guitar24t
Full Member
Karma: +13/-0
 Offline
Posts: 101
|
 |
« Reply #390 on: November 23, 2013, 02:43:14 PM »
|
|
|
Funny this i was dumping RAM last night and came to the same conclusion. But there seems to also be another section of RAM much lower where I think I found knock retard...
Can't remember offhand and I'm away ATM. Does that ring any bells?
If you could shoot over your IDA DB, maybe we can get this rolling.
But yeah I could dump stuff from 0x3000-0x4000 too. There's also some stuff hidden from DHA that I found, different read record stuff but still trying to work out what it is.
Does anyone have a list of me7 ecu requests? Example is read data by identifier and the like...
Also, the lower section of RAM that you see is the XRAM from this processor. It is usually accessed with DPP3. |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #391 on: November 23, 2013, 02:47:53 PM »
|
|
|
I'd be happy to send over my IDA DB. Before I do that though, I want to redo it. I started analyzing with the C167CR variant instead of the C167CS. I got them confused in my head when I did it late at night. haha
Any chance you can log a memory address and see what info is there, when you get a chance? I believe 0x30022F is some kind of ignition angle, but I have no way to test it, right now. As you know, my car is super extra out of commission for a little while longer! lol
I'm guessing my tune will be jumbled from yours? But yeah I can do that. I suppose I could flash your us file its a facelift mt? This is exciting, I didn't have anything on DPPs just my RAM discovery last night. I can dump 255 bytes at a time which appears to be a limit with the read memory by address service. |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #392 on: November 23, 2013, 02:49:58 PM »
|
|
|
Also, the lower section of RAM that you see is the XRAM from this processor. It is usually accessed with DPP3.
Hmmmm, makes sense. So forgive me, these variables only exist in the xram? The purpose of this? Faster, priority? Or? |
|
|
|
|
Logged
|
|
|
|
guitar24t
Full Member
Karma: +13/-0
Offline
Posts: 101
|
|
« Reply #393 on: November 23, 2013, 02:51:07 PM »
|
|
|
I'm guessing my tune will be jumbled from yours? But yeah I can do that. I suppose I could flash your us file its a facelift mt?
This is exciting, I didn't have anything on DPPs just my RAM discovery last night. I can dump 255 bytes at a time which appears to be a limit with the read memory by address service.
Of course! I completely forgot about the file. This is the one I'm using. http://nefariousmotorsports.com/forum/index.php?action=dlattach;topic=4530.0;attach=7726 |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #394 on: November 23, 2013, 02:55:46 PM »
|
|
|
Cool, will flash it and run it and log it. Might take a day or so though as I'm away with the Mrs.
How many bytes? Do you want a log with other variables at the same time?
|
|
|
|
|
Logged
|
|
|
|
guitar24t
Full Member
Karma: +13/-0
Offline
Posts: 101
|
|
« Reply #395 on: November 23, 2013, 02:56:36 PM »
|
|
|
Hmmmm, makes sense. So forgive me, these variables only exist in the xram? The purpose of this? Faster, priority? Or?
XRAM is faster and contained within the C167. Main code section shouldn't begin until 0x10000 I believe. |
|
|
|
|
Logged
|
|
|
|
guitar24t
Full Member
Karma: +13/-0
Offline
Posts: 101
|
|
« Reply #396 on: November 23, 2013, 02:58:09 PM »
|
|
|
Cool, will flash it and run it and log it. Might take a day or so though as I'm away with the Mrs.
How many bytes? Do you want a log with other variables at the same time?
I believe it's only one byte. Factor is likely 0.75. I don't have any other RAM variables to log right now, but it probably wouldn't be a bad idea to log the real target ignition angle along with it, for comparison. |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #397 on: November 23, 2013, 03:04:42 PM »
|
|
|
I believe it's only one byte. Factor is likely 0.75. I don't have any other RAM variables to log right now, but it probably wouldn't be a bad idea to log the real target ignition angle along with it, for comparison.
I think the only one I have is the output angle zwout? But yeah I can do that. I suppose this ram location I have old confirm the dpp3 setting? If I'm right about what I found last night I'll have the ram locations for all software versions for about 13 variables, potentially a huge discovery. It was like 2am though so it all needs tested. |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #398 on: November 23, 2013, 03:12:22 PM »
|
|
|
It's the ignition angle identifier I mean...
So are you basing the theory on the factor used in the assembly ? Or are you following what you hope is mbas or something?
|
|
|
|
|
Logged
|
|
|
|
guitar24t
Full Member
Karma: +13/-0
Offline
Posts: 101
|
|
« Reply #399 on: November 23, 2013, 03:16:22 PM »
|
|
|
It's the ignition angle identifier I mean...
So are you basing the theory on the factor used in the assembly ? Or are you following what you hope is mbas or something?
I'm using the theory that most of the units of gradKW are 0.75.  Total guesswork! |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #400 on: November 23, 2013, 03:22:04 PM »
|
|
|
I'm using the theory that most of the units of gradKW are 0.75. Total guesswork! Lol, good old trial and error huh. Story of my life !!  |
|
|
|
|
Logged
|
|
|
|
guitar24t
Full Member
Karma: +13/-0
Offline
Posts: 101
|
|
« Reply #401 on: November 23, 2013, 03:23:17 PM »
|
|
|
Lol, good old trial and error huh. Story of my life !! Trial and error is the best way! I think you'll like my latest project. I haven't shared it with anyone yet. Do you have a BitBucket account? |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #402 on: November 23, 2013, 03:25:36 PM »
|
|
|
Trial and error is the best way! I think you'll like my latest project. I haven't shared it with anyone yet. Do you have a BitBucket account?
Nope, because I just had to google it!!! Can do though. |
|
|
|
|
Logged
|
|
|
|
|
dream3R
|
|
« Reply #403 on: November 23, 2013, 03:28:06 PM »
|
|
|
Ok, got one, usual details.
|
|
|
|
|
Logged
|
|
|
|
guitar24t
Full Member
Karma: +13/-0
Offline
Posts: 101
|
|
« Reply #404 on: November 23, 2013, 03:29:46 PM »
|
|
|
Ok, got one, usual details.
Just added you to the repo! I'll upload a test exe to the main directory so you can try it out. |
|
|
|
|
Logged
|
|
|
|
|
