Turbo Quattro

**chris2011** » Вт дек 24, 2019 11:32 pm

Spent already few hours with patching tsd.mibstd2.system.swdownload

But no success till now

**Crash-100** » Вт дек 24, 2019 11:27 pm

You will need patch tsd.mibstd2.system.swdownload

**Crash-100** » Вт дек 24, 2019 11:26 pm

How X soft help you ?

**chris2011** » Вт окт 22, 2019 4:51 pm

is there a way to get X devl sw on production units ?

**FRANEK** » Пт май 25, 2018 8:45 pm

jvkk писал(а):How much special the SD card should be?
Any hint?

its not for production units

**jvkk** » Вт май 22, 2018 1:33 pm

How much special the SD card should be?
Any hint?

**алексей 3012** » Ср дек 13, 2017 9:41 am

MetafileChecksum Calculating is easy, it is difficult to calculate the signature, there is no good way

**congo** » Вт дек 05, 2017 2:39 pm

If you have them yes.

**FRANEK** » Пн дек 04, 2017 3:53 pm

congo писал(а):Too much effort just to see that you cant touch anything on these units
Thecnisat made it secure, nothing in common with harman or delphi.
Way much easy is to use special SD cards.

private keys are usefull for this unit

**mobista** » Ср ноя 22, 2017 11:10 am

harwin3 писал(а):I want to go this way https://forum.xda-developers.com/genera ... st74201158 found the emmc MTFC8GLWDQ-3M AIT Z. someone can get the datasheet of it?

Look for "EMMC LFBGA 100 pinout" - soldering is simple, with every tool developed to work with eMMC can read this memory (even simple sd card reader, but U must to add some voltage).

**congo** » Ср ноя 22, 2017 10:57 am

Too much effort just to see that you cant touch anything on these units

Thecnisat made it secure, nothing in common with harman or delphi.
Way much easy is to use special SD cards.

**mobista** » Вт ноя 21, 2017 7:17 pm

This chip is BGA100 eMMC memory, you can read it with this: https://pl.aliexpress.com/store/product ... 62252.html or simple SD card reader when add correct voltage and connect with good pins

**harwin3** » Ср окт 18, 2017 10:00 am

I want to go this way https://forum.xda-developers.com/genera ... st74201158 found the emmc MTFC8GLWDQ-3M AIT Z. someone can get the datasheet of it?

**harwin3** » Вс окт 15, 2017 12:29 pm

the metafilechecksum is easy to calculate, but after that you need to calculate new signature and thats almost imposible.

https://reverseengineering.stackexchang ... tion/12287 here you find more info about the signature.

in the software donwload part of the firmware tsd.mibstd2.system.swdownload you find SkipSignatureCheck = "true" but adding this to metainfo doenst seem to work.

**алексей 3012** » Вс окт 15, 2017 6:42 am

I tried to modify the MetafileChecksum inside the metainfo2 file to prompt the signing error

Вложение error.jpg больше недоступно

**harwin3** » Сб окт 14, 2017 6:27 pm

Hello,

Anyone know how to skip or calculate the metafile signature?
In the file tsd.mibstd2.system.swdownload in the software there is "SkipSignatureCheck = "true", will not check signature of metainfo2.txt file"

Adding SkipSignatureCheck = "true" to the metafile doesnt work.

Any idea? in IDAPRO i can see the flag but cant find out how to get it to work.

Turbo Quattro

MIBSTD2 Signature

Ответить

Развернуть Обзор темы: MIBSTD2 Signature

MIBSTD2 Signature