RomRaider Logo

RomRaider

Open Source ECU Tools
 FAQ •  Register •  Login 

RomRaider

Documentation

Community

Developers

It is currently Mon Aug 08, 2022 10:18 pm

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 25 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: BMW ME7.2 Developement
PostPosted: Wed Sep 04, 2019 8:59 pm 
Offline
Newbie

Joined: Sat Aug 11, 2018 12:42 am
Posts: 47
I have a full working xdefinition for 3 different software versions but seeing as how the tuner software guy doesnt develop his software anymore and doesnt share source ive shuffled my projects over to romraider

I am currently porting xdefinition items over and then laying them out in 512kb and 64kb mappings for romraider

https://github.com/zarboz/Me72-XML


This is the romraider file that is a work in progress

https://github.com/zarboz/BMW-XDFs/tree ... %20V8/XDFS

this is the folder of my xdfs I am porting over

if anyone has input / suggestions / wants to help let me know


You do not have the required permissions to view the files attached to this post.


Last edited by zarboz on Wed Dec 11, 2019 10:28 am, edited 1 time in total.

Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Tue Oct 08, 2019 9:16 am 
Offline
Newbie

Joined: Sat Aug 11, 2018 12:42 am
Posts: 47
my 540i is dead for now and the 740i I just bought does not have an me7.2 it is the older model


So I might not be pushing as hard on this right now


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Wed Dec 11, 2019 10:31 am 
Offline
Newbie

Joined: Sat Aug 11, 2018 12:42 am
Posts: 47
I realized my github was private for some reason

exposed back to pubic and added the xdefinition and binary I am working off of


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Wed Dec 11, 2019 10:37 am 
Offline
Newbie

Joined: Sat Aug 11, 2018 12:42 am
Posts: 47
just a preview of where i am with 512kb reads Image


You do not have the required permissions to view the files attached to this post.


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Sun Dec 15, 2019 6:04 pm 
Offline
Experienced

Joined: Wed Oct 21, 2015 2:36 am
Posts: 945
How are you managing the axis labels given they use a subtract method? RR doesn't seem to have the capability to display axis labels this way.


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Mon Dec 16, 2019 3:31 pm 
Offline
Newbie

Joined: Sat Aug 11, 2018 12:42 am
Posts: 47
ba114 wrote:
How are you managing the axis labels given they use a subtract method? RR doesn't seem to have the capability to display axis labels this way.



not going to lie i am still fumbling around on RR learning as I go the X/Y axis are outlined as hex already in the binary same as MS41/42/43 DME strategy

I have FR and a half assed IDA project for this (I only took it apart far enough to figure out EWS delete)

Trying to port my work from the "other guys" software


I also have a working xdefinition I have produced after countless hours of A2L > KP > xdefinition translation


I know the Bosch Me7.2 decently well from all this I am just trying to bring over an XML

If you see any errors I made please feel free to open issue on github or make pull request with corrections

Thank you so much for being interested


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Mon Dec 16, 2019 8:13 pm 
Offline
Experienced

Joined: Wed Oct 21, 2015 2:36 am
Posts: 945
Sent you a PM as i'm also working on M5.2.1 which is pretty similar


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Fri Dec 20, 2019 2:25 pm 
Offline
Newbie

Joined: Thu Aug 17, 2017 3:21 pm
Posts: 24
nice work!!!

i am a basic tuner, work a lot in ms41, ms42 and ms43

but a need to tank your guys that make this XML!

7.2 and 5.2 will be wonderfull


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Fri Jan 10, 2020 12:52 pm 
Offline
Newbie

Joined: Sat Aug 11, 2018 12:42 am
Posts: 47
I have figured out the EWS delete for the me7.2 if you care at all for the information

Search a 512kb dump for the following hex string:
Code:
E6 F5 00 FF F6 F5 32 80 DB 00

Following this is a string of hex 1A long

in my binary the hex string looked as such
Code:
C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01



Replace this hex with an string also 1A in length containing the following characters

Code:
CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00



So my string went from
Code:
E6F500FFF6F53280DB00C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01

changed over to
Code:
E6F500FFF6F53280DB00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00



Essentially what this does is replace the EWS check portion of the code with a Null Operation

I am sure there could be a more elegant way of doing this with a unconditional jump but I dont really care to figure that out since I dont own an me7 car anymore


should be noted that you should bridge the 2 ignition wires on the EWS box


Last edited by zarboz on Tue Jan 21, 2020 10:10 am, edited 1 time in total.

Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Fri Jan 17, 2020 6:03 pm 
Offline
Newbie

Joined: Mon May 05, 2014 8:50 pm
Posts: 6
So you figured it out yourself by dis-assembling the file?


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Mon Jan 27, 2020 1:29 pm 
Offline
Newbie

Joined: Sun Mar 23, 2014 1:54 am
Posts: 1
zarboz wrote:
I have figured out the EWS delete for the me7.2 if you care at all for the information

Search a 512kb dump for the following hex string:
Code:
E6 F5 00 FF F6 F5 32 80 DB 00

Following this is a string of hex 1A long

in my binary the hex string looked as such
Code:
C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01



Replace this hex with an string also 1A in length containing the following characters

Code:
CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00



So my string went from
Code:
E6F500FFF6F53280DB00C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01

changed over to
Code:
E6F500FFF6F53280DB00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00



Essentially what this does is replace the EWS check portion of the code with a Null Operation

I am sure there could be a more elegant way of doing this with a unconditional jump but I dont really care to figure that out since I dont own an me7 car anymore


should be noted that you should bridge the 2 ignition wires on the EWS box


I Have a Me7.2 X5 4.4, i had some issues getting the DME to go to Boot mode, i put a scope on the communication line with the INPA tool and i found there was some communication collision and drop of packets. i adjusted the Baud rate to 2048 and the latency to 8ms and i was able to get it to download the full 512KB file on the bench. once i did that i opened the BIN file with a HEX editor, performed the search and replace as per your instructions , then run a CRC correction on it (this DME has 4 CRC for the 512kB file) and re uploaded to DME.
Then i shorted the relay on the EWS, It started after 2-3 seconds of cranking. it does so reliably now.
Notes: EWS module needs to remain connected in the harness or it will not start, if you read the DME memory, the EWS-DME communication still shows up as an error but it does not stop car from starting.

THANK YOU FOR POSTING THIS!, Literally this was the difference between me scrapping the car vs keeping it.

Now i am going to tackle my e36 supercharger project :-)


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Tue Jan 28, 2020 3:07 pm 
Offline
Newbie

Joined: Sat Aug 11, 2018 12:42 am
Posts: 47
lucasffer wrote:
zarboz wrote:
I have figured out the EWS delete for the me7.2 if you care at all for the information

Search a 512kb dump for the following hex string:
Code:
E6 F5 00 FF F6 F5 32 80 DB 00

Following this is a string of hex 1A long

in my binary the hex string looked as such
Code:
C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01



Replace this hex with an string also 1A in length containing the following characters

Code:
CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00



So my string went from
Code:
E6F500FFF6F53280DB00C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01

changed over to
Code:
E6F500FFF6F53280DB00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00



Essentially what this does is replace the EWS check portion of the code with a Null Operation

I am sure there could be a more elegant way of doing this with a unconditional jump but I dont really care to figure that out since I dont own an me7 car anymore


should be noted that you should bridge the 2 ignition wires on the EWS box


I Have a Me7.2 X5 4.4, i had some issues getting the DME to go to Boot mode, i put a scope on the communication line with the INPA tool and i found there was some communication collision and drop of packets. i adjusted the Baud rate to 2048 and the latency to 8ms and i was able to get it to download the full 512KB file on the bench. once i did that i opened the BIN file with a HEX editor, performed the search and replace as per your instructions , then run a CRC correction on it (this DME has 4 CRC for the 512kB file) and re uploaded to DME.
Then i shorted the relay on the EWS, It started after 2-3 seconds of cranking. it does so reliably now.
Notes: EWS module needs to remain connected in the harness or it will not start, if you read the DME memory, the EWS-DME communication still shows up as an error but it does not stop car from starting.

THANK YOU FOR POSTING THIS!, Literally this was the difference between me scrapping the car vs keeping it.

Now i am going to tackle my e36 supercharger project :-)




curious how you did the full read just through INPA or using Galletto or through JMgarage tools?


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Wed Feb 19, 2020 5:47 pm 
Offline
Newbie

Joined: Sat Aug 11, 2018 12:42 am
Posts: 47
I will add the IDA project to the repo as well and finish naming all the tables I found. Maybe we can get a better understanding of the DME


You do not have the required permissions to view the files attached to this post.


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Wed Feb 19, 2020 5:59 pm 
Offline
Newbie

Joined: Sat Aug 11, 2018 12:42 am
Posts: 47
What it looks like with NOOP in place




going to figure out a unconditional jump method for this so its a simple byte flip


You do not have the required permissions to view the files attached to this post.


Top
 Profile  
 
 Post subject: Re: BMW ME7.2 Developement
PostPosted: Fri Mar 20, 2020 2:30 pm 
Offline
Experienced
User avatar

Joined: Thu Mar 30, 2017 7:26 am
Posts: 112
Location: Poland
zarboz wrote:
I have figured out the EWS delete for the me7.2 if you care at all for the information

Erm... You've had the file with it :wink:
I can analyze it with IDA for one byte jump If You want.

Also interested in vanos tuning, because currently changed to RON98 and increasing ignition timing.

_________________
E30 Coupe Stock Engine M62B44TU @ 0.5bar ~ ME7.2 ~ Almost done :)
E30 Sedan Stock Engine M52B28Turbo @ 0.5bar ~ MS41.2 ~ 328Hp / 448Nm
Need help in Tuning/Modding MS41/MS42/MS43/MS45/ME7.2 ? Message me i can help You out for a coffee cup :)


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 25 posts ]  Go to page 1, 2  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style based on FI Subsilver by phpBBservice.nl