run recovery_from_flash successful.
s_version: U-Boot 2015.01
amlkey_init() enter!
amlkey_init() 71: already init!
[EFUSE_MSG]keynum is 4
[KM]Error:f[key_manage_query_size]L515:key[usid] not programed yet
[KM]Error:f[key_manage_query_size]L515:key[deviceid] not programed yet
[KM]Error:f[keymanage_dts_get_key_device]L105:oemkey key name is not exist
[KM]Error:f[_get_km_ops_by_name]L240:key oemkey not know device 4
[KM]Error:f[key_manage_query_exist]L554:There isn't dts cfg for key[oemkey]
[KM]Error:f[key_manage_query_size]L511:Fail in query key exist
Hit Enter or space or Ctrl+C key to stop autoboot -- :  0
pll tsensor avg: 0x2017, u_efuse: 0x8001
temp1: 39
ddr tsensor avg: 0x2038, u_efuse: 0x8001
temp2: 40
device cool done
CONFIG_SYSTEM_AS_ROOT: systemroot
system_mode: 1
Start read misc partition datas!
info->magic =
info->version_major = 1
info->version_minor = 0
info->slots[0].priority = 15
info->slots[0].tries_remaining = 7
info->slots[0].successful_boot = 0
info->slots[1].priority = 14
info->slots[1].tries_remaining = 7
info->slots[1].successful_boot = 0
info->crc32 = -1075449479
active slot = 0
CONFIG_AVB2: null
active_slot: normal
[imgread]secureKernelImgSz=0x98a200
avb2: 0
ee_gate_off ...
avb2: 0
## Booting Android Image at 0x01080a00 ...
Kernel command line: androidboot.dtbo_idx=0 --cmdline root=/dev/mmcblk0p18 buildvariant=userdebug
[store]Is good fdt check header, no need decrypt!
active_slot is normal
load dtb from 0x1000000 ......
      Amlogic multi-dtb tool
      Single dtb detected
find 1 dtbos
dtbos to be applied: 0
Apply dtbo 0
   Loading Kernel Image(COMP_NONE) ... OK
   kernel loaded at 0x01080000, end = 0x019f24c8
libfdt fdt_getprop(): FDT_ERR_NOTFOUND
   Loading Device Tree to 0000000009fe6000, end 0000000009fff6ac ... OK
fdt_fixup_memory_banks, reg:0000000000000000

Starting kernel ...

uboot time: 4433007 us
    Click to expand...
    Click to collapse
    Your box CPUID SM1:BL:511f6b:81ca2f;FEAT:B2F939B2:202B2060
    my x88prox3 CPUID SM1:BL:511f6b:81ca2f;FEAT:B2F831B0:202B2060.
    You can try my version of firmware but fisrt you need to dump your box firmware and than try flash firmware.
    Download Rom_DumP from above post and dump bootloader.img,boot.img,dt.img.
    Best way is to dump all nand exept data and cache.
    What you box brend?
    It is DreamBox.
    If you dump bootloader.img you can send me to compare bootloader maybe custumize firmware for you box.
    View
    1
    R
    Raxone
    vladakru said:
    where i can find "platform.conf" ? can I somehow get them out of the box?
    Click to expand...
    Click to collapse
    You can just create file name "platform.conf" must be .conf extension.
    But that file is only for USB_Burning_tool firmware image .
    If you got maybe stock firmware of you box you can extract file from firmware.
    I think that file not exist in nand/flash on box.
    If you use linux maybe i can help you to find some information of you box.
    View
    1
    V
    vladakru
    Raxone said:
    Problem is in dtb.img.Size of system partition is to small.You got failed info.
    Max size of system.img is 800Mb
    Click to expand...
    Click to collapse

    I did it! :)
    I unpacked a few different firmware, and I succeeded with Aidan's Rom [S905X3] (TX3).
    I want to thank you once again. Thanks a lot friend!
    View
    1
    R
    Raxone
    kalehrl said:
    Hi. I've got an X99 Max plus which is the same as X88 Pro X3. However, I'm unable to install slimbox and I get the following error. Please see the amlogic log. Thank you.
    Click to expand...
    Click to collapse
    You got encrypted version box.
    View

New posts