GS7 program code disassembly project

[azshantris]

This is very very exciting stuff guys! Keep up the great work!
I've got a 2.81 diff on my workbench that I plan to out in this weekend, but maybe this will end up saving me the hassle

 

[doublespaces]

but i want to see what will be with TCU while flashing with winkfp please... i did not resign binary.

doublespaces, i can see several hashes inside and routines. investigating... but full dump will be very useful.

Perhaps @LMB335is or @derekgates or someone else who has the M3 GTS flash installed could assist. The error messages and dash lights/codes will be helpful to Olza for tracing the way back to the correct routines to disable.

 

[derekgates]

Perhaps @LMB335is or @derekgates or someone else who has the M3 GTS flash installed could assist. The error messages and dash lights/codes will be helpful to Olza for tracing the way back to the correct routines to disable.

I *used to* have it installed but there were no error messages or dash lights. Once the car has the correct V0 then it is pretty happy and difficult to tell that the parts didn't originally come on car. However, the shifts are horrible above idling speeds due to rear end ratio difference. There was never thrown codes nor dash lights.

 

[derekgates]

[edit] I am dumb and do not have any pictures from Olza's flash.

 

[doublespaces]

Specifically, I meant the codes which get thrown AFTER this experimental file has been flashed to the TCU. The error messages and behavior from that point will help point back to the reason the flashed file is not accepted.

 

[derekgates]

Specifically, I meant the codes which get thrown AFTER this experimental file has been flashed to the TCU. The error messages and behavior from that point will help point back to the reason the flashed file is not accepted.

Ah, sorry.

My car is on jackstands with no exhaust. I have been trying to measure my driveshaft for ... 3 months now? sigh.

 

[doublespaces]

This is a laymans example which absolutely does not apply but the concept does:

"The file you flashed is not accepted, ERROR 1234"

Then Olza can search for strings containing this text or look for routines which may have this result. There is a seemingly endless amount of data to sift through and without a live debugging station it requires a lot of manual looking. This information may be helpful in the search.

 

[doublespaces]

So. I find final gear ratio and wheel factor, Rennstart rpm, stick control and a little bit drive logic. Will try to make some little XDF for tuner pro. Also DTC management.
So first idea is: i will made some 0da file with changed one byte but with old original signature. Who is brave enough to flash it with winkfp?
Im very curious what error appears, if it be DTC error code then very very good, because i can parse checks before in the program. Then you must reprogram to original data via winkfp.
Just say me your datafile version.

Maybe you can do this for normal 335is 0da? This will mean you have more testers available to help.

I guess we can switch off drivelogic and use sport button on GTS software. We even can try to use standart GWS with it )


So try to reflash this file:
0. Make sure you HAVE already flashed M3 GTS program version 7844978 (!)
1. Save in safe warm place original A7848443.0da data file
2. Copy this file without .txt extension instead
3. Start WinKFP
4. Remove UIF write after data, after program, in expert, comfort mode and Force program programming in configuration, NO bootsector update (!)
5. In comfort mode, choose Enter ZUSB, enter 7848442
6. Check ECU family is GS40 and our file selected, OK
7. OK, Done, Program.
8. Pray

It should write ONLY datafile, and takes not so much time.
Then im very interested in TCU behaviour. Write down any error messages and other stuff.

Then revert back original file and reflash back to it. The only difference is LC rpm and that one parameter which i revert back to 0.

View attachment 35251

Anyone who has 7844978 flashed to their TCU(Or has the M3 GWS and can flash this) please follow the instructions above and report back exactly what has happened, DTC errors, idrive messages, etc.

 

[namsu2430]

Maybe you can do this for normal 335is 0da? This will mean you have more testers available to help.



Anyone who has 7844978 flashed to their TCU(Or has the M3 GWS and can flash this) please follow the instructions above and report back exactly what has happened, DTC errors, idrive messages, etc.

Just to check this is recoverable?

I have the M3 GWS but still need to install. Car is finally not being daily driven atm so I could attempt this. 2.56 final drive still installed and zsub 8609092

 

[doublespaces]

Just to check this is recoverable?

I have the M3 GWS but still need to install. Car is finally not being daily driven atm so I could attempt this. 2.56 final drive still installed and zsub 8609092

it shouldn't be an issue to simply flash back.

As long as you ensure that you have the correct number flashed beforehand. If I understand correctly this is only a partial flash so you'll need to be on the correct version first.

 

[aus335iguy]

A 335i/135i file would open up more testers
@Olza for President !

 

[namsu2430]

S

it shouldn't be an issue to simply flash back.

As long as you ensure that you have the correct number flashed beforehand. If I understand correctly this is only a partial flash so you'll need to be on the correct version first.

So what's do you guys need me to do?
Install the GWS and flash the later GTS zsub via winkfp

 

[imad]

I guess we can switch off drivelogic and use sport button on GTS software. We even can try to use standart GWS with it )


So try to reflash this file:
0. Make sure you HAVE already flashed M3 GTS program version 7844978 (!)
1. Save in safe warm place original A7848443.0da data file
2. Copy this file without .txt extension instead
3. Start WinKFP
4. Remove UIF write after data, after program, in expert, comfort mode and Force program programming in configuration, NO bootsector update (!)
5. In comfort mode, choose Enter ZUSB, enter 7848442
6. Check ECU family is GS40 and our file selected, OK
7. OK, Done, Program.
8. Pray

It should write ONLY datafile, and takes not so much time.
Then im very interested in TCU behaviour. Write down any error messages and other stuff.

Then revert back original file and reflash back to it. The only difference is LC rpm and that one parameter which i revert back to 0.

Could you please send me the compiled bin?

 

[aus335iguy]

He attached it to his post asa text file?

 

[imad]

He attached it to his post asa text file?

Its not a binary and I have no winkpf atm

 

[e92_Jay]

Ah, sorry.

My car is on jackstands with no exhaust. I have been trying to measure my driveshaft for ... 3 months now? sigh.

View attachment 35268

Are those items for sale?

 

[Olza]

Could you please send me the compiled bin?

Here they are, both bins for GTS and 335is. Load at 0x80020000.

Attached also 335is calibration file 8606075 - this is for program version 8606066 (!!!).
When flashing with WinKFP specify ZUSB number 8606074. Remove txt extension.

 

[RK-Tunes]

Hey, I just ordered a flex to flash the TCU. If anyone needs me to read / write any megatronics please let me know how I can help! Please note I am best reachable via email [email protected]
In return all I ask for is your dig through the f8x stuff and find the launch control RPM. It will save me a bunch of time if this is something simple

 

[aus335iguy]

That’s what I’m talkin bout

 

[Lofuel]

If you guys need a car to test on someone can remote in to flash what you need done. I’ll take notes on what the car is doing.

I have all the m3 shenanigans installed , running the GTS tcu flash . Here to help anyway I can , have all the software already installed on my laptop