carver

please test at your at UC 2.006 avic, and post result.

i think it also work at EW 2.007 avic, but i don't test it, my avic UC.

---------------------------updated

for WinCE v.6.1.7.2, in 2.6UC/2.7EW version, for avic-f90/f900/f700

region chech(MapDBInfo.txt) fixed also.

Testmode_v2.3.rar

2 FourG, i naven't time for answer at this moment, and my english very very bad

but i find other way for fix navi warning, and i just go test is,

so, if anybody want test with me, please return original mainmenu.exe,

and repleace CommonLib.dll from this attachment.

avic_uc_v2_navi_warning_fix1.rar

sorry, at this moment i don't fix parking brake warning, i try it later, but need time,

or anybody can compare attachment with original file and try do it.

upd 03.07.2011 update for 4.001000 version

1) fixed CommonLib.dll for MAP button or map icons, and no parking warning

2) fixed MainMenu.exe - only for power-up warning, via press MAP button after two seconds

(need fixed CommonLib.dll for work, delay in hex ms - can change at 0x4ABA4 offset)

3) fixed SystemSetting.exe - for Pioneer DEBUG MODE in System Information tabs

4) fixed Av.exe, Video.exe for parking camera warning

5) fixed Tel.exe - for disable switch to map when call

6) fixed ezrider.exe 8.3.2.188283, like as before.

AVIC_F900BT_4001000_fixpack1.rar

please, just for testing, for general using - please wait feedback.

upd 15.12.2009 update for 3.020200 version, UC or EW.

fixed CommonLib.dll for MAP button or map icons, and no parking warning

fixed MainMenu.exe - only for power-up warning, via press MAP button after two seconds

(need fixed CommonLib.dll for work)

fixed SystemSetting.exe - for Pioneer DEBUG MODE in System Information tabs

AVIC_F900 v322 nowarn.rar

upd 29.12.2010 update for 3.020200 version, UC or EW

with a new phone call - AVIC always switch to MAP screen.

i attach modified \My Flash Disk\APL\Tel.exe,

after his replacement, when an incoming call on AVIC remains an old window.

This is a test version, since I do not use the phone with AVIC. (please leave feedback about problems)

avic_f900_v322_Tel.exe_wo.map.rar (required to rewrite and restart)

old post:

my f90bt always show me error screen, so, i always need press OK twice.

i don't understand, how to disable both nag screen.

for first - i can edit speed setting in config file, but for second error - no any way at search.

so, i found 3 screen for navi warning at my avic

map

destination

setting->navi

but in avic software i just found and skipped only first two screen,

also my avic UC (US) version, so it can tested only at UC software.

guys, if anybody has time, please test. thanks.

293 MSG_14_00_00_01    NS_STR_MSG_14_00_00_01 System detected improper connection of Parking Brake lead. Please check your configuration for safety. Please see Operation Manual for more information regarding safe operation. 
513 MSG_13_02_01_02   NS_STR_MSG_13_02_01_02 This Navi product is intended solely as a driving aid. Review instruction manual and select route before driving. Navi is not a substitute for your attentiveness, judgment, and care while driving or moving your vehicle.  Always observe safe driving rules and driving laws, and follow road signs even if they contradict Navi's instructions.  By pressing OK key, you accept the license agreement in the instruction manual. 

--------------------------------

upd. i delete old file, and post new. please, test it. it better.

<!-- l --><a class="postlink-local" href="http://avic411.com/forum/download/file.php?id=7321">download/file.php?id=7321</a><!-- l -->

--------------------------------

upd 13.07.2009 update for 3.x version, UC or EW.

but power-up MAP warnind don't fixed. only like before.

CommonLib_v3b1.rar

upd 14.08.2009 update for 3.010100 version, UC or EW.

update from 13.07.2009 with power-up fix also, but at this moment, only for testing

...i delete this file, it not good solution.

sorry. i upload

http://www.4shared.com/file/109987562/6 ... art05.html

full avic-f90bt dump, with maps. if anybody need.

used with diskrw or mount at disk and copy.

http://www.4shared.com/file/109346016/f ... art01.html

http://www.4shared.com/file/109348252/7 ... art02.html

http://www.4shared.com/file/109414925/3 ... art03.html

http://www.4shared.com/file/109418318/2 ... art04.html

http://www.4shared.com/file/109987562/6 ... art05.html

http://www.4shared.com/file/109358254/a ... art06.html

http://www.4shared.com/file/109360663/9 ... art07.html

http://www.4shared.com/file/109362899/5 ... art08.html

http://www.4shared.com/file/109365643/9 ... art09.html

http://www.4shared.com/file/109368376/3 ... art10.html

http://www.4shared.com/file/109373155/7 ... art11.html

http://www.4shared.com/file/109378109/d ... art12.html

http://www.4shared.com/file/109421747/f ... art13.html

http://www.4shared.com/file/109424987/6 ... art14.html

http://www.4shared.com/file/109387141/6 ... art15.html

http://www.4shared.com/file/109395421/a ... art16.html

http://www.4shared.com/file/109398648/7 ... art17.html

so, anybody has info about hardware diff, and way for move software from f900 to f910 ?

http://www.pioneer.eu/eur/products/25/1 ... specs.html

also, looking service manual

1) don't try update avic with uboot from SD, only from AtlasMgr or jtag,

2) use attached files only with IDA

3) no need write me to PM, if you kill you avic with this uboot, try backup before write.

avic f500bt NN749 board

[attachment=1]uboot_f500bt.rar[/attachment]

avic f700/f900/f90 NN746 board

[attachment=0]uboot_f900bt.rar[/attachment]

Hi carver it would be great if you could tell us exactly how you opened/edited your SDMLC image file! Did you mount it as a virtual drive?

i also want unpacked/extracted WINCEIMG.BIN

but mount tools don't help for this

so, my full avic f90bt UC backup. with my Serial Number, and Bluetooth MAC

i think it work for all UC version, like f900 or f700 but don't test it.

also, i don't test ay non UC version, like EW5 or RE.

i delete igo-maps/poi/dem and RealSpeakSolo.

this topic for repair avic, not for repair iGo

so, if you avic dead, and WINCEIMG.BIN+WINCEIMG.CKS from SD dont help you, you can try this way.

1) download testmode 2.2 with DiskRW tools forom this forum. download/file.php?id=6999

2) start DiskRW from testmode, and READ to SD Card SDMLC and DSK1, it your BACKUP.

3) download my SDMLC and DSK1 backup, extrack it and put to SD card.

http://www.4shared.com/file/105507086/7 ... 09984.html WinCE

http://www.4shared.com/file/107628372/c ... Speak.html iGo

4) at avic - WRITE you SDMLC and DSK1 area, from my backup files.

5) reboot and test. if all ok, google for maps and RealSpeakSolo folder, and copy it to avic.

6) if this way don't help, use DiskRW and write you backup back to avic, and wait for other solutions.

7) in any case, don't forgot pack you SDMLC file, and share with me

so, i wait for feedback.

if you want work with avic dump, you can try this way

0.1) google for ImDsk, and instal it. http://www.ltr-data.se

0.2) use DiskRW tools from testmode 2.2 for get NN746UC_DSK1_0_1955587584.img file.

download/file.php?id=6999

0.3) copy backup to PC, and rename it, if need

1) open ImDsk, see attached picture

2) select your avic backup file dump, see attached picture

3) put 512 in offset and press OK. see attached picture.

0.4) so, after this step you can work with files from avic dump.

[attachment=0]aaa.png[/attachment]

i want connect to avic via jtag.

i found four jtag connector at nn746 navi board.

in one connector i dump MSN-Direct firmware,

- J-Link found 1 JTAG device. Core ID: 0x3F1F0F0F (ARM7)

in second connector i connect to xilinx chips, Id of device #0: 0x06E5D093

but i cant connect to SiRFtitan.

so, i attach my board with my remarks,

i think all my pins correct, but need some steps for enable jtag,

so, maybe anybody can help.

for edit SDMLC dump i use winhex or other software, but for few block need calculate checksumm,

and i can't find algoritm. it not crc32 or other, famous for me.

i had play with winhex and all i could see was hex code! how do you convert the hex into text? and also is there a way to covert the image file back into normal files?

after NAND flash dump, you has BIN format. not HEX, and not TEXT.

so, no need convert bin to text.

also, you can cut FLASH image in WInHex, for FAT16 and FAT32, and mount it like ISO files.

with tools like ImDisk, but i don't do it, becouse don't need it.

also, i haven't way for expand all files WINCEIMG.BIN, only few files.

Carver yeah figured they would have the id code set! i didn't realy have equiment to try. i wonder if there is a pioneer utility built in that can reflash it like Uboot?

i read in google about some pioneer with USB interfece (simple pioneer, without navi)

It read firmware from our USB flash, but i can't find anything update file for this device,

for check password inside. may-me CPU also Renesas, pasword inside, and one for all pioneer.

so, i try search again.

Carver, if you can send me this testmode & diskrw tools, i'll send u back my SDMLC dump from both my f700bt UC & EU models so you can compare difference.

before i post this testmode with DiskRW tools

viewtopic.php?f=34&t=23632&p=164681#p164539

also, i include it with my SDMLC dump

http://www.4shared.com/account/file/105 ... 09984.html

carver where can i get your files from please, i have the us model of the 90bt is that right does UC mean usa ? thanks

yes US=UC. i don't share iGo/MAP disk, it so big, but for repair - you can use my backup, and later restore maps.

http://www.4shared.com/file/105507086/7 ... 09984.html

you can flash avic with diskrw tools from testmode 2.2

but, please, read/backup !!!! you SDMLC before, becouse with my file, you also change you SN.

also, i don't give any warranty, no anyboby send me other US/UC image,

so, if anybody can share our image, and send me link,

after formatmbr also - it very fine for me.

The micro processor is part numbered PEG447A for US and PEG449A for AU (in the service manual) however these part numbers are only pioneer numbers given to those items the real part number is actually some thing like this M30876fjbgp I believe the only reason they have different part numbers is because they are loaded with different software.

thanks for CPU info.

i download M32C manual, and compare pins, many pins like VCC/VSS/HOLD has the some pin number with PEG447A.

also in download Flash Development Toolkit from Renesas,

and found PEG447A serial programming pinouts at AV CN601 connector.

all m32c/PEG447A can flashed via COM/RS-232 port, but Pioneer

can set password for read. not FFFFFFFF, so, need connect and test.

at this moment, i looking for other board at m32c, for testing,

if don't found, i try connect to avic.

also, i try read service manual more detailed, can WinCE flash AV board ?

in this case, need try looking AV code in avic sottware.

Carver,

Has reloading your Avic fixed the FM tuning steps? Or does it just display Ew frequency stepping? And has it changed your DVD region?

when i load SDMLC dump from RE version to UC avic - it only cnange display 0.05, and i listen not real channel.

and avic can't make initialization, and after few time, avic reboot/

i see avic software, EZRIDER connain some string, tuner_step_up, tuner_step_down,

tuner_search_up, tuner_search_down.

but RE use differend hardware board, so i looking for EW dump at .

i don't touch resistor at navi board.

for edit SDMLC dump i use winhex or other software, but for few block need calculate checksumm,

and i can't find algoritm. it not crc32 or other, famous for me.

thanks for CPU manual, i try read it.

How does your tools work for repair the broken AVIC's

yes and no

if you testmode give error, you can use fixed testmode 2.2 .

and in testmode, you can flash avic with right config and wince.

but need backup for it. i has only for f90bt_uc

after, you can start repair iGo and maps.

but if you hardware broken, like bad sector in nand flash,

this software can't help you

does anybody know how to hack AVIC-F900BT to make the dvd player region free??

Because junit workt on WinCE maybe we should be we should be to replace with euro region cod!!

check my post. i think for DVD, you can try change resistor at NAVI board

viewtopic.php?f=34&t=23898&start=15#p165381

photo in topic.

I have just disassembled my US version & have removed the AV Board & right at the top is a table printed showing various models, table goes as follows:

 

EW | UC | J | CN | AU | RE

- - | --- | - - | - - | - - | - - | CD |

- - | - - | - - | - - | - - | - - |DVD|

I remembered why not change these resistors, I have decided that the DVD region for lock DVD discs.

perhaps I was wrong, but I not solder it. sorry.

I have just disassembled my US version & have removed the AV Board & right at the top is a table printed showing various models, table goes as follows:

 

EW | UC | J | CN | AU | RE

- - | --- | - - | - - | - - | - - | CD |

- - | - - | - - | - - | - - | - - |DVD|

1) Thank you for the work.

this is precisely AV board? I totally forgot about the settings on the NAVI motherboard,

I clone aviÑ software, from UC to RE, but forgot about the resistors.

but my resistors at NAVI motherboard, not sure that they will help, although the taste is.

and no this at my board

To the left of this table, there is another table showing:

 

| UC | CWN |

|Hi out| 3648 |

| - - | DVD |

photo below.

Read[/color] in DiskRW tools,

but before you press Write in DiskRW tools, think about next shipping

i see this in service manual, and try switch SIMUKE1 and other SIMUKE, but it don't help me with FM radio.

may-be later, i try do it again.

[attachment=0]avic_f90bt_config5.jpg[/attachment]

[attachment=1]avic_f90bt_config4.jpg[/attachment]

sorry, i has only photo with bad quality, like in attach, and today i assemble my avic, so, can't make new.

[attachment=1]avic_f90bt_av-ucom.jpg[/attachment]

[attachment=0]avic_f90bt_av-back.jpg[/attachment]

pioneer-mio NN746 navi board

viewtopic.php?f=34&t=23632&p=164650#p164650

if anybody need, photo of NN746UC from pioneer f90bt board

it also used in f700/f900 pioneer.

[attachment=1]avic_f90bt_front2.jpg[/attachment]

[attachment=0]avic_f90bt_back.jpg[/attachment]