Delete the '.' from the end of the URL (it should end in ".html" not ".html.").
http://lists.linuxtogo.org/pipermail/haret-devel/2010-February/000009.html
I may have something more recent, will have to check the build box when I get home later.
Thanks for pointing it out 
Was to tired to notice that dot
PS. Anybody interested to test 2011 update? Take a look at this thread, and please post results
This is awesome even to know you guys are on the right track. I have used some of Abbs mods on my old F series and loved it. I am so hoping to be able to add some of your own touches to my Z110/120BT. Good luck and I can't wait. I love how you all think together here to solve these issues. Great teamwork!!!
Found my notes on setting up a Windows + Cygwin + CEGCC Haret build environment, was in Feb 2011 so there may be some drift and updates required.
--- Using Cygwin 1.7 and cegcc 0.59 ---
cd / tar xvfj /cygdrive/c/Users/haretUser/Downloads/cegcc-0.59.1.tar.bz2 cd /opt/ tar xvfj /cygdrive/c/Users/haretUser/Downloads/cegcc_mingw32ce_cygwin1.7_r1375.tar.bz2
mkdir /cygdrive/c/haret cd /cygdrive/c/haret git clone git://git.linuxtogo.org/home/groups/haret/haret.git
asm("swpb %0, %1, [%2]"
+ // Address gcc 4.x strict Rn overlap prevention
- : "=r" (readval)
+ // : "=r" (readval)
+ : "=&r" (readval)
asm("swp %0, %1, [%2]"
+ // Address gcc 4.x strict Rn overlap prevention
- : "=r" (readval)
+ // : "=r" (readval)
+ : "=&r" (readval)
#pragma GCC diagnostic ignored "-Wwrite-strings"
Files that need cleanup:
src/memory.cpp
src/wince/output.cpp
src/linboot.cpp
src/imxcmds.cpp
class Machine1136 : public Machine {
public:
Machine1136();
int detect();
};
b. Edit src\mach\arch-arm.cpp to add Machine1136 init:
/****************************************************************
* ARM 1136JF-S and 1136J-S
****************************************************************/
Machine1136::Machine1136()
{
name = "Generic ARM 1136J(F)-S";
flushCache = cpuFlushCache_arm6;
arm6mmu = 1;
archname = "1136";
CPUInfo[0] = L"1136";
}
int
Machine1136::detect()
{
uint32 p15r0 = get_p15r0();
return ((p15r0 >> 24) == 'A'
&& ((p15r0 >> 20) & 0xf) == 1
&& ((p15r0 >> 16) & 0xf) == 7
&& ((p15r0 >> 4) & 0xfff) == 0xB36);
}
REGMACHINE(Machine1136)
c.Edit src\mach\machlist.txt to add AVIC and iPaq 310 detection:
PLATFORM=Centrality Titan
iPAQ310, 1136 ,HP iPAQ 310 Travel Companion, CNTY_TITAN, \
set ramaddr 0xc0000000, \
addlist GPIOS p2v(0x80090000) 0xff00 16, \
addlist IRQS p2v(0x90020000) 0xf000 16
PLATFORM=PIONEER
AVICF90BT, 1136 ,Handheld Reference Board BSP version:TitanHHV1.0.47, CNTY_TITAN, \
set ramaddr 0xc0000000, \
addlist GPIOS p2v(0x80090000) 0xff00 16, \
addlist IRQS p2v(0x90020000) 0xf000 16
d. Edit tools\buildmachs.py to add the arch-arm.h and arch-centrality.h includes to the auto-generated file it creates (out/mach-autogen.cpp). Make sure to put these lines in the """ quoted Python string following the other #include file declarations:
#include "arch-arm.h" #include "arch-centrality.h"
user@host /cygdrive/c/haret $ make
Result:
mkdir out Compiling (armv4) src/mach/machines.cpp Building machine list Compiling (armv4) out/mach-autogen.cpp Compiling (armv4) src/mach/arch-pxa27x.cpp ... Compiling (armv4) src/s3c-gpio.cpp Compiling (armv4) src/msmcmds.cpp Compiling (armv4) out/version.cpp Checking for relocations Linking out/haret-debug (Version "pre-0.5.3-20110820_135737") Stripping out/haret-debug to make out/haret.exe Creating tar out/haretconsole.tar.gz user@host /cygdrive/c/haret $
Found my notes on setting up a Windows + Cygwin + CEGCC Haret build environment, was in Feb 2011 so there may be some drift and updates required.
--- Using Cygwin 1.7 and cegcc 0.59 ---
- Install Cygwin 1.7 plus the following additional packages:
cvs
cvsutils
gcc-mingw-core
gcc-mingw-g++
git
make
perl
python
subversion
wget
- Download cegcc 0.59 from SourceForge and extract to /opt
cd / tar xvfj /cygdrive/c/Users/haretUser/Downloads/cegcc-0.59.1.tar.bz2 cd /opt/ tar xvfj /cygdrive/c/Users/haretUser/Downloads/cegcc_mingw32ce_cygwin1.7_r1375.tar.bz2
- Copy libgcc_s_sjlj-1.dll from /opt/cegcc/bin/ to SD card (new dependency cegcc 0.59.0 introduced)
- Use git to clone the HaRET repo:
mkdir /cygdrive/c/haret cd /cygdrive/c/haret git clone git://git.linuxtogo.org/home/groups/haret/haret.git
- Patch src/l1trace.cpp to address the problem with gcc 4.x being more strict with swp/swpb instructions:
asm("swpb %0, %1, [%2]" + // Address gcc 4.x strict Rn overlap prevention - : "=r" (readval) + // : "=r" (readval) + : "=&r" (readval) asm("swp %0, %1, [%2]" + // Address gcc 4.x strict Rn overlap prevention - : "=r" (readval) + // : "=r" (readval) + : "=&r" (readval)
- Optional: Add the pragma to remove warnings about deprecated conversion from string constant to ‘char*’
#pragma GCC diagnostic ignored "-Wwrite-strings"
Files that need cleanup:
src/memory.cpp
src/wince/output.cpp
src/linboot.cpp
src/imxcmds.cpp
- Add needed changes to enable ARM1136-J(S)F support (generic ARMv6 could work)
a. Edit include\arch-arm.h to add Machine1136 class:
class Machine1136 : public Machine { public: Machine1136(); int detect(); };
b. Edit src\mach\arch-arm.cpp to add Machine1136 init:/**************************************************************** * ARM 1136JF-S and 1136J-S ****************************************************************/ Machine1136::Machine1136() { name = "Generic ARM 1136J(F)-S"; flushCache = cpuFlushCache_arm6; arm6mmu = 1; archname = "1136"; CPUInfo[0] = L"1136"; } int Machine1136::detect() { uint32 p15r0 = get_p15r0(); return ((p15r0 >> 24) == 'A' && ((p15r0 >> 20) & 0xf) == 1 && ((p15r0 >> 16) & 0xf) == 7 && ((p15r0 >> 4) & 0xfff) == 0xB36); } REGMACHINE(Machine1136)
c.Edit src\mach\machlist.txt to add AVIC and iPaq 310 detection:PLATFORM=Centrality Titan iPAQ310, 1136 ,HP iPAQ 310 Travel Companion, CNTY_TITAN, \ set ramaddr 0xc0000000, \ addlist GPIOS p2v(0x80090000) 0xff00 16, \ addlist IRQS p2v(0x90020000) 0xf000 16 PLATFORM=PIONEER AVICF90BT, 1136 ,Handheld Reference Board BSP version:TitanHHV1.0.47, CNTY_TITAN, \ set ramaddr 0xc0000000, \ addlist GPIOS p2v(0x80090000) 0xff00 16, \ addlist IRQS p2v(0x90020000) 0xf000 16
d. Edit tools\buildmachs.py to add the arch-arm.h and arch-centrality.h includes to the auto-generated file it creates (out/mach-autogen.cpp). Make sure to put these lines in the """ quoted Python string following the other #include file declarations:#include "arch-arm.h" #include "arch-centrality.h"
- Build HaRET
user@host /cygdrive/c/haret $ make
Result:mkdir out Compiling (armv4) src/mach/machines.cpp Building machine list Compiling (armv4) out/mach-autogen.cpp Compiling (armv4) src/mach/arch-pxa27x.cpp ... Compiling (armv4) src/s3c-gpio.cpp Compiling (armv4) src/msmcmds.cpp Compiling (armv4) out/version.cpp Checking for relocations Linking out/haret-debug (Version "pre-0.5.3-20110820_135737") Stripping out/haret-debug to make out/haret.exe Creating tar out/haretconsole.tar.gz user@host /cygdrive/c/haret $
- Copy out/haret.exe over to your Testmode SD, eject, boot to test mode and run haret.exe from your SD card.
can u share this haret.exe to try at my z120bt ? i need a compile a kernel or your file have a linux distro included?
can u share this haret.exe to try at my z120bt ? i need a compile a kernel or your file have a linux distro included?
Don't have the haret.exe handy, sorry. Never got around to building a Linux kernel for the Titan, but I'm sure you can find some patches on the Internet.
By the way, you'll need to look up the right platform string to add to src\mach\machlist.txt for the z120bt. Also, there's no guarantee Pioneer or their 3rd party Navi developer used the SiRF Titan, which means you might need to add support for an ARM core other than the 1136JF(S) to HaRET (detection code based on ID register, MMU and cache setup, etc).
Hey Condi how are you? I have been following this thread for some time now but am not aware of where the progress is currently or if it is stalled. It appears that users of these units are convinced these units can be hacked and modified as the previous F series units are. My question to you is, can anything be done with these units once they are hacked pertaining to running other GPS apps or other customization? If so, could you please update the first post in this thread with what can be accomplished at this point that the end user can use? Thank you.
Hey Condi how are you? I have been following this thread for some time now but am not aware of where the progress is currently or if it is stalled. It appears that users of these units are convinced these units can be hacked and modified as the previous F series units are. My question to you is, can anything be done with these units once they are hacked pertaining to running other GPS apps or other customization? If so, could you please update the first post in this thread with what can be accomplished at this point that the end user can use? Thank you.
Hi Friend, I'm fine thanks, and how are you? 
I added info about not working gps signal in the beggining of the first post. I'm also convinced that it can be done, but for now we are in dead-end.
I will risk my unit and try to replace eu090rgd.prg. That will be my next step.. Just need to get some good promising modified version,
or from older unit - but with correct avics header instead of normal winceimg (like in most of old units was).
Hi Friend, I'm fine thanks, and how are you?
I added info about not working gps signal in the beggining of the first post. I'm also convinced that it can be done, but for now we are in dead-end.
I will risk my unit and try to replace eu090rgd.prg. That will be my next step.. Just need to get some good promising modified version,
or from older unit - but with correct avics header instead of normal winceimg (like in most of old units was).
What about a Z130 upgrade mod 
Now that the software is out and about....
Hi,
My model is 920bt , I did replaced only maps , don't have sky and down 500m vision I have all map in red ,
Gps signal working perfect , search address working , Poi working , look picture I need help in color map and sky don't have
Thanks to my local italian friend I got Australian map from F310BT. I put maps on my US- X930BT and what is a MIRACLE!!! It works!!! If you go same road - keep your BT (bluetooth?), BG, SKY (or it would be no sky in 3D view), INIDATA, Sound, TTSdata folders.
But:
1. Map turns red when scale close then 500m. (probably we need L3D folder from Au unit like F20/F30/F930)
2. Addres serach is not working. I can choose country, I can choose state, But when I push city button it sends me to cockpit view. It seems like I need files like 2DCITY**.LFT in every folder that not present in F310.
3. It still runs US english. - it looks I need to change files in USER\PRG0\Apl\LANGDATA
BTW. If someone has Australian update SD (USED!!!) can you share it?
finally after some try&error my F920BT is now running on hackmode.. I also had to overwrite the folder "PRG1" with the files of the "PRG0" directory!
keep up the good work condi..
greetings from germany..
I'm new to this hacking ones car stereo so I have to ask. What is the goal of all of this? What is the hoped for outcome. I gather that it is to run custom software on the HU such as a different NAV software. Will it allow for the complete customization of the HU user interface? And WTF did Pioneer choose windows CE as the base for their UI?
What is the goal of all of this? What is the hoped for outcome. I gather that it is to run custom software on the HU such as a different NAV software.
That is the goal but its not there yet. No need to hack at this time.
heres 1 suggestion
a software bypass for the X920BT.
Hi Condi!
For now is it or will it be possible to hack the unit files so I can use maps from other countries using the original GPS software? Does it depends on figuring out the same dead end you're stuck now?
Best Regards!
so looking at the demo on youtube
That is what it says on the first post right?
Yea but I missed it. Summer donna
Hey Condi! how are u? hey man can u help me? i'm searching the brazilian maps on the web more than one month but i didn't find, i can make the backup i copy the all past from my avic z130bt to my SD, i just can try to replace the USA maps to Brazilian Maps, do u know if this works? sounds good the upside friend replace the USA maps to the Australian Maps from F series! i need a help because the unique person of i found here the service to replace the maps it's too expensive $150 USD to replace the maps, and he found a menu in portuguese from portugal i think he's replace the menu file to the F series from europe, what do u think about this ? sorry for borring u but i don't found any news to help me!
Hi all,
is it possible to do a software bypass with Condi's Hackmode? I can run it succesfully on my F930BT.
Would be great to have it in...
Br.
i'm searching the brazilian maps on the web more than one month but i didn't find, i can make the backup i copy the all past from my avic z130bt to my SD, i just can try to replace the USA maps to Brazilian Maps, do u know if this works?
Yes, you need Brazilian map. It works somehow. %)) I replaced US map with Australian from F310BT, but it is 100% compatible. Most likelly you need map from Brazilian F20BT/F30BT. When you will have map, make backup from your unit first, save it somwhere safe and start to play with folders on HU, replace "numbered" folders like 00 ... 0A (hex) and FE folders and try to reboot your unit. then you will see, if it works. And... 150USD... if someone ask me to pay 150USD for fully working Australian map on my X930BT -I'll go for it.
Yes, you need Brazilian map. It works somehow. %)) I replaced US map with Australian from F310BT, but it is 100% compatible. Most likelly you need map from Brazilian F20BT/F30BT. When you will have map, make backup from your unit first, save it somwhere safe and start to play with folders on HU, replace "numbered" folders like 00 ... 0A (hex) and FE folders and try to reboot your unit. then you will see, if it works. And... 150USD... if someone ask me to pay 150USD for fully working Australian map on my X930BT -I'll go for it.
hi Ralpharn! tnks a lot for this information! you give me the first step! i make the full backup from my unit z130bt, but here in brazil we just have the avic u220 unit the module to plug in the back rgb for avh 4200/4300/2200/2300, i would like to put my hands in this unit but i don´t find anyone here nohting else from my friends haves one of this! sorry for my english! what do u think? this will works the maps from u220?best regards Rafael
Map from U220 should work... may be... in my case map from F310BT just partly working. I can't choose city, so search is not working. BTW, do you have F310BT/F320BT there in Brazil?
Condi,
Back when I was playing around with MioPocket there was a program on there that would allow you to run a slew of different gps programs. It is(was) called port splitter. Anyone tried using that to get the GPS going?
Map from U220 should work... may be... in my case map from F310BT just partly working. I can't choose city, so search is not working. BTW, do you have F310BT/F320BT there in Brazil?
Here in Brazil we have no model avic appliance module to turn on only the RGB in the AVH, the procedure now done all afternoon SCHEDULE Brazil (GMT-3) put the maps of the U220 and that run partially or in your case, we to battle over it now in my case does not work when the city select the city back to the map screen, but the states and parents work right, in aS, it works partially when selecting coffee goes to the hotel when going to select banks parking when selecting hotel back to the map screen, ABC back to the Map screen and aurond the city back to the map screen as well, so I saw some procedures that will send you by MP because it is another link! good luck there too because we need!
best regards
Rafael

it's very slow today no news today ?