Search found 131 matches

by olafu
Sat Mar 16, 2019 9:27 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

D3 follows IAT sensor input, D4 not. So, i'm pretty sure D3 is air temperature.

0x3C25 is active only in stopped engine. (waiting for crank). :?
by olafu
Thu Mar 14, 2019 11:46 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

D5B2 is temp sensor normalizer table. Same table is used for IAT and CLT sensors. Looks like raw adc-value is stored in "27". I did some research: 0x3C25-3C47 is where IAT value goes to INTMEM_D3 and CLT goes to INTMEM_D7. Looks like the map reading happens, when it calls subroutine ROM_4154. Then r...
by olafu
Sun Mar 03, 2019 9:30 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

If you are using 413 ecu, CEL should be on, when ecu is powered up and waits for crank signal. Ecu needs strong power supply, i'm using 15V / 6A from old laptop. 12V / 1A was too lame. Voltage should be something between 12...15V.
by olafu
Sun Mar 03, 2019 8:15 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

Did you use an isolation transformer? Any fault codes?
by olafu
Mon Feb 25, 2019 9:04 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

Ctrl + F8 , "Engine_sim crank and cam simulator". You can select square, triangle or sine wave.
but if it doesn't work, don't forget Audacity :)
by olafu
Thu Feb 21, 2019 4:50 am
Forum: Bosch
Topic: incorrect checksum symptoms??
Replies: 5
Views: 119

Re: incorrect checksum symptoms??

And everything looked logical on tunerpro, when your friend edited it?
by olafu
Wed Feb 20, 2019 8:27 pm
Forum: Bosch
Topic: incorrect checksum symptoms??
Replies: 5
Views: 119

Re: incorrect checksum symptoms??

Car? ECU number? BIN number and XDF what was used to edit it.
As example 413 ecu with 623 bin only sets trouble code if checksum is wrong.
Most likely wrong XDF was used. ECU goes reset loop if map header data is broken. Wrong offset in XDF can cause this.
by olafu
Mon Feb 18, 2019 4:59 am
Forum: Bosch
Topic: DME 413 (silver) knock correction
Replies: 12
Views: 206

Re: DME 413 (silver) knock correction

knock xdf in my dropbox is for -715 bin. You need -623 XDF, -715 bin has different offset. I will upload new one… M52B28 alu block has also different "running noise" and iron block's knock settings can cause problems. I don't know anyone who are re-tuned those knock threshold maps for alu block. And...
by olafu
Sun Feb 17, 2019 2:41 pm
Forum: Bosch
Topic: DME 413 (silver) knock correction
Replies: 12
Views: 206

Re: DME 413 (silver) knock correction

What bin you are actually using? Almost every bins has different offset. This knock-part is for silver label "1 267 358 715" bin. Red label has usually "1 267 357 623" or "1 267 357 609" bin. this is a link to hairyscreech's dropbox: https://www.dropbox.com/sh/9bhg4mjk7nxy5w7/AAB7Vz1QenCCC6fXCaQdGCo...
by olafu
Sun Feb 17, 2019 10:55 am
Forum: Bosch
Topic: DME 413 (silver) knock correction
Replies: 12
Views: 206

Re: DME 413 (silver) knock correction

My tests with INPA was with -506 DME's -965 bin, because it's not working with 413 DME's -623 bin. I have no idea why, but if you have emulator, try to run your DME with -965 bin. Hardware is cross-compatible. If it works, the problem is propably in the INPA software. You can cheat it with using -96...
by olafu
Wed Feb 13, 2019 10:37 pm
Forum: Bosch
Topic: DME 413 (silver) knock correction
Replies: 12
Views: 206

Re: DME 413 (silver) knock correction

You can read ram with INPA, but i can't say where those knock adaptation values are stored. And i'm pretty sure they are in map form, no idea what kind. And own map for every cylinder.
by olafu
Wed Feb 13, 2019 1:08 pm
Forum: Bosch
Topic: DME 413 (silver) knock correction
Replies: 12
Views: 206

Re: DME 413 (silver) knock correction

https://www.dropbox.com/s/ljl0nz0325ix85y/silver_label_knock.xdf?dl=0 <- knock parts for silver label. Tools -> Custom tools -> New TunerPro Instance ... copy paste. This ecu has 8kB SRAM chip on underside of the board. It's used for storing self-learning adaptation values (including knock-correctio...
by olafu
Wed Feb 13, 2019 5:34 am
Forum: Bosch
Topic: DME 413 (silver) knock correction
Replies: 12
Views: 206

Re: DME 413 (silver) knock correction

Correction data location wasn't found yet (it has individual load x rpm table in RAM for each cylinder), but i will send you XDF for silver label knock part.
by olafu
Mon Feb 11, 2019 10:31 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

Actually, real max_rpm is lower. Those tests was accidentally done with 6500rpm rev limit. :oops: max rpm with external rom: 7860rpm max rpm with internal rom: 8340rpm no cam signal. with maf fault mode (alpha n) max rpm with internal rom: 7980rpm. :roll: Motronic hardware with software shittened to...
by olafu
Thu Feb 07, 2019 9:56 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

Some tests with internal and external rom:

8960 rpm (no cam signal, no closed loop, internal rom)
8440 rpm (no cam signal, no closed loop, external rom)

maximum RPM:s. If exceeded, ECU goes reset. Significant penalty.
by olafu
Mon Jan 21, 2019 8:12 pm
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

Knock control IC: https://www.dropbox.com/s/ted5caw5yrrd09g/PLCC28_30117_pinout_unfinished.png and how it seems to work: https://www.dropbox.com/s/wzz82fdpj8wkwg2/30117_how_it_works.png channel select signals seems to come from S920. :? So, after discovering all this information, i found pieces of B...
by olafu
Sun Jan 20, 2019 8:24 pm
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

No, it is synced now with faked cam signal.
153624 -> 536241 it's same firing order, but it only starts from 5. I think this is something to do with 120 degrees different trigger wheel position. Maybe only BMW engeneers can say why this is changed. :)
by olafu
Sun Jan 20, 2019 1:17 pm
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

Yes, with M60 bin, ignition firing sequence is going to 2-9 also with 413 board. And those pin 8 and 9 (T507 and T508) transistors are missing. But 7 and 8 cylinder's injection pulses are not seem to come out from anywhere. https://www.dropbox.com/s/e0o8zid3mf7sea9/M331_with_404_bin_.BMP In 413 ecu,...
by olafu
Sun Jan 20, 2019 8:03 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

I have to do some tests, need to clear out how this system treats that S750. It woud be useful information for disassembly work. With this fine laboratory :lol: https://www.dropbox.com/sh/l2subwkgoef2akm/AACToZd5w2dYe-btTgSj-L57a EDIT: https://www.dropbox.com/s/ivb6hpl33z9riss/Bosch_30131.jpg <- ign...
by olafu
Sun Jan 20, 2019 4:29 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

Seems like this B58039 PLCC44 chip, number "S750" has significant role in injection output stage (and maybe something else) controlling. Chip "S705" sends eight pieces of data packets in burst to that "S750" on every injection event, three times at one crankshaft rotation. So i think, that "S750" is...
by olafu
Sat Jan 19, 2019 1:07 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

From 80196 user guide: "The execution times for the instruction set are given in Figure 3-3. These times are given for a 16-bit bus with no wait states. On-chip EPROM/ROM space is a 16- bit, zero wait state bus. When executing from an 8-bit external memory system or adding wait states, the CPU becom...
by olafu
Wed Jan 16, 2019 6:51 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

Audio isolation transformer protects your sound card, but second sound card is anyway good choice... I bought my own transformer from local grocery store. I was thinking to drive positive feedback comparator and controlling switching transistor with it. On positive peak from daqarta (or something el...
by olafu
Tue Jan 15, 2019 8:57 pm
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Re: Has anyone on here disassembled the 413 code?

Same system as last year, but now daqarta used as signal generator. Audio isolator in PC soundcard output and wired to crank sensor input. Few potentiometers and some load resistors. 1k resistors are enough for load. No cam signal, need to do some kind filtering circuit with latch and generate only ...
by olafu
Tue Jan 15, 2019 11:37 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Hairyscreech wrote:How did you go about lifting that pin?
Iron onto the exposed trace part and then lifted/pulled out with some tweezers?
With crowbar :lol: Tiny bent needle and some heat from soldering iron.
by olafu
Tue Jan 15, 2019 9:20 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Yes, EA-pin is now lifted up and grounded. First ROM access is 0x2018 (chip configuration byte) and program starts from 0x2080. ECU boots up and seems to run normally... :D
by olafu
Mon Jan 14, 2019 2:24 pm
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Power on, no cranking: 0x4000 and 0x4001 are first readed bytes from external ROM, when power is switched on. Next comes 0x4120, 0x4121, 0x4122, 0x4123, 0x476B, 0x476C, 0x476D, 0x476E, 0x476F, 0x4770 and so on, sequentially up to 0x4816. Then comes 3.5ms perioid with no reading from external ROM. Re...
by olafu
Sun Jan 13, 2019 2:17 pm
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

M42 coil pack is actually four "COP" coils in same package... :?
So, i think 30106 is used, because it has many other useful features, but, as example, only four transistor driver channels... So M50 and M60 needs separate driver ic.

EDIT:
https://tinyurl.com/y7ctthob <- M43 coil workshop manual
by olafu
Sun Jan 13, 2019 9:16 am
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

The 30106 is I believe similar to this one 413 ecu has 30131 (at least 8ch, maybe 10ch?) chip for coil transistor buffering. I think 30106 has something other features instead of that buffer... Has also M3.3 ecu 30117 knock sensor chip? M60 has four knock sensors, so it would be nice to know how it...
by olafu
Wed Jan 09, 2019 12:09 pm
Forum: Bosch
Topic: Has anyone on here disassembled the 413 code?
Replies: 63
Views: 6083

Some CPU pin data from my notes: (413 ecu) CPU pins: 4 = P0.3 ACH3 = Battery voltage 5 = P0.1 ACH1 = Intake air temperature 6 = P0.0 ACH0 = Mass air flow 7 = P0.2 ACH2 = Throttle position sensor 8 = P0.6 ACH6 = Lambda voltage 9 = P0.7 AHC7 = Signal from knock sensor controller IC: knock signal level...
by olafu
Wed Dec 19, 2018 11:40 am
Forum: Bosch
Topic: M3.3.1 motronic (413 and 506) tuning and XDF update?
Replies: 228
Views: 82700

Anyone hear about Daqarta..? Interesting software. It spits crank and cam sensor signals out from PC sound card. http://www.daqarta.com/dw_0okk.htm I didn't run any tests yet with this software, but if you want to run your ecu on the table, without engine, this will help you. I'm very curious to see...
by olafu
Mon Sep 03, 2018 11:21 am
Forum: Bosch
Topic: Opel C20xe
Replies: 2
Views: 1022

Lookup table seems to be found at 0x6400, no offset, MSB first, so first table founds at 0x673E, next 0x6744 and so on... Biggest tables are: (Header start address, descriptors, axis size and table data start address) 687C 3A x 42 16x4 6894 68D4 3A x 42 12x12 68F0 6A92 3A x 42 12x12 6AAE 6D2E 3A x 4...
by olafu
Mon Sep 03, 2018 8:12 am
Forum: Bosch
Topic: Eaton m122 H supercharged E36
Replies: 47
Views: 18448

Knock control is not active, if load is not higher than specified threshold. Can you check that with other scanner? Bad support for old ECU's are very common problem in today's scan tools. It's not impossible for the scanner to read data from wrong address... Example: Some scanners will read MAF val...
by olafu
Wed Aug 01, 2018 6:41 am
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

hi guys, After our second track day session we are facing few small problems. _ idle come now too high (1200 rpm) and engine is slow to drop revs. _ engine is not runing good anymore around 4000 rpm. Idle is 1000 when cold and 1200 when hot. but very stable. I have tested the TPS sensor and ECT sen...
by olafu
Thu Jul 05, 2018 10:01 pm
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

Use some offset. I think 715 has same maps but different place/offset. When you found one, you found other ones.
by olafu
Thu Jul 05, 2018 11:57 am
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

https://www.dropbox.com/sh/1qhnxk084dr4 ... U7y3a?dl=0 <- dtc triggering and knock part. And some other information.

More information is in that other, big m3.3.1 topic.
by olafu
Tue Jul 03, 2018 2:14 pm
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

If you can use both knock sensors for external knock detector, it can work well. But ECU needs signal from knock sensors, if it is missing, ecu goes limp mode and reduces timing. 0xD288 affects DTC:s 69 and 70. By overwriting it with "FF" ecu doesn't notice missing signal from knock sensors. I dont'...
by olafu
Tue Jun 26, 2018 2:55 pm
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

thanks guys for your real reverse engineering work. It so impressive, that you spent so much time to go deep in the (necessary) details. A lot of XDF available only have the basic and easy findable maps , what is a little bit limited to tune advanced engines. The M.3.3.1 is more than 25 years old, ...
by olafu
Mon Jun 25, 2018 1:45 pm
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

Where all theses adresses are coming from guys ? Did you bought a Damos file or did you disamembly the microprocessor code software ? I can recognize big maps on the hex, but small one like this ?? OxDC63 is also an acceleration map ? By testing with scopemeter and engine signal generator. Almost a...
by olafu
Mon Jun 25, 2018 2:12 am
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

0xD776 is actually a load filter table. "Acceleration enrichment: Triggered from rapid or less rapid LOAD increase... 0xDC15 D0xD5 4x4: Acceleration enrichment quantity by RPM and LOAD 0xDC31 D7 4x1: Coolant temperature correction for quantity These are multiplied by each other and determines how mu...
by olafu
Sat Jun 23, 2018 8:13 am
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

Where goes "tracing plot" when problem starts? Is the "load" value always same, or will it jump to somewhere?
by olafu
Sat Jun 23, 2018 2:10 am
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

New max load would be good to oversize. I can't say by sure, but i think so. You must compress original data to left side of table, and then you get right side of table "empty" for boost tunes. You lose some resolution. If you want to change gap between columns, you must modify table header data in ...
by olafu
Thu Jun 21, 2018 10:06 pm
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

Good! We struggled with that v-signal problem in my frend's rally car about 2 years ago. Our solution was cut v-signal wire, and it was temporary stuffed in to cam signal pin chamber with screwdriver. This temporary solution is still in use :lol::lol: Need more specs of your build: What is your inje...
by olafu
Thu Jun 21, 2018 10:51 am
Forum: Bosch
Topic: M3.3.1 motronic (413 and 506) tuning and XDF update?
Replies: 228
Views: 82700

I wil try those, when we have our dyno in working order again. Thanks!
by olafu
Thu Jun 21, 2018 10:36 am
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

I was never changed injectors. But i can try to explain: By changing injector scaling/constant, you are actually changing a load calculation factor. Raw max. load is 255 in decimal, and it's 12.75ms in "load" value, if we use x/20 conversion. Now, if you change your injectors, say, for example big a...
by olafu
Thu Jun 21, 2018 5:37 am
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

But how did you rescale the injector flow in ROM?
by olafu
Wed Jun 20, 2018 9:49 pm
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

We have A/T car with manual gearbox. Works fine, all A/T stuff is removed, but wiring harness still has A/T controller connector. How did you actually re-scale your injectors? What values you are changed from ROM? All load dependent tables must be rescale. missing v-signal makes your engine run abou...
by olafu
Tue Jun 19, 2018 10:14 pm
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

WOT tables, as also PT and idle tables, are not actual injection time. It's correction factor. 128 is "basic" value.
by olafu
Mon Jun 18, 2018 11:24 am
Forum: Bosch
Topic: M3.3.1 413
Replies: 44
Views: 7495

623 bin: There is throttle position tables for idle/pt/wot transition. I have no idea where is rpm axis data for those tables... But rpm's are about 1800, 2000, 2400, ???? for idle-pt and 2000, 2400, 3200, ???? for pt-wot. idle-pt 4x1 table, 0xD53C pt-wot 4x1 table, 0xD540 What MAF you are using? MA...
by olafu
Sat May 19, 2018 10:48 pm
Forum: Bosch
Topic: M3.3.1 motronic (413 and 506) tuning and XDF update?
Replies: 228
Views: 82700

I believe this K value should be used as both a tuning factor for adjustment of injector size and engine size to attempt to maintain an ideal VE correction factor of 128 for the part throttle tables. I think such same way: D5 and D6 are 8bit load values, D5 filtered and D6 raw, but only 8bit. So, m...
by olafu
Sat May 19, 2018 9:40 pm
Forum: Bosch
Topic: M3.3.1 motronic (413 and 506) tuning and XDF update?
Replies: 228
Views: 82700

D2 "descriptor" seems it's RPM negative delta. D2 value increases when engine speed is decreasing, and D2 is higher when speed decreasing rate is higher.