06-12-2019, 10:50 AM | #2267 | |
Major
1084
Rep 1,048
Posts |
Quote:
I installed it, it seems to have lots of new features For The Dimming guys, the new Firmware has an option to witch between Car-Dimming and manual dimming. You can also adjust the Displaybrightnes now manually at the Settings ! Unfortunateley the lockscreen is still there, so no change in this sincerely Chri |
|
Appreciate
0
|
06-12-2019, 11:10 AM | #2268 | |
Private First Class
50
Rep 139
Posts
Drives: BMW 5 series E60, Mercedes S
Join Date: Apr 2019
Location: Amsterdam, Netherlands
|
Quote:
https://chinesebmwheadunits.github.io/ I only just started writing it, feel free to join. There is also a repository where I keep the mcu firmware updates: https://github.com/chinesebmwheadunits/mcu There is no hardware difference in MCU's between Android 7.1 and Android 8+ units. Newer firmware files will have newer features. However the android daugtherboard is completely different between PX3 and RX3399 (PX6 does not exist, but they call it this). The firmware format is different, distribution format is different, the android 7 rom is not odexed, the android 8 rom is. etc. etc. I suspect the android 8 rom is 64bit, while the android 7 rom is 32bit. These will never be compatible and as long as I don't have an PX6 unit, most information that I provide will be about andoird 7.1 PX3 units. The screen above is the android recovery screen. You can enter it as well through a terminal with su -c reboot recovery (if it's rooted). When you connect an usb keyboard to the unit you can control it. It does not respond to the touch screen. |
|
Appreciate
0
|
06-12-2019, 11:18 AM | #2269 |
Private
8
Rep 67
Posts |
|
Appreciate
0
|
06-12-2019, 12:31 PM | #2270 |
Major
1084
Rep 1,048
Posts |
since i made a factory reset when i bought it, when booting its showing the lockscreen first.
before the reset it was showing the Android GUI directly without need to slide to unlock. sincerely Chri Last edited by Kri; 06-12-2019 at 11:49 PM.. |
Appreciate
0
|
06-12-2019, 12:58 PM | #2271 | |
Private
6
Rep 63
Posts |
Quote:
Looks like the latest CF.lumen version of the app requires Android 5.0 though the older version are available for download. |
|
Appreciate
0
|
06-12-2019, 01:02 PM | #2272 | |
Private
6
Rep 63
Posts |
Quote:
CF.lumagen is another program that can adjust the screen brightness without the need for tasker. |
|
Appreciate
0
|
06-12-2019, 01:27 PM | #2273 |
Private First Class
50
Rep 139
Posts
Drives: BMW 5 series E60, Mercedes S
Join Date: Apr 2019
Location: Amsterdam, Netherlands
|
It won’t be able to control the backlight as it is not implemented as a normal android backlight driver. The mcu controls the backlight of the screen and only gets its commands through a serial port connection in Eventcenter.apk
|
Appreciate
0
|
06-12-2019, 03:50 PM | #2274 | |
Major
1084
Rep 1,048
Posts |
Quote:
i already have connected a usb keyboard when at the recovery mode, but it does not respond, also not able to switch "num", so no power. it seems that the USB ports are not active, it also won`t be recognized by my normal computer at this state. when android has booted normally USB keyboard and USB adb do work fine. sincerely Chri |
|
Appreciate
0
|
06-12-2019, 08:45 PM | #2275 | |
Private
6
Rep 63
Posts |
Quote:
I am not sure how brightness control is implemented on other units (android 7, 8) from various manufacturers. |
|
Appreciate
0
|
06-13-2019, 12:06 AM | #2276 | |
Private First Class
50
Rep 139
Posts
Drives: BMW 5 series E60, Mercedes S
Join Date: Apr 2019
Location: Amsterdam, Netherlands
|
Quote:
|
|
Appreciate
0
|
06-13-2019, 02:45 AM | #2277 | |
Private First Class
19
Rep 118
Posts |
Quote:
Using IDA Pro, Open the firmware .bin, select ARM little endian processor, ARM v7m architecture, no vfp, thumb mode. In next screen I write ram/rom offsets, but IDA hangs or loads incorrect data (or so it seems). For example first 4 bytes at 0x08002800 dont point into the 0x20000000 range... Do you mind check the screens and point where the error is? Thank you for your time. |
|
Appreciate
0
|
06-13-2019, 04:18 AM | #2278 |
Registered
0
Rep 1
Posts |
View post on imgur.com hey guys new member stuck on the following point.. the connectors sit really snug and i cant seem to figure out where to pull the plugs ? thx for ur help |
Appreciate
0
|
06-13-2019, 04:43 AM | #2279 | |
Private First Class
50
Rep 139
Posts
Drives: BMW 5 series E60, Mercedes S
Join Date: Apr 2019
Location: Amsterdam, Netherlands
|
Quote:
I say word because for ARM word = 32 bits, however IDA is originally an x86 dissasembler and there it's called a DWORD. So pay attention to that. So: ARM byte = IDA byte = 8bits. ARM halfword = IDA word = 16bits. ARM word = IDA DWord = 32bits. You should jump to 0x08002800 to find the interrupt vector table. So press G and fill in 0x08002800 to jump to that address. There you will find the IVT. Press D a few times until the line reads DWORD. IT probably points to 0x20001700 or something. This is the initial stack pointer. Now right click the DWORD and select array. Then create an array of 84 elements. Select 1 per line, otherwise it's unreadable. This is your IVT. You could create a segment and/or a struct for it. For now, this is enough. The second value at 0x08002804 is the address of the reset vector. You will notice that it is an odd value. Probably something like 0x08002969. This points to an odd address. When the program counter register on ARM is odd, it indicates that it is in Thumb mode (16bit instructions instead of 32bit). This processor supports Thumb-2, so that is the mode that you should have selected at the first screen. Click right on 0x08002969 and select Jump to operand. Now you jump to that address. It's odd, so substract 1 position and set the cursor on 0x08002968. This is the address where the reset vector starts. Now press Alt+T and select 01 (thumb mode) for T. Press C and it will start autoanalyzing all code that is reachable from the reset vector. This is a LOT, so you'll get a lot of functions that it will automatically detect. Your memory layout should be filled with blue sections that are code sections. Notice yellow parts in between. These are still undefined. Could be either data (gray) or code (blue). There are two options for these parts: Either they are pointed to by another interrupt vector, so you could follow all of them. Or they are dynamically invoked code, where the address of a function is calculated before it's invoked. Either way, functions on ARM have distinctive prologues and epilogues: ARM functions usually start with a PUSH instruction where registers that are used in the function are pushed on the stack, to be restored after the function ends. R0 to R3 are function arguments, so these are typically skipped, but R4+ and the Link register (LR, which contains the return address for this function to return to after execution). are frequently pushed in the first instruction. At the end there is either a pop where LR is restored as well (for subroutines that call other subroutines), or a BL instruction where there is a branch to the address of the unmodified link register. So if you press C on an even address in between functions and you see that it e.g. starts with: Code:
PUSH R4, LR Code:
POP R4, PC As an example a function part that turns on the backlight. It starts with a push and ends with a POP. There are some branches that are not shown, but you get the idea. The literal pool is below and shows a reference to a byte at 0x20000CC8 that controls the status of the backlight. It also stores a reference to the GPIOB_CRL register that is used to control GPIO pins for port B. That is probably enough to now. To decompile (if you have the decompiler plugin). Press tab or F5. F5 will always decompile, Tab will only decompile on first invocation. Then it just switches to a cached representation of the function. Last edited by __fred__; 06-13-2019 at 05:45 AM.. Reason: TYpos |
|
06-13-2019, 05:48 AM | #2280 | |
Major
1084
Rep 1,048
Posts |
Quote:
so hold down the male and pull the upper female. Normally ther is a small nose on the wider side inside, with a tiny screwdriver you should be able to lift it. sincerely Chri |
|
Appreciate
0
|
06-13-2019, 08:46 AM | #2281 | |
Private First Class
19
Rep 118
Posts |
Quote:
|
|
Appreciate
0
|
06-13-2019, 12:00 PM | #2282 |
Major
1084
Rep 1,048
Posts |
I noticed that the Phonelink app is missing since the 050519 Android update.
does someone know how the name of the original software was so i can reinstall it ? sincerely Chri |
Appreciate
0
|
06-13-2019, 01:10 PM | #2283 |
Private
8
Rep 67
Posts |
|
Appreciate
0
|
06-13-2019, 02:17 PM | #2284 |
Major
1084
Rep 1,048
Posts |
I found the apk at via adb at root/oem/easyconnected, i copied it to my computer and back to the android system as it self has no access to root and installed it from there
it seems to be a special version for the ZXW Android Mainboard sincerely Chri |
Appreciate
0
|
06-13-2019, 02:28 PM | #2285 |
Private First Class
28
Rep 145
Posts |
Hi All,
I have a 2015 328i with the NBT Nav. I have already done one of these installs for the first gen Avin for his car (different model). I am now in the market to get one for myself. As i was ready to order, i noticed quite a few vendors now exist including Aliexpress, 4x4shop, so I have the following questions: 1. Who should i order my 10.2 from? Any recommendations? 2. As i was about to order, I read on page #101 of this thread that a 4gb variant is soon to be launched with Android 9 and ID7, anyone have any word on that? If its stable and if thats the specs i should get? I checked with Avin and they confired they will be launching it at the end of the month? 3. I have done a full Bavsound upgrade on my car, so sound quality is very important, will installing the unit make the sound quality suffer? 4. Anything in addition that i need to look out for. Sorry, I have read quite a few pages on this thread, but i am trying to catch up on the new advancements and how to proceed further. |
Appreciate
0
|
06-13-2019, 11:34 PM | #2287 |
New Member
0
Rep 21
Posts |
|
Appreciate
0
|
06-14-2019, 05:25 AM | #2288 |
Private
27
Rep 87
Posts |
In factory settings select "BackCarSnd" ON.
|
Appreciate
0
|
Post Reply |
Bookmarks |
|
|