In manual of rewriting 7zip we read:

"7z.dll" MUST be used as the file name for the edited 7zip library.

Other file names will not be written into the product."

So the script is written only to get 7z.dll.

Another idea - we need to know how to modify ScriptExec.ini..

Anybody knows how to get plain text from it? How to decode/decompile it and complie again?

Maybe there is some trick to decode data via bruteforce

- we know that it should contain '7z.dll' phrase in it after decrypted... ??

Something like that?

http://en.wikipedia.org/wiki/Known-plaintext_attack

Some secret/hidden things? Or some useless things haha

Is it possible to modify DiscRW program to have default pass to save files to our external media?

on F900Bt they have same looking "unmounted" partition and it contains serial number (with region and model in it) welcome screens, and even windows folder! so.. I think it is very important to read and dump this hidden thing, what software can mount partition after windows bootup has finished?

 

Is it possible to modify DiscRW program to have default pass to save files to our external media?

I thought the same about default path for saving! I searched for maybe some additional parameters for that app, but its not working. Tried also adding keyboard driver, sip, jotkbd, eurokbd, but none of them worked. Present keyboard driver is working, but only for such keys as: enter, esc, etc. No letters/numbers. Another way to get that data is to get working Storage Manager from control panel. How did you get content of the partition - windows/screens etc?

I'm working now on running newest GpsGate, it wasn't starting, now I'm on the right track!

---edit:

Still no free gps port.. but.. after maaaany hours I've got working newest version of GpsGate - two versions:

GpsGateWINCE.arm.CAB and GpsGatePPC.ARM.CAB. It was very hard, because:

• we cant install .cab's (im working on it..)
  
• we cant normally run GpsGate.exe (dlls etc. - had to modify a lot of them..)
  
• we cant run GpsGate without proper registry (error 340), too many entries to write it manually in mortscript, also we couldnt import .reg files - until now! I can successfully import .reg at last very handy for future modifications.
  

For now it will not give us working gps - which is propably on com4 or com7(propably that). Few ports are still busy. Busy already after system boot.

From now I think I can get .net framework installed, and try ShortFuse gps utility.

The most important thing for now is also to get to Storage Manager/Control Panel, mount hidden partition and explore it.

---edit2:

I've got some script which will type automatically output-path in DiskRW to read/write rom! Will test it tomorrow! Good night!

Can somebody get me a copy of the original AVIC-X920BT XM files . I completely forgot to back mine up. Thank You!

x920bt

1. I want to set up the map of europe

2. I want to set up Turkish language

3. radou the frequency

of the united 90.1 90.3 90.5

Europe 90.1 90.2 90.3 90.4 90.5 I want to do

please help I do not know how to do it

For now it will not give us working gps - which is propably on com4 or com7(propably that). Few ports are still busy. Busy already after system boot.

I wonder if either of those ports would be freed if the antenna was disconnected at boot?

I wonder if either of those ports would be freed if the antenna was disconnected at boot?

I think no, disconnecting antenna will gonna stop giving correct data/signal, but com port will still be busy.. presuming of course

x920bt

please help

thanks it worked fine on my X920-bt europe model

@tasdemir - What you are asking is not possible for now, maps are not from igo like f900bt. If f920bt has the maps for Turkey you could try to backup NAND2 and rewrite it with NAND2 from f920bt, but I don't know if it has other crap, like license files or something. As far as the radio frequencies go, I'm not sure if it's doable with just swapping NAND/USER/PRG0/APL with some files from f920bt, do some research on other US units converted to EU (I have no experience with this).

x920bt

 

1. I want to set up the map of europe

2. I want to set up Turkish language

3. radou the frequency

of the united 90.1 90.3 90.5

Europe 90.1 90.2 90.3 90.4 90.5 I want to do

please help I do not know how to do it

1 & 2 was answered

3. I assume the FM tuner is hardware locked, if you open up the X920 you'll find several references on the circuit board to the region the unit is intended for e.g. US, EU, AUS, etc. I tried to add resistors to attempt a change to the frequency scan but nothing worked. Somewhere on this forum there's a topic about the different tuning ciruit used for different regions.

(If you want to use the FM radio, try searching for a FM Band expander or US FM shifter or something like that. This will alter the FM frequency that your radio demodulates.) Google/Ebay is your friend.

What time will help me please

Is it possible to hack the 930bt??

thank you

http://www.youtube.com/watch?v=S-my-zSDU5g

Got DiskRW working Output path is being inserted via automatic script!

It took ~1h to read full image - 3,59GB! Log from DiskRW:

Saturday, June 11, 2011 2:18:25 PM
(01CC28426D15CE80)


Opening Disk ...OK
Getting Disk Information ...OK

GEOMETRY
 Cylinders = 1
 Tracks per Cylinder = 1
 Sectors per Track = 7536640
 Bytes per Sector = 512
 TotalSectors = 7536640
 Disc Size = -436207616 bytes

 **Flags Code = 0xA

Getting Store Information ...OK

 StoreName = Centrality MLC Flash Disk
 DeviceName = DSK1:
 DeviceType =  FLASH  
 DeviceClass = BLOCK
 DeviceFlag =  READWRITE  
 DeviceProfile = SDMLC
 Total Sectors = 7536640
 Free Sector = 0
 Bytes per Sector = 512
 Biggest Partition Creatable = 0
 Attributes = 0x0
 Number of Partition = 3
 Number of Mounted Partition = 2
 Last Format = 1/1/1601 12:00:00 AM
 Last Modified = 1/1/1601 12:00:00 AM

Requested Operation ...

 Operation type  = Disc Reading
 Store = DSK1:
 Offset = 00000000h - E5FFFFFFh
 Length = 3858759680 (E6000000h) bytes 
 Output File = \SDMMC\odczyt.img


Creating File: \SDMMC\odczyt.img ...OK

Starts Reading Disc ...

 Starts on Sector = 0 
 Ends on Sector = 7536639 
 Buffer Size = 512 kb

+---Viewing first 512 bytes extracted 
00000000:    EB 3C 90 00 	ë<Â.
00000004:    00 00 00 00 	....
&&
000001B8:    8E 25 CF 46 	Ž%ĎF
000001BC:    00 00 00 BF 	...ż
000001C0:    02 00 00 00 	....
000001C4:    13 03 40 00 	..@.
000001C8:    00 00 00 20 	... 
000001CC:    03 00 00 7B 	...{
000001D0:    14 03 0B 00 	....
000001D4:    56 09 40 20 	V.@ 
000001D8:    03 00 00 10 	....
000001DC:    06 00 00 22 	..."
000001E0:    57 09 0B 00 	W...
000001E4:    4D 75 40 30 	Mu@0
000001E8:    09 00 C0 CF 	..ŔĎ
000001EC:    69 00 00 00 	i...
000001F0:    00 00 00 00 	....
&&
000001FC:    00 00 55 AA 	..UÅž

*************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************

I will read later only the hidden unmounted partition, and investigate the content

Via DiskRW it should be more safe to read, modify and write modified image, I think?

And then just grab EU090PLT.PRG file from NAND which should get modified?

---edit:

Do you guys know how to get proper offset (lenght we've got = 100mb), for unmounted 'secret' partition?

--edit2:

Got almost complete v1.4.. beta testing

I've been following this thread for a while now and I just wanted to say keep up the good work. At the moment I'm looking at buying a X930BT and it would be great to be able to load Australian maps on to it and ideally change the region number. Does anyone know what maps the latest AVIC units use? I saw on the Aus Pioneer site they use whereis maps, not sure if that is any help but it might be a clue.

I have the XM files and was going to fire up photoshop and possibly create the missing logo but was wondering if anyone has done this already and if so do I need to update the .dat files somehow?

Also would it be possible to create my own category of shows with the 20 or so channels I listen to....I know I could use presets but an additional category would be cool.

v1.4 ready

I need help with Part00 - our secret partition! In new ver. there are mountUNmount tools - .exe's to automount or unmount partitions. It works on Part01 and Part02 (NAND and NAND2), but not on Part00! Maybe some missing registry? Maybe bad MountFlags, MountHidden etc? - Info about that misterious partition in DiskRW.

v1.4 ready

sweet, I'll try it when I get home tonight!

sweet, I'll try it when I get home tonight!

Counting on that Please post results!

We've got more and more possibilities, need help with hacking avics from all of you guys!

sweet, I'll try it when I get home tonight!

I dont see a "CONDIUPDATE" folder and script, are you changing how the update process works?

I dont see a "CONDIUPDATE" folder and script, are you changing how the update process works?

You've got v1.3? I could make and update-version if you want.. Until now only base version.

Oh, Sorry, I misunderstood. I am at 1.3 now and thought 1.4 was autoupdate from 1.3.

No need for autoupdate, thanks!

Oh, Sorry, I misunderstood. I am at 1.3 now and thought 1.4 was autoupdate from 1.3.

 

No need for autoupdate, thanks!

Making it right now.. will post later today

Hello, i have an AVIC F220... Can i help you? I would like to install another navigation software in the future

Hello, i have an AVIC F220... Can i help you? I would like to install another navigation software in the future

We all want to have that possibility. If you can release gps port to be used with other software, then yes - you can help

If not, then - we've got a lot of tools, possibilities right now to try to achieve that.

I don't know what F220 is based on. Try to copy TESTMODE.KEY to root of SD and check if it works on your unit.

br

condi

PS. V1.3 to V1.4 UPDATE ready