NefMoto

Technical => Flashing and Chipping => Topic started by: tange on April 28, 2022, 06:10:13 AM



Title: Convert BMW Fxx programming files to programmers to read and write files
Post by: tange on April 28, 2022, 06:10:13 AM
Convert BMW Fxx programming files to programmers to read and write files

Dear gods, can anyone explain the programming files of BMW's original Fxx chassis, such as swfl_0000074c.bin of CAS4, according to the original programming sswfl_0000074c.xml, but I did not find the flash address indicated:
 <FLASH-SEGMENTS>
      <FLASH-SEGMENT COMPRESSION-STATUS="COMPRESSED">
        <SHORT-NAME>swfl_0000074c_0FE8000</SHORT-NAME>
        <SOURCE-START-ADDRESS>0000000</SOURCE-START-ADDRESS>
        <SOURCE-END-ADDRESS>00000BF</SOURCE-END-ADDRESS>
        <TARGET-START-ADDRESS>0FE8000</TARGET-START-ADDRESS>
        <TARGET-END-ADDRESS>0FE8FFF</TARGET-END-ADDRESS>
        <COMPRESSION-METHOD>NRV</COMPRESSION-METHOD>
        <CHECKSUM>80EA</CHECKSUM>
      </FLASH-SEGMENT>
      <FLASH-SEGMENT COMPRESSION-STATUS="UNCOMPRESSED">
        <SHORT-NAME>swfl_0000074c_C004000</SHORT-NAME>
        <SOURCE-START-ADDRESS>00000C0</SOURCE-START-ADDRESS>
        <SOURCE-END-ADDRESS>00040BF</SOURCE-END-ADDRESS>
        <TARGET-START-ADDRESS>C004000</TARGET-START-ADDRESS>
        <TARGET-END-ADDRESS>C007FFF</TARGET-END-ADDRESS>
        <COMPRESSION-METHOD>UNKNOWN</COMPRESSION-METHOD>
        <CHECKSUM>6577</CHECKSUM>
      </FLASH-SEGMENT>
      <FLASH-SEGMENT COMPRESSION-STATUS="UNCOMPRESSED">
        <SHORT-NAME>swfl_0000074c_C00C000</SHORT-NAME>
        <SOURCE-START-ADDRESS>00040C0</SOURCE-START-ADDRESS>
        <SOURCE-END-ADDRESS>00070BF</SOURCE-END-ADDRESS>
        <TARGET-START-ADDRESS>C00C000</TARGET-START-ADDRESS>
        <TARGET-END-ADDRESS>C00EFFF</TARGET-END-ADDRESS>
        <COMPRESSION-METHOD>UNKNOWN</COMPRESSION-METHOD>
        <CHECKSUM>0BD4</CHECKSUM>
      </FLASH-SEGMENT>
      <FLASH-SEGMENT COMPRESSION-STATUS="UNCOMPRESSED">
        <SHORT-NAME>swfl_0000074c_C3C8000</SHORT-NAME>
        <SOURCE-START-ADDRESS>00070C0</SOURCE-START-ADDRESS>
        <SOURCE-END-ADDRESS>000B0BF</SOURCE-END-ADDRESS>
        <TARGET-START-ADDRESS>C3C8000</TARGET-START-ADDRESS>
        <TARGET-END-ADDRESS>C3CBFFF</TARGET-END-ADDRESS>
        <COMPRESSION-METHOD>UNKNOWN</COMPRESSION-METHOD>
        <CHECKSUM>4DA3</CHECKSUM>
      </FLASH-SEGMENT>
      <FLASH-SEGMENT COMPRESSION-STATUS="UNCOMPRESSED">
        <SHORT-NAME>swfl_0000074c_C3D8000</SHORT-NAME>
        <SOURCE-START-ADDRESS>000B0C0</SOURCE-START-ADDRESS>
        <SOURCE-END-ADDRESS>000F0BF</SOURCE-END-ADDRESS>
        <TARGET-START-ADDRESS>C3D8000</TARGET-START-ADDRESS>
        <TARGET-END-ADDRESS>C3DBFFF</TARGET-END-ADDRESS>
        <COMPRESSION-METHOD>UNKNOWN</COMPRESSION-METHOD>
        <CHECKSUM>AEAB</CHECKSUM>
      </FLASH-SEGMENT>


Data segment read by CAS4 programmer
The first paragraph, 0000000--000B0BF
The second paragraph, 00000C0--00040BF
The third paragraph, 00040C0--00070BF
Fourth paragraph, 00070C0--000B0BF
Fifth paragraph, 000B0C0--000F0BF


Original programming file data section - sorry I didn't find it?
0FE8000--0FE8FFF?
C004000--C007FFF?
C00C000--C00EFFF?
C3C8000--C3CBFFF?
C3D8000--C3DBFFF?

Thank you all gods!



Title: Re: Convert BMW Fxx programming files to programmers to read and write files
Post by: prj on April 28, 2022, 07:22:39 AM
Time to reverse the CBOOT then, which you will have to do regardless, as all the flash data is usually compressed and encrypted.