NefMoto

Technical => Tuning => Topic started by: dragon187 on July 09, 2016, 05:42:31 AM



Title: R32 ME7.1.1 OLS300 Simulator
Post by: dragon187 on July 09, 2016, 05:42:31 AM
Hi
I have tried to do a ME7.5, no problem.
But at a 032CN ME7.1.1 if I trie to change some maps engine dies.
Do some one know what I must do?

Many thanks

Regards


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: littco on July 09, 2016, 07:09:09 AM
Hi
I have tried to do a ME7.5, no problem.
But at a 032CN ME7.1.1 if I trie to change some maps engine dies.
Do some one know what I must do?

Many thanks

Regards


512kb file? do you need to load it in twice?


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: dragon187 on July 09, 2016, 07:50:51 AM
No 1mb file
After do change engine idles bad an go off


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: prj on July 09, 2016, 11:26:42 AM
Disable checksums in the ECU.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: dragon187 on July 09, 2016, 04:31:35 PM
Over the eeprom or in flash?
I have tried noromcheckreset, but it was no help.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: DT on July 09, 2016, 05:02:49 PM
Over the eeprom or in flash?
I have tried noromcheckreset, but it was no help.
code patch in flash


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: vwaudiguy on July 09, 2016, 06:06:43 PM
code patch in flash

Will still do it sometimes, regardless.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: dragon187 on July 10, 2016, 03:37:10 AM
I dont know how I can do this.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: prj on July 10, 2016, 11:28:42 PM
Will still do it sometimes, regardless.
Yes, but very very rarely.

1. Search for "47 F8 55 00 CC 00 CC 00" (1 match)
2. Search forward for "E6 F4 FF DF", notice the address, save the last 4 bytes (0x69E0A -> 9E0A)
3. Change "47 F8 55 00 CC 00 CC 00" to "47 F8 55 00 EA 00 0A 9E" (use the last 4 bytes loHi)

In EEPROM change 69 C1, A5 to 8E 5A, D2. On page 01 and 02.

This approach works on pretty much everything. Technically if WinOLS is correcting checksums you can only do the EEPROM.
The first patch is to check checksum when ECU is powering up (IGNITION ON). The EEPROM mod is to disable checksums while ECU is running, which is the really important part.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: ported2flow on July 11, 2016, 06:59:46 PM
Never had problems running ols300 with this ecu...


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: mister t on July 12, 2016, 01:42:00 AM
interesting, what do you mean by 'simulator?'

will that allow on-the fly tuning?


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: aef on July 12, 2016, 05:08:35 AM
interesting, what do you mean by 'simulator?'

will that allow on-the fly tuning?

google ols300


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: dragon187 on July 13, 2016, 04:40:35 AM
Yes, but very very rarely.

1. Search for "47 F8 55 00 CC 00 CC 00" (1 match)
2. Search forward for "E6 F4 FF DF", notice the address, save the last 4 bytes (0x69E0A -> 9E0A)
3. Change "47 F8 55 00 CC 00 CC 00" to "47 F8 55 00 EA 00 0A 9E" (use the last 4 bytes loHi)

In EEPROM change 69 C1, A5 to 8E 5A, D2. On page 01 and 02.

This approach works on pretty much everything. Technically if WinOLS is correcting checksums you can only do the EEPROM.
The first patch is to check checksum when ECU is powering up (IGNITION ON). The EEPROM mod is to disable checksums while ECU is running, which is the really important part.

hi
for step 1 it is clear, but step 2 i have many matches with other adress but not at 0x69E0A
so which one should i choose?

the eeprom change i have know it.

many thanks for share knowledge.

please look at the attachment, i have put some files and a pic of the 032 cn adresses.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: vwaudiguy on July 13, 2016, 07:10:51 AM
but step 2 i have many matches

Search forward


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: black on July 13, 2016, 10:38:50 PM
I can confirm this patch also. Got it not from here, but from a friend of mine years ago. But now I know what was changed in the EEPROM file - I did not have a clue before  :D it was just working.

Thanks to prj for enlightment.

Had sporadic trouble with OLS300 simulator when switching ignition off and on again. Result was error in EERPOM. Engine does not start anymore.

Writing a new dump to EEPROM solved the issue. After patching the EEPROM the issues where gone.

I never had  issues using OLS300 with ME7.1.1 but the ME7.1.1 engine always had one single hiccup when changing a value.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: dragon187 on July 14, 2016, 04:02:00 AM
i think i got it..

can some one please check if i am right with chages at the 032CA file, please?

E6 F4 FF DF found on adress $C0244

ori        47 F8 55 00 CC 00 CC 00

changed 47 F8 55 00 EA 00 44 02


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: prj on July 15, 2016, 01:19:36 PM
If you did it correctly the engine will run. If you didn't it won't.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: jameswalker on September 27, 2016, 06:03:07 AM
Yes, but very very rarely.

1. Search for "47 F8 55 00 CC 00 CC 00" (1 match)
2. Search forward for "E6 F4 FF DF", notice the address, save the last 4 bytes (0x69E0A -> 9E0A)
3. Change "47 F8 55 00 CC 00 CC 00" to "47 F8 55 00 EA 00 0A 9E" (use the last 4 bytes loHi)

In EEPROM change 69 C1, A5 to 8E 5A, D2. On page 01 and 02.

This approach works on pretty much everything. Technically if WinOLS is correcting checksums you can only do the EEPROM.
The first patch is to check checksum when ECU is powering up (IGNITION ON). The EEPROM mod is to disable checksums while ECU is running, which is the really important part.

The above hex values could not be found on the ST10 (ME7.1.1 G). Is that expected?


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: nubcake on September 27, 2016, 06:27:01 AM
The above hex values could not be found on the ST10 (ME7.1.1 G). Is that expected?

Just checked ME7.8 from Porsche, based on ST10 - it looks exactly the same, but the code is located in MPC. Did you dump both the MPC and flash?
You could also try searching for "47 F8 55 00 EA 00" in case it's already patched for some reason.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: prj on September 28, 2016, 01:28:18 AM
Just checked ME7.8 from Porsche, based on ST10 - it looks exactly the same, but the code is located in MPC. Did you dump both the MPC and flash?
+1.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: brembo on September 28, 2016, 02:22:53 PM
Hello ,
I have attached my FIle with Patch.
What am I doing wrong ,I can not work with the engine running with OLS300.
Ask for help




Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: vwaudiguy on September 28, 2016, 02:37:57 PM
Hello ,
I have attached my FIle with Patch.
What am I doing wrong ,I can not work with the engine running with OLS300.
Ask for help

Did you contact EVC?


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: brembo on September 28, 2016, 03:47:32 PM
Yes I have, Have the Current CHKS.
Therefore I Wolte with the patch the CHKS examination shutdown.
Unfortunately, I have not understood the EEPROM, Flash Solte agree?
Could that please view someone?


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: prj on September 29, 2016, 01:48:28 AM
The instructions are extremely simple. If you can not follow them, I do not understand what business you have tuning cars.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: brembo on September 29, 2016, 08:45:26 AM
Hello ,
Unfortunately, I did not understand this sentence

In EEPROM change 69 C1, A5 to 8E 5A, D2. On page 01 and 02.


Could you please tell me to help?

My A3 always dies when I make a change to the OLS300.
In FLash should agree I suppose.

Lg


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: brembo on September 29, 2016, 02:52:01 PM
Would it be possible that me someone please help?
Unfortunately, I can no assembler code.
Now I have often tried to no avail.

lg.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: vwaudiguy on September 29, 2016, 06:09:11 PM
Would it be possible that me someone please help?
Unfortunately, I can no assembler code.
Now I have often tried to no avail.

lg.

This has nothing to do with assembler code. It's a plain instruction. If you get even the easiest things handed to you, you won't learn much.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: gt-innovation on September 30, 2016, 06:30:47 AM
Hello ,
Unfortunately, I did not understand this sentence

In EEPROM change 69 C1, A5 to 8E 5A, D2. On page 01 and 02.


Could you please tell me to help?

My A3 always dies when I make a change to the OLS300.
In FLash should agree I suppose.

Lg

It means that you have to replace those HEX values 69, c1 a5 with 8e 5a d2 on page 01 "first line on a hex editor" and 02 "second line of the hex editor".

In order to understand the eeprom search a little bit on this forum about the structure and the data pages.on 95040 there are 32 pages 0 - 31 .

It is all described also on numerous FRs and by your post i understand that you speak German....So do yourself a favor and read them...

(http://i11.photobucket.com/albums/a162/laurentpotin/EEPROM/95040Beetle.jpg)





Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: IamwhoIam on April 12, 2017, 01:18:47 AM
retard alert here LOL


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: Roader55 on April 13, 2017, 01:02:35 AM
what winols version u use?


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: Rittersport on April 27, 2017, 06:39:32 AM
Yes, but very very rarely.

1. Search for "47 F8 55 00 CC 00 CC 00" (1 match)
2. Search forward for "E6 F4 FF DF", notice the address, save the last 4 bytes (0x69E0A -> 9E0A)
3. Change "47 F8 55 00 CC 00 CC 00" to "47 F8 55 00 EA 00 0A 9E" (use the last 4 bytes loHi)

In EEPROM change 69 C1, A5 to 8E 5A, D2. On page 01 and 02.

This approach works on pretty much everything. Technically if WinOLS is correcting checksums you can only do the EEPROM.
The first patch is to check checksum when ECU is powering up (IGNITION ON). The EEPROM mod is to disable checksums while ECU is running, which is the really important part.
Maybe a silly question. Will this work on Volvo ME7 ? They have the same problem.. when changing on the Fly with OLS 300 ECU dies.. (8bit values can be modified without ecu fuckup but 16 bit values can't)
I have searced for the Hex values in the Volvo files and not found the 47 F8 55 00 CC 00 CC 00. But E6 F4 FF DF can be found in numerous places.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: vwaudiguy on December 06, 2017, 09:44:52 AM
I'm going to say if you aren't finding hex string "47 F8 55 00 CC 00 CC 00" in your binary, then there is another string of hex for your particular ecu. I'm positive there's a way to do it, but unfortunately, I don't know how. Time to get cozy with IDA.


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: pizzaschnitzer on March 28, 2018, 03:46:52 AM
Yes, but very very rarely.

1. Search for "47 F8 55 00 CC 00 CC 00" (1 match)
2. Search forward for "E6 F4 FF DF", notice the address, save the last 4 bytes (0x69E0A -> 9E0A)
3. Change "47 F8 55 00 CC 00 CC 00" to "47 F8 55 00 EA 00 0A 9E" (use the last 4 bytes loHi)

In EEPROM change 69 C1, A5 to 8E 5A, D2. On page 01 and 02.

This approach works on pretty much everything. Technically if WinOLS is correcting checksums you can only do the EEPROM.
The first patch is to check checksum when ECU is powering up (IGNITION ON). The EEPROM mod is to disable checksums while ECU is running, which is the really important part.

This thread is the same problem i have on 2.7t ecu 4z7907551N, but i already tried the checksumfree mod on my emulator ecu (roadrunner) the car starts once, now i have the eeprom-error code in it. i think i need to reflash the mpc. can you give me a litte slap on my ass how to come clear with it?
i want to use tunerpro/roadrunner and neet to endian the file for using it with tunerpro, but it would be okay if its working like that.
thankyou! PS: your info about 550cc injectors works perfectly. i tuned them now on LTFT +0,8/-0,8 left/right bank. the car runs like stock and has beatiful idle. THANKALOT!


Title: Re: R32 ME7.1.1 OLS300 Simulator
Post by: prj on March 28, 2018, 06:05:27 AM
Your ECU does not have a flashable mpc. It only has ROM OTP.
To fix the additional problem with this checksum on this ECU search for "9A ?? ?? ?? DA ?? ?? ?? 49 81 3D 19" (question marks are wildcards).
Replace with "CC 00 CC 00 CC 00 CC 00 CC 00 CC 00".

The code should clear on next ignition and car should start.