gessle
25-09-10, 23:28
KAON... a little bit of...
Here a BM-1000FTA firm (EMU 176) with complete Turkish menu patch as example.
What is to do?
Patch a firm with KaonCDH4.9 to another language (the firm must be clear [type 1] and it must have implemented at least 3 languages).
Remove the bugs with the hexeditor:
1. Load the patched firm in the kaon
2. Read the firm with the SW_Reader_21
3. Load this firm in the hexeditor
4. Control the header for the KUP (If a zero (0) is missing, insert it with the hexeditor)
000000: 4B414F4E303030384239313638303931 ___ KAON0008B9168091
000010: 30413030303030303030303030303030 ___ 0A00000000000000
000020: 43424D2D31303030465441780D585858 ___ CBM-1000FTAx.XXX
000030: 58585858424D2D313030304654410000 ___ XXXXBM-1000FTA..
5. Correct the font (bug in the KaonCDH): 45 = Western European font, 41 = Eastern European font (cyrillic)
0237A0: E9 45 72 81 23 FB 2F 28 4F 71 21 27 EA 2F 29 4C
6. Correct the subtitle language entries (bug in the KaonCDH): 43 = 3 entries (Off - English - Turkish as a sample)
045970: 22 F0 7B 21 C1 C0 21 A7 7B 21 C2 C0 22 A2 43 D7
7. Correct the "New language" entry (bug in the KaonCDH):
- Load the firm in RadiacTools3.3 (left window)
- Go to "Blocks" and extract the language block (last block in the tree)
- Load the extracted block in the hexeditor
- Search for the entry "New language"
- Replace "New language" with "Turkçe" (004E6577206C616E677561676500 replace with 0054FC726BE76520202020202000) as a sample
0F80: 7470757400DD6E67696C697A63650054 ___ tput.Ýngilizce.T
0F90: FC726BE7652020202020200020202020 ___ urkçe .
- Save it
- Load the modified block in RadiacTools3.3 (left window)
- Go to "Patches" and click "Compress"
- Load the firm in RadiacTools3.3 again (left window)
- Go to "Patches" and load the compressed language block in the little right window
- Click "Patch"
The language entries are full ok now.
If you want, you can exchange also the entry "Traducido con KaonCDH 4.9" with "Ana Menu" (the Turkish sample) before.
And here some addresses in the firm from the attachment:
-Font: 237A1 (45 = Western European, 41 = Eastern European [cyrillic])
-Subtitle Language: 4597E (43 for 3 entries, 44 for 4 entries and so on)
-Menu Language: 4598F (42 for 2 entries, 43 for 3 entries and so on)
-Audio Language: 459A0 (42 for 2 entries, 43 for 3 entries and so on)
0237A0: E9 45 72 81 23 FB 2F 28 4F 71 21 27 EA 2F 29 4C
045970: 22 F0 7B 21 C1 C0 21 A7 7B 21 C2 C0 22 A2 43 D7
045980: 40 21 2D 4A 21 FB 79 61 2A 25 21 9C 21 26 0D 42
045990: D7 40 21 2B 49 21 FB 79 61 2A 25 20 9B 21 25 0C
0459A0: 42 D7 40 21 2B 40 21 FB 79 61 2A 24 2F 9A 21 24
Now have fun and does not falsify the EMU version in the patch!
************************************************** ********
Two things still:
If you patch the firm with KaonCDH, additional informations are written into the firm, which with RadiacTools4.3 (Analysis) are indicated to you.
You find these informations at the end of the firm.
They can be removed again.
Also a message for RadiacTools4.3 is written into the firmware, that the languages are manipulated. This "manipulating message" can be removed also again.
With additional informations and "manipulating message":
0FFF00: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF10: FF B2 7D AB 80 0C B3 E7 E2 E2 6C 9B 84 B8 F0 0F
0FFF20: 6D 8C 07 75 50 F2 E2 E0 5E B2 43 CA 54 9A F1 C9
0FFF30: CD DB 5B 98 D9 4A 2A 30 C4 57 0B 4A EA 9C AC 56
0FFF40: F7 27 AD 47 5E 7B E4 E7 F0 55 5A CC DD 85 D7 12
0FFF50: AF E7 CC 6E 81 43 54 D4 E0 A7 52 A7 29 7D 68 B4
0FFF60: DD 69 A1 FE 32 6E 82 2B 36 DF 60 1F 54 72 5B 24
0FFF70: 65 F9 02 33 1D 64 0D 4D E8 D4 3E 61 56 D3 36 4C
0FFF80: 39 75 9A 0C 91 63 E5 AB DB C4 49 67 26 2D 4A D3
0FFF90: F8 97 D8 F8 58 9F 8A CF 5B 2A 58 38 F3 70 02 CD
0FFFA0: 71 75 FA D0 F7 75 DB 61 C1 B2 56 88 93 EF 32 A2
0FFFB0: 87 4E 08 71 81 A0 DC CE CB 89 90 89 E8 5A D9 F9
0FFFC0: AC 9A 46 E2 61 BE 0B B6 09 CD 2C 31 2D 84 4D 1F
0FFFD0: 69 1A 80 57 E4 D3 A8 4E 53 44 97 EE 83 00 81 DE
0FFFE0: DB 1E 6B 11 E7 3D 86 99 CE 1E FD 7F F1 66 A2 15
0FFFF0: 26 4F 52 A4 13 52 FC 6E 10 C4 B4 37 41 37 3F 49
100000: 31 A6 FF D4 32 FC 0D D7 92 3E 8E BF FB 00 00 00
100010: 20 20 20 27 2F 2E 2A 2A 23 2E 48 F6 00 02 EF 7F
100020: 20 FA EE 7F C0 01 00 80 AB 20 61 07
Without additional informations and "manipulating message"
0FFF00: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF10: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF20: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF30: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF40: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF50: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF60: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF70: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF80: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF90: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFA0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFB0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFC0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFD0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFE0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFF0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
100000: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
100010: 20 20 20 27 2F 2E 2A 2A 23 2E 48 F6 00 02 EF 7F
100020: 20 FA EE 7F C0 01 00 80 20 20 61 07
************************************************** ********
The firm in type4 (with KaonCDH patched firm) now needs no more to load in the Kaon, in order to generate type1.
You only need to change the header, then you can generate type1 very easy with RadiacTools3.3.
First you must know, how the correct header looks.
- load your type1 firm (before you make a patch with KaonCDH) in RadiacTools3.3
- generate type4 (Analysis: click "Create T4")
- load the T4 firm in the hexeditor
Now you can make the language patch with your type1 firm and the KaonCDH.
After the patch copy the new "Firm Mod" from the "Trasteos" folder in the folder from your type1 firm.
- load the "Firm Mod" in the hexeditor
- cut all values from 00000 to 0004F from this firm
- copy all values from 00000 to 0004F from your first T4 firm (generated by RadiacTools) in the "Firm Mod": Copy--->Paste
- Save it
Now you have a correct header and you can generate type1 from the "Firm mod" in RadiacTools3.3 (Analysis: click "G. in clear").
And you don't get the message "Function disabled for KaonCDH"...
With Kaon CDH generated T4 firm (BM-1000FTA EMU176):
00000: 4B 41 4F 4E 4F 4F 4F 38 42 39 31 36 38 30 39 31
00010: 30 41 30 30 30 30 30 30 30 30 30 30 30 30 30 30
00020: 5A 42 4D 2D 31 30 30 30 46 54 41 00 BA B9 BA BB
00030: BC BE BE C0 00 01 78 B5 C8 58 C8 36 4F 67 8C D9
00040: 30 E4 81 41 EF ED 11 61 F9 7C 87 D5 B1 A0 CD 7A
00050: 2C 4D 8B 74 F7 9C E0 DB 8E 93 EE 91 04 02 03 42
00060: 42 02 63 1B 23 21 84 21 C6 A2 8F B9 24 8D 86 08
Normal T4 firm (BM-1000FTA EMU176):
00000: 4B 41 4F 4E 30 30 30 38 42 39 31 36 38 30 39 31
00010: 30 41 30 30 30 30 30 30 30 30 30 30 30 30 30 30
00020: 5A 42 4D 2D 31 30 30 30 46 54 41 00 BA B9 BA BB
00030: BC BE BE C0 00 01 78 B5 C8 53 F3 36 4F 67 8C D9
00040: 30 E4 81 41 EF 0C 30 80 F9 7C 87 D5 B1 A0 CD 7A
00050: 2C 4D 8B 74 F7 9C E0 DB 8E 93 EE 91 04 02 03 42
00060: 42 02 63 1B 23 21 84 21 C6 A2 8F B9 24 8D 86 08
You only have to exchange the red values...
************************************************** ********
For the patch with Russian language:
KaonCDH writes E9 41 72 89 into the firm.
41 is correct for the cyrillic font, but not 89.
With 89 you have again - the Western European font.
Exchanges 89 with 81 and cyrillic is ok:
E9 41 72 81
...and for Arabic font exchanges E9 45 72 81 with E9 42 72 81.
Summary:
45 72 81 = Western European font
41 72 81 = Eastern European font (cyrillic)
42 72 81 = Arabic font
************************************************** ********
Unfortunately the KaonCDH has no button for the Polish language.
You must rename the language modul to Danish or to another available language.
After the patch and the generation to Typ1 the rest must be corrected with Radiac Tools and the hexeditor.
It didn't find the completely correct font address.
47 72 81 is ok for all menus, up to the Timer menu.
In this menu is the first font ok and the second font is wrong (only one letter).
With 47 72 80 is the second font ok and the first font is wrong.
If someone has an address, where both fonts are ok, please post it here.
But I think, one can live with this little bug.
************************************************** ********
And for the the Czech language modul:
After the patch and the generation to Type1 search for string 45 72 81 and replace it with 47 72 81.
47 72 81 is full ok for all menus.
=== to be continued ===
Here a BM-1000FTA firm (EMU 176) with complete Turkish menu patch as example.
What is to do?
Patch a firm with KaonCDH4.9 to another language (the firm must be clear [type 1] and it must have implemented at least 3 languages).
Remove the bugs with the hexeditor:
1. Load the patched firm in the kaon
2. Read the firm with the SW_Reader_21
3. Load this firm in the hexeditor
4. Control the header for the KUP (If a zero (0) is missing, insert it with the hexeditor)
000000: 4B414F4E303030384239313638303931 ___ KAON0008B9168091
000010: 30413030303030303030303030303030 ___ 0A00000000000000
000020: 43424D2D31303030465441780D585858 ___ CBM-1000FTAx.XXX
000030: 58585858424D2D313030304654410000 ___ XXXXBM-1000FTA..
5. Correct the font (bug in the KaonCDH): 45 = Western European font, 41 = Eastern European font (cyrillic)
0237A0: E9 45 72 81 23 FB 2F 28 4F 71 21 27 EA 2F 29 4C
6. Correct the subtitle language entries (bug in the KaonCDH): 43 = 3 entries (Off - English - Turkish as a sample)
045970: 22 F0 7B 21 C1 C0 21 A7 7B 21 C2 C0 22 A2 43 D7
7. Correct the "New language" entry (bug in the KaonCDH):
- Load the firm in RadiacTools3.3 (left window)
- Go to "Blocks" and extract the language block (last block in the tree)
- Load the extracted block in the hexeditor
- Search for the entry "New language"
- Replace "New language" with "Turkçe" (004E6577206C616E677561676500 replace with 0054FC726BE76520202020202000) as a sample
0F80: 7470757400DD6E67696C697A63650054 ___ tput.Ýngilizce.T
0F90: FC726BE7652020202020200020202020 ___ urkçe .
- Save it
- Load the modified block in RadiacTools3.3 (left window)
- Go to "Patches" and click "Compress"
- Load the firm in RadiacTools3.3 again (left window)
- Go to "Patches" and load the compressed language block in the little right window
- Click "Patch"
The language entries are full ok now.
If you want, you can exchange also the entry "Traducido con KaonCDH 4.9" with "Ana Menu" (the Turkish sample) before.
And here some addresses in the firm from the attachment:
-Font: 237A1 (45 = Western European, 41 = Eastern European [cyrillic])
-Subtitle Language: 4597E (43 for 3 entries, 44 for 4 entries and so on)
-Menu Language: 4598F (42 for 2 entries, 43 for 3 entries and so on)
-Audio Language: 459A0 (42 for 2 entries, 43 for 3 entries and so on)
0237A0: E9 45 72 81 23 FB 2F 28 4F 71 21 27 EA 2F 29 4C
045970: 22 F0 7B 21 C1 C0 21 A7 7B 21 C2 C0 22 A2 43 D7
045980: 40 21 2D 4A 21 FB 79 61 2A 25 21 9C 21 26 0D 42
045990: D7 40 21 2B 49 21 FB 79 61 2A 25 20 9B 21 25 0C
0459A0: 42 D7 40 21 2B 40 21 FB 79 61 2A 24 2F 9A 21 24
Now have fun and does not falsify the EMU version in the patch!
************************************************** ********
Two things still:
If you patch the firm with KaonCDH, additional informations are written into the firm, which with RadiacTools4.3 (Analysis) are indicated to you.
You find these informations at the end of the firm.
They can be removed again.
Also a message for RadiacTools4.3 is written into the firmware, that the languages are manipulated. This "manipulating message" can be removed also again.
With additional informations and "manipulating message":
0FFF00: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF10: FF B2 7D AB 80 0C B3 E7 E2 E2 6C 9B 84 B8 F0 0F
0FFF20: 6D 8C 07 75 50 F2 E2 E0 5E B2 43 CA 54 9A F1 C9
0FFF30: CD DB 5B 98 D9 4A 2A 30 C4 57 0B 4A EA 9C AC 56
0FFF40: F7 27 AD 47 5E 7B E4 E7 F0 55 5A CC DD 85 D7 12
0FFF50: AF E7 CC 6E 81 43 54 D4 E0 A7 52 A7 29 7D 68 B4
0FFF60: DD 69 A1 FE 32 6E 82 2B 36 DF 60 1F 54 72 5B 24
0FFF70: 65 F9 02 33 1D 64 0D 4D E8 D4 3E 61 56 D3 36 4C
0FFF80: 39 75 9A 0C 91 63 E5 AB DB C4 49 67 26 2D 4A D3
0FFF90: F8 97 D8 F8 58 9F 8A CF 5B 2A 58 38 F3 70 02 CD
0FFFA0: 71 75 FA D0 F7 75 DB 61 C1 B2 56 88 93 EF 32 A2
0FFFB0: 87 4E 08 71 81 A0 DC CE CB 89 90 89 E8 5A D9 F9
0FFFC0: AC 9A 46 E2 61 BE 0B B6 09 CD 2C 31 2D 84 4D 1F
0FFFD0: 69 1A 80 57 E4 D3 A8 4E 53 44 97 EE 83 00 81 DE
0FFFE0: DB 1E 6B 11 E7 3D 86 99 CE 1E FD 7F F1 66 A2 15
0FFFF0: 26 4F 52 A4 13 52 FC 6E 10 C4 B4 37 41 37 3F 49
100000: 31 A6 FF D4 32 FC 0D D7 92 3E 8E BF FB 00 00 00
100010: 20 20 20 27 2F 2E 2A 2A 23 2E 48 F6 00 02 EF 7F
100020: 20 FA EE 7F C0 01 00 80 AB 20 61 07
Without additional informations and "manipulating message"
0FFF00: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF10: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF20: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF30: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF40: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF50: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF60: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF70: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF80: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFF90: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFA0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFB0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFC0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFD0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFE0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
0FFFF0: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
100000: FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
100010: 20 20 20 27 2F 2E 2A 2A 23 2E 48 F6 00 02 EF 7F
100020: 20 FA EE 7F C0 01 00 80 20 20 61 07
************************************************** ********
The firm in type4 (with KaonCDH patched firm) now needs no more to load in the Kaon, in order to generate type1.
You only need to change the header, then you can generate type1 very easy with RadiacTools3.3.
First you must know, how the correct header looks.
- load your type1 firm (before you make a patch with KaonCDH) in RadiacTools3.3
- generate type4 (Analysis: click "Create T4")
- load the T4 firm in the hexeditor
Now you can make the language patch with your type1 firm and the KaonCDH.
After the patch copy the new "Firm Mod" from the "Trasteos" folder in the folder from your type1 firm.
- load the "Firm Mod" in the hexeditor
- cut all values from 00000 to 0004F from this firm
- copy all values from 00000 to 0004F from your first T4 firm (generated by RadiacTools) in the "Firm Mod": Copy--->Paste
- Save it
Now you have a correct header and you can generate type1 from the "Firm mod" in RadiacTools3.3 (Analysis: click "G. in clear").
And you don't get the message "Function disabled for KaonCDH"...
With Kaon CDH generated T4 firm (BM-1000FTA EMU176):
00000: 4B 41 4F 4E 4F 4F 4F 38 42 39 31 36 38 30 39 31
00010: 30 41 30 30 30 30 30 30 30 30 30 30 30 30 30 30
00020: 5A 42 4D 2D 31 30 30 30 46 54 41 00 BA B9 BA BB
00030: BC BE BE C0 00 01 78 B5 C8 58 C8 36 4F 67 8C D9
00040: 30 E4 81 41 EF ED 11 61 F9 7C 87 D5 B1 A0 CD 7A
00050: 2C 4D 8B 74 F7 9C E0 DB 8E 93 EE 91 04 02 03 42
00060: 42 02 63 1B 23 21 84 21 C6 A2 8F B9 24 8D 86 08
Normal T4 firm (BM-1000FTA EMU176):
00000: 4B 41 4F 4E 30 30 30 38 42 39 31 36 38 30 39 31
00010: 30 41 30 30 30 30 30 30 30 30 30 30 30 30 30 30
00020: 5A 42 4D 2D 31 30 30 30 46 54 41 00 BA B9 BA BB
00030: BC BE BE C0 00 01 78 B5 C8 53 F3 36 4F 67 8C D9
00040: 30 E4 81 41 EF 0C 30 80 F9 7C 87 D5 B1 A0 CD 7A
00050: 2C 4D 8B 74 F7 9C E0 DB 8E 93 EE 91 04 02 03 42
00060: 42 02 63 1B 23 21 84 21 C6 A2 8F B9 24 8D 86 08
You only have to exchange the red values...
************************************************** ********
For the patch with Russian language:
KaonCDH writes E9 41 72 89 into the firm.
41 is correct for the cyrillic font, but not 89.
With 89 you have again - the Western European font.
Exchanges 89 with 81 and cyrillic is ok:
E9 41 72 81
...and for Arabic font exchanges E9 45 72 81 with E9 42 72 81.
Summary:
45 72 81 = Western European font
41 72 81 = Eastern European font (cyrillic)
42 72 81 = Arabic font
************************************************** ********
Unfortunately the KaonCDH has no button for the Polish language.
You must rename the language modul to Danish or to another available language.
After the patch and the generation to Typ1 the rest must be corrected with Radiac Tools and the hexeditor.
It didn't find the completely correct font address.
47 72 81 is ok for all menus, up to the Timer menu.
In this menu is the first font ok and the second font is wrong (only one letter).
With 47 72 80 is the second font ok and the first font is wrong.
If someone has an address, where both fonts are ok, please post it here.
But I think, one can live with this little bug.
************************************************** ********
And for the the Czech language modul:
After the patch and the generation to Type1 search for string 45 72 81 and replace it with 47 72 81.
47 72 81 is full ok for all menus.
=== to be continued ===