Can i find SE asia maps Garmin map pilot ?
I have an image of unused card for North America. Hope someone can crack this ...
I try with unused but like all know CID is in read only on SD Card and you can only change Serial Number so not the CID .
Don't work .
I try other software so Igo8 rename the exe but say impossible to read SD Card i try an other GPS software .
If files encrypted can not be hacked no crack can be found .
Xperia Z3c CM12
There is some kind of checking by the MB software to check if the exe is valid. I don't know how.
I've noticed there are two versions of Garmin Map Pilot:
without touchpad
with touchpad
One of them is called NTG5.1 second one is NTG5.2. But I'm not sure.
Today I had the opportunity to test a SD card version for touchpad (C-Class, V-Class) in a car without touchpad (B-Class). The system did not work with the wrong card.
A message like "no card recognized" was displayed.
So there are definitely two versions of the Garmin Map Pilot that can be used only either in a car with touchpad, or in a car without touchpad. Mixing up the two versions is unfortunately not possible.
Looking though the .dll that's included on the SD, there are LOTS of informative strings in here. Like this one: "MAP_UNLOCK: Unlock files do not match SD Card." And "MAP_UNLOCK: Error deleting unlock files, is SD card locked?" So, those prove that the .unl files are "Unlock files", and that they are tied to the SD card. (I hadn't seen these things commented on before. if there is a thread somewhere about hacking the software, or reverse engineering the UNL file contents, please point me to it!).
Just realized that I have no way to TEST any changes that I would make. So, I'm going to drop this project. I had found the place to make the patch to fix the "Unlock files no not match SD Card" message, but I have no way to test it. I don't actually OWN a Mercedes that has this system in it.
In case anyone is following along, or would like to try this themselves. Toss the .dll into IDA Pro, and go to this memory location:
.text:109AE4A0 bt UnlocksMatchCard
(I named the branch destination "UnlocksMatchCard")
Change that "bt" to a "bra" so that it always branches, and you should be done.
Last edited by FrankRizzo; 14th July 2015 at 04:55 PM.
Bookmarks