[Mik325tds]

Originally Posted by Whitbread

I'm with him ^ LOL. Sad to hear the flash this weekend didn't work Mike.

Something Mike and I discussed at lunch the other day is ford used this 6hp26 trans in quite a few different applications. The two that stand out to me for tuning resources is the aussie falcon platform and the american jag xk/xk8/xkr models. This company advertises tcu tuning for the falcons.

I remember that this idea was brought up before. We'd need a gateway that translates the CAN messages in both directions. Not terribly hard to do. I guess swapping the trannies would be the most involved.
Does anyone have the full CAN databases for the E89x?

[DWR]

Yeap, if we were driving Fords this would all be much simpler... but then, we would be driving Fords.

HP Tuners allows access to the Aussie Ford TCUs. I used it and some Ford maps to find maps in our trans. Could put a Ford TCU into our trans, but I doubt CAN messaging would work. Wondering if it would be possible to get Alpina TCUs?

[_TB_]

I'm trying to compare some different files for the same HW# 7591971, but I need the *.0da file for ZUSB: 7582274

So far I have been comparing 7603529 and 7615835 and it is interesting..

Seems to dump is 16bit HiLo. There are a lot of maps changed - and a lot of data that is the same..


EDIT: Has anybody considered that the number in the $REFERENZ line also is in the beginning of the hex file?

..What happens if we change the REFERENZ line AND the number in the hex - and then recalculate the checksum in the *.0da file?
If we could find the address for the checksums in the hex file (not the WinKFP checksum's!) then we should be able to write the file and get a working gearbox.

..normally when remapping - the RSA encryption is done by the tool - we "only" need to calculate the checksum in the binary that we write to the ecu. I cannot see why it should be any different here?

[Len_Beach]

Looks like great progress is being made here.

To clarify; are you Guys trying to flash an Alpina file as is or are you looking to understand what prevents/allows a flash?

Surely the Alpina flash wouldn't fit the characteristics of a diesel?

[DWR]

Originally Posted by Len_Beach

Surely the Alpina flash wouldn't fit the characteristics of a diesel?

It does when the Alpina is a diesel.

[RBT-Tuning]

Originally Posted by _TB_

I'm trying to compare some different files for the same HW# 7591971, but I need the *.0da file for ZUSB: 7582274

So far I have been comparing 7603529 and 7615835 and it is interesting..

Seems to dump is 16bit HiLo. There are a lot of maps changed - and a lot of data that is the same..


EDIT: Has anybody considered that the number in the $REFERENZ line also is in the beginning of the hex file?

..What happens if we change the REFERENZ line AND the number in the hex - and then recalculate the checksum in the *.0da file?
If we could find the address for the checksums in the hex file (not the WinKFP checksum's!) then we should be able to write the file and get a working gearbox.

..normally when remapping - the RSA encryption is done by the tool - we "only" need to calculate the checksum in the binary that we write to the ecu. I cannot see why it should be any different here?

You're right, but in this case we have no tool, which takes care of the signature. NCSDummy can calculate the CHKS but it won't calculate the RSA. The reference# is included in the comments section at the beginning of the 0da file, and 3 times in the binary which is flashed. Changing the reference in the binary leads (likely) to a faulty signature and therefore rejection of the file. TCU stays in boot mode afterwards.

[Mik325tds]

Originally Posted by Len_Beach

Surely the Alpina flash wouldn't fit the characteristics of a diesel?

Originally Posted by DWR

It does when the Alpina is a diesel.

Not quite right. There are in fact two different Alpina flashes being talked about. One is the Alpina B3 (Gasser, uses our tranny) and the other is the Alpina D3 (Diesel, uses double clutch 8 speed, I believe).
The D3 is incompatible with our tranny for obvious reasons, while the B3 is very close to our HW but does have the aforementioned problem from Len_Beach , that the shift points are a bit too high under full fueling conditions. This will lead to the effect that sometimes the B3 Cal won't shift under full fueling conditions while the engine hangs in the RPM limiter when used on a diesel engine. At least that's what I have red somewhere.

If we ever get the Alpina B3 SW to run on our tranny, that's definitely something to watch out for.

[Mik325tds]

Originally Posted by Len_Beach

To clarify; are you Guys trying to flash an Alpina file as is or are you looking to understand what prevents/allows a flash?

The hope was to be able to flash the Alpina files as they are. We can't modify the files since they are protected by a RSA signature.

[DWR]

Originally Posted by Mik325tds

Not quite right. There are in fact two different Alpina flashes being talked about. One is the Alpina B3 (Gasser, uses our tranny) and the other is the Alpina D3 (Diesel, uses double clutch 8 speed, I believe).

Depends on the model year Alpina D3 we are talking about. I assumed we were talking about the optional six speed automatic version found in earlier years - perhaps they are not 2nd gen ZFs or HW compatible? As you so rightly point out, the 8 speed has no place in this conversation (unless we want to discuss swapping trans).

Also, the manual six speed transmission was allowed a 5,200 rpm redline, so reving the engine past our current shift points should not be a problem. The problem is the B3 full fuel 6,800 rpm shift points are not appropriate for the diesel. Personally, I'd give up automatic controlled full fueling shifts for fastser shifting. What I think some folks are not going to like is slightly higher shifts under light load - me included. After all, we are driving a diesel with plenty of torque.

[shnaggs]

Originally Posted by DWR

Depends on the model year Alpina D3 we are talking about. I assumed we were talking about the optional six speed automatic version found in earlier years - perhaps they are not 2nd gen ZFs or HW compatible? As you so rightly point out, the 8 speed has no place in this conversation (unless we want to discuss swapping trans).

Also, the manual six speed transmission was allowed a 5,200 rpm redline, so reving the engine past our current shift points should not be a problem. The problem is the B3 full fuel 6,800 rpm shift points are not appropriate for the diesel. Personally, I'd give up automatic controlled full fueling shifts for fastser shifting. What I think some folks are not going to like is slightly higher shifts under light load - me included. After all, we are driving a diesel with plenty of torque.

^^^this, plus I'm sure the alpina b3 will most likely downshift more often with lighter fueling/tps readings, which would piss me off. I think our stock trans tune does this already. We have torque monsters, let the engine do what it's good at doing!

But I'd be all into faster shifts, even if I had to use the flappy paddles all the time.

[RBT-Tuning]

Found another interesting discussion on the net: http://nefariousmotorsports.com/foru...?topic=453.165

I didn't manage to register until now, but there are a lot of guys with reverse engineering knowledge! Loot at the post from user "prj" !?

[Mik325tds]

Originally Posted by DWR

Depends on the model year Alpina D3 we are talking about. I assumed we were talking about the optional six speed automatic version found in earlier years - perhaps they are not 2nd gen ZFs or HW compatible? As you so rightly point out, the 8 speed has no place in this conversation (unless we want to discuss swapping trans).

Also, the manual six speed transmission was allowed a 5,200 rpm redline, so reving the engine past our current shift points should not be a problem. The problem is the B3 full fuel 6,800 rpm shift points are not appropriate for the diesel. Personally, I'd give up automatic controlled full fueling shifts for fastser shifting. What I think some folks are not going to like is slightly higher shifts under light load - me included. After all, we are driving a diesel with plenty of torque.

I wasn't aware that there is an earlier D3. Do you know which ZB-Nr that would be? I'd be happy to give it a shot.
Yes, the B3 might be a disappointment to drive with the leaping tigers. But I think we are so desperate that we'd take any improvement in shift behavior over what we have now.

[DWR]

Originally Posted by RayBan81

Found another interesting discussion on the net: http://nefariousmotorsports.com/foru...?topic=453.165

I didn't manage to register until now, but there are a lot of guys with reverse engineering knowledge! Loot at the post from user "prj" !?

Nice find! Can you shoot him a PM to see if he has more info on the RSA bootloader patch? That's really what we need.

[DWR]

Originally Posted by Mik325tds

I wasn't aware that there is an earlier D3. Do you know which ZB-Nr that would be? I'd be happy to give it a shot.
Yes, the B3 might be a disappointment to drive with the leaping tigers. But I think we are so desperate that we'd take any improvement in shift behavior over what we have now.

Sorry, I've looked high and low and can't find the ZB-Nr.

[Mik325tds]

Originally Posted by DWR

Nice find! Can you shoot him a PM to see if he has more info on the RSA bootloader patch? That's really what we need.

^^^ YES, YES, YES! Bootloader patch. I want it!

[808AWD325xi]

I found the Linkedin profile of a former ZF engineer that developed a generic bootloader:
https://www.linkedin.com/in/alexey-andreev-6588a378

[DWR]

Originally Posted by 808AWD325xi

I found the Linkedin profile of a former ZF engineer that developed a generic bootloader:
https://www.linkedin.com/in/alexey-andreev-6588a378

Amazing. Simply amazing.

Who can run with this? I'd volunteer, but just don't have the background to support an intelligent dialog with this guy.

[Whitbread]

Originally Posted by DWR

... but just don't have the background to support an intelligent dialog with this guy.

Probably the only time this phrase will ever appear around here


On a serious note, simply awesome to find someone who's been on "the inside". If we can get this auto tuned up, maybe I'll keep it as the only auto vehicle I've ever owned and not swapped to a manual.

[_TB_]

Alpina D3 (2.0L Diesel with a ZF6HP19TU gearbox): ZUSB: 7603531
Alpina B3 (Old version, ZF6HP19TU): ZUSB: 7603529
Alpina B3 (newer version, ZF6HP19TU) ZUSB: 7615835

I have tried all three in my 325d. The D3 version has no issues shifting @ WOT - but runs with higher revs, and shifts later.
The two B3 versions are very similar - I have not found any big differences between them yet. Super smooth in D, really quick shifting in M. S shifts too late for my taste, so I never use S.

It runs with rather low revs, shifts at 1500 rpm when puddling around. Is it would be able to change gears @ WOT properly, then it would be ideel for the 3.0L Diesel.

I'm pussled a bit about the two Alpine files, looking at the 0da files it *looks* like the old one is for a N57 and the newer one is for a N54. Anybody have comments about this?


EDIT: Apparently 7603537 is also an Alpine file, for N55. (Apparently it shifts later than the other Alpina files) And there is a "Z4 Sport" file: 7601494

[Yozh]

Originally Posted by 808AWD325xi

I found the Linkedin profile of a former ZF engineer that developed a generic bootloader:
https://www.linkedin.com/in/alexey-andreev-6588a378

Wonder if he would be more receptive if approached in his native language. I can write to him, just need to know what we want to find out from him.

[Mik325tds]

Originally Posted by Yozh

Wonder if he would be more receptive if approached in his native language. I can write to him, just need to know what we want to find out from him.

Yozh, that would be great. Please ask him if he has any advice on how to replace the current bootloader of our tranny with a boot loader that doesn't check for the RSA signature. And, of course, if he has such a bootloader ;-).
Thanks!

[Mik325tds]

Originally Posted by _TB_

Alpina D3 (2.0L Diesel with a ZF6HP19TU gearbox): ZUSB: 7603531
Alpina B3 (Old version, ZF6HP19TU): ZUSB: 7603529
Alpina B3 (newer version, ZF6HP19TU) ZUSB: 7615835

I have tried all three in my 325d. The D3 version has no issues shifting @ WOT - but runs with higher revs, and shifts later.
The two B3 versions are very similar - I have not found any big differences between them yet. Super smooth in D, really quick shifting in M. S shifts too late for my taste, so I never use S.

It runs with rather low revs, shifts at 1500 rpm when puddling around. Is it would be able to change gears @ WOT properly, then it would be ideel for the 3.0L Diesel.

I'm pussled a bit about the two Alpine files, looking at the 0da files it *looks* like the old one is for a N57 and the newer one is for a N54. Anybody have comments about this?


EDIT: Apparently 7603537 is also an Alpine file, for N55. (Apparently it shifts later than the other Alpina files) And there is a "Z4 Sport" file: 7601494

Thanks _TB_. Found them in the GKE215 folder. Unfortunately, they are also based on the HW reference 9SA0T = won't work.