GS7 program code disassembly project

azshantris

Corporal
Aug 27, 2019
151
136
0
Ride
2011 135i N55 DCT GTX1000
This is very very exciting stuff guys! Keep up the great work!
I've got a 2.81 diff on my workbench that I plan to out in this weekend, but maybe this will end up saving me the hassle 🤔
 

doublespaces

Administrator
Oct 18, 2016
9,303
4,331
0
AZ
Ride
2009 E93 335i
but i want to see what will be with TCU while flashing with winkfp please... i did not resign binary.

doublespaces, i can see several hashes inside and routines. investigating... but full dump will be very useful.

Perhaps @LMB335is or @derekgates or someone else who has the M3 GTS flash installed could assist. The error messages and dash lights/codes will be helpful to Olza for tracing the way back to the correct routines to disable.
 

derekgates

Lieutenant
Feb 23, 2018
740
375
0
NW FL
derekgates.us
Ride
2011 335is
Perhaps @LMB335is or @derekgates or someone else who has the M3 GTS flash installed could assist. The error messages and dash lights/codes will be helpful to Olza for tracing the way back to the correct routines to disable.

I *used to* have it installed but there were no error messages or dash lights. Once the car has the correct V0 then it is pretty happy and difficult to tell that the parts didn't originally come on car. However, the shifts are horrible above idling speeds due to rear end ratio difference. There was never thrown codes nor dash lights. :(
 

doublespaces

Administrator
Oct 18, 2016
9,303
4,331
0
AZ
Ride
2009 E93 335i
Specifically, I meant the codes which get thrown AFTER this experimental file has been flashed to the TCU. The error messages and behavior from that point will help point back to the reason the flashed file is not accepted.
 

derekgates

Lieutenant
Feb 23, 2018
740
375
0
NW FL
derekgates.us
Ride
2011 335is
Specifically, I meant the codes which get thrown AFTER this experimental file has been flashed to the TCU. The error messages and behavior from that point will help point back to the reason the flashed file is not accepted.

Ah, sorry.

My car is on jackstands with no exhaust. I have been trying to measure my driveshaft for ... 3 months now? sigh.

IMG_1433.jpeg
 
  • Like
Reactions: doublespaces

doublespaces

Administrator
Oct 18, 2016
9,303
4,331
0
AZ
Ride
2009 E93 335i
This is a laymans example which absolutely does not apply but the concept does:

"The file you flashed is not accepted, ERROR 1234"

Then Olza can search for strings containing this text or look for routines which may have this result. There is a seemingly endless amount of data to sift through and without a live debugging station it requires a lot of manual looking. This information may be helpful in the search.
 

doublespaces

Administrator
Oct 18, 2016
9,303
4,331
0
AZ
Ride
2009 E93 335i
So. I find final gear ratio and wheel factor, Rennstart rpm, stick control and a little bit drive logic. Will try to make some little XDF for tuner pro. Also DTC management.
So first idea is: i will made some 0da file with changed one byte but with old original signature. Who is brave enough to flash it with winkfp?
Im very curious what error appears, if it be DTC error code then very very good, because i can parse checks before in the program. Then you must reprogram to original data via winkfp.
Just say me your datafile version.

Maybe you can do this for normal 335is 0da? This will mean you have more testers available to help.

I guess we can switch off drivelogic and use sport button on GTS software. We even can try to use standart GWS with it )


So try to reflash this file:
0. Make sure you HAVE already flashed M3 GTS program version 7844978 (!)
1. Save in safe warm place original A7848443.0da data file
2. Copy this file without .txt extension instead
3. Start WinKFP
4. Remove UIF write after data, after program, in expert, comfort mode and Force program programming in configuration, NO bootsector update (!)
5. In comfort mode, choose Enter ZUSB, enter 7848442
6. Check ECU family is GS40 and our file selected, OK
7. OK, Done, Program.
8. Pray :)

It should write ONLY datafile, and takes not so much time.
Then im very interested in TCU behaviour. Write down any error messages and other stuff.

Then revert back original file and reflash back to it. The only difference is LC rpm and that one parameter which i revert back to 0.

View attachment 35251

Anyone who has 7844978 flashed to their TCU(Or has the M3 GWS and can flash this) please follow the instructions above and report back exactly what has happened, DTC errors, idrive messages, etc.
 

namsu2430

Specialist
Jul 29, 2019
72
40
0
Ride
335i DCT 2009
Maybe you can do this for normal 335is 0da? This will mean you have more testers available to help.



Anyone who has 7844978 flashed to their TCU(Or has the M3 GWS and can flash this) please follow the instructions above and report back exactly what has happened, DTC errors, idrive messages, etc.


Just to check this is recoverable?

I have the M3 GWS but still need to install. Car is finally not being daily driven atm so I could attempt this. 2.56 final drive still installed and zsub 8609092
 

doublespaces

Administrator
Oct 18, 2016
9,303
4,331
0
AZ
Ride
2009 E93 335i
Just to check this is recoverable?

I have the M3 GWS but still need to install. Car is finally not being daily driven atm so I could attempt this. 2.56 final drive still installed and zsub 8609092

it shouldn't be an issue to simply flash back.

As long as you ensure that you have the correct number flashed beforehand. If I understand correctly this is only a partial flash so you'll need to be on the correct version first.
 
  • Like
Reactions: aus335iguy

namsu2430

Specialist
Jul 29, 2019
72
40
0
Ride
335i DCT 2009
S
it shouldn't be an issue to simply flash back.

As long as you ensure that you have the correct number flashed beforehand. If I understand correctly this is only a partial flash so you'll need to be on the correct version first.


So what's do you guys need me to do?
Install the GWS and flash the later GTS zsub via winkfp
 

imad

Specialist
Oct 4, 2019
94
64
0
Ride
BMW e92
I guess we can switch off drivelogic and use sport button on GTS software. We even can try to use standart GWS with it )


So try to reflash this file:
0. Make sure you HAVE already flashed M3 GTS program version 7844978 (!)
1. Save in safe warm place original A7848443.0da data file
2. Copy this file without .txt extension instead
3. Start WinKFP
4. Remove UIF write after data, after program, in expert, comfort mode and Force program programming in configuration, NO bootsector update (!)
5. In comfort mode, choose Enter ZUSB, enter 7848442
6. Check ECU family is GS40 and our file selected, OK
7. OK, Done, Program.
8. Pray :)

It should write ONLY datafile, and takes not so much time.
Then im very interested in TCU behaviour. Write down any error messages and other stuff.

Then revert back original file and reflash back to it. The only difference is LC rpm and that one parameter which i revert back to 0.


Could you please send me the compiled bin?
 

Olza

Corporal
Feb 2, 2020
229
223
0
Minsk, Belarus
Ride
BMW M240 xdrive
Could you please send me the compiled bin?

Here they are, both bins for GTS and 335is. Load at 0x80020000.

Attached also 335is calibration file 8606075 - this is for program version 8606066 (!!!).
When flashing with WinKFP specify ZUSB number 8606074. Remove txt extension.
 

Attachments

  • A7848443.0DA.txt
    359.5 KB · Views: 35
  • A7848443_GTS.bin
    127.8 KB · Views: 36
  • A8606075_335is.0DA.txt
    359.5 KB · Views: 26
  • A8606075_335is.bin
    127.8 KB · Views: 30

RK-Tunes

New Member
Nov 22, 2018
1
6
0
Ride
1000+whp F80, 991.1 Porsche,
Hey, I just ordered a flex to flash the TCU. If anyone needs me to read / write any megatronics please let me know how I can help! Please note I am best reachable via email [email protected]
In return all I ask for is your dig through the f8x stuff and find the launch control RPM. It will save me a bunch of time if this is something simple
 

Lofuel

New Member
Feb 18, 2018
9
7
0
Philly
Ride
2011 335is
If you guys need a car to test on someone can remote in to flash what you need done. I’ll take notes on what the car is doing.

I have all the m3 shenanigans installed , running the GTS tcu flash . Here to help anyway I can , have all the software already installed on my laptop