Pages: [1]
Author Topic: 021906018R finding addresses  (Read 3517 times)
KJA
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 8


« on: February 07, 2021, 02:52:41 PM »

Im currently hunting for addresses to delete Sai secondary 02 and cats on a 12v vr6 I own. 021906018r  I have hunted for a xdf and .kp to use.  Maybe I am just an idiot or missing something but if someone could help me find addresses for what I need that would be great.  I looked on the S4 wiki and I would assume those locations(addresses) are not going to be the same on my ecu.  If I am incorrect please school me.  Any help would be greatly appreciated.  Tia. 
« Last Edit: February 07, 2021, 03:36:12 PM by KJA » Logged
Leonhard
Full Member
***

Karma: +29/-2
Offline Offline

Posts: 115


« Reply #1 on: February 08, 2021, 12:42:10 AM »

you can start with:

CWKONABG 8bit -> 181B3
CWKONLS  8bit -> 181B5
CWSLS    8bit -> 181B9

and create your own xdf/kp
Logged
KJA
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 8


« Reply #2 on: February 08, 2021, 03:57:24 PM »

Thank you I appreciate the help.  Seems to me like the address for CWSLS is coming up with a strange calculated number.  What am I screwing up?
« Last Edit: February 08, 2021, 04:05:47 PM by KJA » Logged
Leonhard
Full Member
***

Karma: +29/-2
Offline Offline

Posts: 115


« Reply #3 on: February 09, 2021, 02:13:23 AM »

                                           bit76543210
CWSLS in your case "136" ->    10001000 -> bit3 and bit7 are true -> 128+8=136

Coding for every bit is defined in "FR"

but...for know, if you want to keep it simple, just disable SAI(SLS) by setting all 0

there might be some more "parameters" to get a clean delete of SAI and secondary O2 ;-)

Logged
KJA
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 8


« Reply #4 on: February 10, 2021, 06:36:17 PM »

You really have been an incredible help I do appreciate it.  How would I go about finding more addresses with out having to ask someone on here every time?  I'm sure it's quite complicated like everything else related to this process but we are all here to learn right.  Thanks again.
Logged
Leonhard
Full Member
***

Karma: +29/-2
Offline Offline

Posts: 115


« Reply #5 on: February 11, 2021, 12:55:22 AM »

assuming you already removed rear O2 sensor and SAI components,
did you already changed the coding of:

CWKONABG
CWKONLS
CWSLS

and what is your new coding look like?

Any fault codes appearing?
Logged
KJA
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 8


« Reply #6 on: February 12, 2021, 04:14:50 PM »

tried to flash this file to my ecu today ran into a bit of a road block.  Its a 400bb ecu.  I opened the ecu to double check after running into this problem.  Nefmoto is coming up with an error saying I had the wrong memory layout.  I changed it to 800bb and it read the ecu.  the hex looks like two copies of the file I posted previously.  I didn't want to write a new file but Ill post text of the session and ecu data. 

Reading ECU flash memory.
ECU reports programming session preconditions have been met.
Negotiating communication timings.
Timing negotiation failed. Communication timings are unchanged.
Requesting security access.
ECU reports that security access is not supported.
Starting diagnostic session.
Successfully started diagnostic session.
Negotiating communication timings.
Successfully changed to new communication timings.
Requesting security access.
Security access granted.
Validating flash memory starts at 0x00800000 and ends at 0x00880000.
End address is not the end of flash memory.
Reading ECU flash memory failed. Trying to force ECU to recognize read operation is complete.
Finished forcing ECU to recognize that failed read operation is complete.
Reading ECU flash memory failed.
100% complete.
Logged
KJA
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 8


« Reply #7 on: February 12, 2021, 04:17:02 PM »

File in 800BB Memory layout.
Logged
KJA
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 8


« Reply #8 on: February 26, 2021, 05:36:49 PM »

I ended up grabbing a spare ecu.  I did an immo delete.  I tried to write with nefmoto, no luck (bricked).  I had to flash in boot mode with mpps.  I am just trying to deal with the SAI for now. No codes but readiness is still screwy.  I read that to pass readiness  MSLUB MSLBAS might be a better route for my pump being removed?  Any chance of getting these addresses?  If im on the wrong track here let me know.  On another post I read CLASLPE CLASLVE were plug and pump plug settings.  What would be my best route? tia
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.015 seconds with 17 queries. (Pretty URLs adds 0s, 0q)