PoleStarPete
Newbie
Karma: +3/-0
 Offline
Posts: 12
|
 |
« on: March 23, 2023, 08:24:01 AM »
|
|
|
Finding the world of Volvo 3.0 t6 engine tuning is so closed, i'm working at making it more open. I'm working on a 2015 3.0 T6 V60 polestar, and i hope to find help in defining the map pack as much as possible. Resources are so scarce. Below you will find a link to a google drive folder of what i have gathered together so far. So Far there is S60 t6 Ori S60 polestar Ori S60 Polestar Decat V60 Polestar Ori V60 Polestar St2 Polestar Winols Map pack (pretty limited) S80 T6 full damos, which unfortunately doesn't seem to be relevant to my Polestar tuning goals, but there it is. Denso ECM pin cracker Decoding the ECM pin over canbus is understood, its pretty easy and full code will be shared in due course. for now there is a rudimentary exe for use with a DiCE and ECM on the bench. its canbus, not bdm. easy enough to hook up. The same goes for reading / writing to the ECM by canbus. I dont need help with that. Code will be shared when i have time.....its not like writing a recipe for cookies. Developing a stage 3 (that is to say hybrid turbo) on the V60 Polestar is the main goal and i hope i can find some people with Denso skills who can contribute https://drive.google.com/drive/folders/1u8lUEzp_bT217ps74HcFhZJ7T7U9lWbJ?usp=sharingThanks for looking PoleStarPete |
|
|
|
« Last Edit: March 23, 2023, 02:10:10 PM by PoleStarPete »
|
Logged
|
|
|
|
|
prometey1982
|
|
« Reply #1 on: March 23, 2023, 11:12:16 AM »
|
|
|
Hi,
I'm intrested in Denso tuning. How will you flash such ECUs? It should be locked by PIN or something like this. I can add flashing/reading of such ECUs to my tool which can use any j2534-1 compatible device for flashing/logging.
|
|
|
|
« Last Edit: March 23, 2023, 11:24:59 AM by prometey1982 »
|
Logged
|
|
|
|
PoleStarPete
Newbie
Karma: +3/-0
Offline
Posts: 12
|
|
« Reply #2 on: March 23, 2023, 01:33:57 PM »
|
|
|
brute force crack the pin, then you can read write fairly easily by odb2.
Read writing isnt the obstacle. map definition is the obstacle :-( for the polestar at least.
|
|
|
|
« Last Edit: March 23, 2023, 01:46:23 PM by PoleStarPete »
|
Logged
|
|
|
|
|
prj
|
|
« Reply #3 on: March 23, 2023, 04:03:32 PM »
|
|
|
I should try to make a SuperH module for my def generator, then could implement full logging on these...
I remember looking at some SuperH stuff on IIRC Mitsubishi and ram loads were quite weird...
|
|
|
|
|
Logged
|
|
|
|
PoleStarPete
Newbie
Karma: +3/-0
Offline
Posts: 12
|
|
« Reply #4 on: March 24, 2023, 01:56:22 AM »
|
|
|
Let me know if thee is anything i can do to help.
|
|
|
|
|
Logged
|
|
|
|
|
prometey1982
|
|
« Reply #5 on: March 24, 2023, 02:01:52 AM »
|
|
|
brute force crack the pin, then you can read write fairly easily by odb2.
Read writing isnt the obstacle. map definition is the obstacle :-( for the polestar at least.
Finding maps aren't a problem. Everything can be done by analogy. You already have defined ols. |
|
|
|
|
Logged
|
|
|
|
PoleStarPete
Newbie
Karma: +3/-0
Offline
Posts: 12
|
|
« Reply #6 on: March 24, 2023, 02:05:31 AM »
|
|
|
the s80 ols does not seem usefull , but of course, this is far from my area of expertise. if you can make a useful map pack, please do :-)
|
|
|
|
|
Logged
|
|
|
|
|
prometey1982
|
|
« Reply #7 on: March 24, 2023, 02:50:55 AM »
|
|
|
the s80 ols does not seem usefull , but of course, this is far from my area of expertise. if you can make a useful map pack, please do :-)
What about flashing? SH7*** devices should ping dedicated PIN every XXX miliseconds. Easiest way to do it is taking of Volvo SBL for such module. Or write own SBL but this task is not easy (at least for me). |
|
|
|
|
Logged
|
|
|
|
PoleStarPete
Newbie
Karma: +3/-0
Offline
Posts: 12
|
|
« Reply #8 on: March 24, 2023, 02:55:44 AM »
|
|
|
it sounds like you want work by DiCE, thats not really my goal as i have a hard ware solutiuon for r/w , but i'm sure it will be good to have and understanding of that for you. If you log canbus on a ECM reload in Vida you can see its not witchcraft :-) , or look at the vida log files. they are very informative.
|
|
|
|
|
Logged
|
|
|
|
|
prometey1982
|
|
« Reply #9 on: March 24, 2023, 03:39:00 AM »
|
|
|
it sounds like you want work by DiCE, thats not really my goal as i have a hard ware solutiuon for r/w , but i'm sure it will be good to have and understanding of that for you. If you log canbus on a ECM reload in Vida you can see its not witchcraft :-) , or look at the vida log files. they are very informative.
Yes I want to reload software remotely. Logs from Vida very useful. I used it to understand Volvo's protocols. By the way in all cases you will need memory logging for propertly tuning. Logging with read memory by index isn't enough for it. My current console logger supports generic j2534 devices. I'll extend it with UDS protocol soon. |
|
|
|
|
Logged
|
|
|
|
|
prj
|
|
« Reply #10 on: March 24, 2023, 04:11:00 AM »
|
|
|
The problem is not UDS protocol or D2 protocol, that's super easy.
The problem are the ram cell locations on each software across different architectures.
I have support for ST10/C167, PowerPC ISA, PowerPC VLE and TriCore now for automatically locating variables from a similar-ish A2L.
I guess I need to make a module for SuperH now.
This is the first step to making useful RAM logger. Comms protocols are the last step after you already have the data.
|
|
|
|
|
Logged
|
|
|
|
|
prometey1982
|
|
« Reply #11 on: March 24, 2023, 04:15:18 AM »
|
|
|
The problem is not UDS protocol or D2 protocol, that's super easy.
The problem are the ram cell locations on each software across different architectures.
I have support for ST10/C167, PowerPC ISA, PowerPC VLE and TriCore now for automatically locating variables from a similar-ish A2L.
I guess I need to make a module for SuperH now.
This is the first step to making useful RAM logger. Comms protocols are the last step after you already have the data.
But your solution isn't free. |
|
|
|
|
Logged
|
|
|
|
|
prj
|
|
« Reply #12 on: March 24, 2023, 05:26:27 AM »
|
|
|
But your solution isn't free. Of course it's not free. The A2L data isn't either. The generation software took a year of development. Full time jobs seldom are free  You can make UDS stack, then if somebody wants they can search for variables in IDA (and they need to get a similar a2l before that). This limits the real usage of the software to <0.1% of possible users however. Everybody else is fucked because no solution exists for them. |
|
|
|
|
Logged
|
|
|
|
PoleStarPete
Newbie
Karma: +3/-0
Offline
Posts: 12
|
|
« Reply #13 on: March 24, 2023, 08:41:02 AM »
|
|
|
t6 a2l are floating around i'm sure, polestar, not so much. however we know hilton does it with his ram logger on poelstars . the logs contain headings such as Sfi_LnrAFCmp_bank1, Scm_AccPWM_Pts (and many many more) so that gives some clues.
|
|
|
|
|
Logged
|
|
|
|
|
prj
|
|
« Reply #14 on: March 24, 2023, 01:10:29 PM »
|
|
|
t6 a2l are floating around i'm sure, polestar, not so much. It does not need to be an exact match to automatically find most RAM variables needed for tuning. IDK about how different the cal is on those, I've never worked on one. |
|
|
|
|
Logged
|
|
|
|
|
