NefMoto

hi :)
as we know error-class hiding common DTC but some kind of DTCs affect on fuel trims for example, what in this case? does this method allow fuel trims to work normally or its only hiding this error?

its a very important question  :-\

be more specific  :) , some error classes ,affect fuel trims and they must also be disabled through ESKONF for example

ok for example we take some 2.8 (7.1) or 1.4 (7.5.10) ecus, i didnt find any fimilar ols for them and they structure are very different from any well-defined. i was find ESKONF in 2.8 by IDA but it looking totally different..
the target is to remove second o2s, sai and egr and the only way i can do it by the error-classes, because i believe i succesfully find error-class tables in it and can remove errors manually
but dont know how the adaptations like a fuel trims will be working after that

ESKONF for those files is the same as it is for all the rest of that architecture.

IE, the ESKONF for a 4 cylinder ME7.5 is the same regardless of whether it's a 1.8 or a 2.0.

ok im not using IDA to find ESKONF in 1.4 yet but look what we have in 2.8

here is mine 1.8t 06A906032DR 0002


and a VR6 022906032E_v008


and here is the content at 0x10C2C

C0 FF 55 55 FF 7E EE A4 06 02 A6 0D FE

but another routine uses this 7E above so ive searched by the 0x10BF3 (0D) byte before ESKONF in my 1.8t that i believe map size (0D=13 bytes) and yes 2.8 eskonf is started earlier at 0x10C24



so the target eskonf is
00 FC 2F FC 0C 30 F3 FF C0 FF 55 55 FF

but in 2.8 map size (byte before eskonf @ 0x10C23) = 00 so im confused and i dont know how i can decrypt that ESKONF.. if its really him. thats why im looking for good old error class method
btw last jmpa goes to the end of subroutine, so am i right that changing 0x10C2E to 55 will completely remove all onboard curcuit diagnosis?

There is no identifier before ESKONF.

It is 7 bytes in 4 cylinders.
It is 13 bytes in 6/8 cylinders.

In your file ESKONF is at 0x10BF4

Byte

0   1   2  3  4   5  6                    

AA FF 00 30 FF F8 30

Byte 0= ZUE4 ZUE3 ZUE2 ZUE1
Byte 1= NC NC NC NC
Byte 2= EV4 EV3 EV2 EV1
Byte 3= LSHHK EFLA LDR TEV
Byte 4= BKV NC AAV MIL
Byte 5= NC NC EKP SLP
Byte 6= N249 UAGR SLV NWS

In 032E ESKONF is at 0x10C24.

00 FC 2F FC 0C 30 F3 FF C0 FF 55 55 FF

You may ask yourself, what do I take away from this?

ESKONF is not even remotely similar between the files posted. None of the bitpairs are shared between them.

ME7.5=defined in the FR
ME7.1=not defined anywhere
ME7.1.1=not defined anywhere, but shares SOME similarities with ME7.1.

What, specifically, are you looking for? I have mapped these out in their entirety.

i need to remove SAI and second O2s

is there any way to define those bits by myself? and what you can say about 7.5.10 - is it same as 7.5 ?

yep i forget that it is axis size before axis .. not map :-\

Best way I've found to define them is to unplug EVERYTHING. Flip bit pairs and see what codes disappear, log the results, and move on. It takes  a while as you only do 1 at a time-lol.

And yes, all ME7.5 I have seen is the same. Thats not to say I've seen it all however.

oh i was afraid you`d say that
its approx. 50 flashing attempts lol  :)

thanks for helping anyway  :)