Question Teyes CC3 Root Tutorial - FYT Android Head Units

Just rooted my CC3 and wanted to share a way that I now know is safe. This works for the post-October firmware and doesn't require downloading anything from sketchy websites. I'm going to keep this very high level so that hopefully only people who understand what they're doing can figure it out. Rooting this device can very easily brick it.
# Why root the CC3?
Really, there aren't many reasons. You can pull any files off the device without root using the lsecupdate scripts. You can browse to most file locations using Root Explorer or adb shell. You can replace firmware files with FYT Firmware tools.
For me, I wanted to run a specific executable file on the device that was in the /system folder and the only way I could run it was as root. That's a pretty specific use case and I doubt many people have it. Just know that 99.9% of what you want to do that caused you to come to this topic can be done without root.
# Who's fault is it if you brick your device?
It's your fault. Even if my instructions lead you down the wrong path, it's 100% your fault. Really, you shouldn't be doing this. Turn back now.
---
High level steps to root the CC3. I'll fill out details as people have questions. I highly recommend you read through the whole thing once or twice before getting started. You want to make sure you understand how it works instead of just blindly following directions.
GET TOOLS
1) Download the stock firmware. Make sure you get the regular CC3 or the CC3 360 as appropriate. Get it directly from Teyes.
2) Download @mariodantas EXCELLENT FYT Firmware Tools from this forum.
UNPACK ORIGINAL FIRMWARE
3) Use the FYT Firmware Tools (you must use sudo!) to import_original.sh
PATCH BOOT.IMG
4) Copy the tools/_tmp/firmware/boot.img to your CC3. You can do that by putting it on a thumbdrive, downloading it from your google drive, or using adb push. You need to get it onto the CC3 somehow. We need to patch it ON the device.
5) Install Magisk on your CC3 from the play store.
6) Use Magisk to open your boot.img file and patch it. It will create a file called magisk_#######.img. Copy that back to your computer as the tools/firmware/boot.img file. You basically just replaced the boot.img in the firmware folder with the patched one.
REPACK FIRMWARE
7) Use FYT Firmware Tools to repack the firmware. Note that you need to create the patched directory. The script will fail (and delete your modified firmware) if that directory doesn't exist. This will give you a modified 6315_1.zip file
INSTALL FIRMWARE
8) Copy all of the original Teyes firmware update files on a USB drive. Overwrite the original 6315_1.zip file with the modified one you just created that has the patched boot.img.
9) Connect that USB drive to your CC3. It will install the firmware and your system will be rooted.
VERIFY
10) Open Magisk on your headunit again. It should show Magisk installed and give you the root (shield) menu at the bottom.
---

Is @mariodantas firmware working on the CC3? Just seen, is not.
@cryptyk do you have a link to the firmware tool?
Found it. Is for Linux. I am a Windows user

everything is much easier

Tell us
Edit: Thank you

Kolbasnik98 said:
everything is much easier
Click to expand...
Click to collapse
just tested, follow the Russian instruction in the read me and magisk is installed and you have root access

Related

Android app that roots your phone

Hi all I am putting together an android app that will making the rooting process much easier. This thread is discuss issues and suggestions with this app.
I have the app near done, the biggest problem is that I cannot format the sdcard as fat32. Is formatting to fat32 required. Why do we do this? What is the real need to do this?
I have not tested the app out yet, but so far this is how it has been put together. There is a main activity with textboxes that have the urls of the files needed to root (dreaimg.nbh, recovery.img, hardsplupdate.zip, JF_RC33update.zip) and there are buttons for each step in the process to download these necessary files and extract them if needed and put them on the sdcard and renaming them properly. You can change the urls to something else if needed.
so you click the first button it downloads the .nbh and puts it on the sdcard and then prompts the user to turn off, power+camera on, flash. when phone is on then reinstall this app and go to step 2 (because it would of been lost when flashed)
you click the second button it downloads recovery.img and hardsplupdate.zip. renames the files appropriately and puts them on the sd. it runs a script to do the recovery.img flash. It then prompts you to restart into recovery mode and gives the instructions on flashing the hardspl. and tells you to reopen this app when done
you click the third button it downloads the latest JF firmware (lets just say the RC33 flavor) puts it on the sdcard and renames it as update.zip. it prompts you to restart into recovery mode and do the flash.
Anybody see any possible problems with this logic? Also what do people think about maybe packing some of these files in the app instead of having them be downloaded?
Update: app is working http://allshadow.com/forum/viewtopic.php?f=9&t=5229
I am still looking for help to make it better.
I need devs to help make it nicer.
I am also looking for someone who's familiar with the update.zip package, to pack the radio, hardspl, and jf_rc33 all in one update file.
If anybody is interested in helping, PM me
I dont think its that big of a deal to format the card yourself, but why not make an app on the desktop that does some of the work for you, like formatting the card, then downloading and renaming the files needed to get started?
Packing the files into the app is going to make the app big. I like this whole idea though.
when you flash the .nbh it does a wipe on its own so one would need to re-download the app after that unless you can get it to stick somehow, i like the idea, is each button of the app just running a script? like to get the dreaimg.nbh have a script that runs:
"$wget [url to the .nbh file]
$echo 'please reboot your phone into SPL by holding the camera and power button'"
or did you have some other idea?
i like the idea but i am just not sure how easy this would be to code as i am just used to writing scripts that do everything for me.
or you could follow Kllian's advice and make a desktop program that does all this. i could easily write a script for linux that would do it, and a .bat file wouldn't be too hard either. you would just need to have adb and you could have the scipt/batch reboot the phone into recovery to do the flashing of each update.zip
pm me if you have an questions or would like me to write a script to do all this
tubaking182 said:
when you flash the .nbh it does a wipe on its own so one would need to re-download the app after that unless you can get it to stick somehow, i like the idea, is each button of the app just running a script?
Click to expand...
Click to collapse
tubaking brings up a good point.
I have an idea that possibly could resolve the "wiping" issue. What you do is, the initial app would be placed on the desktop (assume RC30). From here you'd downgrade the firmware to RC29.
The problem is though, the app you are scripting will be wiped. SO...
How about saving it on the SD temporarily.
THEN modifying the .nbh file to restore the <rooting app> to desktop (from SD)
Just throwing some stuff out there.
IF you need some help, hit me up.
if anyone knows how to convert a .sh bash script from linux to a .bat batch file for windows then i already have the script written, send me a PM to get it. or we could port it into java, but i don't know how to do that stuff. tomorrow i will upload my script onto 4shared and provide a link here as long as it works. keep in mind that i am on a linux machine and my script will not work in M$ windows. i don't know a damn thing about mac, so i have no idea if this will work or not for them.
my script is nearly completely automated, the only thing you need to do is hit ENTER a few dozen times, i will also write a completely automated one that sleeps rather than waits for you to hit enter, but it will take longer to run most likely since i will have to oversetimate the sleep time.
hopefully i can find a windows machine and learn what commands in the cmd are equal to the commands in my terminal
akapoor said:
tubaking brings up a good point.
I have an idea that possibly could resolve the "wiping" issue. What you do is, the initial app would be placed on the desktop (assume RC30). From here you'd downgrade the firmware to RC29.
The problem is though, the app you are scripting will be wiped. SO...
How about saving it on the SD temporarily.
THEN modifying the .nbh file to restore the <rooting app> to desktop (from SD)
Just throwing some stuff out there.
IF you need some help, hit me up.
Click to expand...
Click to collapse
modifying ,nbh files is no easy task, i tried it once and fortunately for many people GSLeon3 was able to help me fix my tilt. i think the .bat or .sh would be the easiest way to root your phone
Tubaking,
Send over the file you have. Ill work on converting it to a .bat, useable from windows.
Email : akapoor92_at_gmail.com
I should have it soon, but since its like 3:30am here, I'm off to bed. Haha
tubaking182 said:
modifying ,nbh files is no easy task, i tried it once and fortunately for many people GSLeon3 was able to help me fix my tilt. i think the .bat or .sh would be the easiest way to root your phone
Click to expand...
Click to collapse
Uh, you'd not only need to modify the nbh file, but you'd also need to sign it with the Google OTA keys - otherwise the phone will refuse to flash it.
If it were possible to create Google-signed nbh files we'd dispense with all this downgrading nonsense and just create an nbh of the latest JF firmware with root and directly flash that.
The issue is that until you've patched the recovery loader the phone won't flash anything that isn't signed by Google. The reason we can get around this is that there is a leaked signed file with the old firmware version, and that version happens to contain a vulnerability that you can use to get root access. Once you have root access you can reflash the recovery loader with a new one which accepts the test keys. At that point you can dispense with the hacks and begin directly flashing whatever you want.
In any case, rooting a phone is serious enough of a matter that we probably shouldn't be encouraging anybody who can download an app to do it. They should at least have some confidence in reading and following obscure instructions online, because of anything goes wrong later that is what they'll be doing...
Thanks for all your input. I have been trying to hold hand people through the root process and it is a real pain. Biggest issues are people not being able to unzip files correctly, rename files correctly, and the biggest thing is the recovery.img step and typing in the commands.
- .nbh cannot be patched because it is signed.
- yes my app will get wiped because of the .nbh flash. It does tell the user to reinstall this app once done with the .nbh step and then continue
- i prefer an android app, so people can do it without a computer and without having to install the sdk
- the app does not run a script to get the files. it uses some android sdk functions to download files. it does use the unzip linux command to unzip, not sure if this will work because of permissions, i may have to figure out how to do it from the sdk. the app does run a script to do the recovery.img step, during this step we should already have root so no issue there with permissions.
Biggest problem I see is Fat32 format I heard it is not absolutely necessary. Does anyone have any more information about why this needs to be done?
it IS necessary, you need the card formatted in order to do the NBH flash, after that you should be ok. most card come formatted in the box they came in so anyone that said they didn't need to format their card is lying because is was already formatted to fat 32
in the RC29 firmware is there a su command in /system/bin/ or are all commands run as root without having to call /system/bin/su ??
moussam said:
in the RC29 firmware is there a su command in /system/bin/ or are all commands run as root without having to call /system/bin/su ??
Click to expand...
Click to collapse
from what i've read, in the RC29 version andything you type on the home screen gets put through a root shell as well all on it's own
I have a feeling whoever makes this app is going to sell iot for a ridiculous price on the market
My script is written but requires the user to do certain things, later I hope to have it be completely automated after a certain point and it will be free. After I get it written in linux shell I will be converting it to use in windows. Expect my automated root to be available for download by the weekend.
I got the app pretty close to done. I hope to put something up tonight or tomorrow that you guys can test. I am not going to charge for this app, I want to give it for free so everybody can have root and a more rich experience.
The place were I am stuck right now is the unzipping of the DREAIMG.NBH file from its zip file after it is downloaded. I am using java.util.zip I am not sure if the problem is because the file is so big or if I am doing it wrong. does anyone have an android java unzip code snippet?
The app now downloads files for you and unzips them if needed. THere is an issue with the unzipping though, after around 25 MB of unzipping DREAIMG.NBH i get this error...
java.io.IOException at java.util.zip.InflaterInputStream.read(InflaterInputStream.java)
anybody have any suggestions? Is their not enough memory to unzip the files or something?
For now I am not going to let the .nbh file be zipped up. THe app instead will have to download the full uncompressed .nbh file.
So it is ready to be tested, if you want to try it out PM me, I do not want to just post it and have everybody use it until it has been tested more.
Good news the app works on downloading the .nbh file and then flashing you to RC29. It then successfully downloads the recovery.img and hardspl update.zip
I had someone testing it and when they ran the recovery script the mount command gave them mount: operation not permitted. Is this correct? I know without root it is supposed to give you mount: permission denied.
If this is correct the app is working, and I just need someone else to confirm.
Mike
Does anybody else want to help with the coding of this project? If so create an open-source repository and I will add the current source in there.

[help]anybody can tell me how to convert official ROM to update.zip

anybody can tell me how to convert official ROM to update.zip
I want to know how to make an official from the ROM can customize the ROM, instead of only at others do the update.zip in thickening delete...
First, you need to run the RUU.
Check in your system TEMP folder, and you should have an update.zip there.
Unzip that, and you'll have amongst others, system.img
Extract the files via unyaffs or other means, customize your build, zip and sign.
Voila.
My guess is that a simple search via the search tool would've resolved that, then again, I guess you were too lazy to do that.
adwinp said:
First, you need to run the RUU.
Check in your system TEMP folder, and you should have an update.zip there.
Unzip that, and you'll have amongst others, system.img
Extract the files via unyaffs or other means, customize your build, zip and sign.
Voila.
My guess is that a simple search via the search tool would've resolved that, then again, I guess you were too lazy to do that.
Click to expand...
Click to collapse
I have get the system.img, but I don't know what tools and methods reduction system.img to update.zip file format,can replace programs self.
Can you explain it step by step?
He actually told you in the post above to use unyaffs, all you need to know is already in this forum if you search for it. Here's a thread to get you started:
http://forum.xda-developers.com/showthread.php?t=566235
thanks , i went to see

[newbie] How to for customizing a given Android firmware ?

Hello
I own a Chinese phone with a lot of unneeded applications.
Fortunately, the maker has given the .zip software to flash it.
I'm able to open and mount on my Ubuntu computer the .img files and I can see the .apk I would remove. So far so good.
But I bet it is not that easy....
I've tried searching but all I can find is for flashing back the ROM and not about making it.
I would also like to add an su binary at the correct place ...
So I would like to find some documentation for packing back the software and flash it to the device. An How TO would be great and/or some documentation about the process.
Many thanks in advance for your help !

General Modding your Joying/FYT SC9853i unit without root

See title: Only for SC9853i Joying/FYT 8.1 units.
Due to some changes in the flashing process since the previous PX5 and Sofia 3GR models it is now partly possible to mod your unit without root.
Some info to start with:
(partly from 4pda, partly from a "hint" from @julien_blanche, mostly from own knowledge)
Contents of a firmware zip:
Code:
6521_1.zip # The zip that contains the boot.img; the system/vendor/oem partitions and a few other things.
Allapp.pkg # Special file that contains all FYT apps (actually a special XAR archive.)
config.txt # file comparible to the build.prop which can contain additional properties
lsec6521update # The binary that really does the update
oem # Folder containing some additional apps
Stm32ud.bin # The MCU binary. It is not always in every firmware
updatecfg.txt # Contains instructions for the flashing process
crruptoff # Special file for "WiFi only". Not in the normal firmwares. Be careful!
Some commands that can be put inside updatecfg.txt
Code:
twipe_all # Wipe entire system
twipe_data # Will wipe data partition (but not /sdcard, internal memory). Wiping the /data partition will wipe all config, all 3rd party apps and updates of system apps. This is the same as a "reset to factory defaults"
twipe_sd # Will wipe internal memory /sdcard (but not the data partition)
dellapp # Remove all 3rd party apps
make_updates # Make an upgrade U-disk boot file
test # test unit and firmware before flash
Some properties that can be put inside config.txt. Say you live in Brazil and you want your locale settings immediately on Brazil, you can add that, for example:
Code:
ro.product.locale = pt_BR
The file crruptoff:
If you have a unit with a 4G module, but you don't have 4G (or don't want to use it), you can use this file. Put one line in this crruptoff being "fixwifi" and save it to the sdcard/usb-stick you use for flashing.
You can use it to get rid of the "No SIM" notification in your notification bar. Does not work anymore on the later firmwares. Chances are minimal but maybe it might work again "some day".
The Allapp.pkg
The Allapp.pkg file is a special XAR archive with a directory structure. You can use ApkPack.exe to create or extract it.
Folder path: This is where your files are being extracted to, or packed from
File path: This is the file that is being created (packed), or where the files are extracted from.
All apks (*.apk) and all libraries (*.so) will be installed as system apks and libraries, which means you can't uninstall them, but on the SC9853i units they are installed under /oem and not under /system.
Inside this Allapp.pkg you will also find two other files: fyt.prop and skipkillapp.prop.
The fyt.prop is identical to the build.prop but gives the option to add extra properties or replace/modify properties in the build.prop.
The skipkillapp.prop contains apps (package names) with values from -15 to 15.
When going into "deep sleep" the packages not mentioned in this list will be killed. Applications in this list with positive values will absolutely be killed (unstable otherwise??). The ones with higher values first. The ones with values 1 and 0 as last, where the app with value 0 will be the last killed before going into deep sleep.
The apps with negative values are considered system apps and will not be killed. In this case the most negative number (-15) has the highest priority. My assumption (not tested, not verified) is that negative numbers approaching 0 might be killed if the system needs the memory?
So in other words: If you do not want that some of your apps are killed, you can add them to this "skipkillapp.prop" by their package name. Say you use @realzoulou's DAB-Z app, you would add a line for DAB-Z (com.zoulou.dab). Or for example if you are a Tasker user, which is normally killed as well:
Code:
com.zoulou.dab = -10
net.dinglisch.android.taskerm = -10
(I would suggest not using values like -15, -14, -13 to make sure you do not really interfere with the real system apps).
And then you need to add this file to your own allapp.pkg
The lsec_updatesh folder and lsec.sh script
Practical applications:
Making patches, an alternative to creating the Allapp.pkg package.
Work on all folders in the unit (which Allapp.pkg cannot do).
Delete unnecessary files or applications (who uses the calculator app?), or overwite files like the fyt.prop or others.
Modify/overwrite config files that are otherwise not modifiable (like bluetooth config?)
Setting properties that normally require root/admin rights.
Creating backups of your partitions using the dd command. This can be handy on a device for which you do not have a firmware yet as backup.
Rooting your unit, also if you do not have a firmware from your supplier.
Make a Custom ROM by simply doing all kind of modifications after the "normal" firmware flash.
See for more info about the "The lsec_updatesh folder and lsec.sh script" in post #228.
Creating an Allapp.pkg and flash it to your device (post #2)
Some pre-build flashable images (post #3)
And if everything goes wrong and your unit ends up in a boot loop or doesn't get past the boot logo. (post #4)
Creating an Allapp.pkg and flash it to your device
Use the (English) version of ApkPack.exe (english version attached) to unpack/repack an Allapp.pkg. (It also works with wine on Linux/MacOS)
(See this youtube link for a really quick & dirty (and unsharp, sorry) video about what scrolls on your screen when flashing such a mini Allapp.pkg)
(1) Quick example:
Create a folder Allapp
Copy some wanted apks or mods into the folder.
Use the ApkPack.exe to create the Allapp.pkg
Simply copy the "Allapp.pkg" and "lsec6521update" onto a clean FAT32 formatted SD-card or USB-stick.
Put the USB-stick into your unit and it will recognise the update and flash it to your unit.
Other options:
Copy the "Allapp.pkg", (optional) "updatecfg.txt", (optional) "config.txt" and "lsec6521update" onto a clean FAT32 formatted SD-card or USB-stick.
In my case having a 4G unit without using 4G and wanting to use Google Assistant for calls: Copy the Allapp.pkg, config.txt (see above), crruptoff (see above) and lsec6521update onto a clean FAT32 formatted USB-stick.
Note that when NOT using an updatecfg.txt, nothing will be wiped on your unit. Only added/replaced.
(2) Another example:
Create folder Allapp on your pc/laptop
add (2019-08-14) main server mod with extended navi_app.txt and "BT to background" hacks. (see my github repo. Be careful to choose the one for your specific firmware date)
add BW-RDS radio mod (see my github repo. Only choose version for Android 8.1 if you want full functionality)
add oandbackup (dk.jens.backup_305.apk) (Free and open source backup restore apk)
add latest MagiskManager-v7.3.2.apk
Use apkpack.exe (attached) to create a new Allapp.pkg by selecting the folder to be packaged, the name of the file being Allapp.pkg, and select button "Packed" (sloppy translation from Chinese)
Copy created "Allapp.pkg" and "lsec6521update" onto a clean FAT32 formatted USB-stick.
Insert in your unit and the flashing process will start (Note: It will mention "Setting to factory defaults" before flash reboot, but it is really not doing that)
After the (very quick) flash and normal reboot, you will have 2 new apps and 2 modded apps.
(3) Example for a FYT compatible SC9853i, like a Sinosmart or Zhan or "unnamed":
You can also create your own Allapp.pkg, also with a modded Joying apk as the apks are actually identical, but there is one big naming issue to take into account!
Even though the apks are identical having the same package name, they have different apk names. A normal install will check for the package name and replace the apk with that same package name, whatever its apk name (think of versions or build time stamps behind the the "normal" name). The flashing method simply looks at the apk name and will create an /oem/app/<apk_name>/<apk_name>.apk. In this case versions numbers of build timestamps will create again and again a new folder with the exact same apk and none will work.
As an example for the radio app:
Joying: 190043001_com.syu.radio.apk
Sinosmart: 190042001_com.syu.radio.apk
"Some" unbranded: 190101001_com.syu.radio.apk
Again: The apks are exactly the same but have a different name. If you simply flash one next to the other, both will not work anymore as both have the same internal package name being "com.syu.radio". So you have no radio at all.
So, how to create an Allapp.pkg with a modded Joying apk for your FYT compatible SC9853i unit?
Check the name of your unit's radio app (or BT, Video, Music app). (If you don't know how you can use my HWGet_info.apk and open the resulting HWget_info.zip and look inside the "oem_listing.txt")
Find the name of the modded Joying app.
Rename the modded Joying app to the name of your app. So for example for Joying-> Sinosmart radio app: rename 190043001_com.syu.radio.apk to 190042001_com.syu.radio.apk (Joying to Sinosmart)
Create a folder Allapp
Copy the modded and now renamed Joying radio apk into the folder (repeat if relevant for other mods).
Use the ApkPack.exe to create the Allapp.pkg
Simply copy the "Allapp.pkg" and "lsec6521update" onto a clean FAT32 formatted SD-card or USB-stick.
Put the USB-stick into your unit and it will recognise the update and flash it to your unit.
Also create an Allap.pkg for your original app so you can always flash back the original app if you want (or need) to.
Some pre-build flashable images
Only for real Joying SC9853i units. Other FYT compatibles are not supported.
All SC9853i FYT models are actually the same, but boot images are mostly different and apks have different names. In the latter case you would have 2 identical apks with the same package name, but with a different apk name residing in different folders. Neither of them will work anymore as Android doesn't know which one is the correct one.
The zips that can be found in this post can be directly unzipped to a clean, empty Fat32 formatted USB-stick or SD-card. You do not need to be rooted and you don't need my JET apk.
When this USB-stick or SD-card is inserted into your unit, the unit will recognize it as a flashable firmware and start flashing the files to your unit.
Notes:
These flashable firmware files will leave all your installed apps and settings as they are. Only the files in these Allapp.pkg files will be overwritten.
The zips containing boot images will only overwrite the boot image. All apps and settings remain as they are.
The "combi" zips are just combinations of possible mods and/or boot images. They behave the same as the previous two.
The zips that can be downloaded from this post are all on one of my github repositories. You can find it here: SC98531BinRepo.
----------------------------------------------------------------------------------------------------------------------------------------------------------------
Boot images
2019-11-28 | 20191128-rooted-boot-image (thanks to @rigattoni) | 20191128-normal-boot-image
2019-09-17 | 20190917-rooted-boot-image | 20190917-normal-boot-image
2019-08-14 | 20190814-rooted-boot-image (thanks to @julien_blanche)
----------------------------------------------------------------------------------------------------------------------------------------------------------------
Main server apk mods (the 190000000_com.syu.ms.apk)
The ORG version is the apk as delivered by Joying in their firmwares.
The ORG_extended is the Joying one including an extended navi_app.txt, extended player_app.txt, extended navi_audio_from_playstatus.txt.
The NoKill is the extended version where the normal functionality to kill all apps when going into "deep sleep" (turn of ignition), has been disabled.
2020-04-07 | 2020-04-07-com_syu_ms-ORG | 2020-04-07-com_syu_ms-ORG_extended | 2020-04-07-com_syu_ms-nokill | ( Zips, modified smali files, modified assets text files, some info)
2019-11-28 | 2019-11-28-com_syu_ms-ORG | 2019-11-28-com_syu_ms-ORG_extended | 2019-11-28-com_syu_ms-NoKill | ( Zips, modified smali files, modified assets text files, some info)
2019-09-17 | 2019-09-17-com_syu_ms-ORG | 2019-09-17-com_syu_ms-ORG_extended | 2019-09-17-com_syu_ms-NoKill | ( Zips, modified smali files, modified assets text files, some info)
2019-08-14 | 2019-08-14-com_syu_ms-ORG | 2019-08-14-com_syu_ms-ORG_extended | 2019-08-14-com_syu_ms-NoKill
----------------------------------------------------------------------------------------------------------------------------------------------------------------
Other mods
There are currently two mods for the radio: One very nice one from user @Soiski71 and one which I made.
The ORG version in this case is the one delivered with the Joying firmwares.
Radio | SC98531-Radio-ORG | SC98531-Radio-Mod (preview) | SC98531-Radio-Mod-Soiski71 (preview)
----------------------------------------------------------------------------------------------------------------------------------------------------------------
Combinations
These are combinations of above files which I found useful. Undoing them can be done by using one of the above ORG zips.
2019-09-17 | 2019-09-17-radio_mainserver | 2019-09-17-rootedboot_radio_mainserver
If everything goes wrong and your unit gets in a boot loop or stops on boot logo
- Download a fresh firmware from the Joying blog.
- Unzip it to an SD-card/USB-stick (as normal)
- Put the USB-stick/SD-card in your unit and "push" the Reset (RST) with a paperclip or something like that. When the boot logo appears, reset the unit again. Now the flashing process should start.
surfer63 said:
See title: Only for SC9853i Joying/FYT 8.1 units.
Due to some changes in the flashing process since the previous PX5 and Sofia 3GR models it is now partly possible to mod your unit without root. (A custom Rom might be the next step, but I have my Joying 9853i unit only 3 days now.)
Click to expand...
Click to collapse
So you bought a 9853i unit finally, congratulations with your new unit and thank you for joining us with intel platform. I guess head unit currently on your bench not on your car ? Is this transformation only for developing purposes or after some time you are going to put it inside your car ?
Anyways thank you for your detailed guide, hope it continues
julien_blanche said:
So you bought a 9853i unit finally, congratulations with your new unit and thank you for joining us with intel platform. I guess head unit currently on your bench not on your car ? Is this transformation only for developing purposes or after some time you are going to put it inside your car ?
Anyways thank you for your detailed guide, hope it continues
Click to expand...
Click to collapse
Actually Joying asked me to test the unit, do some bug tracing/finding and write a review. I requested a VW unit with a universal motherboard as my Skoda does not have SWCs, so I needed an external resistance-based SWC "thingy". Those do not work with the VW canbus motherboards. So they did send me such a "custom" unit. I only needed to pay the import taxes being 63 euros. I consider that a good bargain for a new unit. As far as I can see/check I have one with an IPS-screen. The screen is absolutely fabulous, the best I've ever seen, and with 10.1" quite big (I've seen small cars with smaller windscreens )
I got it Tuesday evening. Did some tests on the bench and installed it on Thursday in the car. Drove some 30 km Friday and did the above mentioned flashing ("another example") this morning.
So far, so good.
surfer63 said:
Actually Joying asked me to test the unit, do some bug tracing/finding and write a review. I requested a VW unit with a universal motherboard as my Skoda does not have SWCs, so I needed an external resistance-based SWC "thingy". Those do not work with the VW canbus motherboards. So they did send me such a "custom" unit. I only needed to pay the import taxes being 63 euros. I consider that a good bargain for a new unit. As far as I can see/check I have one with an IPS-screen. The screen is absolutely fabulous, the best I've ever seen, and with 10.1" quite big (I've seen small cars with smaller windscreens )
I got it Tuesday evening. Did some tests on the bench and installed it on Thursday in the car. Drove some 30 km Friday and did the above mentioned flashing ("another example") this morning.
So far, so good.
Click to expand...
Click to collapse
cool !! welcome to the joying club !!!!
this seems to be an fantastic tweaking guide...altough too complicated for me
is it possible maybe, to have some "already cooked" files that can only be applied easily?
thanks
thierry34 said:
cool !! welcome to the joying club !!!
Click to expand...
Click to collapse
Thanks , but this is my 3rd Joying, actually the 4th as I once had a hard-bricked motherboard.
I now switched from a Joying PX5 to a SC9853i.
mclaudio said:
this seems to be an fantastic tweaking guide...altough too complicated for me
is it possible maybe, to have some "already cooked" files that can only be applied easily?
Click to expand...
Click to collapse
To be honest: i don't think it is complicated at all to do this yourself if you only want to replace a few apks with modded apks.
The complexity lies in the modding of the apks, and you have to make sure you use the correct main server version mod on the same firmware version.
All Joyings follow the same release firmwares (sometimes models are released having intermediate firmwares, but when a new release is published and you flash it, they are equal again) where it would be relatively easy to make some "ready to flash" Allapp.pkg files.
Joying compatibles sometimes have slightly different file names for the apks. As the Allapp.pkg will replace or add the apk with the same name, this will give errors. You will have 2 identical radio apks when it comes to the package name, in 2 different folders. Both will not work anymore in that case. See example below
Code:
Joying Zhan
000000000_com.syu.ms.apk 000000000_com.syu.ms.apk
180043001_com.syu.music.apk 180053002_com.syu.music.apk
180043001_com.syu.radio.apk 180053002_com.syu.radio.apk
Very nice info! I just installed one of these units in my car this past couple of weeks and I'm really looking forward to making custom ROMs for them. Or at least, start with making custom APK's for the built in apps.
NRGZ28 said:
Very nice info! I just installed one of these units in my car this past couple of weeks and I'm really looking forward to making custom ROMs for them. Or at least, start with making custom APK's for the built in apps.
Click to expand...
Click to collapse
I'm also working on a custom rum. The only thing, but most important thing, going wrong is the flashing of the system partition. I sign it, I make a signed system.new.dat and then a system.new.dat.br, but it still gives a very weird error (and a soft-brick but that is easy to fix).
i want to modify the june version to add the crruptoff files and modify the skipkillapp files to test. if i flash the firmware modify, is there a solution to not erase all i have in my unit ? (twipe_data ?)
thierry34 said:
i want to modify the june version to add the crruptoff files and modify the skipkillapp files to test. if i flash the firmware modify, is there a solution to not erase all i have in my unit ? (twipe_data ?)
Click to expand...
Click to collapse
If you do NOT add an updatecfg.txt to the usb-stick, but only the lsec6521update and the Allapp.pkg, nothing will be wiped.
The stuff inside your Allapp.pkg will be added or updated. Nothing more.
Any reason to stay on the June version?
surfer63 said:
If you do NOT add an updatecfg.txt to the usb-stick, but only the lsec6521update and the Allapp.pkg, nothing will be wiped.
The stuff inside your Allapp.pkg will be added or updated. Nothing more.
Any reason to stay on the June version?
Click to expand...
Click to collapse
thanks for answer.
so, i put in usb key isec6521update, allapp.pkg only or i add the config file and the zip 6521 1 ?
stay on the june version just for test and because i really don't understand how to replace the set_rgb with apktool for the light on the side of the screen.
but i'll try the new version, for the phone call by "ok google" and to see what's different !!! and search the bugs !!!
Is it windows 7 really a requirement or i can use windows 10?
thierry34 said:
thanks for answer.
so, i put in usb key isec6521update, allapp.pkg only or i add the config file and the zip 6521 1 ?
stay on the june version just for test and because i really don't understand how to replace the set_rgb with apktool for the light on the side of the screen.
but i'll try the new version, for the phone call by "ok google" and to see what's different !!! and search the bugs !!!
Click to expand...
Click to collapse
Only isec6521update and allapp.pkg. That is if you only want to replace some apks.
mclaudio said:
Is it windows 7 really a requirement or i can use windows 10?
Click to expand...
Click to collapse
I assume you talk about rooting the unit via the Readme.rtf in the developer.zip. In that case you posted in the wrong thread as that should be discussed in the "HowTo: Root Joying SC9853i Head Unit" thread. Not in this thread which is specifically about non-rooted units.
Anyway: The Readme.rtf says Windows 7+, which means Windows 7/8.x/10
surfer63 said:
I assume you talk about rooting the unit via the Readme.rtf in the developer.zip. In that case you posted in the wrong thread as that should be discussed in the "HowTo: Root Joying SC9853i Head Unit" thread. Not in this thread which is specifically about non-rooted units.
Anyway: The Readme.rtf says Windows 7+, which means Windows 7/8.x/10
Click to expand...
Click to collapse
yes sorry. send you pm ok?
Dear @surfer63, since i am having a hard time rooting, can i kindly ask if it is possible to share the following mods for my unit?
- Expand the hosts file to prevent ads, banners, hijackers, etc
is there anyway to completly disable the build in music player ? it does not show lyrics when ask to download or show album art. i use poweramp... but when i press the button on my steering wheel it always rotates between bluetooth, video player, music player, etc....can i disable the use of build in media player and use only radio, tunein online radio, video player and power amp?
thanks in advance
regards

Rooting Samsung J4 Core - only official binaries allowed

Hello, apologies if this isn't the right place to post this question but I'm at a complete lost and I'm desperately trying to fix the device. My goal was to simply root the device.
I tried following this guide but by the end of my first run of the guide I had errors with the contacts and phone android apps. But the device still wasn't root. I attempted it again only to break the device completely. I wasn't even able to open Android Recovery and only flashing the bootloader only did I manage to to back to the recovery screen. However, from here, I am unable to flash the firmware any further. I only get a message now notifying me: "only official released binaries are allowed to be flashed".
What I'm hoping to achieve with this question is to get some direct guidance on how to resolve my current error. I've followed a few guides and thread a few threads but nothing seems 100% applicable to my issue or the device.
Using Odin3_v3.13.1 and what I think is the stock firmware for J4 (following the download links on the guides) I do the following:
Unzip the binaries with 7zip ZS to uncompressed the various files, specifically the AP, BL, CP, CSC and HOME MD5 files.
I further unzip the AP file and drag the boot.img.lz4 into lz4.exe to just give me the img file.
I run that through Magisk Manager to create a patch file (on another phone) and reupload back to the pc.
I then take the patched file and drag it into lz4.exe to just give me the img.lz4 file
I then delete the original boot.img file and select all of the files and compress into a tar archive.
OR, even without doing any of that and just straight selecting the AP file without doing the patching, I either get a straight up FAIL! (Auth) from Odin and if that doesn't happen, I get the error on the phone itself saying that "only official released binaries are allowed to be flashed".
And that's where I'm just stuck. I know there are many guides, and I tried making sure I have the best one and knowing what to do, but I think I messed something up along the lines. Any assistance would really be greatly appreciated.
Thank you.

Categories

Resources