How to Create a Bootable Recovery SD Card for Amlogic TV Boxes

I reviewed Rikomagic MK22 TV box about two weeks ago, and with the firmware I had, online firmware update was not enabled, and the company only released .IMG firmware for Amlogic USB Burning Tool, a windows-only tool that’s not well designed, and requires some procedure that vary slightly from boxes to boxes which in some cases forces to buy a male to male USB cable.

I’ve now started reviewing R-Box Pro TV box also based on Amlogic S912 processor, online firmware update is not working either, and again I only managed to find .IMG firmware for the box on GeekBuying. However, I’ve been informed that “USB Burning Tool” firmware can now be flashed through a micro SD card, or USB flash drive with all recent Amlogic TV boxes, so I’ve tried this method instead of R-Box Pro, and decided to report my experience in this post following some instructions on Freaktab made by user Calc. I’ll show instructions in Linux (which could be further streamlined), and then Windows.

Linux Method

After downloading and extracting the rar’ed firmware file (twice), I ended up with a single img firmware files (aml_s912_q6330-R-BOX-PRO-3gddr-mac-20161015.img).

First we’ll need to have a tool to extract some files from the firmware. Create aml-upgrade-package-extract.c with the code below which I found on Freaktab too and slightly modified it to parse the firmware filename:


Now compile the tool with gcc:


and run the thing on the firmware file:


It will extract a bunch of files:


You’ll just need aml_sdc_burn.ini and aml_sdc_burn.UBOOT, plus the IMG file itself to create a bootable mass storage device.

Now find the device for your micro SD card (formatted with FAT32) with lsblk:


In my case, it’s /dev/sdd, but I’ll use /dev/sdX in the instructions below, just change the command with yours.


and finally, re-mount the SD card/flash drive, copy the firmware file and aml_sdc_burn.ini to the root of the device, and rename the firmware to aml_upgrade_package.img to match the string in aml_sdc_burn.ini:


Now make sure no other USB devices or SD cards are inserted in the TV box, and insert your bootable (micro) SD card or USB flash drive into the TV box. If your TV box is fully bricked, you have nothing to do, and the update should start straight away, but if it is partially bricked or just working fine, you still need to press the recovery button, apply power, and release the button in order to enter recovery mode. The upgrade should then start automatically as shown below.

micro-sd-card-firmware-update

Patiently wait for the update to complete and you should be all good. Please note that I first tried with a USB flash drive, and the method did not work. Once the update is complete, you’ll see the “Android success” logo.

amlogic-firmware-update-successAt this point, remove the micro SD card, and power cycle the board to complete the final steps of the update, and within one or two minutes you should get the Android launcher. If instead, the firmware ends with “Android failure” logo showing a red cross, verify your firmware MD5 (e.g. with md5sum in Linux) to make sure it’s not corrupted. If it is, re-download the file and/or re-copy the file to the micro SD card.

Windows Method: Burn Card Maker

If you are a Windows user it’s much easier as you just need to use Burn_Card_Marker tool (bootcardmaker.exe), which you can download here or there. The documentation shows the interface as shown below.

burn_card-maker-english

But after starting the program in Windows 7, and changing the language with the top menu, second option to English, it stayed in Chinese language and looked like the screenshot below instead.

burn_card_maker_v2-0-2

[Update: After changing the language to English, select the third option in the top menu to apply the change…amlogic-card-maker-menu

…restart the app, and it will be in English.]

It’s not really a big issue, but you can still select your SD card device (F: drive in my case), load the file, and press “Make” button to start creating a bootable recovery (micro) SD card.
amlogic-create-bootable-card

You’ll get a “Success!” pop-up window and the end, and the content of the SD card will show the firmware and the two aml_sdc_burn files.

burn-card-maker-files

Now you can insert the micro SD card in the TV box, enter the recovery menu with the pinhole or other method for your TV box, and the firmware update will start automatically.

Good Luck!

Share this:

Support CNX Software! Donate via cryptocurrencies, become a Patron on Patreon, or purchase goods on Amazon or Aliexpress

ROCK Pi 4C Plus
Subscribe
Notify of
guest
The comment form collects your name, email and content to allow us keep track of the comments placed on the website. Please read and accept our website Terms and Privacy Policy to post a comment.
76 Comments
oldest
newest
GanjaBear
GanjaBear
7 years ago

On a 2GB card, the partition start had to be moved or UBOOT didn’t fit. (mount failure after dd’ing)

I wonder if getting Update&Recovery to reboot via a random .zip file on the card would work?

GanjaBear
GanjaBear
7 years ago

Copying aml_sdc_burn.UBOOT is probably redundant, no?

> cp aml_sdc_burn.ini aml_sdc_burn.UBOOT [device-mount-point]

Lawrence E. Boothby
3 years ago

Not redundant. These files are necessary for it to boot – the box is not smart enough to extract them from the firmware image so if they are missing on the microSD, it will treat this as a data microSD, not a bootable microSD. I have also found that having both a bootable micoSD in its slot and another bootable micoSD in a USB reader attached to one of the USB ports will cause the box to boot neither and instead go to the internal maintenance code that provides a CLI terminal (if that is not also bricked).

FGBonn
FGBonn
7 years ago

Hi, what if i dont have the IMG file, but have an OTA zip?? is there a way i can flash?

AARON
AARON
7 years ago

I followed the steps to make a bootable SD card, and I can confirm that it in fact does NOT start right away. All it does is go to the recovery menu.

balbes150
balbes150
7 years ago

AARON :
I followed the steps to make a bootable SD card, and I can confirm that it in fact does NOT start right away. All it does is go to the recovery menu.

In Linux, you can try to create boot card of these files for this manual. You need to follow two boot loader entries.

dd if=u-boot.bin.sd.bin of=/dev/mmcblk0 conv=fsync bs=1 count=442

dd if=u-boot.bin.sd.bin of=/dev/mmcblk0 conv=fsync bs=512 skip=1 seek=1

https://yadi.sk/d/U41GQWcJsapLV

Vin
Vin
7 years ago

I have also the rbox pro but the 2g variant downloaded the latest firmware.unzip the file and got the .img file downloaded burn card maker tool and make a bootable sd card. When i used it in the sd card and reset using the toothpick method the robot logo and x appear and does nothing. When i create it to a 4gig usb disk it just went to the stock recovery. Pls help me

Vin
Vin
7 years ago


Yes all option are tick in the burn card maker. R-BOX Pro 2+16GB PC Upgrade Firmware–>this is what i downloaded from geekbuying website. For the sd card i used 8 gig and for the usb disk its 4db. So im wondering what am i missing

davidMetal
davidMetal
7 years ago

I too cannot make the SD Upgrade work… I spent 4 hours last night using the tools and step described above. I insert the 4gb SD card and press the reset button – I get a green android with red cross only. If I remove the SD and go to recovery, I navigate to the SD card but the .IMG file is not visible at all… I am assuming because it is looking for a .ZIP file instead… Life would be ALOT EASIER if they simply provided the .ZIP version instead (right)??? There would be no need for SD burn… Read more »

davidMetal
davidMetal
7 years ago


Thank you @cnxfsoft.
I appreciate your response.
I will review the downloaded file again using MD5 to confirm it is not corrupted.

I was also thinking – the file name of the latest R-Box Pro 3g on the geekbuying site includes “(” “)” parenthesis…

I have a theory if I remove the non alpha characters before I use the burn tool I may have better luck? Unfortunately, I will not have a chance to try it again for another 2 days. 🙁

I will keep you posted if this works.

davidMetal
davidMetal
7 years ago


Thank you
I figured out why the SDCard process did not work!
The filename from Geekbuying had named the firmware file with special characters… I removed “(” and “)” and “+” and the upgrade by sd card worked.

I still have NO WIFI but this is seperate to the topic on this page. I am so furious the wifi does not work! >:(

Uchiha Fabio
Uchiha Fabio
4 years ago

THANK YOU!
I was almost blowind my brain to figure out the problem…… now I know the problem!
just follow this guy advice!

Phatboyj
Phatboyj
7 years ago


Will this method work to flash a Mecool BB2-Pro s912 Box with 3Gb DDR4 16GB Rom

or is there a specific method for said box?

preferably for Win10

Thanks in advance,
Phatboyj

.

Poetatoman
Poetatoman
7 years ago

Hello, I have a question about my boxes for anyone that might be able to help. I have purchase 4 separate Mini M8S II S905X boxes that have identical pre-installed setups. They came with Kodi 16 installed and I updated ONE of them to Kodi 17. After this ALL of the installed content associated with Kodi was gone. Being a newbie to these type boxes but a veteran of computer world, I spent weeks of “finding” the required installation procedures and files out of all the “crap” all over the internet, then installing all the accessories, a new skin, figuring… Read more »

Theguyuk
Theguyuk
7 years ago

@Poetatoman
If you go on Google Play, you can install the Complete Kodi setup Wizard by The app guru

It can install or remove builds with a button click. I recommend it to you 🙂

Poetatoman
Poetatoman
7 years ago

Yes, However I lose ALL my custom skin settings, favorites list, optional programs, ect., PLUS the last 4 weeks of work just to start all over again, no thanks… I’m looking to copy my entire ROM to SD and then copy that to the 3 other identical machines. So far I’ve tried: 1. ROM Manager, (which was GREAT at fixing permissions to everything and I’m pretty sure it accomplished rooting. It has the option of Installing ROM from SD card, but NOT to save current ROM to SD card.) I also don’t really understand how to use it which may… Read more »

Poetatoman
Poetatoman
7 years ago

Thanks for this input, but I am not trying to ONLY back-up just the Kodi program. I purchased 4 identical Amlogic S905X boxes. After 4 weeks of customizing 1 of them, I now want to “copy” the ENTIRE BOXE’S ROM from this 1 machine to the other 3 directly, with USB, OR with SD. Kodi PLUS ALL the other base programs other than Kodi that come on before Kodi. I see many ways of downloading other peoples AND update .img files for this machine. I am trying to find out if there is any program or hardware which will copy… Read more »

Umar Amin
Umar Amin
6 years ago

Hi
I just reinstalled the software of my Android tv box i.e CSA93 32 GB ROM 3 GB ram. But after reinstalling I lost my connection to WiFi.

Neither my wifi is connects nor its highlighting.

So pls guide me which firmware I should install.

Regards
Umar amin

Meakai
Meakai
6 years ago

Not so sure about TWRP Manager, but regular TWRP works for me.
Boot into recovery, select storage and backup the data partition only, or the boot,system and data partitions to ensure that all boxes are identical. Boot into recovery, select storage and restore on the other three boxes.

Just search for TWRP+S905X

Ibraheem
Ibraheem
6 years ago

Hi, I have H96 pro plus, and tried the bootable card method, and on the boot, it only showed H96 logo and then no more display, and no further activity, plus my box doesn’t load/boot, only blue light appears and that’s it, any suggestion how to recover from this?

lev2k
lev2k
6 years ago

Does somebody have a download link for a “Wetek Core” full .img file?
Not just the ***** OTA file…

Mark
Mark
6 years ago

Just have to say how pleased I am to see some source code. I received a H96 Pro+ a couple of days ago and decided to upgrade the firmware shortly after getting the box up and running. In exploring the procedure for performing the upgrade, I was shocked at how many folk are willing to download an executable from some file-sharing site and run it on their workstation. That’s putting a lot of trust in several parties. My workstation is just too important to me for that kind of recklessness. But your snippet of C source is perfectly readable. I… Read more »

Ted
Ted
6 years ago

Hello
Have anyone here been able to update the firmware on a Rikomagic media player using the SD (microSD) card method ? thanks

redsparow
redsparow
6 years ago

Hello,

I do it for my bricked MINI M8S PRO 2G/32G s912 but burning failed
I change erase_flash on aml_sdc_burn.ini file to “1” but after few houres a screen is blocked with message “upgrading…”

I also tried with USB BURNING TOOL but i have this error after few seconds:

[23:22:06 454][HUB3-2][Inf]————-ERASE FLASH———–
[23:22:06 454][HUB3-2][Inf]–disk_initial 1
[23:22:06 454][HUB3-2][Inf]–Send command success
[23:22:07 641][HUB3-2][Err]–failed:[23:22:07 641][HUB3-2][Err]–Check command return failed

Any idea?

Regards

[23:22:07 673][HUB3-2][Err]–[0x30201004]UBOOT/Disk initialize/Send command/Error result

Sandor
Sandor
6 years ago

Hi, First of all; thank you for sharing this information! I tried creating a bootable sdcard (8GB microsd) using the instructions below. But for some reason the card becomes unreadable/unmountable with these parameters. sudo umount /dev/sdd1 sudo dd if=aml_sdc_burn.UBOOT of=/dev/sdd bs=1 count=442 sudo dd if=aml_sdc_burn.UBOOT of=/dev/sdd seek=1 skip=1 bs=512 sync Not sure what I am doing wrong. I checked the dd manual and information on this website: http://linux-sunxi.org/Bootable_SD_card but that did not make clear for me how I should change the command to work with my particular card. Could someone please guide me in the right direction? I have no… Read more »

Robert
Robert
6 years ago

@Poetatoman
you could use ares backup to make a full system and kodi backup to usb… install ares on the other boxes and use the restore function to make em all duplicates

GanjaBear
GanjaBear
6 years ago

@Sandor

Have you seen the very first comment in this thread? It’s probably a safe bet your problem is the same and it’s necessary to move the start of the 1st partition to make more room for uboot.

As for the latter part of the comment, I was simply musing on how to get this method to work with no reset switch present. I guess it’s not possible.

sketchman
sketchman
6 years ago

Doesn’t work for me with a USB thumb drive. First time I flashed with an SD card. Right now I don’t have one. It just boots into TWRP. Won’t do anything else.

Stefan
Stefan
6 years ago

Hi and sorry for my english.
Android or another Linux distro can run directly from SDCARD ?
I have a S802H box with bad NAND and can’t replace because pcb trace (pad) are broken.

I tried with image for ODROID C1 (S905) but is not same CPU.
Many thanks!

EEEE I3000000032940xf100110003877500EEEE I400000004294_M8_BL1_10221D113B323EEEE I3000000032940xbbbb000026A22525EEEE I3000000032940xf100110003877500EEEE I400000004294_M8_BL1_10221D113B323EEEE I6000000062940 stage is skipped63936475EEEE I3000000032940xbbbb000126B22525
———————————————————————–
* Welcome to Hardkernel’s ODROID-C… (Built at 19:33:00 Dec 8 2014) *
———————————————————————–
CPU : AMLogic S805
MEM : 1024MB (DDR3@792MHz)

Stefan
Stefan
6 years ago


Many thanks for response!
I’ll try but I don’t know if I can do something.

Hugh
Hugh
6 years ago

@Sandor
Perhaps you are having trouble because you are following instructions from linux-sunxi. They are for Allwinner Technology firmware. Perhaps AMLogic firmware expects a different format.

Hugh
Hugh
6 years ago


Thanks for this article. I’m trying to figure out how to update an S912 box.

In you C code, you try to report strerror when the fopen fails. Unfortunately you use errno after a printf and that printf might have disturbed errno. The simplest fix is to combine the two printfs into one so that errno is fetched before the printf is called.

Just to be bulletproof, I’d put “errno = 0;” immediately before the fopen.

Ervin
Ervin
6 years ago

@lev2k

Did you find IMG for Wetek Core? I need the same (hard brick).

aljag
aljag
5 years ago

work for h96 pro plus
but for h96 max plus notwork and when push make button error
L100aml_sdc_burn.uboot and bootloader.partion all not in package

Vasjka
Vasjka
5 years ago

Can’t conpile # gcc aml-upgrade-package-extract.c -o aml-upgrade-package-extract aml-upgrade-package-extract.c: In function ‘main’: aml-upgrade-package-extract.c:24:1: error: stray ‘\302’ in program �� if (argc <= 1) { ^ aml-upgrade-package-extract.c:24:2: error: stray ‘\240’ in program �� if (argc <= 1) { ^ aml-upgrade-package-extract.c:25:1: error: stray ‘\302’ in program ��   printf("Usage: %s [firmware-file-name]\n", argv[0]); ^ aml-upgrade-package-extract.c:25:2: error: stray ‘\240’ in program ��   printf("Usage: %s [firmware-file-name]\n", argv[0]); ^ aml-upgrade-package-extract.c:25:3: error: stray ‘\302’ in program  ��  printf("Usage: %s [firmware-file-name]\n", argv[0]); ^ aml-upgrade-package-extract.c:25:4: error: stray ‘\240’ in program  ��  printf("Usage: %s [firmware-file-name]\n", argv[0]); ^ aml-upgrade-package-extract.c:25:5: error: stray ‘\302’ in program   �� printf("Usage: %s [firmware-file-name]\n", argv[0]); ^ aml-upgrade-package-extract.c:25:6: error: stray… Read more »

Vasjka
Vasjka
5 years ago

I use Archlinux
# uname -a
Linux MY-PC 4.19.9-arch1-1-ARCH #1 SMP PREEMPT Fri Dec 14 00:58:26 UTC 2018 x86_64 GNU/Linux
Maybe you need some libraries

Vasjka
Vasjka
5 years ago

Yes, exactly, I just solved it ^^
Thank you

Alex
Alex
5 years ago

I have created a script to make life easier for some users. Feel free and complete or change it to your liking.
https://gitlab.com/satriani-vai/tv-box_card_creator/blob/master/TV-Box_card_creator
And please report the bugs if you found any 😉

Vlad
Vlad
3 years ago

Awesome, vielen Dank!!!!

Jony
Jony
3 years ago

I tried run this by sudo gcc -o TV-Box_card_creator.c
and i get gcc: fatal error: no input files

can you say how use this 🙂

Hugh
Hugh
3 years ago

You asked for the output (compiled and linked object code) to be written to TV-Box_card_creator.c
A very bad idea.

Nicolas
Nicolas
5 years ago

Thanks a lot for the instructions, was really helpful. One note, on my device I had to keep the reset button held during the entire process otherwise it would freeze (no idea why). If you have some soldering skill, I soldered jumper cables to gnd, tx, rx pads, having a serial terminal to monitor this process is really handy.

Coronel
Coronel
4 years ago

Boa tarde amigo. Serve tambem para Rockchip?

giancarlo
giancarlo
4 years ago

I thought I had solved my problem. I have a Scishion V88 PRO that has no reset button. Perhaps for my mistake in using USB BURNING ROM, the box is no longer recognized by the Windows USB port. If the food stops with the Amlogic-s905x screen and does not go further. I was hoping that with your solution you would start by reinstalling the firmware. I did the microsd creation procedure with Windows, but nothing happens. Maybe you should boot from the microsd card, but not having the reset button I don’t know how to do it. If you can… Read more »

Jean BRUDER
Jean BRUDER
4 years ago

Good evening.

Thank you for the above howto. I did everything as described and have now a SDCard with the files (made using the Linux method, as my laptop runs only Linux …).

When booting the TVBox either with or without the recovery button pressed, I can only get the following text displayed using the UART port : GXL:BL1:9ac50e:a1974b;FEAT:ADFC318C;POC:3;RCY:0;EMMC:0;READ:0;CHK:AA;SD:0;READ:0;CHK:AA;USB:8;LOOP:1;EMMC:0;READ:0;CHK:AA;SD:0;READ:0;CHK:AA;USB:8;LOOP:2;EMMC:0;READ:0;CHK:AA;SD:0;READ:0;CHK:AA;USB:8;LOOP:3;EMMC:0;READ:0;CHK:AA;SD:0;READ:0;CHK:AA;USB:8;

The TVBox does nothing else than increasing the value of the LOOP, but does not enter any recovery stage …

Could you please help ? Many thanks in advance !
Jean

giancarlo
giancarlo
4 years ago

As I wrote the box has no reset button, not even putting a toothpick in the AV input. He starts with the Amlogic badge and gets stuck there. Sorry if I don’t understand your questions well (I’m Italian and I have to use google translate to communicate in English). I don’t understand your question: “The TVBox does nothing else than increasing the value of the LOOP”, but it still doesn’t go into recovery. Thanks for the help you try to give me PS: I thought that if the amlogic box fails to connect to the PC via USB, the automatic… Read more »

Vlad
Vlad
3 years ago

You saved my X96Max box with this post, which I was stupid enough to brick into hang in boot logo!!! I used your Linux instructions and flashed stock firmware “X96Max_V311_4G_190302.img” onto it and it worked from start to finish!! We Linux users don’t have the luxury of Windows users, but I like Linux so much I don’t want to return to whole Windows register/update pain thing. Thank you so much!!!!!!!

Lawrence E. Boothby
3 years ago

Very good C program for extracting aml_sdc_burn.ini and aml_sdc_burn.UBOOT from Amlogic firmware for recovery! Your download link for the Windows method needs to be updated as that link is broken.

im_ne
im_ne
3 years ago

First of all, thanks a lot for such detailed instructions!
I am trying to flash IMG firmware to my x96max plus2 box via Linux method.
The box is not bricked.
At the moment of power on with the reset button pressed, the android logo with “Upgrading” appears just for a second, then the box reboots and the old installed firmware is loaded as normal. It looks like the flashing process breaks off at the very beginning. Tried 16 and 2 GB cards. The result is the same.
If there is no card, the recovery is loaded.
Where to dig?

im_ne
im_ne
3 years ago

Thank you so much for such a quick response! Ok, I’ll try to find a Windows machine first…

panda
panda
3 years ago

Any chance you’ll eventually work on a reverse script that joins the splits into a .img file? That would make creating ROMs with tweaks so easy!

Jony
Jony
3 years ago

Hello

I have silly question what should be insted [device-mount point] i tried /dev/sdb but i get no such file or directory

Jony
Jony
3 years ago

Yes i checked with lsblk and my sd card is on sdb/sdb1 🙂

Hugh
Hugh
3 years ago

Two years ago, I hacked on aml-pugrade-package-extract.c I made it a bit more portable and report more errors. /*  * Extract components from AMLogic firmware .img file  *  * From https://www.cnx-software.com/2016/11/19/how-to-create-a-bootable-recovery-sd-card-for-amlogic-tv-boxes/  */ #define _FILE_OFFSET_BITS 64    /* handle files whose size does not fit in long */ #include <errno.h> #include <inttypes.h> #include <stdio.h> #include <stdlib.h> #include <stdbool.h> #include <string.h> #include <arpa/inet.h> static uint32_t convert(uint8_t *test, uint64_t loc) {   return ntohl(     ((uint32_t)test[loc+0] << 24) |     ((uint32_t)test[loc+1] << 16) |     ((uint32_t)test[loc+2] << 8) |     ((uint32_t)test[loc+3] << 0)); } const char *progname; static void demand(bool good, const char *message)… Read more »

PanB
PanB
2 years ago

This shit even detects youre drive and format it, shows as sdcard1 =a secount sdcard2 =a it killed my D: drive

ed is not ed
ed is not ed
2 years ago

macos version ?

VroomVroom
VroomVroom
1 year ago

Hi ! First thank you for this tutorial, I arrive maybe late but I’m stuck after the dd’s / sync dd if=aml_sdc_burn.UBOOT of=/dev/sdg bs=1 count=442 442+0 records in 442+0 records out 442 bytes copied, 0,00251911 s, 175 kB/s dd if=aml_sdc_burn.UBOOT of=/dev/sdg seek=1 skip=1 bs=512 1600+0 records in 1600+0 records out 819200 bytes (819 kB, 800 KiB) copied, 0,148501 s, 5,5 MB/s sync 1234567891011 dd if=aml_sdc_burn.UBOOT of=/dev/sdg bs=1 count=442442+0 records in442+0 records out442 bytes copied, 0,00251911 s, 175 kB/s dd if=aml_sdc_burn.UBOOT of=/dev/sdg seek=1 skip=1 bs=5121600+0 records in1600+0 records out819200 bytes (819 kB, 800 KiB) copied, 0,148501 s, 5,5 MB/s sync When I try… Read more »

jhonatan meneses
jhonatan meneses
1 year ago

l 1005 aml_sdc.UBOOT,and bootleader.PARTITION all not pkg 

Khadas VIM4 SBC