Announcement

Collapse
No announcement yet.

Announcement

Collapse
No announcement yet.

Comigo Quattro (Kartina.TV) - S805 Help

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Comigo Quattro (Kartina.TV) - S805 Help

    Hi, I got this box on the cheap 25 euro and would like to modify it. Its a Russian IPTV subscription platform.

    It looks similar to a lot of these boxes but not finding anything. Mainly need root for now as the system policy doesn't let me launch apps from play market without an active subscription. Rooting fails because of signature verification threw the USB ports.

    Details:

    OPERATING SYSTEM
    Android KitKat 4.4

    HARDWARE
    Model: CMG-SBO-H ( CMG-SBOF9C )
    CPU: Quad-core ARM Cortex A5 @ 1.5GHz
    DRAM*: 1GByte DDR3
    Embedded eMMC Flash*: 4GByte
    Front indicators: Power and Status LED
    Rear indicators: Network Link and Status LEDs for Ethernet connection

    CONNECTIVITY
    LAN: RJ-45 with 10/100Base-T connection
    WLAN*: 802.11b/g/n with internal antenna
    USB 2.0 Host: 2 x User accessible external ports for external HDD, USB Flash drives / Thumb drives and other peripherals. USB ports can be disabled upon request.
    Video outputs: HDMI with CEC and HDCP support (optional)
    Audio outputs: Optical SPDIF (optional)
    Webcam: Support for various USB webcams

    Internal details:

    Motherboard: Gigabyte GA-ALS3F2
    WFI Module: AP6181
    eMMC: Samsung K4B4G1646D-BCK0

    SDcard slot is there but not installed.
    2x USB not installed.

    Buildprop:

    M8b = make
    SB522 = model
    Meson8 = platform

    FCC Link for more pictures.

    OTA Update from Kartina.TV


    I'm not sure what other details are needed.
    You may only view thumbnails in this gallery. This gallery has 2 photos.

    #2
    Without USB connection and without external SD there's a chance that framaroot will work - http://forum.xda-developers.com/apps...-root-t2130276

    If it doesn't work i only see using a serial console to flash a different bootloader to gain access to SD/USB

    Tapatalked

    if [ $up.post.type = $type.two.lazy.to_use_google ] || [ $up.post.type = $type.silly_question ];
    then mv $user.contact.up.post /.trash; set response($response.type = ignore);
    $user.up.post.ignore_in_future = true; fi;

    Comment


      #3
      Have you managed to root this box ? Also interesting in it.

      Comment


        #4
        Have the same Box.
        Connecting with a serial UART. There is a special "COMIGO BOOTLOADER"

        Output:

        QA5:A;SVN:B72;POC:17F;STS:0;BOOT:0;INIT:0;READ:0;C HECK:0;PASS:0;
        no sdio debug board detected
        TE : 1595083
        BT : 19:34:06 Nov 3 2015
        PMU:NONE
        ##### VDDEE voltage = 0x044c

        CPU clock is 792MHz

        DDR mode: 32 bit mode
        DDR size: 1GB
        DDR check: Pass!
        DDR clock: 792MHz with 2T mode
        DDR pll bypass: Disabled
        DDR init use : 13648 us

        HHH
        Boot From SDIO C
        SD_boot_type: 00000002
        card_type: 00000003
        0x0000009f
        Aml log : M8-R2048 TPL pass!
        ucl decompress…pass
        0x12345678
        Boot from internal device 1st tSD/fSD on SDIO C

        TE : 1878862

        System Started


        ==================COMIGO BOOTLOADER==================
        ==========395456:S:Enc (Nov 03 2015 - 19:33:53)==========

        clr h-ram
        DRAM: 1 GiB
        relocation Offset is: 2febc000
        show partition table:
        part: 0, name : logo, size : 800000
        part: 1, name : recovery_bak, size : 1000000
        part: 2, name : recovery, size : 1000000
        part: 3, name : boot, size : 1000000
        part: 4, name : system, size : 32000000
        part: 5, name : data, size : 8c000000
        part: 6, name : cache, size : 20800000
        part: 7, name : sec_gpt, size : end
        aml_card_type=0x100
        MMC: out reg=c1108058,value=fffcf800
        out reg=c1108058,value=fffcfa00
        [mmc_register] add mmc dev_num=0, port=1, if_type=6
        [mmc_register] add mmc dev_num=1, port=2, if_type=6
        SDIO Port B: 0, SDIO Port C: 1
        power init
        out reg=c110804c,value=dfffffff
        IR init done!
        register usb cfg[0][1] = 3ff6fd14
        register usb cfg[2][0] = 3ff72a8c
        NAND: EMMC BOOT: not init nand
        do not init nand : cause boot_device_flag without nand
        get_boot_device_flag: init_ret -1
        get_boot_device_flag EMMC BOOT:
        init_part
        Emmckey: Access range is illegal!
        Emmckey: Access range is illegal!
        Unknown partition type on device 'SDIO Port C'
        Device 'SDIO Port C' wp size=8388608 port=2
        [mmc_init] SDIO Port C:1, if_type=6, initialized OK!
        mmc_device_init
        mmc_get_partition_table
        Start mmc_get_partition_table
        Partition table get from SPL is :
        name offset size flag
        ================================================== =================================
        0: pri_gpt 0 800000 0
        1: env 800000 800000 0
        2: reserved 1000000 4000000 0
        3: logo 5000000 800000 1
        4: recovery_bak 5800000 1000000 1
        5: recovery 6800000 1000000 1
        6: boot 7800000 1000000 1
        7: system 8800000 32000000 1
        8: data 3a800000 8c000000 4
        9: cache c6800000 20800000 2
        10: sec_gpt eb800000 800000 0
        mmc read lba=0x8000, blocks=0x1
        mmc read lba=0x8001, blocks=0x1
        mmc_read_partition_tbl: mmc read partition OK!
        eMMC/TSD partition table have been checked OK!
        i=0,register --- emmc_key
        MMC BOOT, emmc_env_relocate_spec : env_relocate_spec 59
        set_storage_device_flag: store 2
        [imgread]Secure kernel sz 0x5b7580
        Aml log : M8-R2048 IMG pass!
        vpu clk_level in dts: 3
        set vpu clk: 182150000Hz, readback: 182150000Hz(0x701)
        Net: Meson_Ethernet
        init suspend firmware done. (ret:0)
        cvbs trimming.1.v5: 0xa0, 0x0
        upgrade_comigo_environment: expect 9 active 9
        init_comigo_environment
        type:flash,start to read mac…
        device init start
        aml_keys: version 0 can not be init 3ff72c88
        current storer:emmc_key
        flash init key ok!!
        init flash success
        all key names list are(ret=30):
        uuid
        serialno
        countrycode
        mac
        4:3:3:0:3:a:4:2:3:3:3:a:3:3:3:9:3:a:3:0:3:2:3:a:4: 6:3:3:3:a:4:4:3:0:
        mac is: 43:30:3a:42:33:3a:33:39:3a:30:32:3a:46:33:3a:44:30 :
        read ok!!
        read mac success,mac=C0:B3:39:02:F30
        androidboot.mac is exist in bootargs, mac=C0:B3:39:02:F30 androidboot.serialno=A0653202C5507188 androidboot.uuid=6d56353766577369455a5644746b7a4b3 24b6b783341
        BOARD VERSION=2
        reboot_mode=charging
        hdcp get form storage medium: auto
        don't found keyname,uboot_key_read:1634
        prefetch hdcp keys from auto failed
        hdmi tx power init
        mode = 6 vic = 4
        set HDMI vic: 4
        mode is: 6
        viu chan = 1
        config HPLL
        config HPLL done
        reconfig packet setting done
        key save in emmc
        key size=6
        the key name is :countycode
        the key data is :414c4c
        ALL
        Saving Environment to eMMC…
        MMC BOOT,emmc_saveenv : saveenv 102
        mmc save env ok
        key size=44
        the key name is :
        the key data is :6d56353766577369455a5644746b7a4b324b6b783341
        key size=32
        the key name is :serialno
        the key data is :41303635333230324335353037313838
        A0653202C5507188
        efuse version is not selected.
        Hit ENTER key to stop autoboot: 1
        tstc enter

        exit abortboot: 1

        #COMIGO




        But any Keyboard-input except ENTER nothing happens

        It seems like the Bootloader is passwort protected

        Any sugesstions?

        Comment


          #5
          Comigo Quattro
          Last edited by John Red; 06-13-2016, 13:12.

          Comment


            #6
            OpenELEC image for comigo quattro http://nashdisk.ru/f34964/
            Last edited by Ali009; 06-13-2016, 14:43.

            Comment


              #7
              Madlock

              how did you connect with UART? or, where do I find the UART connection

              Comment


                #8

                I did not want to solder the box. sorry my english is from the google translator

                Comment

                Working...
                X