Carminat Live Navcore 9.844 patching and map activation

Since there are users out there that want more than the map area that came with the device, I started seeking ways of patching this new Navcore.
The workaround that could be used for the old Carminat Navcore no longer works for the new Live model.
Even if a patched PNDNavigator is used on the SD the device will still use a copy of it on the internal memory.
The internal memory can not be accessed due to no connections and the fact that it is based on TT's own Linux system.

Due to the input of some nice guys and a tester I can update all interested users with current state of this project:
Patching of the PNDNavigator is possible - at least no tool gives an error back.
Activating new maps is possible too.
To get the infos and/or the ttgo.bif the easiest way is to make a backup with Home and to open the created ttgo.bif in the backup folder located in the users document folder.
Ttgo.bif onto the SD, add the new map and activate with Fast- or AutoActivate.

Patching as until now is not confirmed possible.
There is a way to overwrite and update the internal memory but if that does not work with the current Navcore because the version numbers are the same, any user with a Carminat Live should not make the next Navcore/Application update offered by Home!!
If it is possible to update the internal memory with next Navcore version the device must not be updated by Home with the official version!!!

So if you get an update offered by Home don't install it and quit Home, after that inform us here that there is a new versin available.
I will try to provide a patched installable Navcore for the next update by TT but it will only work if the device was not updated with the original offered by Home!!!

Update22.01.2012:
The Bootloader as well as the Navcore kernel are protected by a 2048bt RSA key.
For that reason it might not be possible to patch or install a patched NC - needs further testing!
We have two kinds of maps supllied by TT:
1. maps that come with the device or are ordered on a SD
2. maps that come as an update or are purchased through Home
They differ in the type of activation.
You either find a DCT file or a MCT file in the map folder.
If you have a MCT than it means the map can be used on any device if the original SD is used - no copy of the SD will work!
If you have a DCT than it means the map only works on your device but you can copy the whole content of the SD on a different SD and it will work (in your device only!).

What does that mean for the current project?
Well, if you can not use a modified BL to load a modified Navcore it will be impossible to use self activated maps.
Same for the Kernel protection: If the device checks this RSA key to see if the NC is genuine that a patched Navcore won't be installed but instead the internal Navcore is used to rebuild the SD.
Cyber-Crack found a version info inside the NC and I created a patched version based on the 9.844 but with this version info changed to 9.845.
You can find the file [Please Register or Login to download file] password: downunder
I don't expect it to work for the above reasons, but if anyone is willing to test it:
Unpack the archive onto a blank SD add your original map folder from the backup and insert the SD into the Carminat.
If all goes well the NC will be installed and show up as 9.845, if it does not work you only will see 9.844 - since it is not confirmed what this version actually does we need any tester who installed it to check:
a) if the original map works as before
b) if the map still works after you used a keygen for the activation (or a newer map that you activated).
Please report in this thread if you could make any progress!

Spoiler: Show

Info for everyone interested in working with the Carminatfiles on a Windows PC]
It took me a very long time to work out how a user with a plain Windows system can not just see the files inside the ttsystem.ib but also how to actually modify them.
I really hope this info will help to get more users with some programming skills to work with it and maybe to help find us a working solution.
Things you might need:
[Please Register or Login to download file] to open and extract files from Linux partitions - you won't have write access!
A good Hex Editor, since there is enough available and you should already have one if you are skilled I don't post links.
[Please Register or Login to download file] allows you to mount the ttsystem.ib as a virtual drive with write access! You nee to rename the file to ttsystem.ib.img in order to mount it.
[Please Register or Login to download file] is able to read the .gz and .tar formats used on Linux and is able to actually write that format correctly unlike Winrar which can only open and extract. Only downside: if you don't have an actually ext3 drive working with Linux drivers for Win the edited file will have "fat" instead of "unix" as the filesource, but I neither know if that is a problem nor how to change it without Linux.
Since I know basically nothing about Linux I collected the info one might need but could not find anywhere on the net except he is willing to work with Linux.
Here's a very basic step by step on how to modify a file inside the ttsystem.ib:
Do everything with backups and not with your originals!
1. install the above programs
2. rename the ttsystem.ib to ttsystem.ib.img
3. mount that image using Gizmo as a new drive
4. copy all files you need to a location of your choice - if you only want to edit just go further without the copying
5. open the files you want to check with the (hex)editor of your choice - be aware that for textfiles you need a Unix capable editor like Notepad++.
6. If you want to work with the .gz archives:
Use 7zip to open the file
Change the settings so that a suitable editor is used instead of Notepad - you might have to do that according to the file type you want to edit/modify.
Don't unpack a file to your PC for the changes as I don't know if 7zip creates the right checksums if external sources are used to get the file back into the archive.
If you change the settings so that your Hex editor is used you will be asked if the file inside the archive should be updated - confirm that.
Close 7zip and the modified file will be stored on the virtual drive.
7. After you are finnished with all modifications unmout the image in Gizmo and the ttsystem.ib.img will have the modified content!
8. Rename the ttsystem.ib.img to ttsystem.ib and you are free to use it.

Keep in mind that you need the complete content of the original Cab (or my modified version/the version with your changes) on the SD, otherwise nothing at all will happen for the installation.

Update: There are tools like the Forensic Toolkit (FTK) that allow investigators to access all sorts of drives on a suspects computer regardless of the operating system.
If someone dare to try to get access with those tools and a laptop we would need to know how to connect to the USB port on the Carminat Live.
Please use this thread for all problems related to patching and activation problem.
If you have questions about the access in Windows or you want to upload a working and patched NC for the Carminat Live use Tomtom-Carminat-Live-Editing-installation-files-on-Windows-PC's!

Update:
Read carefully!!

I hope I'm now able to provide a patched Navcore for this model.
There are a few strings attached:
So far is untested.
It will only work if TT allows the internal Navcore to "updated" with a Navcore of the same version number.
I can not guarantee that it will work as I have no device for testing! If you proceed you agree to do it as a tester and at your own risk!

What you have to do to get it going:
Unpack the archive to a blank SD card and insert into your TT.
If all works as hoped the device will "update" the internal Navcore with the patched version.
After that any map, activated the usual way should work from the SD card without a Navcore present on the SD.
In my opinion the worst that can happen if it does not work :
Nothing. I assume that the device might simply refuse the update at all as the version number is the same.
For the case it will update but the Navcore is not accepted you might try the same with the official update from Home or for the case the device is not working after that : take it to the dealer for a warranty replacement.
Again: this would be the extreme case, imho either nothing at all will happen or the update works as normal.
Password : downunder
[Please Register or Login to download file] you can find a pre patched Version of the current Carminat Live Navcore.

If the update won't work at all because of the identical version numbers, please don't update with the next official Navcore from Home (if it will be updated soon).
Reason is simple: If the older Navcore is still on the internal memory it might be possible to update with a patched version of the newer Navcore so that self activated maps can be used in the future - so please don't accept the next offial update!!

Update:
It is now confirmed that the patched Navcore can be installed on top of the 9.843 as well as an "update" over the current 9.844 Navcore.
Currently a good team is working on a new keygen so that the maps can be activated for the Carminat Live as well.
Right now only original SD cards will work, no matter if you use the original Navcore or the patched version I offered.
Unless you want to test it and report back there is no urgent need to use the patched Navcore at this current state of keygen development.

We still need more original files to compare and create the algorithms for the activation, so if you can plese upload the following files and PM me the link (all files will be in trusted hands and only be used for the development of the keygen):
ext3_loopback from the folder "loopdir"
map.meta , map.mct , map.pna from the map folder on the SD card - where map is the filename of the map in use!
Please use Winrar to pack all files into a single archive and please add a textfile with your username if you want to be named as a contributing tester after the project is finnished.

If you are a good programmer/coder/reverse engeneer and think you help decoding the original keygen or help with the checksums, SHA encryption or activation algorithms, please let me know some of your reference and join the team!

Attention : If there is still anyone out there that has the source code of the original keygen than PLEASE step forward send me the files for the development of the new keygen.
If you still have contact to TTUSER or now how I can contact him, the same : please let me know!

tomtom carminat live
ver 9.844
boot loader 557716
These are my original files

Downunder35m wrote:We still need more original files to compare and create the algorithms for the activation, so if you can plese upload the following files and PM me the link (all files will be in trusted hands and only be used for the development of the keygen):
ext3_loopback from the folder "loopdir"
map.meta , map.mct , map.pna from the map folder on the SD card - where map is the filename of the map in use!
Please use Winrar to pack all files into a single archive and please add a textfile with your username if you want to be named as a contributing tester after the project is finnished.

Hi
I am an Italian user.
In attach I send you my data Carminat Live.
I hope I can be of help to your "job".
Bye

Hi,

Please find the files from French maps.
Good luck !

Hi!
Is tihis project still alive? Do you need some other files?

We still need more original files to compare and create the algorithms for the activation, so if you can plese upload the following files and PM me the link (all files will be in trusted hands and only be used for the development of the keygen):
ext3_loopback from the folder "loopdir"
map.meta , map.mct , map.pna from the map folder on the SD card - where map is the filename of the map in use!
Please use Winrar to pack all files into a single archive and please add a textfile with your username if you want to be named as a contributing tester after the project is finnished.

[Please Register or Login to download file]

Sorry for the late response, but currently I'm a bit limited health wise.
The files uploaded are welcome and will be checked by myself soon!
We already have some basic data to work with but to actually proof in the end that the algorithms are correct multiple tests from different devices will make it easier.
Current status is that we can provide a patched Navcore but at this time! no working keygen to activate new maps.
A good team is working on it and I'm confident it is only a matter of time until we can present a working solution for every Carminat Live.
From what I was told the Carminat Live come with a lifetim map update, so the whole thing would only be of interest to cover new areas that are not included in a device.
I know that many users will disagree about the map updates, and to be honest it might be a matter of the actual car dealer and fineprint in the contract.
A German user reported me that Home would not not offer him a new map for free, so he complaint at his dealer as the car was less than a year old.
The dealer said not problem and changed the installed SD card with a new one for free.
This however does not mean every dealer and contract is the same but it might be worth asking nicely if you don't get free updates through Home.
Since the device is sold as a complete package with the car and can not be bought seperately it should be customer service of your dealer to give a new map every three months unless it is excluded in the contract - so check the fineprint until we can give you free maps and a new keygen

Thanks for the uploaded files so far, and as I said, I will download and check them soon!

Hi to all!
Here's my files.
Good work and Thank You!

tomtom carminat live
ver 9.844
Dutch imageID = Benelux-855.2938

3488

Map europa renault koleos

3513

Hello,
I did understood that activate new cards on the original SD is possible?? Could you give more detail on that?
Here is my files
Good work and thank you.
RMEA

So far only original SD cards will work, but they work on all Live devices.
Even if you copy a new card on the original SD you can't activate it as the activation is bound to the SD CID and not the device ID.

Hello Downunder35m :)

For the keygen , moved forward ?