FYI

IS this for the 940?

I tried the on the 940 and did not see copy and paste.

Jimbo

Glad to see you again!

Can you delete PRG.FLG file from your limited testmode? it will make PRG0 active and you will have working testmode (and software from F30) again.

I assume that you have updated your device (and got PRG.FLG file he-he...)

 

Which features are not working on your 'semi-working' f40bt firmware?

I'm very busy lately, 1st day on new place

Please tell me - whats the source of this 'patched testmode exe' ?

And whats the solution to run it on f40bt which cant be written etc?

Or such solution doesnt exists?

Got to dismantle my avic, I've bought ac adapter for 'home-use'.

I've flashed all modules from F40BT on my F30BT - .PRG files, including EU090BOT - bootloader

Also the good news is that there is no 'version-check',

so there is no problem with upgrade, but also downgrade.

Another thing that I've found is that files which are on PRG0/PRG1, APL directories,

are not important as far as testmode is concerned.

In one word - you can delete all APL(ication) directory,

and AVIC will still boot - with 'no applicable software' message.

And it will still boot into testmode

Propably the solution for working copy/paste testmode

is to flash EU090RGD.PRG (and maybe EU090PLT.PRG)

v3 version from my F30bt for example, on locked F40bt device.

Gonna try to downgrade my v4 f30 modules when I will get some free time.

To be 100% sure of what I've wrote I've got to flash all PRG's with old v3,

write back v3 APL and check if my avic will boot correctly

Until then - everything what you do is on your own risk ;)

Oh and I will post some video proof lol.

br

condi

I'm very busy lately, 1st day on new place

Please tell me - whats the source of this 'patched testmode exe' ?

And whats the solution to run it on f40bt which cant be written etc?

Or such solution doesnt exists?

Other guy made modified firmware (EU090PLT.PRG) but it heven't been tested yet. I can pm you a link to it but I gess it is too dangerous to put it here.

I've flashed all modules from F40BT on my F30BT - .PRG files, including EU090BOT - bootloader

Where did you get ALL modules from F40BT? or you talking about that update archive?

Also the good news is that there is no 'version-check',

so there is no problem with upgrade, but also downgrade.

That is a good news!

Another thing that I've found is that files which are on PRG0/PRG1, APL directories,

are not important as far as testmode is concerned.

 

In one word - you can delete all APL(ication) directory,

and AVIC will still boot - with 'no applicable software' message.

And it will still boot into testmode

That's right. Testmode is part of windows and sits inside EU090PLT.PRG. And if we start testmode it runs before anything from APL folder.

Propably the solution for working copy/paste testmode

is to flash EU090RGD.PRG (and maybe EU090PLT.PRG)

v3 version from my F30bt for example, on locked F40bt device.

 

Gonna try to downgrade my v4 f30 modules when I will get some free time.

To be 100% sure of what I've wrote I've got to flash all PRG's with old v3,

write back v3 APL and check if my avic will boot correctly

 

Until then - everything what you do is on your own risk ;)

Oh and I will post some video proof lol.

 

br

condi

Also you haven't posted list of new features that work if you run F40 software om F30. And also list of features that doesn't work.

I hope there is a helpfull information:

Oficial navi.exe reads data from system library using function GpsGetPos and have no idea about NMEA or COMpots.

So... to have working IGO (or something else) we need software that reads it same way, convert data and output it to virtual com port, or teach IGO to read from same library. How it was in F900?

format of PRG files:

offset 0 length 32 bit - platform signature 0xA55A5AA5

offset 4 length 32 bit - length of the file without header

offset 8 length 32 bit - CRC32 crc from 0x200 till the end of the file

offset 0xC length 8 bit - unknown, always =0

offset 0xD length 8 bit - for bootloader =0 , for PLT or RGD =1 (most likely type of the file) if =0 - file format is 0xB000F, if =1 - nb0

offset 0xE length 32 bit - unknown, always 00040400

offset 0x18 length 64 bit - file name without exstension.

offset 0x200 till the end of the file - DATA.

Testmode.key and update scripts use NPSysCtrlHandler.dll.

All credits for this knowaledge goes to 3 russian hackers, I just translated it to extence if my understanding.

Anyone know how to format the NDATA portion of the nand?

Anyone know how to format the NDATA portion of the nand?

I do not think I got idea what you would like to do.

You can download and copy contains of NDATA folder for US and AU units.

But why you need format this partition?

I have corrupted folders that cant be deleted/edited via testmode. I want to see if there is a way to fix short of replacing the nand.

I have corrupted folders that cant be deleted/edited via testmode. I want to see if there is a way to fix short of replacing the nand.

Yes I have also tried hackmode. I am unable to format or edit the folders.

hi guys,

 

im back to business lol

 

br

condi

That is great news! welcome back!

If I can be of any help, let me know...

hi guys, a little off topic here i have a z120bt that has the upgrade to z13 firmware..... with testmode i know i can go in and test the fan on the unit...is there a way to keep the fan on fast setting? i have problems with the ATT and the unit overheating.... im trying to avoid adding an additional fan if i can keep the stock fan on the fast setting....let me know if this is possible....

Is there a torrent for the x930bt navteq maps update to x940bt. The new files cost 120$ here's a link http://www.pioneerelectronics.com/PUSA/Car/Accessories/Map-Upgrades/NAVTEQ+2012+Map+Upgrade+for+AVIC-Z130BT,+AVIC-X930BT,+and+AVIC-X9310BT

what is the password por the encripted file condiHACKMODE V. 1.4

Password in the first post.

Have any sound in Igo? On my x930 sound work ONLY in default navigation program

Replaced car battery. My Pioneer AVIC-X930BT required a password after the new car battery was installed. Couldn't remember for the life of me, ever having used a password, nor what it might be. tried everything. No luck. Tried Condi's Hackmode. YES! Thank you thank you thank you!!!!!!!!!

Some good/bad news:

Someone reported on russian forum about working modified portspliter that allows him to run IGO Primo on his F930BT with working GPS. So now he works on integration of "aftermarket" Navi programs to stock shell.

He estimates that it will took him 2-4 weeks to get stable and working hack. And to install it we need working testmode or hackmode.

So bad news for F940/F40/X930/Z140 units owners- you need to work out how to get working testmode.

And if someone interested in this hack- please do not update your units yet.

Update for EU units for F940/F40 has identical files as update files for US X930/Z130 except NDATA folder (map update).

Bad news: update files have no info about region, that means we can't change region by updating unit with desirable region update.

ralpharn - did you ever look at my post on how i got comport working with igo on u310bt?

I would assume its the same way:

#683

I'm trying to find a way to get executable to run straight from sd card instead of having to replace stuff on flash...

u310bt is another platform. This solution not work - x920-930-940 has no AppsLib.dll.

sanik - not talking about appslib, and yes, they are different, but they share many similarities in code and libraries.

I believe nav is very similar. Anyhow, unless i can figure out a way to get executable to launch from sdcard without modding flash, i'll never know...

What im talking about is changing the com port in the registry, soft rebooting, then having igo/primo latch on to the new comport - navi/hmimanager will not have it because it was changed...

Unfortunatelly method from F220/U310 is not working for us.

But in new AVIC we have RAM-based registry - cannot save changes after reset. And in additional, x930 not translate gps data in nmea format

ok thanks, now I have a straight answer on this!

Hey Ralpharn, thanks for the updates on the hack, can you send me a link to that russian forum so I can also follow the progress of that hack, it looks promising, as currently I never use the navi in my unit because the map coverage is crap.

Hi folks,

I figured out how the TESTMODE.KEY encoding works.

I can generate a "Developer" testmode key that has copy enabled in file maintenance mode on these (including .40 series), as well as some interesting "scripting" modes.

Condi is working on an update to his hackmode that uses automated installation.

http://avic411.com/i...-scriptexecini/