Dear Forum Members,

Does anyone have Papago! R6600 X7 M3GPS.....

Monters GPS wrote:Dear Forum Members,

Does anyone have Papago! R6600 X7 M3GPS.....Mind to sharing here please!!!!

The R6600 X7 M3GPS program are quite similar to R6100 X7 M3GPS, I have check and did a comparison
Here is the difference

a. They are using Mediaplayer as the video/music therefore the music button is removed
b. Additional BT module support --> extra MainMenuBT.psu
c. The verification and registration module (open_reg) for offset correction is using a new program "=aPgm801" which the CID always change (some sifu have to figure out how to bypass)

Hi,

They have also Voice Command support. But Voice command and BT module can't run in generic PND. The Mediaplayer is the normal PPG media player. I understand this mediaplayer cannot play mp4 and they receive a lot of complain from customer. That's the reason why the use Coreplayer for R6100.

For the verification and registration module, its a big headache. Each time you launch the registration screen, the CID changes and this also cause the shift. Even you key in the same reg no, the map will shift differently because the CID no changes each time. Waiting for some master to find a way to unlock.

Thanks.

Regards,
gpsforever

After having gone thru the program with IDA, found the CID program address, waiting for some sifu/master to bypass

R6100 --> sub_94288 --> pgm802
R6600 --> sub_99CC0 --> pgm801

pgoh101 wrote:The R6600 X7 M3GPS program are quite similar to R6100 X7 M3GPS, I have check and did a comparison
Here is the difference

a. They are using Mediaplayer as the video/music therefore the music button is removed
b. Additional BT module support --> extra MainMenuBT.psu
c. The verification and registration module (open_reg) for offset correction is using a new program "=aPgm801" which the CID always change (some sifu have to figure out how to bypass)

Your attachment file not completed, hope can upload all except map file.
I checked it with IDA,
Make 2 exe file
first exe file only edit the address 0x888e3 from 0A to EA , this file for adjust the coordinate.
2nd exe file to bypass reg and only edit the address 0x88908 from 00 to 01, this file for bypass reg after get the right coordinate.

Not test, because only have exe file, no have complete R6600 X7

tiuniama wrote:Your attachment file not completed, hope can upload all except map file.
I checked it with IDA,
Make 2 exe file
first exe file only edit the address 0x888e3 from 0A to EA , this file for adjust the coordinate.
2nd exe file to bypass reg and only edit the address 0x88908 from 00 to 01, this file for bypass reg after get the right coordinate.

Not test, because only have exe file, no have complete R6600 X7

All files the same with R6100 m3 X7, uploaded the one which is different as in post #2. Bypass reg is not the problem, it is the changing of the CID number so t is difficult to get the correct code

Where is the hex location to change for Exit button?

Thanks.

gpsghost wrote:Where is the hex location to change for Exit button?

Thanks.

Just use x5se mediaplayer.exe exit method for now until we can figure out the CID / Offset problem

Thank you, bro gpsforever,
I get it work on my China PND, the CID number everytimes remain the same, my code 0099600000 make the coordinate correctly.

Thanks.

Hi All,

Who can share with me the exe file and how to stop the CID NO. Change.

Thanks
Regards

tiuniama wrote:Thank you, bro gpsforever,
I get it work on my China PND, the CID number everytimes remain the same, my code 0099600000 make the coordinate correctly.

Thanks.

I think you are using the R6100 version exe
To check --> if on the registration screen is says PGM802 then it is R6100, if is says PGM801 then it is R6600

where can i donwload for 800x480, port 2, baud 4800 complete files

Thanks

yusz wrote:where can i donwload for 800x480, port 2, baud 4800 complete files

Thanks

Already send to you......please check your pm!