it's scary what can be found in an ECM

I would imagine the OEM's are getting tired of warranty claims entirely due to some piece of chit box tune blowing out head gaskets or melting pistons.....
The EPA could be imposing influence to the OEM's to make it harder and harder for a tuner to mess with the calibration.
I suspect a bit of both is happening there. GM implemented a flash counter on the LMM, the dealer knows if you messed with the tune and returned to stock for a warranty claim.

Ross will be the first to tell ya, he's not the tuner. He's not going to tell you that X degrees of timing or X uS of duration or X PSI of pressure is the way to go.
Too right, I sit in front of a computer all day decoding hex naumbers and assembly code in to pretty 3D graphs for you guys. Just like the people that wrote the software for the Starbucks ordering system probably can't make a decent coffee, well, come to think of it, nor can Starbucks, but that's a debate not for this forum, but you all get the analogy right?.

I'm interested if you keep the ECM from transmitting CAN data? In theory even though you could not read the tables you could still log the outputs and recreate the tune fairly easy.
I believe this method was suspected to be used on the Duramax years ago, as I recall someone requested we add in some way to shut off scantool data. It was never done.

My question to efilive was never answered, if they typically brute force the "lock".
It was 3am here in Aus when you guys were at it. :aiwebs_024:
Ok, all ECM's are locked in some way from the OEM, to get access to them you need to provide an unlock code. So before a read or reflash you have to 'unlock' the ECM using a specific algorithm before the ECM will continue. This is different to blocking a read, blocking a read is done by changing the normal behaviour of the read routines in the ECM, well that is how we did it. From what I am told, none of the box tuners actually read the ECM before flashing, the tunes are stored in the units, so a read block by the OEM would do nothing in that case. We prefer people read the ECM in their truck rather than use some generic base. That probably comes from the GM background we have where swapping tunes between trucks can cause problems.

Whiteroom reverse engineering is fair game. However their are copyright issues at hand.
As i said before, its grey area. lots of it. Its a good thing this market does more for oem's then hurt them, its a shame the epa's wants it to stop.
If the OEM's felt so bad about people tuning vehicles they could stop it all on the 2013 models for good. The encryption and password technology around today if used could put an end to it all. As I'd said earlier, if you used some of Cummins or GM's code in your own ECM design then they probably have every right to take action against you. But where does it stop? You fit triple wiper blades to your truck, does the company who made them open themselves up for legal action because they used the OEM blade as the sample.
The EPA is a tricky situation because tuning can result in a clean powerful truck or a coal train depending on the mindset or skills of the tuner. Much like fitting a bunch of parts without re-tuning can result in a poor running truck, what is worse? I don't speak for the EPA here but I suspect in their eyes the ideal situation is you would never modify your truck from stock.
I see a change in thinking coming on stronger and stronger each year we go to SEMA. Gone are the days of people wanting to fill 3 lanes of the highway with soot for fun, instead people want to still modify their trucks but not be embarrassed to put the foot down on the street. Of course that is not achievable with proper retuning of the ECM.

But, its ok to show oem and other box tunes you read? gotchya. ;)
I think where this has all come from is the technical tuning questions about these products have gone unanswered forever. I've read it all myself on here, guesstimate tuning methods with no technical explanation about what setting does what is a recipe for disaster.
So when these box tuner screen shots get posted up, people now have some idea that when they mess with the settings it can make massive changes. If the manufacturer of said box can't provide the data then don't feel sorry for them when it's out there for all to see in a 3D map.
I would also be pretty confident in suggesting that now a year on from our 5.9L release there would be few tuning shops who would consider using a box tuner as a base if they are using EFILive, they've seen what they change and how they do it and now know why they used to drive like they do.
 
I think where this has all come from is the technical tuning questions about these products have gone unanswered forever. I've read it all myself on here, guesstimate tuning methods with no technical explanation about what setting does what is a recipe for disaster.
So when these box tuner screen shots get posted up, people now have some idea that when they mess with the settings it can make massive changes. If the manufacturer of said box can't provide the data then don't feel sorry for them when it's out there for all to see in a 3D map.
I would also be pretty confident in suggesting that now a year on from our 5.9L release there would be few tuning shops who would consider using a box tuner as a base if they are using EFILive, they've seen what they change and how they do it and now know why they used to drive like they do.

Yep.
 
Jason,

Obviously, Flashscan knows his stuff. The OEM ECM first has to be unlocked. However, even if someone were given an "unlocked" or "open" ECM from an OEM, chances are very good that they wouldn't be able to do anything with it.

I've dealt with several OEMs "open" ECMs, and it's a complete puzzle at first trying to tune anything, because the variable names are coded. For example, there's not a variable called "Pilot injection fuel quantity for cylinder 1"...rather, it might be called "spi_fpc_boi_84-446cyl1.dii". After playing around with things, you can kindof get a feel for grouped variables...i.e. ones that deal with timing, ones dealing with fuel quantity, ones dealing with EGR, etc. Usually the coded names aren't random. Oftentimes I've seen shortened german word abbreviations as part of the coding. I don't recall off the top of my head, but there may be a KW somewhere in the code that stands for "kerbel winkel" or degree crank angle...or there may be a HZ for "halterzeit" or injector hold current.

From my limited understanding, the first part of the puzzle is "unlocking" the ECM. The second is deciphering the string variable names into things that you recognize.

There have also been certain OEMs that have alternate maps encoded based on initial inputs. For example, an unnamed OEM had a special startup map that would initialize when throttle inputs, engine speed, etc matched that of the emissions testing protocol Federal Test Procedure. This special map was biased toward emissions compliance. However, when the truck was started normally, it would default to the base map, which was tailored toward optimized BSFC and performance.

These odd ball operating regimes can cause even more confusion if you happen to stumble into them and wonder why nothing you do seems to effect anything.

--Eric
 
Back
Top