Sapphire

> > > I've intentionally steered clear of looking at navigation data and those SD cards. Since they are selling them and those are probably subject of piracy... The whole...

> Do you have access to a copy of the D554 firmware for yours or D605? Unfortunately not. The D554 firmware was pre-installed, and I haven't yet been able to...

To (kind of) answer my own question, the files appear to be compressed using a custom algorithm; the binary responsible for decompression can be found at `/var/opt/bosch/dynamic/processes/DAPIAPP.OUT`. Fortunately the symbols...

Not managed to figure it out yet, but I think I'm getting close - created a repo with my current progress at https://github.com/sapphire-bt/lcn2kai-decompress

> Does that mean you got the exploit to work on your car as well? I've actually been using the binary from a firmware download I found online. I just...

I'm pleased to report that I've been successful in figuring out the unpacking routine. It currently only works for small files but I hope to figure out larger files in...

Another update: I think I've pretty much figured out the compression format now as it's working with every file I've thrown at it. I've updated my repo a few times...

I've done a bit of digging and it seems this is ultimately caused by inconsistent values returned from the `Utils.hasScroll` method. When first opening an initialised element, `AttachBody.prototype._attachPositioningHandler` is called,...