NefMoto

Every MyGenius has a private + public key store on it (License.lic)

Their client uses `polarcrypto.dll` to derive keys from your key + other passwords, as well as decrypt your data. I think the method used is Blowfish.

Once you decrypt your FPF/MYG file, you get `GEN_FILE`, a magic number + header length + maybe some kind of file type + checksum.

I was able to reverse the header XOR cipher that they do. However, they do a special kind of XOR cipher encryption for the rest of the file. From what I can tell, they do not have the handheld device encryption/decryption/cipher algorithm in any DLL related to the MyGenius client.

I can't get my hands on a working copy of Race Evo or DSManager to know for sure (and they sometimes pack their DLLs/apps with Themida...), but I do have some files that seem to line up pretty much 99%.

I was wondering if anybody had any ideas. If we could figure out how to encode/decode the files, we could share tunes and never need to be charged $3k for a tune again...

Stage 1 on left, stage 2 on right. Most likely not any form of encryption other than clever bit shifting with a seed/key with XOR.

smart enough to try to crack, copy, and steal someone else's work, not smart or dedicated enough to apply that time and effort to something worthwhile?

i have an idea for you but i will not share it publicly.

That is the most scummy way to go about it man. They make their living by selling tunes, and they will as not all people are like us, who would try to flash their own car DIY, there are people who just want a tune for slight perfomance increase and thats it.

Is the idea that I should go blank myself, or do you have an FPF file format idea? I am in no way trying to redistribute other people's work/steal it.

LOL you just contradicted your first post here

no need to "steal" anyone's work ???, you can buy a master tool, legit or otherwise, then work in openBIN format with your file guy/service. If you want to UNLOCK the mygenius for more then one VIN; PM me, I have many workarounds, but this FPF extracting makes you sound pretty ignorant to the basics, ever consider starting with real software and using the included commercial tune database. I offer API for this exact service PM to get started buying OPEN files

it just makes him sound like a thief. People who sell open files usually sell them for more money than locked ones, but hey it's 3k for a tune, that is a bit much, unless we're talking cars that are worth a few hundred grand

it seems like what has happened here is:

guy bought what he thought was the hookup on a random dimsport flash tool with about zero other clues for anything else and discovered it was mostly useless.
exhibit A: http://nefariousmotorsports.com/forum/index.php?topic=15385

then we end up here, exhibit B: http://nefariousmotorsports.com/forum/index.php?topic=16037

i am guessing at this point he is about $3200 poorer from A and B combined.

now we end up here, with a $3200 lighter wallet and feeling upset, he wants to stick it to "the man" (whatever that means but it seems to involve trying to crack his $3000 encrypted tuned file).

when in reality, he could have bought the pcmflash MB, bsl, or bench modules. the MB being the cheapest option, all in for maybe $350 maximum including random j2534 cable. with the baller bench set up costing what, $650 or $700 with the scanmatik hardware and been able to make a full 100% backup of his original ecu.

then he could have trolled the internet to find someone to tune it for him, at a cost for much less than $3000.

all in, probably $1000 maximum out of pocket depending on the options picked and tuner of choice.

but sure, lets pretend we are not trying to crack, copy, and steal, when it was literally just typed it was an attempt to crack, copy, and steal.

What?... I'm a consumer who bought a tune with a handheld MyGenius who just so happens to have an interest in reverse engineering. I'm a software engineer for 10+ years, I'm naturally curious.

Why is this forum so hell bent on shitting on my idea to crack some XOR encryption? You guys feast and rejoice on the fact that you have access/resources that let you crack UDS seed/key challenge requests, but as soon as somebody mentions cracking the cipher that keeps companies who literally charge based on THE PRICE OF YOUR CAR, everybody is a vigilante and I'm a criminal.

I can't prove it, but I have a wild suspicion that you can pay between $1k and $3k for a tune that is 100% the same. That's what I'm out to prove. I could start listing brand names, but I don't want to get in any trouble and you guys 100% seem like the type of trolls to take this offline.

Being called a noob/kiddie/being assumed I don't have the talent to reverse engineer is only making me want to be one of the first people to reverse this format even harder...

I'll go one step further. WinOLS developers make money by selling their software, yet a huge majority of people on this forum are accepted and even encouraged (there's a link to a torrent on here...) to pirate it.

So, you guys are all saints and geniuses and morally perfect for stealing money from WinOLS developers, but somebody who wants to charge you $3k for a tune when bootmod3 has them for $99 doesn't get a raised eyebrow.

Is this a moral police forum or a reverse engineering forum? Get the f*ck outta here.

That isn't the reason I don't use other people's tunes. The reason I don't use other people's tunes is because they are usually shit.

What a jackass!

This made me laugh. Not for the reason one might expect.

try asking how to fuck the big guy (dimsport) by unlocking the mygenius for multiple uses, result: extra wealth to yourself at the same time equalizing with a pole smoker company)

the way I see it: you replied to my PM offering unlock crack help,  insisted your objective is hell-bent on FPF/mygMOD - BIN, this will not really hurt dimsport, only the calibrators who spent 10 000+ USD on dimsport master accounts to work with this encrypted system.

your alternative is clear and basic, bench read the PCM with much cheaper tools as explained above, or perhaps cheapest option:  ask tell your tuner for a mod with hardLC or something that requires a full bench write and BIN format. ANY tuner charging 3k for a tune will send BIN format (maybe at some extra cost..fully knowing, if you refuse it tweakers will just BDM/BSL it (always better to keep customer happy)

Can you guys please tell me how to make people pay 3K of any reasonable currency for "tune" files? Locked / unlocked / good / bad or otherwise? Because it seems to me I am seriously undercharging people for my small developments I provide to them from time to time :O. Are people really willing to pay that much to show off to friends?

Kicker -the funny part; a tune from WOJ closer to the worth that 3k price tag then whatever you got, probably would sell it for 500 doll hairs, think you just got took.

DS manager is free to download.

Hasp key to activate it is E300

so basically for E300 you can get all you want anyway.
Expensive part is the E2400 for the check sum module which is required.

No annual fees and you then only buy the mygenius flash units in bulk to make cheaper.

Google "Veblen Good"

Taking the ECU out of my car, opening it up, and reading it on a bench is a much bigger deal than opening x64dbg and collaborating with what I thought would be a community of "hackers" on what the assembly in some functions are.

Renntech

Weistec

Eurocharged

AMR

All companies that charge $2k-$3k for E63s AMG, not doll hairs

Where is DS Manager free to download? You need an .ORI, .MOD, and a manager private key to create FPF files.

the what's, who's, why's and how's mater (to black hat community or indifferent), What your trying to do doesn't require help from tri-core tuning forum blokes, your asking people who use these systems for profit to help you publically crack it open... am I missing something?  try asking about something constructive at the same time as nefarious.

my suggestion spent the time reading a FR's, Instructions manuals (as you're a trade software engineer after all) and look to a marketplace with open files.

yes, who wants to do all that “dirty” “work” stuff when you can just ask some people on the internet to help you try to steal it.

referring back to my first post, my idea was not for you to go “blank” yourself as you thought.

it was for you to go fuck yourself.

Lmao

lmfao you’re the big internet tough guy

i hope i steal some revenue from you when i crack this format wide open

i bet you are the life of the party and your spouse and co-workers love you

when i get hot, i will call on you mr. wet blanket

i’ve never met a bigger online e-penis faggot and i’ve been on forums and the depths of reddit for many years

from the bottom of my heart and with the ban that goes with it:

fuck you k0mpressed

you are an internet faggot and deep down you know it

thanks for contributing zero the conversation but putting on a show like a comic acting like a hero

so your mother and wife take it up the ass and suck dick, no big deal right?

nothing is a big deal when you are cool as k0mpressed

big internet goon

so many fans

the best make believe hacker who talks the most ahit in all of the labd

All this ghetto lingo from an "engineer"? Clearly my standards and expectations were too high from an engineer. I think with a post like this you've just burned yourself proper on this forum and no one will ever want to help you from now on. You've not even contributed jack shit to the forum, and you're calling people names, nevermind being a homophobic asshole? Fuck you!