carver

Thanks for link. I exract WinCE files and registry from you archive. F10BT - used also ARM and WinCE , but need other way for start explorer, not like F900 testmode. i can't help more, my unit f90bt, but if anybody need - it can looking WinCE files with IDA, and try found unlock way. also, possible make new WinCE image, and add Explorer ant mortscript to autostart, i do it for f900bt all working. so, files from \Windows folder of f10bt/z110 unit http://www.4shared.com/file/168089187/2 ... wince.html

try update to v3 and use testmode 2.3

2 cabose my SDMLC from my f90bt/UC, but this original backup, so, it version 2. http://www.4shared.com/account/file/105 ... 09984.html also i shared DSK1 backup, but without MAPS and RealSpeak folder http://www.4shared.com/account/file/107 ... Speak.html i just delete it, becouse it in all pioneer updates but with all other SDMLC backup - you also change you Serial Number and BT MAC address/

try check \My Flash Disk\APL2\iGo\data.zip\config\device\*. in my version, only UC/EW files. RE - also use EW update, so, no any 746RE. maybe for AU/CN(china) - need other software, and it has AU/CN, but i see only UC/EW/RE update, and in all - only UC and EW.

i try connect older AtlasMgr via USB to F90BT (need hardware switch) but DUMP NAND button disabled. i try ENABLE this button, but also no any dump. so, i tnink for NAND DUMP need JTAG connections or Uboot support with this functions.

AtlasMgr from 4pda dot ru also wce500 sdk for Sirf Atlas at440 board http://www.cpit.com.hk/file/softanddrive/GP110_SDK.msi AtlasMgr 5.8.7.rar

all working, so try format or change SD card.

if anybody need. i try attach, but give The file is too big, maximum allowed size is 2 MiB. so, please get if from 4pda.ru gps-club.ru or this link http://www.4shared.com/file/144340803/5 ... 4321_.html

1) before I delete working AVIC NAND chip SAMSUNG K9GAG08U0M, and try solder K9GAG08U0M(yes, like in avic before) and K9GAG08U0M from USB flash. but i can't format or write new WINCEIMG.BIN from Uboot. maybe I poorly solder, but i stop working, and waiting for ~10$ NAND reader/writer. i don't want pay $200 for http://www.soft-center.ru/reader2eng/ or $1000 Xeltek 3000U 2) about OEMInit - before i dump Uboot firmware, stored in Spansion AL004D70BF102, also i shared it before. So, i see OEMInit in AVIC Uboot, but i haven't manual for start it. 3) About AtlasMgr - i enable USB cl

before - i share my tesmode_2.3_SD and testmode_2.3_USB version. i don't share in topics, it only test version, but guys from WIFI topics use testmode_USB, aslo 4pda.ru - has testmode_usb, and my folder at 4shared. so, just try user search. ....also, testmode - add 10-15 seconds for AVIC boot time, so, at 4pda - i share few WINCEIMG.BIN, with MyFlashDisk\System\shell.exe file in startup, so, no need testmode, just need use mortscript at AVIC disk. you can also google it.

no. i use search at site flashboot.ru, and buy few USB flash, with samsung FLASH_ID, like in avic. so, i has 2, 4 and 8 Gb cheap chip. but when i use the same 2Gb chip, like in avic - it not work. 4 and 8 also don't work. so, i think about INIT this empty chip before using. we can do it via secret menu in UBOOT, for OEMInit procedure, i see it in firmware, but i cant enter to it, or use external flash programmer, but i haven't. so, i stop working with this case, i need more skill for this job.

so, at this moment we has only two way, for skip power up navigation warning. 1) after warning - press OK button. 2) skip warning and press MAP button. also, we has problem, for both case - we need delay with pressing, and maps or poi size interact with this delay. so, i share archive with two ways, and different delay for both way. for my avic - both way with 0s delay -- forking fine, but if solutions don't work, and you using skin or map, other from my, try select other file, with longer delay. so, all file inside http://www.4shared.com/file/140653868/1 ... _warn.html

i make new version for testing i just skip warning screen, but press MAP button. i think it better, no NAG screen, and working faster, smaller delay, but you hear sound in this case. (i set delay for 0.001 sec, for my 20 Mb masp folder - it working OK) it for 3.010100/3.020100 version. upd. i aslo go test

upd 12.10.2009, just comments mainmenu.exe v3.1 use this code for make PowerUp warning .text:0002FF0C loc_2FF0C .text:0002FF0C B0 30 9F E5 LDR R3, =_Instance_AL_MenuControl__SAPAV1_XZ .text:0002FF10 0F E0 A0 E1 MOV LR, PC .text:0002FF14 00 F0 93 E5 LDR PC, [R3] .text:0002FF18 00 30 90 E5 LDR R3, [R0] .text:0002FF1C AC 20 9F E5 LDR R2, =186A7 .text:0002FF20 01 10 A0 E3 MOV R1, #1 .text:0002FF24 0F E0 A0 E1 MOV LR, PC .text:0002FF28 04 F0 93

yes, BT stack from MS detect my BT Super Mini Bluetooth 2.0 Adapter Dongle (Vista Compatible) Price: $2.46 http://www.dealextreme.com/details.dx/sku.11866 also i try get BT stack from HP ipaq 31x (also SirfTitan), but i can't find files for USB connections.

no need touch uboot, for wince42. i add file, but for dumprom - 1) need add free zero bytes to end wince42.nb0 2) add you data to wince42.nb0 - for come case need delete or ass compress dll to dumprom folder. 3) delete free space in end wince42.nb0: 4) write new wince42.nb0 size in toc.bin 5) copy all back in WINCEIMG.BIN and fix new size and checksum in WINCEIMG.chk. and all working fine. at this moment, i looking for CSR BT driver for AVIC, for add to WINCEIMG.BIN.

sorry, but at this moment, olly for testing. becouse i only used two times.

it microsoft windows ce emulator, from MS site. you can found more about it at MS or google sites, or this forum

anybody can read Pioneer Service Manual, and help me find seÑret keys/ways for enable this screen ? i change screen_id in setting menu = system_version -> debug_menu SystemSetting_v3_debug.rar but i looking for legal ways for enable this menu. thanks.

for 3 version please use 3 version file. it also posted in first post. 2 pwnin o'brien , yes ida.

2 DarkMaster, i shared my f90 UC dump before, so, you can try use it at UC version http://www.4shared.com/account/file/105 ... 09984.html aso, i see baskup from you link, it also for UC, but also few bytes different also. but i think problem not in SDMLC, if testmode working, 1) try wrute sdmlc 2) copy winceimg to sd and write it from uboot 3) back to testmode again 4) format my flash disk, and copy any backup to it 5) try reboot and check avic.

yes. for 2.2 and 2.3 no need edit anything. region check also fixed.

also, you can use dumprom -d acivboot -5 eboot.nb0, so you extract this files dumprom -d acivboot -5 eboot.nb0, atserisr.dll binfs.dll busenum.dll ceddk.dll coredll.dll default.fdf device.exe devmgr.dll diskcache.dll fatfsd.dll fatutil.dll filesys.exe fsdmgr.dll hd.dll initdb.ini initobj.dat mspart.dll nk.exe osaxst0.dll pm.dll regenum.dll sdmlc.dll tahoma.ttf utldrv.dll wince.nls dumprom -d acivce -5 wince42.nb0 acmdwrap.dll afd.dll appdata.ini asterisk.wav asyncmac.dll atlasserial.dll atlce400.dll audevman.dll authentication.dll autoras.dll BKLCTL.CPL Calibration.exe CEATA

1) my avic is UC and i use winceimg.bin from AVIC_F-Series_Firmware_Update_2.006000.zip 2) i use WinHex and cut WINCEIMG.BIN binSize : 17340884 checksum: 0x69711813 to 4 files toc.bin, eboot.nb0, chain.bin, wince42.nb0. size for file you can get in WINCEIMG.BIN TOC. WINCEIMG.BIN binSize : 17340884 checksum: 0x69711813 toc.bin 1364 bytes 0000000000: 53 49 47 2D 42 49 4E 46 53 20 20 20 20 20 20 20 SIG-BINFS 0000000010: 4E 54 4F 43 01 00 00 00 20 30 00 00 0F 00 00 00 NTOC 0 ¤ 0000000020: 00 00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF ÑÑÑÑ 0000000030: 02 00 01

oh, dear moderator or admin, please move topic to viewforum.php?f=34 thanks.