Hard Drive Mod
The IDE/PATA SSD that i have, use memory chips and ONE SINGLE controller (ST controller in my case) to transfer the data from IDE/PATA bus to NAND BUS.
Just like the SATA SSD use a single controller to transfer data from SATA bus to NAND BUS.
IDE/PATA is a BUS INTERFACE STANDARD and any storage media can be attached to it as long it comply PATA with communication standards.
So there is No issue with Pata. What CAN be an issue, are the S.M.A.R.T parameters that SSD provide.
Most SSD's will provide only airflow temperature, while the HDD will provide the airflow AND the drive unit temperature.
USA version of the NAV.
I found the Nissan password for the Hard Disk in the APP.BIN file today. Here is the line with the information. It also includes a hard drive Identify line looking for Hitachi or Toshiba drives, this might be why the US version won't boot with the SSD. Still researching.
Error [%s] Invalid parameter.(flg=%d)
ataHddUnlockSecurity Error [%s] Password Missmatch.(flg=%d,errno=%x)
ataHddSetPassword 0X642-951-03X0 XXNAVAXI Error [%s] Set Password.(flg=%d,errno=%x)
ataHddDisablePassword Error [%s] Invalid parameter.(status=%x)
ataHddGetSecurityStatus Error [%s] Read Identify.
ataHddReadIdentify HITACHI HE Hitachi TOSHIBA Error [%s] Invalid parameter.(temp=%x)
ataHddTempGet Error [%s] Invalid Hdd Model.(hdd=%d)
Error [%s] Get Temperature.
Error [%s] Flush Cache.
ataHddStopAccess Error [%s] Idle Immediate.
ataHddStartAccess Error [%s] Invalid parameter.(data=%x)
ataHddswapByte Error [%s] Invalid parameter.(size=%d)
40-652-93100 AXANIV Error [%s] Invalid Passsword ID Input.(flg=%x)
ataHddPasswordCheck Error [%s] HDD Access.
Error [%s] Security Status Get[1].
Error [%s] HDD Cache Flush.
Error [%s] HDD Connect.
Error [%s] Driver Init.
Error [%s] Security Unlock.
Error [%s] Security Status Get[2].
Error [%s] HDD Security Disabele.(status=0x%04X)
HDD Unlock %s [Used Password:%s]
Failed Successed MASTER USER
########## ATA INFORMATION ########
ATA BlkDev [Null]
ATA BlkDev [0x%08x]
HDD Model [%d]
Serial [%.20s]
Rivision [%.8s]
Model [%.40s]
Sectors [%10d]
Enable Set1 [0x%04x]
Sequrity [0x%04x]
----- ATA READ/WRITE INFOMATION -----
I found the Nissan password for the Hard Disk in the APP.BIN file today. Here is the line with the information. It also includes a hard drive Identify line looking for Hitachi or Toshiba drives, this might be why the US version won't boot with the SSD. Still researching.
Error [%s] Invalid parameter.(flg=%d)
ataHddUnlockSecurity Error [%s] Password Missmatch.(flg=%d,errno=%x)
ataHddSetPassword 0X642-951-03X0 XXNAVAXI Error [%s] Set Password.(flg=%d,errno=%x)
ataHddDisablePassword Error [%s] Invalid parameter.(status=%x)
ataHddGetSecurityStatus Error [%s] Read Identify.
ataHddReadIdentify HITACHI HE Hitachi TOSHIBA Error [%s] Invalid parameter.(temp=%x)
ataHddTempGet Error [%s] Invalid Hdd Model.(hdd=%d)
Error [%s] Get Temperature.
Error [%s] Flush Cache.
ataHddStopAccess Error [%s] Idle Immediate.
ataHddStartAccess Error [%s] Invalid parameter.(data=%x)
ataHddswapByte Error [%s] Invalid parameter.(size=%d)
40-652-93100 AXANIV Error [%s] Invalid Passsword ID Input.(flg=%x)
ataHddPasswordCheck Error [%s] HDD Access.
Error [%s] Security Status Get[1].
Error [%s] HDD Cache Flush.
Error [%s] HDD Connect.
Error [%s] Driver Init.
Error [%s] Security Unlock.
Error [%s] Security Status Get[2].
Error [%s] HDD Security Disabele.(status=0x%04X)
HDD Unlock %s [Used Password:%s]
Failed Successed MASTER USER
########## ATA INFORMATION ########
ATA BlkDev [Null]
ATA BlkDev [0x%08x]
HDD Model [%d]
Serial [%.20s]
Rivision [%.8s]
Model [%.40s]
Sectors [%10d]
Enable Set1 [0x%04x]
Sequrity [0x%04x]
----- ATA READ/WRITE INFOMATION -----
This is insane!!!!
1. the unit must UNLOCK the HDD to read the data from it.
2. The APP.BIN that may contain the password, is located ON THE HDD
3. The HDD must be UNLOCKED to read the app.bin.
4. The password must be 32 characters long
Is like opening a vault from outside, and the key is IN the vault
Anyway... if you take "40-652-93100+(14 spaces)+AXANIV" and you apply a byte swap mentioned somewhere above that line, you get "046-259-1300+(14 spaces)+XANAVI" And that might be a password. Anyway, i don't see what mad programmer will puth the password to unlock the hdd, stored ON that hdd...
The HDD from my unit is already unlocked so i can't test the password...
Will be interesting if this password will really work

-Is looking for HDD security: the HDD security was removed completely and the unit work's just fine.
-Is looking for Toshiba HDD... i use a KingSpec SSD...
Last edited by Elco; Oct 17, 2016 at 07:16 PM.
The command says ataHddSetPassword, maybe they are setting the password on the hard drive via APP.BIN, so any new hard drive has the password set each time APP.BIN is ran. Not sure why they would do that, but you could test it on your US NAV unit. I don't remember seeing this on the EU version of the APP.BIN but I might have missed it.
ataHddSetPassword 0X642-951-03X0 XXNAVAXI
ataHddSetPassword 0X642-951-03X0 XXNAVAXI
The command says ataHddSetPassword, maybe they are setting the password on the hard drive via APP.BIN, so any new hard drive has the password set each time APP.BIN is ran. Not sure why they would do that, but you could test it on your US NAV unit. I don't remember seeing this on the EU version of the APP.BIN but I might have missed it.
ataHddSetPassword 0X642-951-03X0 XXNAVAXI
ataHddSetPassword 0X642-951-03X0 XXNAVAXI
Looks like the APP.bin run's every time the unit boot up.
The HDD password was not restored after i tested the unit with unlocked HDD.
It may be the case that APP.bin can lock the password with some commands sent by CAN, UART, USB or some secret service menu.
Wondering if this drive will work with the US version.
https://www.amazon.com/Transcend-PSD...ywords=ide+ssd
https://www.amazon.com/Transcend-PSD...ywords=ide+ssd
Wondering if this drive will work with the US version.
https://www.amazon.com/Transcend-PSD...ywords=ide+ssd
https://www.amazon.com/Transcend-PSD...ywords=ide+ssd
If it require Hitachi or Toshiba HDD, we can edit the HDD name string in app... the app don't seem to have any integrity check on it... so editing the app hex may work
Is there a way to bypass the e brake so movies can be put on in the background for say 3-4 hour cross-state drives? I understand the distraction this can be to some younger inexperienced drivers but I'd merely want it as background entertainment for myself to listen to, and possibly for a passenger to watch.
Is there a way to bypass the e brake so movies can be put on in the background for say 3-4 hour cross-state drives? I understand the distraction this can be to some younger inexperienced drivers but I'd merely want it as background entertainment for myself to listen to, and possibly for a passenger to watch.
Re: video, yes it can be done. You'll have to Google how to do as this forum forbids that topic.
Elco, to your knowledge, would reflashing/reprogramming the AV unit with a different profile (GT-R for example) using CONSULT 3+ possibly unlock the blocked apps (TPMS, AVM, MFD, etc.)? I have the software installed but finding the VI2 (interface) is proving impossible. It seems to me that if the software is already on the HDD then there has to be a easier way to access/unlock it. I'm thinking of getting a used AV unit to use for testing. Of course if we can get SSD to work that would be even better.
Thanks in advance for your thoughts.
Elco, to your knowledge, would reflashing/reprogramming the AV unit with a different profile (GT-R for example) using CONSULT 3+ possibly unlock the blocked apps (TPMS, AVM, MFD, etc.)? I have the software installed but finding the VI2 (interface) is proving impossible. It seems to me that if the software is already on the HDD then there has to be a easier way to access/unlock it. I'm thinking of getting a used AV unit to use for testing. Of course if we can get SSD to work that would be even better.
Thanks in advance for your thoughts.
Re: video, yes it can be done. You'll have to Google how to do as this forum forbids that topic.
Elco, to your knowledge, would reflashing/reprogramming the AV unit with a different profile (GT-R for example) using CONSULT 3+ possibly unlock the blocked apps (TPMS, AVM, MFD, etc.)? I have the software installed but finding the VI2 (interface) is proving impossible. It seems to me that if the software is already on the HDD then there has to be a easier way to access/unlock it. I'm thinking of getting a used AV unit to use for testing. Of course if we can get SSD to work that would be even better.
Thanks in advance for your thoughts.
Elco, to your knowledge, would reflashing/reprogramming the AV unit with a different profile (GT-R for example) using CONSULT 3+ possibly unlock the blocked apps (TPMS, AVM, MFD, etc.)? I have the software installed but finding the VI2 (interface) is proving impossible. It seems to me that if the software is already on the HDD then there has to be a easier way to access/unlock it. I'm thinking of getting a used AV unit to use for testing. Of course if we can get SSD to work that would be even better.
Thanks in advance for your thoughts.
They can only write the unit profile according to car specifications (LHD, RHD, with or without BOSE, etc...)
There must be some other way to communicate with the unit in order to flash it.
There is one big connector on the unit that is not used on the car... that might be the interface to connect to unit to flash it. But we don't know what kind of interface is and we don't know the pinout of that connector.
The other way will be to use a GTR unit on G37 if is direct compatible or at least if we had a HDD image from corresponding year GT-R HDD

I was looking on the navigation program DVD and i found that there are 3 program versions on the DVD.
The same DVD is used for update on all cars that use Xanavi 9 (G37, FX, EX, 370Z, Murano, GT-R)
BTW... the DVD contain the APP.bin

in my case, the X1E from thbe car HDD can be found on the DVD.
I know that all EU G37 models and 370Z use X1E version.
But on the DVD there is also an X2E and X3E
The other 2 must be different versions used for other models (ex. Murano/FX and GT-R)
If anyone is interested, i can provide the other 2 APP.bin to take a look on them.
PS.
You can find Consult 3+ interface at a crazy price of 1500 USD

But you can also use a cheap vas5054a with some modifications as a pass-trough adapter for consult 3+, that will give you most of the functions available on VI2 interface
Last edited by Elco; Oct 24, 2016 at 01:41 AM.







