NefMoto

Technical => Reverse Engineering => Topic started by: SundayNightDriver on December 03, 2010, 07:49:13 AM



Title: ME 7.1/7.5 DTCs and codewords
Post by: SundayNightDriver on December 03, 2010, 07:49:13 AM
Currently trying to get into the whole thing.. asking myself the following:

1. What are the "Tester:" codewords for and how are they used? e.g. CDTPH - code word tester phase sensor, 0x70. Does this disable tests?

2. Where is the function that reads these words? Can someone point me at code reading from there? I can't find a RETS near them that's matching.

3. Is there any info about mapping of the internal errors to what's being read with VAG-COM etc? If I understand correctly, the functions calling the DTC subroutine put the error to be set in r12 .. what are the operations with bfldl/bfldh before that, is it to check error classes?

Somehow the segments seem to be incorrect with my setup and I have a hard time finding anything..


Title: Re: ME 7.1/7.5 DTCs and codewords
Post by: spen on December 17, 2010, 12:49:54 PM
which rom are you looking at?

I'll post a decode of how the codewords are read, stored as booleans etc.


Title: Re: ME 7.1/7.5 DTCs and codewords
Post by: SundayNightDriver on December 21, 2010, 07:31:00 AM
I checked a 8D0907551F file but it seems to be the same for all ECUs of this type (only offsets differ).

For example "CDTFRST2","0x13aa8","Codewort Tester: LR-Abweichung Bank 2" - this is not a boolean but the word 01a3.