Every MyGenius has a private + public key store on it (License.lic)

Their client uses `polarcrypto.dll` to derive keys from your key + other passwords, as well as decrypt your data. I think the method used is Blowfish.

Once you decrypt your FPF/MYG file, you get `GEN_FILE`, a magic number + header length + maybe some kind of file type + checksum.

I was able to reverse the header XOR cipher that they do. However, they do a special kind of XOR cipher encryption for the rest of the file. From what I can tell, they do not have the handheld device encryption/decryption/cipher algorithm in any DLL related to the MyGenius client.

I can't get my hands on a working copy of Race Evo or DSManager to know for sure (and they sometimes pack their DLLs/apps with Themida...), but I do have some files that seem to line up pretty much 99%.

I was wondering if anybody had any ideas. If we could figure out how to encode/decode the files, we could share tunes and never need to be charged $3k for a tune again...

smart enough to try to crack, copy, and steal someone else's work, not smart or dedicated enough to apply that time and effort to something worthwhile?

i have an idea for you but i will not share it publicly.

Is the idea that I should go blank myself, or do you have an FPF file format idea? I am in no way trying to redistribute other people's work/steal it.

no need to "steal" anyone's work , you can buy a master tool, legit or otherwise, then work in openBIN format with your file guy/service. If you want to UNLOCK the mygenius for more then one VIN; PM me, I have many workarounds, but this FPF extracting makes you sound pretty ignorant to the basics, ever consider starting with real software and using the included commercial tune database. I offer API for this exact service PM to get started buying OPEN files

it seems like what has happened here is:

guy bought what he thought was the hookup on a random dimsport flash tool with about zero other clues for anything else and discovered it was mostly useless.
exhibit A: http://nefariousmotorsports.com/forum/index.php?topic=15385

then we end up here, exhibit B: http://nefariousmotorsports.com/forum/index.php?topic=16037

i am guessing at this point he is about $3200 poorer from A and B combined.

now we end up here, with a $3200 lighter wallet and feeling upset, he wants to stick it to "the man" (whatever that means but it seems to involve trying to crack his $3000 encrypted tuned file).

when in reality, he could have bought the pcmflash MB, bsl, or bench modules. the MB being the cheapest option, all in for maybe $350 maximum including random j2534 cable. with the baller bench set up costing what, $650 or $700 with the scanmatik hardware and been able to make a full 100% backup of his original ecu.

then he could have trolled the internet to find someone to tune it for him, at a cost for much less than $3000.

all in, probably $1000 maximum out of pocket depending on the options picked and tuner of choice.

but sure, lets pretend we are not trying to crack, copy, and steal, when it was literally just typed it was an attempt to crack, copy, and steal.

I'll go one step further. WinOLS developers make money by selling their software, yet a huge majority of people on this forum are accepted and even encouraged (there's a link to a torrent on here...) to pirate it.

So, you guys are all saints and geniuses and morally perfect for stealing money from WinOLS developers, but somebody who wants to charge you $3k for a tune when bootmod3 has them for $99 doesn't get a raised eyebrow.

Is this a moral police forum or a reverse engineering forum? Get the f*ck outta here.

What a jackass!

try asking how to fuck the big guy (dimsport) by unlocking the mygenius for multiple uses, result: extra wealth to yourself at the same time equalizing with a pole smoker company)

the way I see it: you replied to my PM offering unlock crack help,  insisted your objective is hell-bent on FPF/mygMOD - BIN, this will not really hurt dimsport, only the calibrators who spent 10 000+ USD on dimsport master accounts to work with this encrypted system.

your alternative is clear and basic, bench read the PCM with much cheaper tools as explained above, or perhaps cheapest option:  ask tell your tuner for a mod with hardLC or something that requires a full bench write and BIN format. ANY tuner charging 3k for a tune will send BIN format (maybe at some extra cost..fully knowing, if you refuse it tweakers will just BDM/BSL it (always better to keep customer happy)