condiczek

Use this one.

Its not that easy as you think.. Yes, I think that its the key to success - replace EU090PLT.PRG or EU090RGD.PRG with other, correct image. We need someone, who could make proper modified image - with avics header, some crc's (if there are any..) and other things. Yes, go to Herbs's thread, I also wrote there solution for your problem. The link to your email is not available. Do you have copy somewhere? We've got to move forward somehow!!

There are two ways to use hackmode in updated unit. Easiest method is to: 1) always make backup of PRG0, PRG1 directories!, 2) delete PRG0, make another copy of PRG1 and name it as PRG0, 3) delete PRG.FLG file, 4) apply hackmode like always. It doesnt work now, because after update unit creates file PRG.FLG - empty file, if PRG.FLG file exists on the unit, then it boots PRG1 software, if not - then uses PRG0. Its just some kind of 'switch' Update changes/modifies other than used at present PRG directory. For example when you will update your unit with future firmware update,

I'm so happy to see you here working to free our avics, friend! We can access testmode, which is loading after the device find testmode.key file on sd/usb. We don't know if we will modify or even delete EU090PLT/RGD/BOT files we could access service menu via testmode.key. There is a risk of brick. Some time ago when I was looking through bin (prg) image files - I saw somewhere WINDOWS CE bootloader with blue background , like in any other wince devices/navigations. With options like flashing wince.img etc. But we don't have such images correct for that bootloader. The question is how to

That's not a problem, almost every app which i modified to use other dlls than limited in our devices - worked without any problems. Its problem, but its easy to bypass. I've got all the gps software running fine like tomtom, garmin, automapa, igo etc. But its just a software. We have problem with busy hardware, like gps port and audio. We need to get free gps port, and other hardware resources. Me and all the great guys here - we just gave opportunity to further hack avics. All the working utilities such as DiskRW, working registry etc. - this is for all of you to test and try to get some us

hmm got f30bt, and also cant change mute level.. more interesting thing is that with original files it also cant be changed hmm.. check it with your backup files, maybe my copy is modified in some way already..

I'm going on vacation - last week of July. After that I will gonna replace my EU090RGD.PRG, we will continue all the hackmode thing Before that - I can't be without gps/audio etc PS. last night I was dreaming that we had a full solution for gps port LOL

I've made already that kind of entrance into hackmode, but it was not working correctly. SleepMessage is only delayed message, without possibility to make condition like yes/no etc. We've got also thing like ChoiceDefault, and it would run pioneer soft by default for example after 3s, but it was displayed ugly for me question window - like for now - much better i think. And yes - no news for now. Anybody here can correctly replace .dll .exe files in wince img? Especially .exe .dll files in modules? If yes - we would modify EU090RGD.PRG and it could work..

Try attached testmode - it should be uncompressed to SD like: /SDMMC/TestMode/..." - files in TestMode directory in root of sd. Post results, pass like always - avic411 f220.zip

I'm sorry friend, no other ideas how to help you.. Check all the versions of testmode available in the internet, check that 4shared collection, for our devices GGS1080 work, maybe other version will work for you! All guys here are doing great job, we all are working to find the solution! Everyone is welcome to help! All the work/research is appreciated Im almost sure that gps port is com7! GREAT work friend We are getting closer day by day! If there is no EU090BOT.PRG bootloader, then maybe after getting corrupted EU090PLT.PRG, or even deleted - it should still b

Great to hear that! Its our no.1 objective. We are looking for the solution.. For now - we can't. PS. 100 post !

Please try old testmode for other units (TestMode 2.3) maybe from this thread

Yes ignore log error, it will create it also yes, for full image you need almost 4gb, you could also decrease size to be dumped, first 100mb should be our secret partition will investigate it later!

We all want to have that possibility. If you can release gps port to be used with other software, then yes - you can help If not, then - we've got a lot of tools, possibilities right now to try to achieve that. I don't know what F220 is based on. Try to copy TESTMODE.KEY to root of SD and check if it works on your unit. br condi PS. V1.3 to V1.4 UPDATE ready

Making it right now.. will post later today

You've got v1.3? I could make and update-version if you want.. Until now only base version.

Counting on that Please post results! We've got more and more possibilities, need help with hacking avics from all of you guys!

v1.4 ready I need help with Part00 - our secret partition! In new ver. there are mountUNmount tools - .exe's to automount or unmount partitions. It works on Part01 and Part02 (NAND and NAND2), but not on Part00! Maybe some missing registry? Maybe bad MountFlags, MountHidden etc? - Info about that misterious partition in DiskRW.

http://www.youtube.com/watch?v=S-my-zSDU5g Got DiskRW working Output path is being inserted via automatic script! It took ~1h to read full image - 3,59GB! Log from DiskRW: Saturday, June 11, 2011 2:18:25 PM (01CC28426D15CE80) Opening Disk ...OK Getting Disk Information ...OK GEOMETRY Cylinders = 1 Tracks per Cylinder = 1 Sectors per Track = 7536640 Bytes per Sector = 512 TotalSectors = 7536640 Disc Size = -436207616 bytes **Flags Code = 0xA Getting Store Information ...OK StoreName = Centrality MLC Flash Disk DeviceName = DSK1: DeviceType = FLASH DeviceClass = B

I think no, disconnecting antenna will gonna stop giving correct data/signal, but com port will still be busy.. presuming of course

I thought the same about default path for saving! I searched for maybe some additional parameters for that app, but its not working. Tried also adding keyboard driver, sip, jotkbd, eurokbd, but none of them worked. Present keyboard driver is working, but only for such keys as: enter, esc, etc. No letters/numbers. Another way to get that data is to get working Storage Manager from control panel. How did you get content of the partition - windows/screens etc? I'm working now on running newest GpsGate, it wasn't starting, now I'm on the right track! ---edit: Still no free gps port.. but.

In manual of rewriting 7zip we read: "7z.dll" MUST be used as the file name for the edited 7zip library. Other file names will not be written into the product." So the script is written only to get 7z.dll. Another idea - we need to know how to modify ScriptExec.ini.. Anybody knows how to get plain text from it? How to decode/decompile it and complie again? Maybe there is some trick to decode data via bruteforce - we know that it should contain '7z.dll' phrase in it after decrypted... ?? Something like that? http://en.wikipedia.org/wiki/Known-plaintext_attack

On your device you can do this combination of keys, its the same entrance to testmode But your keypress combination will not work to get into pioneer-file-replacer provided by aero_eng16 But on my f30bt and other devices also this key combination doesnt work PS. In readme file of 7zip-replacer there is one sentence at the end: "Do not rewrite or falsify any files other than 7z.dll." This means that we definitely can replace other files!

I've tested 7zip replacer - conclusions: TESTMODE.KEY file is different then the one we use to get pioneers service mode!, there are more than one different TESTMODE.KEY files which runs other service functions, our old TESTMODE.KEY runs service mode with many options to use, the TESTMODE.KEY from aero_eng16 runs pioneers file replacer module - on green background, the key to success is ScriptExec.ini and also correct TESTMODE.KEY! Our target: modify ScriptExec.ini to replace other file than 7zip.dll!

Try to run attached process manager and there will be system info about your device. CEProcessV.zip