ShortFuse Posted September 16, 2010 Author Report Share Posted September 16, 2010 No risk, no fun For EU there is only the 2.0 EU update(F10->F20) and the 2.003 update available (the 2.003 EU has exactly the same files as the 2.003 US) Nothing more. What made me think that the hack should work, is that the US 1.001 update is also exactly the same as the AU 1.001 update as saiwogjai also mentioned. And also most of the 2.0 update is the same, excluding the maps, and some files which seem to store version numbers regarding the maps. I have no clue about the files of other systems, but if the file-check is the same, you might be right. But I think it is necessary to hack the 2.003 update too, for future updates, as it probably overwrote the hacked files on the unit. (I just have no idea why it does not show for me right version - does it show for US 2.003?) The only thing I made maybe wrong is, I did first only the 3.1 BT update, then as I had the 2.003 and the 3.11BT update on the same card, it automatically installed the 2.003 first, before I could start the 3.11BT update. Regarding mods, I havent found anything yet to get to the bitmaps, the image.img file is not a jffs2 filesystem image, I tried. Actually, there is a 1.004 update for the F10BT. I don't know where it came from, but I got it from here: viewtopic.php?f=34&t=29177&p=230536#p230536 We should probably make another forum for hacks based on system versions. It's no fun jumping from one site to another. By the way, I took a look at the U310BT/AVIC-F310BT and it turns out they use a very similar file system. They even have a RenewalIFLib.dll which I already took a look at. This is making me realize that we should be comparing these similar files since hacks can be cross-device compatible (not hardware specific). PS: I know what you're saying about hacking the 2.003 file, but in reality, I can easily make a fake 2.004 Quote Link to post Share on other sites
ShortFuse Posted September 17, 2010 Author Report Share Posted September 17, 2010 Next step, TESTMODE According to the service manual we can get to test mode by: Start-up by operation of the product. 1. Enter the following password while +B, ACC are ON (Normal application start-up status). 2. When the password is correct, restart begins and test mode menu is displayed. 1. Press [HOME] key. 2. Press keys in the order, -> -> -> -> -> , while pressing [HOME] key. 3. Release [HOME] key. Start-up by SD card. 1. Download GGS1080 from the Service Site. 2. Decompress the file. 3. Copy the decompressed file to the SD card root. 4. Insert the SD card to the product and turn ACC on. TestMode is actually an application built into the software. It's called TestMode.exe It's packed inside EU090PLT.PRG We need to unpack this file Quote Link to post Share on other sites
CaptainInsaneO Posted September 17, 2010 Report Share Posted September 17, 2010 Yeah, we've been trying to find a copy of GGS1080. I'm guessing the Service site is on Pioneer's intranet which requires us to either A) Hack their network, which is uncalled for (I'M not going to Federal Pound-Me-In-the-Ass prison just for testmode) or Get a Pioneer tech/employee to slip us a copy. Your thoughts? Quote Link to post Share on other sites
ShortFuse Posted September 17, 2010 Author Report Share Posted September 17, 2010 Yeah, we've been trying to find a copy of GGS1080. I'm guessing the Service site is on Pioneer's intranet which requires us to either A) Hack their network, which is uncalled for (I'M not going to Federal Pound-Me-In-the-Ass prison just for testmode) or Get a Pioneer tech/employee to slip us a copy. Your thoughts? Unpack EU090PLT.PRG, extract TESTMODE.EXE, reverse engineer/patch. Quote Link to post Share on other sites
CaptainInsaneO Posted September 17, 2010 Report Share Posted September 17, 2010 Yeah, we've been trying to find a copy of GGS1080. I'm guessing the Service site is on Pioneer's intranet which requires us to either A) Hack their network, which is uncalled for (I'M not going to Federal Pound-Me-In-the-Ass prison just for testmode) or Get a Pioneer tech/employee to slip us a copy. Your thoughts? Unpack EU090PLT.PRG, extract TESTMODE.EXE, reverse engineer/patch. I'm not gay but I think I love you. Quote Link to post Share on other sites
ShortFuse Posted September 17, 2010 Author Report Share Posted September 17, 2010 I'm not gay but I think I love you. Well, how about this: ViewBin... EU090PLT.PRG Image Start = 0x8EB00000, length = 0x017C2A1C Start address = 0x8EB01000 Checking record #165 for potential TOC (ROMOFFSET = 0xFF241584) Checking record #241 for potential TOC (ROMOFFSET = 0xFF6F1580) Checking record #403 for potential TOC (ROMOFFSET = 0xFFDA85A4) Checking record #426 for potential TOC (ROMOFFSET = 0x00000000) Found pTOC = 0x902c09fc ROMOFFSET = 0x00000000 ROMHDR ---------------------------------------- DLL First : 0x01C301CA DLL Last : 0x02000000 Physical First : 0x8EB00000 Physical Last : 0x902C2A1C RAM Start : 0x90B00000 RAM Free : 0x90B35000 RAM End : 0x9BD00000 Kernel flags : 0x00000002 Prof Symbol Offset : 0x00000000 Num Copy Entries : 3 Copy Entries Offset : 0x8EF8DFB8 Num Modules : 215 Num Files : 45 MiscFlags : 0x00000002 CPU : 0x01c2 (Thumb) Extensions : 0x8EB03950 ROMHDR Extensions ----------------------------- PID[0] = 0x00000000 PID[1] = 0x00000000 PID[2] = 0x00000000 PID[3] = 0x00000000 PID[4] = 0x00000000 PID[5] = 0x00000000 PID[6] = 0x00000000 PID[7] = 0x00000000 PID[8] = 0x00000000 PID[9] = 0x00000000 Next: 00000000 COPY Sections --------------------------------- Src: 0x8FBAE364 Dest: 0x90B06000 CLen: 0xC99 DLen: 0x2BCB8 Src: 0x8F574BB8 Dest: 0x90B33000 CLen: 0x442 DLen: 0x4E4 Src: 0x8FECEF64 Dest: 0x90B34000 CLen: 0x9C DLen: 0x1D8 MODULES --------------------------------------- 11/16/2009 07:19:16 410624 nk.exe 11/16/2009 07:19:03 10752 aerhd.dll 11/16/2009 07:01:00 11264 atserisr.dll 11/16/2009 07:01:56 519680 coredll.dll 11/16/2009 07:01:56 229376 filesys.exe 11/16/2009 07:01:56 726528 gwes.exe 11/16/2009 06:45:41 2560 device.exe 11/16/2009 06:45:40 36352 devmgr.dll 11/16/2009 06:45:41 6144 regenum.dll 11/16/2009 06:45:41 13312 busenum.dll 11/16/2009 06:45:40 9216 pm.dll 11/16/2009 06:45:18 21504 notify.dll 11/16/2009 06:46:00 80384 fatfsd.dll 11/16/2009 06:46:01 10752 diskcache.dll 11/16/2009 07:01:56 36352 fatutil.dll 11/16/2009 06:45:10 69120 shell.exe 11/16/2009 06:45:10 7680 shellcelog.dll 11/16/2009 06:45:10 6144 toolhelp.dll 11/16/2009 07:01:56 384512 commctrl.dll 11/16/2009 07:01:55 66048 commdlg.dll 11/16/2009 06:46:02 218624 gb18030.dll 11/16/2009 07:01:56 123392 connmc.exe 11/16/2009 07:01:56 34304 rnaapp.exe 11/16/2009 06:45:17 8704 prnport.dll 11/16/2009 07:01:56 4096 prnerr.dll 11/16/2009 06:45:11 79872 fsdmgr.dll 11/16/2009 06:46:02 19456 mspart.dll 11/16/2009 07:01:56 105984 waveapi.dll 11/16/2009 06:45:37 27648 audevman.dll 11/16/2009 07:01:56 27136 gsm610.acm 11/16/2009 07:01:56 15360 msfilter.dll 11/16/2009 06:45:20 13824 ceddk.dll 11/16/2009 07:01:56 206848 netui.dll 11/16/2009 06:45:27 113664 ppp.dll 11/16/2009 06:45:22 14848 asyncmac.dll 11/16/2009 06:45:21 23552 cxport.dll 11/16/2009 06:45:19 53760 iphlpapi.dll 11/16/2009 06:45:17 5632 winsock.dll 11/16/2009 06:45:16 36864 ws2.dll 11/16/2009 06:45:25 8192 ws2instl.dll 11/16/2009 06:45:25 8704 wspm.dll 11/16/2009 06:45:25 9728 nspm.dll 11/16/2009 06:45:26 30720 ssllsp.dll 11/16/2009 06:45:12 12288 secur32.dll 11/16/2009 06:45:14 113664 schannel.dll 11/16/2009 06:45:15 47616 credsvc.dll 11/16/2009 06:45:15 5632 credprov.dll 11/16/2009 06:45:24 86016 afd.dll 11/16/2009 06:45:22 133632 ndis.dll 11/16/2009 06:45:19 6144 ndispwr.dll 11/16/2009 06:45:26 7168 autoras.dll 11/16/2009 06:45:26 27136 dhcp.dll 11/16/2009 06:45:23 322048 tcpstk.dll 11/16/2009 07:01:56 64512 tapi.dll 11/16/2009 07:01:56 41472 unimodem.dll 11/16/2009 06:45:28 135680 redir.dll 11/16/2009 06:45:28 36864 netbios.dll 11/16/2009 07:01:55 273408 crypt32.dll 11/16/2009 06:45:13 41984 msasn1.dll 11/16/2009 06:45:43 27648 serial.dll 11/16/2009 07:00:58 18944 usbd.dll 11/16/2009 07:00:58 17920 usbhid.dll 11/16/2009 07:00:57 14848 usbmsc.dll 11/16/2009 07:00:57 20992 usbdisk6.dll 11/16/2009 06:45:58 28672 hidparse.dll 11/16/2009 06:45:59 8704 kbdhid.dll 11/16/2009 06:45:59 4608 conshid.dll 11/16/2009 06:45:59 5120 MouHid.dll 11/16/2009 06:45:42 6656 mmtimer.dll 11/16/2009 06:46:32 171520 ole32.dll 11/16/2009 06:46:33 180224 oleaut32.dll 4/02/2004 08:46:34 432128 mfcce400.dll 6/04/2004 08:31:08 282624 olece400.dll 11/16/2009 07:01:57 119296 mlang.dll 11/16/2009 07:01:57 131584 shlwapi.dll 11/16/2009 07:01:57 28160 IECEExt.dll 11/16/2009 06:47:30 1163264 msxml3.dll 11/16/2009 07:01:57 450560 wininet.dll 11/16/2009 07:01:57 285184 urlmon.dll 11/16/2009 07:01:57 43008 aygshell.dll 11/16/2009 07:01:57 282112 ceshell.dll 11/16/2009 06:49:43 9728 shcore.dll 11/16/2009 07:01:58 16384 control.exe 11/16/2009 06:52:14 6656 ctlpnl.exe 11/16/2009 07:01:58 215552 cplmain.cpl 11/16/2009 07:01:58 50176 intll.cpl 11/16/2009 07:01:58 9216 connpnl.cpl 11/16/2009 07:01:58 22016 stguil.cpl 11/16/2009 07:01:57 1286656 quartz.dll 11/16/2009 07:01:57 384512 msdxm.dll 11/16/2009 06:53:53 18944 msacmce.dll 11/16/2009 06:53:59 11264 msadpcm.dll 11/16/2009 06:53:59 10752 imaadpcm.dll 11/16/2009 06:54:00 10240 msg711.dll 11/16/2009 06:53:59 13824 msgsm610.dll 11/16/2009 06:53:54 10240 icm.dll 11/16/2009 06:53:53 5120 msrle32.dll 11/16/2009 06:53:34 25600 msdmo.dll 11/16/2009 06:54:00 5120 acmdwrap.dll 11/16/2009 06:53:34 76800 mp3dmod.dll 11/16/2009 06:53:36 905216 wmvdmod.dll 11/16/2009 06:53:36 252928 wmadmod.dll 11/16/2009 06:53:37 346112 wmsdmod.dll 11/16/2009 06:53:56 73216 ddraw.dll 11/16/2009 06:53:55 234496 ddcore.dll 11/16/2009 06:53:56 89600 ddhel.dll 11/16/2009 06:53:33 203264 ceplayer.exe 11/16/2009 07:01:57 56320 repllog.exe 11/16/2009 06:55:38 7168 udp2tcp.exe 11/16/2009 06:55:37 49152 rapisrv.exe 11/16/2009 07:01:57 58368 wceload.exe 11/16/2009 07:01:57 13824 unload.exe 11/16/2009 06:55:37 11776 rra_stm.dll 11/16/2009 06:55:37 3072 eventrst.exe 11/16/2009 06:55:38 2560 system.cpl 7/01/2004 04:00:00 403968 sqlcese30.sys.dll 11/16/2009 07:19:04 5120 ErrHandApi.dll 11/16/2009 07:19:04 15360 ErrHandServ.dll 10/31/2006 17:48:52 12288 resusage.dll 10/31/2006 17:48:50 17408 dresusage.dll 10/31/2006 17:48:50 6656 AstLogApi.dll 7/18/2008 12:17:46 11776 logsaver.dll 11/16/2009 07:19:05 5120 dwatchlatency.dll 11/16/2009 07:19:05 10752 ALD.dll 11/16/2009 06:45:36 137216 ddi_nop.dll 11/16/2009 06:23:52 38400 NSystemInfoLib.dll 11/16/2009 02:16:06 260608 NStandardLib.dll 11/16/2009 02:16:06 73216 NEventBaseLib.dll 11/16/2009 06:24:36 230912 NPCommonLib.dll 11/16/2009 06:24:56 219136 FontLib.dll 11/16/2009 06:25:24 723456 GraphicLib.dll 11/16/2009 06:24:43 23040 IPILib.dll 11/16/2009 02:16:06 6656 7z.dll 11/16/2009 06:28:06 33792 NPVehicleHandler.dll 11/16/2009 06:25:39 77824 NPuComHandler.dll 11/16/2009 06:26:35 190464 NPSysCtrlHandler.dll 11/16/2009 06:25:55 47104 NPRDSTMCHandler.dll 11/16/2009 06:25:29 14336 NPPortLib.dll 11/16/2009 06:26:47 63488 NPPnpHandler.dll 11/16/2009 06:25:49 52736 NPMSNDirectLib.dll 11/16/2009 06:26:53 25088 NPKeyHandler.dll 11/16/2009 06:26:10 51200 NPInetHandler.dll 11/16/2009 06:27:38 289280 NPGpsSnsHandler.dll 11/16/2009 06:27:15 39936 NPGPSEngine.dll 11/16/2009 06:27:10 177664 NPBTHandler.dll 11/16/2009 06:26:02 14848 NPAviPodLib.dll 11/16/2009 06:26:00 49664 NPAvDecLib.dll 11/16/2009 06:25:44 30208 NPAudioLib.dll 11/16/2009 06:28:21 38400 NEventWatcher.exe 11/16/2009 06:30:37 1110528 TestMode.exe 6/17/2009 08:22:02 215552 voHEAACDec.dll 2/20/2009 07:46:22 18944 voVidDec.Dll 2/13/2009 05:17:02 5632 BHSurfMgr.dll 2/13/2009 03:10:32 92672 voAACDec.dll 4/08/2009 06:49:10 45568 voAsfFR.dll 4/24/2009 05:21:20 80896 voAudioFR.dll 4/08/2009 06:49:10 32768 voAviFR.dll 4/17/2009 05:36:36 18432 voCCRRR.Dll 2/13/2009 05:19:34 83456 voCCRRRS.dll 4/20/2009 01:37:10 281600 voFltFR.Dll 3/12/2009 06:45:58 233472 voFltVR.Dll 2/13/2009 05:28:44 113152 voMP3Dec.dll 3/11/2009 09:51:28 45568 voMP4FR.dll 3/17/2009 07:05:06 220160 voWMADec.dll 4/21/2009 06:50:08 76288 h264decdll.dll 4/21/2009 06:50:36 92672 mpeg4decdll.dll 5/02/2009 08:07:44 83968 wmvdecdll.dll 3/24/2009 02:28:28 152576 voPreview.dll 3/17/2009 09:58:28 13312 voADPCMDec.dll 5/20/2009 12:27:10 55296 voFltBuf.dll 6/08/2009 15:30:54 267264 ddi_powervr.dll 6/08/2009 15:30:42 66560 pvr_kernelm1.dll 6/08/2009 15:30:50 7680 um3partyif.dll 6/08/2009 15:30:50 23040 clcdckmif.dll 11/16/2009 07:01:04 18432 VideoProcessNew.dll 6/08/2009 15:30:48 193024 libGLES_CM.dll 6/08/2009 15:30:48 27648 libpvrWCEWSEGL.dll 6/08/2009 15:30:50 38912 IMGEGL.dll 6/08/2009 15:28:10 72704 pvr_kernel.dll 6/08/2009 15:28:16 410112 pvr_mved1.dll 11/16/2009 07:00:55 43520 wavedev.dll 11/16/2009 07:00:56 136704 usbotg.dll 11/16/2009 07:00:56 136704 usbotg1.dll 11/16/2009 07:00:57 22016 usbmsfn.dll 11/16/2009 07:00:56 30720 USBSerialFn.dll 3/18/2008 11:48:04 99328 UsbClientSwitch.exe 3/18/2008 11:48:04 9216 cplswitch.cpl 11/16/2009 07:00:58 14848 ipod.dll 11/16/2009 07:01:02 773632 gps.dll 11/16/2009 07:01:01 4608 vgd.dll 11/16/2009 07:01:00 57344 atlasserial.dll 11/16/2009 07:00:55 26624 touch.dll 11/16/2009 07:00:58 43520 SDBUS.dll 11/16/2009 07:00:59 30720 SDHC.dll 11/16/2009 07:00:59 12800 SDMemory.dll 11/16/2009 07:00:59 23040 SDIO_UART.dll 11/16/2009 07:01:00 13824 CEATA.dll 11/16/2009 07:00:55 14848 dsp.dll 11/16/2009 07:01:01 36864 spidll.dll 11/16/2009 07:00:54 17408 utldrv.dll 11/16/2009 07:00:54 28160 sdmlc.dll 11/16/2009 07:00:54 14848 PLOG.dll 11/16/2009 07:01:02 5120 PIO.dll 11/16/2009 07:01:02 10752 I2C.dll 11/16/2009 07:01:03 14336 PdrdDriver.dll 11/16/2009 07:01:03 13824 InfoMan.dll 11/16/2009 07:01:03 4608 pwmdrv.dll 7/10/2009 02:32:22 16384 usbwcm.dll 2/23/2009 22:02:10 197632 ENTRFSD.dll 2/23/2009 22:09:12 175104 ENTRUTL.dll 11/16/2009 07:01:11 4608 launchapp.exe 6/27/2008 04:34:38 4608 LastModeApi.dll 11/16/2009 02:16:07 111104 GpsTmc.dll 4/10/2009 12:17:30 98304 pbtctrl.dll 4/10/2009 12:17:36 68608 pbtdata.dll FILES ---------------------------------------- 11/16/2009 06:44:47 __R_ 0 11680 ceconfig.h (ROM 0x901827A8) 11/16/2009 07:19:19 _HRS 0 137110 wince.nls (ROM 0x90185548) 11/16/2009 07:19:19 _HRS 0 18598 initobj.dat (ROM 0x901A6CE0) 11/16/2009 07:19:19 _HRS 0 36864 boot.hv (ROM 0x901AB588) 11/16/2009 07:19:19 _HRS 0 274432 default.hv (ROM 0x901B4588) 11/16/2009 07:19:19 _HRS 0 36864 user.hv (ROM 0x901F7588) 11/16/2009 07:19:19 _HRS 0 7283 initdb.ini (ROM 0x90200588) 7/01/2004 04:00:00 _HR_ 0 134 close.2bp (ROM 0x90027ED0) 7/01/2004 04:00:00 _HR_ 0 134 ok.2bp (ROM 0x90027F58) 7/01/2004 04:00:00 _HR_ 0 1030 stdsm.2bp (ROM 0x900988E8) 7/01/2004 04:00:00 _HR_ 0 838 viewsm.2bp (ROM 0x8EE618E0) 7/01/2004 04:00:00 _HR_ 0 2038 stdsm.bmp (ROM 0x8FE2F808) 7/01/2004 04:00:00 _HR_ 0 1654 viewsm.bmp (ROM 0x8EF8D8C0) 9/05/2006 10:31:38 _HRS 0 170960 rsaenh.dll (ROM 0x902021FC) 7/01/2004 04:00:00 _HRS 0 8542 sysroots.p7b (ROM 0x9022BDCC) 7/01/2004 04:00:00 _HRS 0 128844 tahoma.ttf (ROM 0x9022DF2C) 7/01/2004 04:00:00 _HRS 0 739 copyrts.txt (ROM 0x90098CF0) 7/01/2004 04:00:00 __RS 0 3116 asterisk.wav (ROM 0x8EF983D0) 7/01/2004 04:00:00 __RS 0 3388 close.wav (ROM 0x900222C0) 7/01/2004 04:00:00 __RS 0 2970 critical.wav (ROM 0x8F835458) 7/01/2004 04:00:00 __RS 0 2682 default.wav (ROM 0x8FFFD584) 7/01/2004 04:00:00 __RS 0 3946 empty.wav (ROM 0x8ED23090) 7/01/2004 04:00:00 __RS 0 9204 exclam.wav (ROM 0x9024D678) 7/01/2004 04:00:00 __RS 0 5656 infbeg.wav (ROM 0x9024FA6C) 7/01/2004 04:00:00 __RS 0 1778 infend.wav (ROM 0x8FAED8BC) 7/01/2004 04:00:00 __RS 0 2088 infintr.wav (ROM 0x8FD6E7B0) 7/01/2004 04:00:00 __RS 0 834 menupop.wav (ROM 0x8EE61C28) 7/01/2004 04:00:00 __RS 0 360 menusel.wav (ROM 0x8FACE88C) 7/01/2004 04:00:00 __RS 0 3388 openprog.wav (ROM 0x8FD102BC) 7/01/2004 04:00:00 __RS 0 1836 question.wav (ROM 0x8F83D88C) 7/01/2004 04:00:00 __RS 0 8508 startup.wav (ROM 0x90251084) 7/01/2004 04:00:00 __RS 0 2712 windmax.wav (ROM 0x8EEB1568) 7/01/2004 04:00:00 __RS 0 2866 windmin.wav (ROM 0x8FFFA4C8) 7/01/2004 04:00:00 __RS 0 3388 recstart.wav (ROM 0x8F00F2B4) 7/01/2004 04:00:00 __RS 0 3388 recend.wav (ROM 0x8F3D02A8) 7/01/2004 04:00:00 _HRS 0 24 ceplayer.lnk (ROM 0x8FC33FE8) 7/01/2004 04:00:00 _HRS 0 24 eventrst.lnk (ROM 0x8ED01FE8) 7/01/2004 04:00:00 _HRS 0 10752 celog.dll (ROM 0x902531C0) 11/16/2009 07:59:24 _HRS 0 262144 snapshot_mainos.dat (ROM 0x90255BC0) 11/16/2009 02:27:40 _HRS 0 128844 tahoma_1_07.ttf (ROM 0x90295BC0) 11/16/2009 02:27:40 _HRS 0 5360 PExtended.ttf (ROM 0x902B530C) 1/22/2009 07:26:12 __RS 0 4096 mmvoflt.bin (ROM 0x902B67FC) 1/22/2009 07:26:12 __RS 0 4096 mmvoflt.bak (ROM 0x902B77FC) 3/18/2008 11:47:36 __R_ 0 7168 GbcCtrl.exe (ROM 0x902B87FC) 3/13/2009 15:32:20 __R_ 0 26112 GpsMC.exe (ROM 0x902BA3FC) Done. How do you feel now? Oh and this: TestMode.zip Quote Link to post Share on other sites
CaptainInsaneO Posted September 17, 2010 Report Share Posted September 17, 2010 I'm not gay but I think I love you. Well, how about this: ViewBin... EU090PLT.PRG Image Start = 0x8EB00000, length = 0x017C2A1C Start address = 0x8EB01000 Checking record #165 for potential TOC (ROMOFFSET = 0xFF241584) Checking record #241 for potential TOC (ROMOFFSET = 0xFF6F1580) Checking record #403 for potential TOC (ROMOFFSET = 0xFFDA85A4) Checking record #426 for potential TOC (ROMOFFSET = 0x00000000) Found pTOC = 0x902c09fc ROMOFFSET = 0x00000000 ROMHDR ---------------------------------------- DLL First : 0x01C301CA DLL Last : 0x02000000 Physical First : 0x8EB00000 Physical Last : 0x902C2A1C RAM Start : 0x90B00000 RAM Free : 0x90B35000 RAM End : 0x9BD00000 Kernel flags : 0x00000002 Prof Symbol Offset : 0x00000000 Num Copy Entries : 3 Copy Entries Offset : 0x8EF8DFB8 Num Modules : 215 Num Files : 45 MiscFlags : 0x00000002 CPU : 0x01c2 (Thumb) Extensions : 0x8EB03950 ROMHDR Extensions ----------------------------- PID[0] = 0x00000000 PID[1] = 0x00000000 PID[2] = 0x00000000 PID[3] = 0x00000000 PID[4] = 0x00000000 PID[5] = 0x00000000 PID[6] = 0x00000000 PID[7] = 0x00000000 PID[8] = 0x00000000 PID[9] = 0x00000000 Next: 00000000 COPY Sections --------------------------------- Src: 0x8FBAE364 Dest: 0x90B06000 CLen: 0xC99 DLen: 0x2BCB8 Src: 0x8F574BB8 Dest: 0x90B33000 CLen: 0x442 DLen: 0x4E4 Src: 0x8FECEF64 Dest: 0x90B34000 CLen: 0x9C DLen: 0x1D8 MODULES --------------------------------------- 11/16/2009 07:19:16 410624 nk.exe 11/16/2009 07:19:03 10752 aerhd.dll 11/16/2009 07:01:00 11264 atserisr.dll 11/16/2009 07:01:56 519680 coredll.dll 11/16/2009 07:01:56 229376 filesys.exe 11/16/2009 07:01:56 726528 gwes.exe 11/16/2009 06:45:41 2560 device.exe 11/16/2009 06:45:40 36352 devmgr.dll 11/16/2009 06:45:41 6144 regenum.dll 11/16/2009 06:45:41 13312 busenum.dll 11/16/2009 06:45:40 9216 pm.dll 11/16/2009 06:45:18 21504 notify.dll 11/16/2009 06:46:00 80384 fatfsd.dll 11/16/2009 06:46:01 10752 diskcache.dll 11/16/2009 07:01:56 36352 fatutil.dll 11/16/2009 06:45:10 69120 shell.exe 11/16/2009 06:45:10 7680 shellcelog.dll 11/16/2009 06:45:10 6144 toolhelp.dll 11/16/2009 07:01:56 384512 commctrl.dll 11/16/2009 07:01:55 66048 commdlg.dll 11/16/2009 06:46:02 218624 gb18030.dll 11/16/2009 07:01:56 123392 connmc.exe 11/16/2009 07:01:56 34304 rnaapp.exe 11/16/2009 06:45:17 8704 prnport.dll 11/16/2009 07:01:56 4096 prnerr.dll 11/16/2009 06:45:11 79872 fsdmgr.dll 11/16/2009 06:46:02 19456 mspart.dll 11/16/2009 07:01:56 105984 waveapi.dll 11/16/2009 06:45:37 27648 audevman.dll 11/16/2009 07:01:56 27136 gsm610.acm 11/16/2009 07:01:56 15360 msfilter.dll 11/16/2009 06:45:20 13824 ceddk.dll 11/16/2009 07:01:56 206848 netui.dll 11/16/2009 06:45:27 113664 ppp.dll 11/16/2009 06:45:22 14848 asyncmac.dll 11/16/2009 06:45:21 23552 cxport.dll 11/16/2009 06:45:19 53760 iphlpapi.dll 11/16/2009 06:45:17 5632 winsock.dll 11/16/2009 06:45:16 36864 ws2.dll 11/16/2009 06:45:25 8192 ws2instl.dll 11/16/2009 06:45:25 8704 wspm.dll 11/16/2009 06:45:25 9728 nspm.dll 11/16/2009 06:45:26 30720 ssllsp.dll 11/16/2009 06:45:12 12288 secur32.dll 11/16/2009 06:45:14 113664 schannel.dll 11/16/2009 06:45:15 47616 credsvc.dll 11/16/2009 06:45:15 5632 credprov.dll 11/16/2009 06:45:24 86016 afd.dll 11/16/2009 06:45:22 133632 ndis.dll 11/16/2009 06:45:19 6144 ndispwr.dll 11/16/2009 06:45:26 7168 autoras.dll 11/16/2009 06:45:26 27136 dhcp.dll 11/16/2009 06:45:23 322048 tcpstk.dll 11/16/2009 07:01:56 64512 tapi.dll 11/16/2009 07:01:56 41472 unimodem.dll 11/16/2009 06:45:28 135680 redir.dll 11/16/2009 06:45:28 36864 netbios.dll 11/16/2009 07:01:55 273408 crypt32.dll 11/16/2009 06:45:13 41984 msasn1.dll 11/16/2009 06:45:43 27648 serial.dll 11/16/2009 07:00:58 18944 usbd.dll 11/16/2009 07:00:58 17920 usbhid.dll 11/16/2009 07:00:57 14848 usbmsc.dll 11/16/2009 07:00:57 20992 usbdisk6.dll 11/16/2009 06:45:58 28672 hidparse.dll 11/16/2009 06:45:59 8704 kbdhid.dll 11/16/2009 06:45:59 4608 conshid.dll 11/16/2009 06:45:59 5120 MouHid.dll 11/16/2009 06:45:42 6656 mmtimer.dll 11/16/2009 06:46:32 171520 ole32.dll 11/16/2009 06:46:33 180224 oleaut32.dll 4/02/2004 08:46:34 432128 mfcce400.dll 6/04/2004 08:31:08 282624 olece400.dll 11/16/2009 07:01:57 119296 mlang.dll 11/16/2009 07:01:57 131584 shlwapi.dll 11/16/2009 07:01:57 28160 IECEExt.dll 11/16/2009 06:47:30 1163264 msxml3.dll 11/16/2009 07:01:57 450560 wininet.dll 11/16/2009 07:01:57 285184 urlmon.dll 11/16/2009 07:01:57 43008 aygshell.dll 11/16/2009 07:01:57 282112 ceshell.dll 11/16/2009 06:49:43 9728 shcore.dll 11/16/2009 07:01:58 16384 control.exe 11/16/2009 06:52:14 6656 ctlpnl.exe 11/16/2009 07:01:58 215552 cplmain.cpl 11/16/2009 07:01:58 50176 intll.cpl 11/16/2009 07:01:58 9216 connpnl.cpl 11/16/2009 07:01:58 22016 stguil.cpl 11/16/2009 07:01:57 1286656 quartz.dll 11/16/2009 07:01:57 384512 msdxm.dll 11/16/2009 06:53:53 18944 msacmce.dll 11/16/2009 06:53:59 11264 msadpcm.dll 11/16/2009 06:53:59 10752 imaadpcm.dll 11/16/2009 06:54:00 10240 msg711.dll 11/16/2009 06:53:59 13824 msgsm610.dll 11/16/2009 06:53:54 10240 icm.dll 11/16/2009 06:53:53 5120 msrle32.dll 11/16/2009 06:53:34 25600 msdmo.dll 11/16/2009 06:54:00 5120 acmdwrap.dll 11/16/2009 06:53:34 76800 mp3dmod.dll 11/16/2009 06:53:36 905216 wmvdmod.dll 11/16/2009 06:53:36 252928 wmadmod.dll 11/16/2009 06:53:37 346112 wmsdmod.dll 11/16/2009 06:53:56 73216 ddraw.dll 11/16/2009 06:53:55 234496 ddcore.dll 11/16/2009 06:53:56 89600 ddhel.dll 11/16/2009 06:53:33 203264 ceplayer.exe 11/16/2009 07:01:57 56320 repllog.exe 11/16/2009 06:55:38 7168 udp2tcp.exe 11/16/2009 06:55:37 49152 rapisrv.exe 11/16/2009 07:01:57 58368 wceload.exe 11/16/2009 07:01:57 13824 unload.exe 11/16/2009 06:55:37 11776 rra_stm.dll 11/16/2009 06:55:37 3072 eventrst.exe 11/16/2009 06:55:38 2560 system.cpl 7/01/2004 04:00:00 403968 sqlcese30.sys.dll 11/16/2009 07:19:04 5120 ErrHandApi.dll 11/16/2009 07:19:04 15360 ErrHandServ.dll 10/31/2006 17:48:52 12288 resusage.dll 10/31/2006 17:48:50 17408 dresusage.dll 10/31/2006 17:48:50 6656 AstLogApi.dll 7/18/2008 12:17:46 11776 logsaver.dll 11/16/2009 07:19:05 5120 dwatchlatency.dll 11/16/2009 07:19:05 10752 ALD.dll 11/16/2009 06:45:36 137216 ddi_nop.dll 11/16/2009 06:23:52 38400 NSystemInfoLib.dll 11/16/2009 02:16:06 260608 NStandardLib.dll 11/16/2009 02:16:06 73216 NEventBaseLib.dll 11/16/2009 06:24:36 230912 NPCommonLib.dll 11/16/2009 06:24:56 219136 FontLib.dll 11/16/2009 06:25:24 723456 GraphicLib.dll 11/16/2009 06:24:43 23040 IPILib.dll 11/16/2009 02:16:06 6656 7z.dll 11/16/2009 06:28:06 33792 NPVehicleHandler.dll 11/16/2009 06:25:39 77824 NPuComHandler.dll 11/16/2009 06:26:35 190464 NPSysCtrlHandler.dll 11/16/2009 06:25:55 47104 NPRDSTMCHandler.dll 11/16/2009 06:25:29 14336 NPPortLib.dll 11/16/2009 06:26:47 63488 NPPnpHandler.dll 11/16/2009 06:25:49 52736 NPMSNDirectLib.dll 11/16/2009 06:26:53 25088 NPKeyHandler.dll 11/16/2009 06:26:10 51200 NPInetHandler.dll 11/16/2009 06:27:38 289280 NPGpsSnsHandler.dll 11/16/2009 06:27:15 39936 NPGPSEngine.dll 11/16/2009 06:27:10 177664 NPBTHandler.dll 11/16/2009 06:26:02 14848 NPAviPodLib.dll 11/16/2009 06:26:00 49664 NPAvDecLib.dll 11/16/2009 06:25:44 30208 NPAudioLib.dll 11/16/2009 06:28:21 38400 NEventWatcher.exe 11/16/2009 06:30:37 1110528 TestMode.exe 6/17/2009 08:22:02 215552 voHEAACDec.dll 2/20/2009 07:46:22 18944 voVidDec.Dll 2/13/2009 05:17:02 5632 BHSurfMgr.dll 2/13/2009 03:10:32 92672 voAACDec.dll 4/08/2009 06:49:10 45568 voAsfFR.dll 4/24/2009 05:21:20 80896 voAudioFR.dll 4/08/2009 06:49:10 32768 voAviFR.dll 4/17/2009 05:36:36 18432 voCCRRR.Dll 2/13/2009 05:19:34 83456 voCCRRRS.dll 4/20/2009 01:37:10 281600 voFltFR.Dll 3/12/2009 06:45:58 233472 voFltVR.Dll 2/13/2009 05:28:44 113152 voMP3Dec.dll 3/11/2009 09:51:28 45568 voMP4FR.dll 3/17/2009 07:05:06 220160 voWMADec.dll 4/21/2009 06:50:08 76288 h264decdll.dll 4/21/2009 06:50:36 92672 mpeg4decdll.dll 5/02/2009 08:07:44 83968 wmvdecdll.dll 3/24/2009 02:28:28 152576 voPreview.dll 3/17/2009 09:58:28 13312 voADPCMDec.dll 5/20/2009 12:27:10 55296 voFltBuf.dll 6/08/2009 15:30:54 267264 ddi_powervr.dll 6/08/2009 15:30:42 66560 pvr_kernelm1.dll 6/08/2009 15:30:50 7680 um3partyif.dll 6/08/2009 15:30:50 23040 clcdckmif.dll 11/16/2009 07:01:04 18432 VideoProcessNew.dll 6/08/2009 15:30:48 193024 libGLES_CM.dll 6/08/2009 15:30:48 27648 libpvrWCEWSEGL.dll 6/08/2009 15:30:50 38912 IMGEGL.dll 6/08/2009 15:28:10 72704 pvr_kernel.dll 6/08/2009 15:28:16 410112 pvr_mved1.dll 11/16/2009 07:00:55 43520 wavedev.dll 11/16/2009 07:00:56 136704 usbotg.dll 11/16/2009 07:00:56 136704 usbotg1.dll 11/16/2009 07:00:57 22016 usbmsfn.dll 11/16/2009 07:00:56 30720 USBSerialFn.dll 3/18/2008 11:48:04 99328 UsbClientSwitch.exe 3/18/2008 11:48:04 9216 cplswitch.cpl 11/16/2009 07:00:58 14848 ipod.dll 11/16/2009 07:01:02 773632 gps.dll 11/16/2009 07:01:01 4608 vgd.dll 11/16/2009 07:01:00 57344 atlasserial.dll 11/16/2009 07:00:55 26624 touch.dll 11/16/2009 07:00:58 43520 SDBUS.dll 11/16/2009 07:00:59 30720 SDHC.dll 11/16/2009 07:00:59 12800 SDMemory.dll 11/16/2009 07:00:59 23040 SDIO_UART.dll 11/16/2009 07:01:00 13824 CEATA.dll 11/16/2009 07:00:55 14848 dsp.dll 11/16/2009 07:01:01 36864 spidll.dll 11/16/2009 07:00:54 17408 utldrv.dll 11/16/2009 07:00:54 28160 sdmlc.dll 11/16/2009 07:00:54 14848 PLOG.dll 11/16/2009 07:01:02 5120 PIO.dll 11/16/2009 07:01:02 10752 I2C.dll 11/16/2009 07:01:03 14336 PdrdDriver.dll 11/16/2009 07:01:03 13824 InfoMan.dll 11/16/2009 07:01:03 4608 pwmdrv.dll 7/10/2009 02:32:22 16384 usbwcm.dll 2/23/2009 22:02:10 197632 ENTRFSD.dll 2/23/2009 22:09:12 175104 ENTRUTL.dll 11/16/2009 07:01:11 4608 launchapp.exe 6/27/2008 04:34:38 4608 LastModeApi.dll 11/16/2009 02:16:07 111104 GpsTmc.dll 4/10/2009 12:17:30 98304 pbtctrl.dll 4/10/2009 12:17:36 68608 pbtdata.dll FILES ---------------------------------------- 11/16/2009 06:44:47 __R_ 0 11680 ceconfig.h (ROM 0x901827A8) 11/16/2009 07:19:19 _HRS 0 137110 wince.nls (ROM 0x90185548) 11/16/2009 07:19:19 _HRS 0 18598 initobj.dat (ROM 0x901A6CE0) 11/16/2009 07:19:19 _HRS 0 36864 boot.hv (ROM 0x901AB588) 11/16/2009 07:19:19 _HRS 0 274432 default.hv (ROM 0x901B4588) 11/16/2009 07:19:19 _HRS 0 36864 user.hv (ROM 0x901F7588) 11/16/2009 07:19:19 _HRS 0 7283 initdb.ini (ROM 0x90200588) 7/01/2004 04:00:00 _HR_ 0 134 close.2bp (ROM 0x90027ED0) 7/01/2004 04:00:00 _HR_ 0 134 ok.2bp (ROM 0x90027F58) 7/01/2004 04:00:00 _HR_ 0 1030 stdsm.2bp (ROM 0x900988E8) 7/01/2004 04:00:00 _HR_ 0 838 viewsm.2bp (ROM 0x8EE618E0) 7/01/2004 04:00:00 _HR_ 0 2038 stdsm.bmp (ROM 0x8FE2F808) 7/01/2004 04:00:00 _HR_ 0 1654 viewsm.bmp (ROM 0x8EF8D8C0) 9/05/2006 10:31:38 _HRS 0 170960 rsaenh.dll (ROM 0x902021FC) 7/01/2004 04:00:00 _HRS 0 8542 sysroots.p7b (ROM 0x9022BDCC) 7/01/2004 04:00:00 _HRS 0 128844 tahoma.ttf (ROM 0x9022DF2C) 7/01/2004 04:00:00 _HRS 0 739 copyrts.txt (ROM 0x90098CF0) 7/01/2004 04:00:00 __RS 0 3116 asterisk.wav (ROM 0x8EF983D0) 7/01/2004 04:00:00 __RS 0 3388 close.wav (ROM 0x900222C0) 7/01/2004 04:00:00 __RS 0 2970 critical.wav (ROM 0x8F835458) 7/01/2004 04:00:00 __RS 0 2682 default.wav (ROM 0x8FFFD584) 7/01/2004 04:00:00 __RS 0 3946 empty.wav (ROM 0x8ED23090) 7/01/2004 04:00:00 __RS 0 9204 exclam.wav (ROM 0x9024D678) 7/01/2004 04:00:00 __RS 0 5656 infbeg.wav (ROM 0x9024FA6C) 7/01/2004 04:00:00 __RS 0 1778 infend.wav (ROM 0x8FAED8BC) 7/01/2004 04:00:00 __RS 0 2088 infintr.wav (ROM 0x8FD6E7B0) 7/01/2004 04:00:00 __RS 0 834 menupop.wav (ROM 0x8EE61C28) 7/01/2004 04:00:00 __RS 0 360 menusel.wav (ROM 0x8FACE88C) 7/01/2004 04:00:00 __RS 0 3388 openprog.wav (ROM 0x8FD102BC) 7/01/2004 04:00:00 __RS 0 1836 question.wav (ROM 0x8F83D88C) 7/01/2004 04:00:00 __RS 0 8508 startup.wav (ROM 0x90251084) 7/01/2004 04:00:00 __RS 0 2712 windmax.wav (ROM 0x8EEB1568) 7/01/2004 04:00:00 __RS 0 2866 windmin.wav (ROM 0x8FFFA4C8) 7/01/2004 04:00:00 __RS 0 3388 recstart.wav (ROM 0x8F00F2B4) 7/01/2004 04:00:00 __RS 0 3388 recend.wav (ROM 0x8F3D02A8) 7/01/2004 04:00:00 _HRS 0 24 ceplayer.lnk (ROM 0x8FC33FE8) 7/01/2004 04:00:00 _HRS 0 24 eventrst.lnk (ROM 0x8ED01FE8) 7/01/2004 04:00:00 _HRS 0 10752 celog.dll (ROM 0x902531C0) 11/16/2009 07:59:24 _HRS 0 262144 snapshot_mainos.dat (ROM 0x90255BC0) 11/16/2009 02:27:40 _HRS 0 128844 tahoma_1_07.ttf (ROM 0x90295BC0) 11/16/2009 02:27:40 _HRS 0 5360 PExtended.ttf (ROM 0x902B530C) 1/22/2009 07:26:12 __RS 0 4096 mmvoflt.bin (ROM 0x902B67FC) 1/22/2009 07:26:12 __RS 0 4096 mmvoflt.bak (ROM 0x902B77FC) 3/18/2008 11:47:36 __R_ 0 7168 GbcCtrl.exe (ROM 0x902B87FC) 3/13/2009 15:32:20 __R_ 0 26112 GpsMC.exe (ROM 0x902BA3FC) Done. How do you feel now? Welp. I'm a 5-year Marine Corps Systems Engineer with 7 industry-level IT certifications, and am now a Computer Science major. In short: chicken's done. pic related, it's my face right now. Quote Link to post Share on other sites
ShortFuse Posted September 17, 2010 Author Report Share Posted September 17, 2010 haha, i extracted TestMode already. I can repackage the PRG file now that I know how it works. I just feel like running haret on it and seeing if i can just port android for it. =P Quote Link to post Share on other sites
VBLUE42 Posted September 17, 2010 Report Share Posted September 17, 2010 Ok so what does this mean? Quote Link to post Share on other sites
ShortFuse Posted September 17, 2010 Author Report Share Posted September 17, 2010 Ok so what does this mean? If I can get into TestMode, i can downgrade at will. It means we can play around with the system and not have to worry about bricking it. I'm trying to figure out how to trigger it. Hmm, what's this? A function called GetPBrakeStatus in NPVehicleHandler.dll? Quote Link to post Share on other sites
rrolff Posted September 17, 2010 Report Share Posted September 17, 2010 Short: Just throwing a little more love your way....... Am I correct in guessing that Pioneer is using pretty much the same software for their other products (X910/X920), F series??? You have forced me to begin following this on my Android phone..... Quote Link to post Share on other sites
VBLUE42 Posted September 17, 2010 Report Share Posted September 17, 2010 Am I correct in guessing that Pioneer is using pretty much the same software for their other products (X910/X920), F series??? Yes for the 920 but the 910 and F series use different software. Regardless those units have been hacked for a while so this is irrelevant. Quote Link to post Share on other sites
dawgbone Posted September 17, 2010 Report Share Posted September 17, 2010 If I can get into TestMode, i can downgrade at will. It means we can play around with the system and not have to worry about bricking it. I'm trying to figure out how to trigger it. Hmm, what's this? A function called GetPBrakeStatus in NPVehicleHandler.dll? I like the sound of that.... So basically, if things go awry, you're saying that you could boot into TESTMODE, and run one of Pioneer's updates to get things back in check? Granted if we can figure out how to boot into TESTMODE on a SD card... Dude... good work Short-Fuse!!! You've been steady, pulling rabbits out of the hat... Quote Link to post Share on other sites
whobedaplaya Posted September 17, 2010 Report Share Posted September 17, 2010 Short, gimme your PayPal and RL addies. Want to send you $$$, beer and hookers Quote Link to post Share on other sites
flash_the_hun Posted September 17, 2010 Report Share Posted September 17, 2010 If I can get into TestMode, i can downgrade at will. It means we can play around with the system and not have to worry about bricking it. I'm trying to figure out how to trigger it. Hmm, what's this? A function called GetPBrakeStatus in NPVehicleHandler.dll? Seems like we will not need a bypass anymore? I just feel like running haret on it and seeing if i can just port android for it. =P Man, running Android with haret sounds so cool it would require a lot more development though, especially without the exact specs, adresses, protocols to use the HW. I would be already happy if using iGO or other apps would be possible, or using an Eye-Fi card and have internet access through an accesspoint... Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.