[vespa]

UPDATE: A simple automated method has been developed by portalseo. Just put his program on a USB stick, plug it into the glovebox, and your 1b file will appear on the stick:
http://www.e90post.com/forums/showthread.php?t=1461515

Many thanks to Rotary Rasp and many others for developing these tools and techniques, I just combined several approaches to find a 12 step program. Here goes:

1. Get a ENET cable (yes, even though e9x doesn't normally use ENET). These typically end up costing about $5 by the time you pay for shipping and everything, but you can certainly save some money by making your own. Search eBay for "bmw enet", see this example for pre-made cables, or make your own with these instructions.
2. Set your PC/Android/Mac ethernet port to IP: 169.254.199.98, subnet: 255.255.255.0, Gateway: 169.254.199.99, any DNS
3. Connect the cable and turn on the car (acc mode is fine)
4. In your web browser go to: ftp://169.254.199.99
5. It should prompt for a login, user name is "root", password is either "Hm83stN)" or "cic0803"
6. Click the link to go up a directory a couple of times then browse to /HBpersistence/normal and download the file "generalPersistencyData_DiagnosticSWTControlle r"
7. Disconnect from the car and get that file into Windows
8. Open the file in a hex editor like Hxd http://mh-nexus.de/downloads/HxDSetupEN.zip
9. Press CTRL-F to search, change the search mode to "Hex" and then search for "01 01 00 1B”. Note that the data just before this should read "3F 01 00 00", otherwise see 9a below.
10. Highlight and delete everything prior to "01 01 00 1B”
11. Go to line (offset) 130 and delete the last block and everything after. The data to be deleted should begin with "3F 01", otherwise see 11a below.
12. Save the file as "a.hex", which should be exactly 319 bytes


Alternative options:
1a. Use a very particular USB-Ethernet adapter per a thread on the other board titled "showthread.php?11728-Get-1B-file-from-Exx-CIC-WITHOUT-ICOM" In this case the address settings may be:
Static IP:160.48.199.98 Mask:255.255.255.128 Gateway/CIC IP:160.48.199.99
or: Static IP:10.250.89.1 Mask:255.255.0.0 Gateway/CIC IP:10.250.89.2
2a. Use tftp32 to turn your computer into the host and force the CIC to the IP address of your choosing. Set your PC to a static IP address (e.g. 192.168.10.10/255.255.255.0) Launch TFTD32 and bind it to your wired adapter. Under the options tab, set the start address to 192.168.10.11 with at least 2 for the pool size. Reboot your CIC by pressing the VOLUME button for about 30 seconds. The CIC will now be accessible at the address you specified, 192.168.10.11 in this case. See post #200 for more details.
4a. Use tftp32, WinSCP, or similar to make the FTP connection. You can check the "anonymous" box to login without a password. In this case the file will be called "data03" and located at “/mnt/hbdebug/”
9a. Sometimes the 1b file is not 319 bytes. The data that you cut in step 10 should end with "...01 3F 01 00 00" where "01 3F" is big endian hex for 319. If you have something different you need to translate it and cut the file accordingly. Note that most online hex-decimal converters expect little endian so to translate 01 3F, enter 3F01.
11a. Sometimes the download process inserts extra carriage returns (hex "0D") into the file and fsc.exe will give an error "Version after create () = 0xD1". It seems normal files have only one instance of "0D" near the end so try deleting any earlier instances until you get to 319 bytes. See more advanced detail in the bmw coding thread "get 1b file from Exx CIC without ICOM" starting at post #296.

[GreQonE]

Could you tell me what this process is supposed to achieve?

[DaZuc]

Originally Posted by GreQonE

Could you tell me what this process is supposed to achieve?

+1
What is this for?

[vespa]

One thing you can do with the 1b file is generate a FSC code for map updates.

Download the mega link at the top of the post here. NBT users should follow that post but CIC users can ignore everything there, just get the Generator.rar from it and move on. Don't read any instructions in the RAR or anywhere else, you don't need to install anything, edit .bat files, figure out year codes, or have Ediabas installed, just extract the one file titled: "fsc.exe" from that rar and place it in whatever directory you have your "a.hex" file in. Super simple.
Update: Jagaer has an improved version here: http://www.e90post.com/forums/showthread.php?t=1453464

Then from the C:\> prompt in that directory just type something like:
fsc a.hex 0x2D 0xFF > code.txt
Which will create a file called code.txt containing your FSC code. If the file ends up blank or the code doesn't work, make sure your a.hex file is 319 bytes (right-click -> Properties) and make sure your 1b file shows your VIN like this example. If you still get blank files see post #122.

For other regions/systems, type the following:

Premium Maps:
Europe: "fsc a.hex 0x28 0xFF > code.txt"
North America: "fsc a.hex 0x2D 0xFF > code.txt"
South America: "fsc a.hex 0x2F 0xFF > code.txt"
Australia/New Zealand: "fsc a.hex 0x30 0xFF > code.txt"
South Africa: "fsc a.hex 0x35 0xFF > code.txt"
Arabian Gulf: "fsc a.hex 0x36 0xFF > code.txt"
Japan: "fsc a.hex 0x37 0xFF > code.txt"
Taiwan: "fsc a.hex 0x38 0xFF > code.txt"
Korea: "fsc a.hex 0x39 0xFF > code.txt"
China: "fsc a.hex 0x3A 0xFF > code.txt"
HongKong/Macao: "fsc a.hex 0x3B 0xFF > code.txt"
India: "fsc a.hex 0x3E 0xFF > code.txt"
Singapore/Malaysia/Thailand/Southeast Asia: "fsc a.hex 0x3F 0xFF > code.txt"
Turkey: "fsc a.hex 0xC4 0xFF > code.txt"

Motion Maps:
Europe: "fsc a.hex 0x47 0xFF > code.txt"
South America: "2010fsc a.hex 0x4D 0xFF > code.txt"
Australia/New Zealand: "fsc a.hex 0x4E 0xFF > code.txt"
Arabian Gulf: "fsc a.hex 0x54 0xFF > code.txt"
Southern Africa: "fsc a.hex 0x6A 0xFF > code.txt"

Move Maps:
Europe: "fsc a.hex 0x88 0xFF > code.txt"
North America: "fsc a.hex 0x89 0xFF > code.txt"
Southern Africa: "fsc a.hex 0x8A 0xFF > code.txt"
Arabian Gulf: "fsc a.hex 0x8B 0xFF > code.txt"
Australia/New Zealand: "fsc a.hex 0x8C 0xFF > code.txt"
South America: "fsc a.hex 0x8D 0xFF > code.txt"

Next Maps:
CHINA HONGKONG MACAO: "fsc a.hex 0xA4 0xFF > code.txt"
TAIWAN: "fsc a.hex 0xA5 0xFF > code.txt"
KOREA: "fsc a.hex 0xA6 0xFF > code.txt"
JAPAN: "fsc a.hex 0xA7 0xFF > code.txt"
NORTH AMERICA: "fsc a.hex 0xA8 0xFF > code.txt"
EUROPE: "fsc a.hex 0xA9 0xFF > code.txt"
TURKEY: "fsc a.hex 0xAA 0xFF > code.txt"
AUSTRALIA / NEW ZEALAND: "fsc a.hex 0xAA 0xFF > code.txt"
ARABIAN GULF: "fsc a.hex 0xAB 0xFF > code.txt"
NORTHERN AFRICA: "fsc a.hex 0xAC 0xFF > code.txt"
SOUTHERN AFRICA: "fsc a.hex 0xAD 0xFF > code.txt"
SOUTHEAST ASIA: "fsc a.hex 0xAE 0xFF > code.txt"
SOUTH AMERICA: "fsc a.hex 0xAF 0xFF > code.txt"
INDIA: "fsc a.hex 0xB0 0xFF > code.txt"
ISRAEL: "fsc a.hex 0xB1 0xFF > code.txt"

Alternately, you can skip the 1b file stuff and just buy FSC codes here.

Note: Script-hacked CIC's will not accept a FSC code directly, contact your scripter.

[_TB_]

IS that code only for map updating? Or can it generate FSC codes for navi and voice?

[palmerl0222]

Hi,

I just followed your instructions - Managed to get logged in using the username and password in your thread.

However i can only see 2 files and no upper directories.

I only see:

".netinit" and ".profile"

I have a 2010 325d with Business Navigation running CIC. Any ideas??

Thanks

[vespa]

As I recall, mine looked just like that with those two files seemingly in the root but there was a link just above them that took me back one directory. Maybe it's browser dependent or maybe the Business CIC is different? Try Firefox or a dedicated FTP program. In MacOS you can hit Command+K to pull up the “Connect to Server” window and enter the FTP address there.

[palmerl0222]

Hi

You was right - Chrome doesn't let you see the directories above. I used "CyberDuck" on my mac and have successfully downloaded the file you specified.

Going to attempt the rest now

Thanks for the help!!! :-)

[2kaccordocoupe]

Thanks Vespa - worked like a charm to update to 2015-2 on friday then 2016-1 this morning.

[palmerl0222]

Hi,

Do you know where i might find a list of map codes. I'm using the 1B file to generate an FSC code for the follow map: Europe Motion West 2015-2

I think it is 0x47 but was just wondering if you knew of a complete list so i can browse it if my friends want different regions.

Thanks

[dbworld4k]

Worked like a charm! Thanks for posting this find, I've been looking for over a year for a FSC code generator.

By the way, do you know how to use the 1B file to generate a FSC code for other uses than GPS maps, or is does the same code work for every thing else that needs it?

[Dracon]

Originally Posted by dbworld4k

Worked like a charm! Thanks for posting this find, I've been looking for over a year for a FSC code generator.

By the way, do you know how to use the 1B file to generate a FSC code for other uses than GPS maps, or is does the same code work for every thing else that needs it?

It's only for GPS maps, you cannot generate FSC codes for other functions.

[StevenY.]

Originally Posted by palmerl0222

Hi,

Do you know where i might find a list of map codes. I'm using the 1B file to generate an FSC code for the follow map: Europe Motion West 2015-2

I think it is 0x47 but was just wondering if you knew of a complete list so i can browse it if my friends want different regions.

Thanks

Check this post.
http://f30.bimmerpost.com/forums/sho...1&postcount=91

[palmerl0222]

Originally Posted by StevenY.

Check this post.
http://f30.bimmerpost.com/forums/sho...1&postcount=91

Thanks for the link StevenY.

Just another quick question, do you know what the 0xFF means?

Example: Europe: "fsc a.hex 0x47 0xFF > code.txt"

I was told this means the map year your licensed for, like 0x12 is 2020 so is 0xFF Lifetime?

Thanks

[StevenY.]

Originally Posted by palmerl0222

Thanks for the link StevenY.

Just another quick question, do you know what the 0xFF means?

Example: Europe: "fsc a.hex 0x47 0xFF > code.txt"

I was told this means the map year your licensed for, like 0x12 is 2020 so is 0xFF Lifetime?

Thanks

Hm, I'm not really sure if 0xFF is lifetime since I just plugged in the year of the maps I was installing. Maybe someone with more knowledge can answer you on that.

[vespa]

Yes, 0xFF generates a lifetime FSC code. This code only needs to be entered once and then new maps can be installed without any code entry for the life of the vehicle.

[2kaccordocoupe]

Originally Posted by vespa

Yes, 0xFF generates a lifetime FSC code. This code only needs to be entered once and then new maps can be installed without any code entry for the life of the vehicle.

Exactly, I generated a code for the 2015-2 update using "fsc a.hex 0x2D 0xFF > code.txt". Then when I did the update to 2016-1 it worked without having to enter any FSC.

[Dracon]

Originally Posted by palmerl0222

Thanks for the link StevenY.

Just another quick question, do you know what the 0xFF means?

Example: Europe: "fsc a.hex 0x47 0xFF > code.txt"

I was told this means the map year your licensed for, like 0x12 is 2020 so is 0xFF Lifetime?

Thanks

Originally Posted by StevenY.

Hm, I'm not really sure if 0xFF is lifetime since I just plugged in the year of the maps I was installing. Maybe someone with more knowledge can answer you on that.

Originally Posted by vespa

Yes, 0xFF generates a lifetime FSC code. This code only needs to be entered once and then new maps can be installed without any code entry for the life of the vehicle.

Originally Posted by 2kaccordocoupe

Exactly, I generated a code for the 2015-2 update using "fsc a.hex 0x2D 0xFF > code.txt". Then when I did the update to 2016-1 it worked without having to enter any FSC.

Technically yes, it's "lifetime" however, there have been reported instances of BMW refusing service on navigation units with these type of FSC codes loaded.

So it's beware to the end user.

[vespa]

Technically yes, it's "lifetime" however, there have been reported instances of BMW refusing service on navigation units with these type of FSC codes loaded.

In the US, the Magnuson-Moss Warranty Act of 1975 ensures that manufacturers cannot void warranties without substantial proof that the end-user modification directly caused the failure. It would be pretty tough for them to prove that an activation code somehow caused the system to fail.

Nevermind the fact that they have neither a method nor a motive to access and decrypt the code in the first place. Remember, the dealership *makes* money by doing warranty repair work so it's in their best interest to replace parts now and ask questions later (or never). Furthermore, they don't have any cryptographic hacking tools, just a 20 year old kid with INPA.

I expect any such rumors of denied warranty service come from some kid who asked his SA "hypothetically" if such a code would void the warranty and was told "hypothetically yes."

At any rate, for those prone to paranoia, the system presumably only stores one code at a time so you should be able to "undo" the lifetime activation by loading another map region and then switching back to your current region.

[dbworld4k]

Originally Posted by vespa

Yes, 0xFF generates a lifetime FSC code. This code only needs to be entered once and then new maps can be installed without any code entry for the life of the vehicle.

Originally Posted by 2kaccordocoupe

Exactly, I generated a code for the 2015-2 update using "fsc a.hex 0x2D 0xFF > code.txt". Then when I did the update to 2016-1 it worked without having to enter any FSC.

That is absolutely awesome.

[sudo4re]

Just want to say this is an awesome contribution to the community. I was able to extract my 1B code and generated the correct FSC code for my map update. I think I downloaded a bad copy of the map though because I keep getting the unreadable data error at 35% of USB2. Trying to redownload the map and attempt to install again.

[sudo4re]

Re-downloaded the map and tried it again with a different USB drive, still bad data at 35-37% of USB2... Argh!

Is there anybody out there with a link to the content of USB2 that I can download? Thanks.

North America Premium 2016-1