BMW M3 MS41.1 FULL flash immo off

[dd1]

i have a bmw m3 e36 1997, read the full flash, ab28f200, for immo off. please help me here, thank you in advance. dme swap

[kiszka]

i have a bmw m3 e36 1997, read the full flash, ab28f200, for immo off. please help me here, thank you in advance. dme swap

this reading is total scrap (empty)

[dd1]

Strange. I have used my new GQ 4x4 and when it reads it won't show me anything, so jut saved it. Ok will give it another try. Is there any trick to reading with GQ? Thank you

[brend]

A normal programmer will always notify if something is wrong (like verify after reading or before reading check all pins and chip id..,..)
If yours GQ 4x4 read this like thats like all ok ..... I think just throw it away and bay samething better good one!

[Lambda1]

US M3 should be MS41.2 ?!
here you got correct file with immo off and chks.

[kiszka]

US M3 should be MS41.2 ?!
here you got correct file with immo off and chks.

:banghead: :banghead: :banghead: :questionmark: :questionmark: :questionmark:
You, the eggs do with DD1


BMW M3 MS41.1 FULL flash immo off (https://www.digital-kaos.co.uk/forums/showthread.php/748148-BMW-M3-MS41-1-FULL-flash-immo-off)

i have a bmw m3 e36 1997, read the full flash, ab28f200, for immo off. please help me here, thank you in advance. dme swap

[Lambda1]

US M3 got MS41.2 or Bosch M3.3.1 ... depend on which one. MS41.1 is normal B28, B25 (Compact Euro 3). So come down.

[kiszka]

US M3 got MS41.2 or Bosch M3.3.1 ... depend on which one. MS41.1 is normal B28, B25 (Compact Euro 3). So come down. :bs:
I see that DD1 does not know what it has, you know better about it
you do not even need an ecu number
congratulations for perfect knowledge about BMW
you can answer 1 question to me
Do you have such a wish
not to bother you, in the BMW topic

[dd1]

according to VIN, its a m3 e36. dme number is 1405854, ms41.1 siemens 5wk9 0172. this is the info. i dont have the car with me. but i have both DMEs here. i am trying to read the flash again

[Lambda1]

Ah thanks.
So here is MS41.1 M3 with EWS delete for anybody who need. Didnt know about this also in U3M3 (cant know everything ... thats job of other guys here :), ms41.2 would also works) only got one time one here and this had ms41.2!
MS41.1 in europe only in 323ti EU3.

[dd1]

thank you, can you guys look at this flash, i managed to read it. just want to make sure the programmer is working properly. thank you in advance

[Lambda1]

yes this time is good.
Attached immo off.

[dd1]

LAMBDA1, I wrote your file, and it's still EWS error, cranks and won't start. I even cut the green and yellow wire, no luck, on ews. Question was I supposed to Erase and write or just write would have been ok? Was this file plug and play or ews adjustment were needed? Thank you

[Lambda1]

File ist p&p, no need to cut anything.
if ews modul is defect than you need to delete em and bridge wire 1+3. No cut of any wire in x20.
You overright your file with this one (true fullread) so also uefi... so got mine vin...
File is tested and works for 100%. So your failure must be on other way.
Which dtc codes ou get?

Edit: Did you chks?

[dd1]

They scanned, fault code for ews error. The original dme is dead, they had charged the car backwards. No comm with the original dme. This used dme I had communication before I did any work. It cranks but no start. In the dme ews fault code. So I write this file now?????

[Lambda1]

Use this file than. I post above its chks corrected, didnt think about your tools maybe didnt do this job...
file is okay.

[brend]

Both sulution just crap and about immo off just nothing done.
Probably another sulutions is same.............:biggrin:


Ah thanks.
So here is MS41.1 M3 with EWS delete for anybody who need. Didnt know about this also in U3M3 (cant know everything ... thats job of other guys here :), ms41.2 would also works) only got one time one here and this had ms41.2!
MS41.1 in europe only in 323ti EU3.


yes this time is good.
Attached immo off.











thank you, can you guys look at this flash, i managed to read it. just want to make sure the programmer is working properly. thank you in advance


Immo off..................623581
PW PM.

[Lambda1]

Bit 8 is immo controllbit... isnt something new, used by thousands of peoples in RR... which disamble ms41.x code...
Also isnt something new that you need to add 128 and which to hex ... so if you dont know dont tell something about ;9623786
Here you see solution for flashable ecus. 14008 in fullread, dec to hex => x+128=y=>h =solution after this CHKS (I had forget in first files).
(in file 16h=22d +128=150d=>96h). So immo off byte is 96 in 14008 and chks.

CHKS is in 1404E and 1404F ...

[brend]

You talk too much!


Nice and beautiful information !
But only one problem from all this.........It's totaly crap which not work!!!........lol







Bit 8 is immo controllbit... isnt something new, used by thousands of peoples in RR... which disamble ms41.x code...
Also isnt something new that you need to add 128 and which to hex ... so if you dont know dont tell something about ;9623786
Here you see solution for flashable ecus. 14008 in fullread, dec to hex => x+128=y=>h =solution after this CHKS (I had forget in first files).
(in file 16h=22d +128=150d=>96h). So immo off byte is 96 in 14008 and chks.

CHKS is in 1404E and 1404F ...

[dd1]

You talk too much!

BREND, You the man. thank you. worked very well. LAMBDA1, i believe in you.

[darkplanet]

Both sulution just crap and about immo off just nothing done.
Probably another sulutions is same.............:biggrin:






Immo off..................623581
PW PM.



Could I possibly have password for this? I believe this is what I need still researching...

[brend]

Load original dump!



Could I possibly have password for this? I believe this is what I need still researching...