GS7 program code disassembly project

[Stokes]

Wow, I've missed out on all this! If I am following, you want to flash the data only to see what kind of checksum or hash check is happening? Even see if some areas of data can be changed without security issues? Is the immediate flashback just to get the car back usable again or part of the test as well?

 

[doublespaces]

Wow, I've missed out on all this! If I am following, you want to flash the data only to see what kind of checksum or hash check is happening? Even see if some areas of data can be changed without security issues? Is the immediate flashback just to get the car back usable again or part of the test as well?

Its just to see if the car triggers a code or gives off some kind of behavior we can pick up on to figure out where in the BIN the routines are at so we can continue to reverse engineer the security. The immediate flash back is because your car is unlikely to work properly since the signature is broken and the car won't like what you've done. We just want to see what those symptoms are so we can use them for clues. Olza hasn't specifically said this is the reason, I'm just assuming this is one of the main reasons for doing this.

 

[Olza]

so anyone flashed?

@rktunes, f8x dct tcu is the same? give us any dumps you can read and logs.

 

[doublespaces]

so anyone flashed?

@rktunes, f8x dct tcu is the same? give us any dumps you can read and logs.

I'm pretty sure it has a different chip or protocols. Apparently the bench tools do not work on it yet. He has access to E chassis dct also.

 

[namsu2430]

so anyone flashed?

@rktunes, f8x dct tcu is the same? give us any dumps you can read and logs.

Sorry, I'm still learning, So I'll need some detailed instructions.

What are your pre requisites before I flash? What programs do I need to download?

I have Winkfp at the moment.

If anyone who is more knowledgeable wants to go for it then fire away, but I'm happy to try it if there's no one else.

Usman

 

[Olza]

I have Winkfp at the moment.

No problem. Just read carefully my posts above.
Is your car was reflashed before? I advice you update tcu software to the latest version with winkfp first and write down any numbers it proposed to flash.

 

[Stokes]

Looks like I had used 7844978 when I flashed so I'll give it a shot in the morning.

 

[doublespaces]

Looks like I had used 7844978 when I flashed so I'll give it a shot in the morning.

View attachment 35301

Just be certain which codes you have prior to flashing. I wouldn't clear them just see if any new ones appear. And take note of any lights, messages and so on.

 

[imad]

Weird that I am currently flashed with 7844978 , but I can't locate it in the list (even by entering the ZUB).

Any idea where this ZB is to come from? I have the latest V67 Sp-DATEN, updated both ncs and winkfp, yet this number is not there.

 

[imad]

Meanwhile, some fancy device I've made lol. Gonna show Boost, AFRs and stuff in place of the useless gauges (JB4 style), but nothing to piggyback, just ODB plug.

Coming soon.

 

[Olza]

Your version seems good.
Just replace original with my first 0da file.
. In comfort mode, choose Enter ZUSB, enter 7848442 you should see some big list.
6. Check ECU family is GS40 and our file selected, OK
7. OK, Done, Program.

 

[imad]

Alright, so I've tried @Olza 's file an here're the resutls. First, I've tried with stock 0da:

This went successful. Then I've tried the modified 0da, which ended up with signature error:

The extended view on all errors:

@Olza you have enough to investigate now )

 

[JohnDaviz]

I can´t see any of the pictures sadly?! Okay.. i am not Olza

 

[aus335iguy]

I used to be able to see them and now I can’t
IVe forgotten how to internet lol

 

[imad]

I can´t see any of the pictures sadly?! Okay.. i am not Olza

Try now ))

 

[aus335iguy]

I can see them again

 

[JohnDaviz]

@Olza I got in contact with somebody who may have the ORI file for us. Is this helpful at all?

If yes. I am running DKG 860692

He is asking for
"What TCU, SW and HW number ect"

My car is not available to me right now and in the next 2-3 weeks. I need the information to forward.

 

[imad]

@Olza I got in contact with somebody who may have the ORI file for us. Is this helpful at all?

If yes. I am running DKG 860692

He is asking for
"What TCU, SW and HW number ect"

My car is not available to me right now and in the next 2-3 weeks. I need the information to forward.

My car is available, so try to send em these may be?

 

[JohnDaviz]

My car is available, so try to send em these may be?

Bad News. Does not have full Dump

 

[Olza]

@Olza I got in contact with somebody who may have the ORI file for us. Is this helpful at all?

If yes. I am running DKG 860692

He is asking for
"What TCU, SW and HW number ect"

My car is not available to me right now and in the next 2-3 weeks. I need the information to forward.

You mean ZB 8606092 HW 8606066 SW 8606093DA ?
Can you ask any F8x DKG files?
"Does not have full Dump " - we need any fulldump for E9x, is it possible?