apnar

Well I wasn't planning on releasing this at all as I feel that this was really all ADs hard work and all I did was little work around to his check. But now I've heard that AD is apparently not offering a tag free version to people who offer to pay and another work around has surfaced. I haven't tried the other work around yet but from the description it seems like there is still text on the screen that can't be edited. So attached is a version of the patch that doesn't have such a requirement. I'm not going to wrap it in a binary patcher or such so you can either go to town with a hex editor or wait for someone else to package it.

Usual disclaimers apply, this could make your car explode and so forth. Works for me though.

-apnar

apnar

0038d69c: 88 92
0038d69d: 68 7f
0038d69e: 2e 45
00446f91: 43 00
00446f92: 65 46
00446f93: 20 2f
00446f94: 73 16
00446f95: 79 2f
00446f96: 73 26
00446f97: 74 2f
00446f98: E8 22
00446f99: 6d 4f
00446f9a: 65 C4
00446f9b: 20 7f
00446f9c: 76 1f
00446f9d: 6f D0
00446f9e: 75 0b
00446f9f: 73 40
00446fa0: 20 09
00446fa1: 64 00
00446fa2: 6f 3c
00446fa3: 6e 7f
00446fa4: 6e 26
00446fa5: 65 4f
00446fa6: 20 F6
00446fa7: 64 62
00446fa8: 65 F6
00446fa9: 73 61
00446faa: 20 1b
00446fab: 72 D0
00446fac: 65 09
00446fad: 6e 00
00446fae: 73 09
00446faf: 65 00
00446fb0: 69 09
00446fb1: 67 00
00446fb2: 6e 06
00446fb3: 65 61
00446fb4: 6d 1c
00446fb5: 65 32
00446fb6: 6e 06
00446fb7: 74 61
00446fb8: 73 1c
00446fb9: 20 32
00446fba: 72 06
00446fbb: 6f 61
00446fbc: 75 1c
00446fbd: 74 32
00446fbe: 69 1a
00446fbf: 65 A0
00446fc0: 72 09
00446fc1: 73 00
00446ff5: 70 00
00446ff6: 6f 2a
00446ff7: 75 01
00446ff8: 72 1a
00446ff9: 20 22
00446ffa: 76 06
00446ffb: 6f 61
00446ffc: 75 1c
00446ffd: 73 32
00446ffe: 20 06
00447000: 69 1c
00447001: 64 32
00447002: 65 06
00447003: 72 61
00447004: 20 1c
00447005: E0 32
00447006: 20 05
00447007: 61 42
00447008: 74 06
00447009: 74 61
0044700a: 65 1c
0044700b: 69 32
0044700c: 6e 01
0044700d: 64 D1
0044700e: 72 1c
0044700f: 65 32
00447010: 20 2b
00447011: 76 42
00447012: 6f F6
00447013: 74 64
00447014: 72 56
00447015: 65 B3
00447016: 20 36
00447017: 64 9e
00447018: 65 64
00447019: 73 80
0044701a: 74 45
0044701b: 69 00
0044701c: 6e 88
0044701d: 61 68
0044701e: 74 2e
0044701f: 69 00
00447064: 6c 00
00447065: 65 00
00447066: 73 41
00447067: 20 44
00447068: 63 00
00447069: 6f 00
0044706a: 6e 00
0044706b: 64 77
0044706c: 69 77
0044706d: 74 77
0044706e: 69 2e
0044706f: 6f 76
00447070: 6e 69
00447071: 73 73
00447072: 20 74
00447073: 72 61
00447074: 6f 62
00447075: 75 75
00447076: 74 67
00447077: 69 2e
00447078: E8 63
00447079: 72 6f
0044707a: 65 6d
0044707b: 73 2f
0044707c: 2c 6e
0044707d: 20 61
0044707e: 63 76
0044707f: 65 69

apnar

For anyone that is curious I didn't really defeat the check at all. The AD tag and URL is still there and is still checked. What I did was move the AD and URL to a different section of the file (in some french text, hope it doesn't crew up you guys up north) the changed the value where the check loads its data from. Not as clean as I might have liked but serves the purpose well and allows you to put what ever you like on screen without worrying, just don't go changing it in the french text and everything should be fine.

-apnar

Lem_

Forgive me if I'm being dense, but is that not what the first crack did ?
I'm not an sh-4 guru, so I could be wrong.

Lem

apnar

Like I said I haven't tried the other one, I was just going off this warning line:

With the hack provided above you can change all the text on the screen with out worry.

-apnar

Lem_

Heh.
The same thing applies to your crack too though ?

If I hexedit the AD , or the website tag the app will break, yes ?
Lem

apnar

Correct, the key difference is now the AD is in a section of the code that is completely useless instead of it being in the section of the code that tells what to display on the screen. Basically with this you would never even know that the AD was there unless you went diving into the code for it. Make sense?

-apnar

Mike_TX

So apnar - for those of us not so well-versed with this stuff, do we just cut and paste this code in the hex editor in place of the code that's already there?

Which begs the question ... my hex editor displays a whole grid of code for each address (such as 0038d69c, for instance), so exactly how do we apply this patch?

Sorry, but I slept through code class.
.
.

funkymint

apnar's comment to me earlier this week…
" Best of luck, and if you are successful I'd suggest not posting it. -apnar"


I was successful, and do not agree with his philosophy on sharing...

I have provided a much simpler solution, which after reviewing the offsets, does more or less the exact same thing as the code above. In other words, just use the patch

https://acurazine.com/forums/showthread.php?t=146686

A Wise Man Once Said... "All intellectual pursuits are ultimately futile"

The Dougler

iTrader: (1)

does anyone know if its possible to change the color of the text while booting?

apnar

[double posted reply...]

funkymint,

The difference between then and now is I was made aware that AD is not even offering a tag free version anymore. My previous stance was AD had done all the hard work and if people wanted a tag free version they should either pay him for it or try to work around it themselves. I was even generally helpful in assisting anyone who wanted to have a go at it themselves both in the threads and via PM. Now that there is no option to pay for it I changed my stance.

Anyway, it can't hurt anyone to have more options. They can use the original AD patch, your patch, my patch I don't really care one way or the other. As I said in my post, I hadn't tried yours out yet but from the description it sounded like there was a limitation in the ability to edit all the text on the screen. If that isn't the case then there is no reason for anyone to use mine over yours.

I definitely meant no disrespect to the work you guys did. I do think it's great that more people were able to create a work around, the more people that are toying around with the code the more cool little hacks will end up emerging.

-apnar

apnar

I've gotten a few questions in other threads and via PMs so I thought I'd consolidate some information here for others if needed:


What do the values on the lines for the hack mean (like "0038d69c: 88 92"):


What is a good hex editor to use:


How do the file locations relate to what I see in XVI32 on the left:

Warren803

I cant remember which HEX program I used. It might be the same one you posted a link to. Here is a hint for some people. I was confused when I first started trying to look for the location code that Apnar listed. My program had the line codes on the left....similar to Apnar's code...but it seemed to always have an extra number or letter code at the end...I had to physically click on the cell, and then in a bar at the bottom of the program, I was able to see the exact location code Apnar listed.

Also, Apnar kept saying that you need to start with a fresh navi.exe. I was confused because I was wondering how the AD hack gets into navi.exe file in the first place, if all apnar's code is doing is modifying it. Answer is that Apnar's coding contains the AD hack in it. So when you make all those line code changes, you typed in AngryDad's hack also.

I was also confused because I thought that Apnar mentioned you cant type below the line "Please wait...". I went back to read his post again, and I just read it wrong. Apnar was just quoting that. Apnar does not code the lines "loading navigation...please wait..." into the file. Basically, if you make all of Apnar's coding changes to a fresh unmodified navi.exe file, you will end up with a stock boot up text with no OK button. You can then modify the text however you like.

P.S. - Apnar mentioned you are not limited to the same amount of characters and lines in the stock disclaimer text. You can fool the sytem to display more by using "00" coding to tell it where the display text starts and stops. I havent tested this part out myelf though.

My coding worked perfect. It took me a while to figure it all out, but I got everything correct on my first CD burn and boot up.

Thanks Apnar...

Pat D

Worked great for me and edited all the text on the disclaimer screen.

After messing up one address in the hex editor, I wrote a quick script. I took apnar's hex edits and dumped them into XVI32 (GREAT free hex editor.)

Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the following into the window:

ADR $38D69C
OVERWRITE 92
OVERWRITE 7F
OVERWRITE 45
ADR $446f91
OVERWRITE 00
OVERWRITE 46
OVERWRITE 2f
OVERWRITE 16
OVERWRITE 2f
OVERWRITE 26
OVERWRITE 2f
OVERWRITE 22
OVERWRITE 4f
OVERWRITE C4
OVERWRITE 7f
OVERWRITE 1f
OVERWRITE D0
OVERWRITE 0b
OVERWRITE 40
OVERWRITE 09
OVERWRITE 00
OVERWRITE 3c
OVERWRITE 7f
OVERWRITE 26
OVERWRITE 4f
OVERWRITE F6
OVERWRITE 62
OVERWRITE F6
OVERWRITE 61
OVERWRITE 1b
OVERWRITE D0
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 09
OVERWRITE 00
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 1a
OVERWRITE A0
OVERWRITE 09
OVERWRITE 00
ADR $446ff5
OVERWRITE 00
OVERWRITE 2a
OVERWRITE 01
OVERWRITE 1a
OVERWRITE 22
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
ADR $447000
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 05
OVERWRITE 42
OVERWRITE 06
OVERWRITE 61
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 01
OVERWRITE D1
OVERWRITE 1c
OVERWRITE 32
OVERWRITE 2b
OVERWRITE 42
OVERWRITE F6
OVERWRITE 64
OVERWRITE 56
OVERWRITE B3
OVERWRITE 36
OVERWRITE 9e
OVERWRITE 64
OVERWRITE 80
OVERWRITE 45
OVERWRITE 00
OVERWRITE 88
OVERWRITE 68
OVERWRITE 2e
OVERWRITE 00
ADR $447064
OVERWRITE 00
OVERWRITE 00
OVERWRITE 41
OVERWRITE 44
OVERWRITE 00
OVERWRITE 00
OVERWRITE 00
OVERWRITE 77
OVERWRITE 77
OVERWRITE 77
OVERWRITE 2e
OVERWRITE 76
OVERWRITE 69
OVERWRITE 73
OVERWRITE 74
OVERWRITE 61
OVERWRITE 62
OVERWRITE 75
OVERWRITE 67
OVERWRITE 2e
OVERWRITE 63
OVERWRITE 6f
OVERWRITE 6d
OVERWRITE 2f
OVERWRITE 6e
OVERWRITE 61
OVERWRITE 76
OVERWRITE 69

The click syntax check just to make sure the copy and paste is good and then execute if no errors. Done. Save the navi.exe, get it back into the bin and enjoy!

mitul103

Incrediby useful Pat D. Thanks.

acuraTL44

Theres a problem with this code because after its modified, navi.exe is larger than it is supposed to be. The dumpnavi program recognizes this and wont put it back into the bin. I'm trying to find the mistake.

Pat D

Worked well for me, posted this after I tested it. Did you make any other mods (Disclaimer text) or just the OK mod?

acuraTL44

i had ad's ok mod earlier, but i wanted to keep the disclaimer text. all i did was extract navi.exe using dumpnavi then insert ur replacement coding. Then the dumpnavi wouldnt accept it to put it back in. It gave me that error message saying it was too big. I'll keep trying.

acuraTL44

wait, i think i found my mistake. I took the navi.exe out of an already modified bin. I'll try it again using a different one and see what happens.

acuraTL44

It still doesnt work for me. Can u check your code again to be positive that it does work?

Pat D

Definitely works. I did it manually by hand the first time and screwed it up, resulting in a fuse pull. Second time I decided to code it into a script and it was flawless for me.

I would make SURE it's a virgin NAVI.EXE and do nothing else to it first to make sure it works. Try extracting it from a fresh copy of the bin and try it for kicks.

BrandonClaps

use cebin instead of dumpnavi

apnar

If this happens, you can either use cebin instead of dumpnavi like BrandonClaps suggested or open navi.exe and over-write some of the French text with spaces (the spaces will compress better then the text).

-apnar

acuraTL44

I definately cant get this to work. The ok button still pops up. For now i'll stick with AD's patch. Ive tried using several different navi.exe's, including the origional, and they all come out with the same solution, they dont work.

I want to try using cebin, i jus have 1 question. Do i use the same dos commands as i do with dumpnavi?

-Thanx

acuraTL44

i still cantt get it to work, but i think i kno wat the problem is. i think the file u r editing is a v3.50 file. my navi.exe is v3.40c. i have also tried kennyc's navi.exe. wat do i need to do to kennyc's navi.exe to get it to work, or do i need a clean 3.50 navi.exe to get this to work?

ty

apnar

Yeah, all the offsets and changes are based off of a clean 3.5 navi.exe. I've heard of people using a 3.5 navi.exe with their 3.4 disk but you'll need to track down a fresh 3.5 navi.exe to try it with.

-apnar

acuraTL44

Can some1 share their 3.5 navi.exe? You can use rapidshare and paste the link. Thankyou

BBoz

Anyone have any idea where the Text for the OK Screen is on the v4.x disks? They don't seem to have a navi.exe in the BIN files. At least not that I can find.

Andrew McCarthy

Hi folks- I'm wondering if anyone's gotten this to work as outlined in post #14.

I got the hex editor down and that seems to have worked. I used a fresh navi.exe I extracted from BNHH401A.BIN from my 3.50 disc.

The problem seems to be loading it into the car. I load the hack disc and everything seems fine- it loads fine- but the OK hack doesn't work. I even changed some of the english nag text in navi.exe with "test" and that does not show up. It's as if I never loaded the disc at all.

I know it's loading files from the disk because I got the trip computer/AC hack to work.

I also know it's putting navi.exe back into the BIN because I extracted the modified BIN and loaded that navi.exe into the hex editor and it had the OK hack and my "test" text in it.

At this point I'm not sure what else I can do. Any thoughts?

dave1476

Sorry about the slow reply to your post, Andrew -- it's been a while since I checked this thread. Yes, I got it to work eventually. But the comments by acruaTL44 were correct -- the modified navi.exe won't fit into the bin file. As modified in post #14, the file is about 30 bytes too large. The solution is to replace some of the French text with spaces or zeros to allow the compressor to save a little space. The French text starts at offset 4470AE. I first replaced about 40 characters with spaces, but this was not enough -- in fact, the compressed file got larger (as reported by dumpnavi). I switched to zeros and replaced lots more French text, probably 100+ characters. Then it compressed OK.

What follows is a summary of exactly what I did, from beginning to end (sorry if this repeats some obvious material from other threads):

1. Copy two files off your orange navigation disk:
BNHH401A.BIN
BN2HHMLD.BIN
and put them in the same directory as the dumpnavi program. Note: other posts explain that if you did the wallpaper and/or the trip computer already, you want to use your modified BNHH401A.BIN instead of the one copied off the navigation dvd.

2. Go to a command prompt and change into that directory.

3. Type "dumpnavi BNHH401A.BIN extract" This will extract everything within that BIN file into a folder named BNHH401A.

4. Open up the navi.exe in XVI32, click XVISCRIPT menu at the top, and click EDITOR. Copy and paste the script text from post #14 into the window.

5. Click syntax check, then execute if no errors. Save the navi.exe.

6. Go back to your command prompt and type "dumpnavi BNHH401A.BIN update navi.exe" This will load your patched navi.exe into the bin. This is where acuraTL44 noticed the problem, and I did too, before deleting the French text.

7. Burn your custom bin (BNHH401a.BIN) and the loader (BN2HHMLD.BIN) onto a blank CD.

8. Go to your car.

9. Turn your car's ignition to ACC.

10. Open the trunk and pop out the NAVI disk (if it's in there).

11. Insert your newly burned CD.

12. Go back to the driver seat, the display will show some dvd read error, now press and hold "GUIDE" "MENU" and "CANCEL" for approx 5 seconds to bring up the diagnostic menu.

13. Wait another 5 seconds to let it load up completely. Press "version" button on the screen.

14. Press "DISC LOAD" to load your custom bin into the navigation.

15. Wait until it's completely done and it will then display another error message about can't read the navi dvd, now take out your bin CD and insert your Navigation disc and you are done!

Good luck!

barga43

Has anyone figured out this code for the 3.4 version?

If not, can someone post the 3.5 version of the BNHH401A.BIN so I can make the changes in the HEX editor to remove the ok button?

Thanks in advance for the help.

danny25

Do you run that script on a clean navi.exe file or on one that already has the OK hack but also has AD's signiture and url?

danny25

Re-read the thread more thoroughly. Need to start with a fresh navi.exe.

It seems like I'm the last person to do this hack, but just in case someone else comes behind me here's what I learned.

After using Pat D's script in XVI32 on a clean navi.exe file, I tried to use dumpnavi.exe to put the exe back into the BNHH401A.bin file I'd previously modified to show the trip computer and AC controls, but dumpnavi wouldn't let me due to file size issues. So I downloaded cebin and used it to load the new navi.exe file with this line in a command prompt: cebin loadnaviexe.cebin. And loadnaviexe.cebin had the below lines in it:

Then I changed the .NEW file extension to .bin and had my new bin file!

gynuine69

Are you on 3.5c or 3.4c?

danny25

3.5 disc

99accordguy

yeap... thanks.. works as a charm... but does your voice commands work after applying it "?

dwb993

iTrader: (13)

Its weird. The Voice commands work on any of the standard screens, but get confused if you are on the modded screens. This is probably why Honda/Acura removed the screens and added the MID---it would have cost too much to re-write the software to work on the other screens.
If you tap MAP/Guide or any of the other standard screens, voice controls return to normal.
One question: What text is displayed on your startup after applying the scripted changes?

danny25

The standard text still shows up. The scripted hack doesn't change that.

Dirac

Does anyone have this working on the new 2011 3.A0 disc? It looks like the offsets are different in the new navi.exe file (at least I couldn't figure out how to get it to work).

I did try the downloaded pre-modified AD .bin file and it works so I know it's loading correctly, but I am trying to get it to work AD-free with the method in this thread, and so far no success.

I should include that I'm doing this on a navi that has not ever been hacked.

TerminaderTL

I was able to replace my 3.40c install with the latest 3.A0 install. The only part I couldn't figure out was removing the 'AD'.