YI Action Cam Z25L

YI Action Cam

• SN Z25L
• FW 1.5.12

wifi STA mode

• https://dashcamtalk.com/forum/threads/camera-wifi-in-client-mode-working-ash-script-inside.12239/
• https://github.com/reaper7/XIAOMI_YI_MODE_SWITCH

does not work as expected

• connecting works fine
• telnet :7878 command mode does not (second photo capture fails)

{"msg_id":257,"token":0}
{ "msg_id": 7, "type": "vf_stop" }
{ "msg_id": 7, "type": "vf_stop" }
{ "rval": 0, "msg_id": 257, "param": 1 }
{"msg_id":769,"token":1}
{"rval":0,"msg_id":769}
{"msg_id":769,"token":1}
{"rval":-21,"msg_id":769}

• expected output:

{"msg_id":257,"token":0}
{ "msg_id": 7, "type": "vf_stop" }
{ "rval": 0, "msg_id": 257, "param": 2 }
{ "msg_id": 7, "type": "vf_stop" }
{"msg_id":769,"token":2}
{"rval":0,"msg_id":769}
{ "msg_id": 7, "type": "start_photo_capture" ,"param":"precise quality;off"}
{ "msg_id": 7, "type": "precise_capture_data_ready" }
{ "msg_id": 7, "type": "photo_taken" ,"param":"/tmp/fuse_d/DCIM/100MEDIA/YDXJ0089.jpg"}
{ "msg_id": 7, "type": "vf_start" }
{"msg_id":769,"token":2}
{"rval":0,"msg_id":769}
{ "msg_id": 7, "type": "start_photo_capture" ,"param":"precise quality;off"}
{ "msg_id": 7, "type": "vf_stop" }
{ "msg_id": 7, "type": "precise_capture_data_ready" }
{ "msg_id": 7, "type": "photo_taken" ,"param":"/tmp/fuse_d/DCIM/100MEDIA/YDXJ0090.jpg"}
{ "msg_id": 7, "type": "vf_start" }

• firmware.avtive.log (failed second photo capture)

[01991772]
app_boss_msg_receiver:AMBA_TAKE_PHOTO
[...]
[01991773]
Entering before_record_capture_sd_check:

[01991773]
app_card_check_video_record: 1262 current active card size: 63864

[01991773] [DemoLib - Card] Check: CARD_CHECK_WRITE
[01991773] [DemoLib - Card] <app_card_status_check> rval = 0
[01991773]
Exiting before_record_capture_sd_check: rval:0

[01991773]
rec_sport_dv_button_boss_shutter: 1644 system status busy,not handle button shutter

[01991773] @@@ Send to Linux(0x00000015)
[01991776] QQQQQQ case AMSG_STATE_WIDGET_CLOSED 0,1991776
[01991776] app_rec_sport_dv_on_message: AMSG_STATE_WIDGET_CLOSED
[01991777] QQQQQQ func REC_SPORT_DV_STATE_WIDGET_CLOSED 0,1991776
[01991777]
rec_sport_dv_func: 8295 REC_SPORT_DV_STATE_WIDGET_CLOSED

works as expected (DHCP only)

(modded https://github.com/reaper7/XIAOMI_YI_WIFI_SWITCH)

• edit and copy TMP.WIFI.CONF to /tmp/fuse_d/MISC
• edit and copy wpa_supplicant.conf to /tmp/fuse_d/MISC
• copy wifi_set.sh to /tmp/fuse_d/SCRIPTS
• edit autoexec.ash lu_util exec '/tmp/fuse_d/SCRIPTS/wifi_set.sh 1'
• boot and start wifi manually or set { "start_wifi_while_booted": "on" }

injecting ambarella shell commands on running system

• https://dashcamtalk.com/forum/threads/xiaomi-yi-share-your-scripts-and-settings.12707/page-11#post-214957
• https://github.com/reaper7/XIAOMI_YI_MODE_SWITCH/blob/master/autoexec.ash
• https://github.com/jnordberg/yichan/blob/master/src/ambsh.coffee

triggering multiple cameras

• general
  • https://dashcamtalk.com/forum/threads/xiaomi-yi-genlock-multiple-cameras.12175/
  • via telnet:7878 = delay!
  • via bluetooth
  • via usb
  • via hdmi
• stills (via telnet:7878)
  • https://github.com/deltaflyer4747/Xiaomi_Yi
  • http://bluestudios.co.uk/Brahma
  • https://github.com/luckylz2git/Ponerine
• moving target/camera
  • https://github.com/Stefal/V4MPod (hardware trigger)
  • scripting: ntp time sync plus trigger at specific time (still has a delay)

see also

• https://gist.github.com/SkewPL/f57e6cff7fa14601f6b256926aa33437 (Xiaomi Yi JSON Protocol Reverse Engineering)
• https://github.com/PJanisio
• https://github.com/jnordberg/yichan/issues/1
• https://www.ifixit.com/Guide/Xiaomi+Yi+Motherboard+Replacement/50601
• http://dc.p-mc.eu/