GS7 program code disassembly project

doublespaces

Administrator
Oct 18, 2016
9,303
4,332
0
AZ
Ride
2009 E93 335i
Also if someone can help dump the ROM, please send me a private message here on the forum( you need to login) or the contact us form at the bottom or send an email to admin at spoolstreet.
 

aus335iguy

Colonel
Nov 18, 2017
2,251
805
0
Down under
Ride
335i DCT 2009
Got as far as packing the TCU and got to the post office. Stood in line for 10 minutes before my daughter started crying and I had to leave. I’ll be near there tomorrow though and I’ll have help. I should be successful in sending. :rage:
 

imad

Specialist
Oct 4, 2019
94
64
0
Ride
BMW e92
Megicmotorsport claims its Tricore TC1766 with an open "custom" design, and offers a bench "boot" mode. Do we have anyone from Magic who can confirm it can do a full dump on the bench?
I'm running DCT with GWS flash, and working on the same issue to allow custom tune (final gear, shiftpoints, etc)

Capture.PNG
 
  • Informative
Reactions: aus335iguy

Olza

Corporal
Feb 2, 2020
231
230
0
Minsk, Belarus
Ride
BMW M240 xdrive
So. I find final gear ratio and wheel factor, Rennstart rpm, stick control and a little bit drive logic. Will try to make some little XDF for tuner pro. Also DTC management.
So first idea is: i will made some 0da file with changed one byte but with old original signature. Who is brave enough to flash it with winkfp?
Im very curious what error appears, if it be DTC error code then very very good, because i can parse checks before in the program. Then you must reprogram to original data via winkfp.
Just say me your datafile version.
 

imad

Specialist
Oct 4, 2019
94
64
0
Ride
BMW e92
So. I find final gear ratio and wheel factor, Rennstart rpm, stick control and a little bit drive logic. Will try to make some little XDF for tuner pro. Also DTC management.
So first idea is: i will made some 0da file with changed one byte but with old original signature. Who is brave enough to flash it with winkfp?
Im very curious what error appears, if it be DTC error code then very very good, because i can parse checks before in the program. Then you must reprogram to original data via winkfp.
Just say me your datafile version.
Could you please share those? I have the DKG running GTS in my 335, so I may also try to flash it over.
 
  • Like
Reactions: aus335iguy

doublespaces

Administrator
Oct 18, 2016
9,303
4,332
0
AZ
Ride
2009 E93 335i
I am still double checking, as FLEX indeed lists TC1766 in the available TCU's.


View attachment 35230

This has been talked about now and then but if it actually works I'm pretty sure we can crowdfund the necessary funds to obtain one of these. That should kick start the reverse engineering process to find an obd exploit and at the same time we can bench flash devices one by one. Perhaps even disabling the security along the way.
 

aus335iguy

Colonel
Nov 18, 2017
2,251
805
0
Down under
Ride
335i DCT 2009
This has been talked about now and then but if it actually works I'm pretty sure we can crowdfund the necessary funds to obtain one of these. That should kick start the reverse engineering process to find an obd exploit and at the same time we can bench flash devices one by one. Perhaps even disabling the security along the way.
From memory they were only 3k or so??
I’d say that’s a wise use of our collective resource... as long as it does what it says on the box