+- CarTechnoloGY (https://cartechnology.co.uk)
+-- Forum: All About IMMO/ECU , ChiPTuninG , Dashboard , Locksmith , AirbaG , Carradio (https://cartechnology.co.uk/forumdisplay.php?fid=3)
+--- Forum: IMMO & LOCKSMITH (https://cartechnology.co.uk/forumdisplay.php?fid=9)
+--- Thread: Solved ✔ EWS3 ME7.2 Location 4 (/showthread.php?tid=38648)
Pages:
1
2
EWS3 ME7.2 Location 4 - mugenman1111 - 21-08-2018
Can anyone tell me what hex offset EWS location is at?
I have read conflicting information and havent had any good results yet
One is supposed to be located at 0x5A (if read is partial read through galletto) you can toggle this from 0->1 and EWS is off ??? Not working
Another way is to "virginize" DME but Only solution documented is via BDM =
Clear master side 0x4800->0X5D11
clear master side 0x5D50->0x7FFF
Clear slave side 0x3FE4->0X5D00
Clear slave side 0x0x5D80->0x7fff
This will put DME in "virgin" state and can be updated with WinFKP with your VIN and aligned with EWS in INPA
Can anyone comment EWS3 byte location for me7.2 BMW
Solution is as follows
(21-08-2018, 19:38 PM)Enabled Wrote: Where do you get your info? Almost all of that is wrong or more difficult.
Read ME7.2 in boot mode, 29F400 flash:
Just write FF from 0xFD3C to 0xFD43, and/or 0x1FD3C to 0x1FD43 and/or 0x3FD3C to 0x3FD43...
run the one time EWS sync, and start car.
RE: EWS3 ME7.2 Location - Enabled - 21-08-2018
Where do you get your info? Almost all of that is wrong or more difficult.
Read ME7.2 in boot mode, 29F400 flash:
Just write FF from 0xFD3C to 0xFD43, and/or 0x1FD3C to 0x1FD43 and/or 0x3FD3C to 0x3FD43...
run the one time EWS sync, and start car.
RE: EWS3 ME7.2 Location - mugenman1111 - 21-08-2018
(21-08-2018, 19:38 PM)Enabled Wrote: Where do you get your info? Almost all of that is wrong or more difficult.
Read ME7.2 in boot mode, 29F400 flash:
Just write FF from 0xFD3C to 0xFD43, and/or 0x1FD3C to 0x1FD43 and/or 0x3FD3C to 0x3FD43...
run the one time EWS sync, and start car.
TBH I have a feeling this info i have gathered is from the wrong DME but on bimmerforums only place i could find
This will allow me to sync (or clear ISN but how to just disable EWS on ms43 it is a 60 00 string and you toggle 00 to 01 i believe.... dont quote me\)
I am not unfamiliar with disassembly but couldnt get IDA to play with my .bin properly
RE: EWS3 ME7.2 Location - Enabled - 22-08-2018
EWS delete on MS42, MS43, and ME 7.2 are difficult programming code hacks (=requires programming experience). None of them are a few simple byte changes. But they're easy to virginize. Looking at your other posts, I see you have done a boot mode, so you're halfway there.
RE: EWS3 ME7.2 Location - mugenman1111 - 22-08-2018
(22-08-2018, 02:27 AM)Enabled Wrote: EWS delete on MS42, MS43, and ME 7.2 are difficult programming code hacks (=requires programming experience). None of them are a few simple byte changes. But they're easy to virginize. Looking at your other posts, I see you have done a boot mode, so you're halfway there.
Boot mode was easy enough once I found some documentation on the pinout. Have cloned my DME to another unit as well as cloned my EWS off DME to another unit.... was just more curious to look at the EWS structuring but i presume i will have to dis assemble the binary to dig into that stuff
I have a ews off 7.2 for my main vehicle was more curious to investigate things in a diff styled format on my me7.2 stock dump vs my EWS off dump (my ews module is broken )
Ill keep digging in my stock vs EWS off dump and see if i cant figure it out eventually
having a hell of a time getting IDA to work with these binary files.
I presumed it had something to do with deleting the way the DME stores the rolling code blocks
I dabble in software engineering for fun and have done a lot of low level programming of kernel stuffs for linux / cell phones
This is just another puzzle to figure out. I thank you for pointing to me it is not as simple as a single byte switch that makes my hunt a little easier than searching for a single byte difference and testing that way.
RE: EWS3 ME7.2 Location - Enabled - 22-08-2018
You already have ME7.2 ews flash somewhere? I'm curious.
RE: EWS3 ME7.2 Location - mugenman1111 - 22-08-2018
(22-08-2018, 16:09 PM)Enabled Wrote: You already have ME7.2 ews flash somewhere? I'm curious.
Check PM
RE: EWS3 ME7.2 Location - mugenman1111 - 23-08-2018
Not sure of forum etiquette but this can be closed / marked as resolved
RE: EWS3 ME7.2 Location 4 - Kisu1337 - 25-08-2018
(22-08-2018, 16:28 PM)mugenman1111 Wrote:I am fighting with ME7.2 ews off too, can i have that .bin too?(22-08-2018, 16:09 PM)Enabled Wrote: You already have ME7.2 ews flash somewhere? I'm curious.
Check PM
RE: EWS3 ME7.2 Location 4 - mugenman1111 - 28-08-2018
(25-08-2018, 10:32 AM)Kisu1337 Wrote:(22-08-2018, 16:28 PM)mugenman1111 Wrote:I am fighting with ME7.2 ews off too, can i have that .bin too?(22-08-2018, 16:09 PM)Enabled Wrote: You already have ME7.2 ews flash somewhere? I'm curious.
Check PM
You never PM me back???
