MS45 xdf creation... - E46Fanatics E46 BMW Social Directory E46 FAQ 3-Series Discussion Forums BMW Photo Gallery BMW 3-Series Technical Information E46 Fanatics - The Ultimate BMW Resource BMW Vendors General E46 Forum The Tire Rack's Tire Wheel Forum Forced Induction Forum The Off-Topic The E46 BMW Showroom For Sale, For Trade or Wanting to Buy

Go Back   E46Fanatics > Tuning & Tech > Driveline, Engine & DME Tuning

Driveline, Engine & DME Tuning
Talk about driveline improvements, NA tuning and DME tuning your E46 BMW here. This includes diffs, intakes, exhausts, chips, software and OBD tuning.

Reply
 
Thread Tools Search this Thread Rate Thread Display Modes
Old 10-09-2017, 12:36 AM   #1
daniel_f.
Registered User
 
Join Date: Jul 2011
Location: Germany
Posts: 3,086
My Ride: 330iC
MS45 xdf creation...

Hello guys,

ive been digging into MS45 quite a bit and im currently pretty confident with the disassembling process.

We should decide what softwareversion is the easiest to get for all of you and what maps are the most important ones, so i can build a xdf file
__________________

Current licensing status:
Security implementation *done*
Implementing Flex Fuel

Siemens MS43 wiki!
daniel_f. is offline   Reply With Quote
Old 10-09-2017, 10:02 AM   #2
armenh7
Registered User
 
Join Date: Dec 2016
Location: California
Posts: 8,356
My Ride: 2002 325i
Subscribed. What tools are required apart from an MS45 and a BDM flasher?
__________________
armenh7 is offline   Reply With Quote
Old 10-09-2017, 12:21 PM   #3
CarbonZHP
Because Race...Convertible?
 
CarbonZHP's Avatar
 
Join Date: Jun 2013
Location: EAS
Posts: 2,848
My Ride: goes choo choo
Year: 2004
Model: 330Cic ZHP
Transmission: AT->5MT->6MT
Sounds good. If this picks up steam I'll pick up the software and gladly be a guinea pig for you Daniel. My car is not quite daily driven. My car should be the latest software
__________________
Turbo Build Thread
Original Car: Silver Grey on Grey, A/T (1 of 186)
As it sits: Silver Grey on Black, M/T (1 of 51)
Instagram: @CarbonZHP

Last edited by CarbonZHP; 10-09-2017 at 12:22 PM.
CarbonZHP is offline   Reply With Quote
Sponsored Links
Advertisement
 
Old 10-09-2017, 12:54 PM   #4
CarbonZHP
Because Race...Convertible?
 
CarbonZHP's Avatar
 
Join Date: Jun 2013
Location: EAS
Posts: 2,848
My Ride: goes choo choo
Year: 2004
Model: 330Cic ZHP
Transmission: AT->5MT->6MT
Also in for direct links on what to buy to help you out
__________________
Turbo Build Thread
Original Car: Silver Grey on Grey, A/T (1 of 186)
As it sits: Silver Grey on Black, M/T (1 of 51)
Instagram: @CarbonZHP
CarbonZHP is offline   Reply With Quote
Old 10-10-2017, 04:17 PM   #5
328ijunkie
Registered User
 
Join Date: Feb 2011
Location: ClemsonSC/ATL,GA
Posts: 67
My Ride: E36,E30
Hard part will be end user flashing tool. I use a real Kess which is big $$. Clones are annoying and unreliable. BDM is obviously another option.

The last 7 of the vin is at 0x1FB35 in the 1024 read on most (unless winkfp nuked the first AIF)
Software version block starts at x1F950
Depending on what you consider the software version, i really only see 2 different software versions on all the MS45s ive flashed.

The Damos' that exist for it either dont have a matching hex, or are for 45.0 and barely matches up.

I would love to help where I can. I have had alot of help to get where i am from others that post/lurk around here.
328ijunkie is offline   Reply With Quote
Old 10-10-2017, 04:53 PM   #6
armenh7
Registered User
 
Join Date: Dec 2016
Location: California
Posts: 8,356
My Ride: 2002 325i
Quote:
Originally Posted by 328ijunkie View Post
Hard part will be end user flashing tool. I use a real Kess which is big $$. Clones are annoying and unreliable. BDM is obviously another option.

The last 7 of the vin is at 0x1FB35 in the 1024 read on most (unless winkfp nuked the first AIF)
Software version block starts at x1F950
Depending on what you consider the software version, i really only see 2 different software versions on all the MS45s ive flashed.

The Damos' that exist for it either dont have a matching hex, or are for 45.0 and barely matches up.

I would love to help where I can. I have had alot of help to get where i am from others that post/lurk around here.
I have a feeling that you're gonna be a great help
armenh7 is offline   Reply With Quote
Old 10-15-2017, 10:08 AM   #7
rkneeshaw
Registered User
 
Join Date: Oct 2008
Location: Northern Michigan
Posts: 1,632
My Ride: 330i ZHP
daniel, I'm super excited!

As far as I know, there are different "latest version" flashes between ZHP cars and non-ZHP MS45.1 cars. For me personally with my ZHP the best version you should work off of is the latest flash from BMW for the ZHP: 7561520. I can't speak to latest version for non-ZHP MS45.1 cars, or MS45 cars.

I'll PM you my email address. I can send you a bin from my car, its running on 7561520.
__________________
2003 BMW 330i ZHP
ESS Twin Screw Stage 2 - Wavetrac - Headers - Borla - BMW Performance
Turner Motorsports - Powerflex - Hawk Performance

Build thread: https://forum.e46fanatics.com/showthread.php?t=696662
Wheelwell: 2003 BMW 3 Series
Fuelly: 2003 BMW 330i ZHP

Last edited by rkneeshaw; 10-18-2017 at 05:38 AM. Reason: Removed comments that probably weren't accurate or irrelevent
rkneeshaw is offline   Reply With Quote
Old 10-15-2017, 10:13 AM   #8
rkneeshaw
Registered User
 
Join Date: Oct 2008
Location: Northern Michigan
Posts: 1,632
My Ride: 330i ZHP
Daniel, your PM mailbox is full, PM me your email address please.
__________________
2003 BMW 330i ZHP
ESS Twin Screw Stage 2 - Wavetrac - Headers - Borla - BMW Performance
Turner Motorsports - Powerflex - Hawk Performance

Build thread: https://forum.e46fanatics.com/showthread.php?t=696662
Wheelwell: 2003 BMW 3 Series
Fuelly: 2003 BMW 330i ZHP

Last edited by rkneeshaw; 10-18-2017 at 05:25 AM.
rkneeshaw is offline   Reply With Quote
Old 10-15-2017, 10:38 AM   #9
daniel_f.
Registered User
 
Join Date: Jul 2011
Location: Germany
Posts: 3,086
My Ride: 330iC
Quote:
Originally Posted by rkneeshaw View Post
Daniel, your PM mailbox is full, PM me your email address please.
Send it to MS43info @ Yahoo.com
__________________

Current licensing status:
Security implementation *done*
Implementing Flex Fuel

Siemens MS43 wiki!

Last edited by daniel_f.; 10-17-2017 at 11:38 PM.
daniel_f. is offline   Reply With Quote
Old 10-15-2017, 10:40 AM   #10
CarbonZHP
Because Race...Convertible?
 
CarbonZHP's Avatar
 
Join Date: Jun 2013
Location: EAS
Posts: 2,848
My Ride: goes choo choo
Year: 2004
Model: 330Cic ZHP
Transmission: AT->5MT->6MT
Hyped. Tell me whatever you need guys. I have inpa and that whole setup. Latest software from Bali. I'm not sure what I'm capable of providing with my software but I'm happy to help


Sent from my iPhone using Tapatalk
__________________
Turbo Build Thread
Original Car: Silver Grey on Grey, A/T (1 of 186)
As it sits: Silver Grey on Black, M/T (1 of 51)
Instagram: @CarbonZHP
CarbonZHP is offline   Reply With Quote
Old 10-15-2017, 02:19 PM   #11
rkneeshaw
Registered User
 
Join Date: Oct 2008
Location: Northern Michigan
Posts: 1,632
My Ride: 330i ZHP
Carbon are you running a stock firmware version or is it tuned by someone already?

I wish I would have taken a bin copy of my MS45.1 7561520 version in a virgin untouched state before I applied a tune to it, just for posterity.
__________________
2003 BMW 330i ZHP
ESS Twin Screw Stage 2 - Wavetrac - Headers - Borla - BMW Performance
Turner Motorsports - Powerflex - Hawk Performance

Build thread: https://forum.e46fanatics.com/showthread.php?t=696662
Wheelwell: 2003 BMW 3 Series
Fuelly: 2003 BMW 330i ZHP
rkneeshaw is offline   Reply With Quote
Old 10-15-2017, 02:47 PM   #12
CarbonZHP
Because Race...Convertible?
 
CarbonZHP's Avatar
 
Join Date: Jun 2013
Location: EAS
Posts: 2,848
My Ride: goes choo choo
Year: 2004
Model: 330Cic ZHP
Transmission: AT->5MT->6MT
Tuned by markert. Almost forgot about that


Sent from my iPhone using Tapatalk
__________________
Turbo Build Thread
Original Car: Silver Grey on Grey, A/T (1 of 186)
As it sits: Silver Grey on Black, M/T (1 of 51)
Instagram: @CarbonZHP
CarbonZHP is offline   Reply With Quote
Old 10-15-2017, 08:04 PM   #13
armenh7
Registered User
 
Join Date: Dec 2016
Location: California
Posts: 8,356
My Ride: 2002 325i
I was searching for MS45.1 A2L today. Take a look at these files. I don't know if they're for MS45.0 or MS45.1
https://drive.google.com/open?id=0By...GxGVTlwaXkwSzA


Here are some cheap MS45.1's that I found:
http://www.ebay.com/itm/2004-BMW-325...FZuYrv&vxp=mtr
http://www.ebay.com/itm/04-06-BMW-32....c100005.m1851
https://www.ebay.com/p/2002-2005-BMW....c100005.m1851
__________________

Last edited by armenh7; 10-15-2017 at 08:09 PM.
armenh7 is offline   Reply With Quote
Old 10-16-2017, 05:24 PM   #14
JimConforti
Registered User
 
Join Date: Dec 1969
Posts: 21


Hi, guys!

Well, first - it's JIM Conforti (John is my 2nd cousin, and a cop )

Not sure where you all are getting your info from, but my work (and Nick's as well) was the result of disassembly, not an A2L. An A2L by itself is fine if you're trying to analyze what someone else has done, but not to tune. You'd need a function definition for that (functionsrahmen) and still it's not as if you're magically a calibration expert for whatever control unit.

Nick and I share some info, but he's his own man and has disassembled areas that interest him.

BTW guys, MS45 was the first ecu in the 3 series to be secured with BMW's SAM (security and authentication) module. The ecu is secured with two RSA keys - one for login (aka seed/key) and one to digitally sign the calibration data.

Here's the signature routine:

ROM:FFF083D8 # =============== S U B R O U T I N E =======================================
ROM:FFF083D8
ROM:FFF083D8
ROM:FFF083D8 SIG_CHK: # CODE XREF: ROM:FFF0F67Cp
ROM:FFF083D8 # ROM:FFF0FF38p ...
ROM:FFF083D8
ROM:FFF083D8 .set var_10, -0x10
ROM:FFF083D8 .set var_4, -4
ROM:FFF083D8 .set arg_4, 4
ROM:FFF083D8
ROM:FFF083D8 stwu sp, var_10(sp)
ROM:FFF083DC mflr r0
ROM:FFF083E0 stw r31, 0x10+var_4(sp)
ROM:FFF083E4 stw r0, 0x10+arg_4(sp)
ROM:FFF083E8 lwz r12, ((off_FFF09C94+0x636C) & 0xFFFF)(r6)
ROM:FFF083EC cmplwi r12, 0x10
ROM:FFF083F0 ble loc_FFF083FC
ROM:FFF083F4 li r3, -1
ROM:FFF083F8 b loc_FFF0841C
ROM:FFF083FC # ---------------------------------------------------------------------------
ROM:FFF083FC
ROM:FFF083FC loc_FFF083FC: # CODE XREF: SIG_CHK+18j
ROM:FFF083FC lis r31, ((SIG_MODULUS+0x10000) >> 16)
ROM:FFF08400 addi r31, r31, -0x627C # SIG_MODULUS
ROM:FFF08404 lis r11, ((CALC_SIG+0x10000) >> 16)
ROM:FFF08408 addi r11, r11, -0x7964 # CALC_SIG
ROM:FFF0840C mtlr r11
ROM:FFF08410 addi r8, r31, 0x48
ROM:FFF08414 addi r7, r31, 0
ROM:FFF08418 blrl
ROM:FFF0841C
ROM:FFF0841C loc_FFF0841C: # CODE XREF: SIG_CHK+20j
ROM:FFF0841C lwz r0, 0x10+arg_4(sp)
ROM:FFF08420 lwz r31, 0x10+var_4(sp)
ROM:FFF08424 mtlr r0
ROM:FFF08428 addi sp, sp, 0x10
ROM:FFF0842C blr
ROM:FFF0842C # End of function SIG_CHK

That I'm aware of, the RSA modulus for the signatures has been factored by one and only one team, and one of the two members (the other being my partner for 23 years) is typing this. We factored a 512 bit RSA modulus in 14 days using custom/optimized hardware and an optimized version of the general number field sieve algorithm. This was back in 2007. We kept the "how" silent back then because 512 modulii were used in SSL and banking and we really didn't want "the bad guys" to know our factoring capabilities.

Ryan,

A fix for your car was already figured out. Someone spent a lot of time doing so and you would have gotten to try it out soon enough.

That said, whomever is saying that "Nick doesn't share anything", that he "got his information from Jim", or "Jim got his information from BMW A2L's" can kiss my italian butt. 20 years ago I was putting forced induction on MS45. 20 years ago, A2L's weren't even available to US tuners.

Nick and I, as well as many other capable tuners - routinely share information.

When Shark Edit is released, I'll be releasing pretty much everything I know about BMW tuning.

BTW, if you want to know anything about me, here's an article from the New York Times in 2000.

http://www.nytimes.com/2000/05/17/au...their-way.html

Happy to answer questions as I can as well.

Jim
JimConforti is offline   Reply With Quote
Old 10-16-2017, 06:52 PM   #15
rkneeshaw
Registered User
 
Join Date: Oct 2008
Location: Northern Michigan
Posts: 1,632
My Ride: 330i ZHP
Jim, great post! Thank you for hopping on and adding some helpful detail!

My mistake if I got any of this story wrong, I appreciate you coming out to help clear things up.

I for a fact know of others who have also gotten past the RSA key and can read and write to the MS45 freely, so that info is not top secret anymore, but of course its still limited to a handful that have cracked it such as yourself.

Its my understanding the MS45.1 was introduced in the e46 around 2003, I can't believe that's almost been 20 years, time flies. I have also been told that in many ways the MS45 is more advanced than the MS43, probably closer to the MSS70 in design, which means a different strategy for tuning is required.

I've been doing a lot of digging and research to try to compile better information around the MS45.1, because I think it should be viewed as an advantage that the e46 received this ECU and it shouldn't be the demon some claim it to be.


Quote:
Originally Posted by JimConforti View Post
Ryan,

A fix for your car was already figured out. Someone spent a lot of time doing so and you would have gotten to try it out soon enough.
That's really fantastic, but I doubt that 100%, because I spent over a year with "someone" trying to get that issue fixed and this is the first I hear it, the same day "someone" says they are done dealing with me, which really is a sad and maddenly frustrating story. If it is true, then good for them, for the sake of their reputation of providing quality solutions they should immediately contact every other MS45 customer and notify them they have an update! And if they want to skip me out of spite, that's fine, but I hope that "someone" doesn't leave all the other MS45 owners hanging.

Thanks for sharing the info on Shark Edit, sounds really great! Do you have a release date? I'd love to give it a try!
__________________
2003 BMW 330i ZHP
ESS Twin Screw Stage 2 - Wavetrac - Headers - Borla - BMW Performance
Turner Motorsports - Powerflex - Hawk Performance

Build thread: https://forum.e46fanatics.com/showthread.php?t=696662
Wheelwell: 2003 BMW 3 Series
Fuelly: 2003 BMW 330i ZHP
rkneeshaw is offline   Reply With Quote
Old 10-16-2017, 07:13 PM   #16
JimConforti
Registered User
 
Join Date: Dec 1969
Posts: 21
Yes, they can write it without the signatures.

I'll bet you a sawbuck that most don't have all the checksums though ;-)

As to RSA, if you have the keys, you can upload the car in a few minutes.

If someone "has the signature" they likely got it from from of the firms I did special "universal" signatures for.

Jim
JimConforti is offline   Reply With Quote
Old 10-26-2017, 10:27 AM   #17
darklow
Registered User
 
Join Date: Oct 2017
Location: saratoga ny
Posts: 3
My Ride: ur mom
whats up guys. i just got a e46 ms45 and looking to add to the discussion.
A good friend of mine just picked up a 04 e46 and its ms45. After pulling the ecu and confirming the dme as ms45 i did a little digging to see what tools are needed for read and write seems bdm works for desktop reading and kess v2 can read ms45 too. I have a kess clone master and tried reading the car threw port and straight off didnt have good luck. found that his aftermarket radio was install wrong and was back feeding power to k line. fixed that then i could connect with the bmw logger and kess. After i was able to id the dme with kess i tried reading and was given some generic error and failed read. Cycled the key after the failed read and test started the car all was ok but i wasnt able to reconnect to the car with kess or the logger after the original connection when kess was able to id the dme. by the time i was done messing around it was getting late so i called it for the night. my next plan is to cut k line off the dme and try programming directly. If this works out we will have a reading and writing with checksums!! I also have some ms45 map packs and orig file.
thanks
marty
link to ms45 mappacks and ori
https://ufile.io/tu95g_nr_
Attached Thumbnails
Click image for larger version

Name:	Untitled.jpg
Views:	211
Size:	108.8 KB
ID:	694121  
darklow is offline   Reply With Quote
Old 11-06-2017, 03:58 PM   #18
Jokerr
Registered User
 
Join Date: Feb 2015
Location: Ukraine
Posts: 7
My Ride: BMW 325
some ignition maps.

change *.pdf to *.zip

Who has other maps - please share
Attached Files
File Type: pdf ms45.pdf (315.7 KB, 128 views)

Last edited by Jokerr; 11-06-2017 at 04:07 PM.
Jokerr is offline   Reply With Quote
Old 11-07-2017, 11:35 AM   #19
cwarel
Registered User
 
Join Date: Jun 2015
Location: New York City
Posts: 845
My Ride: 330ci coupe
I have a ms45 ecu that i dont need so i can do any testing on it as you ask
cwarel is offline   Reply With Quote
Old 11-07-2017, 02:37 PM   #20
armenh7
Registered User
 
Join Date: Dec 2016
Location: California
Posts: 8,356
My Ride: 2002 325i
Quote:
Originally Posted by Jokerr View Post
some ignition maps.

change *.pdf to *.zip

Who has other maps - please share
What did you use to read the maps?
armenh7 is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Censor is OFF



All times are GMT -5. The time now is 05:44 PM.


Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2019, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2019 DragonByte Technologies Ltd.
(c) 1999 - VerticalScope Inc. All rights reserved.