Pages: 1 2 [3] 4 5
Author Topic: The 5120 hack for 06A906032HS  (Read 6781 times)
fukenbroken
Hero Member
*****

Karma: +118/-8
Offline Offline

Posts: 990


mk4 1.8T AUM


« Reply #30 on: June 19, 2020, 09:44:31 AM »

You know offsets you know values
Just change it in flash with any hex editor
Logged
justinvw2646
Full Member
***

Karma: +12/-3
Offline Offline

Posts: 110


« Reply #31 on: June 20, 2020, 04:58:19 AM »

I think I'm out of turbo  Sad Also, and I know fitting a physical EGT sensor is the only way to know for sure, but does anyone know if calculated EGT is artificially higher than actual running E85 as there is obviously no way for the ECM to know what's getting burned in there.
Logged
Dave9n3
Sr. Member
****

Karma: +21/-0
Offline Offline

Posts: 265


« Reply #32 on: June 27, 2020, 11:21:37 AM »

I've been working on this recently for my own binary and believe I've made some progress so I'll document it as best I can to hopefully help some others.

I used the AutoIT script PRJ created to make it easier to load my binary into IDA to find the locations of the ASM divisions. To do this you need to split the flash 1024kb into a ROM and Flash section. The ROM section is the first 64kb of the file you'd read from the car. I used a hex editor to do this and then ended up with

ROM 64KB (0 to FFFF)
FLASH 960KB (FFFF onwards to FFFFF)

It's necessary to do this to allow the loading of the binary into IDA.

Once loaded into IDA I needed to find the locations of the constants that need to be divided.

There are

3 x 'mov r3/4, #654Dh' to find and 5 x 'mov r2, #287h'  (not sure if these are commands, functions or routines) I don't know the correct terminology so please enlighten me lol

I believe the SDLDSUA axis division is not required in ASM for my binary but instead I am able to divide the KFSDLDSUA axis in the table

I didn't have the skills to make the necessary divisions within IDA as I'm not sure how to do that, so I noted down all the addresses of the divisions I needed to make.

I found what I needed at the addresses below (your binary will be different) now this is where I may have messed up, if I have not already by this point. I then opened the binary in a hex editor and attempted to find what I needed. I set it to display 16bit and went to the addresses and was unable to find 654D or 287 values in the binary at those locations, until I added the ROM size to the addresses I found.

Please see below for the offsetting of the addresses


mov r3/4 #654Dh

0x52B48            WITH ROM FFFF ADDED  0x6B248
0x52D1E           WITH ROM FFFF ADDED  0x62D1E
0x556B2            WITH ROM FFFF ADDED  0x656B2

mov r2, #287h

0x54510            WITH ROM FFFF ADDED  0x64510
0x53FAC           WITH ROM FFFF ADDED 0x63FAC
0x53DE8           WITH ROM FFFF ADDED 0x63DE8
0x53D5A           WITH ROM FFFF ADDED 0x63D5A
0x53D0C           WITH ROM FFFF ADDED 0x63D0C


Once found in the binary I divided them in the binary.

654Dh became 32A6h
287 became 50E


Hopefully someone more experienced can chime in and tell me if what I've done sounds correct or not.

I have a couple of queries regarding the following that someone may be able to advise on

- KMLTESG-Constant for regeneration mass in line TEV suction pipe at standard pressure + standard temp

 (stock value is 0.000016, I need to divide this but winols only allows 0 or the original number) am I ok to leave that as it is, or will it cause issues?

- ZDSU

Value has to be sqrt and multiplied by 2. Stock value in my binary is 3, sum gives 3.464 if im correct. I'm only able to change it by whole numbers it seems, so its either 3 or 4. Again not sure if this will be fine left as is or not?




Finally – I've seen warnings from the likes of Bische in the original 5120 threads that the brake force amplifier needs to be disabled via CWGGPBKV, in some binaries it is already disabled with a value of 6, my stock value is 2 so i'm not sure if chaning CWGGPBKV is enough.

Comments, criticism and advice are appreciated.
« Last Edit: June 27, 2020, 11:24:00 AM by Dave9n3 » Logged
justinvw2646
Full Member
***

Karma: +12/-3
Offline Offline

Posts: 110


« Reply #33 on: June 27, 2020, 06:45:34 PM »

 KMLTESG-Constant for regeneration mass in line TEV suction pipe at standard pressure + standard temp

 (stock value is 0.000016, I need to divide this but winols only allows 0 or the original number) am I ok to leave that as it is, or will it cause issues?

- ZDSU

Value has to be sqrt and multiplied by 2. Stock value in my binary is 3, sum gives 3.464 if im correct.

In my bin I left KMLTESG at 0.000016 and ZDSU also at stock value of 3. I’ve gone through three tanks of fuel 5120 and haven’t experienced any problems.
Logged
justinvw2646
Full Member
***

Karma: +12/-3
Offline Offline

Posts: 110


« Reply #34 on: June 27, 2020, 06:49:30 PM »

The only thing I have noticed and been unable to come up with a logical explanation for is only seeing 195-200 g/s when logging MAF. Fueling looks good in the logs and the car rips, so it almost has to be an improperly scaled MAF, but i followed the wiki, did the 200 offset thing, etc. Any ideas how my MAF can be reading that low on a car that spins the tires hard on a 30 mph 2nd gear pull?? Like damn near smokes the tires spinning.
Logged
Dave9n3
Sr. Member
****

Karma: +21/-0
Offline Offline

Posts: 265


« Reply #35 on: June 28, 2020, 07:15:36 AM »

The only thing I have noticed and been unable to come up with a logical explanation for is only seeing 195-200 g/s when logging MAF. Fueling looks good in the logs and the car rips, so it almost has to be an improperly scaled MAF, but i followed the wiki, did the 200 offset thing, etc. Any ideas how my MAF can be reading that low on a car that spins the tires hard on a 30 mph 2nd gear pull?? Like damn near smokes the tires spinning.


Lambda control could be maxed out, or very near at WOT which would indicate maf reading a bit low, maybe worth a check.


Just need to figure out what I need to do with the brake force amplifier now - I heard this affects my binary and a few others like 032HJ, HS, TL, QR, RP.
Logged
justinvw2646
Full Member
***

Karma: +12/-3
Offline Offline

Posts: 110


« Reply #36 on: June 28, 2020, 08:16:21 AM »

Thank you I will. Also I was thinking about it. Is brake force amplifier the brake vacuum pump?? The automatic transmission (vws) were equipped with an electric pump, the manuals were not. Maybe??
Logged
justinvw2646
Full Member
***

Karma: +12/-3
Offline Offline

Posts: 110


« Reply #37 on: June 28, 2020, 10:45:02 AM »

I also (at the end of my log pulls) have hit the brakes HARD at 95+mph to get back down to a sane speed ASAP many times since 5120 and have not noticed any difference in braking response from before I went 5120. For what that's worth.
Logged
nyet
Administrator
Hero Member
*****

Karma: +496/-88
Offline Offline

Posts: 11156


WWW
« Reply #38 on: June 28, 2020, 10:46:29 AM »

The only thing I have noticed and been unable to come up with a logical explanation for is only seeing 195-200 g/s when logging MAF. Fueling looks good in the logs and the car rips, so it almost has to be an improperly scaled MAF, but i followed the wiki, did the 200 offset thing, etc. Any ideas how my MAF can be reading that low on a car that spins the tires hard on a 30 mph 2nd gear pull?? Like damn near smokes the tires spinning.

is ps_w close to actual boost? If so, your MAF is scaled fine.
Logged

ME7.1 tuning guide (READ FIRST)
ECUx Plot
ME7Sum checksum checker/corrrector for ME7.x

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your experience.
nyet
Administrator
Hero Member
*****

Karma: +496/-88
Offline Offline

Posts: 11156


WWW
« Reply #39 on: June 28, 2020, 10:47:57 AM »

Just need to figure out what I need to do with the brake force amplifier now - I heard this affects my binary and a few others like 032HJ, HS, TL, QR, RP.

I'm still unclear on how this is manifest. AFAIK it doesn't exist on 2.7t 6sp ME7.1 so I am totally clueless.
Logged

ME7.1 tuning guide (READ FIRST)
ECUx Plot
ME7Sum checksum checker/corrrector for ME7.x

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your experience.
Dave9n3
Sr. Member
****

Karma: +21/-0
Offline Offline

Posts: 265


« Reply #40 on: June 28, 2020, 10:53:02 AM »

I'm still unclear on how this is manifest. AFAIK it doesn't exist on 2.7t 6sp ME7.1 so I am totally clueless.

I’ll try have a look at the FR and understand what it does/is doing. It was just something I noted down when reading the 5120 hack stuff. I just need to order a sensor now and then I can test it.

I posted regarding the ASM changes and hope I have them correct!
Logged
justinvw2646
Full Member
***

Karma: +12/-3
Offline Offline

Posts: 110


« Reply #41 on: June 28, 2020, 01:40:59 PM »

I will log ps_w tomorrow and post the log. Thanks Nyet
Logged
Blazius
Hero Member
*****

Karma: +49/-29
Offline Offline

Posts: 887



« Reply #42 on: June 28, 2020, 01:41:59 PM »

I've never heard about that brake amplifier thing either. As for hardware on 1.8/T b5/b6 manual it is full mechanical vacuum "booster" no electronics in it.
Logged
Dave9n3
Sr. Member
****

Karma: +21/-0
Offline Offline

Posts: 265


« Reply #43 on: June 28, 2020, 02:09:39 PM »

Maybe I've totally thought up a none existent problem then lol my brake booster is all manual also no electronics directly connected to it
Logged
Dave9n3
Sr. Member
****

Karma: +21/-0
Offline Offline

Posts: 265


« Reply #44 on: June 28, 2020, 02:16:09 PM »

I've never heard about that brake amplifier thing either. As for hardware on 1.8/T b5/b6 manual it is full mechanical vacuum "booster" no electronics in it.

http://nefariousmotorsports.com/forum/index.php?topic=2747.75

Bische mentioned it here

WARNING!

Before attempting any pressure scaling you must check if your car uses brake force amplifier(%GGPBKV)!

I just became aware of this, and if this function is in use it must be scaled. I dont really know what would happen if not scaled, but I dont want anyone to have their brakes messed up!

In the 1.8t and S4 2.7 binarys I have with this bit defined, it is CWGGPBKV = 6dec. 6dec = Brake amplifier function turned off.

Please verify your CWGGPBKV in %GGPBKV if you are going to scale the file.



These are some binaries that have it set to 2 stock

O32RP, 032QN, 032TL, 032HN CWGGPBKV = 2.
Logged
Pages: 1 2 [3] 4 5
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.025 seconds with 18 queries. (Pretty URLs adds 0s, 0q)