How to unlock MMCS
#261
04-12-2011 | 12:44 AM
https://mitsubishiforum.com/forum/sh...ad.php?t=18705
You can buy replacemant camera like we have here in Poland :
http://www.altad.com.pl/index.php?product_id=358
http://www.viaken.pl/pl/viaken-profe...ancer-308.html
http://www.swistak.pl/a11815347,KAME...hi-Lancer.html
http://www.e-monitoring24.pl/kamera-...shi-p-770.html
Have a look into own market
Last edited by WiValdiBB; 04-12-2011 at 01:49 AM.
#262
04-17-2011 | 04:38 AM
Junior Member
Joined: Apr 2011
Posts: 1
Can Somebody Crack this Version ?
It is the 60.05 from Europe Map 2010-A
https://rapidshare.com/files/457810503/LOADING.KWI
Thank you all
CB5GTI
It is the 60.05 from Europe Map 2010-A
https://rapidshare.com/files/457810503/LOADING.KWI
Thank you all
CB5GTI
#263
06-28-2011 | 03:08 PM
Junior Member
Joined: Sep 2009
Posts: 24
Just cant figure it out US 261UM in europe
Ok im sorry for this post but I have honestly read through this a couple times and I cant quite figure it out 100% so I want to be clear about what I am doing. below are my goals for myself. Sorry if i have missed the answers in my reading. I am also an engineer so i am familiar with electronics and linux so i welcome tutorials and love to tinker with things.
Specs: 2007 outlander xls US Spec 261UM
Location: Germany
Hopes:
O/S: upgrade to latest and greatest.(Do i keep my O/S as american or switch to european .kwi; this i havnt been able to figure out from the forum)
Maps: European as up to date as possible
Music: Transfer to HDD without having to RIP
Radio: freq spacing to european standards(is this software or hardware governed on this unit)
-Traffic(will this equip pull data from radio?)
DVD: be able to let my daughter watch it while we drive(DVD in motion; this i see seems a quick fix, but i wont mess with it till the big stuff is sorted)
thanks to everyone for any help and the work so far. I have been loosely following this for the last two years. this is the first visit where i see hope(car was in storage for a year)
-R
Specs: 2007 outlander xls US Spec 261UM
Location: Germany
Hopes:
O/S: upgrade to latest and greatest.(Do i keep my O/S as american or switch to european .kwi; this i havnt been able to figure out from the forum)
Maps: European as up to date as possible
Music: Transfer to HDD without having to RIP
Radio: freq spacing to european standards(is this software or hardware governed on this unit)
-Traffic(will this equip pull data from radio?)
DVD: be able to let my daughter watch it while we drive(DVD in motion; this i see seems a quick fix, but i wont mess with it till the big stuff is sorted)
thanks to everyone for any help and the work so far. I have been loosely following this for the last two years. this is the first visit where i see hope(car was in storage for a year)
-R
Last edited by elboy0712; 06-28-2011 at 03:24 PM. Reason: add photo
#264
07-07-2011 | 09:46 AM
Member
Joined: Jul 2009
Posts: 37
I finally got around to getting the Samsung 160GB hard drive,the same as the one others have successfully cloned.
I`ve cloned the Toshiba drive to it using Acronis True Image and resized the partition for the musicserver.
all appeared to work fine until I popped a CD in to the MMCS and got the message "It is difficult to read the hard disk.Please wait a while while the hard disk is restored."
After this message has repeatedly appeared during the course of several minutes,I think the MMCS just decides that it cannot copy the disc so just plays it.
I have tried removing the hard drive and cloning it again and instead of using all the free space for the Musicserver partition ,I set the partition to 40GB.
However when I put back in the Outie it was the same.WorKs fine until a CD is inserted.
Any Help gratefully received!!!!!
I`ve cloned the Toshiba drive to it using Acronis True Image and resized the partition for the musicserver.
all appeared to work fine until I popped a CD in to the MMCS and got the message "It is difficult to read the hard disk.Please wait a while while the hard disk is restored."
After this message has repeatedly appeared during the course of several minutes,I think the MMCS just decides that it cannot copy the disc so just plays it.
I have tried removing the hard drive and cloning it again and instead of using all the free space for the Musicserver partition ,I set the partition to 40GB.
However when I put back in the Outie it was the same.WorKs fine until a CD is inserted.
Any Help gratefully received!!!!!
#265
07-12-2011 | 08:49 AM
Junior Member
Joined: Jun 2011
Posts: 13
ANY MODIFICATION ON HARD DISK MAY ALTER MMCS CAPABILITY TO LOAD DATA. DO IT ON YOUR OWN RISK.
The tools needed:
I would try to update my navi using a copy from another disk.
The tools needed to unlock the hard disk are below:
1. One screwdriver
2. One torx size 8 (see img)
3. One IDE adapter from small form to regular IDE (see here and here - both sides) if you use a desktop PC. For laptops, it connects directly.
4. The unlockhd program from iso file (the package is available here or here). You have to write it on CD and boot from it. NO OTHER HDD SHOULD BE ATTACHED EXCEPT THE MMCS' ONE.
5. The unlock key: B2BAB3BCB0DFACBEB1BBBEDFB1ADD2CDC9CEBAB2DFB19E8996 DFAA8C9A8DDFDF - for loader version 261EM (or B2BAB3BCB0DFACBEB1BBBEDFB1ADD2CDC9CEAAB2DFB19E8996 DFAA8C9A8DDFDF for 261UM)
6. One computer with IDE bus.
Procedure
1. To find out what loader version you have:
a) hold SET+NAVI for about 5 seconds to enter "Service Mode" menu
b) press Version Indication
c) note somewhere the Loader version. The key calculation algorithm is presented below. For example, for 261UM version, the key is B2BAB3BCB0DFACBEB1BBBEDFB1ADD2CDC9CEAAB2DFB19E8996DFAA8C9A8DDFDF (I bolded the difference between 261EM)
2. Flip the screen (push OPEN button in the lower left corner), pull the HDD plastic cover, gently.
3. Unscrew the two screws which holds the hdd. Use the torx. Pull out the hdd.
4. Connect it to IDE bus and power supply.
5. Start the computer, boot from CD, and pick option 3: "Boot linux with locking/unlocking utilities"
6. Wait for root@Xbox-HDM:/1 prompt
7. type unlockhd -p <KEY> (Ex. unlockhd -p B2BAB3BCB0DFACBEB1BBBEDFB1ADD2CDC9CEAAB2DFB19E8996 DFAA8C9A8DDFDF). Double check if necessary !!!
8. The key depends from unit to unit. See below.
9. If the operation is successful, running fdisk -l command will show the partitions (very similar as below). (thanks rcpax [sm=smiley20.gif])
10. Now you may turn off the computer. The disk is unlocked. You may use it with a Windows computer as a regular disk.
ANY MODIFICATION ON HARD DISK MAY ALTER MMCS CAPABILITY TO LOAD DATA. DO IT ON YOUR OWN RISK.
Key computing algorithm
Thanks to brian360, the string sniffed when MMCS negotiate with the hdd is
BAB2 BCB3 DFB0 BEAC BBB1 DFBE ADB1 CDD2 CEC9 B2AA B1DF 899E DF96 8CAA 8D9A DFDF
The password is 32 bytes long but transferred at 16 -sixteen-bit words, so the MSB of each byte is high. It turns out that if you invert all of the bits of the password you get this:
454D 434C 204F 4153 444E 2041 524E 322D 3136 4D55 4E20 7661 2069 7355 7265 2020
Decoded ASCII is:
"EMCL OASDN ARN2-16MUN va isUre "
After swapping the byte ordering around you get:
4D45 4C43 4F20 5341 4E44 4120 4E52 2D32 3631 554D 204E 6176 6920 5573 6572 2020
which in ASCII is: "MELCO SANDA NR-261UM Navi User "
MELCO - Mitsubishi Electronics Company
SANDA - the company's Sanda Works facility
NR-261UM - loader ID
The password used with the 'unlockhd' command was actually byte swapped, so if you try it, use this as your password:
b2bab3bcb0dfacbeb1bbbedfb1add2cdc9ceaab2dfb19e8996 dfaa8c9a8ddfdf
An excel sheet to exemplify the algorithm is available on PM. It requires Analysis ToolPak from Excel Addins.
The disk is locked again when you insert it in MMCS unit.
I just put all this stuff together to be easier to understand. Thanks brian360, otaku, GPSeek, oly_57mpg and all the others I could omit.
[IMG]local://upfiles/13524/2FA3CDC58A5E4070B458F921708B22D5.jpg[/IMG]
The tools needed:
I would try to update my navi using a copy from another disk.
The tools needed to unlock the hard disk are below:
1. One screwdriver
2. One torx size 8 (see img)
3. One IDE adapter from small form to regular IDE (see here and here - both sides) if you use a desktop PC. For laptops, it connects directly.
4. The unlockhd program from iso file (the package is available here or here). You have to write it on CD and boot from it. NO OTHER HDD SHOULD BE ATTACHED EXCEPT THE MMCS' ONE.
5. The unlock key: B2BAB3BCB0DFACBEB1BBBEDFB1ADD2CDC9CEBAB2DFB19E8996 DFAA8C9A8DDFDF - for loader version 261EM (or B2BAB3BCB0DFACBEB1BBBEDFB1ADD2CDC9CEAAB2DFB19E8996 DFAA8C9A8DDFDF for 261UM)
6. One computer with IDE bus.
Procedure
1. To find out what loader version you have:
a) hold SET+NAVI for about 5 seconds to enter "Service Mode" menu
b) press Version Indication
c) note somewhere the Loader version. The key calculation algorithm is presented below. For example, for 261UM version, the key is B2BAB3BCB0DFACBEB1BBBEDFB1ADD2CDC9CEAAB2DFB19E8996DFAA8C9A8DDFDF (I bolded the difference between 261EM)
2. Flip the screen (push OPEN button in the lower left corner), pull the HDD plastic cover, gently.
3. Unscrew the two screws which holds the hdd. Use the torx. Pull out the hdd.
4. Connect it to IDE bus and power supply.
5. Start the computer, boot from CD, and pick option 3: "Boot linux with locking/unlocking utilities"
6. Wait for root@Xbox-HDM:/1 prompt
7. type unlockhd -p <KEY> (Ex. unlockhd -p B2BAB3BCB0DFACBEB1BBBEDFB1ADD2CDC9CEAAB2DFB19E8996 DFAA8C9A8DDFDF). Double check if necessary !!!
8. The key depends from unit to unit. See below.
9. If the operation is successful, running fdisk -l command will show the partitions (very similar as below). (thanks rcpax [sm=smiley20.gif])
10. Now you may turn off the computer. The disk is unlocked. You may use it with a Windows computer as a regular disk.
ANY MODIFICATION ON HARD DISK MAY ALTER MMCS CAPABILITY TO LOAD DATA. DO IT ON YOUR OWN RISK.
Key computing algorithm
Thanks to brian360, the string sniffed when MMCS negotiate with the hdd is
BAB2 BCB3 DFB0 BEAC BBB1 DFBE ADB1 CDD2 CEC9 B2AA B1DF 899E DF96 8CAA 8D9A DFDF
The password is 32 bytes long but transferred at 16 -sixteen-bit words, so the MSB of each byte is high. It turns out that if you invert all of the bits of the password you get this:
454D 434C 204F 4153 444E 2041 524E 322D 3136 4D55 4E20 7661 2069 7355 7265 2020
Decoded ASCII is:
"EMCL OASDN ARN2-16MUN va isUre "
After swapping the byte ordering around you get:
4D45 4C43 4F20 5341 4E44 4120 4E52 2D32 3631 554D 204E 6176 6920 5573 6572 2020
which in ASCII is: "MELCO SANDA NR-261UM Navi User "
MELCO - Mitsubishi Electronics Company
SANDA - the company's Sanda Works facility
NR-261UM - loader ID
The password used with the 'unlockhd' command was actually byte swapped, so if you try it, use this as your password:
b2bab3bcb0dfacbeb1bbbedfb1add2cdc9ceaab2dfb19e8996 dfaa8c9a8ddfdf
An excel sheet to exemplify the algorithm is available on PM. It requires Analysis ToolPak from Excel Addins.
The disk is locked again when you insert it in MMCS unit.
I just put all this stuff together to be easier to understand. Thanks brian360, otaku, GPSeek, oly_57mpg and all the others I could omit.
[IMG]local://upfiles/13524/2FA3CDC58A5E4070B458F921708B22D5.jpg[/IMG]
#266
07-17-2011 | 09:29 AM
Junior Member
Joined: Jul 2011
Posts: 6
I finally got around to getting the Samsung 160GB hard drive,the same as the one others have successfully cloned.
I`ve cloned the Toshiba drive to it using Acronis True Image and resized the partition for the musicserver.
all appeared to work fine until I popped a CD in to the MMCS and got the message "It is difficult to read the hard disk.Please wait a while while the hard disk is restored."
After this message has repeatedly appeared during the course of several minutes,I think the MMCS just decides that it cannot copy the disc so just plays it.
I have tried removing the hard drive and cloning it again and instead of using all the free space for the Musicserver partition ,I set the partition to 40GB.
However when I put back in the Outie it was the same.WorKs fine until a CD is inserted.
Any Help gratefully received!!!!!
I`ve cloned the Toshiba drive to it using Acronis True Image and resized the partition for the musicserver.
all appeared to work fine until I popped a CD in to the MMCS and got the message "It is difficult to read the hard disk.Please wait a while while the hard disk is restored."
After this message has repeatedly appeared during the course of several minutes,I think the MMCS just decides that it cannot copy the disc so just plays it.
I have tried removing the hard drive and cloning it again and instead of using all the free space for the Musicserver partition ,I set the partition to 40GB.
However when I put back in the Outie it was the same.WorKs fine until a CD is inserted.
Any Help gratefully received!!!!!
Also,
When you put in a larger had disk, do you have to resize the music partition to take up the free space?
If you do, which is the music partition from here:
https://mitsubishiforum.com/forum/sh...344#post265344
Many thanks.
#268
08-03-2011 | 10:34 PM
Junior Member
Joined: Jul 2011
Posts: 4
Hi to all i do the same like wiseowl, i unlock the orginal HDD, clone is with Acronics, and write it back to a samsung 160gb hd. so far so good.
After i put the new 160 HD back in the MMCS, it looks good, but the navi didnt work.
So unplug the Batterie of the car for a few minutes an start the MMCS again. Now he is asking for a Program disk. I gave him a disk with a kwi on it he read it an than comes a error massage "can not write on hdd" or like this.
After that i put the hdd again an my computer an saw it locked again.
Can this be????
pls help thanks
best regards
After i put the new 160 HD back in the MMCS, it looks good, but the navi didnt work.
So unplug the Batterie of the car for a few minutes an start the MMCS again. Now he is asking for a Program disk. I gave him a disk with a kwi on it he read it an than comes a error massage "can not write on hdd" or like this.
After that i put the hdd again an my computer an saw it locked again.
Can this be????
pls help thanks
best regards
#269
08-04-2011 | 11:41 AM
Junior Member
Joined: Jul 2011
Posts: 4
Hi to all i do the same like wiseowl, i unlock the orginal HDD, clone is with Acronics, and write it back to a samsung 160gb hd. so far so good.
After i put the new 160 HD back in the MMCS, it looks good, but the navi didnt work.
So unplug the Batterie of the car for a few minutes an start the MMCS again. Now he is asking for a Program disk. I gave him a disk with a kwi on it he read it an than comes a error massage "can not write on hdd" or like this.
After that i put the hdd again an my computer an saw it locked again.
Can this be????
pls help thanks
best regards
After i put the new 160 HD back in the MMCS, it looks good, but the navi didnt work.
So unplug the Batterie of the car for a few minutes an start the MMCS again. Now he is asking for a Program disk. I gave him a disk with a kwi on it he read it an than comes a error massage "can not write on hdd" or like this.
After that i put the hdd again an my computer an saw it locked again.
Can this be????
pls help thanks
best regards
