adriancl
Jr. Member
Karma: +3/-4
 Offline
Posts: 30
|
 |
« Reply #30 on: December 18, 2015, 03:35:06 AM »
|
|
|
Found it.
Galletto can read full flash by OBD.
Immo off can be done only in flash, and made a shortcut at start relay outputs.That is solution 100% tested and work perfect.
For automatic gearbox must do after immo off adaptation,according to BMW procedures.No need diag tool, only follow the indicated steps.
|
|
|
|
|
Logged
|
|
|
|
Cloudforce
Full Member
Karma: +5/-13
Offline
Posts: 106
|
|
« Reply #31 on: December 18, 2015, 03:56:40 AM »
|
|
|
Found it.
Galletto can read full flash by OBD.
Immo off can be done only in flash, and made a shortcut at start relay outputs.That is solution 100% tested and work perfect.
For automatic gearbox must do after immo off adaptation,according to BMW procedures.No need diag tool, only follow the indicated steps.
So there is already a free ews delete solution? Then i don´t need to investigate further. |
|
|
|
|
Logged
|
|
|
|
|
ddillenger
|
|
« Reply #32 on: December 18, 2015, 04:21:51 AM »
|
|
|
So there is already a free ews delete solution? Then i don´t need to investigate further.
He said it exists, it hasn't been posted, nor word of it being free. It'd be awesome to see regardless. |
|
|
|
|
Logged
|
Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your experience!
Email/Google chat:
DDillenger84(at)gmail(dot)com
Email>PM
|
|
|
AG
Newbie
Karma: +0/-0
Offline
Posts: 8
|
|
« Reply #33 on: December 18, 2015, 04:33:07 AM »
|
|
|
There is a solution previously known. Only needed to be uploaded in offline (in Bootmode). But if you start disassembling you can make a good job. As you know KWP2000 protocol have security access and you need to authorize to get access to read/write functions. Is it possible to find the mechanism of forming the hash of seed-key? (if you understand me  ) I can explain what to look for. |
|
|
|
|
Logged
|
|
|
|
Cloudforce
Full Member
Karma: +5/-13
Offline
Posts: 106
|
|
« Reply #34 on: December 18, 2015, 05:29:36 AM »
|
|
|
There is a solution previously known. Only needed to be uploaded in offline (in Bootmode). But if you start disassembling you can make a good job. As you know KWP2000 protocol have security access and you need to authorize to get access to read/write functions. Is it possible to find the mechanism of forming the hash of seed-key? (if you understand me ) I can explain what to look for. I have no idea  I would just try the same approach as used at MS43/42. i don´t think its to much hassle to work with bootmode, but if you are aware of a different solution, i´d definately be interested in this. Everything that makes it easier for others would be awesome for the community |
|
|
|
|
Logged
|
|
|
|
AG
Newbie
Karma: +0/-0
Offline
Posts: 8
|
|
« Reply #35 on: December 18, 2015, 05:42:36 AM »
|
|
|
It is not too hassle to work in boot mode but it is interresting to try change readonly areas online.
|
|
|
|
|
Logged
|
|
|
|
AG
Newbie
Karma: +0/-0
Offline
Posts: 8
|
|
« Reply #36 on: December 18, 2015, 05:51:47 AM »
|
|
|
About IMMO disabling just put FF into 3ee7 and upload in bootmode
|
|
|
|
|
Logged
|
|
|
|
Cloudforce
Full Member
Karma: +5/-13
Offline
Posts: 106
|
|
« Reply #37 on: December 18, 2015, 06:56:57 AM »
|
|
|
About IMMO disabling just put FF into 3ee7 and upload in bootmode
Looking very interesting |
|
|
|
|
Logged
|
|
|
|
Cloudforce
Full Member
Karma: +5/-13
Offline
Posts: 106
|
|
« Reply #38 on: December 18, 2015, 10:23:44 AM »
|
|
|
I´ve seen there is a Launch-Control solution for the stock ecu from bytetronik?! Anyone having info on that?
|
|
|
|
|
Logged
|
|
|
|
AG
Newbie
Karma: +0/-0
Offline
Posts: 8
|
|
« Reply #39 on: December 18, 2015, 12:19:35 PM »
|
|
|
You have to put rev limiter for Gear 0.
When you will satart moving ECU will determine 1st gear and jump to new limiter.
In my case it is not very intetesting because after I release clutch revs jumps to max sliping front wheels.
I have to regulate throttle to have good start. I think it will be better to have torque based gear limiter.
|
|
|
|
« Last Edit: December 19, 2015, 05:34:12 AM by AG »
|
Logged
|
|
|
|
Cloudforce
Full Member
Karma: +5/-13
Offline
Posts: 106
|
|
« Reply #40 on: December 18, 2015, 02:05:00 PM »
|
|
|
Do you know the actual approach bytetronik did? Did they modify the code like ME7.* folks or is it simpler solution like neutral gear rev limit?
|
|
|
|
|
Logged
|
|
|
|
AG
Newbie
Karma: +0/-0
Offline
Posts: 8
|
|
« Reply #41 on: December 18, 2015, 02:10:58 PM »
|
|
|
Neutral gear limit. Have it. And what is modify like ME7?
|
|
|
|
|
Logged
|
|
|
|
Cloudforce
Full Member
Karma: +5/-13
Offline
Posts: 106
|
|
« Reply #42 on: December 19, 2015, 12:04:26 AM »
|
|
|
ME7 folks modify the code to get some more realistic launch control and no-lift shift. Thats why i´m really interested in the EMS2000 solution, as MS43 (which i´m mostly interested in) is pretty similar.
We also have the gear dependant rev limiter, i just haven´t found someone to test it. Regarding your ecu and the rev limiter stoping to work to early: I guess there is a similar constant at EMS2000... maybe this could help?
c_vs_min_gear_1 "3km/h"
|
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #43 on: December 19, 2015, 01:31:45 AM »
|
|
|
Seems you´re right, even though i have no idea why It's in ze code |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #44 on: December 19, 2015, 01:34:09 AM »
|
|
|
You don't need to read 29F400 or read C167 in BootMode to get fullflash.
But you have to upload your disabled-EWS-rom in BootMode because the record "EWS signal to start" is in write-protected area and it can't be changed online. (There is opportunity to do it online, but has not been studied yet)
As I can found there is no Ext RAM on the circuit board.
I assume you use a bootloader, just needs modified.. |
|
|
|
|
Logged
|
|
|
|
|
