Pages: 1 [2]
Author Topic: Free ram locations - startup conditions on me7.5  (Read 14843 times)
roman_tyk
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 87


« Reply #15 on: December 10, 2015, 03:22:45 AM »

bset    word_FD44.10   did not work for you?

On my car this solution doesn't work. I am wondering if i setting this bit not to late on startup procedure.
Anyway me7logger always show "1" so any other soubroutines don't overwrite it with zero.
@gt-innovation Could you share peace of your dissasembled code with this FD44.10 i will compare it, maybe on my software version different bits are used.
Logged
gt-innovation
Sr. Member
****

Karma: +60/-91
Offline Offline

Posts: 449


« Reply #16 on: December 10, 2015, 06:06:17 AM »

the fd44.10 was from your sw... in mine it is different. Check on the me7 pdf for b_st and b_stend in order to see which function you need
Logged
roman_tyk
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 87


« Reply #17 on: December 11, 2015, 07:23:15 AM »

Thanks gt-innovation, but your solution doesn't work on my ecu.
I am investigating me7 functionsrahmen and noticed that evz_austot must working. Looks like i am jumping to my code from wrong place in bosch code. I think i need to do that from the begining of KOEVAB function.


Reference:
Logged
nyet
Administrator
Hero Member
*****

Karma: +608/-168
Offline Offline

Posts: 12271


WWW
« Reply #18 on: December 11, 2015, 11:47:39 AM »


Anyway me7logger always show "1" so any other soubroutines don't overwrite it with zero.


Doesn't necessarily mean the RAM location isn't in use.... It may only be sampled by me7logger in a way that doesn't show if it changes
Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
roman_tyk
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 87


« Reply #19 on: December 11, 2015, 12:16:32 PM »

Doesn't necessarily mean the RAM location isn't in use.... It may only be sampled by me7logger in a way that doesn't show if it changes

yep you are right, i jumped from 8be70, maybe ori bosch code used this variable before my jump (0->1->0) or me7logger is not able to show changes because of sample rate. But we are still talking about fd44.10 bit which nobody doesn't know what is this but someone use it:)

...anyway i am still trying to proper inject into evz_austot but unsuccessfully:

Seg0x21d@874000:5948
Seg0x21d@874000:5948             loc_875948:                             ; CODE XREF: sub_8758E8+58j
Seg0x21d@874000:5948             F3 F8 7C 8A                 movb    rl4, byte_380A7C
Seg0x21d@874000:594C             F7 F8 9F 8A                 movb    evz_austot, rl4

changed F7 F8 9F 8A => to DA 8C 00 03
code placed at C0300 returning:

  mov rl4, #0x01
or
   mov r4, [r0+]

..have to analyze with IDA deeply...
Logged
roman_tyk
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 87


« Reply #20 on: December 12, 2015, 07:49:15 AM »

Guys sorry for bothering you, i succesfully managed to turn off injection in my car forever.
Of course evz_austot working properly. Now i need to change design because i would to turn off inj only in some specific condition, right now looks like code with evz is executed only once on ignition and my code with condition is being executed every 200ms. So when i jump to evz my conditions are not fullfilled...
Logged
Pages: 1 [2]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.017 seconds with 17 queries. (Pretty URLs adds 0.001s, 0q)