CNDV-70R hack

[kheller2]

DISC VERSION	[05R03U02]
FORMAT		[KIWI]
MAP VERSION	[86]
MARKET VERSION	[uC]
DATE		[080807]
DISC NAME	[CNDV-80R/UC-1-A]
TP APL VERSION	[***]
RC APL VERSION	[4.000004]
DATA COMPANY	[iPC]

[GMPOWER]

Thank you so much for putting that up. I think that the 40r disk only changed from the NavTeq to Tele Atlas mapping system and drivers but did nothing else, so I think by just having the files for the root system and snddata files should take care of that.

 

If you look at the picture of the 40r disks on the pioneer website it shows version 1.2, but their website also lists the current disk version as 1.0 for the avic-90-80dvd and 1.1 for avic-9dvd and 1.2 for avic-88dvd.

 

I think I might be able to make an East and West version of the disk by using the base files that you sent me. I compared the 80mt East and West, and I think that the only thing that seems to change is the dvi.dat disc version and the alldata.kwi.

 

After I get the disk put together I think that I am going to try to load everything onto a memory card in the PCMCIA slot. 16gb flash memory cards can be found for around $30 so it is a logical option now. Without being able to merge the two alldata.kwi (east and west) files I don’t think there will be a way to make one flash card for both, but I might try to figure that one out at another point in time.

 

I will not be able to get around to testing the disk out for a week or two, but I will keep you updated on it. When I first do the disk I will try by just using the root file system and snddata folder to see if that works and will try to get together a West disk by doing the same thing.

[kheller2]

I wanted to get it working on a flash card as well, way easier to play with things than burning DVDs. I actually was going to take my AVIC90 apart to see if there was an ATA header somewhere.

 

The diffs between 80E and 80W are the following:

 

The contents of the IDX directory

DVI.DAT

ALLDATA.KWI

INDEXDAT.KWI

[GMPOWER]

The only difference in the dvi is the disk name. The indexdat indexes “street address, intersections, and freeways” to the appropriate maps located in the IDX file system, 100 level for east and 200 level for west. The alldata has some of street names listed when I open it with a hex editor. RDSTMC has most street names, highway, and exit information. The IDX folder holds all of the maps. The uc010dat.usa on the 40r seems to have all of the POI, Restaurant, city hall, court house, Citibank, and stuff like that. If I remember right the us010sys.usa on the 40r said something about a USB check in the boot sequence, I can check on that tomorrow for you. I also have the service manual if you need a copy just let me know.

 

I also found a reference to a "Honda only" section, or something around those lines, in the us010sys.usa file on the 40r

[kheller2]

I would love to have a copy of the service manual. Thank you. You can upload it to that file sharing portal or let me know how to yank it or email.

 

From the diagnostic menu I have these versions on my system:

 

System Boot 2.01

System OS 3.03

GPS Version 2.70

APP Version 4.000004

LANG DATA 2.00102b

Syscon Ver 8.00

Drive Core Ver 30.00

Drive Appl Vers 8.31

TV UCCOM (?) 8.06

SYS lang UC010SYS.USA

APP lang UC010DAT.USA

 

The UC files are the system OS.

The EU files are the application. It might be possible to use a new app on the old OS but I doubt it. The newer EU files all are built out of a "tp" directory which I'm assuming is "touch"

 

The UC files also seem to be completely compiled from C code as show by the idents:

$Id: atapi_protocol.c,v 1.5 2002/05/09 09:33:08 hiroaki Exp $

[kheller2]

oh.. region.kwi differs on the 40R east vs west disc in addition to all the differences between 80E and 80W. not sure why that would be. It isn't important though.

 

Now, I've noticed that a lot of the 40R version information, including the compile directory and voice file versions state: NN529_05RC V1.02. The 80MT disk has NN529_08TP V0.00. Obviously TP is Touch Point (or Pad) and RC is Remote Control. What confuses me is that the 40 dvd uses the 05RC and not 04RC. It makes me want a copy of 50M now.

 

The release directory is different too:

 

Release Directory : /proj/05apl/bnn529_05rc/release

Release Directory : /proj/07apl/nn529_07tp/release

Release Directory : /proj/08apl/nn529_08tp/release

 

"bnn" B? I'm beginning to see why not much supported the AVIC-90/80/800 DVD units after 2003.

[GMPOWER]

Sorry most of my posts are so long

 

I have yet to figure out what the “bg” folder does yet; I have seen reference to it in the 40r eu10apl.prg

The “idx” is the maps.

The “marktp” is the over lay on the map, with the arrow that represents where you are.

The “point” is just a couple sounds.

The “sky” folder I am not sure about, but it has not changed from the 40R to the 80mt

The “snddata” just seems to have sound information; there are references to “wave” all throughout it

The “voice” folder seems to be just voice information

 

Under the “file maintenance” section of the service menu is an option to extract the information that is stored on the SRAM to the PC card. It also says that the information that is in the SRAM is split into two groups “Bios” and “User” we might be able to turn on options and other useful stuff once we get this information on to a computer.

 

Changing the EU files I think can be done with a lot of work.

 

Now, I've noticed that a lot of the 40R version information, including the compile directory and voice file versions state: NN529_05RC V1.02. The 80MT disk has NN529_08TP V0.00. Obviously TP is Touch Point (or Pad) and RC is Remote Control. What confuses me is that the 40 dvd uses the 05RC and not 04RC. It makes me want a copy of 50M now.

 

In the UC010sys.usa on the 40r and 80mt it lists the different model numbers and both of them list

NN529, NN530, NN546, NN575, NN581, NN582, and NN602

In the UC040sys.usa on the 80mt it lists NN584, NN586, NN586, NN622, and NN623

In the UC050sys.usa on the 80mt it lists NN584, NN585, NN586, NN622, NN623, AND NN642

In the UC070sys.usa on the 80mt it lists NN622, NN623, NN700 EW, NN700 UC, NN701 EW, and NN701 UC

In the UC071sys.usa on the 80mt it lists NN622, NN623, NN700 EW, NN700 UC, NN701EW, and NN701 UC

The NN529 is the model, the 05 stands for the year 2005 and 08 stands for 2008, RC stands for remote control, TC stands for touchpanel, v stands for version. Now you might ask how can it be CNDV-40 be with a 2005 year date code on the disk, if you look at the year on the IDX folder it is 2004 which would mean 2004 maps, now look at EU files in the root and you will see 2005 dates. I remember throughout my research of this project seeing a Pioneer 2005 product guide that had the CNDV-40r listed in it. I think that the reason for this is that it was a last minute decision to make a remote version of the CNDV-40.

 

The release directory is different too:

 

Release Directory : /proj/05apl/bnn529_05rc/release

Release Directory : /proj/07apl/nn529_07tp/release

Release Directory : /proj/08apl/nn529_08tp/release

 

I think that the release directory is where the information is installed into on the SRAM of the unit. The 05, 07, 08 stand for year 2005, 2007, 2008 and apl is the apl.prg file. The 80mt does not have the EU10APL.PRG. The nn529 is the model. The “b” in the release directory I think might have to do with the fact that indeed the 40r might have been a last minute idea. The 40mt might have installed at the standard nn529 directory, I might have to get a copy of the 40mt just to check this out.

[kheller2]

bg are your background pictures (and some of the copyright screens). You create that directory on the PCCARD as well if you want to add your own jpg files. The jpg and pim files you can open on a standard pc, the HCS files are some type of format I have yet to figure out.

 

I always thought the sky directory was information about satellites, but the sky.lst file talks about bmp files.

 

You may be right about the 40R being a last minute thing. I have a "Version 1.1 For Traffic" blue dvd, 2001. Then the "Version 1.0 CNDV-20 For Traffic" blue dvd. I see there is a CNDV-21, but no CNDV-30.

 

I'm pretty sure the project directories are where they actually built them on their master systems and not where they get installed on the nav system. As for the dates, I also assumed those numbers were the year of release of the data. My confusion comes from the fact there is a 40MT, 50MTP (P?), 60MT, 70MT, 80MT, 90MT (I hope), so if 2007 is on 70MT and 2005 is on 40MT what is on 50 MT because the 50MT says 2005 TeleAtlas data. I bet the 40MT has nn529_04tp and the 40R was a mix between the 2004 MT databases and the CNDV-50R that never came out. Easily checked by looking at a 40MT disk and seeing the Release name and the file dates. For some reason I want to say the 40R came out very late.

 

I have a few power points and docs on the kwi file formats. They really don't help much other than to explain exactly how all the little overlays and maps work together either in one large file or spread out into many.

[GMPOWER]

The bg files being the background make sense. I found that out today doing some research

 

The sky files if I remember right are the same size and date on all of the disks, so yes it might just be the satellite information

 

Here is a link to the Pioneer 2005 product guide

http://www.pioneerelectronics.com/pio/p ... er_ENG.pdf

You can see on page 6 that it says “New for 2005” CNDV-40R and is sold right next to “New for 2005” CNDV-50MTP

 

I should have the CNDV-21 coming to me this week. The CNDV-30 as far as I can tell from research is a Europe only disk.

 

I really do think that the project directories is the location in the SRAM of the unit, that is why if you screw up an upgrade you can go into the service menu and select the version to downgrade too. Until I can get a file system dump to see what the file system is in the nav system SRAM I can’t be 100% sure. Pioneer’s website lists the 40MT as having 2004 maps, 60mt with 2006 maps, 70mt with 2007 maps, and 80mt with 2008 maps. The website also has the 90mt up with 2009 maps.

http://www.pioneerelectronics.com/PUSA/ ... /CNDV-90MT

What I can tell from the 2005 product guide is that if you bought any AVIC system in 2005 it would come with the CNDV-50MT disks, but if you where to just buy the upgrade disk you would get CNDV-50MTP. The 50MTP says that it upgrades your system to equivalent to AVIC-N2 and AVIC-D1.

 

I have come across a lot of information and files that somewhat decode the alldata.KWI file, but nothing that does more than a hex reader.

 

 

Did you look through the service manual to see if there was any USB or ATA headers on the unit?

 

I also came across this information about what models use what files while searching on avic411

 

EU010APT.PRG - AVIC-9DVD, 8DVD, 80DVD, 88DVD.

EU040APL.PRG - AVIC-N1, N2, N3??? This one I'm not too sure about.

EU050APL.PRG - AVIC-D1, D2

EU070APL.PRG - AVIC D3, N4, N5

[kheller2]

There is a USB "block" driver but I didn't find any USB ports. I'm assuming its a generic style OS that can run on several versions of the hardware. The AVIC-9DVD had and a radio tuner in it I think, or something like that. There is the ATAPI interface to the DVD drive, that might be able to be adapted to say an ATA to flash card device but I also doubt that. The OS knows how to boot from a DVD drive and also it seems how to calibrate it. I am sure, however, there is some hidden way to hook up some type of device to this as they would have to have done a lot of development work on the device w/o actually burning DVDs for every test. Now, they probably had a special development piece of hardware for that, so who knows. (I'm so full of certainties aren't I?)

 

The HD nav versions didn't come out until a few years later, what did come out was the updated flash style nav units where you could remove the nav dvd after you set your route. At the moment I'm wondering if there is a touch nav unit that is compatible with most of the gear I already have installed and just pick that up. My TV tuner, and CUE traffic device have already been rendered useless with the changing of times, and I didn't by an XM package (even thought I have the unit). So, hunting on ebay for a unit seems in order. I would want one of the ones that actually show the radio station etc on the bazel of the device instead of having to opening the display up (one of the most annoying things about the unit I have).

 

Have you burned a 80R disc yet or even upgraded to the 40 code? It is very different from the previous look and feel.

[GMPOWER]

No, I have not tried a 80r disc or upgraded to the 40r yet. I first need to reinstall everything back into my car. I had to leave for a year and was unsure if I was going to sell my car, so I uninstalled the unit and wiring. I hope to get time tomorrow to install everything again.

 

I ordered a used avic-9dvd off of ebay that I can use as a test unit and take apart if need be. I also finally found a brand new CD-R11 remote on ebay for $35 shipped. I did not have the remote that would allow me to enter into the service menu, so this one will allow me to do that.

 

When I get the system installed I will then make a 80r disc to try. At first I will remove the POI and extra stuff to get the size of the file down to fit on standard dvd+r disc. If all works out well then I will just buy a pcmcia memory card adapter and 16gb memory card instead of wasting my money on dvd+r DL disc’s. With the memory card, I can also do a system file dump on the system and compare it between the different models that I have.

 

What is so annoying about opening the avh-P6400cd? I have the same unit and just keep it open at all times.

[kheller2]

You are of course assuming that the unit can boot and completely use the pccard slot.

 

I don't like having a bright display on when I'm driving at night and would prefer a little digital display instead. But that is just me.

[GMPOWER]

Just a little update: I got everything install and got the new remote in the mail. I put together a regular dvd+r 80r disc and installed it in the system and it loaded the file system and rebooted, but then after the new boot screen appeared it said “this is inappropriate disc.” In the service menu it had all of the updated information, so the update took. I tried with a few different file structures of the 80r but all ended up saying the same inappropriate disc. I think that it does not like the standard dvd’s with the mapping system all hacked up to save space. After reading about the failed attempt of using the memory card system to boot in this thread http://avic411.com/forum/viewtopic.php?f=27&t=17576&start=15 , I will just have to go to the store tomorrow and get some dvd+r dl disc’s to get this to work.

 

I don't like having a bright display on when I'm driving at night and would prefer a little digital display instead. But that is just me.

 

Have you tried holding down the “w” key on the screen for 5 sec. to adjust the dimmer, because you can make it pretty dark?

[kheller2]

I didn't know about the w key. I will try that. I purchased this car with all this stuff already wired and I've already had to fix a lot of things with the install. The illumination wire isn't hooked up either so at night its a daylight display. I'll get to fixing that soon. I have this installed an a 1993 Toyota MR2 Turbo. The original installers had the wire harnesses run of the engine top and exhaust manifold. They didn't last long that way. HAH

 

Btw, what minimal install did you do? the alldata.kwi itself is 3.1GB and the idx directory is 4.1G I'm guessing you did it w/o the idx directory.

[GMPOWER]

I didn't know about the w key. I will try that. I purchased this car with all this stuff already wired and I've already had to fix a lot of things with the install. The illumination wire isn't hooked up either so at night its a daylight display. I'll get to fixing that soon. I have this installed an a 1993 Toyota MR2 Turbo. The original installers had the wire harnesses run of the engine top and exhaust manifold. They didn't last long that way. HAH

 

Btw, what minimal install did you do? the alldata.kwi itself is 3.1GB and the idx directory is 4.1G I'm guessing you did it w/o the idx directory.

 

Ya, sounds like someone did a hack backyard install.

 

Here is the IDX file system that I used so that I could just burn on a standard dvd to test, this is from the 90mt east

05/23/2009  04:57 AM             5,174 AEGSR100.IDX
05/23/2009  04:57 AM            25,706 ARGSR100.IDX
05/23/2009  05:17 AM        56,292,064 ARSSR100.IDX
05/23/2009  12:14 AM           432,472 FMCDT100.IDX
05/23/2009  01:47 AM           200,420 FWYDT101.IDX
05/23/2009  01:47 AM           441,892 FWYDT102.IDX
05/23/2009  01:47 AM           425,828 FWYDT103.IDX
05/23/2009  01:50 AM           556,084 FWYDT104.IDX
05/23/2009  01:52 AM           623,828 FWYDT105.IDX
05/23/2009  02:20 AM           788,116 FWYDT106.IDX
05/23/2009  02:53 AM           450,932 FWYDT107.IDX
05/23/2009  03:21 AM           564,932 FWYDT108.IDX
05/23/2009  03:49 AM           621,700 FWYDT109.IDX
05/23/2009  04:26 AM           765,588 FWYDT10A.IDX
05/23/2009  04:43 AM            68,644 FWYDT10B.IDX
05/23/2009  04:53 AM           337,924 FWYDT10C.IDX
05/23/2009  04:57 AM             4,996 FWYDT10D.IDX
05/23/2009  05:16 AM             7,428 FWYDT10E.IDX
05/23/2009  05:17 AM           367,918 FWYSR101.IDX
05/23/2009  05:17 AM           837,748 FWYSR102.IDX
05/23/2009  05:17 AM           754,892 FWYSR103.IDX
05/23/2009  05:17 AM           990,128 FWYSR104.IDX
05/23/2009  05:17 AM         1,142,782 FWYSR105.IDX
05/23/2009  05:17 AM         1,405,870 FWYSR106.IDX
05/23/2009  05:17 AM           800,634 FWYSR107.IDX
05/23/2009  05:17 AM         1,023,940 FWYSR108.IDX
05/23/2009  05:17 AM         1,131,380 FWYSR109.IDX
05/23/2009  05:17 AM         1,386,838 FWYSR10A.IDX
05/23/2009  05:17 AM           133,504 FWYSR10B.IDX
05/23/2009  05:17 AM           659,352 FWYSR10C.IDX
05/23/2009  05:17 AM            11,350 FWYSR10D.IDX
05/23/2009  05:17 AM            14,318 FWYSR10E.IDX
05/23/2009  01:46 AM               196 ITSDT101.IDX
05/23/2009  01:47 AM               196 ITSDT102.IDX
05/23/2009  01:47 AM               196 ITSDT103.IDX
05/23/2009  01:49 AM               196 ITSDT104.IDX
05/23/2009  01:52 AM               196 ITSDT105.IDX
05/23/2009  02:19 AM        53,716,420 ITSDT106.IDX
05/23/2009  02:52 AM        28,029,332 ITSDT107.IDX
05/23/2009  03:20 AM        21,853,588 ITSDT108.IDX
05/23/2009  03:48 AM        32,359,412 ITSDT109.IDX
05/23/2009  04:25 AM        49,979,876 ITSDT10A.IDX
05/23/2009  04:43 AM               196 ITSDT10B.IDX
05/23/2009  04:53 AM         9,807,860 ITSDT10C.IDX
05/23/2009  04:57 AM               196 ITSDT10D.IDX
05/23/2009  05:16 AM               196 ITSDT10E.IDX
05/23/2009  01:46 AM               336 ITSSR101.IDX
05/23/2009  01:47 AM               336 ITSSR102.IDX
05/23/2009  01:47 AM               336 ITSSR103.IDX
05/23/2009  01:49 AM               336 ITSSR104.IDX
05/23/2009  01:52 AM               336 ITSSR105.IDX
05/23/2009  02:19 AM         4,019,680 ITSSR106.IDX
05/23/2009  02:53 AM         2,865,308 ITSSR107.IDX
05/23/2009  03:20 AM         1,884,912 ITSSR108.IDX
05/23/2009  03:49 AM         2,931,714 ITSSR109.IDX
05/23/2009  04:25 AM         4,711,124 ITSSR10A.IDX
05/23/2009  04:43 AM               336 ITSSR10B.IDX
05/23/2009  04:53 AM         1,225,346 ITSSR10C.IDX
05/23/2009  04:57 AM               336 ITSSR10D.IDX
05/23/2009  05:16 AM               336 ITSSR10E.IDX
05/23/2009  04:57 AM             1,038 ZNSEL100.IDX
05/23/2009  05:16 AM             3,820 ZNSRC100.IDX

 

The problem that I was having with the inappropriate disk was because I forgot to change the disc version to the 40r version. Once I figured that out it was not hard at all to setup the 90R disk. I was able to upgrade from the CNDV-21 to the CNDV-90r.

 

Here is my root 90r file system with just the the test idx folder

10/04/2009  03:44 AM    

 
Here is the bg folder
[code]10/04/2009  03:28 AM    

 
The pim folder inside of the bg folder, I need to edit this because not everything is coming up on the system
[code]10/04/2009  03:29 AM    

 
Here is the pimanime folder 
[code]10/04/2009  03:26 AM    

 
Here is the marktp folder, taken from the 40r
[code]10/04/2009  03:30 AM    

 
Here is the point/sound folder
[code]10/04/2009  03:38 AM    

 
Here is the sky folder
[code]10/04/2009  03:38 AM    

 
Here is the snddata folder 
[code]10/04/2009  03:38 AM    

 
Here is the voice folder
[code]10/04/2009  03:38 AM    

 
this is my dvi.dat file
[code]DISC VERSION       [05R03U00]  
FORMAT             [KIWI] 
MAP VERSION        [93]
MARKET VERSION     [uC]
DATE               [090707]
DISC NAME          [CNDV-90R/UC-1-A]
TP APL VERSION     [***]
RC APL VERSION     [4.000004]
DATA COMPANY       [iPC] 

 

From the 90mt root folder I took

alldata.kwi dvi.dat

indexdat.kwi

kgrpdat.kwi

landmark.kwi

metadata.kwi

rdstmc.kwp

region.kwi

stocks.txt

From the 40r root folder I took

eu010apl

uc010dat.esp .fra .usa

uc010sys.esp .fra .usa

uc010gps

uczparts

 

For the bg root folder I used all of the 40r plus added the "sensor" files and the 2009 bgopen

For the pim folder inside of the bg folder I took everything that was not already in the folder from the 90mt pim, pim2din, pim529 90mt bg2 folder pim, pim2din

For the pimanime inside of the bg folder I took everthing that was not already in the folder from the 90mt pimanim2, pimanime 90mt bg2 pimanim2, pimanime

For the IDX folder I took everything from the 90mt

I had to create the "marktp" folder in the 90r and took everything from the 40r marktp folder, nothing from the 90mt

The point\sound folder I kept from the 90mt

The sky folder I kept from the 90mt

The snddata folder I kept from the 90mt

I had to create the "voice" folder and took the uc010vdv.esp .fra .usa from the 80mt voicetp folder

 

This is my system version information for a avic-80dvd from the service menu

System boot	3.02
System OS	3.03
GPS Program	2.70
Apllication 	4.000004
Language data	2.00102b
Syscom		8.00
Drive Core	33.00
Drive apl. 	8.19
TV Ucom		8.06
System Lang.	UC010sys.USA
App. Land.	UC010DAT.USA

 

Everything seems to be working right. Have you noticed any problems at all? The new mapping system picked up on some new roads that we have in town.

I am still going to try to get the file system on a flash drive because I don't know for sure if the guy in that post I linked to in my last post did everything right. I am not sure if he let the unit format the flash drive, as shown in the service manual, before he added the file system. If he did not do this, I think the flash drive would have hidden windows boot system files on it that might stop it from working on the navigation unit.