Discover Pro

[Crash-100]

Может есть у кого обновления для данного устройства, не могу найти.

Подключился в терминале, не могу найти скорость обмена, может есть у кого информация!:black_eyed:

[Cossack]

Если кому еще нужно вот ссылка https://cloud.mail.ru/public/0ad32cb94b95/DiscoverProFW200.zip

[Crash-100]

Спасибо, очень помогло!!!

[Crash-100]

Log с дохлой башки. ))

[Crash-100]

кто грызет этот орех, пишите в лс

[Crash-100]

Стоит пароль на выполнения команд


nVidia Quickboot 12.0127U (Build Jun 25 2012)
modified by e.Solutions GmbH
Press <E> to run Emergency Flash Utility.
VFPv3: fpsid=41033091
coproc_attach(10): replacing fe066d20 with fe07cfcc
coproc_attach(11): replacing fe066d20 with fe07cfcc
юIFS Loader (Build Jul 18 2012)
Copyright (c) 2011 e.solutions GmbH. All rights reserved.


handling first frame
[ 0:00.568 OOC INFO ]: IOC -> new MMI state: 0xe, last on flag: 1
[ 0:00.569 OOC INFO ]: IOC -> clamp S/15: 0/0
[ 0:00.569 OOC INFO ]: IOC -> startup variant: 0x0
start mode = 1
IRC: /net/rcc/dev/irc couldn't be opened!
IRC: /net/rcc/dev/irc couldn't be opened!
IRC: /net/rcc/dev/irc couldn't be opened!
IRC: /net/rcc/dev/irc couldn't be opened!
IRC: /net/rcc/dev/irc couldn't be opened!
IRC: /net/rcc/dev/irc couldn't be opened!
rp0 ok
rp1 ok
translations done
checking rootportsPCIe Rootport 0 link up timed out
.PCIe Rootport 0 link up timed out
.PCIe Rootport 0 link up took 90ms


PCI endpoint (0xb800104c) is on bus = 1, device = 0
assigning resources
assigning resources
PCIe bridge/Root port
Vendor/Device = 0xbf010de bus = 0 sec bus 1 sub bus 1
class 0x00060000 revision a0
bar(2) 32 Bit
start = 83000010
end = 83000010
size = 0
flags = I/O
bar(3) 32 Bit
start = 90000000
end = 90010000
size = 0
flags = Memory
bar(4) 32 Bit
start = a0000000
end = a0001000
size = 0
flags = Prefetch
PCIe device
Vendor/Device = 0xb800104c bus = 1 sec bus 0 sub bus 0
class 0x00078000 revision 00
bar(0) 32 Bit
start = a0000000
end = a0000fff
size = 1000
flags = Prefetch
bar(1) 32 Bit
start = 90000000
end = 90003fff
size = 4000
flags = Memory
bar(2) 32 Bit
start = 90004000
end = 90007fff
size = 4000
flags = Memory
bar(3) 32 Bit
start = 90008000
end = 9000bfff
size = 4000
flags = Memory
bar(4) 32 Bit
start = 9000c000
end = 9000ffff
size = 4000
flags = Memory
Image mounted successfully.
Image size: 52406220 bytes
Transfer time: 1.038999 s
Transfer speed: 48.102518 MB/s
login: Path=0 - Generic SDHCI
target=0 lun=0 Direct-Access(0) - MMC:144 HYNIX Rev: 7.3
Mapped 6000D000h to 28000000
NAD is 1
PPIS Startup Sequence (takes ~2s)
Path=0 - Generic SDHCI
Path=0 - Generic SDHCI
Setting deva-nvaudio priority: 21
Setting deva-nvaudio dma interrupt priroity: 26
Path=0 -
target=0 lun=0 Direct-Access(0) - ram Rev:
IRC: /net/rcc/dev/irc couldn't be opened!
MMX BENCH_Startup IMG_VER #SOP1_VW_EU_086PROD 790
Driver settings: Thread priority = 15 TVMR get frame timeout (msecs) = 120
Display width = 800 Display height = 480
Verbosity level = 0
CHALLENGE: Running on port 22111.
RAM_DISK too small for SWDL, starting HMI normally...
IRC: /net/rcc/dev/irc couldn't be opened!
IRC: /net/rcc/dev/irc couldn't be opened!
SLF: 00:00:00.044 43690 0 2 devg-nvrm: Starting thread pool loop

SLF: 00:00:00.045 43690 0 2 Chip Id: 0x20 (Handheld SOC) Major: 0x1 Minor: 0x4 SKU: 0x2c

SLF: 00:00:00.072 43690 0 2 NVRM Initialized shmoo database

SLF: 00:00:00.080 43690 0 2 NVRM CLOCKS: PLLX0: 900000 Khz

SLF: 00:00:00.080 43690 0 2 NVRM CLOCKS: PLLM0: 666000 Khz

SLF: 00:00:00.080 43690 0 2 NVRM CLOCKS: PLLC0: 600000 Khz

SLF: 00:00:00.080 43690 0 2 NVRM CLOCKS: PLLP0: 216000 Khz

SLF: 00:00:00.080 43690 0 2 NVRM CLOCKS: PLLA0: 11289 Khz

SLF: 00:00:00.080 43690 0 2 NVRM CLOCKS: CPU: 900000 Khz

ls /dev

login:root

Password:

Login incorrect

SLF: 00:00:00.080 43690 0 2 NVRM CLOCKS: AVP: 240000 Khz

SLF: 00:00:00.080 43690 0 2 NVRM CLOCKS: System Bus: 240000 Khz

SLF: 00:00:00.080 43690 0 2 NVRM CLOCKS: Memory Controller: 333000

[hrdinaveliky]

From software 0100 till 0200 is possible start any script form engineering menu: mmx/navigation/ebnav/ebonly/tester-scripts/SW Update - SKODA Style. On SD card this script has to be in folder: swdl\scripts\ name of file: sw_update. Engineering menu could by setup by VCP -> 5F -> switch to enginnering mode -> adaptation -> development mode -> enable -> Save and Restart unit. This is small example with flash files from test unit(update has not finished correctly with these files - could you see in log: swdl.sk.log. http://ulozto.net/x75ZhyYX/mib-unofficiall-update-zip

[Crash-100]

your device not work ?
you can't flash IOC and Inic without switching in bolomode
May be you have login and password to acsses

[hrdinaveliky]

I have now unit on CAN but display is black...i see like very interested:
Press <E> to run Emergency Flash Utility.

[Crash-100]

my vesrion is high and in emagency login too

[hrdinaveliky]

How connect to unit??? How port use for connection?? 851??

[Crash-100]

Есть Discovery Pro, вдруг стала сама перезагружаться, хочу сделать через Emergency Flash Utility обновления, но он просит файлы в архиве, может кто располагает информацией пишите в л.с

[Tschako]

Hi guys, until the SW release P1048 EU, the MIB 1 works with SD scripts, if they are correct coded...

Newer SW version need a signature with hash etc.

[Crash-100]

Hi guys, until the SW release P1048 EU, the MIB 1 works with SD scripts, if they are correct coded...

Newer SW version need a signature with hash etc.
i can too but in this HW i can make script because HW all time reset i need make Emagency update maybe you know how ?

[Tschako]

maybe, there are seperate emg updates available for the MMX and the RCC clusters. I have seen a function of the mergency update in the green eng menu...
I will try to send you the call behind the engdefs entry...

[Crash-100]

see this activate_efu.sh
.................................
echo -n "Invalidating boot partition... "
dd if=/dev/zero of=/dev/fs0 seek=59 bs=131072 count=1 > /dev/null 2>&1
echo "done."
echo "Emergency Flash Utility will start on next boot."
echo
echo "If the emergency update doesn't start please check that"
echo "the SD card also contains the 'update***.dat'-files."
echo "These files are provided with every build in the file"
echo "UPD_NORMAL_<VERSION_NAME>.zip

[Tschako]

There is a batch in a MIB1 ENG unit calls "activate_efu.sh" efu means "Emergency Flash Update"
content of this batch as follows:

#/bin/sh
echo -n "Invalidating boot partition... "
dd if=/dev/zero of=/dev/fs0 seek=59 bs=131072 count=1 > /dev/null 2>&1
echo "done."
echo "Emergency Flash Utility will start on next boot."
echo
echo "If the emergency update doesn't start please check that"
echo "the SD card also contains the 'update***.dat'-files."
echo "These files are provided with every build in the file"
echo "UPD_NORMAL_<VERSION_NAME>.zip"


But be aware of the result. This script is from an engineering sample, I dont know whats happend with a production unit!!!!

[Tschako]

Hey, your are faster with tipping in...

Thats what I mean before

[Crash-100]

where i can find UPD_NORMAL_<VERSION_NAME>.zip ?????

[Tschako]

I have to search for it in the FW files... Ill come back with findings...

[audijiJQ]

Maybe I find very useful information
Please see your email
If it succeeds, I hope you can tell the relevant information, thank you

[audijiJQ]

There is a batch in a MIB1 ENG unit calls "activate_efu.sh" efu means "Emergency Flash Update"
content of this batch as follows:

#/bin/sh
echo -n "Invalidating boot partition... "
dd if=/dev/zero of=/dev/fs0 seek=59 bs=131072 count=1 > /dev/null 2>&1
echo "done."
echo "Emergency Flash Utility will start on next boot."
echo
echo "If the emergency update doesn't start please check that"
echo "the SD card also contains the 'update***.dat'-files."
echo "These files are provided with every build in the file"
echo "UPD_NORMAL_<VERSION_NAME>.zip"


But be aware of the result. This script is from an engineering sample, I dont know whats happend with a production unit!!!!


It looks like you should update the *. Dat, and then in building a zip file updated results。So, has not been updated, it is impossible to find *. ZIP

[audijiJQ]

On the development mode of the calling script is missing from the menu options

Maybe there's a production mode menu? ? ?

[Crash-100]

May be any body know how calculate checksum metainfo2.txt for MIB

[audijiJQ]

In Oceania, the password has been obtained

[Tschako]

There is not only a need for the checksum. Its much more difficult, to build the required hashes or signatures...

[Crash-100]

I know how calculate checksum for files, how separate file is more 1 crc, but need calculate MetafileChecksum = "ec5afd6459c3579ebed8841cc41fe17bb61b814d" or skip

[audijiJQ]

I know how calculate checksum for files, how separate file is more 1 crc, but need calculate MetafileChecksum = "ec5afd6459c3579ebed8841cc41fe17bb61b814d" or skip

Based on my experiments, cfinput not a problem for individual files，According to the MMI method to calculate the Meta effect is wrong，I doubt the effectiveness with which the value is the private key encryption


Get the private key is very little hope

Some software developers have spent less than a month's time to crack password

[audijiJQ]

need MMX-PW

[parsec82]

i have disponible a Discover Pro with the Map modification.
THis modification permit to use the navigation Map and don't need to be removed the component protection.
THere is a possibility to download all the software of this unit for upload on another unit to make unlocked a second ipotetical unit?

[Alive006]

Добра всем. Может и не совсем правильный вопрос. Можно ли поставить в VW Jetta 2011 hi, Discover Media. С полноценным функционалом ? Решив проблему защиты и карт нави. Заранее спасибо за ответ.

[Alive006]

Всем добра!

[mobista]

I know how calculate checksum for files, how separate file is more 1 crc, but need calculate MetafileChecksum = "ec5afd6459c3579ebed8841cc41fe17bb61b814d" or skip

Please post original META and editted - maybe I can help U.

[aleka]

Приветствую. Подскажите, в каком файле находится информация по TMC? Хочется понять на какие действия конфигурирует значение в канале адаптации блока 5F "Платная служба дорожных сообщений (TMC)".

[Crash-100]

Please post original META and editted - maybe I can help U.
I find solution for calculate "MetafileChecksum" now problem in signature.

[congo]

MetafileChecksum is simple sha1 checksum.
Signature is another thing ;)

[Crash-100]

I try change private and publiс RSA key but not work. Simple way patch.

[malec]

Private key is something you keep for you, public key only is what you want to replace on the unit.
Sign with your private key and you're good to go.
The point is you just need to try harder to get it work :)

[Crash-100]

did you succeed or do you expect?

[malec]

Sure, I don't talk about theory, this is real facts and it is done. But changing the public keys has also disadvantages.

[Crash-100]

ok I undestend !
best way remove signature check.

[chris2011]

I run the script now unit stays in red efu application, is there a way to skip it?