Search Archive

F310BT hack is real

By F310 · May 04, 2011in Hacks/Mods💬 117 posts👁️ 79,842 views
Page 5 of 5
Posted Dec 10, 2011 · 12:35 UTC#101

Pionara,

I've now got 2 additional apps running from the stock navi "Applications" screen with appropriate icons - Explorer and iGO8 and everything is working fine until the unit goes into suspense (when I switch the car off). Before I replaced appslib.dll with the hacked one it would resume exactly where it was when it went into suspense when I restart the car.

However, now, as soon as it resumes it does a warm boot back to the stock navi even when I have been running one of the stock apps like Visual Clock (no mortscript in the middle).

Does your U310BT do the same ? Any ideas ?

 

Its definately the hacked appslib.dll causing the reboot when resuming from a suspend. If I replace it with the original then the stock apps resume from suspence and don't reboot (but I can't run my own apps).

It could be because my version of the stock nav software is the original F320BT and the hacked appslib.dll is from the U/F310BT. It could be incompatible with my rmimanager.exe.

Pionara, could you tell me how you hacked the appslib.dll please ? If I do the same to my original then maybe I can avoid the reboot problem and it will also be available for other F320BT owners.

Thanks for your help so far !

Posted Dec 10, 2011 · 17:06 UTC#102

I actually patched 3 compare/branches... but i was just hitting it with a hammer.. i think some of these may be unecessary, or messing with other parts of the lib.. I'll undo them one by one to see if i can remove the unncessary stuff and see if that makes a difference... in the mean time, can you check md5 hash of your original appslib.dll?

for comparison, the original from u310bt 2.001 update:

 

642709826e85b2afc8bc2623d7c9f864 QI_037_CNSD_130FM/Update/USER/PRG/APL/AppsLib.dll

 

If it's different, maybe you can send it to me

Posted Dec 10, 2011 · 18:24 UTC#103

hi somniac... turns out the 1st of 3 edits was unecessary (i think). So i reduced to just last two edits.) i updated my other thread. see the new appslib.dll on it...

http://avic411.com/i...t-f310bt-f320bt

 

give this one a try!

 

 

edit:

also, here are the resulting edits i did (first one is original, second is edited dll)

 


diff -u <(xxd Update/USER/PRG/APL/AppsLib.dll) <(xxd AppsLib.dll )
--- /dev/fd/63 2011-12-10 11:02:57.000000000 -0600
+++ /dev/fd/62 2011-12-10 11:02:57.000000000 -0600
@@ -679,7 +679,7 @@
0002a60: 0234 85e0 0124 86e0 3d62 5be5 3182 5be5  .4...$..=b[.1.[.
0002a70: 0344 80e0 0b0c e0e3 3700 20e2 0000 8be0  .D......7. .....
0002a80: 0254 8ee0 0b1c e0e3 cb10 21e2 0110 8be0  .T........!.....
-0002a90: 0fe0 a0e1 07f0 a0e1 0400 50e1 3f00 000a  ..........P.?...
+0002a90: 0fe0 a0e1 07f0 a0e1 0000 50e1 3f00 000a  ..........P.?...
0002aa0: 0100 a0e3 64fa ffeb b43b 9fe5 dc00 e0e3  ....d....;......
0002ab0: 8001 a0e1 0000 8be0 0fe0 a0e1 00f0 93e5  ................
0002ac0: b04b 9fe5 a83b 9fe5 0b0c e0e3 3700 20e2  .K...;......7. .
@@ -697,7 +697,7 @@
0002b80: ec3a 9fe5 d200 e0e3 8001 a0e1 0000 8be0  .:..............
0002b90: 9826 0be5 0fe0 a0e1 00f0 93e5 36fd ffea  .&..........6...
0002ba0: 0b0c e0e3 cb00 20e2 0000 8be0 8cfb ffeb  ...... .........
-0002bb0: 0500 50e1 3f00 000a 0100 a0e3 1efa ffeb  ..P.?...........
+0002bb0: 0000 50e1 3f00 000a 0100 a0e3 1efa ffeb  ..P.?...........
0002bc0: 9c3a 9fe5 dc00 e0e3 8001 a0e1 0000 8be0  .:..............
0002bd0: 0fe0 a0e1 00f0 93e5 984a 9fe5 903a 9fe5  .........J...:..
0002be0: 0b0c e0e3 3700 20e2 0000 8be0 0020 94e5  ....7. ...... ..

Edited Dec 10, 2011 by pionara
Posted Dec 11, 2011 · 01:29 UTC#104

hi somniac... turns out the 1st of 3 edits was unecessary (i think). So i reduced to just last two edits.) i updated my other thread. see the new appslib.dll on it...

http://avic411.com/i...t-f310bt-f320bt

 

give this one a try!

 

 

edit:

also, here are the resulting edits i did (first one is original, second is edited dll)

 


diff -u <(xxd Update/USER/PRG/APL/AppsLib.dll) <(xxd AppsLib.dll )
--- /dev/fd/63 2011-12-10 11:02:57.000000000 -0600
+++ /dev/fd/62 2011-12-10 11:02:57.000000000 -0600
@@ -679,7 +679,7 @@
0002a60: 0234 85e0 0124 86e0 3d62 5be5 3182 5be5  .4...$..=b[.1.[.
0002a70: 0344 80e0 0b0c e0e3 3700 20e2 0000 8be0  .D......7. .....
0002a80: 0254 8ee0 0b1c e0e3 cb10 21e2 0110 8be0  .T........!.....
-0002a90: 0fe0 a0e1 07f0 a0e1 0400 50e1 3f00 000a  ..........P.?...
+0002a90: 0fe0 a0e1 07f0 a0e1 0000 50e1 3f00 000a  ..........P.?...
0002aa0: 0100 a0e3 64fa ffeb b43b 9fe5 dc00 e0e3  ....d....;......
0002ab0: 8001 a0e1 0000 8be0 0fe0 a0e1 00f0 93e5  ................
0002ac0: b04b 9fe5 a83b 9fe5 0b0c e0e3 3700 20e2  .K...;......7. .
@@ -697,7 +697,7 @@
0002b80: ec3a 9fe5 d200 e0e3 8001 a0e1 0000 8be0  .:..............
0002b90: 9826 0be5 0fe0 a0e1 00f0 93e5 36fd ffea  .&..........6...
0002ba0: 0b0c e0e3 cb00 20e2 0000 8be0 8cfb ffeb  ...... .........
-0002bb0: 0500 50e1 3f00 000a 0100 a0e3 1efa ffeb  ..P.?...........
+0002bb0: 0000 50e1 3f00 000a 0100 a0e3 1efa ffeb  ..P.?...........
0002bc0: 9c3a 9fe5 dc00 e0e3 8001 a0e1 0000 8be0  .:..............
0002bd0: 0fe0 a0e1 00f0 93e5 984a 9fe5 903a 9fe5  .........J...:..
0002be0: 0b0c e0e3 3700 20e2 0000 8be0 0020 94e5  ....7. ...... ..

Pionara, Thanks for this but I'm afraid your new appslib.dll still doesn't work for me.I checked the MD5 signiture of my stock appslib.dll on the F320BT and it was different to yours so I edited it in the same way as you showed above and now the standard apps (VisualClock and Photo Viewer) both work OK and the unit doesn't reboot after a suspend.But, my custom apps (Explorer and iGO8) start OK from the navi apps menu but the unit reboots when it resumes from suspense when either app is running. So I experimented ..................I copied the VisualClock.exe and its .pwd and .enc files to my AVIC-APPS\Explorer directory and renamed them to Explorer.exe etc.When I ran "Explorer" from the navi apps menu it started VisualClock and it didn't reboot after a suspend.However if I replaced the .pwd file with the original Explorer.pwd file (your original launcher.pwd) and restart the Explorer (VisualClock) app then it does reboot after a suspend.So it seems that something (appslib.dll ?) is still checking the .pwd file and closing down the started app after a resume from suspense if it doesn't like the contents.Could you let me have the third edit you originally made to appslib.dll so I can manually apply it to my version please ?Thanks, we'll get there in the end !!
Posted Dec 11, 2011 · 02:36 UTC#105

Can you just take the .enc and .pwd from another working app and rename/use for your new app? Does that work?

My .enc/.pwd were from the Visual Clock, but on my model. Any valid .enc/.pwd combo for your platform should work (it's just not checked against validity for current .exe any more.)

 

It will probably be another day or two before i can get back in and see which function it was that i patched, and with this in mind, take a look and see if there was anything else missed.

 

Can you provide me a copy of your appslib.dll so i can disassemble and compare against my disassembled appslib ?

Edited Dec 11, 2011 by pionara
Posted Dec 11, 2011 · 16:20 UTC#106

another idea would be to boot into the u310bt version of APL

take 2.001 application from QI_037_CNSD_130FM and put it on your flash under the alternate application dir (PRG1) and set application flag (PRG.FLG) in My Flash Disk to get it to boot from PRG1 instead of PRG0. Can you see if it still does this...

Sadly, I just did a very stupid thing this morning... I was hooking up the head unit to my bench powersupply and was moving it with the power applied and shorted something:((

Anyhow i managed to blow the fuse.. But i think it may be damaged beyond that :((

Posted Dec 11, 2011 · 17:25 UTC#107

another idea would be to boot into the u310bt version of APL

take 2.001 application from QI_037_CNSD_130FM and put it on your flash under the alternate application dir (PRG1) and set application flag (PRG.FLG) in My Flash Disk to get it to boot from PRG1 instead of PRG0. Can you see if it still does this...

Sadly, I just did a very stupid thing this morning... I was hooking up the head unit to my bench powersupply and was moving it with the power applied and shorted something:((

Anyhow i managed to blow the fuse.. But i think it may be damaged beyond that :((

 

Sorry to hear about your power incident, I hope your unit survived OK.

I'll continue to play with the .enc and .pwd files in different combinations. The pwd file is obviously specific to the model or device as my VirtualClock one is different to yours but the .enc is the same.

 

I've attached my original F230BT appslib.dll file and the one I hacked.

Appslib.rar

Posted Dec 12, 2011 · 00:59 UTC#108

damn.. i took apart the unit.. smelly. i cooked something. looks like the PAL007C, which i think is the audio amp IC... I think my leads slipped off and the PKB gnd shorted one of the speaker leads. Even after correcting, and switching on power, it smoked more and blew the 10A fuse. So this chip is cooked. Partially good news is that it's only about 11 bucks on ebay. What I'm really afraid of with this kind of short resulting current flow, I may have taken other stuff out on the board which I wouldn't know about :((((( (triple-unhappy-face).

Anyhow, I guess i have to fork over the 14 bucks to and do some solder work to find out if this thing is salvageable... DAMN!

Posted Dec 12, 2011 · 04:35 UTC#109

Has any progress been made in getting the native apps, like video player, to work?

Posted Dec 26, 2011 · 13:16 UTC#110

How to change the splash screen?

Posted Jan 09, 2012 · 03:07 UTC#112

I wasn't able to get the update to work after following the instructions in here or the one's from the other post. I decided to delete the My Flash folder while in testmode and managed to get to the aplupdate program and run it. The unit restarts and shows a blue screen that displays "Updating Image...". The image never changes or updates. I think I have done something permanent to mess up my unit. Please help if anyone can!

Posted Mar 18, 2012 · 05:48 UTC#113

how do I boot up my 310bt into the original mode after have test mode done?

Posted Mar 19, 2012 · 06:40 UTC#114

Boot the device and during boot remove the sdcard.

Posted Mar 19, 2012 · 16:19 UTC#115

or rename the TESTMODE folder, to something like TESTMODE1

unit will not boot into test mode

Posted Jun 30, 2012 · 09:59 UTC#116

I managed to update from 310 to 320, I can see the applications on new menu but when I enter them I can see: App mode, press restart and app will work with next booting??? I've tried all lib files and no success so far. Any clues?

Posted Mar 25, 2015 · 12:12 UTC#117

Hello guys,

 

I put files from TESTMODE_BY_CHARLIE to root folder of MsSD card and pushed reset on front panel.... but nothing happens ...

What did I wrong ?

I have f320bt ver.1.00 ....

 

XjcIYBm.jpg

Page 5 of 5