ak217

I see that threads about hacking Navi DVD are dead. So I try to resurrect this discussion.

I found an utility (dumprom - http://www.xs4all.nl/~itsme/projects/xda/dumprom.html) that can extract files from ROM images. But unfortunately it does not work for our ROM image. So I have written my own utility. It extracts files and modules from *.bin file from Navi DVD. Extracting files works fine. Extracting modules works too, at least IDA(interactive disassembler that supports SH4 among with other CPU) accept them.
So now you can do reverse engineering if you want.

http://home.earthlink.net/~akonshin/...unpackNavi.zip

Just unpack it in some directory, put *.bin file to that directory then run unpack.bat
It should create subdirectories "Files" and "Modules".


Sorry for my terrible English.

e_lectro

Now you just need to write something that puts them back after I modify them

Nice job on the program!

ak217

I am working on it. For files it is easy but for modules it may require some non-trivial actions, especially if chaged segment is compressed. I am still not sure that I treat modules correctly.

savage

is there a way you can make a image of what you retrieve and make a duplicate without modifing the data?

biker

Do you ever worry that the Acura software :cop: might be onto you?

khannie112

damn you hackers....I requested this before...Please hack into the Navi with a screen saver of Anna Kournikova. I will gladly pay $$$ for that version!!!

ak217

The problem is that navi DVD is double layer DVD. Despite the fact that there are a lot of DL DVD writers on market now I doubdt that navi DVD unit will accept our DVD because all those writers can write in DVD+R format only. But navi unit is produced in 2001 (or maybe earlier). So I think it does not support DVD+R (at least I don't see any reason to do it). If I am wrong then, of course, it will be much simplier just modify image and write it on the DVD.

My goal is to do all tricks without changing existing DVD. I think it is possible. During booting WinCE initializes devices and PCMCIA slot is one of them. I see that storage PC Cards are supported (BTW, it looks like it also supports some modems and network cards). Another way is to use COM-port to connect to navi from notebook or PDA via any terminal program. It looks like we can send commands to shell.exe (that always runs), for example, we can start processes that we can place on PCMCIA storage PC Card. If it is possible then we can do with navi whatever we want.
I also thought that we might get access via console driver but I found out that console.dll is missing in navi ROM.

BTW, I think my program extracts some modules incorrectly (at least nk.exe). I will try to fix it. But it works fine for other modules that I've tried to investigate and, of course for all files. Of course we have some sources for kernel in Windows CE SDK but I want to know which features are included in kernel of navi OS.

ak217

Why Anna? You are behind of life - now Masha Sharapova should be your favourite .
BTW, I am russian too.

BTW, replacing of this "screen saver" is relatively easy and can be done if we find the way to replace flash ROM image.

ak217

I am not going to change anything. I am just looking for some undocumented capabilities.
Anyway we bought this unit legally and we definitely will not use this unit and navi database outside our car .

e_lectro

Well, you might be right with the +/-R thing, but with bitsetting the readter will think it's -ROM.... so there is a good chance it will work. MY old Sony will not play +R, but it will play the bitset ones.

e_lectro

ak217

Hm. What do you mean by "bitset"? I have never heard about this. I have Lite-On DL DVD writer. Do you think it may work? I don't want to spend $10-$15 for a blank DL DVD disk while we are not sure that it works.

khannie112

No Maria! i still love Anna and watching her on the Apprentice last night just strengthened my love for Anna! I am planning on doing away with Enrique pretty soon...hehe

Yeah, I'll definitely be following these posts and see if I can get Anna to boot up on my Navi everyday

e_lectro

Which Lite-On unit do you have? I have an 812S modified into an 832S so it can burn dual layer.

As far as bitsetting and what you can do with your burner, check out this forum:
http://club.cdfreaks.com/forumdisplay.php?f=44
Lot's of good information there

smileyw

I can't speak for the TSX one (becuase I have not bothered trying), but the 00 TL one will not work properly with a +DL. It will load, but it seems that it can't propperly read the 2nd layer of the disk so the maps don't really work. (I was trying to hack some of the files as well, which is why I was trying this).
I think a TSX might read a +DL, but I don't want to spend the $15 to figure it out since the older TL looks like I might be able to do some more interesting stuff with it.


W

ak217

http://www.meritline.com/dl-dvd-r-du...ek-ridata.html
1 Pack Ritek Ridata DL DVD+R (Dual Layer, Double Layer) Blank Media 8.5GB 2.4X in Jewel Case, $9.99 Each
5 Pack Ritek Ridata DL DVD+R (Dual Layer, Double Layer) Blank Media 8.5GB 2.4X in Jewel Case, $9.50 Each

I think it is possible to load ROM from PC Storage card. Maybe we don't even need to write our image on DVD.
I'm trying to to undertand how initialization of kernel works and where it is looking for the image.

ak217

I beleive that we CAN replace flashROM using Storage(ATA) PC Card.
On some of diagnostic screens there are buttons "Load Disk" and "Load Card".
So I will try to use the second button. Unfortunately I have no any PC Card and even have no notebook to write it. But I have an idea. There are several PCMCIA<->flashCard adapters on the market and they are relatively cheap (about $15-$25). I have several flash card (for cameras) and two of mine home computers have slots for such cards. So I hope I can use adapter+flashCard instead of ordinal storage PC Card.

BTW, if you have never heard about "diagnostic sreens" then:
Simultaneously press the MENU, MAP GUIDE and CANCEL buttons and hold it for about 5 seconds to go to the "diagnostic screen".
While on the "diagnostic screen", press the MENU, MAP GUIDE and CANCEL buttons again and hold it for about 5 seconds to go to the "developer's screen".

jonnerd154

Plus the contract only says that we can't modify the DVD, it says nothing about adding things to the boot process, or envoking commands to run 3rd party code.

jonnerd154

So if we can crack the main functions of the navi, can we change the voice protocols that the system follows??

eg: I say "what time is it" the navi responds "Look at the dash, you lazy asshole!"

elduderino

Well done, ak217. Keep us posted. I may have a commercial output for your efforts.

ak217

It is not easy and I doubt that it worth the efforts. And it is definitely break the license agreement.

elduderino

I am more interested in the following:

Changing the OSD for when the SHOND3 adapter is active (getting rid of the Sony 10-disc info and replacing it with something more effective)

Enhancing XM Radio and iPod functionality.

jonnerd154

How about enabling the system to read ID3 tags from MP3s on the OEM mp3 player and displaying them on the navi's "Audio" screen??

ak217

Sorry, I really don't understand what are you talking about.
What is OSD and SHOND3?

About OEM mp3player:
I think it is impossible to read anything from OEM DVD player. Maybe I'm wrong.
My idea is to use compact flashes or external harddrives to store mp3 files and decode and play them directly on navi's processor. I believe it is powerful enough and can handle this load especially when navigation is off.

Actually I'm expirienced software developer but I am a novice in embeded systems, especially car systems. Even Windows CE and SuperH processor are new for me but as you see I learn them quikly. So maybe something is obvious for somebody but it does not for me.
I propose to cooperate.

I already bought CompactFlash<->PCMCIA adapter and I will test my idea about loading ROM image form PC Card maybe tomorrow.

Once again sorry for my English.

slo007

SHOND3 is a commercially available adaptor that allows people to hook up any auxiliary device to the Acura OEM stereo (including NAVI models) and listen to music on the car's speakers. NAVI models, however, require an extra cable from Honda.

jonnerd154

[QUOTE=ak217]About OEM mp3player:
I think it is impossible to read anything from OEM DVD player. Maybe I'm wrong.
My idea is to use compact flashes or external harddrives to store mp3 files and decode and play them directly on navi's processor. I believe it is powerful enough and can handle this load especially when navigation is off.
QUOTE]

Damnit, I figured that. The MP3 player connects to the car with an inline bus, data comm must be rather restricted.

elduderino

[QUOTE=jonnerd154]Uh, the OE MP3 player connects with an FM fricking Modulator.

e_lectro

That's funny, then why does the OE MP3 player only come with one cable and it plugs into the data bus?

Now if you want to talk about the OE XM unit... I think that might be FM modulated.

slo007

That's not correct. It hooks up with a cable (included), as mentioned above by e_electro. The cable goes where the NAVI connects to the stereo. The NAVI cable then connects to the player.

elduderino

Smoking cheap dope... my apologies. Damn anti-nausea meds...

Sorry...my bad.

lithiumus

Hey ak217,

I've got an 04 TL Navi. I wanted the Acura logo to be a Honda logo instead. All you have to do to load an image is copy all the BIN files to a CDR. Boot up with the CDR. Once you get a message, hit the Map + Menu + Cancel. Go into Version and select Load from Disc. That will force a software download.

Just make sure you have all the BIN files on the CDR. There should be 5 large 13mb BIN files and one small 78k BIN file. Give that a try.

fdl

Hey guys, I don't have a navi, but a co-worker in the US does and I have a question on his behalf.

Is there anyway to hack it to speak in a mans voice? He would prefer something very deep and raspy.

Thanks.

lithiumus

I believe that the TL version has both Male and Female option. Not sure about the TSX or Accord versions...

nahooneyya

i can choose between female or male voice on my navi~

ak217

I don't understand. Have you ever try it or it is just your guess?
Yes, I think it will work. At least I have not found anithing that could prevent it. Now I know how WinCE loader works.

I did not tried my new flash card yet because yesterday I was busy - I bought a new car for my wife - Toyota Prius, of course with navi, seaside blue, but I will get it this Monday. So I will have yet another toy
I hope I will try to load new image this weekend.
I am writing an utility that can add/replace files (and in the future - patch modules) on Windows CE rom image.
What size of navi flash? I mean what is the maximum size of image that we can write to it?
It looks like it is 16M. So we have about 3M for our stuff. Not too bad.

So, khannie112, which picture of Anna Kournikova are you prefer?

jonnerd154

where do I put the image?

humperdood

I would love to have Homer Simpson's voice on the navi if I make a wrong turn! That would be awesome!

Whiskers

I had the male voice once, but my wife though it was :ghey:

jonnerd154

HAHAHAHA...

DOH! Mash the navi screen with your fat finger to recalculate the route.

yuhoo22

Any updates ak? Any luck with putting a new image up?

I would love to be able to hack this thing.

humperdood

Can't you just modify the voice commands by taking the navigation DVD out of the trunk player, putting it into your computer, finding the voice files, recording another voice with the same file name, and saving it on a disc?

I would like to have Homer's voice on the navigation prompts. How awesome would that be?