View Single Post
Old 12-22-2020, 04:07 PM   #1
Gimpster   Gimpster is offline
 
Join Date: Dec 2020
Location: Palm Bay, FL
Posts: 29
Hawk DLX (EFI) Datalogging & Tuning Thread

I got some feedback we should start a Hawk DLX specific datalogging & tuning thread, so here we go. Lets make this a living document, and help each other out the best we can. I have respect for the commercial tuners out in the world, but I prefer to DIY when I can

I am by no means an expert on this platform in any sense of the word, but I have self tuned many personal vehicles. I also was part of a reverse engineering project on early Honda and Mitsubishi ECU's at one time. I will update this post new things come to light, and please call out things you see change or are wrong as time goes on!

I know many people aren't comfortable with this, but for some of us... this is likely why we bought the DLX. I just prefer fuel injection, I understand it pretty well and enjoy the benefits it can bring when tuned properly.

Overview:

Hawk DLX currently ships with the Delphi MT05.2 ECU. This ECU has been around the block a while, and you often see it (in the United States anyway) on lawn equipment even. Specifically I have seen it on Kohler engines, and I'm sure it's on others too.

The ECU does support datalogging, flash read and write capabilities.

I have done a lot of work on my end to trace down the origin of the components on my personal website, but in summary:
  • 32mm throttle body, with an integrated (IE: single component) MAP, TPS and IAT/MAT & older GM/Delphi style IACV (idle air control valve)
  • Delphi style EV6 fuel injector w/USCAR connector, flow rate currently unknown to me
  • Returnless in-tank fuel pump setup. Once you disassemble the fuel pump basket, it appears to be a pretty run of the mill / off the shelf pump you see on a lot of EFI bikes. IE: older Suzuki and Honda's
  • Run of the mill 4 wire narrowband oxygen sensor, uses M12 thread
  • Cylinder head temperature sensor, threaded into the cylinder head
  • Unknown (to me right now anyway) crank trigger setup. I am meaning to pull the stator cover off sometime to see what they did there for sure, but I've not had a chance ... too busy riding hopefully we'll know more about this soon

Datalogging:

We are in luck, a great member of the community has created software to replace the almost unusable MSDOS datalogging software Delphi wrote. It runs on modern versions of Windows, and it has some emerging features we'll talk more about later. Please acknowledge this hard work and donate an amount to a charity of your choice as outlined in the website below.

HUD ECU Hacker: https://netcult.ch/elmue/HUD%20ECU%20Hacker/

You will need to build or buy an adapter cable to interface from the Hawk's diagnostic connector to a supported diagnostic cable/dongle (these are outlined on the HUD ECU Hacker website). The Hawk diagnostic connector is a 6 pin connector located between the frame and fuel tank (if you are looking at the motorcycle front to back) on the right side.

Technically speaking, every bit of info you need to build or buy a cable is also on the HUD ECU Hacker page.

If you prefer to see a video, see f15sim's great video on making a cable here:

This is my cable:






Reading / Flashing:

HUD ECU Hacker - As of v2.8+, HUD ECU Hacker can read AND write the flash contents from the ECU.

Costs:
  • Donate to your favorite charity (sharityware)
  • You still need to make a diagnostic cable, but you needed one anyway (~$20-30USD)
BitBox - A company called BitEdit (more on them later) offers BitBox, which can read AND write to the ECU. This is an additional fee on top of BitEdit, and (from what I can tell) you have to own a more expensive J2534 (Tactrix Openport) adapter. So it starts to get a little pricey when you add all that up. There are clones of the Taxtrix adapters out there, but I have no experience with them. If you do, please chime in.

Costs (as of 12/23/2020, these will vary by vendor):
  • BitEdit USB Security Dongle (only need one dongle for both) - ~$35USD
  • BitBox License for Delphi MT05.x - ~$325USD
CombiLoader - CombiLoader can also read and write, but this not software I own or have access to at this time. Mostly I've heard of this software in automotive (European cars specifically) applications. If you have experience with this software, please chime in.

Costs:
  • TBD
One thing to note, the MT05 operates at 10400 baud if using an ELM327 adapter. Given its a 256k flash image on the MT05.2, that means it takes quite a bit of time to do full dumps/flashes.

The VAG K-Line adapters can operate about 4x faster, so they make a better choice and I would recommend that given how many ELM327's are counterfeit anyway.

Commercial Calibration Editing Software:

At this time, I am aware of two commercial offerings for the Delphi MT05.x:

BitEdit - I have sent BitEdit the .bin from my bike. They replied that "it is supported", but I have not seen that directly. BitEdit, generally speaking, is not very well regarded on their calibration mappings. I've received that feedback from multiple users of BitEdit, including some using it for Delphi MT05.x tuning.

BitEdit is reasonably priced though, but it requires a hardware dongle AND you have to be online when you use it. It constantly phones home to mother Russia (literally in this case). You can search and buy it online from a number of retailers.

I did get a user on Facebook to open the .bin from my bike, and share a screenshot though.. and it looks promising enough I'll likely buy it.

Costs (as of 12/23/2020, these will vary by vendor):
  • BitEdit USB Security Dongle (only need one dongle for both) - ~$35USD
  • BitEdit License for Delphi MT05.x - ~$150USD

ChipTuning Pro - I know very little about this software, it is ONLY available in Russian language. If you have experience with this software, please chime in.

Costs:
  • TBD

DIY / Free Calibration Editing Software:

Freeware - This leaves us with also trying to reverse engineer this a bit ourselves and use a software such as TunerPro to create a basic definition. I have looked at the .bin a bit, and I am pretty sure I've found the main VE and likely the timing tables.

However, tables are the easy part. The part that really matters is defeating or reverse engineering the checksum function. In short- without defeating that, the ECU will think anything you're writing to it is corrupt. This will be key to defeat if we hope to keep the costs down on DIY tuning.

BitBot and CombiLoader handle this for you on writing.

Without a disassembly, which may or may not be possible (still looking into this), it will be hard to truly do anything super comprehensive. I welcome anyones expertise here, as I've been out of the DASM game a while.

I has been suggested to me to look into this: https://github.com/NationalSecurityAgency/ghidra

Yah.. that NSA. That tool is apparently at or exceeds what old IDA Pro could do?

Something also worth noting is that I've gotten my hands on a lot of different MT05.x tunes. They move tables around on almost every one, so it means you're basically creating a definition per motorcycle! BitEdit is not really expensive in the grand scheme of things, so it really may be worth just paying for that.
Attached Files
File Type: zip RPS Hawk DLX v1.0.zip (14.4 KB, 146 views)
__________________
2020 RPS Hawk DLX

My Hawk DLX info page: https://www.ecimulti.org/hawk250



Last edited by Gimpster; 01-08-2021 at 10:18 AM.
 
Reply With Quote