streda, 30. marca 2016

unbrick gopro hero2

just note to everyone who can try to debrick old gpro hero2

I really do not make notes, so it's just from memory, but it can help:

I try to folow this instructions, but as cammera is not responding to anything it didn't work:

after hours on google here is solution:

place HD2-firmware.bin and autoexec.ash on your sdcard, put "cd d:\" on first line of autoexec.ash

donwload this 2 github repos:

git clone
cd  gopro-fw-tools
cp ~/Downloads/HD2-firmware.bin .
./fwparser HD2-firmware.bin >
chmod +x
./ HD2-firmware.bin
it is bunch of "dd" commands, output is 14 files names section_1,section_2,section_3, etc

then we need usb tool:
cd ..
git clone
cd gopro-usb-tools/
sudo apt-get install libusb-1.0.0-dev
 then, place gopro in usb command mode:

- remove battery, disconnect usb cable
- press and hold shutter button
- put battery in camera
- connect usb cable
- front red led should start blinking
- press power button
- release power button, led should stop blinking
- release shutter button,

lsus shout give as device gopro:
Bus 001 Device 090: ID 4255:0001 GoPro

we are goot to go:
sudo ./gpboot --rtos ../gopro-fw-tools/section_3

camera will boot to rtos:
Initializing libusb
Initializing DDR................................... done
Testing DDR....................... passed
Okay, loading and booting RTOS image ../gopro-fw-tools/section_9 on a Hero2 camera
Loading v312-bld.bin to address c0000000
 ... done                   
Loading relocate.bin to address c7000000
 ... done                   
Loading v312-hal-reloc.bin to address c8000000
 ... done                   
Loading ../gopro-fw-tools/section_9 to address c9000000
 ... done                   
Patching in a jump to our relocator..
Okay, here goes nothing...
Exec c0000000: 12 (ok)

on display will be icon with arrow pointing to camera icon, and information about firmware version (v312 in my case)

this time it will not flash any led, so give it few minutes, take a coffe or go for lunch. after while, I came back to camera, disconnected it removed baterry, and try lot of strange thing like make it again and again put autoexec.ash on sdcard without luck.

after same time, i just for hack of it, I removed version.txt from MISC folder and put camera to usb command mode, and boot rtos:
sudo ./gpboot --rtos ../gopro-fw-tools/section_3

it show exact same icon about falshing firmware but, this time, flashing led! \o/

I wait antil flashing stoped, then removed battery and usb cable, press power button and it continue to upgrade !

gopro saved!

again, it's just from memory, so if you try it and make it works, give me comment down below

štvrtok, 10. marca 2016

inside Car Door Logo Light

have same crazy plane to change logo from audi to AUDI B5 Familia

jut for fun, so I ordered one set: from ebay

here is what is inside :


utorok, 26. januára 2016

OVC3860 how to change name

recently MBT28 contanct me on github about OVC3860 based BT modules [1], we have some chat about configuration of this modules, and mbt pointed to where someone put link to pdf with instruction how to configure OVC3860 based modules (I put it on my github [2] including executable you need).

I personaly tested it, and it works. Change baudrate, name, reconfigure modules class, sound settings ....

tested on winXP,win7 and wine on ubuntu

I try to sniff comunication, to make it configurable from arduino, to be able set BT name by user on final product ....


utorok, 25. augusta 2015

vwcdpic v2 firmware for v3 boards

I do not know why it take me so long o realize that i can change pins in v2 firmware to make it works on v3 boards. But better later then never, here it is.

streda, 5. augusta 2015

audi chorus - concert: how to recover password

what you need:

motorola cracker :

for serial connection I used cp2102 based adapter from ebay, it has wired RTS signal:

Software part is motorola cracer version 6.x (7 didn't work!!!). It has support for com port from 1 to 4, so change this in advance settings for your usb2UART adapter, then just boot MCU and read eeprom, here is a actual eeprom dump, with code 1790, you can see its on 3 places:

number in eeprom, directly after code (from my observation) can be:

06 - SAFE2 mode, you need to wait 1hour(info from here) to be able to enter pin
08 - SAFE1 mode, you can enter pin code to unlock
A0 - no code required

locked for 1 hour

no code required

standard SAFE mode

UPDATE: I have Motorola MCU with fixed volume problem, so I dump eeprom of this MCU as it has fixed problem, it didn't store volume value in eeprom and so this dump is "clean" of garbage. I try to load this dump to one of affected MCU, just to test how long it take to have volume issue back. For now it's looks ok.

EDIT: it didn't fix it radio volume is garbage at low tempreatures, of corse. But I have to try :)

any data are on my github including eeprom dumps.

openbox x-810 won't boot

another bad caps story with PSU, this time openbox x-810, won't boot, stoped with double dot ":" on display. Measuring on 3.3V rail showed 2V with load. Changing 1000uf and 470uf caps on this rail fix problem, just to be on safe side, I changed all caps on secondary side of psu.

utorok, 21. júla 2015

audi FIS 3-line protocol update

   Finaly got time to grab on working configuration, so now I know how cluster tell radio its there and have 2nd display capability.

   Each 5s cluster make 3ms 5V pulse on enable line. after while radio respond with update.

cluster enable signal delay/timing

cluster enable signal

cluster enable signal