Pages: 1 ... 148 149 [150] 151 152 ... 182
Author Topic: The Volvo ME7 thread:  (Read 1079170 times)
prj
Hero Member
*****

Karma: +1072/-480
Offline Offline

Posts: 6035


« Reply #2235 on: March 19, 2023, 01:25:46 PM »

yes its the entire A6 table taken from VIDA, if theres something missing its because there is no A6 lookup for it, certainly everything in the 6000C subroutine is used
Unfortunately a lot of tuning related stuff is missing. Don't really have time to populate a pattern matcher.
If you want to do that, and release it, I can make a free protocol that'll automatically run it on the server...

Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
prometey1982
Sr. Member
****

Karma: +70/-60
Offline Offline

Posts: 323



WWW
« Reply #2236 on: March 19, 2023, 11:25:46 PM »

yes its the entire A6 table taken from VIDA, if theres something missing its because there is no A6 lookup for it, certainly everything in the 6000C subroutine is used
Which VIDAs table contain such info?
Logged

Россия - Великая страна!
https://youtu.be/fup5GzIFdXk
luki743
Newbie
*

Karma: +2/-0
Offline Offline

Posts: 18


« Reply #2237 on: March 20, 2023, 03:54:48 AM »

A6 table for '08658507  H' (20KPSC):

Code:
SELECT 
REPLACE(bv.CompareValue, '0x', '') as address,
SUBSTRING(b2.name, 0, CHARINDEX(' : ', b2.name)) as name,
b2.name as description,
b.length as size,
CASE WHEN CHARINDEX('0b', s.definition) > 0 THEN '' ELSE  s.definition END as definition,
u.data as unit,
bmp.asMinRange as min,
bmp.asMaxRange as max
FROM carcom.dbo.T150_BlockValue bv
INNER JOIN carcom.dbo.T141_Block b on bv.fkT141_Block = b.id
INNER JOIN carcom.dbo.T144_BlockChild bc on bv.fkT141_Block = bc.fkT141_Block_Parent
INNER JOIN carcom.dbo.T150_BlockValue bv2 on bc.fkT141_Block_Child = bv2.fkT141_Block
INNER JOIN carcom.dbo.T155_Scaling s on bv2.fkT155_ppeScaling = s.id
INNER JOIN carcom.dbo.T191_TextData u on bv2.fkT190_Text_ppeUnit = u.fkT190_Text
INNER JOIN carcom.dbo.T148_BlockMetaPARA bmp on bc.fkT141_Block_Child = bmp.fkT141_Block
INNER JOIN carcom.dbo.T141_Block b2 on bc.fkT141_Block_Child = b2.id
WHERE bc.fkT100_EcuVariant=(SELECT id FROM carcom.dbo.T100_EcuVariant WHERE identifier = '08658507  H')
AND b.fkT142_BlockType=5
AND u.fkT193_Language=19
AND bc.SortOrder=1
AND bv2.SortOrder=1
« Last Edit: March 20, 2023, 05:13:52 AM by luki743 » Logged
rlinewiz
Jr. Member
**

Karma: +12/-1
Offline Offline

Posts: 42


« Reply #2238 on: March 20, 2023, 05:42:38 AM »

Which VIDAs table contain such info?

under carcom there is a stored procedure called dbo.service__getblocks. execute this with the ecu variant and it will return a massive list of every piece of data that can be sent or received to that ecu

bosch me7 = 454
denso = 452
Logged

2005 S60R M66-Swapped // Self-tuned @ 22psi
[[forever coding for the OpenMoose project]]
prj
Hero Member
*****

Karma: +1072/-480
Offline Offline

Posts: 6035


« Reply #2239 on: March 20, 2023, 06:37:33 AM »

I had another look at the data, and besides knock retard, also most of the lambda and ignition path is missing.
The load and boost is better represented.

So for tuning purposes an augmentive tool needs to be written that is going to locate some more variables.
With just the VIDA data there's a bunch of critical information that is not there.
Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
prj
Hero Member
*****

Karma: +1072/-480
Offline Offline

Posts: 6035


« Reply #2240 on: March 20, 2023, 02:21:34 PM »

@rlinewiz
I did some analysis on your csv file, and compared it to what my generator spits out from a 1mb a2l.

You have some variables twice, some with a different address:
aftrlmx - twice with a different address
TMOTLIN - this one is as bitfield in one of them.
fdmd_m - twice
sfpurrom - twice with a different address

And then there's a bunch of stuff where the address is just wrong.
For example nstat. I did not try to compare everything else that disagreed between my generator and your VIDA parser.
I don't know if it's your processing or VIDA data is wrong or my gen is wrong.
On the bright side of things, only 2.4% disagreed, so I think you did a pretty damn good job already with the parser.

Here's my output:
Code:
f_ad2 has different address. VIDA: 0xF2F8 GEN: 0xF2D8
fcmtab has different address. VIDA: 0x3024E6 GEN: 0x30A4E6
ftead_w has different address. VIDA: 0x3019EE GEN: 0x3029EE
iptgh_w has different address. VIDA: 0x30A262 GEN: 0x30A256
iptsgl_w has different address. VIDA: 0x30A272 GEN: 0x3053CA
nstat has different address. VIDA: 0x301934 GEN: 0x30134A
sfpdskvnd has different address. VIDA: 0x303ABC GEN: 0x303B32
sfpdylsu2 has different address. VIDA: 0x303ADC GEN: 0x303B6A
sfphelsu2 has different address. VIDA: 0x303B1A GEN: 0x303B6E
sfphsh2 has different address. VIDA: 0x303B20 GEN: 0x303AFA
sfpiclsu2 has different address. VIDA: 0x303B32 GEN: 0x303B72
sfpldo has different address. VIDA: 0x303B53 GEN: 0x303B52
sfplsuia2 has different address. VIDA: 0x303B66 GEN: 0x303B76
sfplsuip2 has different address. VIDA: 0x303B6A GEN: 0x303BBA
sfplsuks2 has different address. VIDA: 0x303B6E GEN: 0x303C16
sfplsuun2 has different address. VIDA: 0x303B72 GEN: 0x303B20
sfpndr has different address. VIDA: 0x303B9E GEN: 0x303B1A
sfptfuel1 has different address. VIDA: 0x303BE6 GEN: 0x303B66
sfpulsu2 has different address. VIDA: 0x303C16 GEN: 0x303BEE
Different address: 19/847

I have 5145 variables found in my gen. But it does not support bitfields at all, so that's just straight 1-4 byte variables.

That said, I am happy with my output and I'll add ME7 logging to my tool as well.
I doubt a lot of people are going to pay for it, since @prometey1982 is developing a wonderful free tool, and it seems that soon there will be VIDA parsing as well included.
But since I already did the D2 protocol anyway for ME9, this is just a little bit extra code.
« Last Edit: March 20, 2023, 02:38:57 PM by prj » Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
rlinewiz
Jr. Member
**

Karma: +12/-1
Offline Offline

Posts: 42


« Reply #2241 on: March 20, 2023, 03:10:54 PM »

no parser lol, i got fed up with csharp and did it all by hand, everything is 1:1 from VIDA and from the 6000C subroutine. i noticed there are many duplicates, and its because for some reason VIDA has duplicates.. maybe sloppy programming on their part

i wrote out all the bit fields by hand as well, by calculating the AND and SHR instructions wherever they appeared. interestingly there is a lot of overlap, the same byte for example will have one name, and then the individual bits of that byte will have their own seemingly unrelated names

my goal is to import these names into IDA and start picking apart every subroutine and get an idea of how they work, so i can start identifying the 'hidden' ram locations
Logged

2005 S60R M66-Swapped // Self-tuned @ 22psi
[[forever coding for the OpenMoose project]]
prj
Hero Member
*****

Karma: +1072/-480
Offline Offline

Posts: 6035


« Reply #2242 on: March 20, 2023, 03:17:16 PM »

no parser lol, i got fed up with csharp and did it all by hand, everything is 1:1 from VIDA and from the 6000C subroutine. i noticed there are many duplicates, and its because for some reason VIDA has duplicates.. maybe sloppy programming on their part
Holy shit, you're nuts.
Quote
my goal is to import these names into IDA and start picking apart every subroutine and get an idea of how they work, so i can start identifying the 'hidden' ram locations
The 512k A2L is publicly posted in many places, just load and use that, everything important is going to be super similar, even in a 2005 car.

That said, if you just want RAM locations to log your own car, then you're gonna save a lot of time by getting a license to my logger. It's going to be released tomorrow.
If you need it for development or you want it for community sharing, then that's another story entirely...
« Last Edit: March 20, 2023, 03:20:22 PM by prj » Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
s60rawr
Full Member
***

Karma: +19/-1087
Online Online

Posts: 170



« Reply #2243 on: March 24, 2023, 07:31:32 AM »

Holy shit, you're nuts.The 512k A2L is publicly posted in many places, just load and use that, everything important is going to be super similar, even in a 2005 car.

That said, if you just want RAM locations to log your own car, then you're gonna save a lot of time by getting a license to my logger. It's going to be released tomorrow.
If you need it for development or you want it for community sharing, then that's another story entirely...

wow imagine using a logger that still uses a licensed base encryption.  lolololol

rline has done so much behind the scenes that he doesn't take credit for.

lemme "buy" your logger so I can decrypt it in 5 seconds flat.
g fucking g
Logged


There is a free flash suite in progres

-Karma Sponge
s60rawr
Full Member
***

Karma: +19/-1087
Online Online

Posts: 170



« Reply #2244 on: March 24, 2023, 07:41:12 AM »

Holy shit, you're nuts.The 512k A2L is publicly posted in many places, just load and use that, everything important is going to be super similar, even in a 2005 car.

That said, if you just want RAM locations to log your own car, then you're gonna save a lot of time by getting a license to my logger. It's going to be released tomorrow.
If you need it for development or you want it for community sharing, then that's another story entirely...

everything is for the community.
we don't need it for logging.

we're just trying to see all the cool shit we can do etc...
Logged


There is a free flash suite in progres

-Karma Sponge
prj
Hero Member
*****

Karma: +1072/-480
Offline Offline

Posts: 6035


« Reply #2245 on: March 24, 2023, 01:13:15 PM »

wow imagine using a logger that still uses a licensed base encryption.  lolololol

rline has done so much behind the scenes that he doesn't take credit for.

lemme "buy" your logger so I can decrypt it in 5 seconds flat.
g fucking g
I'll just leave that here, so that others can also see you have no clue what you are talking about.
You could not hack your way out of a wet paper bag Smiley

If you ever installed the tool you would have known how stupid what you just said is. You can not "buy the logger", or I guess you could for a 7 digit offer. There is no encryption whatsoever.
Security in proper tools is done serverside. You could have a completely open client, it would do you little good, because the server does not send you anything you haven't paid for. If you want to pay me for every single SW version, go right ahead, I'll take it.
Maybe you'll buy a facebook or an amazon while you're at it, and decrypt it Cheesy
About same level of stupid as claiming that "decrypting" WinOLS Demo will get you all reseller projects for free. Or pressing the inspect button in your browser and changing the amount of money in your bank account.

Either way, I don't give a shit.
It took me 2 days total to write both the D2 and the UDS client, without ever looking at it in the past. DHA contains all the info needed to implement the protocols.
The protocol is there, and if anyone wants to use it, they can. ME9 was done because of customer requests. ME7 was done because it's exactly the same as ME9, only the data is different.
Nobody is probably going to buy a license for a 20 year old shitter, but why not do it.

Btw, I still don't see anything you guys accomplished besides yelling really loud.
I was tuning these cars 10 years ago with just a MPPS flasher. A simple boot wire running from Pin 24 to the ignition barrel and the K-Line on some, short it, flick ignition on, flash it in the car, and much faster than using the OBD SBL based bullshit.
VIDA and DHA were already available back then. Just as they are now and the 512k A2L already leaked and it was easy to find maps with WinOLS without even opening IDA.

So what's new? The entry barrier has not been tools for over 10 years. It has been in a better place than VAG ME7, because all the OEM shit leaked.
You're pretending like it was impossible to do anything, when it really was not. The entry barrier is that a random joe is not going to be any good at tuning ME7, nothing else.
« Last Edit: March 24, 2023, 01:55:42 PM by prj » Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
Cheekano
Full Member
***

Karma: +4/-1
Offline Offline

Posts: 60


« Reply #2246 on: March 27, 2023, 02:01:17 AM »

New version of VolvoTools. Added Mongoose JLR support. https://cloud.mail.ru/public/qHDs/RBR5724k3
Moreover logger supports j2534 devices with one CAN on 6-14 pins. Flasher wants second CAN to shutdown ECUs on slow network CAN. Maybe it can be ignored if it can't open second. I'm not sure.

P1 ME9 also should be supported.
Flasher not working on P1 ME9. Same with logger but older version running on P1 fine.
Logged
prometey1982
Sr. Member
****

Karma: +70/-60
Offline Offline

Posts: 323



WWW
« Reply #2247 on: March 27, 2023, 03:57:36 AM »

Flasher not working on P1 ME9. Same with logger but older version running on P1 fine.
Yes also checked on P1. I changed from CAN_XON_XOFF protocol to basic CAN. It can be the problem. I'll change from basic CAN to CAN_XON_XOFF if it supported soon. Unfortunately haven't P1 car to check.
Logged

Россия - Великая страна!
https://youtu.be/fup5GzIFdXk
Cheekano
Full Member
***

Karma: +4/-1
Offline Offline

Posts: 60


« Reply #2248 on: March 27, 2023, 04:49:11 AM »

Yes also checked on P1. I changed from CAN_XON_XOFF protocol to basic CAN. It can be the problem. I'll change from basic CAN to CAN_XON_XOFF if it supported soon. Unfortunately haven't P1 car to check.

Thanks. The older flasher would enter boot mode (cluster would turn off) but say failed erasing after a while. The new flasher version will not enter boot mode and also show fail to erase.
Logged
prometey1982
Sr. Member
****

Karma: +70/-60
Offline Offline

Posts: 323



WWW
« Reply #2249 on: March 27, 2023, 05:21:31 AM »

Thanks. The older flasher would enter boot mode (cluster would turn off) but say failed erasing after a while. The new flasher version will not enter boot mode and also show fail to erase.
Does old logger works?
Logged

Россия - Великая страна!
https://youtu.be/fup5GzIFdXk
Pages: 1 ... 148 149 [150] 151 152 ... 182
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.056 seconds with 15 queries. (Pretty URLs adds 0s, 0q)