asellus

So the only two points of concern I have are the MIBRoot patching and the adaptation coding stuff -- I only have an OBDeleven, no VCDS.

Does anyone have any insight on patching out the FEC checks? I've got the mibroot decompiled in Ghidra but am at a loss on where the checks would be located, either to update the checksum or remove it altogether.

stevilangel

I finally managed to decompress the ifs file but I dont find Mibroot in the folder. Asellus you can upload your ifs file so that I can do another test PLZ

asellus

If you have decompressed the file, the directory created should haev some directories in it. You need to go into usr, then apps, then MIBRoot should be there.

JMark2

I have the same issue. I used dumpifs as decribed with dumpifs_helper.sh but there are lots of files but no MIBRoot file.
It looks like the MIBRoot file is not in the ifs-root file of the update sd card. But I heard that it is there when the .bin file is copied directly from the car.

Can anyone clarify?

By the way, for anyone who gets empty folders, use a absolute path for dumpifs_helper.sh because it does not work with relative paths.

MIB2

Make an dump of IFS Filesystem on MIB System directly with following command:

mount -uw /net/mmx/fs/sda0/
cat /dev/fs0> /net/mmx/fs/sda0/ifsorig.bin

https://rennlist.com/forums/991/1049...l#post16022781 > Use Step 4.
On Original ifs-root.ifs from Firmware Update don't decompress all files (2 Images in ifs-root.ifs)!
Cut and paste this block of data from dumped ifs file into a new file (Step 4)
With the new ifs file (from dumped ifs image) you can decompress the files include MIBRoot.

Example for Ubuntu:
First steps:
sudo apt update
sudo apt install liblzo2-2
sudo apt install liblzo2-dev
sudo apt-get install libucl1 libucl-dev liblzo2-2 liblzo2-dev

cd dumpifs-master
make dumpifs
sudo cp ./dumpifs /usr/bin/dumpifs
sudo chmod 755 /usr/bin/dumpifs
sudo chmod 755 /mnt/c/a/dumpifs-master/dumpifs_helper.sh

./dumpifs_helper.sh /mnt/c/a/dumpifs-master/new.ifs

MIB2

Repack of extracted IFS Files:

Example for Ubuntu:

export QNX_TARGET="/"
cd /mnt/c/a/dumpifs-master
./mkxfs -t ifs -nn -o ./ -r / ./mkifs_attributes.txt ./ifs_extracted ./patched_ifs.ifs

MIB2

Flash procedure:

mount -uw /net/mmx/fs/sda0/
flashunlock
f l a s h i t -a ba0000 -d -v -f patched_ifs.ifs
flashlock

/usr/apps/mib2_ioc_flash reboot
(command for System will automaticaly reboot)

stevilangel

Great illustration but I need to understand something, do we manually patch Mibroot or the command ./mkxfs does it automatically

MIB2

MIBRoot must be patched manually!
mkxfs is for repacking of the filesystem after patching the MIBRoot.

stevilangel

Can you explain more
Im not master with "Ghidra"

asellus

How does one patch MIBRoot? I have it decompiled but I'm not seeing any obvious function names regarding FEC signature checks and the like.

Red-100

Great Work Chris!!

katita

i use dumpifs and could extract mibroot for patching,but i not get files in correct folders, all files are in same folder.
could anyone help?

OWLY

Is there an easier way?

coiae

1st Thanks to Chris2 for this amazing guide. 2nd I try USB-Ethernet connection and works fine... Now I need the pass for MHI2_ER_POG11_P4172 MU:1119.
I try with oaIQOqkW but no way, I read about install the toolbox from SD-CARD for obtain pass but I think I need the firmware to return the PCM to original state.
Please help me