2008 TL Navi hack?
#1
9th Gear
Thread Starter
Join Date: Oct 2008
Location: Toronto
Posts: 9
Likes: 0
Received 0 Likes
on
0 Posts
2008 TL Navi hack?
I have read many threads regarding Navi hack, welcome screen hack, etc..but does this apply to the 2008 TL model? (all the threads I have seen only mention up to 2007)
Thanks
Thanks
#5
Racer
I have a TL-S 08 and im from Puerto Rico. I dont have the navi yet. Acura told me it will be arriving on february. So i'll get my cd and see what i can do to hack it.
Trending Topics
#8
9th Gear
Thread Starter
Join Date: Oct 2008
Location: Toronto
Posts: 9
Likes: 0
Received 0 Likes
on
0 Posts
#9
#11
I have been doing some digging around various forums and been playing with my navi system and this is what I've come up with so far.
-There is still no nag hack for the 07/08 Navi's.
-I can extract the files from the .bin on the DVD.
-I see the ascii text of the nag message in the HMIManager.dll file.
-It appears that there is some sort of checksum performed on this file because if you try and change any of the text it will no longer load in the navi system and give you an error. However, I believe it only uses a 1-byte CRC because if you reverse any word in the nag message it will still load on the navi system. For example if you hexedit the HMIManager.dll file and change something like "system" to "metsys" it will load fine in the navi unit. A 1-byte CRC adds the ascii values of each character and devides by 256. Since all the characters are still there but in a difference order, the CRC value is still the same.
In any case, i think the first step we need to figure out is how to recalculate the CRC once the files has been changed, or else NOP the CRC checking routine inside the application. Once that is completed then we can work on the actual OK button.
Anyone good with disassembling? I have IDA Pro installed which has support for the Hitachi SH4 processor (which is used in the Acura/Honda nav systems) but am a little lost at this point.
cheers,
-zang
-There is still no nag hack for the 07/08 Navi's.
-I can extract the files from the .bin on the DVD.
-I see the ascii text of the nag message in the HMIManager.dll file.
-It appears that there is some sort of checksum performed on this file because if you try and change any of the text it will no longer load in the navi system and give you an error. However, I believe it only uses a 1-byte CRC because if you reverse any word in the nag message it will still load on the navi system. For example if you hexedit the HMIManager.dll file and change something like "system" to "metsys" it will load fine in the navi unit. A 1-byte CRC adds the ascii values of each character and devides by 256. Since all the characters are still there but in a difference order, the CRC value is still the same.
In any case, i think the first step we need to figure out is how to recalculate the CRC once the files has been changed, or else NOP the CRC checking routine inside the application. Once that is completed then we can work on the actual OK button.
Anyone good with disassembling? I have IDA Pro installed which has support for the Hitachi SH4 processor (which is used in the Acura/Honda nav systems) but am a little lost at this point.
cheers,
-zang
#14
Instructor
Code hacks aren't impossible. If a human wrote it, another human can certainly reverse-engineer it and write their own routines to circumvent it. The issue is we need a greater monetary incentive ($$$) to justify devoting the time and resources to this task. Notariety on the web site is nice but it doesn't pay the bills.
I for one, would be willing to pay as high as $200 to get rid of the damned nag screen on my '08. What do you think others would pay?
Ergo, such a product would certainly be marketable. The problem is you're going to encounter copyright infringement issues making it a little risky (as well as foolish) to openly market your crack. So we have to work out a distribution channel.
The crack is also going to have to be elegently written so as to not have any adverse interactions (or cutesie, self-aggrandizements popping up on the screen while loading). People with luxury cars seldom appreciate the humor intended.
Finally, the crack needs to be encrypted and obscured in such a was as to protect the code writer's handiwork, much in the way some of the longest lasting smart-card hacks for the sat-tv cards would cause the card to loop itself if a code-dump was attempted, rendering the card brain dead.
It could be as simple as changing a single JNZ instruction to JMP, but I doubt it.
Tha gauntlet has been thrown. Any takers?
I for one, would be willing to pay as high as $200 to get rid of the damned nag screen on my '08. What do you think others would pay?
Ergo, such a product would certainly be marketable. The problem is you're going to encounter copyright infringement issues making it a little risky (as well as foolish) to openly market your crack. So we have to work out a distribution channel.
The crack is also going to have to be elegently written so as to not have any adverse interactions (or cutesie, self-aggrandizements popping up on the screen while loading). People with luxury cars seldom appreciate the humor intended.
Finally, the crack needs to be encrypted and obscured in such a was as to protect the code writer's handiwork, much in the way some of the longest lasting smart-card hacks for the sat-tv cards would cause the card to loop itself if a code-dump was attempted, rendering the card brain dead.
It could be as simple as changing a single JNZ instruction to JMP, but I doubt it.
Tha gauntlet has been thrown. Any takers?
#15
I luv my
Join Date: Feb 2009
Location: Northern VA
Age: 40
Posts: 42
Likes: 0
Received 0 Likes
on
0 Posts
the nag screen doesn't bother me enough to spend $200... but i could definitely paypal $50 or so to whoever figures it out...
maybe we should start a list of people who are willing to pay... and that might intice somone to crack the code.
maybe we should start a list of people who are willing to pay... and that might intice somone to crack the code.
#17
Instructor
Thread
Thread Starter
Forum
Replies
Last Post
08_UA7_Gr33k
Member Cars for Sale
13
02-11-2016 02:17 PM
lanechanger
Member Cars for Sale
4
10-13-2015 10:56 AM
SUPRMN84
3G TL Audio, Bluetooth, Electronics & Navigation
5
10-07-2015 09:46 PM