yashsingh1/xdaforums huggingface dataset:
[Hardware Hacking General] printzesu:
Hi guys,

I need some help regarding the same issue as you had here.

I have a box which has a HD18 V2.22 main board. By mistake using toothpick method, I flashed the ROM using a 4 core firmware ( i know sounds stupid but it is what it is), and now my box is down. I was trying several procedure to bring it back to live, BenniBennasi procedure http://xdaforums.com/showpost.php?p=45502307&postcount=12 as well as USB Burning Tool with no luck by now. looks like some how all the configuration to the ROM is messed up and even the reset method is no longer available. The box looks to be still in live mode as using USB burning Tool and this config_progress file:

<?xml version="1.0" encoding="UTF-8"?>

<progress_configs>

<command sn="0" path="usb_spl.bin" address="0xd9000000" run="true">load spl</command>

<command sn="1" path="u-boot-orig.bin" address="0x8f800000" run="false">load uboot</command>

<command sn="2">run 0x8f800000</command>

<command sn="3">defenv</command>

<command sn="4" cmd="setenv recovery_command --usb_burning" address="0x82000000">load addr</command>

<command sn="5">cmd_in_mem 0x82000000</command>

<command sn="6">save</command>

<command sn="7" path="uImage_recovery" address="0x82000000" run="false">load uimage</command>

<command sn="8">bootm 0x82000000</command>

<command sn="9" >wipe_data</command>

<command sn="10" >wipe_cache</command>

<command sn="11" count="150">update:update.zip</command>

<command sn="12" >reset</command>

</progress_configs>

I was able to see on the screen that android it starts installing something but it gets disconnected from the tool with error cannot find disk! 30 times failed because no connected device, current step is 9.

I was trying many times and I even let the box powered on for 24 hours with the image of android installing with no luck. Once I disconnected from power it came back to the same state, no toothpick method available, and black screen with no hdmi signal.

If someone can help me with a method that can work, a image or a tool that can bring back to live my box, will make my life happy :)

Cheers and hope someone has a solution form my MX2 box.
[Hardware Hacking General] osm0sis:
[MENTION=2726594]n0ble[/MENTION] I don't respond via PM for technical questions.

UART may work but I don't know the commands required. There may be some reference to them in this thread, or in the freaktab forums where Benni posted previously.

I too managed to brick my device trying to upgrade to Matricom's latest ROM builds, the reason for this is because they didn't factor in the recovery updates they pushed in the beta builds not being backwards compatible and instead appear to be sequential. The "toothpick method" is hardwired into the box however, and should always result in a sdcard flash from recovery, this happens regardless of any recovery partition shenanigans because the first thing it does is boot the recovery.img included in the sdcard.

The main trick is making sure your sdcard is formatted correctly (2gb) and contains Benni's image. His instructions are pretty foolproof so I recommend following them carefully.
[Hardware Hacking General] n0ble:
I have been using an 8gb card but flashing the Bennie image with raw hdd tool. His image is 4gb not 2gb?

But I'll follow exactly what you say as I've tried everything else i can think of.

If you can give me a direct link to the exact files you used and the exact size card you used, I'll do exactly that.

I have also tried leaving it running with toothpick method and recovery card even though there is no ouput to no avail.

Thanks again for your reply.
[Hardware Hacking General] osm0sis:
You're right, it is 4gb. Also, there will be no video output until the recovery and boot images are fixed; I recall the toothpick method not appearing to work the first time, but I waited it out and when it still didn't boot I did the toothpick again and then it all worked normally again. My guess is the first one flashed the recovery and kernel and then the second time fixed the ROM.

UART instructions are posted for relol several pages into this thread if you still don't have any luck.
[Hardware Hacking General] n0ble:
Ok so even though it's creating the correct 4gb partition on my 8gb card. Still recommend using a 4gb card? I'll do it another couple of times and see what happens :)
[Hardware Hacking General] osm0sis:
Now that I double check, my recovery sdcard actually is 2gb, but I used Benni's format/partitioning tool and instructions, most recently linked above the user before me on this page, to flash a larger card first, then when I noticed the files were so small copied them over to my fat32 2gb and have had no issues running it in the box, holding the toothpick in for about 40 seconds to make sure it triggered the recovery while I was running blind.
[Hardware Hacking General] n0ble:
I'll try and update later :)
[Hardware Hacking General] osm0sis:
I've uploaded the extracted [MENTION=4671084]BenniBenassi[/MENTION] recovery sdcard files to my BasketBuild for anyone who wants to download them separately for a 2gb sdcard, etc.

matricom-mx2_v1.1.5plus_(08-09-2013)-g18ref-bennibenassi_osmod.zip:

https://s.basketbuild.com/devs/osm0sis/roms

Unzip and copy to a fat32 formatted 2-4gb sdcard. It also contains my fixed recovery.img which backports the A/V out fixes to the old recovery so the toothpick method recovery can be displayed on older TVs.

I've also uploaded a CWM-on-stock flashable zip I created for the MX Box. Using the [MENTION=1584633]relol[/MENTION] compiled g18ref CWM 6.0.2.8 recovery and following the awesome work of [MENTION=4666971]Phil3759[/MENTION] (PhilZ), I've signed it so it can be kept on /cache or your external sdcard to be flashed on the MX Box stock recovery, it will then take over stock and run CWM for that boot.

cwm-non-touch-6.0.2.8-g18ref-relol_osmod-signed.zip:

http://v.ht/osmods

I've managed to fix internal /sdcard mounting in it so now flashing zips and backups/restores all work, but it's not compiled to ignore the internal /data/media so be aware backups will mistakenly include sdcard contents. Seemed like a reasonable compromise to me for getting flashing zips working. :)
[Hardware Hacking General] n0ble:
I tried Bennie original recovery files countless times, im connected via hdmi.

Tried different sd cards and left the device for an hour each time, unfortunately to no avail.

I'm going to find out my USB UART and connect to the serial connection on the CPU board to find out what's going on.

Thanks again
[Hardware Hacking General] ArnetteHD:
Very good, Thax:good::good::good:
[Hardware Hacking General] takota6:
I didn't have the MX but rather the MxQ, but had to applaud your information on your mods..good

Æaa..\../
[Hardware Hacking General] osm0sis:
Download SuperSU from the Play Store. Allow it to root your device. Download MTD-Tools as I linked above, put them and my flash_image script in /system/xbin/ and set them executable with this command: su -c "chmod 755 /system/xbin/*"

Then use my flash_image script to flash your recovery with my mtd4 recovery osmod. From there try the toothpick sdcard trick with the ROM osmod I posted.
[Hardware Hacking General] moiloon:
I'm sorry to be a pain and sincerely grateful for your help, but could you elaborate further as I'm fairly new to android tbh, and looking at the directions you posted is a little confusing to me,

ive got mtd-utils,i have installed supersu,

is your flash script , flash_image.txt? I remove the .txt then put in system/xbin

where do I input the command+how set executable? in terminal emulator?

ive got your recovery, but how do I use flash_script to flash mtd4 recovery osmod

ie where do I put recovery image? on sd ect ect? and what commands and where do I input them

sorry for being so android illiterate

I have copied flash script and Mtd utils to system/xbin ,should they be extracted from the zip at system/xbin, or left as is in the zip?

I'm stuck at this point really could do with a step by step to accomplish this as I'm a novice with android
[Hardware Hacking General] dolence:
Hi! I'm trying to update my V2.2 (previosly running XBMC/Linux) and I'm getting Signature Verification Failed. How to bypass it? Thanks in advance!
[Hardware Hacking General] osm0sis:
You don't flash the zips manually, they're sdcard contents for a toothpick flash.
[Hardware Hacking General] dolence:
Exactly, I'm using the toothpick method. It's normal behavior zip file appear as corrupt on PC?

I should have CWM Recovery installed to work?
[Hardware Hacking General] osm0sis:
Oh yes, sorry, I misunderstood what you were trying to do. One of those zips does appear broken on purpose, something to do with the way Matricom signs it I guess? And no, you want stock recovery of some kind, though the toothpick method technically temp flashes its own to get the job done as well.
[Hardware Hacking General] dolence:
I think something bad happened. The box isnt outputing anything through HDMI port.

Enviado de meu MI 2S usando Tapatalk
[Hardware Hacking General] osm0sis:
For the longest time I had no output through my A/V (until I backported the recovery ramdisk fixes myself ;)), but usually waiting it out it'll still work. Just make sure you wait the correct amount of time to blindly trigger the toothpick method, and then allow like 20 minutes for it to flash everything, then try and boot it.
[Hardware Hacking General] jetro1988:
G-Box Mx2 bricked

Hey guys, i use g-box mx2 for a little while now ( maybe 2 years ) and come across the soft brick a couple time in the past and with the forum i have been able to flash and revive my g-box everytime, but now i have no clue ...

my board is HD18 v2.22 .

i was running Openelec 4.95.2 unofficial on kodi 14.0 beta 2( release 14 nov 2014 ) for a while and i wanted to upgrade so i found openelec helix 14.1 here ( http://xdaforums.com/android/development/rom-openelec-amlogic-based-tv-boxes-t2832289 ) , BUT i was tired af and i downloaded the wrong one ! I downloaded the M8 2GB instead of MX2 , since the flash, i get the blue light, i can turn on and off the unit with the remote, i dont even have any signal on my HDMI, i cant get it to recovery mode, i tried mx2-boot-recovery.zip , blind flashing, i tried the bennibennasi sd ( the creating of the sd card was successful ), still nothing. i think i tried almost everything i could via sd card ( that was working before messin up with the system ). I was reading about UTAR, read about shorting NAND pin 7-8 while booting.. i dont know what to do now.

i am running windows 10

32gb midi sdcard with card reader adapter usb ( that was working before for other flash )

to be short, symptoms:

no hdmi

blue light goes on and off with the remote

cant access recovery mode with or without sd card in

now im confuse with all the instruction given, if someone can help me. Thank you very much.
[Hardware Hacking General] osm0sis:
I've never managed to brick it harder than the Benni emergency sdcard could recover, so if the toothpick method for getting into sdcard recovery doesn't work for you I don't really have any other firsthand ideas.

There was mention of building a cable to connect to the board directly, that could be your best bet. On the other hand, for time and effort these things only cost like $35 nowadays so.. might be more cost effective to just start fresh?
[Hardware Hacking General] jetro1988:
omg, i was doing the short on the NAND chip ( pin 7 and 8 )right now with the benni bennasi method.

first i formated the sd card with HDDRawCopy1.02Portable and MATRICOM_MX2_115_FULL_AUG_09_2013. deleted files on the sd card, copied two files ( from dextars-nandscrubber ), did the tooth pick method, ( no hdmi output yet ), then do again the benni benassi method on the sdcard, short the nand pin 7 and 8 for 10-15 secs and when i removed the screwdriver im using to short pin 7 and 8, the system booted on the green android loading , now its stuck at around 25% and still loading.. i wonder if its working or if its stuck. will follow soon.

---------- Post added at 11:32 PM ---------- Previous post was at 11:04 PM ----------

so after flashing with mx2-boot-recovery.zip , i have been able to install 1.1.5 and its running. i tought it was the end... thank you all for the forum
[Hardware Hacking General] Trinotet:
hello

can you please make a zip with your osmod2 to flash from sd card?

thanks
[Hardware Hacking General] osm0sis:
You're better off following my instructions so that you'll have the tools you need installed for if anything goes wrong.
[Hardware Hacking General] SurueN:
AV output not booting

I have moved back and forward on this thread, but didn't get an idea about my problem. Sorry if it was answered before.

I got an MX2 box looking for an AV output for one friend. It works fine with the HDMI output but didn't boot on AV. As soon as I connect the AV jack , the box reboot in recovery mode. It looks like it is trying to mount the SD card (using a blank SD the msg errors disappear) .

I guess it could be necessary to boot from the SD in the case of the AV output, but I was not able to find an image to do that.
[Hardware Hacking General] osm0sis:
Sounds like faulty hardware, but you could try my modded BenniBenassi Matricom stock sdcard toothpick recovery ROM, it's got all the AV fixes I could backport.
[Hardware Hacking General] SurueN:
Thanks for the quick answer!

The ROM you are talking about is the one from the post: https://xdaforums.com/showpost.php?p=63092584&postcount=191 ?

Can i boot from the SD without flashing the device?

My friend has no hardware/software skills, so he will not be able to manage any problem. If there no easy way to get the AV working I will get for him a HDMI-RCA converter.

Take a look to my box and the boot screen on AV output (Sorry no embedded images for newbies!) The same output you may see on HDMI if the RCA cable is connected, if not the device boot normally.

i.imgur.com/v7sCXaw.jpg

i.imgur.com/fUMrjDB.jpg

i.imgur.com/p3Twcoq.jpg
[Hardware Hacking General] osm0sis:
Ooh, no, that is a newer model. The one in this thread runs Jelly Bean where yours is Lollipop. I wouldn't recommend trying to flash anything from here on that device.
[Hardware Hacking General] SurueN:
OK. Thanks for the help. I will go for a HDMI-RCA converter. It will be safer.

:good::good::good:
[Hardware Hacking General] Trinotet:
sorry but i cant understant how to flash your mtd5-boot-g18ref-osmod2...
[Hardware Hacking General] osm0sis:
Instructions are here.. it's manual because you'll need that level of competence. If you do it wrong you'll brick your device and have to start over with the toothpick recovery.
[Hardware Hacking General] osm0sis:
Hmm bad news.. I think the internal sdcard in my MX Box fried last night. I was watching shows with no issue before bed then when I woke up and turned the TV back on the screen was frozen on "4:30 AM" and rebooting hung at the bootanimation. Toothpick method freezes about 1/3 of the way through. :eek:

Guess it had to happen sometime, this thing is ancient now! Time to splurge on the Nvidia Shield TV 2017 I think. ;) :D

I'll of course leave my files up, but I'll be unsubscribing from this thread. @ mention me if you need me. :good:
[Hardware Hacking General] SurueN:
Problem solved!

Just for the record.

The problem was the 3.5 jack was too long and was pressing the reset switch behind the AV/OUT plug.

I have discovered that just by luck changing the cable.

At least, now I know how to put the box in recovery mode!
[Hardware Hacking General] searle946:
Anlogic 8726 mx v1.1 image

I know this is a long shot, I have Amlogic 8726 mx v1.1 tv box that has become stuck on the android logo after I attempted to install an update for the MX2 thinking it was the same thing, how wrong I was. Does anyone still have the V1.1 image available, every link to the V1.1 image have all been taken down.

Thanks in advance:confused:
[Hardware Hacking General] searle946:
Aml 8726 MX v1.1 image

Bit of a long shot, does anyone have a aml 8726 MX v1.1 image they could share. No other image seems to work. Thanks
[Hardware Hacking General] pkarza:
I'd like an image for the gbox midnight mx2 as well... anyonehave it?
[Hardware Hacking General] polimorfus:
help me!!!

request flash image nand AMLogic aml8726-mx

I need to recover my Matricom G-Box Midnight MX2 flash nand image AMLogic aml8726-mx (to flash via USB OTG and to recover it, I have spent several months searching the internet and there is no image available, for that reason I communicate with you .

PCB HD18-V2.22

2013.10.08

Serial # 405227009-3520

Mac Adress: C4: 4E: AC: 07: 0D: 86
[Hardware Hacking General] er5maulana:
nice tryin :D

where i can get the mx2-boot-recovery.zip ? many link was broken
[Hardware Hacking General] jetro1988:
I can upload MATRICOM_MX2_115_FULL_AUG_09_2013.rar and MX2-full-1.1.5-firmware-RC.zip if you ever need it. Here's the file i used to recover my gbox mx2.

ht tps://nofile.io/f/o4fR0owFGgy/mx2-boot-recovery.zip

ht tps://nofile.io/f/CD4XsmKJM8E/dextars-nandscrubber.zip

( links are good, just remove the space in the https. xda website prevent me to upload external links: "To prevent spam on the XDA forums, ALL new users prevented from posting outside links in their messages. After approximately 10 posts, you will be able to post outside links. Thank you for understanding!" )

You should read about benni bennassi method for instructions on recovery.

If you want kodi only, i suggest you to use Libreelec instead ( LibreELEC-Amlogic_MX2.arm-8.0.2 ) ( i can upload if you dont find )
[Hardware Hacking General] jineshpatel30:
[MENTION=4544860]osm0sis[/MENTION] Can you make Magisk Module for this ?

It'll be very helpful :)
[Hardware Hacking General] osm0sis:
It's an init.d/su.d/post-fs-data.d script, it doesn't need a module. Just put it in Magisk's post-fs-data.d directory.
[Hardware Hacking General] jineshpatel30:
I already tried the same but It's boot-looping :(

I'm on LOS 14.1 Nexus 5 (hammerhead)
[Hardware Hacking General] elgreko:
Hey Friend!!!!

Can you upload the files again, links are dead.
[Hardware Hacking General] Mondrimo:
Hi, Appreciate uploading the files please.

Thanks
[Hardware Hacking General] jetro1988:
Hi, good luck, this device is +- 7yrs old and i would recommend to upgrade.

Link above is a folder on my gmail account with all the gbox mx2 files i found :

ht tps://drive.google.com/drive/folders/157nkXWlHn0jDx3LLlHlTbH6fClQ7SDmP?usp=sharing

remove the space between ht tps:

MX2-full-1.1.5-firmware-RC.zip

mx2-boot-recovery.zip

I lost all other files.

edit:

added dextars-nandscrubber.zip
[Hardware Hacking General] Mondrimo:
Thank you for the efforts.. but they didn't work.. and it has still black screen. :(
[Hardware Hacking General] jetro1988:
I wrote the way I did to make it work back in the days. Look at:

https://xdaforums.com/showpost.php?p=66622391&postcount=202

Look the Benny bennasy method or something like that , then read about shorting the nand pin 7 and 8 .. but seriously, don't waste too much time on that and get a new device ( Amazon fire stick 4k for example ) or an official Android TV device, not a TV box with Android on it .
[Hardware Hacking General] Mondrimo:
Yes I agree. I will be purchasing a newer one. This thing is i have the MX2 since many years and was working ok. I tried to upgrade it but it got bricked black screen. Just a question what do you mean by shorting the nand pin7 and 8?
[Hardware Hacking General] BenniBenassi:
I have found kernel source on the net. Its for Amlogic

3.0.50

....... which is the same version as on the MX box.

https://github.com/SIP-Online/Amlogic-Kernel-Common-3.0.50

In case it is a kernel issue, this could be the solution.

Do you think this would help??
[Hardware Hacking General] osm0sis:
I don't know how to compile yet myself but it could help definitely.

I'll look into the nandenv stuff over the next couple days I'm off work. Thanks as always for looking into this stuff like you do. :)
[Hardware Hacking General] osm0sis:
Huh.. I rebooted today with 696 as my min and now the offset to the hispeed_freq seems changed to 480 as it keeps going to 1176, so I guess it can be a moving target as well.

Thinking about it at 432, I guess that makes sense counting from 336.. 768.. 1200. Basically it's got 2 steps above its min by default, maybe one more halfway between the hispeed and the max. Not sure where I want to set my min now, maybe halfway between their default first steps at 552. If we can increase the max that'll be especially nice mathematically.
[Hardware Hacking General] moeez butt:
can any one tell how to repair HTC One X LCD backlight problem what tolls are required and where can i find these tools
[Hardware Hacking General] BenniBenassi:
I set both min and max to 1512000 and the box was on 1200MHz for 18 hours without any overheating or hickups or restarts.... and it seems more responsive... :cool:
[Hardware Hacking General] osm0sis:
Yeah it definitely is more responsive. :)

I couldn't find anything in cat /dev/nand_env related to clk, in fact it started at b for me with batfull=

Trying to dump the mtd partitions now, did you use nanddump/nandwrite from here:

http://xdaforums.com/showthread.php?t=1247908

Or are there newer versions of the binary I should be using that you could direct me to? :good:

My system only came with nandread in /system/bin/.