Skyworth YYC boxes (SoC: S905X4, model: HP44H) - how to install without a reset switch?

[tajovis796]

Hi!

I have a new Skyworth LEAP-S4 box (Skyworth HP44H, family YYC) with stock Android TV 11 firmware. I’m trying to boot up CoreELEC on it, but I can’t do that because the box is missing the reset button that is normally in the AV port on other TV boxes.

Thanks to notes left around here and on XDA by Functioner, I could get the box to Android recovery and to Amlogic Burn Mode with the check_udisk.cfg trick.

However, I’m lost and unsure what to do next.

Functioner apparently did get CoreELEC booted up on the YYC boxes, including the HP44H, despite the bootloader being locked (Widevine L1 certified) and promised to post a writeup on how to do it back in April 2024:

CoreElec on Mecool KM2 Plus Deluxe

If it’s okay, shortly I will be posting some instructions for booting CoreElec on Skyworth YYC S905X4 devices (and related HP44H Skyworth devices) which include: Mecool KM2 Plus Mecool KM2 Plus Deluxe Boxy and others. The primary purpose of the instructions will be to explain a workaround for the “lack of physical reset button” issue. Some further development may be needed in order to achieve full functionality.

and

CoreElec on Mecool KM2 Plus Deluxe

I think I’ll just post the instructions on xdaforum instead. Anyone who wants to try CE on a Skyworth YYC device can follow along there.

and

https://xdaforums.com/t/custom-firmware-for-skyworth-hp44h.4665236/post-89438483

and

CoreElec on Mecool KM2 Plus Deluxe

Since there wasn’t much interest expressed in running CE on this device, I deprioritized the work on the instructions. I will finish the instructions shortly.

But sadly, Functioner seems to have disappeared off both CoreELEC Forums and XDA.

Any help would really be appreciated! I have a USB TTL serial dongle if UART access is required, though I’d prefer to avoid soldering if possible.

[Sebastiii]

I can’t really help but did you try this one :

Releases · jamal2362/Reboot-to-CoreELEC

[tajovis796]

Thanks a lot for the recommendation! However, this still doesn’t work.

I also tried all the methods here: coreelec:ceboot [CoreELEC Wiki] and tried placing the check_udisk.cfg file on the COREELEC FAT32 partition to trigger Amlogic Burn Mode (assuming that that’s what the Reset switch does on other devices) but nothing worked.

I suspect that this is because of the locked bootloader, but Functioner seems to have found some workaround.

[Portisch]

Using CE on Xiaomi Box S 3rd Gen

So, don’t use the tool I mentioned in the first post–doesn’t work doing ‘Apply update from…’ Just establish adb connection, and do: adb reboot update The install process takes longer than usual vs. S905X4, S922X, S928, etc., but does work.

[tajovis796]

Thanks a lot!

Just tried this, no dice, reboots straight into Android on both USB 2.0 and USB 3.0 ports

[Portisch]

Skyworth is known to lock out third party images.

[tajovis796]

That’s unfortunate

Is there any possibility of bypassing that lock, maybe involving interacting with uboot via UART?

1. Functioner apparently did bypass it somehow, stating that on multiple occasions, and
2. Someone here also booted CoreELEC on a Mecool KM2 Plus, which is a rebranded Skyworth YYC box (and once again, no details)

Or is my only option to just sell it?

[tajovis796]

@Portisch someone here also booted CoreELEC on a Mecool box:

Mecool kt1 s905x4

Thanks! I’ll wait for the dvb tuner version.

Mecool boxes are really just rebadged Skyworth boxes. Is there anything at all that could be tried on my box?

What totally blows my mind is that contrary to every intuition, this is indeed possible as Functioner has already done it before!

Sadly, there are hardly any Android boxes like this where I live. The few that do exist are nonsensically priced ($70 for a 2GB 8GB S912 box!)