error class question

Pages: [1]

« previous next »

Author

Topic: error class question (Read 6256 times)

fknbrkn

Hero Member

Karma: +177/-18
Offline

Offline

Posts: 1413

mk4 1.8T AUM

	error class question « on: January 28, 2015, 01:46:21 AM »

as we know error-class hiding common DTC but some kind of DTCs affect on fuel trims for example, what in this case? does this method allow fuel trims to work normally or its only hiding this error?


	Logged

fknbrkn

Hero Member

Karma: +177/-18
Offline

Offline

Posts: 1413

mk4 1.8T AUM

	Re: error class question « Reply #1 on: January 29, 2015, 02:00:00 AM »

its a very important question Undecided


	Logged

TCSTigersClaw

Sr. Member

Karma: +15/-6
Offline

Offline

Posts: 353

	Re: error class question « Reply #2 on: January 29, 2015, 04:57:44 AM »

be more specific

, some error classes ,affect fuel trims and they must also be disabled through ESKONF for example


	Logged

VAG cars newbie tuner

fknbrkn

Hero Member

Karma: +177/-18
Offline

Offline

Posts: 1413

mk4 1.8T AUM

	Re: error class question « Reply #3 on: January 29, 2015, 06:09:29 AM »

ok for example we take some 2.8 (7.1) or 1.4 (7.5.10) ecus, i didnt find any fimilar ols for them and they structure are very different from any well-defined. i was find ESKONF in 2.8 by IDA but it looking totally different..
the target is to remove second o2s, sai and egr and the only way i can do it by the error-classes, because i believe i succesfully find error-class tables in it and can remove errors manually
but dont know how the adaptations like a fuel trims will be working after that


	Logged

ddillenger

Hero Member

Karma: +639/-21
Offline

Offline

Posts: 5640

	Re: error class question « Reply #4 on: January 29, 2015, 10:57:37 AM »

Quote from: fukenbroken on January 29, 2015, 06:09:29 AM

ESKONF for those files is the same as it is for all the rest of that architecture.

IE, the ESKONF for a 4 cylinder ME7.5 is the same regardless of whether it's a 1.8 or a 2.0.


	Logged

Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your experience!

Email/Google chat:
DDillenger84(at)gmail(dot)com

Email>PM

fknbrkn

Hero Member

Karma: +177/-18
Offline

Offline

Posts: 1413

mk4 1.8T AUM

	Re: error class question « Reply #5 on: January 29, 2015, 05:57:59 PM »

ok im not using IDA to find ESKONF in 1.4 yet but look what we have in 2.8

here is mine 1.8t 06A906032DR 0002

Quote

seg085:C628 sub_85C628:
seg085:C628 mov [-r0], r9
seg085:C62A mov [-r0], r8
seg085:C62C mov [-r0], r7
seg085:C62E mov [-r0], r6
seg085:C630 sub r0, #4
seg085:C632 movb rl4, byte_810BF4 ; ESKONF
seg085:C636 cmpb rl4, #55h ; 'U'
seg085:C63A jmpr cc_NZ, loc_85C648
seg085:C63C movb rl4, byte_810BF4 ; ESKONF
seg085:C640 cmpb rl4, #55h ; 'U'
seg085:C644 jmpa cc_Z, loc_85C9E0

and a VR6 022906032E_v008

Quote

seg084:C4A2 sub_84C4A2:
seg084:C4A2 mov [-r0], r9
seg084:C4A4 mov [-r0], r8
seg084:C4A6 mov [-r0], r7
seg084:C4A8 mov [-r0], r6
seg084:C4AA sub r0, #4
seg084:C4AC movb rl4, byte_810C2C ;ESKONF ?
seg084:C4B0 cmpb rl4, #55h ; 'U'
seg084:C4B4 jmpr cc_NZ, loc_84C4C2
seg084:C4B6 movb rl4, byte_810C2E
seg084:C4BA cmpb rl4, #55h ; 'U'
seg084:C4BE jmpa cc_Z, loc_84C696 jmpa cc_Z, loc_84C696

and here is the content at 0x10C2C

C0 FF 55 55 FF 7E EE A4 06 02 A6 0D FE

but another routine uses this 7E above so ive searched by the 0x10BF3 (0D) byte before ESKONF in my 1.8t that i believe map size (0D=13 bytes) and yes 2.8 eskonf is started earlier at 0x10C24

Quote

seg085:9D3E jnb word_FD06.3, loc_859D48
seg085:9D42 movbz r5, byte_810BF3 ;1.8t ESKONF map size
seg085:9D46 add r4, r5

Quote

seg084:8F22 jnb word_FD06.1, loc_848F2C
seg084:8F26 movbz r5, byte_810C23 ;2.8 ESKONF map size ?
seg084:8F2A add r4, r5

so the target eskonf is
00 FC 2F FC 0C 30 F3 FF C0 FF 55 55 FF

but in 2.8 map size (byte before eskonf @ 0x10C23) = 00 so im confused and i dont know how i can decrypt that ESKONF.. if its really him. thats why im looking for good old error class method
btw last jmpa goes to the end of subroutine, so am i right that changing 0x10C2E to 55 will completely remove all onboard curcuit diagnosis?


« Last Edit: January 29, 2015, 07:30:00 PM by fukenbroken »	Logged

ddillenger

Hero Member

Karma: +639/-21
Offline

Offline

Posts: 5640

	Re: error class question « Reply #6 on: January 29, 2015, 07:32:03 PM »

There is no identifier before ESKONF.

It is 7 bytes in 4 cylinders.
It is 13 bytes in 6/8 cylinders.

In your file ESKONF is at 0x10BF4

Byte

0 1 2 3 4 5 6

AA FF 00 30 FF F8 30

Byte 0= ZUE4 ZUE3 ZUE2 ZUE1
Byte 1= NC NC NC NC
Byte 2= EV4 EV3 EV2 EV1
Byte 3= LSHHK EFLA LDR TEV
Byte 4= BKV NC AAV MIL
Byte 5= NC NC EKP SLP
Byte 6= N249 UAGR SLV NWS

In 032E ESKONF is at 0x10C24.

00 FC 2F FC 0C 30 F3 FF C0 FF 55 55 FF

You may ask yourself, what do I take away from this?

ESKONF is not even remotely similar between the files posted. None of the bitpairs are shared between them.

ME7.5=defined in the FR
ME7.1=not defined anywhere
ME7.1.1=not defined anywhere, but shares SOME similarities with ME7.1.

What, specifically, are you looking for? I have mapped these out in their entirety.


« Last Edit: January 29, 2015, 07:38:32 PM by ddillenger »	Logged

fknbrkn

Hero Member

Karma: +177/-18
Offline

Offline

Posts: 1413

mk4 1.8T AUM

	Re: error class question « Reply #7 on: January 29, 2015, 07:56:34 PM »

i need to remove SAI and second O2s

is there any way to define those bits by myself? and what you can say about 7.5.10 - is it same as 7.5 ?

yep i forget that it is axis size before axis .. not map Undecided


	Logged

ddillenger

Hero Member

Karma: +639/-21
Offline

Offline

Posts: 5640

	Re: error class question « Reply #8 on: January 29, 2015, 08:07:57 PM »

Quote from: fukenbroken on January 29, 2015, 07:56:34 PM

Best way I've found to define them is to unplug EVERYTHING. Flip bit pairs and see what codes disappear, log the results, and move on. It takes a while as you only do 1 at a time-lol.

And yes, all ME7.5 I have seen is the same. Thats not to say I've seen it all however.


	Logged

fknbrkn

Hero Member

Karma: +177/-18
Offline

Offline

Posts: 1413

mk4 1.8T AUM

	Re: error class question « Reply #9 on: January 29, 2015, 08:22:56 PM »

oh i was afraid you`d say that
its approx. 50 flashing attempts lol

thanks for helping anyway


	Logged

Pages: [1]

« previous next »

Jump to:

Navigation

Personal Tools

July 07, 2024, 07:53:05 AM

Welcome, Guest. Please login or register.
Did you miss your activation email?

Navigation

Personal Tools

Search