Could be a long shot, but has anyone tried modifying the stock BMS firmware?

I've modified the stock firmware and have a consult3 to flash it however I'm a little stuck calculating the two checksums located at 5FFFE:5FFFF and 3E000:3E003. I've got the 3E004:3E007 checksum sorted (3NA0C BMS)

I'm ...