|
Bische
|
 |
« Reply #150 on: October 03, 2012, 12:04:31 PM »
|
|
|
Everybody here is helpful , first question HOW YOU WILL PAY  Very helpful  I can be helpful too , if I cant disasemble dont mean I cant tune cars ... if noone wants to help , then the way is clear , read , test then test and read and things will go clearly . If I wanted to pay , here is not the place ... I though this was place to share knoledge not bank accounts ...Greetings ... Ofcourse, but doing someone else's job/work/tune for them does not equal sharing unfortunatly. I can only speak for myself, but I have spent COUNTLESS of hours reading the FR and staring at the code in these binarys, I dont even want to know how much time I have laid down.. Hell, I have been online on this forum alone, reading for over 5days. And I only know a fraction compared to other members on here, and I sure as hell dont feel like doing someone elses work for them, just because I happen to know how to do it. Im more than willing to help where I can, but I still have alot to learn before I would feel comfortable pointing others in the right direction. Im trying to contribute by documenting the problems/solutions I stumble upon on this forum, hopefully helping others searching for answers. |
|
|
|
|
Logged
|
|
|
|
|
prj
|
|
« Reply #151 on: October 03, 2012, 01:04:22 PM »
|
|
|
Ok , sorry for this !
Im trying to make it work on 1.8T 512kb ECU , I understand how the routine works in 1MB ECU , my problem is how to locate single values that I need it to make it work ?
ME7tool that make addresses for 1MB ecu , is this work also with older type ECUs (512kb) ?
Maybe not ...
So first I must locate wped , tsrldyn and so ......
Thanks again ....
P.S. To Matchew , sorry didnt want to be rude , accept my apologies. !
Yes, ME7Logger will find addresses on 512k ECU as well. And the rest that it does not find, search in ASM by first finding it in the 1MB ECU, finding what functions access these variables and then search for the same function in the 512k ECU. This will give you the location of the variables in the 512k ECU. |
|
|
|
|
Logged
|
|
|
|
RS-MAD
Jr. Member
Karma: +3/-1
 Offline
Posts: 46
|
|
« Reply #152 on: October 03, 2012, 03:15:18 PM »
|
|
|
Yes, ME7Logger will find addresses on 512k ECU as well.
And the rest that it does not find, search in ASM by first finding it in the 1MB ECU, finding what functions access these variables and then search for the same function in the 512k ECU.
This will give you the location of the variables in the 512k ECU.
When I try with my file program says : findfirst in illegal range 00008395 - 000083D5 What that mean ? Thanks ... |
|
|
|
|
Logged
|
|
|
|
|
prj
|
|
« Reply #153 on: October 04, 2012, 04:40:58 AM »
|
|
|
I don't know what that means, but are you sure your binary is OK?
I have used ME7Logger with many 512k binaries and never had problems...
|
|
|
|
|
Logged
|
|
|
|
RS-MAD
Jr. Member
Karma: +3/-1
Offline
Posts: 46
|
|
« Reply #154 on: October 04, 2012, 07:56:22 AM »
|
|
|
I don't know what that means, but are you sure your binary is OK?
I have used ME7Logger with many 512k binaries and never had problems...
Im tryind it on two different ECU's and got same error . Both of them very early motronics. 0261204900 and 0261206797 , and yes I double check the binarys. I will post the whole routine with adres from ME7Logger but nothing happens. |
|
|
|
|
Logged
|
|
|
|
|
aef
|
|
« Reply #155 on: October 06, 2012, 11:25:28 AM »
|
|
|
Hello, im trying to implement this into a 8L0906018N. Right now im stuck at the point to find FTOMN. FTOMN is located at 1A43D in HN. So i opended a HN file with the hexeditor and there is "3C" resp. "<" located. Before and after this it looks like: 1A43C 1A43D 1A43E 3A 3C 3E : < > If i search ":<>" in my 8L0N file i cant find anything. Am i on the right way or is there something basically wrong? I am new to this and english isnt my native language. So please be nice edit: I have definitions for 8L0CB and 8L0F File here and it says 1A2EB and 1633B but there is nothing in my 8L0N file. |
|
|
|
« Last Edit: October 06, 2012, 11:40:15 AM by aef »
|
Logged
|
|
|
|
|
aef
|
|
« Reply #156 on: October 07, 2012, 01:28:59 PM »
|
|
|
Can someone confirm FTOMN is at 0x1636C within 1037354092 SW?
|
|
|
|
|
Logged
|
|
|
|
|
|
automan001
Full Member
Karma: +47/-0
Offline
Posts: 153
|
|
« Reply #158 on: October 18, 2012, 02:55:15 AM »
|
|
|
ME7.x_LC_NLS_rev003.pdf
Concerning translation of GPR's ram addresses FD00..FDFF from .ecu file for b_ flags. I've read snook's ME7.x_LC_NLS_rev003.pdf and discovered that there is no magic with even bits of GPRs as described there, and there is no need in that dummy translation table. Everything is more simple. For example you want to translate B_kuppl for M-box from *.ecu file into the code. In corresponding .ecu file you find B_kuppl, {CondClutchPedalSwitch}, 0x00FD56, 2, 0x0100, {}, 0, 0, 1, 0, {Bedingung Kupplung betŠ´tigt} Address of register is calculated as follows: Take address 0x00FD56 remove leading 0x00FD, you will get 56, dividde by 2 in hex mode will get 2B Bit address is calculated in following way: Take mask 0x100 from .ecu, whih represents power of 2 in hex mode: 2^x, you need to find x Just write log(0x100)/log(2) in Google search or use calculator and it will give you exact result. In our case we get = 0x8. Then you need to substitute these values into conditional jumps which have format like this: 9A QQ rr q0 Here 9A is JNB command, QQ we calculated = 2Bh, q was calculated = 8h When you substitute you will get something like 9A 2B 13 80 Which in assembler code means JNB 2BH.8,002AH ; B_kuppl, 0x00FD56, 0x0100 Note, format for bit address is q0 which in our case 80, but not 0q or 08 |
|
|
|
« Last Edit: October 18, 2012, 03:05:39 AM by automan001 »
|
Logged
|
|
|
|
Skibum513
Jr. Member
Karma: +0/-0
Offline
Posts: 27
|
|
« Reply #159 on: December 06, 2012, 09:38:24 PM »
|
|
|
Hey working on this right now but I'm stuck on number 15 on the pdf. I cant figure out how to make the winols references? speedthreshold etc.
|
|
|
|
|
Logged
|
|
|
|
|
catbed
|
|
« Reply #160 on: December 06, 2012, 10:42:38 PM »
|
|
|
Hey working on this right now but I'm stuck on number 15 on the pdf. I cant figure out how to make the winols references? speedthreshold etc.
Right click on the hex dump, Go to address -> 17E00, Press 'K', then fill in the conversion factor, LSB, etc for all. |
|
|
|
|
Logged
|
|
|
|
Skibum513
Jr. Member
Karma: +0/-0
Offline
Posts: 27
|
|
« Reply #161 on: December 06, 2012, 10:51:07 PM »
|
|
|
Right click on the hex dump, Go to address -> 17E00, Press 'K', then fill in the conversion factor, LSB, etc for all.
^ Thank you very much!  |
|
|
|
|
Logged
|
|
|
|
ibizacupra
Full Member
Karma: +4/-10
Offline
Posts: 111
|
|
« Reply #162 on: December 17, 2012, 10:10:32 AM »
|
|
|
So this was correct eventually. For now NLS works on 06A906032RP very well but LC with antilag does not. Here are my parameters with its values: Antilag LC SpeedThreshold: 5km/h
LaunchRPM: 4400rpms
IgnitionCutDuration: 160ms
RPMThreshold: 4550rpms
AccPedalThreshold: 90.2% may I ask what you used in the map setting properties to get these units to be human readable? thankyou I found the pdf and think I answered my own question.. posted below in case anyone else is looking for the same info.. ans search might show this. Make your xdf/winols references like this, using setzis 17E00 for example: (enter your choosen adress for conditions instead)
SpeedThreshold: 0x17E00 size 2, 16bit LSB, conversion: X * 0.0078125 (km/h)
LaunchRPM: 0x17E02 size 2, 16bit LSB, conversion: X * 0.25 (rpm)
IgnitionCutDuration: 0x17E04 size 2, 16bit LSB, conversion: X * 20 (ms)
RPMThreshold: 0x17E06 size 2, 16bit LSB, conversion: X * 0.25 (rpm)
AccPedalThreshold: 0x17E08 size 1, 8bit LSB, conversion: X * 0.392157 (%)
FTOMN: find this adress in your damos/xdf, 8bit LSB, conversion: X / 10 (ms)
thanks guys |
|
|
|
« Last Edit: December 17, 2012, 10:22:03 AM by ibizacupra »
|
Logged
|
|
|
|
Gizmo20VT
Full Member
Karma: +1/-2
Offline
Posts: 60
|
|
« Reply #163 on: December 19, 2012, 08:14:49 AM »
|
|
|
Hi Peeps
Fantastic thread and great respect for those who have done it successfully with the PDF.
Thank you to Setzi and Snook aswell for the time taken on the Information and sharing.
I wonder if someone could perhaps assist me with adding NLS and LC to my current File 1.8T AMK 8N0906018A.
I have located my maps but I cant figure out how to calculate my new function in my file, im using 010 hex editor, I have located space in the original code at address 1:7CE0h - 1:7D60h. Address supplied below.
tsrldyn 0x380B96 ->
B_kuppl 0x00FD4C 0x0008 ->
vfil_w 0x381BC8 ->
nmot_w 0x00F89C ->
wped 0x38099C ->
B_brems 0x00FD4A 0x8000 ->
counter_NoLiftShift: 0x3839FE ->
I know I can take the last two digits of the address and divide them by 2 in hex calculator but I still missing two piece of code per address no?
Another question, where Do I find the line for step 13? Does the line "D7 40 06 02 03 F8" work for my ecu as well?
"13. Now to locate the correct routine and call the new function:
in your hex editor, go to the end of file and search upwards for: "D7 40 06 02 03 F8" and you should be in the right place."
|
|
|
|
« Last Edit: December 19, 2012, 08:16:39 AM by Gizmo20VT »
|
Logged
|
|
|
|
Gizmo20VT
Full Member
Karma: +1/-2
Offline
Posts: 60
|
|
« Reply #164 on: December 25, 2012, 12:02:26 AM »
|
|
|
Alright, I think I have most of my code correct. Perhaps my conditions are not inline, as when I engauge the clutch and rev there a pops and bangs but it doesnt sound correct, also my RPM is doesnt limit, it just build slow. This is what I have done. Condition Variables Located at 0x17EC0 tsrldyn 0x380B96 -> 96 8B B_kuppl 0x00FD4C.3 0x0008 -> 30 4c ->26 vfil_w 0x381BC8 -> C8 9B nmot_w 0x00F89C -> 9C F8 wped 0x38099C 899C -> 9C 89 B_brems 0x00FD4A.15 0x8000 -> 15:F0 4A -> 25 counter_NoLiftShift: 0x3839FE -> FE 39 My Code  Values in TunerPro Ignition Cut set to 160.00 LaunchRPM 4545.25 RPMThreshold 4650.75 AccPedalThreshold 90.20 SpeedThreshold 305.75 What Am I overlooking  |
|
|
|
« Last Edit: December 27, 2012, 11:59:37 AM by Gizmo20VT »
|
Logged
|
|
|
|
|
