DIY-- How to bypass your NAVI without moving out your NAVI (Canadian BRZ only)

[8987846]

How to bypass your NAVI without moving out your NAVI, 100% pure soft hack, no need to modify wire connections (Canadian BRZ only, model # AVIC X9130BT)

Be careful, I am not taking responsibility if you break your NAVI!

Goals:
1. Type any address while driving.
2. Dial numbers using the touch key pad or call any contacts.
3. Passengers can watch movies while your brz is not stationary.(untested)

I want to make it simply as possible, but it is dangerous if you don’t understand basic ideas.
You will need a microSD card at least 4GB.

Step 1: Backup your original file.
1. Download “testmode.key” from here http://www.2shared.com/file/l_9ha2NF/TESTMODE.html and put it into your empty microSD card (for example, G:\) . Also create an empty folder called“MYBACKUP”(G:\ as well)
2. Put the card in your navi and turn on ACC mode, it will boot up into testmode.
3. Using your volume button as mouse, Go to line 11 “file maintenance”.
Use mode button as enter, forward and backward button to move around in the bottom menu.
4. Go to User/, select “ALL” and “copy”. Back to root and go to SD/MYBACKUP/, select “PASTE”.
5. Turn the key to OFF position. Take your sd card out and save the contents in a safe place.

Step 2: Upgrading to latest navi version along with 2012 map and some new features.(it is actually a firmware update from Ver 3.0 to Ver 4.001)
5.1. Download this http://thepiratebay.se/torrent/76726...AN_Map_Upgrade
This is just the torrent, you need to download the whole thing (2.23GB).
5.2(edited). Format the sd card, put everything under "x:\....\Pioneer 2012 US-CAN Map Upgrade\RenewalIFLib-AUTO-REPLACER v1.1\" to G:\ (IMPORTANT: copy and paste the files under the folder,NOT the folder itself.)
5.3(edited). Insert the sd card to your unit, and turn on ACC mode, select YES. it will automatic do everything for you.(This step will replace the "RenewallFlib.dll" in your unit with the hacked one, no worry)

6. Format the sd card.
7. Place the 2 folders “Firmware” and “Update” along with the file “CARDINFO.cif” at G:\. (only these 2 folders + 1 file, the others in the torrent are useless at this time)
8. Download this http://www.2shared.com/file/WSsMDB_2/VERINFO.html and replace the one at G:\Update\

9. Put the sd card in your navi and turn to ACC mode, make sure you have enough power to finish the update(30 mins)
10. Choose “YES” and wait.
11. The navi will reboot after the update is done, now this time choose “NO” because you already updated to the latest version.(Please buy this update from pioneer if you like it, http://www.pioneerelectronics.ca/POC...d+AVIC-X9310BT )
12. Go to Bluetooth setting and click on “Firmware update”, this will update your BT Version from 3.22 to 3.24. You can now use the appmode with android phones.

Step 3: Backup the new version of the navi as in Step 1, save it to a safe place. From you backup, create a copy of “navi.exe” in x:\......\mybackup\PRG0\Apl\


Step 4:
12. Format your sd card. Put “testmode.key”(the one you obtained in step 1) and the copy of “navi.exe” back into G:\
13. Download hex editor HxD from here http://download.cnet.com/HxD-Hex-Edi...-10891068.html and open “navi.exe” in your sd card with HxD.
14. At the left side search for offset 15aef0, change the value from 02 00 56 E3 to 09 00 56 E3.
15. At the left side search for offset 15aee0, change the value from 01 10 A0 E3 to 00 10 A0 E3.
16. Save the changes.
17. Put sd card into your navi, and turn on ACC mode. Use “file maintenance” to replace the one you edited with the one at User\PRG0\Apl\ (you must delete the old “navi.exe” first and then paste the edited one, because the system won’t replace them for you!!)
18. You should see a new "Safe Mode" toggle switch in the settings menu (bottom row, right side). By switch it on or off(I forgot which one), you should be able to type and call while the hand break is at up postition.

Step 5: (do it if you want to remove the “OK” screen or lawyer caution screen)
19. look at the “navi.exe” you just edited, open it with HxD.
20. Find bee20, change the values from 05 00 00 0a to 00 00 a0 e1.
21. Replace the one in you navi.
22. Turn the key to OFF position and take your sd card out and you are done.



I didn’t find out this, I learned it from avic411.com. This method was invented by their forum member pionara. Special thanks to him because he made my life easier. He wrote the original instruction, what I did was just pointed out the important steps (for Canadian BRZ). You will find it useful if you go to:
http://avic411.com/index.php?/topic/...symethod-beta/
http://avic411.com/index.php?/topic/...e-bypass-menu/
http://avic411.com/index.php?/topic/...n-bypass-hack/

[djdnz]

THANKYOUTHANKYOUTHANKYOUTHANKYOUTHANKYOU!!!

Have you done this yourself yet? My car is in storage, so I'm going to study this until I get a chance to actually do it myself. Have you posted it in the canadian forums yet?

[8987846]

Originally Posted by djdnz

THANKYOUTHANKYOUTHANKYOUTHANKYOUTHANKYOU!!!

Have you done this yourself yet? My car is in storage, so I'm going to study this until I get a chance to actually do it myself. Have you posted it in the canadian forums yet?

yeah i have done it. i will try to take some photos of it tonight.

[8987846]

i took some pictures showing how to backup your navi files.

[8987846]

after the whole process is done, you should see this. the bottom right conner "safe mode".

turn if on like this (showing off but it is on), you are officially bypassed!

[mikep]

Does this work with a thumb drive in the usb port or only with a micro sd card?

[vignesh]

" http://www.2shared.com/uploadComplet...7BBtA1dDltiNkA " this download link doesnt work ?

[8987846]

Originally Posted by vignesh

" http://www.2shared.com/uploadComplet...7BBtA1dDltiNkA " this download link doesnt work ?

sorry, my bad...
i just fixed it. it should work now...
thanks

[8987846]

Originally Posted by mikep

Does this work with a thumb drive in the usb port or only with a micro sd card?

according to the smart guy who wrote the "testmode.key" file, it does support usb port. but i didn't try that....you can try it yourself see if the navi boot up to testmode. there is a youtube video of what testmode looks like. keyword: avic testmode".

[chadstyle]

Why won't this work on US Spec model head units?

[8987846]

Originally Posted by chadstyle

Why won't this work on US Spec model head units?

because the navi is different.
US navi produced by fujiten.
CAN navi produced by pioneer.

[8987846]

be careful, if you change the wrong one... i don't know what will happen to you....

[Walla Walla]

it worked, no problemo.... except for the dvd, i can't play a video while driving... but the rest is unlucked, and finally, maps are updated... (a 2013 car with maps from 2011... wtf...)

[techsmitty]

How is it possible that I get to step 14, after what appears to have been a success upgrade to ver 4.01, and the navi.exe binary is totally different at the offsets. Following your instructions I did not include RenewalIFLib.dll. Critical mistake perhaps?