OK bypass, "AD" Free, Edit Everything
#1
Intermediate
Thread Starter
Join Date: Oct 2005
Age: 47
Posts: 48
Likes: 0
Received 0 Likes
on
0 Posts
OK bypass, "AD" Free, Edit Everything
Well I wasn't planning on releasing this at all as I feel that this was really all ADs hard work and all I did was little work around to his check. But now I've heard that AD is apparently not offering a tag free version to people who offer to pay and another work around has surfaced. I haven't tried the other work around yet but from the description it seems like there is still text on the screen that can't be edited. So attached is a version of the patch that doesn't have such a requirement. I'm not going to wrap it in a binary patcher or such so you can either go to town with a hex editor or wait for someone else to package it.
Usual disclaimers apply, this could make your car explode and so forth. Works for me though.
-apnar
Usual disclaimers apply, this could make your car explode and so forth. Works for me though.
-apnar
#2
Intermediate
Thread Starter
Join Date: Oct 2005
Age: 47
Posts: 48
Likes: 0
Received 0 Likes
on
0 Posts
0038d69c: 88 92
0038d69d: 68 7f
0038d69e: 2e 45
00446f91: 43 00
00446f92: 65 46
00446f93: 20 2f
00446f94: 73 16
00446f95: 79 2f
00446f96: 73 26
00446f97: 74 2f
00446f98: E8 22
00446f99: 6d 4f
00446f9a: 65 C4
00446f9b: 20 7f
00446f9c: 76 1f
00446f9d: 6f D0
00446f9e: 75 0b
00446f9f: 73 40
00446fa0: 20 09
00446fa1: 64 00
00446fa2: 6f 3c
00446fa3: 6e 7f
00446fa4: 6e 26
00446fa5: 65 4f
00446fa6: 20 F6
00446fa7: 64 62
00446fa8: 65 F6
00446fa9: 73 61
00446faa: 20 1b
00446fab: 72 D0
00446fac: 65 09
00446fad: 6e 00
00446fae: 73 09
00446faf: 65 00
00446fb0: 69 09
00446fb1: 67 00
00446fb2: 6e 06
00446fb3: 65 61
00446fb4: 6d 1c
00446fb5: 65 32
00446fb6: 6e 06
00446fb7: 74 61
00446fb8: 73 1c
00446fb9: 20 32
00446fba: 72 06
00446fbb: 6f 61
00446fbc: 75 1c
00446fbd: 74 32
00446fbe: 69 1a
00446fbf: 65 A0
00446fc0: 72 09
00446fc1: 73 00
00446ff5: 70 00
00446ff6: 6f 2a
00446ff7: 75 01
00446ff8: 72 1a
00446ff9: 20 22
00446ffa: 76 06
00446ffb: 6f 61
00446ffc: 75 1c
00446ffd: 73 32
00446ffe: 20 06
00447000: 69 1c
00447001: 64 32
00447002: 65 06
00447003: 72 61
00447004: 20 1c
00447005: E0 32
00447006: 20 05
00447007: 61 42
00447008: 74 06
00447009: 74 61
0044700a: 65 1c
0044700b: 69 32
0044700c: 6e 01
0044700d: 64 D1
0044700e: 72 1c
0044700f: 65 32
00447010: 20 2b
00447011: 76 42
00447012: 6f F6
00447013: 74 64
00447014: 72 56
00447015: 65 B3
00447016: 20 36
00447017: 64 9e
00447018: 65 64
00447019: 73 80
0044701a: 74 45
0044701b: 69 00
0044701c: 6e 88
0044701d: 61 68
0044701e: 74 2e
0044701f: 69 00
00447064: 6c 00
00447065: 65 00
00447066: 73 41
00447067: 20 44
00447068: 63 00
00447069: 6f 00
0044706a: 6e 00
0044706b: 64 77
0044706c: 69 77
0044706d: 74 77
0044706e: 69 2e
0044706f: 6f 76
00447070: 6e 69
00447071: 73 73
00447072: 20 74
00447073: 72 61
00447074: 6f 62
00447075: 75 75
00447076: 74 67
00447077: 69 2e
00447078: E8 63
00447079: 72 6f
0044707a: 65 6d
0044707b: 73 2f
0044707c: 2c 6e
0044707d: 20 61
0044707e: 63 76
0044707f: 65 69
0038d69d: 68 7f
0038d69e: 2e 45
00446f91: 43 00
00446f92: 65 46
00446f93: 20 2f
00446f94: 73 16
00446f95: 79 2f
00446f96: 73 26
00446f97: 74 2f
00446f98: E8 22
00446f99: 6d 4f
00446f9a: 65 C4
00446f9b: 20 7f
00446f9c: 76 1f
00446f9d: 6f D0
00446f9e: 75 0b
00446f9f: 73 40
00446fa0: 20 09
00446fa1: 64 00
00446fa2: 6f 3c
00446fa3: 6e 7f
00446fa4: 6e 26
00446fa5: 65 4f
00446fa6: 20 F6
00446fa7: 64 62
00446fa8: 65 F6
00446fa9: 73 61
00446faa: 20 1b
00446fab: 72 D0
00446fac: 65 09
00446fad: 6e 00
00446fae: 73 09
00446faf: 65 00
00446fb0: 69 09
00446fb1: 67 00
00446fb2: 6e 06
00446fb3: 65 61
00446fb4: 6d 1c
00446fb5: 65 32
00446fb6: 6e 06
00446fb7: 74 61
00446fb8: 73 1c
00446fb9: 20 32
00446fba: 72 06
00446fbb: 6f 61
00446fbc: 75 1c
00446fbd: 74 32
00446fbe: 69 1a
00446fbf: 65 A0
00446fc0: 72 09
00446fc1: 73 00
00446ff5: 70 00
00446ff6: 6f 2a
00446ff7: 75 01
00446ff8: 72 1a
00446ff9: 20 22
00446ffa: 76 06
00446ffb: 6f 61
00446ffc: 75 1c
00446ffd: 73 32
00446ffe: 20 06
00447000: 69 1c
00447001: 64 32
00447002: 65 06
00447003: 72 61
00447004: 20 1c
00447005: E0 32
00447006: 20 05
00447007: 61 42
00447008: 74 06
00447009: 74 61
0044700a: 65 1c
0044700b: 69 32
0044700c: 6e 01
0044700d: 64 D1
0044700e: 72 1c
0044700f: 65 32
00447010: 20 2b
00447011: 76 42
00447012: 6f F6
00447013: 74 64
00447014: 72 56
00447015: 65 B3
00447016: 20 36
00447017: 64 9e
00447018: 65 64
00447019: 73 80
0044701a: 74 45
0044701b: 69 00
0044701c: 6e 88
0044701d: 61 68
0044701e: 74 2e
0044701f: 69 00
00447064: 6c 00
00447065: 65 00
00447066: 73 41
00447067: 20 44
00447068: 63 00
00447069: 6f 00
0044706a: 6e 00
0044706b: 64 77
0044706c: 69 77
0044706d: 74 77
0044706e: 69 2e
0044706f: 6f 76
00447070: 6e 69
00447071: 73 73
00447072: 20 74
00447073: 72 61
00447074: 6f 62
00447075: 75 75
00447076: 74 67
00447077: 69 2e
00447078: E8 63
00447079: 72 6f
0044707a: 65 6d
0044707b: 73 2f
0044707c: 2c 6e
0044707d: 20 61
0044707e: 63 76
0044707f: 65 69
#3
Intermediate
Thread Starter
Join Date: Oct 2005
Age: 47
Posts: 48
Likes: 0
Received 0 Likes
on
0 Posts
For anyone that is curious I didn't really defeat the check at all. The AD tag and URL is still there and is still checked. What I did was move the AD and URL to a different section of the file (in some french text, hope it doesn't crew up you guys up north) the changed the value where the check loads its data from. Not as clean as I might have liked but serves the purpose well and allows you to put what ever you like on screen without worrying, just don't go changing it in the french text and everything should be fine.
-apnar
-apnar
#4
Originally Posted by apnar
For anyone that is curious I didn't really defeat the check at all. The AD tag and URL is still there and is still checked. What I did was move the AD and URL to a different section of the file (in some french text, hope it doesn't crew up you guys up north) the changed the value where the check loads its data from.
I'm not an sh-4 guru, so I could be wrong.
Lem
#5
Intermediate
Thread Starter
Join Date: Oct 2005
Age: 47
Posts: 48
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by Lem_
Forgive me if I'm being dense, but is that not what the first crack did ?
I'm not an sh-4 guru, so I could be wrong.
Lem
I'm not an sh-4 guru, so I could be wrong.
Lem
Like I said I haven't tried the other one, I was just going off this warning line:
Disclaimer text can be modifed [sic] as you like, however do not touch anything below "Please Wait..."
-apnar
#7
Intermediate
Thread Starter
Join Date: Oct 2005
Age: 47
Posts: 48
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by Lem_
Heh.
The same thing applies to your crack too though ?
If I hexedit the AD , or the website tag the app will break, yes ?
Lem
The same thing applies to your crack too though ?
If I hexedit the AD , or the website tag the app will break, yes ?
Lem
Correct, the key difference is now the AD is in a section of the code that is completely useless instead of it being in the section of the code that tells what to display on the screen. Basically with this you would never even know that the AD was there unless you went diving into the code for it. Make sense?
-apnar
Trending Topics
#8
AcurAdmirer
So apnar - for those of us not so well-versed with this stuff, do we just cut and paste this code in the hex editor in place of the code that's already there?
Which begs the question ... my hex editor displays a whole grid of code for each address (such as 0038d69c, for instance), so exactly how do we apply this patch?
Sorry, but I slept through code class.![Wink](https://acurazine.com/forums/images/smilies/wink.gif)
.
.
Which begs the question ... my hex editor displays a whole grid of code for each address (such as 0038d69c, for instance), so exactly how do we apply this patch?
Sorry, but I slept through code class.
![Wink](https://acurazine.com/forums/images/smilies/wink.gif)
.
.
#9
Advanced
Join Date: Oct 2006
Location: DC Area
Age: 43
Posts: 68
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by apnar
Well I wasn't planning on releasing this at all as I feel that this was really all ADs hard work and all I did was little work around to his check. But now I've heard that AD is apparently not offering a tag free version to people who offer to pay and another work around has surfaced.
-apnar
-apnar
" Best of luck, and if you are successful I'd suggest not posting it. -apnar"
I was successful, and do not agree with his philosophy on sharing...
I have provided a much simpler solution, which after reviewing the offsets, does more or less the exact same thing as the code above. In other words, just use the patch
![Thumbs Up](https://acurazine.com/forums/images/smilies/thumbsup.gif)
https://acurazine.com/forums/showthread.php?t=146686
A Wise Man Once Said... "All intellectual pursuits are ultimately futile"
#11
Intermediate
Thread Starter
Join Date: Oct 2005
Age: 47
Posts: 48
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by funkymint
apnar's comment to me earlier this week…
" Best of luck, and if you are successful I'd suggest not posting it. -apnar"
I was successful, and do not agree with his philosophy on sharing...
I have provided a much simpler solution, which after reviewing the offsets, does more or less the exact same thing as the code above. In other words, just use the patch
https://acurazine.com/forums/showthread.php?t=146686
A Wise Man Once Said... "All intellectual pursuits are ultimately futile"
" Best of luck, and if you are successful I'd suggest not posting it. -apnar"
I was successful, and do not agree with his philosophy on sharing...
I have provided a much simpler solution, which after reviewing the offsets, does more or less the exact same thing as the code above. In other words, just use the patch
![Thumbs Up](https://acurazine.com/forums/images/smilies/thumbsup.gif)
https://acurazine.com/forums/showthread.php?t=146686
A Wise Man Once Said... "All intellectual pursuits are ultimately futile"
[double posted reply...]
funkymint,
The difference between then and now is I was made aware that AD is not even offering a tag free version anymore. My previous stance was AD had done all the hard work and if people wanted a tag free version they should either pay him for it or try to work around it themselves. I was even generally helpful in assisting anyone who wanted to have a go at it themselves both in the threads and via PM. Now that there is no option to pay for it I changed my stance.
Anyway, it can't hurt anyone to have more options. They can use the original AD patch, your patch, my patch I don't really care one way or the other. As I said in my post, I hadn't tried yours out yet but from the description it sounded like there was a limitation in the ability to edit all the text on the screen. If that isn't the case then there is no reason for anyone to use mine over yours.
I definitely meant no disrespect to the work you guys did. I do think it's great that more people were able to create a work around, the more people that are toying around with the code the more cool little hacks will end up emerging.
-apnar
#12
Intermediate
Thread Starter
Join Date: Oct 2005
Age: 47
Posts: 48
Likes: 0
Received 0 Likes
on
0 Posts
General Info
I've gotten a few questions in other threads and via PMs so I thought I'd consolidate some information here for others if needed:
What do the values on the lines for the hack mean (like "0038d69c: 88 92"):
What is a good hex editor to use:
How do the file locations relate to what I see in XVI32 on the left:
What do the values on the lines for the hack mean (like "0038d69c: 88 92"):
In the example line 0038d69c is the location in the file, the 88 is what should already be there (not needed at all but it's a double check), and the 92 is what you type. So you'd go to location 0038d69c you should see an 88 and change it to 92.
What is a good hex editor to use:
There is a great free editor called XVI32 which you can get here http://www.chmaas.handshake.de/delph...vi32/xvi32.htm
How do the file locations relate to what I see in XVI32 on the left:
The locations are file offsets in hex. If you aren't familiar with hex it is a base 16 counting system instead of the normal base 10, so if you are counting in hex the digits go 0,1,2,3,4,5,6,7,8,9,a,b,c,d,e,f,10,11,12,13,.... So if you are thinking about 'c' you can think of it as a decimal 12.
Each hex value clearly defines a single byte of data (which itself is represented by 2 hex digits). The values on the side represent the location of the byte directly after them, as you move left to right across the line the location increases by one. here is a simple example:
10 - a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af
20 - b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf
30 - c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf
You'll notice that the locations on the left, going top down, increase by 16 each time and there are exactly 16 values per line. So the value for location 25 is b5 and the value for location 3c is cc. The number of bytes per line depends on how you sized the editor, but you will always notice the number of values per line is the same as the difference between locations on the left.
Each hex value clearly defines a single byte of data (which itself is represented by 2 hex digits). The values on the side represent the location of the byte directly after them, as you move left to right across the line the location increases by one. here is a simple example:
10 - a0 a1 a2 a3 a4 a5 a6 a7 a8 a9 aa ab ac ad ae af
20 - b0 b1 b2 b3 b4 b5 b6 b7 b8 b9 ba bb bc bd be bf
30 - c0 c1 c2 c3 c4 c5 c6 c7 c8 c9 ca cb cc cd ce cf
You'll notice that the locations on the left, going top down, increase by 16 each time and there are exactly 16 values per line. So the value for location 25 is b5 and the value for location 3c is cc. The number of bytes per line depends on how you sized the editor, but you will always notice the number of values per line is the same as the difference between locations on the left.
#13
I cant remember which HEX program I used. It might be the same one you posted a link to. Here is a hint for some people. I was confused when I first started trying to look for the location code that Apnar listed. My program had the line codes on the left....similar to Apnar's code...but it seemed to always have an extra number or letter code at the end...I had to physically click on the cell, and then in a bar at the bottom of the program, I was able to see the exact location code Apnar listed.
Also, Apnar kept saying that you need to start with a fresh navi.exe. I was confused because I was wondering how the AD hack gets into navi.exe file in the first place, if all apnar's code is doing is modifying it. Answer is that Apnar's coding contains the AD hack in it. So when you make all those line code changes, you typed in AngryDad's hack also.
I was also confused because I thought that Apnar mentioned you cant type below the line "Please wait...". I went back to read his post again, and I just read it wrong. Apnar was just quoting that. Apnar does not code the lines "loading navigation...please wait..." into the file. Basically, if you make all of Apnar's coding changes to a fresh unmodified navi.exe file, you will end up with a stock boot up text with no OK button. You can then modify the text however you like.
P.S. - Apnar mentioned you are not limited to the same amount of characters and lines in the stock disclaimer text. You can fool the sytem to display more by using "00" coding to tell it where the display text starts and stops. I havent tested this part out myelf though.
My coding worked perfect. It took me a while to figure it all out, but I got everything correct on my first CD burn and boot up.
Thanks Apnar...
Also, Apnar kept saying that you need to start with a fresh navi.exe. I was confused because I was wondering how the AD hack gets into navi.exe file in the first place, if all apnar's code is doing is modifying it. Answer is that Apnar's coding contains the AD hack in it. So when you make all those line code changes, you typed in AngryDad's hack also.
I was also confused because I thought that Apnar mentioned you cant type below the line "Please wait...". I went back to read his post again, and I just read it wrong. Apnar was just quoting that. Apnar does not code the lines "loading navigation...please wait..." into the file. Basically, if you make all of Apnar's coding changes to a fresh unmodified navi.exe file, you will end up with a stock boot up text with no OK button. You can then modify the text however you like.
P.S. - Apnar mentioned you are not limited to the same amount of characters and lines in the stock disclaimer text. You can fool the sytem to display more by using "00" coding to tell it where the display text starts and stops. I havent tested this part out myelf though.
My coding worked perfect. It took me a while to figure it all out, but I got everything correct on my first CD burn and boot up.
Thanks Apnar...
![Thumbs Up](https://acurazine.com/forums/images/smilies/thumbsup.gif)
#14
Unregistered User
Join Date: Oct 2006
Location: Philly - In a van, down by the river!
Age: 45
Posts: 77
Likes: 0
Received 0 Likes
on
0 Posts
Worked great for me and edited all the text on the disclaimer screen.
After messing up one address in the hex editor, I wrote a quick script. I took apnar's hex edits and dumped them into XVI32 (GREAT free hex editor.)
Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the following into the window:
ADR $38D69C
OVERWRITE 92
OVERWRITE 7F
OVERWRITE 45
ADR $446f91
OVERWRITE 00
OVERWRITE 46
OVERWRITE 2f
OVERWRITE 16
OVERWRITE 2f
OVERWRITE 26
OVERWRITE 2f
OVERWRITE 22
OVERWRITE 4f
OVERWRITE C4
OVERWRITE 7f
OVERWRITE 1f
OVERWRITE D0
OVERWRITE 0b
OVERWRITE 40
OVERWRITE 09
OVERWRITE 00
OVERWRITE 3c
OVERWRITE 7f
OVERWRITE 26
OVERWRITE 4f
OVERWRITE F6
OVERWRITE 62
OVERWRITE F6
OVERWRITE 61
OVERWRITE 1b
OVERWRITE D0
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 1a
OVERWRITE A0
OVERWRITE 09
OVERWRITE 00
ADR $446ff5
OVERWRITE 00
OVERWRITE 2a
OVERWRITE 01
OVERWRITE 1a
OVERWRITE 22
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
ADR $447000
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 05
OVERWRITE 42
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 01
OVERWRITE D1
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 2b
OVERWRITE 42
OVERWRITE F6
OVERWRITE 64
OVERWRITE 56
OVERWRITE B3
OVERWRITE 36
OVERWRITE 9e
OVERWRITE 64
OVERWRITE 80
OVERWRITE 45
OVERWRITE 00
OVERWRITE 88
OVERWRITE 68
OVERWRITE 2e
OVERWRITE 00
ADR $447064
OVERWRITE 00
OVERWRITE 00
OVERWRITE 41
OVERWRITE 44
OVERWRITE 00
OVERWRITE 00
OVERWRITE 00
OVERWRITE 77
OVERWRITE 77
OVERWRITE 77
OVERWRITE 2e
OVERWRITE 76
OVERWRITE 69
OVERWRITE 73
OVERWRITE 74
OVERWRITE 61
OVERWRITE 62
OVERWRITE 75
OVERWRITE 67
OVERWRITE 2e
OVERWRITE 63
OVERWRITE 6f
OVERWRITE 6d
OVERWRITE 2f
OVERWRITE 6e
OVERWRITE 61
OVERWRITE 76
OVERWRITE 69
The click syntax check just to make sure the copy and paste is good and then execute if no errors. Done. Save the navi.exe, get it back into the bin and enjoy!
After messing up one address in the hex editor, I wrote a quick script. I took apnar's hex edits and dumped them into XVI32 (GREAT free hex editor.)
Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the following into the window:
ADR $38D69C
OVERWRITE 92
OVERWRITE 7F
OVERWRITE 45
ADR $446f91
OVERWRITE 00
OVERWRITE 46
OVERWRITE 2f
OVERWRITE 16
OVERWRITE 2f
OVERWRITE 26
OVERWRITE 2f
OVERWRITE 22
OVERWRITE 4f
OVERWRITE C4
OVERWRITE 7f
OVERWRITE 1f
OVERWRITE D0
OVERWRITE 0b
OVERWRITE 40
OVERWRITE 09
OVERWRITE 00
OVERWRITE 3c
OVERWRITE 7f
OVERWRITE 26
OVERWRITE 4f
OVERWRITE F6
OVERWRITE 62
OVERWRITE F6
OVERWRITE 61
OVERWRITE 1b
OVERWRITE D0
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 1a
OVERWRITE A0
OVERWRITE 09
OVERWRITE 00
ADR $446ff5
OVERWRITE 00
OVERWRITE 2a
OVERWRITE 01
OVERWRITE 1a
OVERWRITE 22
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
ADR $447000
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 05
OVERWRITE 42
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 01
OVERWRITE D1
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 2b
OVERWRITE 42
OVERWRITE F6
OVERWRITE 64
OVERWRITE 56
OVERWRITE B3
OVERWRITE 36
OVERWRITE 9e
OVERWRITE 64
OVERWRITE 80
OVERWRITE 45
OVERWRITE 00
OVERWRITE 88
OVERWRITE 68
OVERWRITE 2e
OVERWRITE 00
ADR $447064
OVERWRITE 00
OVERWRITE 00
OVERWRITE 41
OVERWRITE 44
OVERWRITE 00
OVERWRITE 00
OVERWRITE 00
OVERWRITE 77
OVERWRITE 77
OVERWRITE 77
OVERWRITE 2e
OVERWRITE 76
OVERWRITE 69
OVERWRITE 73
OVERWRITE 74
OVERWRITE 61
OVERWRITE 62
OVERWRITE 75
OVERWRITE 67
OVERWRITE 2e
OVERWRITE 63
OVERWRITE 6f
OVERWRITE 6d
OVERWRITE 2f
OVERWRITE 6e
OVERWRITE 61
OVERWRITE 76
OVERWRITE 69
The click syntax check just to make sure the copy and paste is good and then execute if no errors. Done. Save the navi.exe, get it back into the bin and enjoy!
#16
Instructor
Join Date: Nov 2004
Location: Indian Mills, NJ
Posts: 224
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by Pat D
Worked great for me and edited all the text on the disclaimer screen.
After messing up one address in the hex editor, I wrote a quick script. I took apnar's hex edits and dumped them into XVI32 (GREAT free hex editor.)
Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the following into the window:
ADR $38D69C
...
OVERWRITE 69
The click syntax check just to make sure the copy and paste is good and then execute if no errors. Done. Save the navi.exe, get it back into the bin and enjoy!
After messing up one address in the hex editor, I wrote a quick script. I took apnar's hex edits and dumped them into XVI32 (GREAT free hex editor.)
Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the following into the window:
ADR $38D69C
...
OVERWRITE 69
The click syntax check just to make sure the copy and paste is good and then execute if no errors. Done. Save the navi.exe, get it back into the bin and enjoy!
#18
Instructor
Join Date: Nov 2004
Location: Indian Mills, NJ
Posts: 224
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by Pat D
Worked well for me, posted this after I tested it. Did you make any other mods (Disclaimer text) or just the OK mod?
#20
Instructor
Join Date: Nov 2004
Location: Indian Mills, NJ
Posts: 224
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by acuraTL44
wait, i think i found my mistake. I took the navi.exe out of an already modified bin. I'll try it again using a different one and see what happens.
#21
Unregistered User
Join Date: Oct 2006
Location: Philly - In a van, down by the river!
Age: 45
Posts: 77
Likes: 0
Received 0 Likes
on
0 Posts
Definitely works. I did it manually by hand the first time and screwed it up, resulting in a fuse pull. Second time I decided to code it into a script and it was flawless for me.
I would make SURE it's a virgin NAVI.EXE and do nothing else to it first to make sure it works. Try extracting it from a fresh copy of the bin and try it for kicks.
I would make SURE it's a virgin NAVI.EXE and do nothing else to it first to make sure it works. Try extracting it from a fresh copy of the bin and try it for kicks.
#23
Intermediate
Thread Starter
Join Date: Oct 2005
Age: 47
Posts: 48
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by acuraTL44
It gave me that error message saying it was too big. I'll keep trying.
-apnar
#24
Instructor
Join Date: Nov 2004
Location: Indian Mills, NJ
Posts: 224
Likes: 0
Received 0 Likes
on
0 Posts
I definately cant get this to work. The ok button still pops up. For now i'll stick with AD's patch. Ive tried using several different navi.exe's, including the origional, and they all come out with the same solution, they dont work.
I want to try using cebin, i jus have 1 question. Do i use the same dos commands as i do with dumpnavi?
-Thanx
I want to try using cebin, i jus have 1 question. Do i use the same dos commands as i do with dumpnavi?
-Thanx
#25
Instructor
Join Date: Nov 2004
Location: Indian Mills, NJ
Posts: 224
Likes: 0
Received 0 Likes
on
0 Posts
i still cantt get it to work, but i think i kno wat the problem is. i think the file u r editing is a v3.50 file. my navi.exe is v3.40c. i have also tried kennyc's navi.exe. wat do i need to do to kennyc's navi.exe to get it to work, or do i need a clean 3.50 navi.exe to get this to work?
ty
ty
#26
Intermediate
Thread Starter
Join Date: Oct 2005
Age: 47
Posts: 48
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by acuraTL44
i still cantt get it to work, but i think i kno wat the problem is. i think the file u r editing is a v3.50 file. my navi.exe is v3.40c. i have also tried kennyc's navi.exe. wat do i need to do to kennyc's navi.exe to get it to work, or do i need a clean 3.50 navi.exe to get this to work?
ty
ty
Yeah, all the offsets and changes are based off of a clean 3.5 navi.exe. I've heard of people using a 3.5 navi.exe with their 3.4 disk but you'll need to track down a fresh 3.5 navi.exe to try it with.
-apnar
#27
Instructor
Join Date: Nov 2004
Location: Indian Mills, NJ
Posts: 224
Likes: 0
Received 0 Likes
on
0 Posts
Originally Posted by apnar
Yeah, all the offsets and changes are based off of a clean 3.5 navi.exe. I've heard of people using a 3.5 navi.exe with their 3.4 disk but you'll need to track down a fresh 3.5 navi.exe to try it with.
-apnar
-apnar
#29
Hi folks- I'm wondering if anyone's gotten this to work as outlined in post #14.
I got the hex editor down and that seems to have worked. I used a fresh navi.exe I extracted from BNHH401A.BIN from my 3.50 disc.
The problem seems to be loading it into the car. I load the hack disc and everything seems fine- it loads fine- but the OK hack doesn't work. I even changed some of the english nag text in navi.exe with "test" and that does not show up. It's as if I never loaded the disc at all.
I know it's loading files from the disk because I got the trip computer/AC hack to work.
I also know it's putting navi.exe back into the BIN because I extracted the modified BIN and loaded that navi.exe into the hex editor and it had the OK hack and my "test" text in it.
At this point I'm not sure what else I can do. Any thoughts?
I got the hex editor down and that seems to have worked. I used a fresh navi.exe I extracted from BNHH401A.BIN from my 3.50 disc.
The problem seems to be loading it into the car. I load the hack disc and everything seems fine- it loads fine- but the OK hack doesn't work. I even changed some of the english nag text in navi.exe with "test" and that does not show up. It's as if I never loaded the disc at all.
I know it's loading files from the disk because I got the trip computer/AC hack to work.
I also know it's putting navi.exe back into the BIN because I extracted the modified BIN and loaded that navi.exe into the hex editor and it had the OK hack and my "test" text in it.
At this point I'm not sure what else I can do. Any thoughts?
#30
Sorry about the slow reply to your post, Andrew -- it's been a while since I checked this thread. Yes, I got it to work eventually. But the comments by acruaTL44 were correct -- the modified navi.exe won't fit into the bin file. As modified in post #14, the file is about 30 bytes too large. The solution is to replace some of the French text with spaces or zeros to allow the compressor to save a little space. The French text starts at offset 4470AE. I first replaced about 40 characters with spaces, but this was not enough -- in fact, the compressed file got larger (as reported by dumpnavi). I switched to zeros and replaced lots more French text, probably 100+ characters. Then it compressed OK.
What follows is a summary of exactly what I did, from beginning to end (sorry if this repeats some obvious material from other threads):
1. Copy two files off your orange navigation disk:
BNHH401A.BIN
BN2HHMLD.BIN
and put them in the same directory as the dumpnavi program. Note: other posts explain that if you did the wallpaper and/or the trip computer already, you want to use your modified BNHH401A.BIN instead of the one copied off the navigation dvd.
2. Go to a command prompt and change into that directory.
3. Type "dumpnavi BNHH401A.BIN extract" This will extract everything within that BIN file into a folder named BNHH401A.
4. Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the script text from post #14 into the window.
5. Click syntax check, then execute if no errors. Save the navi.exe.
6. Go back to your command prompt and type "dumpnavi BNHH401A.BIN update navi.exe" This will load your patched navi.exe into the bin. This is where acuraTL44 noticed the problem, and I did too, before deleting the French text.
7. Burn your custom bin (BNHH401a.BIN) and the loader (BN2HHMLD.BIN) onto a blank CD.
8. Go to your car.
9. Turn your car's ignition to ACC.
10. Open the trunk and pop out the NAVI disk (if it's in there).
11. Insert your newly burned CD.
12. Go back to the driver seat, the display will show some dvd read error, now press and hold "GUIDE" "MENU" and "CANCEL" for approx 5 seconds to bring up the diagnostic menu.
13. Wait another 5 seconds to let it load up completely. Press "version" button on the screen.
14. Press "DISC LOAD" to load your custom bin into the navigation.
15. Wait until it's completely done and it will then display another error message about can't read the navi dvd, now take out your bin CD and insert your Navigation disc and you are done!
Good luck!
What follows is a summary of exactly what I did, from beginning to end (sorry if this repeats some obvious material from other threads):
1. Copy two files off your orange navigation disk:
BNHH401A.BIN
BN2HHMLD.BIN
and put them in the same directory as the dumpnavi program. Note: other posts explain that if you did the wallpaper and/or the trip computer already, you want to use your modified BNHH401A.BIN instead of the one copied off the navigation dvd.
2. Go to a command prompt and change into that directory.
3. Type "dumpnavi BNHH401A.BIN extract" This will extract everything within that BIN file into a folder named BNHH401A.
4. Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the script text from post #14 into the window.
5. Click syntax check, then execute if no errors. Save the navi.exe.
6. Go back to your command prompt and type "dumpnavi BNHH401A.BIN update navi.exe" This will load your patched navi.exe into the bin. This is where acuraTL44 noticed the problem, and I did too, before deleting the French text.
7. Burn your custom bin (BNHH401a.BIN) and the loader (BN2HHMLD.BIN) onto a blank CD.
8. Go to your car.
9. Turn your car's ignition to ACC.
10. Open the trunk and pop out the NAVI disk (if it's in there).
11. Insert your newly burned CD.
12. Go back to the driver seat, the display will show some dvd read error, now press and hold "GUIDE" "MENU" and "CANCEL" for approx 5 seconds to bring up the diagnostic menu.
13. Wait another 5 seconds to let it load up completely. Press "version" button on the screen.
14. Press "DISC LOAD" to load your custom bin into the navigation.
15. Wait until it's completely done and it will then display another error message about can't read the navi dvd, now take out your bin CD and insert your Navigation disc and you are done!
Good luck!
#31
STL05TL
Join Date: Jun 2006
Location: St. Louis
Age: 42
Posts: 1
Likes: 0
Received 0 Likes
on
0 Posts
Version 3.5 Needed
Has anyone figured out this code for the 3.4 version?
If not, can someone post the 3.5 version of the BNHH401A.BIN so I can make the changes in the HEX editor to remove the ok button?
Thanks in advance for the help.
If not, can someone post the 3.5 version of the BNHH401A.BIN so I can make the changes in the HEX editor to remove the ok button?
Thanks in advance for the help.
#33
Suzuka Master
Also, Apnar kept saying that you need to start with a fresh navi.exe. I was confused because I was wondering how the AD hack gets into navi.exe file in the first place, if all apnar's code is doing is modifying it. Answer is that Apnar's coding contains the AD hack in it. So when you make all those line code changes, you typed in AngryDad's hack also.
Thanks Apnar...![Thumbs Up](https://acurazine.com/forums/images/smilies/thumbsup.gif)
Thanks Apnar...
![Thumbs Up](https://acurazine.com/forums/images/smilies/thumbsup.gif)
It seems like I'm the last person to do this hack, but just in case someone else comes behind me here's what I learned.
After using Pat D's script in XVI32 on a clean navi.exe file, I tried to use dumpnavi.exe to put the exe back into the BNHH401A.bin file I'd previously modified to show the trip computer and AC controls, but dumpnavi wouldn't let me due to file size issues. So I downloaded cebin and used it to load the new navi.exe file with this line in a command prompt: cebin loadnaviexe.cebin. And loadnaviexe.cebin had the below lines in it:
Code:
verbose on image C:\NavHack\BNHH401A.BIN replaceFile navi.exe navi.exe saveToFile C:\NavHack\BNHH401A.NEW
#34
Intermediate
Re-read the thread more thoroughly. Need to start with a fresh navi.exe.
It seems like I'm the last person to do this hack, but just in case someone else comes behind me here's what I learned.
After using Pat D's script in XVI32 on a clean navi.exe file, I tried to use dumpnavi.exe to put the exe back into the BNHH401A.bin file I'd previously modified to show the trip computer and AC controls, but dumpnavi wouldn't let me due to file size issues. So I downloaded cebin and used it to load the new navi.exe file with this line in a command prompt: cebin loadnaviexe.cebin. And loadnaviexe.cebin had the below lines in it:
Then I changed the .NEW file extension to .bin and had my new bin file!
It seems like I'm the last person to do this hack, but just in case someone else comes behind me here's what I learned.
After using Pat D's script in XVI32 on a clean navi.exe file, I tried to use dumpnavi.exe to put the exe back into the BNHH401A.bin file I'd previously modified to show the trip computer and AC controls, but dumpnavi wouldn't let me due to file size issues. So I downloaded cebin and used it to load the new navi.exe file with this line in a command prompt: cebin loadnaviexe.cebin. And loadnaviexe.cebin had the below lines in it:
Code:
verbose on image C:\NavHack\BNHH401A.BIN replaceFile navi.exe navi.exe saveToFile C:\NavHack\BNHH401A.NEW
#36
Worked great for me and edited all the text on the disclaimer screen.
After messing up one address in the hex editor, I wrote a quick script. I took apnar's hex edits and dumped them into XVI32 (GREAT free hex editor.)
Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the following into the window:
ADR $38D69C
OVERWRITE 92
OVERWRITE 7F
OVERWRITE 45
ADR $446f91
OVERWRITE 00
OVERWRITE 46
OVERWRITE 2f
OVERWRITE 16
OVERWRITE 2f
OVERWRITE 26
OVERWRITE 2f
OVERWRITE 22
OVERWRITE 4f
OVERWRITE C4
OVERWRITE 7f
OVERWRITE 1f
OVERWRITE D0
OVERWRITE 0b
OVERWRITE 40
OVERWRITE 09
OVERWRITE 00
OVERWRITE 3c
OVERWRITE 7f
OVERWRITE 26
OVERWRITE 4f
OVERWRITE F6
OVERWRITE 62
OVERWRITE F6
OVERWRITE 61
OVERWRITE 1b
OVERWRITE D0
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 1a
OVERWRITE A0
OVERWRITE 09
OVERWRITE 00
ADR $446ff5
OVERWRITE 00
OVERWRITE 2a
OVERWRITE 01
OVERWRITE 1a
OVERWRITE 22
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
ADR $447000
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 05
OVERWRITE 42
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 01
OVERWRITE D1
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 2b
OVERWRITE 42
OVERWRITE F6
OVERWRITE 64
OVERWRITE 56
OVERWRITE B3
OVERWRITE 36
OVERWRITE 9e
OVERWRITE 64
OVERWRITE 80
OVERWRITE 45
OVERWRITE 00
OVERWRITE 88
OVERWRITE 68
OVERWRITE 2e
OVERWRITE 00
ADR $447064
OVERWRITE 00
OVERWRITE 00
OVERWRITE 41
OVERWRITE 44
OVERWRITE 00
OVERWRITE 00
OVERWRITE 00
OVERWRITE 77
OVERWRITE 77
OVERWRITE 77
OVERWRITE 2e
OVERWRITE 76
OVERWRITE 69
OVERWRITE 73
OVERWRITE 74
OVERWRITE 61
OVERWRITE 62
OVERWRITE 75
OVERWRITE 67
OVERWRITE 2e
OVERWRITE 63
OVERWRITE 6f
OVERWRITE 6d
OVERWRITE 2f
OVERWRITE 6e
OVERWRITE 61
OVERWRITE 76
OVERWRITE 69
The click syntax check just to make sure the copy and paste is good and then execute if no errors. Done. Save the navi.exe, get it back into the bin and enjoy!
After messing up one address in the hex editor, I wrote a quick script. I took apnar's hex edits and dumped them into XVI32 (GREAT free hex editor.)
Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the following into the window:
ADR $38D69C
OVERWRITE 92
OVERWRITE 7F
OVERWRITE 45
ADR $446f91
OVERWRITE 00
OVERWRITE 46
OVERWRITE 2f
OVERWRITE 16
OVERWRITE 2f
OVERWRITE 26
OVERWRITE 2f
OVERWRITE 22
OVERWRITE 4f
OVERWRITE C4
OVERWRITE 7f
OVERWRITE 1f
OVERWRITE D0
OVERWRITE 0b
OVERWRITE 40
OVERWRITE 09
OVERWRITE 00
OVERWRITE 3c
OVERWRITE 7f
OVERWRITE 26
OVERWRITE 4f
OVERWRITE F6
OVERWRITE 62
OVERWRITE F6
OVERWRITE 61
OVERWRITE 1b
OVERWRITE D0
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 1a
OVERWRITE A0
OVERWRITE 09
OVERWRITE 00
ADR $446ff5
OVERWRITE 00
OVERWRITE 2a
OVERWRITE 01
OVERWRITE 1a
OVERWRITE 22
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
ADR $447000
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 05
OVERWRITE 42
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 01
OVERWRITE D1
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 2b
OVERWRITE 42
OVERWRITE F6
OVERWRITE 64
OVERWRITE 56
OVERWRITE B3
OVERWRITE 36
OVERWRITE 9e
OVERWRITE 64
OVERWRITE 80
OVERWRITE 45
OVERWRITE 00
OVERWRITE 88
OVERWRITE 68
OVERWRITE 2e
OVERWRITE 00
ADR $447064
OVERWRITE 00
OVERWRITE 00
OVERWRITE 41
OVERWRITE 44
OVERWRITE 00
OVERWRITE 00
OVERWRITE 00
OVERWRITE 77
OVERWRITE 77
OVERWRITE 77
OVERWRITE 2e
OVERWRITE 76
OVERWRITE 69
OVERWRITE 73
OVERWRITE 74
OVERWRITE 61
OVERWRITE 62
OVERWRITE 75
OVERWRITE 67
OVERWRITE 2e
OVERWRITE 63
OVERWRITE 6f
OVERWRITE 6d
OVERWRITE 2f
OVERWRITE 6e
OVERWRITE 61
OVERWRITE 76
OVERWRITE 69
The click syntax check just to make sure the copy and paste is good and then execute if no errors. Done. Save the navi.exe, get it back into the bin and enjoy!
yeap... thanks.. works as a charm... but does your voice commands work after applying it "?
#37
Drifting
iTrader: (13)
Its weird. The Voice commands work on any of the standard screens, but get confused if you are on the modded screens. This is probably why Honda/Acura removed the screens and added the MID---it would have cost too much to re-write the software to work on the other screens.
If you tap MAP/Guide or any of the other standard screens, voice controls return to normal.
One question: What text is displayed on your startup after applying the scripted changes?
If you tap MAP/Guide or any of the other standard screens, voice controls return to normal.
One question: What text is displayed on your startup after applying the scripted changes?
#39
Does anyone have this working on the new 2011 3.A0 disc? It looks like the offsets are different in the new navi.exe file (at least I couldn't figure out how to get it to work).
I did try the downloaded pre-modified AD .bin file and it works so I know it's loading correctly, but I am trying to get it to work AD-free with the method in this thread, and so far no success.
I should include that I'm doing this on a navi that has not ever been hacked.
I did try the downloaded pre-modified AD .bin file and it works so I know it's loading correctly, but I am trying to get it to work AD-free with the method in this thread, and so far no success.
I should include that I'm doing this on a navi that has not ever been hacked.