[hassmaschine]

Originally Posted by mattbarn

I have to admit I don't recognize your handle though. I haven't worked at TRM or done much ECU hacking since about 2011, but reading this thread makes me want to get back into it. Amazing work all around!

nando (on r3v) - it's been years though, wouldn't be shocked if you didn't remember me.

no updates on the app recently - been working on a side project at work that is related (in technology) though. Learning how SQL statements work, I should be able to complete the implementation of the database needed for the project creation process. Basically, for it to be able to identify the software you would need to start from as a base.

[tom.gnade]

Originally Posted by hassmaschine

nando (on r3v) - it's been years though, wouldn't be shocked if you didn't remember me.

no updates on the app recently - been working on a side project at work that is related (in technology) though. Learning how SQL statements work, I should be able to complete the implementation of the database needed for the project creation process. Basically, for it to be able to identify the software you would need to start from as a base.

I was a database developer for years. If you need help let me know.

[Levanime]

Originally Posted by tom.gnade

I was a database developer for years. If you need help let me know.

another ex - db developer here, lmk if ull need anything with sql

[hardr85]

I saw a post asking for a review. I fried my DME a year and a half ago and Hass recovered it and added the tune for me on a 2006 330i with a MSV70. I am sure there have been improvements made since then, but it is awesome! It has so much more power, if I keep it in the mid 3k range the car screams, and pulls continuously till the low to mid to high 6k range. I do have primary cat delete and a Dinan Ram air Intake which helps.

I am still chasing a over torque code with limp, but that only happens in low RPM's when overtaking a car on the interstate, "normal driving. If I manually downshift I don't have an issue. It very well not be tune related at all, the added torque could be making a minor air leak more evident to the DME.

I currently work at a BMW dealership, and I have been told to go back stock, and see if it continues, but I don't want to I will keep trying to look for anything else I can to find the cause. Removing the tune will be a last resort.

Thank you Hass, you are the man!

[DickBlisken]

Originally Posted by hardr85

I saw a post asking for a review. I fried my DME a year and a half ago and Hass recovered it and added the tune for me on a 2006 330i with a MSV70. I am sure there have been improvements made since then, but it is awesome! It has so much more power, if I keep it in the mid 3k range the car screams, and pulls continuously till the low to mid to high 6k range. I do have primary cat delete and a Dinan Ram air Intake which helps.

I am still chasing a over torque code with limp, but that only happens in low RPM's when overtaking a car on the interstate, "normal driving. If I manually downshift I don't have an issue. It very well not be tune related at all, the added torque could be making a minor air leak more evident to the DME.

I currently work at a BMW dealership, and I have been told to go back stock, and see if it continues, but I don't want to I will keep trying to look for anything else I can to find the cause. Removing the tune will be a last resort.

Thank you Hass, you are the man!

Nice! I can't wait to be able to flash my MSV80 to 330i spec. Been following this thread since the beginning and can't believe the progress that's been made. Stellar work from these guys.

[6ixSpd]

Bumping for more info! Dying to get this capability so I can join the 3SM club

[L3gion]

Only thanking Hassmachine & Rjahl (and everyone participating in this thread) worth my subscription to the board !

Thanks for the amazing work you've accomplished and shared with us guys !

Two days to read the full topic (even if you lost me a bit once come the "RSA Key" parts) and a lot of thing learned.

Trying to tune myself a 130i E87 EU-Spec 2006 MSV70 your topic helped me a lot, but i've a question, since the beginning of this thread you seems to have more or less all the map address and location to modify the map, by which mean you do that ?

I'm currently spending hours to manually find the maps, and i'm pretty sure that without hints certain value will be just impossible to find this way. (ex : RPM limit...)

P.S. : Sorry if my english is not perfect.

[rjahl]

Originally Posted by L3gion

Only thanking Hassmachine & Rjahl (and everyone participating in this thread) worth my subscription to the board !

Thanks for the amazing work you've accomplished and shared with us guys !

Two days to read the full topic (even if you lost me a bit once come the "RSA Key" parts) and a lot of thing learned.

Trying to tune myself a 130i E87 EU-Spec 2006 MSV70 your topic helped me a lot, but i've a question, since the beginning of this thread you seems to have more or less all the map address and location to modify the map, by which mean you do that ?

I'm currently spending hours to manually find the maps, and i'm pretty sure that without hints certain value will be just impossible to find this way. (ex : RPM limit...)

P.S. : Sorry if my english is not perfect.

Actually it's Hassmachine and Tarraphantm that are the "brains" of this project. My contributions are only brute force efforts.

I would not try to locate maps manually, Find a public version of the MSV70 OLS,damos or A2L file. You will probably not find one that works for the current MSV70 software #931 but there is one floating around for the 720 file. Most of the important maps will be the same but in different locations.
Using WinOls open your current (931)? file along side of the 720 file, align the data and then transfer the map structure from the 720 file to your 921 file. Sometimes this will by one map at a time other times you can pull 20+ maps at a time.

Hassmachine is working on a project that will make all 8,000+ maps of the 931 file available to the public, presumably at a very reasonable cost. I can't provide any details towards timing or costs.

I have not done any work on the DME in a very long time, currently working the transmission remaps. My current tune for the first generation ZF6HP is running really well, but another project car with a diesel ZF transmission is keeping me away from my car.

[hassmaschine]

You will not find all the maps by brute force. part of it was learning disassembly, but a bigger portion was writing my own software to map everything "automagically". I've probably only mapped 5% of the ~9000 parameters by hand. I realized a long time ago that I could spend 10x longer mapping things manually, or spend the same amount of time developing tools to do it better and faster. I estimate there are less than 50 parameters on MSV70 that I haven't mapped, but most of them aren't useful so there's not much motivation for doing so. I have everything that is important already.

The ultimate goal of course is to build a web app that will enable you to tune your own DMEs (beyond MSV70 as well). I am very close, although sidetracked on a work project - many of the things I have developed for work are directly applicable to the tuning app. I intend to get back to it soon.

[L3gion]

Thanks for the advice, i'll go this way to find what i need. For a basic remap thousand of parameters are not usefull; if i'm correct for a soft remap : raise RPM Treshold, disable the "DISA 4th stage" and correct the AFR target. (The car has headers with cat removal an you can smell that the car is running really rich - i've also gotta look at that)

Since that car isn't actually mine but from a close friend i don't wanna touch ignition and cam timing without the possibility to make extensive log.

Originally Posted by rjahl

My current tune for the first generation ZF6HP is running really well, but another project car with a diesel ZF transmission is keeping me away from my car.

The AT is by far the most deceiving point in the 335D and that would be awesome to have a software than can make the shifting less sluggish.

[rjahl]

Originally Posted by L3gion

Thanks for the advice, i'll go this way to find what i need. For a basic remap thousand of parameters are not usefull; if i'm correct for a soft remap : raise RPM Treshold, disable the "DISA 4th stage" and correct the AFR target. (The car has headers with cat removal an you can smell that the car is running really rich - i've also gotta look at that)

Since that car isn't actually mine but from a close friend i don't wanna touch ignition and cam timing without the possibility to make extensive log.



The AT is by far the most deceiving point in the 335D and that would be awesome to have a software than can make the shifting less sluggish.

It's going to take a lot of work to get a good tune on a Cat-Less motor.

I'm going to get corrected but I'll say it anyways, you can expect to adjust something like 20-30 maps/constants. The relocated 02 sensors and air flow changes with the headers alone will cause problems for someone without access to the data or a dyno.

Just changing the rev limits and fueling is not going to do much. You will need to sort out the Vanos timing, soft limiters, cat protection fueling etc.

If you really want to learn and do it yourself, TestO and logging is going to be your best option.

335D transmission, depends if you have first or second generation. Second generation is pretty well supported by Xhp tuning. I'm picking up the older stuff.

[L3gion]

Well, i'm lucky i'm used to the make datalogging with Testo precisely. (Huge thanks to pheno who's here btw) and, hopefully, i should get access to a dyno within few weeks.

I totally agree there is much more to than simple "rise RPM/mod fuel" to have a consistant tune, it's just the way a see myself progress througth the mapping process : first RPM/DISA/AFR, second proper "cat removal" in ECU, third vanos/ignition, fourth... that's the way i see to learn to properly tune this ECU, but maybe i'm wrong. Splitting the process also split the errors

[trevorlee02]

Hopefully this won't get me blasted on here... but... The bbflash text files and others are ones that are sort of older. The latest version was updated in February of this year by the original creator. As some of you on here know, I am the newest developer for that project. Supporting other DME's isn't as difficult as some are making it seem. The key is not to find these secure access keys, but to get around them. There are plenty of ways to do so, but it can only be done one dme at a time since I am the only current developer of the application. I have received help from Terraphantm and a few others that wish to be unnamed but supporting other cars is already completed. If I knew which DME's that you wanted to support then I would definitely add them into the programming. I believe several will be surprised by the latest version which will have late E90 support and possibly even newer vehicle support. The BBApp 2.0 version was released with the sole purpose of testing the cheaper INPA cables. It works great for K-Line; however, the problem with ripping out the BT Cable support means that you don't have access to D-Can vehicles. I conducted a remote test with a guy from Arkansas on his 2010 135i yesterday with a cheap INPA cable and was able to do a write at a time of: 1 minute 31 seconds. A full write was done in 9 min and 52 seconds going through a DCAN protocol. There were several vehicles that were becoming bricked due to the app only writing or reading via a K-Line interface with the BT information not present. I wrote another api structure that has a testing of the protocol before proceeding with either K-Line or D-Can, not based on year as I'm also including various other vehicle makes. If you have other DME's that you would like supported then please let me know, thanks!

Trevor

[rjahl]

Originally Posted by trevorlee02

Hopefully this won't get me blasted on here... but... The bbflash text files and others are ones that are sort of older. The latest version was updated in February of this year by the original creator. As some of you on here know, I am the newest developer for that project. Supporting other DME's isn't as difficult as some are making it seem. The key is not to find these secure access keys, but to get around them. There are plenty of ways to do so, but it can only be done one dme at a time since I am the only current developer of the application. I have received help from Terraphantm and a few others that wish to be unnamed but supporting other cars is already completed. If I knew which DME's that you wanted to support then I would definitely add them into the programming. I believe several will be surprised by the latest version which will have late E90 support and possibly even newer vehicle support. The BBApp 2.0 version was released with the sole purpose of testing the cheaper INPA cables. It works great for K-Line; however, the problem with ripping out the BT Cable support means that you don't have access to D-Can vehicles. I conducted a remote test with a guy from Arkansas on his 2010 135i yesterday with a cheap INPA cable and was able to do a write at a time of: 1 minute 31 seconds. A full write was done in 9 min and 52 seconds going through a DCAN protocol. There were several vehicles that were becoming bricked due to the app only writing or reading via a K-Line interface with the BT information not present. I wrote another api structure that has a testing of the protocol before proceeding with either K-Line or D-Can, not based on year as I'm also including various other vehicle makes. If you have other DME's that you would like supported then please let me know, thanks!

Trevor

I'm sorry but you need to help me out with this one. What are you trying to do? Do you already have an app that can be tested, where can it be downloaded? What are the features, etc?

Can you app protect a tuners file from being copied around with encryption and or VIN lock?

Not bashing, just looking for more details.

[W37V]

Originally Posted by rjahl

I'm sorry but you need to help me out with this one. What are you trying to do? Do you already have an app that can be tested, where can it be downloaded? What are the features, etc?

Can you app protect a tuners file from being copied around with encryption and or VIN lock?

Not bashing, just looking for more details.

Search for bbapp BMW. However, don't let google autocorrect your search.

[hassmaschine]

Trevor, glad to hear from you - I sent you a PM, but we are still looking for alternatives to using WinKFP. Although, WinKFP is working really well for us, it's not simple for end users and mobile use is pretty much impossible...

[trevorlee02]

@rjahl

I have an app that has been tested, it is the same one spoken about through out this post actually. I'm the developer for furthering it's capabilities. App protecting tuners files is easy and simplistic. I can use the same one that MHD uses to make it easier for everyone or generate a newer type. As far as features, it includes a flashing feature (which is the same look/feel), a tuning feature that is similar to HP Tuners, Diagnostic Section that allows for battery registration, any coil pack modifications, read and clear all codes, a logging feature for live datalogging, recording, or reviewing, in an easy to read and understand format. As well as other makes possibly. The app will be fully released based upon an agreed upon time/date with the original app's admin team. It will include Apple, Android, Windows, Linux support and installation possibilities. The difference between current "VIN locking" methods and this will depend upon what people would like to have; however the apps will NOT run on jailbroken or rooted Android or Apple devices. If tuners wish to have their I.P. protected then it must be done this way.

[mattbarn]

If you guys are interested in writing flashing software, I can probably help. I have RE'd the RSA auth that they use. Since you already have the RSA signing bypass, that's all it would take AFAIK.

[rjahl]

Originally Posted by mbarkh

Guys, how to load 530 tune to 525 dme, using winkfp? Wehere I can get 530 tune from daten?
Thank You

Well under normal circumstances I would say "read the posts,the answers are all there". But considering there are over 1,600 past in this thread, that response would be a little unfair.

In short, you need to find the 0da / calibration file for the 530 that matches your program version or just update yours to the most recent, convert that to a bin that you can read, modify the power class byte to match your car "0" , correct the RSA signature and checksums, convert the file back into Intell hex and flash into your DME using winfkp expert mode.

Or

Wait for Hassmachine to release his software tools.

[JuniorB]

Any updates with this? I would like to run this on my e60 before I do my engine swap. Unexpected events happened, so I may ride like this for the winter if I can fing some garage space. I have a bunch of BMW programs that I haven't played with, I'd like to do the coding for the upgrades I've done already. Thanks guys.

[rjahl]

With all of the disassembly work you have done have you learned anything new about the ignition timing and load management?

With the transmission tune and my higher rev limits I've started to take a second look at the engine tune above 6,500. One of the issues that has bugged me is using crazy high values we use in the KF_ZOPT_VT maps. There must be a more eloquent method to control this ignition advance under high load.

BTW, I messed up a conversion factor in my last TCU tune and moved my shift points above 7,500 RPM. Nothing broke but I'll be resetting the rpm limits in the morning. Needle went right past the red zone

[JuniorB]

I guess what I'm saying is, I'd like to run your tune till my swap is ready, you have a time line? I was looking into an ecu for an 07 530 if I wanted to keep money to a minimum, adding my vin,still may look to be cheaper than a $700 tune. You think this may be another option?