Condi's HACKMODE v2.2 - AUTOINSTALL! working also with F40BT, X940BT etc! [updated: 27.09.2012]

[dawgbone]

For now it will not give us working gps - which is propably on com4 or com7(propably that). Few ports are still busy. Busy already after system boot.

 

I wonder if either of those ports would be freed if the antenna was disconnected at boot?

[condiczek]

I wonder if either of those ports would be freed if the antenna was disconnected at boot?

 

I think no, disconnecting antenna will gonna stop giving correct data/signal, but com port will still be busy.. presuming of course

[tasdemır]

x920bt

please help

[jac4you]

thanks it worked fine on my X920-bt europe model

[Tudor Z]

@tasdemir - What you are asking is not possible for now, maps are not from igo like f900bt. If f920bt has the maps for Turkey you could try to backup NAND2 and rewrite it with NAND2 from f920bt, but I don't know if it has other crap, like license files or something. As far as the radio frequencies go, I'm not sure if it's doable with just swapping NAND/USER/PRG0/APL with some files from f920bt, do some research on other US units converted to EU (I have no experience with this).

[Krms]

x920bt

 

1. I want to set up the map of europe

2. I want to set up Turkish language

3. radou the frequency

of the united 90.1 90.3 90.5

Europe 90.1 90.2 90.3 90.4 90.5 I want to do

please help I do not know how to do it

 

 

1 & 2 was answered

 

3. I assume the FM tuner is hardware locked, if you open up the X920 you'll find several references on the circuit board to the region the unit is intended for e.g. US, EU, AUS, etc. I tried to add resistors to attempt a change to the frequency scan but nothing worked. Somewhere on this forum there's a topic about the different tuning ciruit used for different regions.

 

(If you want to use the FM radio, try searching for a FM Band expander or US FM shifter or something like that. This will alter the FM frequency that your radio demodulates.) Google/Ebay is your friend.

[tasdemır]

What time will help me please

[mitchellsx]

Is it possible to hack the 930bt??

 

thank you

[condiczek]

http://www.youtube.com/watch?v=S-my-zSDU5g

 

Got DiskRW working Output path is being inserted via automatic script!

It took ~1h to read full image - 3,59GB! Log from DiskRW:

 

Saturday, June 11, 2011 2:18:25 PM
(01CC28426D15CE80)


Opening Disk ...OK
Getting Disk Information ...OK

GEOMETRY
 Cylinders = 1
 Tracks per Cylinder = 1
 Sectors per Track = 7536640
 Bytes per Sector = 512
 TotalSectors = 7536640
 Disc Size = -436207616 bytes

 **Flags Code = 0xA

Getting Store Information ...OK

 StoreName = Centrality MLC Flash Disk
 DeviceName = DSK1:
 DeviceType =  FLASH  
 DeviceClass = BLOCK
 DeviceFlag =  READWRITE  
 DeviceProfile = SDMLC
 Total Sectors = 7536640
 Free Sector = 0
 Bytes per Sector = 512
 Biggest Partition Creatable = 0
 Attributes = 0x0
 Number of Partition = 3
 Number of Mounted Partition = 2
 Last Format = 1/1/1601 12:00:00 AM
 Last Modified = 1/1/1601 12:00:00 AM

Requested Operation ...

 Operation type  = Disc Reading
 Store = DSK1:
 Offset = 00000000h - E5FFFFFFh
 Length = 3858759680 (E6000000h) bytes 
 Output File = \SDMMC\odczyt.img


Creating File: \SDMMC\odczyt.img ...OK

Starts Reading Disc ...

 Starts on Sector = 0 
 Ends on Sector = 7536639 
 Buffer Size = 512 kb

+---Viewing first 512 bytes extracted 
00000000:    EB 3C 90 00 	ë<Â.
00000004:    00 00 00 00 	....
&&
000001B8:    8E 25 CF 46 	Ž%ĎF
000001BC:    00 00 00 BF 	...ż
000001C0:    02 00 00 00 	....
000001C4:    13 03 40 00 	..@.
000001C8:    00 00 00 20 	... 
000001CC:    03 00 00 7B 	...{
000001D0:    14 03 0B 00 	....
000001D4:    56 09 40 20 	V.@ 
000001D8:    03 00 00 10 	....
000001DC:    06 00 00 22 	..."
000001E0:    57 09 0B 00 	W...
000001E4:    4D 75 40 30 	Mu@0
000001E8:    09 00 C0 CF 	..ŔĎ
000001EC:    69 00 00 00 	i...
000001F0:    00 00 00 00 	....
&&
000001FC:    00 00 55 AA 	..UÅž

*************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************

 

I will read later only the hidden unmounted partition, and investigate the content

Via DiskRW it should be more safe to read, modify and write modified image, I think?

And then just grab EU090PLT.PRG file from NAND which should get modified?

 

---edit:

Do you guys know how to get proper offset (lenght we've got = 100mb), for unmounted 'secret' partition?

 

--edit2:

Got almost complete v1.4.. beta testing

[GunFlavoured]

I've been following this thread for a while now and I just wanted to say keep up the good work. At the moment I'm looking at buying a X930BT and it would be great to be able to load Australian maps on to it and ideally change the region number. Does anyone know what maps the latest AVIC units use? I saw on the Aus Pioneer site they use whereis maps, not sure if that is any help but it might be a clue.

[Kurto2021]

I have the XM files and was going to fire up photoshop and possibly create the missing logo but was wondering if anyone has done this already and if so do I need to update the .dat files somehow?

 

Also would it be possible to create my own category of shows with the 20 or so channels I listen to....I know I could use presets but an additional category would be cool.

[condiczek]

v1.4 ready

 

I need help with Part00 - our secret partition! In new ver. there are mountUNmount tools - .exe's to automount or unmount partitions. It works on Part01 and Part02 (NAND and NAND2), but not on Part00! Maybe some missing registry? Maybe bad MountFlags, MountHidden etc? - Info about that misterious partition in DiskRW.

[kttii]

v1.4 ready

 

sweet, I'll try it when I get home tonight!

[condiczek]

sweet, I'll try it when I get home tonight!

Counting on that Please post results!

We've got more and more possibilities, need help with hacking avics from all of you guys!

[kttii]

sweet, I'll try it when I get home tonight!

 

 

I dont see a "CONDIUPDATE" folder and script, are you changing how the update process works?