mib carplay android auto

master12
Mesaje: 64
Membru din: Mie Dec 14, 2016 2:57 pm
7
Has thanked: 22 ori
Been thanked: 13 ori

#1

Lun Noi 25, 2019 9:07 am

se urmeaza pasii de jos
este porsche se face identic si pe harman vw audi skoda seat

preluat de aici
:
https://rennlist.com/forums/991/1049794 ... eal-7.html

Enabling Android Auto on PCM4


Step 1. Required Components
⁃ UART -> USB Adapter ( Amazon Amazon )
⁃ PuTTY or similar terminal app
⁃ IDA Pro ($$$$$), Ghidra (free), or similar ARM V7-A compatible disassembler
⁃ SD Card
⁃ Linux computer to unpack + repack filesystem
⁃ dumpifs and mkxfs from QNX SDP / OpenQNX. Build these from source on your linux machine to ensure proper compatibility. (available at pre-built for Ubuntu 19.04 x64)
⁃ mkxfs attributes

Step 2. Connect to PCM4 via UART
⁃ Connect GND to GND (PCM4 chassis works), RX on adapter to J5_TX on PCM4, TX to J5_RX on PCM4; pins B3 and B9.

⁃ To connect, you can remove the connector block from the quad-lock, then route your TX/RX/GND pigtails through the opening.
⁃ Open PuTTY, launch a serial connection to your COM port (see devmgmt.msc) - 115200, 8, N, 1
⁃ Login with root / oaIQOqkW

Step 3. Download Root-IFS
⁃ Issue the "stfu" command to stop verbose logging to the terminal.
⁃ Insert SD card into PCM4, left slot
⁃ Issue the following command to download your filesystem: "dd if=/dev/fs0 of=/net/mmx/fs/sda0/PCM4_NOR.bin".
⁃ Issue the following command to copy your existing FEC file: "cp /mnt/efs-persist/FecContainer.fec /net/mmx/fs/sda0/orig_FecContainer.fec"
⁃ Remove SD card and insert into your PC.
⁃ You can also pull this image from an update SD card at ./RCC/ifs-root/*/default/ifs-root.ifs **Note: The desired image is the second ifs contained within this update file, use ctrl+f and find the second instance of file magic "EB 7E FF", your IFS image begins at this location and ends at the end of the file. If you do this, you can skip steps 4.1 to 4.3**

Step 4. Unpack Root-IFS (if using downloaded image from PCM4)
⁃ Open downloaded RCC NOR image (PCM4_NOR.bin) in your favorite hex editor
⁃ Jump to offset 0xBA0000, ensure IFS magic of "EB 7E FF" is present. If not, issue "flashlock" on PCM4 shell to obtain correct offset, target IFS is ~15.6mb. See screenshot.

⁃ Select from 0xBA0000 to the end of the IFS, which is indicated by a block of padding "FF FF FF FF FF". In my case, this data was 15,639,040 bytes. See screenshot.

⁃ Cut and paste this block of data into a new file, name it ifsroot_stage2_orig.ifs
⁃ Move to a linux computer with dumpifs binary (available from QNX SDP)
⁃ Copy ifsroot_stage2_orig.ifs to some folder, open your terminal and CD to that folder.
⁃ Copy dumpifs_helper.sh to this same folder. Chmod it to 755
⁃ Issue "./dumpifs_helper.sh ifsroot_stage2_orig.ifs" to extract the IFS, your files will be in ./ifs_extracted. Ensure files are present as shown in the terminal output
⁃ Place a copy of /usr/apps/MIBRoot so it can be patched with IDA, Ghidra or similar

Step 5. Patch out the FEC checks.

Step 6. Rebuild IFS image
⁃ Place your patched MIBRoot into your extracted IFS location, overwriting the old MIBRoot. It should be located at ./ifs_extracted/apps/bin/
⁃ Open terminal. Issue command: EXPORT QNX_TARGET="/"
- cd to whatever the parent directory is to the ifs_extracted folder we made earlier
⁃ Download mkifs_attributes.txt from github repo. Place it in your current working directory
⁃ Build the new IFS with mkxfs, issue command "mkxfs -t ifs -nn -o ./ -r / ./mkifs_attributes.txt ./ifs_extracted ./patched_ifs.ifs"
⁃ Place patched_ifs.ifs back onto your SD card

Step 7. Create your new FEC file
⁃ Open the FEC container (orig_FecContainer.fec) from earlier in your favorite hex editor
⁃ Copy VIN from file. This should match your car's VIN, unless component protection is enabled, then it would be the VIN from the donor car
⁃ Copy down VCRN (hex values of bytes 16-20 in file). Write it down as shown in the blue highlighted text in the screenshot. The VCRN may be obtained through measurement channels on PIWIS if you only have a 4 byte empty FEC file.

⁃ Make a comma separated list of your existing FECs, from offset 0x43 until the checksum begins. Use hex values, add commas at every 4 bytes (8 digits), for example, from screenshot it would be 00030000,00030001,(...),06310099

⁃ Add one last FEC to the end of that list, which will enable Android Auto: 00060900
⁃ You can also add other FECs to your PCM4 at this time, see below. Additional coding / adaptations may be required.
⁃ Download MIB2_FEC_Generator.sh from Github, chmod it to 755
⁃ Issue command to generate FEC Container "MIB2_FEC_Generator.sh -f {YOUR_FEC_LIST_CSV} -n {YOUR_VCRN} -v {YOUR_VIN} -d {Output_Directory}"
⁃ Output file is FecContainer.fec, copy this new file to your SD card

Step 8. Load new files to head unit
⁃ Insert SD card into PCM4, left slot
⁃ Login with root / oaIQOqkW
⁃ Issue the "stfu" command to stop verbose logging to the terminal.
⁃ Remount efs-persist as r/w with command "mount -uw /mnt/efs-persist/"
⁃ Copy your new FECs with command "mv /mnt/efs-persist/FEC/FecContainer.fec /mnt/efs-persist/FEC/FecContainer.fec.orig; cp /net/mmx/fs/sda0/FecContainer.fec /mnt/efs-persist/FEC/FecContainer.fec"
⁃ Issue commands to flash your stage2 ifs-root... THIS CAN BRICK YOUR HEAD UNIT, SO BE CAREFUL! Important note: "flash.it" is actually one word, but RL censors it, so remove the period otherwise the command won't work.
⁃ flashunlock
⁃ /usr/bin/flash.it -v -x -d -a0x00BA0000 -f/net/mmx/fs/sda0/patched_ifs.ifs
⁃ flashlock
⁃ Reboot unit by holding down power button for 30s.
⁃ Cross fingers and hope your patch worked

Step 9. Adaptations
With PIWIS II / PIWIS III, or VCDS
⁃ If using PIWIS II, place it into engineering mode via Settings -> Diagnostics Configuration -> 911, 918s, etc... -> Mode -> Select "E". Save + Exit
⁃ In PIWIS, Open Diagnostics -> 911 -> 991, scan car (F12) to obtain installed modules, select head unit (Named MIB2...). In VCDS open module 5F
⁃ Select "Manuelle Codierung ohne MCR-Regeln" -> Vehicle_configuration
⁃ Set Bitfield (3) Google_GAL -> "on"
⁃ Save coding, wait for system to reboot
Alternate method coding through PCM4 shell:
export LD_LIBRARY_PATH=/mnt/app/root/lib-target:/eso/lib:/mnt/app/usr/lib:/mnt/app/armle/lib:/mnt/app/armle/lib/dll:/mnt/app/armle/usr/lib
export IPL_CONFIG_DIR=/etc/eso/production
on -f mmx /eso/bin/apps/pc b:0:3221356628:7.7 1

Step 10. Done!
⁃ Plug in your phone. You should now have Android Auto

It is important to note that this hack will be overwritten if you ever decide to perform a software update on your PCM4. You'll then have to re-complete these steps with your new version of software. Given that there are no PCM4 updates available, this will probably be a non-issue.

What if I want to return to stock?
⁃ Connect to PCM4 via UART
⁃ Log into QNX with root / oaIQOqkW
⁃ Copy your original IFS root file (ifsroot_stage2_orig.ifs) to your SD card and install to left slot of PCM4.
⁃ Issue commands:
⁃ flashunlock
⁃ flash.it -v -x -d -a0x00BA0000 -f/net/mmx/fs/sda0/ifsroot_stage2_orig.ifs
⁃ flashlock
⁃ mount -uw /mnt/efs-persist
⁃ rm /mnt/efs-persist/FEC/FecContainer.fec
⁃ mv /mnt/efs-persist/FEC/FecContainer.fec.orig /mnt/efs-persist/FEC/FecContainer.fec
⁃ Done. Reboot by holding power button for 30s


Code:
#Feature Enablement Codes
#00030000 # AMI (Enables USB)
#00030001 # Gracenote
#00040100 # Navigation
#00050000 # Bluetooth
#00060100 # Vehicle Data Interface
#00060200 # Infotainment Control?
#00060300 # MirrorLink
#00060400 # Performance Monitor (Sport HMI)
#00060500 # Sport Chrono
#00060600 # Logbook
#00060700 # Mobile Online Dienste (Online Services)
#00060800 # CarPlay
#00060900 # Android Auto
#00070100 # SDS
#00070200 # SDS for Nav
#06310099 #PCM4 Navi
chelnov
Mesaje: 486
Membru din: Mie Ian 11, 2017 3:02 pm
7
Has thanked: 70 ori
Been thanked: 190 ori

#3

Mar Dec 17, 2019 8:28 pm

alte detaliii?pret?
sibboby
Mesaje: 10
Membru din: Mar Mar 31, 2020 1:26 pm
3
Has thanked: 1 data
Been thanked: 3 ori

#4

Mar Mar 31, 2020 1:34 pm

fw patchuit pt a3 MHI2_ER_AU37x_P5089 gasit site rusia
https://www.filemail.com/d/sqowhevzlvzxkwg
se poate descarca o sapt rog upload pe alt host
update fec
si codare: 5F--adaptation
Vehicle configuration Google_GAL -> ON
Vehicle configuration Apple_DIO -> ON
conectare telnetputy port 123
placa retea
IP: 172.16.250.123
mask: 255.255.0.0
GATEWAY: 172.16.250.248

password:4SapmKoq
Avatar utilizator
NeeK
Mesaje: 1047
Membru din: Lun Ian 02, 2017 4:06 pm
7
Localitate: Undeva
Has thanked: 344 ori
Been thanked: 2696 ori
Contact:

#5

Mie Apr 01, 2020 4:54 am

@sibbody
am creat un torent de test daca e interes, cu FW patchuit de mai sus:
Hidden Content
This board requires you to be registered and logged-in to view hidden content.
EasyLink 283C37784R
MediaNav MN4 9.0.10.2
MediaNav MN3 Evolution 1.0.15.5
MediaNav MN2 Evolution 9.1.3 + Carbone
R-Link 2 v3.3 -> v9.0

*** Daca raspunsul meu ti-a fost util? Apasa butonul de Multumesc! ***
sibboby
Mesaje: 10
Membru din: Mar Mar 31, 2020 1:26 pm
3
Has thanked: 1 data
Been thanked: 3 ori

#6

Mie Apr 01, 2020 9:49 am

ok pt intrebari scrieti aici
din tutorial de sus
extragere fec comanda din pas 3
editare pas 7
copy pe masina in loc la original pas8
florin1974
Mesaje: 1
Membru din: Mie Mar 01, 2017 10:43 pm
7

#7

Mar Mai 26, 2020 1:31 pm

salut
FW patchuit de mai sus merge pus si pe un A6C7?
giginson
Mesaje: 48
Membru din: Mar Ian 31, 2017 8:01 am
7
Has thanked: 3 ori
Been thanked: 9 ori

#8

Mie Mai 27, 2020 8:18 am

Nu, nu merge. Daca actualizati softul masinii cu vreun firmware nu insemna ca activati Audi Smartphone Interface cu Apple CarPlay sau Android Auto. Operatiunea e doar un pas din procesul activarii. Activarea functioneaza pe unitatile MIB2 iar pe A6 de la faceliftul din 2015 in sus s-a pus MIB2.
andreicg
Mesaje: 2
Membru din: Sâm Iun 06, 2020 4:00 pm
3

#9

Sâm Iun 06, 2020 4:03 pm

Salut,
Are cineva un firmware patchuit pentru un MIB2, MHI2_ER_AU43x_P5098, la un Audi TT?
Ma intereseaza sa pot pune FecContainer modificat.

Multumesc!
master12
Mesaje: 64
Membru din: Mie Dec 14, 2016 2:57 pm
7
Has thanked: 22 ori
Been thanked: 13 ori

#10

Lun Iun 15, 2020 6:11 am

andreicg scrie:
Sâm Iun 06, 2020 4:03 pm
Salut,
Are cineva un firmware patchuit pentru un MIB2, MHI2_ER_AU43x_P5098, la un Audi TT?
Ma intereseaza sa pot pune FecContainer modificat.

Multumesc!
DA ESTE
andreicg
Mesaje: 2
Membru din: Sâm Iun 06, 2020 4:00 pm
3

#11

Mar Iun 23, 2020 2:43 pm

Multumesc, @master12, insa am rezolvat intre timp
tontzo
Mesaje: 8
Membru din: Sâm Apr 01, 2017 8:47 am
6
Has thanked: 6 ori

#12

Dum Aug 02, 2020 8:01 am

bună ziua,

există vreo soluție software să instalez audi smartphone interface pe un Audi A6 C7 din 2016, am tot căutat dar nu găsesc ... știu că se poate, am văzut pe un A6 la fel ca al meu.

Mulțumesc anticipat!
nixu
Mesaje: 3
Membru din: Dum Aug 09, 2020 6:23 am
3
Has thanked: 1 data

#13

Lun Aug 10, 2020 10:57 am

Salutare.
Inteleg ca aceasta este metoda de deblocare a unui MIB2 de la Harman.
Pentru un MIB2 de la Delphi exista solutie?
Ma puteti ajuta?
am un versiune SW: MST2_EU_VW_P0223D
daserds
Mesaje: 1
Membru din: Vin Aug 31, 2018 10:51 am
5
Has thanked: 1 data
Been thanked: 2 ori

#14

Mar Aug 11, 2020 10:36 pm

nixu scrie:
Lun Aug 10, 2020 10:57 am
Salutare.
Inteleg ca aceasta este metoda de deblocare a unui MIB2 de la Harman.
Pentru un MIB2 de la Delphi exista solutie?
Ma puteti ajuta?
am un versiune SW: MST2_EU_VW_P0223D
Te pot ajuta pt versiunea ta, update la P0231D si patch.
nixu
Mesaje: 3
Membru din: Dum Aug 09, 2020 6:23 am
3
Has thanked: 1 data

#15

Vin Aug 21, 2020 11:49 am

daserds scrie:
Mar Aug 11, 2020 10:36 pm
nixu scrie:
Lun Aug 10, 2020 10:57 am
Salutare.
Inteleg ca aceasta este metoda de deblocare a unui MIB2 de la Harman.
Pentru un MIB2 de la Delphi exista solutie?
Ma puteti ajuta?
am un versiune SW: MST2_EU_VW_P0223D
Te pot ajuta pt versiunea ta, update la P0231D si patch.
Am facut rost de firmware P0231D ma poti ajuta cu patch?
Multumesc!
Scrie răspuns

Înapoi la “Audi”