[Android Head-Units] Psiodon:
I've been pulling my hair out trying to root customize this generic unit. It's running 6.0 that I am unable to root, cannot connect via adb and has no hardware buttons. I can get into recovery mode but without hardware buttons unable to do anything. The only thing I can think of is trying to flash recovery or something via sp flash tool. The only unit ive seen similar is the ownice c500 but it uses a bin file to flash where as this one uses a scatterfile. The units performance is nice, just really want to root and customize. More and more Chinese units are starting to ship with this cpu. Hopefully I can find a way to root this thing. I will give all available info I have in hopes someone has some clue as to an easy way to root it as every method I have tried has failed.

firmware link

http://pan.baidu.com/share/link?shareid=1719145566&uk=1448853220

mainboard manufacturer xy auto

cpu mt3561sv

mcu stm8s007

ram 2g

rom32g

# begin build properties

# autogenerated by buildinfo.sh

ro.build.id=MRA58K

ro.build.display.id=YT35XX_00000_V002

ro.build.version.incremental=1491458120

ro.build.version.sdk=23

ro.build.version.preview_sdk=0

ro.build.version.codename=REL

ro.build.version.all_codenames=REL

ro.build.version.release=6.0

ro.build.version.security_patch=2016-06-01

ro.build.version.base_os=

ro.build.date=2017年 04月 06日 星期四 13:58:42 CST

ro.build.date.utc=1491458322

ro.build.type=userdebug

ro.build.user=yhyang

ro.build.host=zx

ro.build.tags=test-keys

ro.build.flavor=full_evb3561sv_ct_66_m0-userdebug

ro.product.model=evb3561sv_ct_66_m0

ro.product.brand=alps

ro.product.name=full_evb3561sv_ct_66_m0

ro.product.device=evb3561sv_ct_66_m0

ro.product.board=

# ro.product.cpu.abi and ro.product.cpu.abi2 are obsolete,

# use ro.product.cpu.abilist instead.

ro.product.cpu.abi=arm64-v8a

ro.product.cpu.abilist=arm64-v8a,armeabi-v7a,armeabi

ro.product.cpu.abilist32=armeabi-v7a,armeabi

ro.product.cpu.abilist64=arm64-v8a

ro.product.manufacturer=alps

ro.product.locale=zh-CN

ro.wifi.channels=

ro.board.platform=mt3561t

# ro.build.product is obsolete; use ro.product.device

ro.build.product=evb3561sv_ct_66_m0

# Do not try to parse description, fingerprint, or thumbprint

ro.build.description=YT35XX_00000_V002

ro.build.fingerprint=alps/full_evb3561sv_ct_66_m0/evb3561sv_ct_66_m0:6.0/MRA58K/1491458120:userdebug/test-keys

ro.build.characteristics=default

# end build properties

#

# from device/atc/evb3561sv_ct_66_m0/system.prop

#

#

# system.prop for generic sdk

#

rild.libpath=mtk-ril.so

rild.libargs=-d /dev/ttyC0

# MTK, Infinity, 20090720 {

wifi.interface=wlan0

# MTK, Infinity, 20090720 }

# MTK, mtk03034, 20101210 {

ro.mediatek.wlan.wsc=1

# MTK, mtk03034 20101210}

# MTK, mtk03034, 20110318 {

ro.mediatek.wlan.p2p=1

# MTK, mtk03034 20110318}

# MTK, mtk03034, 20101213 {

mediatek.wlan.ctia=0

# MTK, mtk03034 20101213}

#

wifi.tethering.interface=ap0

#

ro.opengles.version=196608

#ro.kernel.qemu=1

#ro.kernel.qemu.gles=0

wifi.direct.interface=p2p0

# 2GB DRAM recommended heap

dalvik.vm.dex2oat-Xms=32m

dalvik.vm.dex2oat-Xmx=512m

dalvik.vm.dex2oat-swap=false

dalvik.vm.heapgrowthlimit=192m

dalvik.vm.heapmaxfree=8m

dalvik.vm.heapminfree=512k

dalvik.vm.heapsize=512m

dalvik.vm.heapstartsize=16m

dalvik.vm.heaptargetutilization=0.75

dalvik.vm.image-dex2oat-Xms=64m

dalvik.vm.image-dex2oat-Xmx=64m

# USB MTP WHQL

ro.sys.usb.mtp.whql.enable=0

# Power off opt in IPO

sys.ipo.pwrdncap=2

# IPO 5s timeout auto-confirm for autotest

sys.ipo.autotest=1

ro.sys.usb.storage.type=mtp

# USB BICR function

ro.sys.usb.bicr=yes

# USB Charge only function

ro.sys.usb.charging.only=yes

# audio

ro.camera.sound.forced=0

ro.audio.silent=0

ro.zygote.preload.enable=0

# temporary enables NAV bar (soft keys)

qemu.hw.mainkeys=1

ro.kernel.zio=38,108,105,16

#ro.kernel.qemu=1

#ro.kernel.qemu.gles=0

#ro.boot.selinux=disable

# Disable dirty region for Mali

debug.hwui.render_dirty_regions=false

ro.sf.lcd_density=160

# performance

ro.mtk_perf_simple_start_win=1

ro.mtk_perf_response_time=1

# Active USB adb for debug, defaultly.

persist.sys.usb.activation=yes

#

# ADDITIONAL_BUILD_PROPERTIES

#

ro.config.ringtone=Ring_Synth_04.ogg

ro.config.notification_sound=pixiedust.ogg

ro.carrier=unknown

ro.config.alarm_alert=Alarm_Classic.ogg

ro.atc_ram_optimize=0

ro.mediatek.chip_ver=S01

ro.mediatek.platform=MT3561T

ro.telephony.sim.count=2

persist.radio.default.sim=0

persist.radio.multisim.config=dsda

persist.gemini.sim_num=2

ro.gemini.smart_sim_switch=false

ril.specific.sm_cause=0

bgw.current3gband=0

ril.external.md=1

ro.mtk_cam_lomo_support=1

ro.sf.hwrotation=0

curlockscreen=0

ro.mediatek.gemini_support=true

ro.operator.optr=OP01

ro.operator.spec=SPEC0200

ro.operator.seg=SEGC

persist.radio.fd.counter=15

persist.radio.fd.off.counter=5

persist.radio.fd.r8.counter=15

persist.radio.fd.off.r8.counter=5

drm.service.enabled=true

fmradio.driver.enable=0

ril.first.md=1

ril.flightmode.poweroffMD=1

ril.telephony.mode=0

dalvik.vm.mtk-stack-trace-file=/data/anr/mtk_traces.txt

mediatek.wlan.chip=CONSYS_MT3561

mediatek.wlan.module.postfix=_consys_mt3561

ril.read.imsi=1

ril.radiooff.poweroffMD=0

ro.frp.pst=/dev/block/platform/mtk-msdc.0/11230000.msdc0/by-name/frp

ro.sys.usb.storage.type=mtp,mass_storage

ro.mediatek.version.branch=alps-mp-m0.mp1

ro.mediatek.version.release=android-trunk-m0-V1.1

ro.mediatek.version.sdk=4

ro.mtk_usb_cba_support=1

ro.mtk_gemini_support=1

persist.radio.gemini_support=1

ril.current.share_modem=2

ro.mtk_audio_profiles=1

ro.mtk_audenh_support=1

ro.mtk_besloudness_support=1

ro.mtk_bessurround_support=1

ro.mtk_bt_support=1

ro.mtk_wappush_support=1

ro.mtk_agps_app=1

ro.mtk_audio_tuning_tool_ver=V1

ro.mtk_wlan_support=1

ro.mtk_ipo_support=1

ro.mtk_gps_support=1

ro.mtk_omacp_support=1

ro.mtk_search_db_support=1

ro.mtk_dialer_search_support=1

ro.mtk_dhcpv6c_wifi=1

ro.have_aacencode_feature=1

ro.mtk_fd_support=1

ro.mtk_widevine_drm_l3_support=1

ro.mtk_eap_sim_aka=1

ro.mtk_audio_ape_support=1

ro.mtk_flv_playback_support=1

ro.mtk_wmv_playback_support=1

ro.mtk_send_rr_support=1

ro.mtk_default_data_off=1

ro.mtk_emmc_support=1

ro.mtk_tetheringipv6_support=1

ro.mtk_c2k_support=1

persist.radio.flashless.fsm=0

persist.radio.flashless.fsm_cst=0

persist.radio.flashless.fsm_rw=0

ro.cdma.cfu.enable=*72

ro.cdma.cfu.disable=*720

ro.cdma.cfb.enable=*90

ro.cdma.cfb.disable=*900

ro.cdma.cfnr.enable=*92

ro.cdma.cfnr.disable=*920

ro.cdma.cfdf.enable=*68

ro.cdma.cfdf.disable=*680

ro.cdma.cfall.disable=*730

ro.cdma.cw.enable=*74

ro.cdma.cw.disable=*740

ro.telephony.default_network=4,0

ro.mtk_svlte_support=1

mtk.md1.status=stop

mtk.md3.status=stop

ro.c2k.irat.support=1

ro.mtk.c2k.slot2.support=1

ro.mtk_shared_sdcard=1

ro.mtk_enable_md1=1

ro.mtk_enable_md3=1

ro.mtk_flight_mode_power_off_md=1

ro.mtk_pq_support=2

ro.mtk_miravision_support=1

ro.mtk_miravision_image_dc=1

ro.mtk_wifi_mcc_support=1

ro.mtk_system_update_support=1

ro.mtk_sim_hot_swap=1

ro.mtk_thumbnail_play_support=1

ro.mtk_bip_scws=1

ro.mtk_world_phone=1

ro.mtk_world_phone_policy=0

ro.mtk_md_world_mode_support=0

ro.mtk_audio_change_support=1

ro.mtk_cta_set=1

ro.mtk_mobile_management=1

ro.mtk_antibricking_level=2

ro.mtk_cam_mfb_support=3

ro.mtk_slow_motion_support=1

ro.mtk_lte_support=1

ro.mtk_umts_tdd128_mode=1

ro.mtk_cam_vfb=1

ro.mtk_rild_read_imsi=1

ro.sim_refresh_reset_by_modem=1

ro.mtk_external_sim_support=1

ro.mtk_subtitle_support=1

ro.mtk_privacy_protection_lock=1

ro.mtk_bg_power_saving_support=1

ro.mtk_bg_power_saving_ui=1

ro.have_aee_feature=1

ro.sim_me_lock_mode=0

ro.mtk_dual_mic_support=1

ro.mtk_is_tablet=0

ro.mtk_default_ime=com.iflytek.inputmethod.FlyIME

ro.mtk_ims_support=1

ro.mtk_volte_support=1

persist.mtk.volte.enable=1

wfd.dummy.enable=1

ro.mediatek.project.path=device/atc/evb3561sv_ct_66_m0

persist.mtk.wcn.combo.chipid=-1

service.wcn.driver.ready=no

service.wcn.coredump.mode=2

ro.com.android.mobiledata=false

persist.radio.mobile.data=0,0

persist.meta.dumpdata=0

ro.mtk_md_sbp_custom_value=1

ro.mtk_modem_monitor_support=1

mtk.vdec.waitkeyframeforplay=1

persist.sys.dalvik.vm.lib.2=libart

dalvik.vm.isa.arm64.variant=cortex-a53

dalvik.vm.isa.arm64.features=default

dalvik.vm.isa.arm.variant=cortex-a53

dalvik.vm.isa.arm.features=default

dalvik.vm.lockprof.threshold=500

net.bt.name=Android

dalvik.vm.stack-trace-file=/data/anr/traces.txt

ro.expect.recovery_id=0x51e89e51bfd8d731489930eb45d33472b919c593000000000000000000000000