Jump to content


RonS

Member Since 12 Jul 2010
Online Last Active Today, 08:46 PM
*****

Topics I've Started

Security Password Removal Script

21 September 2017 - 03:49 PM

I created a thread in the Z series that presents an automated script to remove the security password on many WinCE based units.

 

No need to install Condi's Hackmode or learn the complexities of TestMode. It removes the password entirely - unlocking the unit. It also saves the existing PASSWORD.DAT file (on the SD) before removing it.
Security Password Removal Script

 

Please post all  comments  in the original thread (linked above) so it is easier to monitor.


Security Password Removal Script

20 September 2017 - 03:17 PM

A simple way to permanently delete your unit's security password. No Condi Hackmode or TestMode needed.

 

I wrote a simple script that will delete the security PASSWORD for most Win CE based F, Z, and X series units. I can't say whether it will work with the very old units, and it won't work with the model numbers ending in 50 or 60,  or Nex units. If your model isn't included, look elsewhere (don't post here-there's probably already a thread in the proper subforum for your unit).

 

  1. Format a smallish SD (32 GB or less) FAT32.
  2. Download and Unzip the attached file.
  3. On your PC, copy into the root of a FAT32 SD the TestMode.key and ScriptExec.ini from my zip.
  4. No other files on the SD. Eject it from your PC and insert into your AVIC. If nothing happens after 5 seconds. turn off your ignition for a few seconds, then turn it on.
  5. You should see a prompt to press any key. Press any button (volume-+ or trk <,>).
  6. Done. Remove the SD and restart your unit. No more password.

 

Note that the TestMode.KEY I use here is only used to run scripts. It will not put your unit into the Maintenance menu. Also note that the script copies your existing PASSWORD.DAT file to the SD - just in case. So make sure it is not write-protected.

 

And a word of advice - In the future, don't set a password. It is no deterrent to a thief since there is no visible indicator that it has a password lock.(he will smash your window and destroy your dash regardless). Plus, he'll find this thread and unlock it. So save yourself the hassle a year from now when your car battery dies and you can't remember the password.


2017 v7 Mod - Remove "Objects may appear reversed"

26 August 2017 - 01:40 PM

This mod is for Z110BT/Z120BT/Z130BT/Z140BH. It also works for X920/X930/X940 and the F series equivalents of the same hardware. It only works for the 2017 v7 firmware.

 

If you have a backup camera and are tired of that stupid message "Objects may appear reversed", here is the way to remove it for this release (v7.0). This is for English language text only. I'm sure the same thing can be done for other languages. For those interested, I got the info needed for this hack from Here. I think this works for both US English and EU settings. If you only care about US English, you can ignore replacing the EUGBENG.LNG file.
 
You'll need TestMode to install this hack. TestMode can be dangerous - especially for noobies. Make a backup of any files you change - in fact making a backup of all files under \USER is a good idea. It is very easy to accidentally delete files in TestMode. Copying and Pasting files is a real PITA and is very error prone. I recommend watching the YouTube video by JasonH on using TestMode (even though he calls it HackMode for historical reasons).
 
Note: Do not modify the files on the 2017 update SD before installing the update. If you do, the installation will fail.
 
After the 2017 installation, use a separate SD with TestMode.key and the patched EUGBENG.LNG and UCUSENU.LNG. Insert the SD into your headunit. It will boot into TestMode.
 
 When TestMode starts enter File Maintenance.
 
The goal is to replace the existing two language specific files with the patched ones. Since TestMode will not allow you to overwrite an existing file, you need to delete the ones already there.
 
First, you need to identify the "active" set of files. There are two \USER\PRG directories on your HU. The active one is indicated by the presence or absence of a file named \USER\PRG.FLG  If this file is not present, the active language files are in \USER\PRG0\APL\LANGDATA\StringData. Otherwise, the active language files are in \USER\PRG1\APL\LANGDATA\StringData. From now on I'll just call it the Active Language Directory.
 
Navigate to the Active Language Directory and delete EUGBENG.LNG and UCUSENU.LNG
 
Navigate to your SD card and copy the 'hacked' EUGBENG.LNG and UCUSENU.LNG.
 
Then go back into the Active Language Directory and select Paste. It might take a minute to complete. If you are having trouble selecting multiple files for copying/pasting, do them one at a time.
 
Then remove the SD and reboot your headunit. Done.
 
If you decide to revert back to the original files, you can just copy them off the original installation SD or your backup copy (you kept a copy, didn't you?).


2017 v7 Mod: Nag Screen Removal Z, X, and F series

19 August 2017 - 02:33 PM

For those who have installed the 2017 release (v7.0), here is the Nag Screen Removal hack. Requires  supertestmode.zip (unzip it; copy TESTMODE.KEY to your FAT32 SD). 

 

This should work for Z110, Z120, Z130, Z140, X920, X930, X940. It should also work for F-series comparable models and likely others that have v7.0 firmware.
 
This is dangerous - especially for noobies. Make a backup of any files you change - in fact making a backup of all files under \USER is a good idea. It is very easy to accidentaly delete files or whole directories in TestMode. Copying and Pasting files is a real PITA and is very error prone. I recommend watching the YouTube video by JasonH on using TestMode (even though he calls it HackMode for historical reasons). Do not install Hackmode!
 
Note: Install the 2017 map update before installing this hack. Do not change the file on the 2017 installation SD. If you do, the installation will fail. You will get the dreaded "Wrong SD" error.
 

Note: I have no way ATT to verify that the F series NAVI.EXE is the same binary, so it would be helpful if someone could verify the bytes below are correct at that location. If not, more research will be necessary.

 

Make a copy of the NAVI.EXE file on the 2017 update SD (in \UPDATE\USER\PRG\APL) to patch.
 
Then using a hex editor (such as HxD):
  at offset 0xBEC18  
  change 05 00 00 0A   to   00 00 A0 E1
and save the file.  HxD also has a binary file comparison that can  be used to make sure that only the above 4 bytes were changed.
 
Then use a separate SD with TESTMODE.KEY and the patched NAVI.EXE on it. With your headunit turned on, insert the above SD. It will boot into TestMode.
 
Go into File Maintenance.
 
First, you need to identify the "active" set of files. There are two \USER\PRGx directories on your HU. The active one is indicated by the presence or absence of a file named \USER\PRG.FLG  If this file is not present, the active application files are in \USER\PRG0\APL. Otherwise, the active files are in \USER\PRG1\APL. From now on I'll just call it the Active directory.
 
The goal is to replace the Active NAVI.EXE with the patched one using File Maintenance. Since TestMode will not allow you to overwrite an existing file, you need to delete the one already there.
 
Using TestMode, go to the Active directory and delete NAVI.EXE. Then go to the SD and select the patched NAVI.EXE and select Copy. Then go back into the Active directory and select Paste. It might take a minute to complete.
 
Then remove the SD and reboot your headdunit. The app should start and allow you to see the map without presenting the annoying Nag Screen.