yashsingh1/xdaforums huggingface dataset:
[Windows Mobile Development and Hacking General] sheltonfilms:
Total checksum is computed as so for the NAV line: 07 + D0 + 01 +02 + 00 + 09 + 06 + 04 + 80 = 16D (only use last two digits)

But yeah adding 4 in hex should work fine as a quick shortcut.

Forscan says it does calculate the checksum automatically.
[Windows Mobile Development and Hacking General] wangks18:
Success on my 2015 escape ,I‘m In China

For escape ,I compaired the nav/nonnavi

ACM 727-04-01 has no difference

I changed 7D0-01-02 2th hex to 4 to enable navigation

and 7D0-02-02 4th hex to 8 to enable the "speed point warn "

Thanks
[Windows Mobile Development and Hacking General] flsdiver:
Cool even works in China.
[Windows Mobile Development and Hacking General] flsdiver:
Changed my mind, would be too confusing
[Windows Mobile Development and Hacking General] kolopeter:
not only in China , also in Europe :) Perfect manual . THX

BR from Poland
[Windows Mobile Development and Hacking General] COMpulse:
Managed to use a "backup" of maps SD card today. :D
[Windows Mobile Development and Hacking General] phantomknight321:
NOW we are talking!!!

What was involved with cracking this thing? I really wanna try this out on the A6 card I have right now
[Windows Mobile Development and Hacking General] COMpulse:
I can't take any credit for it. Someone here was kind enough to point me in the right direction to find a crack.

I assume XDA frowns on any discussions involving cracking or circumventing paying for commercial software.

With that said, if you want to PM me, I can go into detail.
[Windows Mobile Development and Hacking General] TScott69:
Sent you a PM
[Windows Mobile Development and Hacking General] jethoss:
Got the license file successfully installed in a '15 Taurus! I set the bit in the APIM as noted and loaded the license file without issue after finally getting the URL right. I had to do a regular SYNC update to get the software current enough to work with the URL, so that was a stumbling block for a while. The screen still says "Information" instead of "Navigation" but I suspect there's something I've overlooked somewhere. In any case, the hard part is done, and many thanks to those who did the heavy lifting.
[Windows Mobile Development and Hacking General] lucasb8888:
After you change the APIM data it should say insert nav sd card. Then the info is moved to next to the home button
[Windows Mobile Development and Hacking General] COMpulse:
Agreed. It should say Insert SD or Navigation.

Wrong APIM modification?
[Windows Mobile Development and Hacking General] jethoss:
My error - that's what I was looking for, but it's still stuck on "Information." The license file is there, now I just need to check the APIM. I might try to set the bit back to 00 again, then reset it to 04 and see if that helps.

Also of note - Forscan does NOT compute the checksum automatically, at least on my installation.
[Windows Mobile Development and Hacking General] COMpulse:
FORScan claims to fix the checksum but I've never tested it. I always re-calc the checksum. If you're using my AsBuilt tool, there's a checksum calc built in.
[Windows Mobile Development and Hacking General] brutane:
it's 3.8 now, and I guess it isn't really isnt CarPlay, its the siri activation while holding down the steering wheel control.
[Windows Mobile Development and Hacking General] DanMc85:
It's called Siri Eyes Free.
[Windows Mobile Development and Hacking General] royrodriguez:
Please i need information

Good morning , let me turn navigation and backup camera in my ford fiesta 2014, ebay are selling a 2014 Ford Fiesta module C1BT 14F239 CH ( this is number of communication module) , corresponding to part No. CB1T - 18B955 - GB S042 . How you could know if that module corresponds to a 2014 party with navigation and backup camera . Thank you for your information
[Windows Mobile Development and Hacking General] COMpulse:
Not 100%, but I stumbled onto this...

Feature: With Dipping Rear View Mirror

737-01-02 bit 13

760-01-02 bit 13

Edit:

If you're not comfortable / familiar with modifying bits, post your module data for 737-01-02 and 760-01-02 and we can walk through the change. Bits are counted from the left, starting at 0.
[Windows Mobile Development and Hacking General] DanMc85:
Thanks for the response, but the module with the mirrors should be either 720 IPC or 726 BCM - from the service manual a fusion should be in IPC 720

That 737 is the RCM air bag module, and that 760 is the ABS module... no way it would be in either of those.

I am perfectly comfortable modifying bits... I modified the as built on a Sync 3 APIM to work in my older 2014 Fusion among other things.
[Windows Mobile Development and Hacking General] kthejoker20:
Can someone pm me a link to the U.S. sd card?
[Windows Mobile Development and Hacking General] COMpulse:
My bad. I should have looked up the modules to confirm before posting. It was late. Gonna check if I copy/pasted wrong data.

Edit:

I didn't realize I only have a few vehicles to compare with that feature. I need to get a bunch more with that feature before I can try to isolate it.
[Windows Mobile Development and Hacking General] brutane:
I'd be interested in this too, if someone has a link PM me please.
[Windows Mobile Development and Hacking General] MarcinXDA:
[MENTION=3694909]COMpulse[/MENTION]

Excuse me for ETA, buy did you have time to do reverse search as in point 1?

This is the most important part as I would like to start preparing full description of direct configuration for APIM at the beginning (sync2/my Ford touch),

continue with IPC for:

1. focus/c-max/kuga

2. fusion/mondeo (different IPC type)

3...

I hope this would help to do the research.

Thanks a lot!
[Windows Mobile Development and Hacking General] COMpulse:
I started on it but need to finish.

On the plus side, I've made the analysis and data-loading much faster.
[Windows Mobile Development and Hacking General] sonic227@yahoo.com:
I'm trying to get the instrument panel to change from compass to navigation on a 2011 Ford Edge. On the IPC page I only have:

720-01-01 E5C0-29BE-24D9

720-01-02 C42D-0062-9916

720-01-03 002B

I have tried to change some bits but have had no success. Has anyone tried changing these on a ford edge?
[Windows Mobile Development and Hacking General] sheltonfilms:
The bit in question is 720-01-01 bit 14. This is the 4th Hex digit and it needs to be increased by two.

So 720-01-01 E5C0-29BE-24D9 needs to be E5C2-29BE-24DB (notice checksum is also incremented by 2, 9 to B)
[Windows Mobile Development and Hacking General] kthejoker20:
If you still have information in the top right, change the hex back to 00 (or whatever your default), let sync reboot with sd card inserted. Then change the hex back to 04 (or whatever you computed earlier), let sync reboot.

If you have information in the top right, you will not be able to access the input address menus and such...

Just helping....

NOW WE NEED VIDEO IN MOTION UNLOCK...... !!!!!

.
[Windows Mobile Development and Hacking General] brutane:
YES! - This is going to be difficult to find I imagine we'd need to compare the As Built for a market that allows vid in motion which I have no idea which market that would be.

I'd also like the one that doesn't disable input as you drive, my wife/passenger is easily able to fiddle with the radio while in motion.
[Windows Mobile Development and Hacking General] sheltonfilms:
Look at the Asian countries would be my first guess. When i worked for Kia/Hyundai the Asian market got all features unlocked and they had to lock down the in motion parts.
[Windows Mobile Development and Hacking General] TScott69:
It should be possible. Someone on here was working on a one time use ODB2 flash device that would set the bits to unlock nav and vehicle in motion. Unless this was vaporware?
[Windows Mobile Development and Hacking General] DanMc85:
If it is possible, it would most likely be the first box of 7D0-02-01... Generally 5553 for USA, 4341 for Canada, etc... however this can cause loss of other functions like Sirius Traffic, heated seats, etc... but feel free to mess with it. Also note this code is usually matched in the IPC as-built as well... On a side note: be safe and only use it for passengers viewing, if figured out, don't need any idiots causing accidents out there :cowboy:
[Windows Mobile Development and Hacking General] brutane:
Think they locked it down, getting 403 Forbidden now.
[Windows Mobile Development and Hacking General] ten3or:
For Russian Explorer

2013 ltd (usa assembly)

7d0-02-01 5253 0004 0083

2014 ltd+ (russia assembly)

7d0-02-01 5253 0104 40c4

I can change navi target(address) in motion.
[Windows Mobile Development and Hacking General] sheltonfilms:
So looks like 7D0-02-01 bit 23 or bit 33.

Does Russia have online used car search that shows vehicles and also shows VIN numbers?

In the US we have autotrader.com.
[Windows Mobile Development and Hacking General] ten3or:
Not interested in this question, so I do not prompt.

You do not understand, these two config for Russian cars. That is, both cars available navi target in motion.
[Windows Mobile Development and Hacking General] DanMc85:
I will save you some time since I know most of the APIM bits like the back of my hand. That 01 in the middle box is just the boot logo bit. Aka ford, lincoln, raptor, Mustang, etc. Won't work on change unless the other boot logo files are loaded on the unit.

My guess would be USA with Nav in motion without loosing anything would be 5753 (ideal), 5653, 5353, or 5253. If anyone wants to test, I may also try on my SYNC 3 unit.

If multiple combinations work, make sure no APIM configuration error DTCs set.

Also you may loose things if the code isn't perfect aka Sirius Travel Link Traffic, Heated seats, voice commands, etc... so feel free to test those codes and report back. Or any other variation that you try...
[Windows Mobile Development and Hacking General] ten3or:
7 bit? 53 to 52?

But for our cars video in motion also locked.
[Windows Mobile Development and Hacking General] fordson04:
I can say 5753 worked on my Fusion. I changed it and have no DTC's for the APIM. I was able to go into nav and street and drive and never got the feature disabled while in motion, also verified by going to messages and it allowed me to view messages without getting the in motion message so that does work. Im not sure about video in motion as I dont have a cable for that to test but I dont see why it wouldn't.
[Windows Mobile Development and Hacking General] DanMc85:
Good stuff, I figured 5753 would be the right one. It doesn't work on my SYNC 3 sadly.
[Windows Mobile Development and Hacking General] ten3or:
That is, you assume the replacement of 52 to 57 will unlock video in movement?
[Windows Mobile Development and Hacking General] DanMc85:
Nope, this is just Nav in motion
[Windows Mobile Development and Hacking General] COMpulse:
x52 = 01010010

x57 = 01010111

So yeah, if you feel like changing two bits that may not be related... One of them might be the one you're looking for.

I recommend people try changing one BIT at a time.

Edit:

(assuming we are talking AsBuilt, not CCC)
[Windows Mobile Development and Hacking General] DanMc85:
It's just a 1 bit change for USA. 55 to 57. This does nothing for anywhere else. Basically enabling binary bit 2. 0101 to 0111

Anywhere else just do their hex block out to binary and enable the 2 binary bit and be done.
[Windows Mobile Development and Hacking General] COMpulse:
All I saw was "change 52 to 57" and wanted to make clear that a 52 to 57 would alter two bits that may not both need to be changed.

I might see if this bit applies to my vehicle. I thought I could already change the destination while in motion but maybe I'm mistaken.
[Windows Mobile Development and Hacking General] DanMc85:
Oh gotcha lol. Yeah 52 is the Russia code.

---------- Post added at 05:14 PM ---------- Previous post was at 04:55 PM ----------

Glad to hear it worked...
[Windows Mobile Development and Hacking General] sheltonfilms:
Well this makes the lockpick hardware a little less desirable. LOL

---------- Post added at 04:58 PM ---------- Previous post was at 04:45 PM ----------

If it doesn't work it may have to do with the logic of speed vs gear selection status. I know that the navigation entry is speed dependent (can be in drive and enter but only at dead stop). I think that video in motion looks at transmission gear selection (only works in park). So this may be another HEX change to enable video in motion if this one doesn't work.
[Windows Mobile Development and Hacking General] DanMc85:
Hmm could also be a change on the IPC as built to get it not to send the gear perhaps.
[Windows Mobile Development and Hacking General] sheltonfilms:
I think that would kill the reverse camera, because the APIM wouldn't know it was in reverse.
[Windows Mobile Development and Hacking General] DanMc85:
True story...
[Windows Mobile Development and Hacking General] ten3or:
Yes. And with this code (52) navigation is not blocked on ru Explorers.
[Windows Mobile Development and Hacking General] jameslyden:
It looks like the URL is now being blocked... anyone have ideas about where we can get a license file from now?
[Windows Mobile Development and Hacking General] sheltonfilms:
Just confirmed 5753 works for 2013 explorer. Original was 5553.
[Windows Mobile Development and Hacking General] fordson04:
I will say 5753 worked for me also but lost Sirius travel features and traffic. It appeared everything else worked. Just check and make sure everything is there
[Windows Mobile Development and Hacking General] brutane:
My 7D0-02-01 is 4341-001-C01F so I change it to 4352-0001-C02A ? For nav in motion? Canada btw

---------- Post added at 03:02 AM ---------- Previous post was at 02:47 AM ----------

Nvm... just realized forscan won't let me write to this line. My adaptor must not be compatible.
[Windows Mobile Development and Hacking General] DanMc85:
Do you have the newest forscan that came out today.

I was just looking and it's weird that the 4341 has that same bit enabled already but has no Nav in motion. Must mean there is more than one bit involved.
[Windows Mobile Development and Hacking General] jameslyden:
I have some ideas regarding the nav license, but I can no longer obtain the file. If someone still has a copy of BT4T-14F500-BE, please let me know. My goal is to build an update package that deploys the same files via zip rather than cab, which (if I'm not mistaken) would circumvent the need for signed files and let us modify the ESN indiscriminately.
[Windows Mobile Development and Hacking General] ten3or:
52 = 0101 0010 - navi is not blocked

53 = 0101 0011 - navi is blocked

bit 7 = 0 unlock navi

bit 7 = 1 lock navi

Right?

Therefore, try 4241
[Windows Mobile Development and Hacking General] excumep:
Files

I come I will send mail files
[Windows Mobile Development and Hacking General] rioachim:
Not really. Check a zip file from the 3.8 update and you will see that every zip file contains an autoinstall.lst and a .cab which contains a signature.
[Windows Mobile Development and Hacking General] brutane:
Dont have the new forscan, will download tonight and test it out. Odd that I can read those bits but not write to them.
[Windows Mobile Development and Hacking General] pomyslowy_dobromir:
Don't you need Extended License to write? Does latest forscan release have extended license option?
[Windows Mobile Development and Hacking General] sheltonfilms:
Thats weird, turn on 1 bit, turn on one feature, kill another.

What countries use sirius travel? Maybe there is a country with navigation in motion that also uses sirius.
[Windows Mobile Development and Hacking General] fordson04:
Yea not sure. It was odd on the info screen all options for Sirius was gone even sync services button was gone. Not that I use travel link a lot but I do use it for the traffic. So would be nice to figure it out without losing that feature. Might have to try some of the other combinations suggested and see if one of them work???
[Windows Mobile Development and Hacking General] sheltonfilms:
I didn't even look on mine for the Sirius items being gone. I don't use them.

When I get home I will check and see if they are gone.
[Windows Mobile Development and Hacking General] COMpulse:
My Sirius nav settings disappeared with the Nav In Motion change as well.

Since I'm modifying my compare/deduce tool, I'm gonna make it also check for consistent 0=on/1=off. Right now it's just checking for 1=on/0=off. That may help with some of these.
[Windows Mobile Development and Hacking General] jameslyden:
Agreed -- each zip seems to require a signed cab. However, it can also contain additional files that appear to be copied over (SWF and other resources). If we can build a zip that contains some small unmodified cab along with the license file (as a separate resource file), it should effectively sideload a modified license file. I'm in the process of trying this right now -- the trick will be figuring out the right path to drop the file in.
[Windows Mobile Development and Hacking General] TScott69:
Yes you need the extended lic. I just installed the new Forscan version and it used my old lic file. No need to request a new one.
[Windows Mobile Development and Hacking General] COMpulse:
According to the Sirius website, the US is all they cover.

https://listenercare.siriusxm.com/app/answers/detail/a_id/3570/~/where-can-i-listen-to-siriusxm?

I don't see how they wouldn't cover Canada though. Maybe it's like Pandora, where it is restricted to the US, and the Country Code determines whether the vehicle is allowed to receive Sirius?

The traffic feature is nice. I don't need to type destinations while driving. But I was hoping we could get A/V video so I could cast my phone to the head unit display while driving for nav instead.
[Windows Mobile Development and Hacking General] fordson04:
Yea i tried all the combinations suggested earlier and all of them get rid of the sirius nav items. I just reset it back until another solution arrives. I do a lot of highway driving and its nice to have it alert me to accidents and reroute me, so ill keep that for a while.
[Windows Mobile Development and Hacking General] sheltonfilms:
There is a Sirius Canada. When I worked for Kia we built Canadian cars with Sirius and sometimes I would have to reactivate the trial if one came off the line with an expired trial.

But that doesn't really help much since Canada is a non moving navigation country it seems.
[Windows Mobile Development and Hacking General] Fire-Runner:
I still have the files I downloaded
[Windows Mobile Development and Hacking General] brutane:
FYI, my car has the Canada code and I do get the travel link from Sirius.

About to update FORScan and see if i can modify those bits.

EDIT:

No go on the update, still can't modify those lines :(
[Windows Mobile Development and Hacking General] ten3or:
Can anyone give the VIN for the Explorer (usa)? I need:

2015MY ltd with factory nav

2015MY ltd w/o factory nav

2015MY ltd+ with factory nav

2015MY ltd+ w/o factory nav

PM please.
[Windows Mobile Development and Hacking General] TScott69:
Are you using 2.3.2 beta Forscan? (I have 2.3.2 test version and it works for me)

What is your error message?

Perhaps your ELM adapter is the problem. Try a lower baud rate on your ELM?
[Windows Mobile Development and Hacking General] sheltonfilms:
No limited+ model in US. Only Base, XLT, Limited, and Sport. Platinum model was added in 2016.

Use autotrader.com and you can search all cars for sale that meet your requirements. It also displays VIN numbers.
[Windows Mobile Development and Hacking General] ten3or:
About Speedcam POI in nav (hazard sport warning).

Explorer 2013MY (usa assembly for russia).

Base config:

7D0-02-02	0000	0000	00DB

update to

7D0-02-02	0008	0000	00E3

And... nothing ...
[Windows Mobile Development and Hacking General] brutane:
Ah, you know what; I'm an idiot. I never noticed the 'Write All' button below, and thought I had to use the 'Write' button that was next to the block I was editing.

Will give it a try tonight.
[Windows Mobile Development and Hacking General] DanMc85:
I never use write all. Always write the block lol.
[Windows Mobile Development and Hacking General] COMpulse:
Yeah, you only need Write All if you're restoring a .ABT file and need to write all the blocks. Or you're making a ton of manual changes.
[Windows Mobile Development and Hacking General] brutane:
See post #238, I added an image of my FORScan screen, I don't have the write button on half of the lines. Do you guys have write buttons next to each of your blocks?
[Windows Mobile Development and Hacking General] COMpulse:
Yours looks fine. The "Write" button doesn't go on every line. The lines are grouped into blocks. Write the block.

Edit: Did you confirm you're using a test version 2.3.2 ?
[Windows Mobile Development and Hacking General] brutane:
Ah, ok that's my mistake then.

Btw, I am using the 2.3.2 version, not the Wine version. And its showing that it's using the Ext License.
[Windows Mobile Development and Hacking General] dyerba:
When I put my ESN in the URL in the excel file I get a 403 forbidden error. Anyone else getting this or am I missing something here?
[Windows Mobile Development and Hacking General] MarcinXDA:
Everyone has 403 error - this method doesn't work anymore
[Windows Mobile Development and Hacking General] SchimiEX:
Nav works on my Explorer 2013 Sport US Version (I live in Germany)

I have one problem, the nav says always the wrong meters (i have 200meter to turn left, but the nav says "20meter 400meter turn left or something similar/else :)). I tried a master reset, but didn´t help.

I set my car to miles and in a short test it looks like the nav told the correct distances, but in km no), any ideas?

Maybe it is why i in Germany, is there a possibility to "install" the German language file? :)
[Windows Mobile Development and Hacking General] rioachim:
It's easiest if you don't already have v3.8 installed, in this case do the EUROPEAN update with the engine running for about 30min:

http://ivsu.binaries.ford.com/swparts/Gen2v38build15128updatepackageEULangpack1Rev2.zip
[Windows Mobile Development and Hacking General] kthejoker20:
2014 fusion hybrid, with eco hybrid screen menu (picture of car using engine or electric) enable nav

APIM change 2009 0006 8089 to 2409 0006 808D

to enable instrucment panel nav screen

IPC change	D0E8 7900 005E to D0F8 7800 006D

---------- Post added at 03:31 AM ---------- Previous post was at 03:30 AM ----------

I do have a question thought, how are you all calculating those bits, i can't get forscan to auto calculate them,
[Windows Mobile Development and Hacking General] SchimiEX:
and if i have v3.8 installed? :(
[Windows Mobile Development and Hacking General] fblasot:
For Europe there is the new Rev4

http://ivsu.binaries.ford.com/swparts/Gen2v38build15128updatepackageEULangpack1Rev4.zip
[Windows Mobile Development and Hacking General] SchimiEX:
i´ve got this file, but sync says that the Software is up to date and the next massage says thats no enough space..

US Explorer 2013 with Sync v3.8... like to update to German language
[Windows Mobile Development and Hacking General] fblasot:
OT:

Yes, I know it is not possible using the "normal" way...

I got to update from 3.8rev2 to rev4 modifying the autoinstall.lst files in two steps but the risk of a brick for me it is too high than the benefits of rev4 that I haven't seen...

Different is the wishes to force update sync to get a new language...

In other international forum, specifically for Americans, I read that it is possible to do a downgrade of sync using the previous 3.7 update but of course modifying the autoinstall.lst file...and after update again to 3.8...

For EU user I cannot find the previous 3.7 update since our car came out with 3.7 from factory...
[Windows Mobile Development and Hacking General] fordson04:
Yea forscan didn't auto calculate for me either but I used COMpulse asbuilt explorer and it has a built in check sum calculator that will do it for you. You just fill in the boxes and it recalculates for you
[Windows Mobile Development and Hacking General] rioachim:
Thanks for the info, the difference to v2 is the AE update to the navigation app