Ready
Current FW
GW_SW_V3.2.1
Target FW
GW_SW_V3.3.0
Binary Size
16,384 bytes
Block Size
512 bytes
Waiting to start...0%

Flash Protocol Reference

1. Programming Session (0x10 02)

Switch from Default to Programming session. Enables flash services (34/36/37) and routine control for memory erase.

2. Security Unlock (0x27)

Seed-key challenge. Server sends random seed, client computes key using OEM algorithm. Here: Key = Seed XOR 0x5A5A

3. Pre-Programming Check (0x31 01 FF 00)

Verify ECU is ready for programming. Checks: battery voltage, vehicle speed = 0, engine off, communication OK.

4. Erase Memory (0x31 01 02 01)

Erase the application flash memory sector. ECU enters bootloader mode. Cannot be interrupted - power loss here = bricked ECU.

5. Request Download (0x34)

Negotiate download parameters: compression, address range, memory size. ECU responds with max block length for TransferData.

6. Transfer Data (0x36)

Send firmware in sequential blocks. Each block has a counter (01-FF, wraps). ECU writes to flash as data arrives.

7. Transfer Exit (0x37)

Signal all data sent. ECU verifies CRC/checksum of received data against expected value.

8. Check Dependencies (0x31 01 02 02)

Verify all programming dependencies: SW compatibility, calibration match, bootloader version. Critical safety check.

9. ECU Reset (0x11 01)

Hard reset. ECU boots with new firmware. If dependency check passed, application starts. Otherwise, stays in bootloader.

Flash Bootloader SimulatorReady