[hassmaschine]

actually I'm not sure you have a limp mode at all. There would be codes present. Typically you would get limp mode from this type of tune because the power class doesn't match, but that's the whole point of this file.

It's possible the PBX is messing something up, but it doesn't really do a whole lot anyway so I'm not sure about that.

I thought maybe you might have a different chassis or possibly an N51 but looking at your car's data it's just a vanilla N52N. I would try disabling the PBX and resetting adaptations. Is it possible somebody edited your CAS to change the power class? that's the only reason I could think of for you to get a limp mode.

[Terraphantm]

Originally Posted by rjahl

I've done a little more checking on CVN numbers and it's actually a documented feature of the ODB protocols.

ODB mode $09 is used for vehicle information and the CVN number is part of this group. The CVN number usually being a checksum of the installed software but the implementation is up to the manufacturer.

This is the tool manufacturers use to check integrity of the installed software. I expect some smog stations could have access to this data but I don't think it's checked.

I found the CVN to checksum relationship by accident a while back and never followed up with the research until today.

I know there are defeats with the MSV70 but I can't think of any reason why you would need to go to those extremes. As Hassmachine mentioned the warranties on these cars has expired a long time ago.

We can probably defeat that. The crc initial value is adjustable (default is usually 00000000 or ffffffff), so it should be a matter of just doing some math to force the crc to a value we want.

[Terraphantm]

Originally Posted by hassmaschine

actually I'm not sure you have a limp mode at all. There would be codes present. Typically you would get limp mode from this type of tune because the power class doesn't match, but that's the whole point of this file.

It's possible the PBX is messing something up, but it doesn't really do a whole lot anyway so I'm not sure about that.

I thought maybe you might have a different chassis or possibly an N51 but looking at your car's data it's just a vanilla N52N. I would try disabling the PBX and resetting adaptations. Is it possible somebody edited your CAS to change the power class? that's the only reason I could think of for you to get a limp mode.

Also worth trying to just recode the DME with ncs.

[hassmaschine]

He did that and 2FA3 and 2FA4 are no longer present. I'm thinking it's possibly the PBX, adaptations, or some other hardware issue (bad DISAs, etc).

[rjahl]

Ya, My Z4 is still under warranty and I've been reluctant to install a tune knowing that I would need to remove it before going to the dealer. Long term, and looking at newer platforms, I think you need a CVN defeat as well.

[hassmaschine]

Do they really check that though? I have a hard time seeing that anyone does. Maybe at a CA emissions check place?

It's been around forever, and I've never heard of anyone getting "caught" with a bad CVN.

anyway, I doubt they are calculating the checksum from scratch, they likely just read the value stored in the DME. The easiest way to defeat it would be to just move the location of the checksum, then leave the original "stock" value that matches the CVN.

[Terraphantm]

Originally Posted by hassmaschine

Do they really check that though? I have a hard time seeing that anyone does. Maybe at a CA emissions check place?

It's been around forever, and I've never heard of anyone getting "caught" with a bad CVN.

anyway, I doubt they are calculating the checksum from scratch, they likely just read the value stored in the DME. The easiest way to defeat it would be to just move the location of the checksum, then leave the original "stock" value that matches the CVN.

It's more likely they read what the DME calculates.

I think some of the stricter emissions places check CVN, but Florida definitely isn't in that category. BMW doesn't seem to check for a tune either.

[hassmaschine]

You could probably alter the routine so it just returns whatever value you like. Then it wouldn't matter how it's really calculated.

[Terraphantm]

Originally Posted by hassmaschine

You could probably alter the routine so it just returns whatever value you like. Then it wouldn't matter how it's really calculated.

Yeah but the routines are pretty messy, and our RSA delete is dependent on the program being mostly untouched. It really isn't that hard to force a CRC, especially when you're able to edit the initial value to your liking. I just have to wrap my head around the math a little bit.

[hassmaschine]

if we were to do that, I think it would be best to come up with an algorithm that automatically calculates the required initial value - assuming that's possible.

[Kdubs88]

Originally Posted by hassmaschine

He did that and 2FA3 and 2FA4 are no longer present. I'm thinking it's possibly the PBX, adaptations, or some other hardware issue (bad DISAs, etc).

Okay I’m gonna put the pbx on map 0, and go into inpa and reset adaptations. I know the disas are good, the 3IM came off of my wife’s x3, and she got my old one.

[Kdubs88]

Originally Posted by Kdubs88

Okay I’m gonna put the pbx on map 0, and go into inpa and reset adaptations. I know the disas are good, the 3IM came off of my wife’s x3, and she got my old one.

I did it, and nothing changed. The car is actually a lot slower with the pbx off

[hassmaschine]

the PBX doesn't add any power, so I'm not sure how that's possible.

Are you sure there are no error codes? There are literally like 80 people running the same tune on the same car, so I think there's a problem somewhere else.

[Kdubs88]

Originally Posted by hassmaschine

the PBX doesn't add any power, so I'm not sure how that's possible.

Are you sure there are no error codes? There are literally like 80 people running the same tune on the same car, so I think there's a problem somewhere else.

That’s true, but the pbx adjusts the throttle response. I guess power wasn’t the right word but the car feels slower with it off. What do you suggest I do? Should I try to flash the file again?

[hassmaschine]

no, that won't change anything (if the flash fails it wouldn't start).

Have you reset adaptations (with the engine off)? Don't do this if you need to smog your car in the near future. But it might help. Also, you may have to clear codes and restart the car after resetting throttle adaptations.

[Kdubs88]

Originally Posted by hassmaschine

no, that won't change anything (if the flash fails it wouldn't start).

Have you reset adaptations (with the engine off)? Don't do this if you need to smog your car in the near future. But it might help. Also, you may have to clear codes and restart the car after resetting throttle adaptations.

Yes I reset adaptations with the key in the on position but the engine not running. I’ve also cleared codes with inpa. When I went into ncsexpert and reset the dme, the codes went away but now the car feels slower than it did before I started this process.

[Kdubs88]

Bump

[hassmaschine]

I'm thinking you may have an issue with hardware - disas etc. With no error codes, I don't know what else I can do.

[enriqxxx]

DME/DDE - MSV80 2FA3 Codierung fehlt my bmw E90 2010. Did you solve this problem?


it does not work...

1. Load NCSExpert.
2. Load Profile and select Expertmode
3. F1 (VIN/ZCS/FA)
4. F3 (ZCS/FA f .ECU)
5. Choose E89 (for the E9X)
6. Select CAS
7. F6 (BACK)
8. F4 (Process ECU)
9. Select the Module I want to Revert back to Stock.
10. F2->Choose "SG_Codieren->ok
11. F3->to start coding the ecu with factory settings according to the vehicle VO.

[hassmaschine]

2FA3 is not really a problem. You can either ignore it (because it does and means literally nothing), or you can default code the DME using NCS expert, which makes the (pointless) error code go away.

[enriqxxx]

I execute ISTA-D 4.15.32 but I don't solve it ME 2FA3. But if I resolved DSC 5DD2 5DD0 I attached the image of 2FA3

[enriqxxx]

Originally Posted by enriqxxx

DME/DDE - MSV80 2FA3 Codierung fehlt my bmw E90 2010. Did you solve this problem?


it does not work...

1. Load NCSExpert.
2. Load Profile and select Expertmode
3. F1 (VIN/ZCS/FA)
4. F3 (ZCS/FA f .ECU)
5. Choose E89 (for the E9X)
6. Select CAS
7. F6 (BACK)
8. F4 (Process ECU)
9. Select the Module I want to Revert back to Stock.
10. F2->Choose "SG_Codieren->ok
11. F3->to start coding the ecu with factory settings according to the vehicle VO.

That's correct. The MSD80/MSD81 DME is 62BMO.


I could already with this annoying error 2FA3.