Professional Documents
Culture Documents
System Specifications
System Specifications
1
1.1
1.2
1.3
1.4
1.5
1.6
1.7
2
2.1 MIB1
2.2 MIB2
2.3 MIB1
2.4 MIB2 Std Technisat ZR
2.5 MIB2 Technisat PQ
2.6 MIB2
3 B201A
4 USB
4.1 5G0 035 222 E
4.2 5G0 035 222 F
4.3 5G0 035 222
5 FEC /
5.1
5.2
5.3 FecContainer.fec
5.4 OBDeleven FEC
6
6.1
6.1.1 USB RJ45
6.1.2 Quadlock Rx/Tx
6.1.3
6.1.4 SD /USB POI
6.1.5
6.1.6 SD /USB
6.2 FEC
[9]
6.2.1
[10]
6.2.2
7
7.1
7.2
7.3
8
8.1
8.2
8.3
MK7 (5G)
B8
MK2
(NU)
(NS)
(5E)
(5L)
3V
5F
(5P)
Ateca
PCM4.0
MIB1
MHIG_EU_VW_K0344_1 (https://drive.google.com/file/d/1XUcUv-b0giMd_Gfx6HHRMVBupN9RgZ_8/view?usp=sharing)
MHIG_EU_VW_K1540_1 (https://drive.google.com/file/d/1iY4Q9x82q3YWuNvB7vD8fWaKwJVr1lpm/view?usp=sharing)
MHIG_EU_VW_K1550 (https://drive.google.com/file/d/1VxwluI64XIg8IiS6jCzgPad1TYIeMb0Z/view?usp=sharing)
MIB2
MIB1
3G0919360P MST2_EU_VW_ZR_P0140T
3G0919360AC MST2_EU_VW_ZR_P0252T
3G0919360GP MST2_EU_VW_ZR_P0254T
MST2_EU_SE_ZR_P0346T (https://mega.nz/file/7cQCyK5Z#NGpgXKh6pc93SwcRTJO9KvzXGRVu8tVYGEkLWINlf_s)
USB ports
There are many types of USB ports with different functionality.
AUX support
USB iOS (UI4) support
Standard Infotainment Unit (I8E) support
High Infotainment Unit (I8H) support
Android/MirrorLink support
AUX support
limited USB (UE4) support
Standard radio Gen2 (I8E) support
High Infotainment Unit (I8H) support
Android/MirrorLink support
AUX support
USB iOS (UI4) support
Standard radio Gen2 (I8E) support
Android/MirrorLink support
Legal activation
You can buy at the dealership activation codes to enable some of the SWaP features. Order it by FEC part number.
Generating FecContainer.fec
File named FecContainer.fec stores information about which codes are valid and which features should be enabled for end user. You can make your
own FecContainer.fec file and replace the original one but it will be detected as invalid since it will not be signed with proper certificate. You can bypass
this by patching the system.
MIB2_FEC_Generator.sh [1]
WhatTheFec.exe [2]
If you have generated FEC for a feature that is supported by the unit, you can use OBDeleven to upload it to the main unit. Procedure below was tested
with OBDeleven nextGen device and OBDeleven application running on iPhone.
Hacking
In some cases hacking is the only way to enable some features in some cars. For example Porsche PCM4.0 was not available from factory with Android
Auto support. Also there is no FEC for Performance Monitor if it was not enabled from the factory.
Hacking MIB2 is basically 3-step process:
1. Access filesystem
2. Replacing ifs-root.ifs with patched one
3. Replacing FecContainer.fec file with custom one
There are several methods to access MIB2 filesystem. After establishing network connection you can telnet into the device and use log in using one of
the MIB2 root passwords that matches your device.
USB to RJ45
It's possible to change VID/PID of certain popular devices and make them discoverable for example as D-Link DUB-E100 (AX88772 to DUB-E100).
Quadlock Rx/Tx
WLAN
1. Create access point with your phone (or any other device)
2. Connect your MIB2 device to this access point
3. MIB2 will get a local IP - connect to this IP using telnet on port 23
Custom update files that will inject additional custom hidden green menu screens with options to copy and replace system files. [5].
POI update file must be prepared with correct structure and checksums. [6][7]
autorun script
In Discover Pro firmware 388 it is possible to execute a script named autorun placed on USB stick [8]
If you just want to replace some file with patched ones, then you really don't need filesystem access. You can prepare custom firmware update file that
will replace said file for you.
After this you should be able to use SWaP code / FEC protected features.
How it works
Process tsd.mibstd2.system.swap[12] is looking for the file, checkes if signature is correct, then checks list of FECs inside, and use these codes as valid.
Below an example of logs with failed parsing process due to syntax error.
Files
Where files are located and how are they named in various systems: [13] [14] [15] [16] [17]
/tsd/etc/slist/signed_exception_list.txt
/HBpersistence/FEC/Exceptionlist.txt
efs-persist/etc/prodEL.txt
System update procedure at its end executes /common/tools/0/default/finalScriptSequence.sh which makes the ExceptionList.txt file overwritten
with one that does not contain any FEC codes. Line of code responsible for that is:
cp -v ${2}/common/tools/0/default/ExceptionList.txt /HBpersistence/FEC
Customization
Skins
Startup logo
Sounds
1. https://github.com/askac/PorschePCMStuff
2. http://bit.ly/whatthefec2020
3. https://www.speakev.com/threads/who-wants-to-share-his-her-discover-pro-mib2-vcds-controller-channel-map.22361/page-2#post-1241153
4. https://rennlist.com/forums/991/1049794-porsche-pcm-upgrade-hack-for-android-auto-is-this-real.html
5. https://github.com/jilleb/mib2-toolbox
6. https://github.com/jimmyH/mypois
7. https://github.com/mcaddy/audipoi
8. https://turbo-quattro.com/archive/index.php/t-23041.html
9. https://www.audizine.com/forum/showthread.php/860600-C7-5-2016-A6-(and-others)-CarPlay-Android-Auto-Activation-DIY-Guide
10. https://cartechnology.co.uk/showthread.php?
tid=56065&page=2&fbclid=IwAR1NYi3njsAcjZbXAgBVeB6gRet2VpxQHdusMtOqLtDs6Ev7o0ssbL4L-qQ
11. https://github.com/unbe/mmi-ifs
12. https://www.digital-kaos.co.uk/forums/showthread.php/724735-Mib-STD2-PQ-NAV-need-help?p=3506433&viewfull=1#post3506433
13. https://mhhauto.com/Thread-MIB2-vcrn
14. https://rennlist.com/forums/991/1049794-porsche-pcm-upgrade-hack-for-android-auto-is-this-real-9.html#post16124795
15. https://turbo-quattro.com/archive/index.php/t-24737.html
16. https://github.com/askac/PorschePCMStuff/blob/master/MIB2_FEC_Generator.sh
17. https://www.digital-eliteboard.com/threads/audi-mmi-mib2-mhi2-firmware-3634-3663-update-und-asi-apple-carplay-android-auto.480571/post-
3810164
2022
Ad MYTHERESA