Intyre

Wahoo Rival Firmware

fw.rom

Structure of the header

Found some old linkit sdk with the FOTA_MAGIC_HEADER on github.com.

File header

Size	Type	Info

Intyre

BoltApp Version=16764 Profile=STD

Name	ELEMNT	BOLT	MINI	RIVAL	ROAM	BOLT_2	ROAM_1_1	ROAM_2	ACE
MAP_ROTATE	True	True			True	True	True	True	True
SWITCH_TO_WIFI	True	True			True	True	True	True	True
SEGMENTS	True	True			True	True	True	True	True
REMOTE_UPGRADE	True	True		True	True	True	True	True	True
LED_PWR_ZONE	True	True	True		True	True	True	True	True
NEW_FIELDS_1_5	True	True	True	True	True	True	True	True	True

Intyre

=HEADER=
# Provider: WAHOO

NAME=20 Minute FTP Test
# Duration: 65 mins
DURATION=3900

# PLAN_TYPE=STRUCTURED_WORKOUT_FTP_TEST
PLAN_TYPE=1

Intyre

Config backup

The .zip contains bolt-65535.cfg, comp.cfg poi.cfg and routes.cfg

Create a directory with the name config_backup on the device, a elemnt_config.zip should appear. If not then reboot the device.

How to connect an ELEMNT, BOLT, or ROAM to a desktop or laptop computer

Create

# create special directory

Intyre

Wahoo Devices

Device	CPU
ELEMNT	MediaTek MT2601
BOLT	MediaTek MT2601
ROAM
BOLT2	Qualcomm Technologies, Inc APQ8009
ROAM2	Qualcomm Technologies, Inc APQ8009

Intyre

Wahoo VTM Map rendering

The Bolt2 uses the VTM rendering by default.

On the Other devices you can enable it by creating a file on the device with the name "cfg_BHomeActivity_VtmMaps" it will use the new rendering method. Another file with the name "cfg_MapPanZoom" enables panning and zooming on the map.

Custom themes

Create a new file in "maps/vtm-elemnt" with the name "vtm-elemnt.xml". You can copy the latest theme from https://gist.github.com/Intyre/7494d5c6c86b5bc60ce4d03b9cfce2df

Intyre

<?xml version="1.0" encoding="UTF-8"?>
<rendertheme xmlns="http://mapsforge.org/renderTheme" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="renderTheme-v4.xsd" version="4" map-background="#FFFFFF" map-background-outside="#FFFFFF">

    <!-- render land above water -->
	<rule e="way" k="natural" v="sea">
		<area src="assets:assets/patterns/halftone2.webp"/>
	</rule>

	<rule e="way" k="natural" v="nosea" >
		<area fill="#FFFFFF"/>

Intyre

Wahoo map creation

Tools

• Java
  • set JAVACMD_OPTIONS="-Xmx2g" or other memory size when osmosis starts to complain.
• [osmium][12] for filtering and splitting .pbf files
• [osmosis][1] for splitting .pbf and creating .map files
  • [mapsforge-map-writer][9] plugin for osmosis to create .map files
• [osmfilter][2] for filtering pois and ways
• [osmconvert][3] for converting .pbf and .o5m files

Intyre

Wahoo Elemnt - Tips, tricks and custom images

TOC

• Wahoo bike computer hardware
• Firmware
  • Changelogs
  • BoltLauncher
• Enable ADB
• Tips and Tricks
• Config backup

Intyre

/Users/Intyre/.pythonenv/frida/bin/python /Users/Intyre/git/github.com/Intyre/corsair-firmware-reversing/markdown.py

Memory mappings

Name	Start	End
[128 kB on-chip flash]	0x0000 0000	0x0002 0000
[reserved]	0x0002 0000	0x1000 0000
[8 kB SRAM0]	0x1000 0000	0x1002 0000
[reserved]	0x1002 0000	0x1FFF 0000
[16 kB boot ROM]	0x1FFF 0000	0x1FFF 4000