[HELP] How to Unbrick Mecool M8S Pro L?

H96 Pro, X98 Pro, TX9 Pro to name a few...
MeecoolASV
Posts: 5
Joined: Sun Mar 21, 2021 12:28 pm
Answers: 0

#1

I was flashing a rom using Amlogic USB Burning Tool and it was 87% (almost finished flashing the rom), when the USB Burning tool just stopped and my TV Box doesn't show anything at all anymore, just black screen! Is there any fix for this?
User avatar
em3ka
Moderator
Posts: 1836
Joined: Sun Jul 15, 2018 11:43 am
Answers: 0
Has thanked: 108 times
Been thanked: 371 times

#2

Short the two pins and flash working ROM with burning tool.
image_33022.jpg
[FreakTab]
You do not have the required permissions to view the files attached to this post.
MeecoolASV
Posts: 5
Joined: Sun Mar 21, 2021 12:28 pm
Answers: 0

#3

em3ka wrote: Tue Mar 23, 2021 2:03 pm Short the two pins and flash working ROM with burning tool.

image_33022.jpg
[FreakTab]
Yeah, I managed to get the device recognized by the pc, but now it gets stuck at Download DDR 2% and says this error "romcode/initialize ddr/read initialize status/usb control setup error"
MeecoolASV
Posts: 5
Joined: Sun Mar 21, 2021 12:28 pm
Answers: 0

#4

If someone has fix for being stuck at Download DDR 2% and says this error "romcode/initialize ddr/read initialize status/usb control setup error". Please let me know!
bumerc
Administrator & Developer
Posts: 1551
Joined: Tue Oct 02, 2018 6:19 pm
Answers: 0
Has thanked: 211 times
Been thanked: 334 times

#5

[mention]MeecoolASV[/mention]
Look for an LPDDR3 ROM
MeecoolASV
Posts: 5
Joined: Sun Mar 21, 2021 12:28 pm
Answers: 0

#6

bumerc wrote: Tue Mar 23, 2021 5:26 pm [mention]MeecoolASV[/mention]
Look for an LPDDR3 ROM

Yeah, I understand! But I tried flashing the original firmware, didn't work for me! Then I also tried to flash rom, but no work! None of these worked! I'll look for an LPDDR3 rom tho and maybe it works! Thanks for suggestion
MeecoolASV
Posts: 5
Joined: Sun Mar 21, 2021 12:28 pm
Answers: 0

#7

Still not fixed, if someone can help, I'd really appreciate it
bumerc
Administrator & Developer
Posts: 1551
Joined: Tue Oct 02, 2018 6:19 pm
Answers: 0
Has thanked: 211 times
Been thanked: 334 times

#8

MeecoolASV wrote: Wed Mar 24, 2021 2:30 pm Still not fixed, if someone can help, I'd really appreciate it
You're doing something wrong. Short the pins 29-30 or 30-31 and post uart-log please
james007bont
Posts: 5
Joined: Sun Jul 31, 2022 8:57 am
Answers: 0

#9

Hello there my m8s pro 3/32 gb stays on blue led doesnt boot black screen. aAso cannot flash with burntool or cardmaker or twrp. No program skills, monkey see monkey do.

Here is the log.

Code: Select all

GXM:BL1:dc8b51:76f1a5;FEAT:ADFC318C:80;POC:3;RCY:0;EMMC:800;NAND:82;SD:800;USB:8                                                                                                                     ;LOOP:1;EMMC:800;NAND:82;SD:800;USB:8;LOOP:2;EMMC:800;NAND:82;SD:800;USB:8;LOOP:3;EMMC:800;NAND:82;SD:800;USB:8;LOOP:4;EMMC:800;NAND:82;SD:800;USB:8;0.0;
TE: 30068823

BL2 Built : 19:04:28, May 29 2018. \ngxl g034b32c-dirty - xianjun.liu@droid09-sz

set vdd cpu_a to 1120 mv
set vdd cpu_b to 1050 mv
set vddee to 1000 mv
Board ID = 4
CPU clk: 1200MHz
BL2 USB
DQS-corr enabled
DDR scramble enabled
LPDDR3 chl: Rank0+1 @ 720MHz
bist_test rank: 0 24 0b 3e 3d 1f 5c 24 0a 3f 3d 20 5b 1b 04 33 43 27 5f 24 09 3f 3b 1b 5b 674  rank: 1 22 08 3d 3e 20 5d 26 0b 41 3d 20 5b 1b 04 32 43 29 5d 25 0a 40 3c 1b 5e 674   - PASS

Rank0: 2048MB-2T-3

Rank1: 1024MB-2T-3
0.0;
TE: 30575456

BL2 Built : 19:04:28, May 29 2018. \ngxl g034b32c-dirty - xianjun.liu@droid09-sz

set vdd cpu_a to 1120 mv
set vdd cpu_b to 1050 mv
set vddee to 1000 mv
Board ID = 4
CPU clk: 1200MHz
BL2 USB
0.0;
TE: 30637587

BL2 Built : 19:04:28, May 29 2018. \ngxl g034b32c-dirty - xianjun.liu@droid09-sz

set vdd cpu_a to 1120 mv
set vdd cpu_b to 1050 mv
set vddee to 1000 mv
Board ID = 4
CPU clk: 1200MHz
BL2 USB
Load fip header from USB, src: 0x0000c000, des: 0x01400000, size: 0x00004000
New fip structure!
Load bl30 from USB, src: 0x00010000, des: 0x01100000, size: 0x0000d600
Load bl31 from USB, src: 0x00020000, des: 0x05100000, size: 0x0002c600
Load bl32 from USB, src: 0x00050000, des: 0x05300000, size: 0x00036200
Load bl33 from USB, src: 0x00088000, des: 0x01000000, size: 0x00066e00
NOTICE:  BL3-1: v1.0(release):35dd647
NOTICE:  BL3-1: Built : 15:20:30, Feb  7 2018
NOTICE:  BL31: BL33 decompress pass
mpu_config_enable:ok
[Image: gxl_v1.1.3243-377db0f 2017-09-07 11:28:58 qiufang.dai@droid07]
OPS=0x82
wdt: reset registers!
c6 28 6c 1 39 72 8f 4c 3 c 28 5c [30.984928 Inits done]
secure task start!
high task start!
low task start!
INFO:    BL3-2: ATOS-V2.0.2-g7eeafe5 #4 Thu May 18 13:19:01 CST 2017 arm
INFO:    BL3-2: Chip: Unknown Rev: A (22:A - 80:2)
INFO:    BL3-2: crypto engine DMA
INFO:    BL3-2: secure time TEE
INFO:    BL3-2: CONFIG_DEVICE_SECURE 0xb200000e


U-Boot 2015.01-g940992f-dirty (Jul 26 2018 - 10:08:55)

DRAM:  3 GiB
Relocation Offset is: b6eb1000
[MSG]MMC init in usb
aml_priv->desc_buf = 0x00000000b3eb1640
aml_priv->desc_buf = 0x00000000b3eb3960
SDIO Port B: 0, SDIO Port C: 1
InUsbBurn
[MSG]sof
Set Addr 1
Get DT cfg
Get DT cfg
Get DT cfg
set CFG
Get DT cfg
Get DT cfg

ID[16]
tplcmd[    echo 12345]
12345
[MSG]ret = 0
[info]success
BULKcmd[    low_power]
[info]success

ID[16]
tplcmd[    download mem dtb normal 96256]
[MSG]Down(mem) part(dtb) sz(0x17800) fmt(normal)
[MSG]totalSlotNum = 0, nextWriteBackSlot 2
[info]success
[MSG]Burn Start...
[MSG]load dt.img to 0x0000000001000000, sz=0x17800
[MSG]Burn complete
BULKcmd[download get_status]
[info]success
BULKcmd[disk_initial 1]
dtb magic 5f4c4d41
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxm platform: q20xrmii variant: 3g
        dtb 0 soc: gxm   plat: q20xrmii   vari: 2g
        dtb 1 soc: gxm   plat: q20xrmii   vari: 3g
      Find match dtb: 1
start dts,buffer=0000000001000000,dt_addr=000000000100c000
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxm platform: q20xrmii variant: 3g
        dtb 0 soc: gxm   plat: q20xrmii   vari: 2g
        dtb 1 soc: gxm   plat: q20xrmii   vari: 3g
      Find match dtb: 1
parts: 10
00:      logo   0000000002000000 1
01:  recovery   0000000002000000 1
02:       rsv   0000000000800000 1
03:       tee   0000000000800000 1
04:     crypt   0000000002000000 1
05:      misc   0000000002000000 1
06:      boot   0000000002000000 1
07:    system   0000000080000000 1
08:     cache   0000000020000000 2
09:      data   ffffffffffffffff 4
emmc/sd response timeout, cmd8, status=0x3ff2800
emmc/sd response timeout, cmd55, status=0x3ff2800
EMMC init failed
boot_device_flag : 1
Nand PHY Ver:1.01.001.0006 (c) 2013 Amlogic Inc.
init bus_cycle=6, bus_timing=7, system=5.0ns
reset failed
get_chip_type and ret:fffffffe
get_chip_type and ret:fffffffe
chip detect failed and ret:fffffffe
nandphy_init failed and ret=0xfffffff1
NAND init failed
device_boot_flag=2
[store]ERR:FAILED in get_device_boot_flag
cmd [store  init 3] init failed
[info]failed:

ID[16]

ID[16]
tplcmd[    echo 12345]
12345
[MSG]ret = 0
[info]success
BULKcmd[    low_power]
[info]success

ID[16]
tplcmd[    download mem dtb normal 96256]
[MSG]Down(mem) part(dtb) sz(0x17800) fmt(normal)
[MSG]totalSlotNum = 0, nextWriteBackSlot 2
[info]success
[MSG]Burn Start...
[MSG]load dt.img to 0x0000000001000000, sz=0x17800
[MSG]Burn complete
BULKcmd[download get_status]
[info]success
BULKcmd[disk_initial 1]
dtb magic 5f4c4d41
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxm platform: q20xrmii variant: 3g
        dtb 0 soc: gxm   plat: q20xrmii   vari: 2g
        dtb 1 soc: gxm   plat: q20xrmii   vari: 3g
      Find match dtb: 1
start dts,buffer=0000000001000000,dt_addr=000000000100c000
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxm platform: q20xrmii variant: 3g
        dtb 0 soc: gxm   plat: q20xrmii   vari: 2g
        dtb 1 soc: gxm   plat: q20xrmii   vari: 3g
      Find match dtb: 1
parts: 10
00:      logo   0000000002000000 1
01:  recovery   0000000002000000 1
02:       rsv   0000000000800000 1
03:       tee   0000000000800000 1
04:     crypt   0000000002000000 1
05:      misc   0000000002000000 1
06:      boot   0000000002000000 1
07:    system   0000000080000000 1
08:     cache   0000000020000000 2
09:      data   ffffffffffffffff 4
emmc/sd response timeout, cmd8, status=0x1ff2800
emmc/sd response timeout, cmd55, status=0x1ff2800
card out
emmc/sd response timeout, cmd8, status=0x1ff2800
emmc/sd response timeout, cmd55, status=0x1ff2800
emmc/sd response timeout, cmd1, status=0x1ff2800
amlmmc cmd  failed

store - STORE sub-system

Usage:
store store init flag
store read name addr off|partition size
    read 'size' bytes starting at offset 'off'
    to/from memory address 'addr', skipping bad blocks.
store write name addr off|partition size
    write 'size' bytes starting at offset 'off'
    to/from memory address 'addr', skipping bad blocks.
store rom_write add off size.
        write uboot to the boot device
store erase boot/data:
        erase the area which is uboot or data
store erase partition <partition_name>:
        erase the area which partition in u-boot
store erase dtb
store erase key
store disprotect key
store rom_protect on/off
store scrub off|partition size
        scrub the area from offset and size
store dtb iread/read/write addr <size>
        read/write dtb, size is optional
store key read/write addr <size>
        read/write key, size is optional
store mbr addr
   update mbr/partition table by dtb

cmd [store  init 3] init failed
[info]failed:

ID[16]

ID[16]
tplcmd[    echo 12345]
12345
[MSG]ret = 0
[info]success
BULKcmd[    low_power]
[info]success

ID[16]
tplcmd[    download mem dtb normal 96256]
[MSG]Down(mem) part(dtb) sz(0x17800) fmt(normal)
[MSG]totalSlotNum = 0, nextWriteBackSlot 2
[info]success
[MSG]Burn Start...
[MSG]load dt.img to 0x0000000001000000, sz=0x17800
[MSG]Burn complete
BULKcmd[download get_status]
[info]success
BULKcmd[disk_initial 1]
dtb magic 5f4c4d41
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxm platform: q20xrmii variant: 3g
        dtb 0 soc: gxm   plat: q20xrmii   vari: 2g
        dtb 1 soc: gxm   plat: q20xrmii   vari: 3g
      Find match dtb: 1
start dts,buffer=0000000001000000,dt_addr=000000000100c000
      Amlogic multi-dtb tool
      Multi dtb detected
      Multi dtb tool version: v2 .
      Support 2 dtbs.
        aml_dt soc: gxm platform: q20xrmii variant: 3g
        dtb 0 soc: gxm   plat: q20xrmii   vari: 2g
        dtb 1 soc: gxm   plat: q20xrmii   vari: 3g
      Find match dtb: 1
parts: 10
00:      logo   0000000002000000 1
01:  recovery   0000000002000000 1
02:       rsv   0000000000800000 1
03:       tee   0000000000800000 1
04:     crypt   0000000002000000 1
05:      misc   0000000002000000 1
06:      boot   0000000002000000 1
07:    system   0000000080000000 1
08:     cache   0000000020000000 2
09:      data   ffffffffffffffff 4
emmc/sd response timeout, cmd8, status=0x1ff2800
emmc/sd response timeout, cmd55, status=0x1ff2800
emmc/sd response timeout, cmd8, status=0x1ff2800
emmc/sd response timeout, cmd55, status=0x1ff2800
emmc/sd response timeout, cmd1, status=0x1ff2800
amlmmc cmd  failed

store - STORE sub-system

Usage:
store store init flag
store read name addr off|partition size
    read 'size' bytes starting at offset 'off'
    to/from memory address 'addr', skipping bad blocks.
store write name addr off|partition size
    write 'size' bytes starting at offset 'off'
    to/from memory address 'addr', skipping bad blocks.
store rom_write add off size.
        write uboot to the boot device
store erase boot/data:
        erase the area which is uboot or data
store erase partition <partition_name>:
        erase the area which partition in u-boot
store erase dtb
store erase key
store disprotect key
store rom_protect on/off
store scrub off|partition size
        scrub the area from offset and size
store dtb iread/read/write addr <size>
        read/write dtb, size is optional
store key read/write addr <size>
        read/write key, size is optional
store mbr addr
   update mbr/partition table by dtb

cmd [store  init 3] init failed
[info]failed:
User avatar
em3ka
Moderator
Posts: 1836
Joined: Sun Jul 15, 2018 11:43 am
Answers: 0
Has thanked: 108 times
Been thanked: 371 times

#10

@james007bont
Short pins and flash LPDDR3 ROM, read above. :thinking:
Post Reply