Dear new users!

All messages from new users are moderated by administrator. Keep patience if You first message is not published, You will see it as soon as it will be accepted. Additional, new users have restriction in using of private message system.

startup logo

Discussions of VDOEditor utility and everything regarding VDO clusters
Daku
Posts: 85
Joined: 23 Feb 2018 20:42

Re: startup logo

Post by Daku » 27 Feb 2020 01:58

@skodapilot, what about color clusters graphics ?

skodapilot
Site Admin
Posts: 463
Joined: 13 Jan 2014 06:18

Re: startup logo

Post by skodapilot » 27 Feb 2020 10:11

Unfortunately, we do not know encrypt and compress algo for VDO dashboard. Main difference of color dashboard is own MCU for LCD. Firmware file for color dashboard contains one more flashblock. I don't know ways to get flash image for this MCU other than unpack from firmware file, but it is impossible now.

Daku
Posts: 85
Joined: 23 Feb 2018 20:42

Re: startup logo

Post by Daku » 25 Dec 2020 23:40

I've found some text in color cluster memory but i think that color graphics have another shorage ;/
Hidden Content
This board requires you to be registered and logged-in to view hidden content.
You do not have the required permissions to view the files attached to this post.

dnoermann
Posts: 35
Joined: 09 Apr 2019 20:05

Re: startup logo

Post by dnoermann » 09 Jan 2021 01:59

nice

dnoermann
Posts: 35
Joined: 09 Apr 2019 20:05

Re: startup logo

Post by dnoermann » 17 Jan 2021 14:03

So very good news i can Dump the 3D Data now.

I was reversing the Bootloader to get the algorithms for compression and "crypto", to be able to make own Update-Files.
While understanding the public available Files
- FL_1K8920875H__1018_S.frf
- FL_1K8920885H__1018_S.frf

I converted them to odx with setup_frf_decoder.exe
After that the update procedere is seen, with Crypted/Compressed Data, but with plain Addresses and Sizes of Data.
As already said from skodapilot, the 3D does have an additional Flash Section.
And this is a big one, it's 16 MByte.
By the way, that is the source for the massive Update-Time of 7 Houres ....

Here is the Address, that is Memory-Mapped I/O for the V850
0xBF000000 - 0xBFFDFFFF Size: 0xFE0000
This can be dumped as Plaintext by UDS_ReadMemoryByAddress when the cluster is in Engeneering mode.
Here is a peek into the first plain 64kbyte of it, from FW 1109.
http://noernet.de/PQx5_3D/SW1109_17.01. ... DFlash.bin
The compleete dump is still running.

ecarruda
Posts: 28
Joined: 20 Feb 2017 23:58

Re: startup logo

Post by ecarruda » 17 Jan 2021 15:29

dnoermann wrote: 17 Jan 2021 14:03 So very good news i can Dump the 3D Data now.

I was reversing the Bootloader to get the algorithms for compression and "crypto", to be able to make own Update-Files.
While understanding the public available Files
- FL_1K8920875H__1018_S.frf
- FL_1K8920885H__1018_S.frf

I converted them to odx with setup_frf_decoder.exe
After that the update procedere is seen, with Crypted/Compressed Data, but with plain Addresses and Sizes of Data.
As already said from skodapilot, the 3D does have an additional Flash Section.
And this is a big one, it's 16 MByte.
By the way, that is the source for the massive Update-Time of 7 Houres ....

Here is the Address, that is Memory-Mapped I/O for the V850
0xBF000000 - 0xBFFDFFFF Size: 0xFE0000
This can be dumped as Plaintext by UDS_ReadMemoryByAddress when the cluster is in Engeneering mode.
Here is a peek into the first plain 64kbyte of it, from FW 1109.
http://noernet.de/PQx5_3D/SW1109_17.01. ... DFlash.bin
The compleete dump is still running.
You are right about this big update secrion and I am going to tell you that is not associates to the V850 NEC, this section is inside of the display unit, display unit for 3d clusters has a tsop56 flash, i bricked my cluster one time, the VCP was returning timeout waiting this section erase time. This information maybe help your reverse engineering.

Best Regards,
Evandr

Daku
Posts: 85
Joined: 23 Feb 2018 20:42

Re: startup logo

Post by Daku » 17 Jan 2021 22:32

Hi,

If you brick yours LCD then ask me a PM, i'll help

Good to know about address and that someone can "Pack and crypt" created data.

I reviewed some bin's from LCD
Hidden Content
This board requires you to be registered and logged-in to view hidden content.
You do not have the required permissions to view the files attached to this post.

dnoermann
Posts: 35
Joined: 09 Apr 2019 20:05

Re: startup logo

Post by dnoermann » 19 Jan 2021 00:43

Thanks Daku.
Content from your bin does have similar format.

Does anyone know the size in Pixxel from the 3D display ?
I would guess 200x800 or so.

After looking deeper into the Data i guess 256x330

dnoermann
Posts: 35
Joined: 09 Apr 2019 20:05

Re: startup logo

Post by dnoermann » 22 Jan 2021 01:49

Since there is no Datasheet for this customized Display available,
I did take a highres picture of the Test-Picture and manual counted the Dots.
It is 240 Pixel wide and 320 Pixel high

Daku
Posts: 85
Joined: 23 Feb 2018 20:42

Re: startup logo

Post by Daku » 23 Jan 2021 17:01

Yeah, because it's display dimmension for 01xx - 05xx, i don't have 100% correct information for higher SW but i think it's same.

For car dimmension 05xx it's something about 78px x 36px or 88px width

Post Reply

Who is online

Users browsing this forum: No registered users and 5 guests