Skyworth hp4024 (hp40a)

[Deleted member 11959327]

To be precise, the setup wizard on the startup screen cannot log in to a Google account.

return
There is a problem with your verified device

Is this using the original firmware, or the xiaomi firmware?

If it is the original, is it the same build that is contained in your previously posted emmc dump?

And is it entirely in a virgin state, or have any modifications have been made?

Is there any option to skip google account login during setup? The km2 has the option to skip.

 

[宫本五藏]

這個是用原裝固件還是小米固件？

如果是原始版本，它是否與您之前發布的 emmc 轉儲中包含的版本相同？

它是完全處於原始狀態，還是進行了任何修改？

是否有任何選項可以在設置過程中跳過谷歌帳戶登錄？km2 有跳過的選項。

It is the original firmware, without any skip option, this device is different from the previous s905X2-J device, uboot shell is not available.

 

[Deleted member 11959327]

It is the original firmware, without any skip option, this device is different from the previous s905X2-J device, uboot shell is not available.

If the u-boot shell is not available, I guess that means that you're not able to dump the emmc using ddbr?

In that case, you can dump the individual partitions by shorting into burn mode, as described here.

Once the firmware on the problematic device is examined for compatibility, it may be possible to flash firmware (just the individual partitions) to solve this problem, from your other device. But not if the bootloader is encrypted.

First step is to dump the individual partitions using burn mode. Refer to the uart log to get the size of each partition. Or, if you already have a dump from the problematic device, post it.

 

[rompo6]

If the u-boot shell is not available, I guess that means that you're not able to dump the emmc using ddbr?

In that case, you can dump the individual partitions by shorting into burn mode, as described here.

Once the firmware on the problematic device is examined for compatibility, it may be possible to flash firmware (just the individual partitions) to solve this problem, from your other device. But not if the bootloader is encrypted.

First step is to dump the individual partitions using burn mode. Refer to the uart log to get the size of each partition. Or, if you already have a dump from the problematic device, post it.

In 'burn method' how to boot test/dry run bootloader from usb?

 

[mazjed]

any help to solve

boot loop



G12A:BL:0253b8:61aa2d;FEAT:F2F939B2:32060;POC:F;RCY:0;EMMC:800;NAND
:81;SD?:20000;USB:8;LOOP:1;EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:2;
EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:3;EMMC:800;NAND:81;SD?:20000;
USB:8;LOOP:4;EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:5;EMMC:800;NAND:
81;SD?:20000;USB:8;????????????G12A:BL:0253b8:61aa2d;FEAT:F2F939B2:
32060;POC:F;RCY:0;EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:1;EMMC:800;
NAND:81;SD?:20000;USB:8;LOOP:2;EMMC:800;NAND:81;SD?:20000;USB:8;LOO
P:3;EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:4;EMMC:800;NAND:81;SD?:20
000;USB:8

 

[rompo6]

any help to solve

boot loop



G12A:BL:0253b8:61aa2d;FEAT:F2F939B2:32060;POC:F;RCY:0;EMMC:800;NAND
:81;SD?:20000;USB:8;LOOP:1;EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:2;
EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:3;EMMC:800;NAND:81;SD?:20000;
USB:8;LOOP:4;EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:5;EMMC:800;NAND:
81;SD?:20000;USB:8;????????????G12A:BL:0253b8:61aa2d;FEAT:F2F939B2:
32060;POC:F;RCY:0;EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:1;EMMC:800;
NAND:81;SD?:20000;USB:8;LOOP:2;EMMC:800;NAND:81;SD?:20000;USB:8;LOO
P:3;EMMC:800;NAND:81;SD?:20000;USB:8;LOOP:4;EMMC:800;NAND:81;SD?:20
000;USB:8

check if you can write armbian image to usb(try all ports) & boot

GitHub - ophub/amlogic-s9xxx-armbian: Armbian for Amlogic and Rockchip. Support a311d, s922x, s905x3, s905x2, s912, s905d, s905x, s905w, s905, rk3588, rk3568, rk3399, rk3328, etc. including install to EMMC and update related functions.

Armbian for Amlogic and Rockchip. Support a311d, s922x, s905x3, s905x2, s912, s905d, s905x, s905w, s905, rk3588, rk3568, rk3399, rk3328, etc. including install to EMMC and update related functions...

github.com

https://github.com/ophub/amlogic-s9xxx-armbian/releases/download/Armbian_Aml_jammy_11.21.1016/Armbian_22.11.0_Aml_s905x2_jammy_5.10.155_server_2022.11.21.img.gz

https://github.com/ophub/amlogic-s9xxx-armbian/releases/download/Armbian_Aml_jammy_11.21.1016/Armbian_22.11.0_Aml_s905x2_jammy_5.15.79_server_2022.11.21.img.gz

 

[Amer7]

For recovery mode put together this two pins

Hi my friend please help me with my device mecool km2 plus stuck on blue light and don't won't open please help me to reset it

 

[markiemkhach]

I managed to boot to the recovery mode Is there anything can be done from recovery

Can you tell us the way to boot into recovery mode?

 

[irinho]

using sd card

I Havee been crazy about this thing So i Boght another model Of the Device to Achieve my Right

View attachment 5677979

TOGETHER WE WILL MANAGE TO MAKE IT HAPPEN AND CREATE A GREAT ROM FOR EVERY ON

How did you manage to start KM2 in recovery mode using SD card?

 

[mazjed]

Can you tell us the way to boot into recovery mode?

I have been booting to recovery using many ways
1- rooted termux shell.
2- ther is one application in the play markit but i forgotten the name.
3- using khadas tools .

 

[mazjed]

How did you manage to start KM2 in recovery mode using SD card

I Don't have km2 but i think it's the same thing

 

[mazjed]

Any how my Device still breckd i can't help any more . i will try the hdmi port , but i don't have time

 

[irinho]

I Don't have km2 but i think it's the same thing

Yes, but could you tell me what procedure you used to access Recovery Mode using the memory card?

 

[mazjed]

Yes, but could you tell me what procedure you used to access Recovery Mode using the memory card?

thanks to Vasily Shevchuk

 

[mirosslav]

U-Boot

g12a_u212_v1#printenv

EnableSelinux=enforcing
Irq_check_en=0
active_slot=normal
androidboot.dtbo_idx=0
avb2=1
baudrate=115200
bcb_cmd=get_avb_mode;get_valid_slot;
boot_part=boot
.........................

g12a_u212_v1#reboot recovery

let's go

 

[mazjed]

U-Boot

g12a_u212_v1#printenv

EnableSelinux=enforcing
Irq_check_en=0
active_slot=normal
androidboot.dtbo_idx=0
avb2=1
baudrate=115200
bcb_cmd=get_avb_mode;get_valid_slot;
boot_part=boot
.........................

g12a_u212_v1#reboot recovery

View attachment 5827301

let's go

Hi would you please explain your post .

 

[kalehrl]

U-Boot

g12a_u212_v1#printenv

EnableSelinux=enforcing
Irq_check_en=0
active_slot=normal
androidboot.dtbo_idx=0
avb2=1
baudrate=115200
bcb_cmd=get_avb_mode;get_valid_slot;
boot_part=boot
.........................

g12a_u212_v1#reboot recovery

View attachment 5827301

let's go

As your log shows, the box has Android verified boot active so if you change just 1 byte on a partition, it won't boot. I really don't see how it can be circumvented

 

[BigEmpty]

U-Boot

g12a_u212_v1#printenv

g12a_u212_v1#reboot recovery

Hi would you please explain your post .

Yes please explain.

 

[mazjed]

Yes please explain.

I think he is explaining how to reboot to recovery (one off the methods )

Any body have an idea about creating rom img from the backed up super.img

So i can come back to the game *.*

 

[dankatapich]

Hi i have the hph07 the one with all the ports but its running android 8 with full access to the settings, and developer mode free to enable, it can be sellected custom launcher (but needs to press a custom programed button on the remote right after it start the android os, becuse im forced to keep the main iptv app and dont touch it in order to dont avoid the warranty from the cable provider) i have a little strugle bc i want to install android tv or something that works with chromecast bc in the site manufactuare has a lable chromecast enabled but mine dosent have it for the fact that it is android not android tv, you can enable adb on it, all that without even openig it (it has a skyworth testing software and other left over from the testing proces) in the developer mode has some processes that some of them idk for what they are it can kill the processes and still works, one of them is skyworth update software runnig 24/7, in the left over testing stuff is a flashing tool for the hdcp, and hardware testing software, it can sideload apps without a problem, i will love to share a firmware dump but i really dont want to open the stb, i will buy one second Hand and test further on that, if anyone has an intrest of me sending one second hand box to them it can dm me, when the chromecast bilt in app is instaled it shows untrusted device so idk, thats all i have for now, any questions below i will respond as soon as posible



Some pictures from what i have done to my box and what i saved from the left overs: