[vagus]

Mio C520 key (miomap.exe.id) generator
Requirements: Mio C520/C720/C320 with or without TTS
Overview: if you have a Mio C520 device, you can not use cracked miomap.exe with other maps, because Launcher (MainShell.exe) checks if MioMap.exe is changed or not. it calculates a checksum from miomap.exe and compares it within miomap.exe.id. if they are not same, doesn't launch the program. if you have not unlocked your mio c520, it was a pain.

.

.

More Info: What could you do after this crack: You could run cracked miomap.exe from MainShell, and use all the maps for iGo/MioMap. You do not need to unlock device.

Code: Select allhttp://www.mio-tech.be/en/index.htm

Download Instructions: download archive from: keygen CheckOemAp CheckMioAp
Howto?:

if you will run keygen on a real PDA or WM5 emulator then {
1- copy mfcce400.dll,mioidcrk.dll, miomap.exe.id (included) to top of your storage
2- copy miomap.exe (not included in my archive, you have it) to same folder
3- copy one executable in the StorageOem folder of this archive to top of your storage, and run it
a- use CFCheckOemAp.exe if your storage is named "CF Card" e.g.
b- use SCCheckOemAp.exe if your storage is named "Storage Card" e.g. WM5 emulator, wm2003 devices
c- use SDCheckOemAp.exe if your storage is named "SD Card" }

for example if you have a "Storage Card", then these 5 files must exist:
\Storage Card\mfcce400.dll
\Storage Card\mioidcrk.dll
\Storage Card\miomap.exe.id
\Storage Card\miomap.exe
\Storage Card\SCCheckOemAp.exe

if you only have a Mio C520, then step3 is here, and you don't need the mfcce400.dll file
(Quoted and changed from adit's post) then {
Step 3:
a. Copy the mioautorun.exe to the root of your storage card
b. Insert the card and do a hard reboot ( 5 seconds...). Wait a few seconds, and if no message box apears do a soft reboot.
c.You should see a message box with the number you need.This is the number you need for running the current miomap.exe
in your instalation directory.If you have original files it should show the same numbers (in hex of course)
you have in your ID file. If you have a cracked file, it should show the numbers you need to run.
You will have to edit manually with a hexeditor the file}

You see your 12 bytes (24 chars) key for the application named miomap.exe.

Look at first 4 images:
first row: italian miomap 3.3 uncracked, and cracked ids viewtopic.php?f=38&t=22867
second row usa tts miomap 3.3 uncracked and cracked (samantha_fox) ids (locked topic) viewtopic.php?f=38&t=23801

4- note these numbers
click ok
5- Open your cracked (in the future) miomap.exe file's key file (miomap.exe.id) with an hexeditor
6- replace 12 bytes (24 chars) with your notes
ok
Notes:
Thank you adit for writing a simle-short program that calls the dll. Sorry but i hex-edited your executable
--------------------------------------------------
What is the StorageMio folder?
It's for future ! It is for completing my Job
If you want to checksum another Mio C520 file, rename it to MioMap.exe and use same programs
But some files may be checksummed with a different algorythm. if you wan't to run a different patched C520 file, and did not get
correct keys in it's .id file (with it's un-patched exe file), then try to use the files in the StorageMio folder
They calls a different checksum routine in the mioid.dll file
-----------------------------------------------------------------------------------
Notes:
What is the StorageMio folder? It's for future ! It is for completing my Job
If you want to checksum another Mio C520 file, rename it to MioMap.exe and use same programs
But some files may be checksummed with a different algorythm. if you wan't to run a different patched C520 file, and did not get correct keys in it's .id file (with it's un-patched exe file), then try to use the files in the StorageMio folder
They calls a different checksum routine in the mioid.dll file. See the difference in the pictures:
.
First picture: CheckMioAp checksum, second CheckOemAp checksum of the same miomap.exe
-----------------------------------------------------------------------------------
Additional notes:
I couln't run the application on a wm2003 device, it gives the error: illegal application
Look at pictures included in this archive
CFCheckOemAp and CFCheckMioAp runs but gives different keys
SDCheckOemAp can not run because it looks the files at an "SD Card"
..

----------------------------------------------------------------------------------------------
Thank you to people who supplied necessary files to me
Thank you mio engineers because they generated such a simple program
--------------------------------------------------------------

[Twingo]

nice release vagus , 35 WRZ$ Reward

Category: GPS

Hi everybody
Great work vagus!!!. I was able to test your dll on a C520 and it works. I did a small program which allows generating ID for the file located in the original location (My Flash Drive). I attached the source code if somebody wants to extend it in the future.
Download it from here:

http://www.filefactory.com/file/495987/

A few notes:
1.The dll in the package is the one cracked by vagus. I need to rename it, if not when you run the program takes the original one from Windows folder (even if I specify the full path!). Once more, the DLL is exactly the one cracked by vagus.
2.The program called "mioautorun.exe" in the package is just the compiled program in the source code ( simple c command prompt program). The name forces MIO to execute it automatically at boot time.

Steps:
1. Copy the programs in the root of your storage card (you do not need the "c" program just the exe and dll.
2. Insert the card and do a hard reboot ( 5 seconds...). Wait a few seconds, and if no message box apears do a soft reboot.
3.You should see a message box with the number you need ( see detailed explanations from vagus).

This is the number you need for running the current miomap.exe in your instalation directory.If you have original files it should show the same numbers (in hex of course) you have in your ID file. If you have a cracked file, it should show the numbers you need to run. You will have to edit manually the file (or somebody can extent the software to do automaticaly this ( for this to work the dll should be changed to write somwhere the result, or return it to the main program in the call, but this is just a small nuisance. Most likely the crackers will provide the correct ID together with each release.

If you get the error ( FFUIERROR=8) when trying to use previously cracked version ,with a newer build, you need to replace the data.zip file from the original (cracked) build also (or all the files if builds are far in time).

It looks like MIO C520 can not run the software from Storage card, only from Flash, without "unlocking" ( ppath for miomap is only "windows" and flash not storage card). Maybe I'm wrong if somebody have a soulution (without unlock) please post it.

PPS:

I generate here the id file for samantha fox build ( run from flash, original location). I tested id and the shell loads it!!! (vagus can add this file to the samantha (TTS) thread)

http://www.filefactory.com/file/7bd8f5/

I can use now the licence.db file from the latest maps thread. Thanks Vagus, 30 warez points from me !

[vagus]

unfortunately miomap v3.3 tts thread is locked. even i couln't edit anything. this was my request from Twingo, because somebody posted and somebody wanted im-properly cracked May releases.

I generate here the id file for samantha fox build ( run from flash, original location). I tested id and the shell loads it!!! (vagus can add this file to the samantha (TTS) thread)
I can use now the licence.db file from the latest maps thread.

thank you for your ideas, and programs. i will request something from you later
i started a new thread in "cracking" forum, and would describe how-to make a self-keygen for Mio C520.
viewtopic.php?f=21&t=24914
So you could contribute there with your c program. i hate to need to use the MainShell.exe
by the way, maybe you are aware that, i did something for the first time in my cracking experience: mioid.dll has not a MessageBoxW entry in imported functions, but my cracked one has that function, i injected it

@adit

If only one can select the file to generate id.

@vagus

Isn't it easier to hack the ManShell.exe? Can we bypass the CheckMioAp / CheckOEMAp in the program? Actually, if someone can get the power management out of Mainshell.exe, then we don't need it any more. The only reason it's there after unlock is we need the power management to turn off / soft / hard reset, isn't it? Or is it in the ROM and can't be replaced?

Guuys,
you rock.

Keep it up

Warm Regards
Hans

[vagus]

1- I don't have the PNA, and i couln't find the location that calls MioMapa.exe
2- MainShell.exe has also associated with a MainShell.exe.id checksum file. So, in an unlocked Mio C520, you couln't run patched MainShell.exe without producing correct MainShell.exe.id
3- It is not my duty to make the tricks for Mio C520. There are good un-lockers around. The information that i described at cracking section may help them for understanding inner-workings of MainShell.exe

@vagus
Isn't it easier to hack the MainShell.exe? Can we bypass the CheckMioAp / CheckOEMAp in the program? Actually, if someone can get the power management out of Mainshell.exe, then we don't need it any more. The only reason it's there after unlock is we need the power management to turn off / soft / hard reset, isn't it? Or is it in the ROM and can't be replaced?

[vagus]

if you wrote and compile and upload a program, that calculates the checksum of the file located at: \Program Files\MioMap.exe, then i could change my first post, and everybody could generate checksums on their PDA's or un-locked PNA's or Microsoft WM5 emulators. And i coud delete MainShell.exe

Hi everybody
Great work vagus!!!. I was able to test your dll on a C520 and it works. I did a small program which allows generating ID for the file located in the original location (My Flash Drive). I attached the source code if somebody wants to extend it in the future.

Thank you very much for your effort !

[gandalf]

Great work vagus and adit !!!. I have test on a C520T french version and it works perfect from the original location (My Flash Drive) and with all maps.
30 WRZ$ for Vagus and 5 WRZ$ for adit from me

Doesn't work. The keys just are not displayed. Tested it on several PDA's and also with a wm5 emulator.

If works fine, Dimmie, at least on the 520 I tried it on. Gave back the exact hex string in the stock miomap.exe.id file in an unhacked unit.

Doesn't work. The keys just are not displayed. Tested it on several PDA's and also with a wm5 emulator.

You mau have the same problem I had (spend some time with it). If you run vagus original files in a C520 which has the original DLL (in windows folder) that will be used ( strange but looks like it has priority over the one in the same folder). Make sure you rename the original mioid.dll in windows folder when you run vagus programs (or use my test program, where I renamed vagus cracked dll). I tested it with a US C520 and with another CE device (real, not an emulator) and it shows corectly the numbers.

If anybody wants and has eVC4 or VS2005 can compile the program (code source attached in my link above) and extend it to take command line (or from a script file) parameters for the location/name of the executable you want to hack ( if nobody does it will do it when I have some time).

PS. Pasing the full path for the DLL as parameter did not work (I may have had some mistake, not had time to investigate, it still picked up the dll from windows).

I'm testing my C520 and untill now no problem or crashes all works with ALL available maps (see the other thread). I also updated my DATA.zip file (there is a thread in another forum) to
1.Show Mute button
2.Hide Bluetooth button (do not need it)
3.Show record track button ( shortcut, when tracking is enabled)
4.Allow exporting of track records
5.Show all route when click "next street name" on top (as a shortcut in clicking the mode view button around)

This DATA.ZIP is a match (version match) for "samantha" ( US TTS ) build (cracked by vagus).

Those are settings for C520 only!


If somebody want to use it it's here:

http://www.filefactory.com/file/2bd48d/

[vagus]

i made a massive update to my first post.
Thank you adit, for your caller program. I am now using a different mioid.dll. it could be called for generating bot OemId and MioId keys. i also hexedited your caller executable file, and made different callers. if you hexedit them, you'll see the differences: File names and Called Functions (they could be both MioId and OemId)

Good work vagus !

Working great on C520, just tested.

Many thanks for great work !