mickeyd1984
Jr. Member
Karma: +0/-5
 Offline
Posts: 34
|
 |
« on: July 05, 2016, 03:28:10 PM »
|
|
|
C:\Users\Mike>sum stg3LC-NLS.bin badass.bin
ME7Tool (v1.0.3) [Management tool for Bosch ME7.x firmwares]
Inspiration from Andy Whittaker's tools and information.
Written by 360trev and nyet [BSD License Open Source].
Attempting to open firmware file 'stg3LC-NLS.bin'
Step #1: Reading ROM info ..
Searching for EPK signature...OK
Searching for ECUID table...OK
EPK : '42/1/ME7.5/3/4012.00//F22id/Dst06g/250899/'
Part Number : '4B0906018P '
Engine ID : '1.8L R4/5VT '
SW Version : '0006'
HW Number : '0261206537'
SW Number : '1037352750'
Step #2: Reading ROMSYS ..
Startup section: word[0x008000]+word[0x00FFFE]
@008038 Add=0x007CD1 CalcAdd=0x007CD1 ADD OK
Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0x7FFFF
@00803c Add=0x39E9EF CalcAdd=0x39E9EF ADD OK
All param page: word[0x010000]+word[0x01FFFE]
@01b560 Add=0x00971D CalcAdd=0x00971D ADD OK
Step #3: Reading RSA signatures ..
Searching for RSA offset #0...missing
Searching for RSA offset #1...missing
Step #4: Finding CRC table(s) ..
Searching for CRC table(s)...OK
CRC table(s) OK
Step #5: Reading Main Data Checksums ..
Searching for main data CRC pre block...missing
Searching for main data CRC/csum blocks...missing
Falling back to default 512k CRC blocks...OK
Searching for main data CRC offsets...OK
Searching for main data checksum offsets...missing
Main CRCs:
1) 0x010000-0x013FFF @70000 CRC: DF58D39C CalcCRC: DF58D39C CRC OK
2) 0x014300-0x017F67 @70006 CRC: F87A574F CalcCRC: F87A574F CRC OK
3) 0x018191-0x01FBFF @7000c CRC: A2119794 CalcCRC: A2119794 CRC OK
Step #6: Reading Main Program Checksums ..
Searching for main program checksum..OK
ROM Checksum Block Offset Table @1dfec [16 bytes]:
1) 0x000000-0x00FBFF CalcChk: 47EFCCC8
0x00FC00-0x01FFFF CalcChk: 2D3D44A4 CalcCRC: 6C9688A3 SKIPPED
2) 0x020000-0x07FFFF
<7ffe0> Chk: D7F2CB81 CalcChk: D7F2CB81 OK (i)
Step #7: Reading Multipoint Checksum Blocks ..
Searching for multipoint block descriptor #1...OK
1) <14224> 0x024000-0x02658D Chk: 0AFD060F CalcChk: 0AFD060F OK
2) <14234> 0x014000-0x014243 Chk: 008B2FA9 CalcChk: 008B2FA9 OK (i)
3) <14244> 0xFFFFFFFF-0xFFFFFFFF END
Multipoint #1: [2 blocks x <16> = 32 bytes]
Searching for multipoint block descriptor #2...OK
1) <1fc00> 0x000000-0x003FFF Chk: 0FA0F5CF Boot: (whitelisted) OK
2) <1fc10> 0x004000-0x007FFF Chk: 0F4716B3 Boot: (whitelisted) OK
3) <1fc20> 0x000000-0x003FFF Chk: 0FA0F5CF CalcChk: 0FA0F5CF OK
4) <1fc30> 0x004000-0x007FFF Chk: 0F4716B3 CalcChk: 0F4716B3 OK
Multipoint #2: [34 blocks x <16> = 544 bytes]
*** Found 41 checksums in stg3LC-NLS.bin
*** DONE! 0/0 error(s) in stg3LC-NLS.bin corrected in badass.bin! ***
C:\Users\Mike>
Any write up i can follow or any input that concerns the rsa signatures woul be much appreciated
|
|
|
|
|
Logged
|
|
|
|
|
k0mpresd
|
|
« Reply #1 on: July 05, 2016, 03:30:53 PM »
|
|
|
Step #3: Reading RSA signatures ..
Searching for RSA offset #0...missing
Searching for RSA offset #1...missing |
|
|
|
|
Logged
|
|
|
|
mickeyd1984
Jr. Member
Karma: +0/-5
Offline
Posts: 34
|
|
« Reply #2 on: July 05, 2016, 10:12:09 PM »
|
|
|
Kompressed i am confused as to why you quoted things i already knew? I am lost as to come about fixing that issue. If you have a link or writeup of some sort I would be forever in Debt to you. I am trying to learn how to fix this issue.
|
|
|
|
|
Logged
|
|
|
|
|
vwaudiguy
|
|
« Reply #3 on: July 05, 2016, 10:15:15 PM »
|
|
|
I'm going to assume he meant since the signatures are missing, you don't need to worry about fixing them. Maybe your original question is why are they missing?
|
|
|
|
|
Logged
|
"If you have a chinese turbo, that you are worried is going to blow up when you floor it, then LOL."
|
|
|
mickeyd1984
Jr. Member
Karma: +0/-5
Offline
Posts: 34
|
|
« Reply #4 on: July 05, 2016, 10:24:51 PM »
|
|
|
After doing more research i think he was telling me that too. I guess some ecus have them and some dont? I am working on a 018p atw ecu me7.5 i am curious if the bastard child ecu has them. they dont show up in the stock file either.
|
|
|
|
« Last Edit: July 05, 2016, 10:28:08 PM by mickeyd1984 »
|
Logged
|
|
|
|
mickeyd1984
Jr. Member
Karma: +0/-5
Offline
Posts: 34
|
|
« Reply #5 on: July 05, 2016, 11:36:44 PM »
|
|
|
Anyone wanna have a look to see if this files cs are correct. I have tried with everything i have access to with no luck.
|
|
|
|
|
Logged
|
|
|
|
|
k0mpresd
|
|
« Reply #6 on: July 06, 2016, 09:16:44 AM »
|
|
|
badass.bin!
|
|
|
|
|
Logged
|
|
|
|
mickeyd1984
Jr. Member
Karma: +0/-5
Offline
Posts: 34
|
|
« Reply #7 on: July 06, 2016, 10:15:32 AM »
|
|
|
KOmpressed I am still waiting on my LC-1 wideband to finish the file. I know there are many errors. I am just playing with LC and NLS. I am still learning and logging with my stock file. Feel to make fun of it all you want lol its a work in progress.
|
|
|
|
|
Logged
|
|
|
|
|
SB_GLI
|
|
« Reply #8 on: July 06, 2016, 11:44:38 AM »
|
|
|
that's very many loads  |
|
|
|
|
Logged
|
|
|
|
|
carsey
|
|
« Reply #9 on: July 06, 2016, 12:26:19 PM »
|
|
|
Not all bad file depending how the rest of it is set up. Would work with open loop boost control.
Also interested in patching a RSA signature. I edited a file off a ECU, but fails checksums on RSA signature in ME7check - winols shows them being ok.
|
|
|
|
|
Logged
|
|
|
|
|
k0mpresd
|
|
« Reply #10 on: July 06, 2016, 03:40:34 PM »
|
|
|
KOmpressed I am still waiting on my LC-1 wideband to finish the file. I know there are many errors. I am just playing with LC and NLS. I am still learning and logging with my stock file. Feel to make fun of it all you want lol its a work in progress.
im not making fun, but why would you do that? |
|
|
|
|
Logged
|
|
|
|
mickeyd1984
Jr. Member
Karma: +0/-5
Offline
Posts: 34
|
|
« Reply #11 on: July 06, 2016, 05:07:25 PM »
|
|
|
KOmpressed, I was bored and was just seeing how it would affect the car. I ran a file like this except without the LC and NLS today. it ran ok but with out my wideband i dont trust it LOL dont really want to blow up my car.
|
|
|
|
|
Logged
|
|
|
|
|
nyet
|
|
« Reply #12 on: August 23, 2016, 10:47:38 PM »
|
|
|
Not all bad file depending how the rest of it is set up. Would work with open loop boost control.
Also interested in patching a RSA signature. I edited a file off a ECU, but fails checksums on RSA signature in ME7check - winols shows them being ok.
And you didn't bother trying to correct them with ME7Sum yet? |
|
|
|
|
Logged
|
ME7.1 tuning guideECUx PlotME7Sum checksumTrim heatmap toolPlease do not ask me for tunes. I'm here to help people make their own. Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
|
|
|
em.Euro.R18
Full Member
Karma: +4/-5
Offline
Posts: 219
|
|
« Reply #13 on: September 26, 2017, 11:12:29 AM »
|
|
|
I'm sorry for bumping this thread but K0mpresd you made me literally drop to my knees in laughter with that IRL post. Are we attempting to send this car going to the moon?
|
|
|
|
|
Logged
|
|
|
|
|
