NefMoto

with no luck
wanna use SAI pump connector in my routine but cannot find b_sls ( am i right that b_sls powering sai pump? )

or how can i use output pins directly ?

ok i was trying to find CPU pin used for SAI pump (ECU pin #66)
succesful traced to pin #14 bosch 30380
but cant find datasheet for this little shit anywhere
another dead end..

i have idea to bruteforce all possible output ports (i suppose its bset p7_7 for example) but doesnt know how it works and im afraid to burn something :(

What are you trying to do? I've successfully used both SAI replay and N112 for my own uses (inline fuel pump and exhaust cutout) on the HS file. Maybe I can help.

i want to use sai relay (sai pump output) for afterrun pump on my friend`s car. the idea is - to variate its working time by egt-model (some little tweak with relay power and i think it will work). and for meth-injection pump on my car. also i need an input pin for meth low-level sensor. didnt researching it yet. second o2 i think.. 

ive reading your post about it, but didnt clearly understand
i would very grateful if you gave me some kind of example how you manage this pins

Do you have the addy's? This sounds like a lot of funnnn

found this awesome file

https://docs.google.com/spreadsheet/ccc?key=0Atc5QQQNw_5ndHV3aGNua1NXdnh5N3lEQlUyS0J4V0E&hl=en#gid=0

and after some researching i can succesfully manage n112 valve :)
but there is no SAI relay in it. trying to find it by analyse other output pins.. its a long way  :-\

elRey, can you provide the map names that control the sai, and 112 relay?

The route I took was to completely delete the SLS function. The problem with just using the SLS function to set b_sls is that other functions check status of b_sls (kat heating) and behave differently than they would with b_sls = false.

And ultimately I changed mem location responsible for output to two pins.

I'll have to pull up my IDA and get that for you.

Don't waste your time, elRey. That sounds way over my head. I did a bit of reading, and found the 2/3 maps controlling those components and saw pretty much what you described. Thanks for responding, and also thanks for the explanation in the thread linked above.

im searching b_sls only for tracking memory location of output port (now i begin to suspect that port mem loc is in ex #38 memory.. is it possible?)
i use to 'nop' some bset/bclr/bmov of p3_6 / dp3_6 and my n112 worked like a charm with my routine
IDA project will be very helpful for me thanks  :)

p.s. yesterday i was triyng to find cpu output port by starting 'output test' in vcds, and measurement voltage at cpu ports. was thinking its a good idea but when i start to measure some ports test stops and show error for a few minutes even if reset ecu. he definetely mocking me

So, you want to control output to relay and n112 with you own routine? If so, will you not have two routines contolling output? Yours and SLS?

yep + i need a few inputs in future
i leave stock sls routine but replace all 'bset p3_6' (port for n112), 'bclr p3_6' and 'bmov p3_6, xxsomething' etc with 'nop' so it cant control this port

But it is not setting pins in SLS function. It sets a couple fxxx memory locations that are used in a separate routine to then set pin states. Are you nop lines in SLS routine or the other routine that bmov into pin states?

as i remember there is 4 instances where p3_6 can be changed
bset/bclr into sls func and 2 bmov somewhere
i noped them all

Ok, the bset/bclr in SLS can be left alone and ignored. The bmov is where I suggest you focus on. Just replace opt2 with an UNused memory address bit and use that address bit in your custom routine.

Unless your bin is different from the several 1.8T bins I've looked at, the SLS bset/bclr are NOT setting the pin directly.

sorry i cant understand what you mean about used memory adress
some kind of that?

bmov p3_6, FD04.3 (stock) - > bmov p3_6, FFC0.6  ? (FFC0.6 = p3_6 mem loc of port 3.6 example) i.e. ' bmov FFC0.6, FFC0.6 ' ?

anyway main question isnt about it
but about sai relay output (ecu #66). im still dont know what pin or mem loc it uses

Sorry, that was a typo. I meant unused memory address bit.

Relay pin has a bmov in same routine as N112. Give me a few minutes and I'll post a screenshot that you can use to identify yours.

I'm suggesting:

bmov p3_6, FD04.3

to

bmov p3_6, FD04.10

assuming FD04.10 is not used anywhere in bin.

And your relay is the bmov line right above that one.

SAI Relay pin highlighted in attached gif.

got it
thanks elRey!