Pages: 1 ... 15 16 [17] 18 19 ... 21
Author Topic: 06A906032HN, Implementation of launch-control and NLS  (Read 214178 times)
jawier130
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 4


« Reply #240 on: June 20, 2013, 02:15:03 PM »

Hi. I have a problem with ME7info.
When i run:"me7info -n file.bin" in my 512 Kb .bin
it say me findfirst in illegal range 00008391 - 000083d1
HuhHuhHuhHuhHuhHuhHuhHuhHuh
Logged
vwmaniac
Full Member
***

Karma: +8/-5
Offline Offline

Posts: 169


« Reply #241 on: June 21, 2013, 10:01:40 AM »

PLEASE HELP I still can not get this to work on my 12v VR6 me7.1 ecu. I have tried mutiple NLS counter positions and i know all my address are correct. Does anyone have any ideas? I have posted the stock file. I also used the .exe script to pull the address also and even with those address it still will not work. I know my brake and clutch switches are working correctly via vag-com. If some one would please take a look at my file and tell me what the issue is I would be forever greatful. It is a 512k file and i have compared other 512k files and see no problems when doing a comparison. I have a damos for 12v vr6 and have used that to locate ftomn. the 12v vr6 does use a coil pack design instead of individual coils so i don't know if that is a hardware issue or not. so attached are my stock bin, new bin with function and my .ecu file.
also here are the locations of everything:

ftomn- 1670A
function call - 5EE06
function location-7A700
conditions-17E00
 if you guys need any more info to help me just ask i will be happy to prvide it. Thank you in advance, PLEASE HELP
Logged
adam-
Hero Member
*****

Karma: +122/-33
Offline Offline

Posts: 2178


« Reply #242 on: August 22, 2013, 01:45:43 AM »

Hi guys
Could you check if I did it correctly on my file?

My Call DA 8A 00 9C

Variables at 17EC0

tsrldyn    0x380BB5,   
B_kuppl    0x00FD4E.3
nmot_w     0x00F89E,           
wped       0x3809B1,   
B_brems    0x00FD4C.15       


Function Parameters:
-------------------
SpeedThreshold:      0x17EC0 size 2, 16bit LSB 
LaunchRPM:       0x17EC2 size 2, 16bit LSB       
IgnitionCutDuration:   0x17EC4 size 2, 16bit LSB 
RPMThreshold:       0x17EC6 size 2, 16bit LSB   
FTOMN  0ms

Code

9A 27 13 30 F2 F4 40 8E D7 00 81 00 F2 F9 C0 7E
40 49 9D 0B F2 F4 9E F8 D7 00 81 00 F2 F9 C2 7E
40 49 FD 03 F7 8E B5 8B 0D 2F 9A 27 29 30 8A 25
22 F0 F2 F4 9E F8 D7 00 81 00 F2 F9 C6 7E 40 49
FD 1A C2 F4 B1 89 D7 00 81 00 C2 F9 C8 7E 40 49
FD 12 D7 00 38 00 F2 F4 F0 4F D7 00 81 00 F2 F9
C4 7E 40 49 9D 11 F7 8E B5 8B 08 41 D7 00 38 00
F7 F8 F0 4F 0D 09 D7 00 38 00 F6 8F F0 4F 0D 04
D7 00 38 00 F6 8E F0 4F F3 F8 F3 8A DB 00 FF FF


Could You confirm checksum for me? Winols sometimes doesn't cover full  area chksm adress....i  won't brick ecu.

Is there any wrong ?



Borrowed this, if you don't mind, to check it out.  Me7Check sees it clean, as does WinOLS..

Flashed it onto my AUM (for people searching), with no issues. 

Works well, but it's really loud.  Used it outside the school (because it's far away from anything) at half 8 last night and 20 mins later, there was a police helicopter..  Went for a drive and passed armed response, then used it again, followed by another 3 police cars and the area I did it in then covered in police.

I'm gonna have to go into hiding. 8-) Blew a coilpack fuse though on NLS - guess that's because the dwell time is 0.

Interesting because I thought the HN had the later coil driver, I guess not.

Gonna drop the RPM because I think 4.5 is too high, I'll see if 2.5/2.7 is better..

There's a def file for this too (as it's SW0002), so it gives me a starting point for mapping too.

Surges quite badly, so gonna have a look tonight.  Boost feels strong, but could be a little stronger, will see fuelling and timing too.

Got a replacement N75 and coils coming this weekend because I'm convinced they're burst.  Will replace plugs, too.

But, it's a start..
Logged
automan001
Full Member
***

Karma: +47/-0
Offline Offline

Posts: 153


« Reply #243 on: September 01, 2013, 11:31:42 PM »

The ecu file from ME7Info only contains a SMALL percentage of the RAM variables used. You really need to disassemble the file and find a RAM address that's not used at all. There could be very serious consequences to picking the wrong address.
I think I've got an better idea how to check that RAM address is not used. Guess some RAM address. Define it as variable in ME7 Logger ecu file. Log it with ME7Log.  Smiley See if it changes during a run.  Cool If its value is a constant or better if value stays 0 or FF all the time - most probably this right place.
Logged
black
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 80


« Reply #244 on: October 29, 2013, 07:17:37 AM »

I think I've got an better idea how to check that RAM address is not used. Guess some RAM address. Define it as variable in ME7 Logger ecu file. Log it with ME7Log.  Smiley See if it changes during a run.  Cool If its value is a constant or better if value stays 0 or FF all the time - most probably this right place.


Ha, after reading all the pages I came to the same conclusion (before reading this last post above). So has anybody tried the 0x384FF0 on RS4K? Huh
Logged
automan001
Full Member
***

Karma: +47/-0
Offline Offline

Posts: 153


« Reply #245 on: October 29, 2013, 12:45:36 PM »

has anybody tried the 0x384FF0 on RS4K? Huh
This byte is busy
MEM_EXT:CC72 byte_CC72:      ds 138Eh                ; DATA XREF: seg019:3682r
Better check this area in K or Q-box: 0x3865FE-3867FF
(this is XRAM:E5FE-XRAM:E7FF)
Appears to be not used (no any ref to variables from this range in disassembled file)
Also these are free in K-box
MEM_EXT:8245-MEM_EXT:85D9
MEM_EXT:85DC-MEM_EXT:8800
MEM_EXT:8884-MEM_EXT:897F
To convert into 0x38xxxx format subtract 0x8000 and add 0x380000
« Last Edit: October 29, 2013, 03:28:01 PM by automan001 » Logged
black
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 80


« Reply #246 on: October 29, 2013, 11:44:18 PM »

thanks a lot  Smiley will try
Logged
player
Full Member
***

Karma: +1/-5
Offline Offline

Posts: 128


« Reply #247 on: November 25, 2013, 04:28:11 AM »

can someone find me an empty ram adress in this 8L0906018N ECU FILE?Sad(...THANKS !
Logged
tbm
Full Member
***

Karma: +2/-1
Offline Offline

Posts: 176


« Reply #248 on: June 19, 2014, 01:24:53 PM »

Hi Guys!

The awesome work was performed! Thanks a lot for that!
I've implemented NLS and LC in my HN bin file. LC works well but with NLS I faced with the following issue - my car has only N75 valve and BOV. All other emission valves like N249, SAI etc were removed. So when I pressed clutch pedal for NLS (B_kuppl is brought up) due to some reason throttle plate (wdks) closing therefore BOV dropped all pressure in intake pipes, manifold etc.

Has anyone faced with this issue?

Thanks in advance!
Logged
tbm
Full Member
***

Karma: +2/-1
Offline Offline

Posts: 176


« Reply #249 on: June 20, 2014, 04:42:54 AM »

Hi Guys!

The awesome work was performed! Thanks a lot for that!
I've implemented NLS and LC in my HN bin file. LC works well but with NLS I faced with the following issue - my car has only N75 valve and BOV. All other emission valves like N249, SAI etc were removed. So when I pressed clutch pedal for NLS (B_kuppl is brought up) due to some reason throttle plate (wdks) closing therefore BOV dropped all pressure in intake pipes, manifold etc.

Has anyone faced with this issue?

Thanks in advance!
It seems the issue is related to Idle Torque Reserve.
Finding out farther...
Logged
dayofthejackal
Jr. Member
**

Karma: +7/-0
Offline Offline

Posts: 37



« Reply #250 on: June 30, 2014, 11:21:30 AM »

Got it working on a few files but I could do with some help regarding implementing it on an AP 003

Using B_br as B_kuppl is 50.0

Unsure of the call address

Can someone double check my workings out

Addresses:

tsrldyn: 0x380BBA 0x0000 = BA 8B
B_kuppl: 0x00FD50.0 0x0001 = 00 28 (2=4 8=10)
vfil_w: 0x381C0D 0x0000 =0D 9C
nomt_w: 0x00F89E 0x0000 = 9E F8
wped: 0x3809B3 0x0000 = B3 89
B_br: 0x00FD4C.12 0x1000 = C0 26 (2=4 6=C)
counter: 0x384FF0 = F0 4F

SpeedThreshold: 0x17EA0 = A0 7E
LaunchRPM: 0x17EA2 = A2 E7
IgnitionCutDuration: 0x17EA4 = A4 7E
RPMThreshold: 0x17EA6 = A6 7E
AccPedalThreshold: 0x17EA8 = A8 7E

FTOMN: 1A441

Call address 0x0?Huh? – F3 F8 ?? ?? to DA 8A E0 2E

0x0B2EE0

9A 28 13 00 F2 F4 0D 9C D7 00 81 00 F2 F9 A0 7E
40 49 9D 0B F2 F4 9E F8 D7 00 81 00 F2 F9 A2 7E
40 49 FD 03 F7 8E BA 8B 0D 2F 9A 28 29 00 8A 26
22 C0 F2 F4 9E F8 D7 00 81 00 F2 F9 A6 7E 40 49
FD 1A C2 F4 B3 89 D7 00 81 00 C2 F9 A8 7E 40 49
FD 12 D7 00 38 00 F2 F4 F0 4F D7 00 81 00 F2 F9
A4 7E 40 49 9D 11 F7 8E BA 8B 08 41 D7 00 38 00
F7 F8 F0 4F 0D 09 D7 00 38 00 F6 8F F0 4F 0D 04
D7 00 38 00 F6 8E F0 4F F3 F8 ?? ?? DB 00 FF FF

Noticed a few typo mistakes and corrected them. Shouldn't really work stuff out at 4am when tired.
« Last Edit: July 07, 2014, 09:29:52 AM by dayofthejackal » Logged

DotJ Tuned - Look in HEX for DayoftheJackal
mushtafa
Full Member
***

Karma: +3/-4
Offline Offline

Posts: 121


« Reply #251 on: June 30, 2014, 02:32:44 PM »

I'm absolutely stuck! It doesn't matter how many times I read this thread and the .pdf tutorial, I just can't get my head round this!  Huh

Is anyone willing to do it for me please? Can offer a donation of cause! Please PM me if you can help!

Many Thanks, Chris
Logged
funnix
Full Member
***

Karma: +1/-0
Offline Offline

Posts: 76


1.8t AUM


« Reply #252 on: November 12, 2014, 05:46:05 AM »

Got it working on a few files but I could do with some help regarding implementing it on an AP 003

Using B_br as B_kuppl is 50.0

Unsure of the call address

Can someone double check my workings out

Addresses:

tsrldyn: 0x380BBA 0x0000 = BA 8B
B_kuppl: 0x00FD50.0 0x0001 = 00 28 (2=4 8=10)
vfil_w: 0x381C0D 0x0000 =0D 9C
nomt_w: 0x00F89E 0x0000 = 9E F8
wped: 0x3809B3 0x0000 = B3 89
B_br: 0x00FD4C.12 0x1000 = C0 26 (2=4 6=C)
counter: 0x384FF0 = F0 4F

SpeedThreshold: 0x17EA0 = A0 7E
LaunchRPM: 0x17EA2 = A2 E7
IgnitionCutDuration: 0x17EA4 = A4 7E
RPMThreshold: 0x17EA6 = A6 7E
AccPedalThreshold: 0x17EA8 = A8 7E

FTOMN: 1A441

Call address 0x0?Huh? – F3 F8 ?? ?? to DA 8A E0 2E

0x0B2EE0

9A 28 13 00 F2 F4 0D 9C D7 00 81 00 F2 F9 A0 7E
40 49 9D 0B F2 F4 9E F8 D7 00 81 00 F2 F9 A2 7E
40 49 FD 03 F7 8E BA 8B 0D 2F 9A 28 29 00 8A 26
22 C0 F2 F4 9E F8 D7 00 81 00 F2 F9 A6 7E 40 49
FD 1A C2 F4 B3 89 D7 00 81 00 C2 F9 A8 7E 40 49
FD 12 D7 00 38 00 F2 F4 F0 4F D7 00 81 00 F2 F9
A4 7E 40 49 9D 11 F7 8E BA 8B 08 41 D7 00 38 00
F7 F8 F0 4F 0D 09 D7 00 38 00 F6 8F F0 4F 0D 04
D7 00 38 00 F6 8E F0 4F F3 F8 ?? ?? DB 00 FF FF

Noticed a few typo mistakes and corrected them. Shouldn't really work stuff out at 4am when tired.


Could it be 0xA6356?
Logged
dayofthejackal
Jr. Member
**

Karma: +7/-0
Offline Offline

Posts: 37



« Reply #253 on: November 12, 2014, 05:57:59 AM »


Could it be 0xA6356?

0xA69FA
Logged

DotJ Tuned - Look in HEX for DayoftheJackal
funnix
Full Member
***

Karma: +1/-0
Offline Offline

Posts: 76


1.8t AUM


« Reply #254 on: November 12, 2014, 06:02:50 AM »

thanks  Grin
Logged
Pages: 1 ... 15 16 [17] 18 19 ... 21
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.027 seconds with 16 queries. (Pretty URLs adds 0s, 0q)