RCD330g Plus Desay - Discussion | [Volkswagen Skoda] Car and device on WinCE, WM



Rep: (101)
FirmwareRCD330g Plus Desay
Car and device on WinCE, WM
Firmware пїЅ Talk пїЅ Discussion MIB2-G MQB пїЅ

A machine : Volkswagen Skoda
Attention before you do anything with your radio, please kindly re-read at least the cap and instructions for restoration. And if you do not understand or are not confident in your abilities, refer to the professionals!
Features and iron recorder
Radio cassette recorder on WinCE 6.0
CPU CSR PRIMA II S3683 WinCE processor CPU-1 shell is spinning on it
Photo CPU-1
Attached Image

RAM 256MB chip IS43TR16256A-15HBLI
Memory
Attached Image

ROM 256MB NAND Flash MT29F2G08ABAEAH4-IT
Flash
Attached Image

CPU-2 Toshiba TMPM324F10FG. This processor is responsible for turning off, working with the CAN bus, polling the keys, controlling the radio, and so on.
CPU-2
Attached Image

RAM CPU-2 IS66WV51216DBLL 1 Megabyte of memory for the second processor.
Ram-2
Attached Image

CAN BUS TJA1055 / 3
Output amplifier
Attached Image
Attached Image

Radio receiver
Attached Image

Screen sensor
Attached Image

Video decoder rear view camera
Attached Image

Microphone & amp; Bluetoth Module
Attached Image

Eeprom second processor
Attached Image

Screenshots datashitov. Links to Datahita

Our radio has a pretty powerful USB port, hereHEREYou can see the result of the power check.

Merged and unpacked firmware

Instructions
Recovery Instructions.
Guide to Russification and change the color scheme of the radio RCD330GPlus with the entrance to the alt. menu by button Media.

BOOT menu through the terminal
Wiring diagram Description of how to disassemble and connect the radio
Attached Image
[1] Upload Bootloader
[2] LAUNCH existing Boot Media image
[3] Update image via USB
[4] UPDATE image from SD / MMC card
[5] DOWNLOAD image via USB RNDIS Ethernet
[6] Reset TOC
[7] Erase MBR
[8] Config menu
[9] Debug Boot Media
[A] Storage Menu
[D] Desay OEM Data menu
[E] Erase boot media
[M] Config New Feature for MMC v4.3 / 4.4 card

Selection: 8

configure operation menu:
[0] IP address: 0.0.0.0
[1] Subnet mask: 0.0.0.0
[2] DHCP: Enabled
[3] MAC address: (0: 0: 0)
[4] Boot delay: 0 seconds
[5] Startup image: Enable
[6] Program RAM image into Boot Media: ENABLED
[7] Bluetooth address: (0: 0: 0)
[E] Set Clock
[V] Set Voltage
[s] Save Configuration
[u] Configure USB PHY
[Q] quit to main menu

Selection: D

DESAY SV OEM DATA MENU
Version [vw160704]
Build at [2016-07-04 12:03:20]
[0] Version: vw160704
[1] Version type: Release
[2] Touch panel type: MXT224 touch
[3] GPS type: GSD4E
[4] Trace type: No trace
[5] Open Touch Calibration: NO
[s] Save Configuration:
[Q] quit to main menu

Selection: 9

Debug n
[1] NAND_ReadSector
[2] NAND_WriteSector
[3] Dump Flash
[Q] Quit to Main menu


Going to the desktop
To exit to the desktop, download the filehereUnzip to the root of the SD card. Sd card is small and preferably formatted in FAT. 8gb did not work for me.
Insert the card into the radio, press and hold the SETUP button until the menu appears
Attached Image
select the first item Software update is visible
Attached Image
Select Update Software menu will appear
Attached Image
Here we carefully select the second menu item.Update NAVI see the picture
Attached Image
and restarts. For a short time, the picture will show updates and fall out on the desktop. Nothing at this moment is not changed and is not updated. After logging out to the desktop, only the file flag responsible for the update is erased. To the next boot did not try to upgrade.
The next time you load the radio, it will turn on in the normal operating mode. Further, it does not matter whether the SD card is inserted or not.

Option number 2here


Instructions for flashing through the terminal
WinCE update from SD card via terminal commands. Requires disassembly of the device and connect the COM port. We read two topicsDescription of how to disassemble and connect the radioandRecovery Instructions.
Downloading firmwareHEREWe unpack to the root of the SD card. The card before this is best formatted. Insert the card in the radio.
We open the terminal program at a speed of 115200.
Clamp a space and turn on the radio. Serve in the menu
test key []
[1] Upload Bootloader
[2] LAUNCH existing Boot Media image
[3] Update image via USB
[4] UPDATE image from SD / MMC card
[5] DOWNLOAD image via USB RNDIS Ethernet
[6] Reset TOC
[7] Erase MBR
[8] Config menu
[9] Debug Boot Media
[A] Storage Menu
[D] Desay OEM Data menu
[E] Erase boot media
[M] Config New Feature for MMC v4.3 / 4.4 card

Press 4 get into the boot menu
Selection: 4
SDMLC_Prepare: store media SDMMC
[s] [291]: SD (Clk = 50000000, Ratio = 12), CLKC_SDPHY_CONFIG = 0x550004, pll3clk = 0x23C34600

SDMMC_Init SD base add: A0400000

SD clock, div = 0x0, supported = 50000000, max = 50000000

going to use 0 div

SDMMC_GetInfo addr 0xA0400000

SDMLC_Prepare Finish

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
! Now we try to update image from SD card. Please ensure
! your Monolithic or MultiXIP image in SD card root dire-
! ctory. Monolithic or Mul-
! tiXIP image in SD card. If you select to download Mono-
! lithic image and put MultiXIP image in SD card, there
! will be errors! Vice versa. Here you have three choice:
! 1 ----- MultiXIP
! 2 ----- Monolithic
! 9 ----- Give up to download image
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Click 1 and watch the download process on the screen of the radio and in the terminalker
Do you want to download: input 1
Try to download MultiXIP image, please wait ....
Eboot Splash Window!
OS: MSG: update NK update? [0] 0-0-0

DownloadImage finish
ROMHDR at Address 8FC00044h
:: OEMLaunch, ImageStart: 0x8FC00000, ImageLength: 0x1531470, LaunchAddr: 0x8FC01000
OEMLaunch: Write image to nandflash
OEMLaunch: (IMAGE_TYPE_MXIP | IMAGE_TYPE_BINFS)
WriteRegionsToBootMedia: ImageStart: 0x8FC00000, ImageLength: 0x1531470, LaunchAddr: 0x8FC01000
INFO: WriteRegionsToBootMedia: Found chain extenstion: '' @ 0x8FC00000
INFO: WriteRegionsToBootMedia: Found chain extenstion: 'chain information' @ 0x8FC00000
INFO: WriteRegionsToBootMedia: Found 'chain information' (pChainInfo = 0xA1F0B728 Extensions = 0x3).
Found the Chain region: StartAddress: 0x81404000; Length: 0x00000528
Writing multi-regions
BINFSPartMaxLength [0]: 0x1000, TtlBINFSPartLength: 0x1000
dwMaxRegionLength [2]: 0x1000
BINFSPartMaxLength [1]: 0x1800000, TtlBINFSPartLength: 0x1801000
dwMaxRegionLength [0]: 0x1800000
BINFSPartMaxLength [2]: 0x2000000, TtlBINFSPartLength: 0x3801000
dwMaxRegionLength [1]: 0x2000000
Open / create RAWFS partition 3595 sectors ...
GetPartitionTableIndex: dwPartType = 38 fActive = 1

Open / create BINFS partition 28675 sectors ...
GetPartitionTableIndex: dwPartType = 33 fActive = 1

dwRegionStart: 0xA1B50000, dwRegionLength: 0x1531470, dwStoreOffset: 0x0
BP_SetDataPointer at 0x0

WriteData: Start = 0x0, Length = 0x1531470.

Update TOC!
dwRegionStart: 0xA3081470, dwRegionLength: 0x1BB0114, dwStoreOffset: 0x1800000
BP_SetDataPointer at 0x1800000

WriteData: Start = 0x1800000, Length = 0x1BB0114.

dwRegionStart: 0xA4C31584, dwRegionLength: 0x528, dwStoreOffset: 0x3800000
BP_SetDataPointer at 0x3800000

WriteData: Start = 0x3800000, Length = 0x528.

Written Chain Region to the Flash
LoadAddress = 0x81404000; FlashAddress = 0x00007E0C; Length = 0X00000002


GetPartitionTableIndex: dwPartType = 33 fActive = 1

Image start sector: 3596, total sectors: 28674

Please wait for calculating checksum ...

CUR: ImageDataCheckSum: 0xA5627A74

TOC: ImageDataCheckSum: 0xA5625637, ImageInfoCheckSum: 0x62

CreatePartition: can't find free sector.

GetPartitionTableIndex: dwPartType = 5 fActive = 1

Extend partition CREATE ERROR !!
-WriteRegionsToBootMedia
+ TOC_Write
g_pTOC->dwSignature: 0x434F544E
g_pTOC->dwTOCVersion: 0x00000018
write TOC, checksum = 0x2302
TOC_Write 0th TOC, start sector 2561 1 sectors
g_ptoctemp [0] = 0x814CD800TOC_Write 1th TOC, start sector 2562 1 sectors
-TOC_Write

ratio = 0x24424221, src = 0x42240422, clkinfo = 0x258BFF20, voltage = 0x48

Jumping to image at virtual address 0x8FC01000h

Russification
Latest versionHERE. thankMg355
Previous version of Russification. Description, instructions and screenshotsHERE. In this version, English is unchanged and Russian is in place of Chinese. Added Russian flag.
The version in which the Russian language instead of English and English instead of Chinese. Set by copying language files in manual mode.HERE
One of the first versions is set by manually copying language files.HERE
Russification Screenshots
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image



Logo change
You can change the logo in the BOOT menu via the terminal.
InstructionHERE.

Skoda logoHERE
Skoda logo old styleHERE.

EasyConnect
The program for displaying the phone screen on the radioHERE
Connection instructions and latest versions.
Video output to the desktop and mirroring the screen of the smartphone.

Solving problems with the display image on the screen recorder

Linear output
Attached Image

Another description of how to make a linear output.HERE.
Detailed description with pictures about installing a linear outputHERE.

12 Volt output at power on
[
Attached Image
]

Exit the menu by long pressing MEDIA.

Skoda color scheme Green. Instructions for changing the color of the shell to green.
VW color scheme Red. Files to change the color of the shell to red.
The way to exit to the desktop with sound.
Adding shortcuts to the desktop description.
Description how to create shortcuts.
Change ringing incoming call.
Description and solution of the problem with the rear view camera
USB Ublox7 USB Connection
Tune GPS Ublox module
Remote USB connector in the glove box.
COM ports description
GPS receiver connection
Alternative 5 volts for GPS connectivity
Script for nailing process G3NavHMI.exe

Photo
Attached Image
Attached Image
Attached Image
Attached Image
Attached Image

Alternative menus

Useful

You can thank inprofile.
Thank you all for your support!
Many thanks to the active participants in the project!


Post has been editedCrazyzy - 09.05.19, 00:29
Reason for editing: Useful



Rep: (11)
* dima_s30, look, suddenly what will help or give a hint.
[RESOLVED] Reanimated tape recorder after clinical death



Rep: (26)
* siabr,
Only, you need to take into account, if I correctly understood that there we are talking about WinCE 5.0.



Rep: (101)
Siabr @ 01/31/17, 17:41*
[RESOLVED] Reanimated tape recorder after clinical death

Yes, I saw before the rendition. He shoved him this file, he does not look at it on the flash drive.
EEPROM read there in appearance everything is in place. Model name, serial, radio channels, mp3 file with USB. EEPROM added to the header.
And what is the chip in Noname tape recorder? Who has links where mkruhi seen.
J-Link is my old ash version 5. SWD does not support jtag yet. I will look for newer.
As promised laid out wallet. At the request of the moderator, the wallet was transferred to your profile.

Post has been editeddima_s30 - 01.02.17, 13:33



Rep: (1)
The autorun tampering method did not work, the radio tape recorder sees a flash drive, but does not try to start something from it (Total Commander)



Rep: (101)
Avtoran's slip method

I tried all sorts of autorun autoexec and all that. Nothing starts up. Then, after merging, I looked for something similar in the firmware and did not find it either.

Now, in fact, it is clear what files he needs for updating. The problem is that he wants to upgrade from a file with the .pack extension, who can see such a file in similar firmware. We need an example to understand its format.



Rep: (26)
* dima_s30,
It is also possible that autorun will be rolled, but it probably needs some specific file name, by analogy, as in the link to Gazelevskoye GU.

For example, on Duster's GU on WinCE, the update file has the extension .lgu, but there is the manufacturer LG.

Post has been editedNautilus90 - 01.02.17, 14:57



Rep: (9)
if I'm not mistaken, Desay SV has another name and brand - desaixiwei and, accordingly, the site
http://www.desaixiwei.com/
There are a lot of different firmwares
unfortunately my internet is very limited, I can’t download them and see them, but can there be something useful for us?

Post has been editedEric777 - 01.02.17, 16:36



Rep: (26)
* dima_s30,
Here aboutthe .pack extension, it turns out archive.
And there are probably firmware files for Radio, WinCE and Navigation.
In some receivers, and as it turned out in the 330th, you can regularly update everything at once by slipping to it the general archive of the firmware. Or by slipping a specific file on the card to update something separately, on some radio tape recorders it is in some service menu.

Post has been editedNautilus90 - 02.02.17, 03:05



Rep: (26)
And then there is something about how to unpack it:http://stackoverflow.com/questions/32975607/open-pack-file-unix



Rep: (101)
Here is the update attempt log from the PACK file.
****** DebugMsg: CUnpackFiles :: ReadFileList line54 PackageName = \ SDMemory \ VW_20SD_VWOSBASE.pack
****** DebugMsg: CUnpackFiles :: ReadFileList line84 m_nPackageTotalSize = 32MB
****** DebugMsg: CUnpackFiles :: ReadFileList line88 open file fail!
****** DebugMsg: CSwDnlDownloadProgressDlg :: UpdateNaviThread line243 ReadFileList fail!

This I shoved him one of the sections.



Rep: (1)
dima_s30 @ 01.02.17, 15:18*
Can anyone see such a file in similar firmware. We need an example to understand its format.


I had a balalaika ANS810 before, so I found pack-files in its firmware
https://yadi.sk/d/kVPaChuXKsZfU
File UpdateMPU.hs open winrar, there will be 2 files pack



Rep: (1)
File from that Chinese site
Judging by the instructions, the file structure is very similar - update.pkg, SwUpd.exe, everything is present
Firmware attached

Attached files

Attached fileNAV288 SV2413 ??????. Pdf(325.77 KB)
Attached fileNAV288_2015.11.11.rar(46.45 MB)


Post has been editedKoldune - 01.02.17, 18:08



Rep: (101)
I merged the firmware of the second processor.
By the appearance of everything in place, no sector is erased.
To find the place I created a file for updating the radio 4 bytes (DA D6 DE D1) slipped to her this file, it was updated. I merge the radio firmware all 100% match.
Turn on the radio she earned.

What she wrote and where I did not understand. The result is a magician working on continuing bullying her.

I will post the second processor a bit later.
Thank you all again for your help and support :)

Post has been editeddima_s30 - 02.02.17, 08:21



Rep: (1)
* dima_s30,
This is good news :) with the return (if I may say so.))



Rep: (11)
* dima_s30, Hooray! : congratulate:
We continue the experiments? ))

By the way, what for the bytes fed GU, what did it work?

Post has been editedsiabr - 02.02.17, 08:09



Rep: (4)
Russify as I understand it can be easy, judging by the content of files
language_cn.qm
language_en.qm
mirrorlink_language_cn.qm
mirrorlink_language_en.qm
swdnl_language_en.qm

Post has been editedlyasik-ufa - 02.02.17, 11:51



Rep: (36)
Good for you with wince, and we have a console sawed off ...

Post has been editednecrodebian - 02.02.17, 11:16



Rep: (61)
Has anyone triedsuch a thingfor desay?



Rep: (1)
* al3d,
There is a small review on the Tiguanov forum. I'm waiting for one such fee.
http: //forum.tiguans.r...EF%EB%E0%F2%E0&page=67



Rep: (61)
* -SAVED-,
Saw this "review". Infa zero. Not what kind of prog is used for navigation, nothing this board can do at all. I also tried to correspond with the seller of this board for aliexpress (it's only one there for now). From his answers, I realized that he himself does not know what he is trading in - he just writes that there is navigation and maps can be updated from a flash drive. The question of the navigation program is ignored. In general, while it is a dark horse. Waiting for someone to take a review on YouTube.

Post has been editedal3d - 02.02.17, 13:37


Full version    

Help     rules

Now: 06/29/19 00:02