yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Development and Hacking General] ric84:
Read the comments and answers in this forum, lol!

---------- Post added at 06:55 PM ---------- Previous post was at 06:52 PM ----------

Nice job, I wish you will find a solution, go ahead ??
[Windows Mobile Development and Hacking General] kamilien:
About downgrade to 3.10 to 3.08, as I read there are many people manage it with adding[SYNCGen2_3.10.16180] after zodiac pre release tags on 3.08 autoinstall file. When I tried that installation got into a bootloop never ends. Can anyone help about what's wrong?

PS. I'm talking about EU version by the way. Mistakenly installed a different language pack...
[Windows Mobile Development and Hacking General] wayneace8888:
https://www.focusstoc.com/forums/to...0-update-all-language-packs/?hl=+sync++update downgrade zip file is on there, you just need to register to be able to see the post and downloads I believe.
[Windows Mobile Development and Hacking General] kamilien:
Cant access to this with simple registration, says "its for club members" only.
[Windows Mobile Development and Hacking General] wayneace8888:
So become a club member then haha

---------- Post added at 12:15 AM ---------- Previous post was at 12:14 AM ----------

Also if you go a few pages back I sent the same link to someone else, they downloaded the file, pm. Them and they might send it to you.
[Windows Mobile Development and Hacking General] dirkomatic:
Why downgrade? Just use the correct navigation files for 3.10... Worked for me.
[Windows Mobile Development and Hacking General] kamilien:
Can you explain more? Without changing the autoinstall.ist sync doesnt accept installation and I dont know how to edit it for correct language files.
[Windows Mobile Development and Hacking General] lenko1:
Post 937 on this page has some language packs. Yours may be in there. Read over that post. It may be of some help. Good luck. https://xdaforums.com/windows-mobile/general/myford-touch-navigation-activation-t3368080/page94
[Windows Mobile Development and Hacking General] jonro2009:
Today my wiring harness arrived, I've got the camera installed and working perfectly now.

Having trouble updating the maps on my Sync3 now, it's a 23G download but it keeps getting to 4.5G and saying its complete. When I try to extract the contents it says the file is empty, despite the properties saying it is 4.5G
[Windows Mobile Development and Hacking General] COMpulse:
Use a different program to download.

Make sure you aren't downloading it to a FAT32 formatted drive.
[Windows Mobile Development and Hacking General] jonro2009:
I was trying to download it on my MS Surface Pro3 but it was noise at all. I tried on my HP laptop overnight and it worked fine. Why do you think this would be?

I've extracted the files to an exFAT flash drive now
[Windows Mobile Development and Hacking General] COMpulse:
Either the drive in the Surface is FAT32 (kinda doubt this) or the browser you used to download it had a 32bit limitation on the file size.

Or you were out of disk space.

Just speculating.
[Windows Mobile Development and Hacking General] Dobrinia:
Hello.

Help make a mirror of the phone screen on sync
[Windows Mobile Development and Hacking General] ric84:
Please read the pages before... lol
[Windows Mobile Development and Hacking General] prince234509:
I was going throught this thread some time back. Just would like to know if anyone got success in installing install.bin (by renaming) after reboot of the sync2 for navitel or easy link.

Is it confirmed that the installation fails due to time restriction by dll file? Or install.bin file. ? Please help me to know
[Windows Mobile Development and Hacking General] Dobrinia:
I carefully read all the pages of the topic.

And he tried to make a file installer .jpg using the program [MENTION=3694909]COMpulse[/MENTION].

After selecting it as wallpaper, Sync2 restarts, but the installation process does not continue.

Has anyone been able to successfully install Navitel or a mirror?
[Windows Mobile Development and Hacking General] orlandson:
Again. It still isn't working.
[Windows Mobile Development and Hacking General] Dobrinia:
Have you tried to change the jpg file only with the compulse program?

The result is a 60kb file size. And the original file is 42kb.
[Windows Mobile Development and Hacking General] COMpulse:
The original file is compressed swf. I am working with the decompressed file.
[Windows Mobile Development and Hacking General] DodgeVip:
how activated navigation indicator on board cluster ?

Hello.

Can someone help me?

How do I enable the navigation function on instrument cluster at a ford focus 2016, Sync 2.

I have activated navigation, but I have not found anywhere how to activate this function.

Thank you !
[Windows Mobile Development and Hacking General] bordasgabi86:
Focus Sync2 install

Hello Folks,

I tried to install the following app via UpdateInstaller.dll, install.bin,update.bin and with the magic Installer.jpg.

Video:

https://mega.nz/#!XNoQ2SjL!B3PjYvc7T1JSRtEIWNs9mTgBikPCe4xObsTsYV6mQ0U[/url]

Folder: (Used files)

https://mega.nz/#!PBgimKxT!JwWGPUro7sDxFFkoouIyocbmWH1WNNAHG7Dw8uqvri4[/url]

So the reboot to maintanance mode with the selected jpg was ok but

I think something wrong with the followings UpdateInstaller.dll, install.bin,update.bin. Can somebody help me?

Thank you in advance.

G.
[Windows Mobile Development and Hacking General] bordasgabi86:
Please remove the [/URL] from the links.
[Windows Mobile Development and Hacking General] orlandson:
Again? Please read old posts.
[Windows Mobile Development and Hacking General] Dobrinia:
[MENTION=9772750]bordasgabi86[/MENTION] In the original installation guide

https://yadi.sk/i/xXhgZiuo3ZTuz6

I do not have the installation process from a flash drive, after renaming the “pack_install” file into “install”

Do you have the same?

---------- Post added at 03:48 PM ---------- Previous post was at 03:47 PM ----------

did not you too?
[Windows Mobile Development and Hacking General] bordasgabi86:
Hello, yes I have the same documents. Somebody wrote in the old post, the process and isntall was successful. I dont know why they dont help us. So if you have any New please inform me.

bordasgabi@freemail.hu my Facebook username. Many thanks Gabor
[Windows Mobile Development and Hacking General] pindoura:
Installation is possible only 3 days after release....so now it does not work
[Windows Mobile Development and Hacking General] orlandson:
It's not working. Nobody gets successful installation.
[Windows Mobile Development and Hacking General] Dobrinia:
which file or device is limited to three days? can translate time on sync2 ?
[Windows Mobile Development and Hacking General] prince234509:
It mentioned in the post that files are encrypted and it decrypts during installation. If this is the case, can we identify the source of encryption or encryption type.

https:// forum.fordclubpolska.org/showthread.php?t=289015&page=21
[Windows Mobile Development and Hacking General] bordasgabi86:
Hello Guys, I bought the install packages to sync2 mirror. It works well. :)
[Windows Mobile Development and Hacking General] rioachim:
Except on android 8.1 and 9 from what I recall.
[Windows Mobile Development and Hacking General] omar302:
Can you post a link from where you purchased it? Thanks.
[Windows Mobile Development and Hacking General] Dobrinia:
can you send files? can be in private messages
[Windows Mobile Development and Hacking General] benkej:
I can generate the working files for you, but not for fee...
[Windows Mobile Development and Hacking General] prince234509:
Can you please generate for me also? :)
[Windows Mobile Development and Hacking General] benkej:
Sure, pm me for price and details
[Windows Mobile Development and Hacking General] kjawo:
Can you give me info on priv too?

---------- Post added at 10:43 AM ---------- Previous post was at 10:41 AM ----------

Can you give me info on priv too?
[Windows Mobile Development and Hacking General] benkej:
Sure. Pm me who needs mirror link, navitel or both package
[Windows Mobile Development and Hacking General] Dobrinia:
pm me for price and details
[Windows Mobile Development and Hacking General] bujkopiotr1972@gmail.com:
mirrorlink

info me pls
[Windows Mobile Development and Hacking General] andreipaval:
Does this Mirrorlink work with Android phones with version from 8.1 and 9 up ?
[Windows Mobile Development and Hacking General] GEAngulo09:
How many actually got files and video in motion(RCA plugs/DVD) work?

Is navitel, to enter address on navi while car is moving?
[Windows Mobile Development and Hacking General] santodetuc:
please someone upload the files I'm from Argentina my apim number is xv31m1wm
[Windows Mobile Development and Hacking General] orlandson:
No, you can use Forscan to set this.

- NAV in motion

APIM 7D0-02-01

x7xx xxxx xxzz = enabled
[Windows Mobile Development and Hacking General] kilumnati:
anyone here hook me up with latest sync 2 map a10 North America Files thanks
[Windows Mobile Development and Hacking General] vandyman:
Ebay for $35.

That is where I picked up one.
[Windows Mobile Development and Hacking General] kilumnati:
okay, I already purchased a 64gb sd card. Just looking for the files. thanks
[Windows Mobile Development and Hacking General] omar302:
Speaking of map cards, is there a way to create a new SD Map card for a region not officially available? Ford never offer stock navigation for MyFord Touch in the Middle East, so we have no maps SD Cards. Is it possible to create one?
[Windows Mobile Development and Hacking General] BlackbirdSDH:
Hello guys,

I really need help for some serious problems with my Sync3. I bought a 2018 F-150 (Canadian Truck) in Germany. It's already equipped with a European Sync3 APIM. The Sync Version is really old and also the Nav Card so I tried to put some newer files on an USB Stick to upgrade it but every time I try to update the system, it will stop right after inserting the USB Stick.

In the menu the option to upgrade via wifi is completely missing. We've tried everything to upgrade Sync, but nothing worked. It looks like there is some kind of write protection on the system. An update using the same USB Stick and the same Files on my 2017 Mustang worked like a charm so everything seems to be error free.

Any ideas for solving this problem? Could there really be something like a write protection on the APIM? I'd appreciate if you could help me.
[Windows Mobile Development and Hacking General] vincentka:
send me list of yours autoinstall
[Windows Mobile Development and Hacking General] benkej:
This error message is for invalid rsa signature.

Your apim is original eu 64gb? Or modified US apim?
[Windows Mobile Development and Hacking General] BlackbirdSDH:
Thanks for your reply. I'm sure the autoinstall is not the problem here. I checked twice for every mistake but the same stick works without problems in my Mustang, so it must be ok.

That is exactly what I expect but I'm not sure. How can I find out if it's the case or not? Do I have to remove it from the dash to see some stickers or how can I verify?
[Windows Mobile Development and Hacking General] benkej:
If you are sure the packages what you try to use is working (for example other car) and nobody has modified, the easiest way to check is to open the apim. There is two pcbs in the housing, on the second small pcb back side is the emmc. You can read clearly the size of the chip.

If is 32gb the chance is very high somebody has changed the decoding certificate that's why not accepting your apim the original signed package.

I use the the method on the us apim because I can upload my custom made or modified packages.
[Windows Mobile Development and Hacking General] JerseyD123:
Hey guys what do you suggest I do. I own a 2010 Ford Edge non navigation. I bought a second hand Navi off a salvage edge. I would like a back up camera to work with it but from what I read it’s either going to be extremely difficult or very expensive. What do you guys suggest?
[Windows Mobile Development and Hacking General] fblasot:
On my focus sw mk3.5 I added the original Ford backup camera, but I was very lucky because all wires from rear to sync mft were existing, I just added the power 12v.

Other peoples, less lucky, had to wire up the back of the sync mft, in that case they bought a standard rear camera, not the original Ford. Eventually, to not wire you can use a wireless rear camera...

To avoid to pin the sync connector you can use this adapter

https://m.alibaba.com/product/60678...omotive--apim&detailId=60678051034&redirect=1

Of course there are mods to do with forscan, very easy.

On the edge I don't know if the cables are present...
[Windows Mobile Development and Hacking General] jonro2009:
I wired all the way up on my focus MK3.5 it was very very easy. I had absolutely none of the wires and used a non OEM camera and the cable in your link, although I bought mine from Amazon
[Windows Mobile Development and Hacking General] rioachim:
It seems the last Sync 2 Update is v3.20. Now, anyone who can retrieve the update files, please get in contact with me via PM so I can prepare the installer script. Thanks

Reference (but I cannot contact that user to get at least a screenshot of the full vwrsion numbers): https://texags.com/forums/46/topics/3024859
[Windows Mobile Development and Hacking General] omar302:
As per the post you linked, the update is from 2015, when the car rolled out. It seems he just miss typed the version number.
[Windows Mobile Development and Hacking General] hak00:
Hello,

Please send me also the guide how to install the mirrorlink.

THANKS
[Windows Mobile Development and Hacking General] Looget54:
Hi MirrorLink doesn't work with my Samsung S9 on Android Pie 9. Anyone has a solution? Thanks
[Windows Mobile Development and Hacking General] ric84:
Do you have the files for this mirrorlink function? i want that too :(
[Windows Mobile Development and Hacking General] macky75:
Here you go, this is the whole flash process and as you can see - it also creates a USB stick

youtube.com/watch?v=DUbzPFVerwk
[Windows Mobile Development and Hacking General] sheltonfilms:
Correct me if I'm wrong but is the OASIS programming similar to a sync update? Download bunch of cab files and install, just OASIS pulls the right files for you from the server? Except this "version" isn't available to the general public?

If this is correct couldn't someone get the files for a VIN with navigation and then spoof that VIN and then install files via USB?

and if this is true couldn't everybody just use that file to do the programming since the VIN is spoofed?
[Windows Mobile Development and Hacking General] seadiel:
I agree with your assumption. I also tried looking for the 14D546-DA file but couldn't find it, it appeared to be mentioned a lot prior/during v3.0.2 but I can't find v3.0.2 online anywhere or update files prior to v3.0.2.

Yea, thinking about it you are right it should be burned into the chip.

I have two of the 14F500 files the only thing in the whole files that are different is the ESN and the bytes I highlighted in my previous post with the picture. Since the ESN is different the bytes at the end of the file will have a different authenticode hashing. Authenticode/digital signatures will take authenticated attributes and include that as part of the hashing so this is why the bytes are different on each 14F500 file.

I am not sure yet how the system is using the authenticated attributes (which would be the ESN) in combination of the authenticode hash.

-We know the file won't install if the ESN doesn't match.

(The system must be doing a comparison of the authenticated attribute which would be the ESN)

-Say we change the ESN in the file

(The authenticated attribute equals the current devices ESN , does the system then use WinVerifyTrust to compare the file's hash/contents with the hash recorded in the file?)

-Maybe it is using the authenticated attribute in combination with HMAC

Yea, interesting thread.

Since he has access to those tools he is probably doing something like that.

I know the Fusion Hybrid/Energi have extra menus so if you spoof make sure you spoof these vehicles with similar like models.

Easiest way to get nav is to buy a Fusion APIM with nav(Fusion seemed to be the cheapest $125) from (https://www.lkqonline.com) then reprogram the ABD on it to match your vehicle using Forscan and it would already have the nav license file in it.
[Windows Mobile Development and Hacking General] sheltonfilms:
But where is the fun in that?

[IMG="jfk"]http://image.slidesharecdn.com/innovationandrisk-takingquotes-140521105546-phpapp01/95/innovation-and-risk-taking-quotes-11-638.jpg?cb=1400733700[/IMG]
[Windows Mobile Development and Hacking General] seadiel:
You will note in the video macky75 posted the guy downloads the 14F500 file (older verison sync verison so it is the 14F500-BD) and installs it at 4:43 This is the nav license file and if you see my prior posts it is a unlocking tool. The file is using the ESN number in the authenticated attribute section of the digital signature. So your ESN has to match the file or it won't run. He downloads the file from the website using the info the car sent to the website (ESN/VIN).

Exactly, no fun. :) That is why I am still on the hunt for a software hack.
[Windows Mobile Development and Hacking General] sheltonfilms:
Ok so buy ACM from junkyard from car with NAV and note vin. Slip tech at ford a Jackson (yeah big money) to download the files for that vin.

Pull your ACM and put new one in. Install. ESN number will match new ACM and should install without fault. Now put back old ACM.

Put bought ACM and files in lockbox incase you have to redo or have your buddy slip you a Hamilton to cut costs to half and do it to his.
[Windows Mobile Development and Hacking General] seadiel:
Hah I suppose that could work but probably big YMMV on the tech at ford part.

If someone wanted navigation I think my $125 suggestion is probably easier.
[Windows Mobile Development and Hacking General] sheltonfilms:
Ok 2 Jacksons. Nobody can resist 2 Jacksons.

Maybe easier but I like repeatability.
[Windows Mobile Development and Hacking General] macky75:
Just be careful, there are different hardware versions out there which can have side affects like the FDIM sends the touch command mirror-inverted (Really unfunny to operate :laugh:) which cant be corrected by the ABD
[Windows Mobile Development and Hacking General] flsdiver:
Please take the replace my apim discussion to your own thread. This is known, boring, and no challenge. Topic is enabling features of mft. Stick to that discussion please.
[Windows Mobile Development and Hacking General] kthejoker20:
You need IDS. You need a VCM 2 adapter. You need OASIS. You need an SD nav card.

You force reflash the entire APIM.

The whole hangup is OASIS. Dealer level item as it's super expensive. IDS is widely available. VCM 2 are a gamble to get cheap, clones don't work.

Hopefully our chinese friends will figure out a way to emulate OASIS.

Otherwise, YOU ARE ALL RIGHT ON TRACK. Let crack this biatch....
[Windows Mobile Development and Hacking General] seadiel:
I was hoping you would show up on this thread.

If you reflash the APIM are you using a different VIN to reflash?

BT4T-14F500 do you know if you can download this file in OASIS for any VIN or does this file show up in OASIS only if the vin has nav? (Wasn't sure if you had access to OASIS).
[Windows Mobile Development and Hacking General] ptodic:
BT4T-14F500 doesent show up in FDRS (Oasis) as a downloadable item but it appears on the pen drive when you select other items. You cant generate this file for different car than it is connected and read via VCM2.
[Windows Mobile Development and Hacking General] lucasb8888:
Interesting.

Does the vehicle have to be connected to the VCM2? Because I know with IDS you can open a previous session even if the vehicle is not connected.
[Windows Mobile Development and Hacking General] ptodic:
Yes. This is not made trough IDS but via online Etis and then it opens FDRS (FordEtis Diagnosis and Repair system which is a java program) which also communicates online. VCM2 is used as a tool to communicate with the car. To flash the entire APIM you have to connect the car to the computer via usb cable. If you dont want to flash entire APIM just upgrade some programs it will show a page where you can select what to download to a flash drive and make the upgrade. The license file for navigation is not on this list but it is found on the flash drive when the download is finished.
[Windows Mobile Development and Hacking General] lucasb8888:
I wonder what data FDRS is looking at when the usb cable is connected to the vehicles usb. I wonder if this part is figured out, if one could create a thumb drive with this info to emulate any vehicle.
[Windows Mobile Development and Hacking General] flsdiver:
Funny you should mention this. have been working on this all week, decompiled rather large java app. did find the Software page you mention.

Some very interesting urls in that code. :D

Attached can be used to download a zip with BT4T-14D546-EE and 8L2T-14D546-AF in it, for seamingly any vin, but no luck on anything else, yet.

This IS NOT the magic bullet, yet, it does not work to get the unlock software we need, we need to figure out the arguments to this url to make it work.

Posted is file that will build this url.

The vin/esn are not a match, esn is bogus, seems to make no difference. Idea is to pass Vin with NAV and proper ESN for your vehicle. if in fact that is what that argument is even for.

PLEASE don't post the URL all over this thread, use it to do investigations on you own and report argument values back.

Let's have a discussion on what those arguments are and what they mean.

We may still be out of luck without current comm to vehicle and/or current online session/user/dealer permissions.

It would also be huge help to have someone with VCM2 run the app and use Fiddler to capture the https call at this point as the software download is being made. That would show the URL and arguments very clearly.

Edit: line 1 is url argument names, line 2 is java code variable references, line 5 my gues as to values and what we need to figure out. line 6 is url built from line 5 data
[Windows Mobile Development and Hacking General] ptodic:
Neat excel file :) Just some clarifications for ???

vin	electronicModuleSerialNumber	ecuHardwarePartNumber	currentImagePartNumber	vehicleProgram	currentStrategyPartNumber	currentCalibrationPartNumber	removeSWFPN	installSWFPN	unLockerForSWFPN	timeout

VIN	APIM serial number (ESN)	HW part number	CCPU SW part number	???	VMCU SW part number	Calibration SW part number	???	???	???	30000

We wanted to capture the communication but didn't have time and sw on hand. Probably will do it in near future.
[Windows Mobile Development and Hacking General] COMpulse:
You guys probably already know this, but regarding part nums, strategies, and calibrations:

.AB File:

<F110>DS-DT4T-1A292-AB</F110>

<F111>DB5T-14F094-BB</F111>

<F113>DB5T-10849-TB</F113>

<F124>DT4T-14C088-EA</F124>

<F188>DT4T-14C026-EA</F188>

FORScan explanations:

Part number: DB5T-10849-TB

Strategy : DT4T-14C026-EA

Calibration: DT4T-14C088-EA

(thanks shelton)

The example isn't from an APIM, just an example that these values from the .AB may correlate to some of the parameters in your spreadsheet. Some modules have a lot of these values.

(if it would help anything, i can add hw, strategy, and calibration to my compare tool very easily.)