# device-reveng: rebuilding a Choiceway GT6-EAU head unit stack

> device-reveng investigates a Choiceway GT6-EAU Android car head unit and rebuilds its launcher and operating-system layer. Findings on OEM applications, AIDL interfaces, camera behavior and the MCU serial link support a Kotlin/Compose launcher and Riposte OS images assembled from the owner's firmware backup.

- Type: Case study
- Targets: App · Firmware · Protocol
- Category: Independent reconstruction cases
- Relationship: Independent reconstruction project
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-09
- Original resource: <https://github.com/armeehn/device-reveng>
- Primary source: <https://github.com/armeehn/device-reveng/blob/b5c07f620efbe7f615f0c36d87cae5fa9f4dfafa/README.md>
- Catalog page: <https://awesomerea.org/resources/device-reveng-head-unit-case/>
- Record JSON: <https://awesomerea.org/resources/device-reveng-head-unit-case/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/device-reveng-head-unit-case/index.md)

## Requirements & limits

- **Prerequisites:** A Choiceway or AiNavi GT6-EAU unit; the documented configuration uses QCM6125 and Android 13 stock firmware.
- **Prerequisites:** JDK 17 and Android SDK platform 34 to build the launcher.
- **Limits:** Riposte OS requires a backup of the unit's own firmware; some car checks remain pending.
- **License:** Apache-2.0.

## Primary sources

1. <https://github.com/armeehn/device-reveng/blob/b5c07f620efbe7f615f0c36d87cae5fa9f4dfafa/README.md>
2. <https://github.com/armeehn/device-reveng/blob/b5c07f620efbe7f615f0c36d87cae5fa9f4dfafa/FINDINGS.md>
3. <https://github.com/armeehn/device-reveng/blob/b5c07f620efbe7f615f0c36d87cae5fa9f4dfafa/LICENSE>

## More in Apps

- [VTech Baby Pro Bridge: reconstructing local camera streaming](https://awesomerea.org/resources/vtech-baby-pro-bridge-case/index.md) · Case study
- [Reengineering Project for ibisPaint: investigating artwork and brush formats](https://awesomerea.org/resources/reeng-ibispaint-case/index.md) · Case study
- [caniOn Rebirth: reconstructing the Mitsubishi ZEV CAN client and protocol](https://awesomerea.org/resources/canion-rebirth-case/index.md) · Case study
- [AionLink Open: investigating ICCOA CarLink connectivity for the GAC AION i60](https://awesomerea.org/resources/aionlink-open-case/index.md) · Case study
- [claude-peer: reconstructing Claude's local peer IPC](https://awesomerea.org/resources/claude-peer-ipc-case/index.md) · Case study
- [Nona: reconstructing Redmi Note 10 Pro Max camera remosaic conditions](https://awesomerea.org/resources/nona-camera-remosaic-case/index.md) · Case study

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.
