[hassmaschine]

it's not a different OS. it's just a config byte. the A2L/Damos bin is even older than the Z4, and it's 95% identical to the newest 330i file.

[antiprofi]

Originally Posted by hassmaschine

it's not a different OS. it's just a config byte. the A2L/Damos bin is even older than the Z4, and it's 95% identical to the newest 330i file.

It doesn't matter if it's one bit or one MByte because I cannot use it without modification and I'm not able to modify it

[rjahl]

Originally Posted by hassmaschine

it's not a different OS. it's just a config byte. the A2L/Damos bin is even older than the Z4, and it's 95% identical to the newest 330i file.

There is a single byte that defines the chassis. Hass we fixed that one some time ago so you could run my z4 file in your car.

[hassmaschine]

Originally Posted by antiprofi

It doesn't matter if it's one bit or one MByte because I cannot use it without modification and I'm not able to modify it

well you can it's just a matter of knowing where.. I'm working on it lol.

yes, I can't remember the specific byte. also, did they update the modules in the later Z4s?

[rjahl]

Originally Posted by hassmaschine

well you can it's just a matter of knowing where.. I'm working on it lol.

yes, I can't remember the specific byte. also, did they update the modules in the later Z4s?

After looking at the 330 tune and the custom 3.0SI tune it looks like he only needs to swap the c_var_veh value to the 3.0SI calibration section, splice it and flash it.

There are a lot of other values in the tuned calibration file that are better suited to the Z4 and I'd probably start with the 330I file and spice in the tuned maps/values that I wanted. More work but probably a better approach.

The 3.2 Liter tune changed far less then I had expected. No Vanos, lambda or Disa changes made?

Oh ya, another one with Intake Valve lift settings at 11 mm.

Microprocessor images are 100% match and they both use 921 calibration files.

[Terraphantm]

Originally Posted by bNks334

My initial goal was to buy a KWP 2000 plus dongle to simply read/write an OTS tune to my DME via OBD. It doesn't seem like any of these generic cables will actually be able to write? None of them seem to support higher than MSV70? Can the Galletto dongle pull BDM data from the cars OBD port? Does that require jumping pins too? Is OBD tuning even possible with the MSV80.1 yet? I just cant find any answers to these basic questions to get started!

Problem with OBD writing on the MSV80 (and the MSV70, and for that matter the MS45) is RSA protection. There's a 64 byte (512 bit) signature shortly after the checksum.

Apparently it's not too hard or expensive to crack a 512-bit private key with some time on the Amazon EC2 cloud. http://arstechnica.com/security/2015...the-weak-keys/

Edit: Actually MSV70/80 seem to have a 1024-bit signature. So cracking that key is pretty much impossible.

[stewey]

Hi guys, I've been following this thread for a while, but it's a bit tough to see the big picture as a casual observer.

Hass, could you summarize your progress? Are you sharing your tune openly and would it make sense for others to run with it? What does it do? Does it activate the DISA valves? Does it raise or firm up the rev limiter?

Thanks! Stew

[hassmaschine]

having a tune that I can give out isn't really the end goal - for myself, I want to be able to easily modify the DME without spending hours searching for hex strings or wondering what things do. I still consider the tune "experimental". It's definitely stronger/smoother than stock, and I did dyno some gains (although that was ages ago when it was still early), but I wouldn't say it's commercially viable.

I've tweaked a lot of stuff - getting rid of the annoying soft limiter was definitely high on my list. I'd say it's there now (although I don't often tag the limiter). Changes to ignition, vanos, fuel, and DISA. I don't seem to feel the "dip" that others claim to have with their 3 stage intakes nor do I have issues with throttle response.

I'd also like to encourage more DIY tuning - the DME is treated like a mysterious black box that only German mad scientists can understand, so people pay for garbage like the BMS PBX when those resources could have been used for a real improvement.

[rjahl]

Originally Posted by hassmaschine

having a tune that I can give out isn't really the end goal - for myself, I want to be able to easily modify the DME without spending hours searching for hex strings or wondering what things do. I still consider the tune "experimental". It's definitely stronger/smoother than stock, and I did dyno some gains (although that was ages ago when it was still early), but I wouldn't say it's commercially viable.

I've tweaked a lot of stuff - getting rid of the annoying soft limiter was definitely high on my list. I'd say it's there now (although I don't often tag the limiter). Changes to ignition, vanos, fuel, and DISA. I don't seem to feel the "dip" that others claim to have with their 3 stage intakes nor do I have issues with throttle response.

I'd also like to encourage more DIY tuning - the DME is treated like a mysterious black box that only German mad scientists can understand, so people pay for garbage like the BMS PBX when those resources could have been used for a real improvement.

How do you see turning N52 DME tuning into a DYI project? A certain tablet seems to have come close but somehow they missed the mark with the N52 owners.

[justpete]

Originally Posted by rjahl

How do you see turning N52 DME tuning into a DYI project? A certain tablet seems to have come close but somehow they missed the mark with the N52 owners.

Wouldn't all we need is the appropriate xdf file and some general guidelines, things not to change, etc.?

[hassmaschine]

Xdf yes, but I'm thinking more than that. Tunerpro has some serious limitations, especially on a modern dme with 9,000 parameters. It doesn't scale up that well. Making a basic Xdf is the low hanging fruit.

A more open flashing tool is a goal as well. Especially for msv80 - bdm is awesome on msv70, but 80% of n52 cars are msv80. I'm just more focused on msv70 since thats what i have and its easier to hack.

[hassmaschine]

Originally Posted by rjahl

How do you see turning N52 DME tuning into a DYI project? A certain tablet seems to have come close but somehow they missed the mark with the N52 owners.

The tablet is really just a flashing tool. On its own, it can't really do "tuning". It just happens that the OFT is the only product that lets you modify your own binaries - i wouldn't say it missed the mark, but rather people don't really understand what it does. The poor support isn't helpful (I've seen the xdfs that come with it, they are useless). But if you were motivated it would be very useful for msv80 folks (BDM is still the best choice for msv70 by far).

[rjahl]

Originally Posted by hassmaschine

Xdf yes, but I'm thinking more than that. Tunerpro has some serious limitations, especially on a modern dme with 9,000 parameters. It doesn't scale up that well. Making a basic Xdf is the low hanging fruit.

A more open flashing tool is a goal as well. Especially for msv80 - bdm is awesome on msv70, but 80% of n52 cars are msv80. I'm just more focused on msv70 since thats what i have and its easier to hack.

On this note;
Has anyone been keeping track of Gini by Gini?

http://www.e90post.com/forums/showth...125073&page=45

http://www.e90post.com/forums/showth...hlight=dr+gini


Seems like he has teamed up with Revtor to some degree and is building a new interface for Ediabas. Now could you imagine having this type of software with the built in ability to flash custom files via ODB? He looks like he can now flash none RSA protected modules.

[hassmaschine]

I think there are likely lots of ways it can be flashed via OBD. aside from EDBIAS, we could also use KWP2000, and maybe even CAN. It's something on the back of my mind, but I'd have to do a lot of learning to say much more.

[Terraphantm]

Originally Posted by hassmaschine

I think there are likely lots of ways it can be flashed via OBD. aside from EDBIAS, we could also use KWP2000, and maybe even CAN. It's something on the back of my mind, but I'd have to do a lot of learning to say much more.

Wouldn't you need to figure out the RSA protection? Maybe we could bypass the routines or make our own private/public key combination, but that would require a boot sector modification to the DME at minimum.

[hassmaschine]

Thats what i dont understand fully. I havent had to do anything like that to flash via bdm. Is it the obd flash routines that are protected by rsa? Is that how AA gets around it?

[stewey]

Originally Posted by hassmaschine

having a tune that I can give out isn't really the end goal - for myself, I want to be able to easily modify the DME without spending hours searching for hex strings or wondering what things do. I still consider the tune "experimental". It's definitely stronger/smoother than stock, and I did dyno some gains (although that was ages ago when it was still early), but I wouldn't say it's commercially viable.

I've tweaked a lot of stuff - getting rid of the annoying soft limiter was definitely high on my list. I'd say it's there now (although I don't often tag the limiter). Changes to ignition, vanos, fuel, and DISA. I don't seem to feel the "dip" that others claim to have with their 3 stage intakes nor do I have issues with throttle response.

I'd also like to encourage more DIY tuning - the DME is treated like a mysterious black box that only German mad scientists can understand, so people pay for garbage like the BMS PBX when those resources could have been used for a real improvement.

Thank you for the summary!! I have a 325i with the MSV70. My next project is the 3IM. Would your tune unleash the DISAs? Would it make sense for me to do that vs. AA? Might be fun and save a few bucks in the process. I'm a software engineer (with no experience tuning) if that influences your advice.

[hassmaschine]

yeah you can definitely enable the 3 stage with your DME. It should be fairly trivial for you actually - we already know how to make a 3 stage tune for the single stage cars using the entire 330i file and splicing a couple changes.

[stewey]

Sweeeet! Time to order some bits. I have INPA, etc. setup, but I take it I need a BDM cable? Also should I be working on a second DME or can I work directly in the one I have. This is my daily so....

[hassmaschine]

Originally Posted by stewey

Sweeeet! Time to order some bits. I have INPA, etc. setup, but I take it I need a BDM cable? Also should I be working on a second DME or can I work directly in the one I have. This is my daily so....

I would get BDM. Clone the entire contents of your original DME to the "test" DME. Then if something ever goes wrong, you can always stick the stock DME back in. I think both rjahl and I have benefited from that approach. Plus you can bench flash & test things before putting it into your car.

[rjahl]

Originally Posted by hassmaschine

I would get BDM. Clone the entire contents of your original DME to the "test" DME. Then if something ever goes wrong, you can always stick the stock DME back in. I think both rjahl and I have benefited from that approach. Plus you can bench flash & test things before putting it into your car.

+1

The second DME is cheap insurance.

Although they don't seem to be that cheep anymore. I bought mine for $60.00 but I don't see deals like that anymore.

[rjahl]

Originally Posted by hassmaschine

Thats what i dont understand fully. I havent had to do anything like that to flash via bdm. Is it the obd flash routines that are protected by rsa? Is that how AA gets around it?

Hass,

I tried flashing ODB flashing a file with the bytes swapped in the OPA section like we have been discussing and the ECU accepted the file like an original BMW file. No error on the flash.

I used the Galletto ODB plug and I have not validated if it will run in the car. But previous attempts to get a custom file flashed via ODB always failed at the end of the the flash routine. Original files were never a problem.

We had a power failure at the house this evening so my time on this was limited.