Jump to content


  • Content count

  • Joined

  • Last visited

Everything posted by RonS

  1. IIRC, your method also works with newer models - like NEX Series. So those users would be more likely to find it if there was also a link or thread in that sub-forum. My thinking is it would be cleaner to start a new thread. Makes the feedback less confusing. I can make it a "sticky" so it won't get lost.
  2. A simple way to permanently delete your unit's security password. No Condi Hackmode or TestMode needed. I wrote a simple script that will delete the security PASSWORD for most Win CE based F, Z, and X series units. I can't say whether it will work with the very old units, and it won't work with the model numbers ending in 50 or greater, or Nex units. If your model isn't included, look elsewhere (don't post here) -there's probably already a thread in the proper sub-forum for your unit. Format a smallish SD (32 GB or less) FAT32. Download and Unzip the attached file. Copy into the root of the SD the TestMode.key and ScriptExec.ini from my zip. No other files on the SD. Eject it from your PC and insert into your AVIC. If nothing happens after 5 seconds. turn off your ignition for a few seconds, then turn it on. You should see a prompt to press any key. Press any button (volume-+ or trk <,>). Done. Remove the SD and restart your unit. No more password. Note that the TestMode.KEY I use here is only used to run scripts. It will not put your unit into the Maintenance menu. Also note that the script copies your existing PASSWORD.DAT file to the SD - just in case. So make sure it is not write-protected. And a word of advice - In the future, don't set a password. It is no deterrent to a thief since there is no visible indicator that it has a password lock.(he will smash your window and destroy your dash regardless). Plus, he'll find this thread and unlock it. So save yourself the hassle a year from now when your car battery dies and you can't remember the password. Password Removal Script.zip
  3. You're welcome. My Z110BT is still running strong.
  4. This is a hack to prepare your unit to install a map/firmware update. Confirmed to allow firmware updates for all Z110, Z120, Z130, Z140, X920, X930, X940 - and probably their corresponding rest-of-the-world units. I can't say whether it will work with the very old units, and it won't work with the model numbers ending in 50 or greater, or Nex units. This should work with the following F series models: F10BT, F20BT, F30BT, F40BT, F840BT, F8430BT, F920BT, F930BT, F940BT, F9210BT, F9220BT, F9310BT Abstract: This was an early method used to hack map update releases. I believe it was published many years ago by member ShortFuse. Use this hack to allow installation of new update releases without requiring a unique password from Pioneer (which binds the update's unique media serial number to a specific headunit's serial number). It involves patching a DLL on the headunit prior to installing the update. UPDATE: See Easy method for an automated installation of a pre-hacked file. No Testmode or hex file editing needed. I'll leave the rest of this original post here for educational purposes. If you use the script method, steps 1 - 4 below can be skipped. But read 5 & 6. I only recommend this hack for those experienced with modifying/hacking their AVIC units. It requires familiarity with use of TestMode to copy/paste/delete files on your headunit. TestMode's user interface is not intuitive and very frustrating and error prone. I recommend watching JasonH's youtube tutorial - but do not install Condi's Hackmode. Just download supertestmode.zip; unzip it; copy TESTMODE.KEY to your SD; insert in your headunit. I also recommend making a backup of all the files/folders on your headunit in the USER folder before trying anything. Put that SD away and keep it. If you brick your headunit with no backup, I won't be helping you. Let me be clear here. The danger isn't that this hack will damage your unit. The danger is that you will inadvertently delete something important using TestMode. If you use care it is perfectly safe. 1. First Boot into TestMode. You'll need to identify the "active" set of files. There are two \USER\PRGx directories on your HU. The active one is indicated by the presence or absence of a file named \USER\PRG.FLG If this file is not present, the active application files are in \USER\PRG0\APL. Otherwise, the active files are in \USER\PRG1\APL. Upon further research I see most people using this hack say to use the USER\PRG0\APL file. From now on I'll just call it the APL_Directory. 2. Get a copy of APL_Directory/RenewallFlib.dll. If you still have the files from the last map update installation, you can also get it from there. Actually I don't know if it matters where you get the file. Copy it to an SD and then move it to your computer. 3. Using a hex file editor (like HxD.exe) apply these changes to your copy of RenewallFlib.dll. Using HxD.exe - when using Find or Replace make sure you set to it to Hex Values. It defaults to String data type. Also, put spaces between the hex bytes (a byte in hex has two numbers....03 50 A0 E3). (Note: if the expected values are not found at that offset location, do not continue - your firmware is not compatible). See Alternate Patch Method below. Offset 000019F0: 0350A0E3 replace with 0050A0E3 Offset 00001A10: 0350A0E3 replace with 0050A0E3 Offset 00001A3C: 0350A0E3 replace with 0050A0E3 Offset 00001AD8: 0350A0E3 replace with 0050A0E3 Offset 00001C1C: 0250A0E3 replace with 0050A0E3 Offset 00001C24: 0150A0E3 replace with 0050A0E3 IMPORTANT - do not modify the file on your new map/firmware installation SD - this will cause the installation to fail. Use a different SD with Testmode.key and the patched file. 4. Copy the file back to your HU into the same APL_Directory. Hint: you must delete the old one before you can "Paste" the file back. TestMode silently ignores overwrites. It is a very good idea to keep a copy of the original file. This DLL (library) only gets used during firmware updates. Edit: It wouldn't hurt (and might help) if you copied the modified file into both APL folders (\USER\PRG0\APL and \USER\PRG1\APL). This way you are sure the hacked DLL will be used. 5. Install the unmodified map update. (see separate thread for map updates and instructions) When you are ready to install a map update for your supported AVIC model, just restart your head unit and insert the map update SD. With the "ShortFuse" hack installed on your head unit, the update will work as described in the release documentation. When prompted for the password from Pioneer, the password you enter will not be validated in the normal manner. I suspect you could enter anything that is 16 characters long but I recommend entering PASSWORDPASSWORD just because I know that works. If the update software rejects that password, you did something wrong. 6. If the map update fails to complete and you are stuck with a wrong or incorrect SD message: boot into testmode. go into file maintenance remove the file USER\SYSTEM\Download\StartKnd.log This will kick the unit out of upgrade mode, and it should restart into regular mode on next power up (remember to remove the TestMode SD). You should still be running with your previous firmware and maps. Enjoy! ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Alternate Patch Method. There are multiple version of the RenewalIFLib.dll file. For some the offsets of this patch could be slightly different. In that case, try using this method. Using HxD (hex editor), load up the RenewalIFLib.dll file you copied from PRG0\APL Enter the Search/Replace dialogue and make sure Datatype is Hex-values[/size] Search For: 03 50 A0 E3 Replace with: 00 50 A0 E3 In Search Direction select All Then click Replace All You should see a dialog box saying Replaced 4 occurrences of "03 50 A0 E0". Press OK. Now, the fuzzy part. Search at or nearby these addresses and replace: At or near Offset 00001C1C: find 0250A0E3 replace with 0050A0E3 At or near Offset 00001C24: find 0150A0E3 replace with 0050A0E3 If the above worked, save the file and continue at step 4 above. If not, something is wrong. Do not save the file.
  5. The only use and purpose for the hack is to bypass registration/password checking during the installation of the update. It (the hacked file) actually gets overwritten during the updated firmware installation, but it is no longer needed by then. You won't need that SD again. In fact, the SD can only be used once without refreshing the files. Remove it.
  6. Some of your question is off topic since this thread is just about using the hack. Once installed, it is done. At that point you need to remove the ShortFuse hack SD. Reboot means you need to turn your unit off and on. The software command reboot command does not work. Individual updates have their own separate threads. Yes, these updates include firmware and maps. Your problem is addressed there: CardInfo.CIF for F10BT
  7. All I can think of is to try a different SD. Or maybe your SD reader in the unit is bad. Otherwise, I'm out of ideas.
  8. I can't imagine what you could do to prevent Testmode from working. Use the attached Testmode.key file (after unzip) on a FAT32 formatted SD, Insert the SD, then force a cold boot by disconnecting the battery for 30 seconds. After reconnecting, turn the ign on. SUPERTESTMODE.zip
  9. You must be doing something wrong. Hard to tell with so little info. Unzip Supertestmode.zip and place TESTMODE.KEY in the root of an empty FAT32 formatted SD. Best to use a 4GB or 8GB SD. The bootloader isn't very smart. If you can't boot into TestMode, you're out of luck. But I doubt your unit is totally bricked. You never said what failed or what you were trying to install. I hope it wasn't Condi's hack mode.
  10. No GPS warning

    Yes, between speed sensor, knowing whether the vehicle is going forward or reverse, and the inertial guidance (senses turns and even inclines) your GPS's dead reckoning will do a pretty good job estimating your vehicle's position. However it will eventually drift off. Last year while not actually navigating by GPS, I glanced at my map display and saw my car's position was on the wrong side of a river. However the speed and turns matched my driving. When I got home I had to re-position my GPS antenna to a better spot under my cowling - it seems it slipped too close to the firewall.
  11. Heads-up! The Navigation.com website now has the new 2017 maps for Z130BT, Z140BH, X930BT, X940BT and for earlier models Z110bt, Z120BT & X920BT. http://www.navigation.com I suggest reading the installation instructions found on the above website before installing. Note: I posted the same message in the X series forum and requested that they post any discussion on this update here. The F series guys (which use the same firmware but EU maps) usually are ahead of us on finding hacks, so keep an eye over there.
  12. Password AVH Reset

    You might try this. Service Password Method (worked on AVH4400NEX) Link to Service Password Method
  13. Pioneer avic x930bt won't shut off!

    Here's a link to installation and user's manuals. AVIC-X930BT Manuals I don't think there's any settings that could cause this. Assuming it was installed correctly (2 separate circuits and fuses - one always hot and one hot with the accessories) then it might be something wrong with the car's ignition switch.
  14. Avic f840BT no settings

    I don't know. I'm sure somebody knows how to hook-up or bypass the parking brake for f840BT.
  15. Avic f840BT no settings

    You need to properly connect the parking brake sensor or bypass. If sensor is installed, you need the parking brake set in order to access many functions.
  16. 2013 USA/CAN Maps Download

    For the 3rd time - the only way to change the language is a factory reset. See the manual. If you don't have one you can probably find one with a Google search.
  17. EU Maps update problem

    Did you do as II suggested in the other thread? Disconnect the battery for 30 seconds. Get the manual and find the section on Factory Reset. The power recycle resets some things but I don't think it allows you to reset the text language. There is table in the manual that defines 3 methods to reset the unit and what settings get cleared with each method. IIRC, you want to try method 2.
  18. 2013 USA/CAN Maps Download

    I have no ideas. I don't use the EU firmware since I'm in the US. You should ask this question in the F-Series forum (probably in Hacks/Mods sub-forum). I think the greyed-out language is the one selected. You touch the one you want. You likely need a factory reset to get to that screen. Before doing that, I'd disconnect the battery for 30 seconds.
  19. 2013 USA/CAN Maps Download

    Did you replace Cardinfo.cif on the SD with the one in my post (that you just quoted)? Since you have an F920bt, you must use that CardInfo.CIF. BTW. it is just a text file so any editor can view/edit it as long as it doesn't do any formatting. Cardinfo.cif must be 300 bytes.
  20. 2013 USA/CAN Maps Download

    That script is only for when your headunit has been locked and requires a password to boot-up. It is an anti-theft security feature that usually happens when the car's battery is removed (or dies). It sounds like you want to run the Shortfuse script to allow installing a 2017 map update. That hack disables the validation of a unique password as part of the installation. When the 2017 maps get installed you just enter "PASSWORDPASSWORD" when prompted. Don't get this confused with the password required to unzip the archive after you download it. That one is defined in the first post of the thread.
  21. 2013 USA/CAN Maps Download

    Too many things going on here. What password hack? You never said you were locked-out of your headunit. Did it say "Password Removal will start in 5 seconds..."? Maybe you meant the Shortfuse hack? It has a message that says "Installation will start in 5 seconds...". In either case, the SD must not be write-protected. If you are asking about the update installation password, you can back out by removing the SD and rebooting. So what are you trying to do? If it is the EU 2017 update, please post questions in that thread.
  22. 2016 Maps *WORKING* for X850 / X950 / Z150

    I personally have no place to host files. I doubt AVIC411 would since they could be held liable by Pioneer. Are you saying there will be a 2019 update for the x930? Any idea when? I stay out of cleaning-up condi-hackmode messes. It could be as simple as deleting the replacement navi.exe and renaming the old (saved) one back. Or, if you are just trying to recover from a failed install of 2017, put the super testmode.key on a SD or usb, put that in, and it should boot to testmode. Go into file maintenance, and remove the file: USER\SYSTEM\Download\StartKnd.log. This will kick the unit out of upgrade mode, and should restart into regular mode on next power up (remember to remove the TestMode SD). Another possibility is to add or remove /USER/PRG.FLG to tell the system to use the other program files.
  23. 2013 USA/CAN Maps Download

    Assuming the F-series is like the US Z series, it requires moving an unused wire in the harness (or adding new wire), then grounding that one. If you can watch a DVD while driving (not a good idea except for testing), it is installed. It is possible that the wire is loose - either in the harness or the ground connection. That has been known to cause intermittent problems. The 2017 EU maps are here - New 2017 Release F20BT F30BT F40Bt F920BT F930BT F840BT Etc. It has BT version 3.32. Since you have an F920bt, you'll need to replace the CardInfo.cif file. The one I attached should work. If the update doesn't start, you can create your own reading through that long thread. CARDINFO.cif
  24. 2013 USA/CAN Maps Download

    To just update the BT firmware, you can use either EU or US/CAN updates. I'm not 100% sure, but I think you need the parking brake on (or the PB bypass wired correctly) in order to configure BT (both pairing and firmware update).