metronet
Full Member
Karma: +5/-0
 Offline
Posts: 73
|
 |
« Reply #330 on: July 07, 2016, 08:09:52 AM »
|
|
|
So I would like you to consider the following mods to the "current" community emissions delete process:
CDLSH.0 = 1
USMIN = -1
TANHKMMN = -273
THSHA = 0
TRSE = 0
When we leave DLSH enabled we can finally set b_sbbhk and thus enable diagnostics of DLSU. I can confirm that now finally I have z_lsv set and all readiness passed.
I have a very similar issue in ME7.1.1 and logging has shown that B_sbbhk and B_sbbhk2 are never set to 1. I tried the above 5 codewords with no avail. Could I just change B_sbbhk to cc_UC and call it a day? Any help here is much appreciated  More details here for reference: http://nefariousmotorsports.com/forum/index.php?topic=8764.msg90946#msg90946 |
|
|
|
|
Logged
|
|
|
|
cgramme
Full Member
Karma: +1/-0
Offline
Posts: 77
|
|
« Reply #331 on: October 21, 2016, 12:54:27 AM »
|
|
|
I just got back from passing my emissions tests and have a little info that might be useful to someone. Before I had the idea of deleting all my emissions components I was already throwing code p0420. For whatever reason I ended up deleting EVAP, n249, vacuum reservoir, SAI and also coded out my rear o2 sensor. After I had everything deleted I was still having trouble setting readiness for my catalyst and EVAP. The way I was able to get all readiness set was to reflash with the stock bin file and let everything run through the tests and fail, I then flashed the modified bin file without resetting the CEL and everything immediately showed as passed with vcds and also the android torque application.
All set to "0"
For EVAP - CDTES, CDLDP
for rear 02 - CDKAT, CDKATSPF, CWDLSAHK
for SAI - MSLUB
|
|
|
|
« Last Edit: October 22, 2016, 12:50:00 PM by cgramme »
|
Logged
|
|
|
|
|
nyet
|
|
« Reply #332 on: November 10, 2016, 05:01:19 PM »
|
|
|
Doing any of that without touching ESKONF is not advisable.
|
|
|
|
|
Logged
|
|
|
|
cgramme
Full Member
Karma: +1/-0
Offline
Posts: 77
|
|
« Reply #333 on: November 14, 2016, 02:44:02 PM »
|
|
|
I have all relays still plugged in so I don't get any MIL's. I might end up reverting some components back to factory but I haven't decided 100% which ones yet. If I wanted to remove N249, N112, N80 and P299 relays I think this would be the solution:
Factory 518ak: AA FF 00 30 E3 F8 30
Modified: AA FF 00 33 E3 FB FC
|
|
|
|
|
Logged
|
|
|
|
|
nyet
|
|
« Reply #334 on: November 14, 2016, 02:58:00 PM »
|
|
|
I have all relays still plugged in so I don't get any MIL's
Got it. Wasn't sure what your hardware situation was. Carry on! |
|
|
|
|
Logged
|
|
|
|
antoffka666
Full Member
Karma: +11/-2
Offline
Posts: 82
|
|
« Reply #335 on: June 03, 2017, 06:07:06 AM »
|
|
|
So I have something to add here. DLSU will NEVER set z_lsv = 1 IF b_sbbhk = 0! OR at least on 06...HN file with fully defined ols. It is almost complete single bank copy of FR file we all have here. Problem lies within DLSH. So I would like you to consider the following mods to the "current" community emissions delete process:
CDLSH.0 = 1
USMIN = -1
TANHKMMN = -273
THSHA = 0
TRSE = 0
When we leave DLSH enabled we can finally set b_sbbhk and thus enable diagnostics of DLSU. I can confirm that now finally I have z_lsv set and all readiness passed.
Of course it would be way nicer to fix everything with codewords, but I see no other way to set b_sbbhk other than keep DLSH enabled.
Hello ! Help me find the address USMIN ? |
|
|
|
|
Logged
|
|
|
|
antoffka666
Full Member
Karma: +11/-2
Offline
Posts: 82
|
|
« Reply #336 on: June 04, 2017, 02:38:38 PM »
|
|
|
Thanks for the help!) Solved the problem in a different way.
Address still searching USMIN
Used a "hipeka" friend's code and decoded
00 00 00 00 00 00 00 01 00 00 01 01 01 00 00 00 01 00 00 00 00 01 00 00 00 00 01 02 00 01 01 04 0F 00 01 00 01 00 00 01 00 00 06 00 00 00 04 7D AF 15
|
|
|
|
|
Logged
|
|
|
|
HelperD
Full Member
Karma: +25/-6
Offline
Posts: 112
|
|
« Reply #337 on: August 02, 2017, 07:57:00 PM »
|
|
|
Been working closely with someone else from the forum on this matter for some time. Basically setting readiness is quite easy with a little bit of custom code. Check in the FR for EVSUP_1. If you would like to find it in IDA then with ME7info you will find the RAM address for readiness byte. One byte back will be EVSUP_1 every time. Now with this RAM address you will be able to replace the instructions for this with a call that points to your code. In the FR you will see how to appropriately set your bits to get whatever readiness you would want. Simply move EVSUP_1 to an open registry (in this case it would likely be rL4) and set rL4 to whatever combination you need. I.E if you want to set every monitor to ready then you would put all 1's (11111111) or FF in hex. With some basic understanding of asm you will in short time with 3 lines or less be able to set evsup_1 to whatever you like. Happy Hunting D |
|
|
|
|
Logged
|
|
|
|
d0xx
Jr. Member
Karma: +12/-11
Offline
Posts: 35
|
|
« Reply #338 on: August 09, 2017, 03:36:35 PM »
|
|
|
Been working closely with someone else from the forum on this matter for some time. Basically setting readiness is quite easy with a little bit of custom code. Check in the FR for EVSUP_1. If you would like to find it in IDA then with ME7info you will find the RAM address for readiness byte. One byte back will be EVSUP_1 every time. Now with this RAM address you will be able to replace the instructions for this with a call that points to your code. In the FR you will see how to appropriately set your bits to get whatever readiness you would want. Simply move EVSUP_1 to an open registry (in this case it would likely be rL4) and set rL4 to whatever combination you need. I.E if you want to set every monitor to ready then you would put all 1's (11111111) or FF in hex. With some basic understanding of asm you will in short time with 3 lines or less be able to set evsup_1 to whatever you like. Happy Hunting D That's exactly what i did. Someone asked me to set readiness, and instead that complicated way, i just searched for ready_byte and evsup1 and set it to whatever i want. But a small hint, evsup1 isn't the byte before ready-byte, its 2 bytes before. If readiness = 0x380123, evsup 1 would be 0x380121 Br |
|
|
|
|
Logged
|
|
|
|
B56
Newbie
Karma: +0/-0
Offline
Posts: 17
|
|
« Reply #339 on: September 02, 2017, 08:43:07 AM »
|
|
|
CLALDPE-0x10712
CLATEVE-0x10747
can anyone walk me through how to find these two in my m-box so i can set them to zero? Or is there a reference guide anywhere on how to find these addresses in the hex editor? |
|
|
|
|
Logged
|
|
|
|
HelperD
Full Member
Karma: +25/-6
Offline
Posts: 112
|
|
« Reply #340 on: September 16, 2017, 09:57:14 PM »
|
|
|
CLALDPE is 0x10712
CLATEVE is 0x10746
First address is correct, second is not in what you have posted.
This is for an MBOX.
ME7.1
8D0907551M
0002
|
|
|
|
|
Logged
|
|
|
|
NateDawg
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #341 on: October 14, 2017, 01:56:49 PM »
|
|
|
I have a problem that's kind of the opposite of what most people are doing. I'm finishing up an AWD conversion on a 1.8T Jetta using TT/R32 parts and there is an extra EVAP solenoid on the charcoal canister I need to get working. All the mk1 TT quattros have this extra valve and I either have to enable it in my ECU or just buy a TT one I guess. There's no mention of the N115 valve in the S4 wiki at all, just the N80. Anyone know if there is another bit pair somewhere to enable/disable the N115 valve?
|
|
|
|
|
Logged
|
|
|
|
NateDawg
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #342 on: October 16, 2017, 04:35:35 PM »
|
|
|
I think I found it, in my ECU (06A906032DL) ESKONF is:
AA FF 00 30 FF F8 30
In the ECU for the TT 180q AWP (8N0906018AL) ESKONF is:
AA FF 00 30 F3 F8 30
The BEA TT225q ECUs I found on here have the same values too.
There's one extra thing enabled and that has to be it. I'll give it a shot when my spare ECU comes in the mail this week.
|
|
|
|
« Last Edit: October 16, 2017, 05:00:08 PM by NateDawg »
|
Logged
|
|
|
|
NateDawg
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #343 on: October 25, 2017, 07:26:35 PM »
|
|
|
So that modification to ESKONF got me halfway there. That just enabled the DTC which I was afraid of, but it does confirm that I have the right pin! If I connect the valve to that pin it clears the codes, but it doesn't turn it on the valve during the leak test. I found a bit called CLATEVE2 in the 06A906032DR XDF on here (at 0x10792) and tried setting that to 3 just like CLATEVE. That also didn't work.
I guess the next step is to try a TT ECU file or something...
Edit: Tried a TT file from an AWP 8N0906018L (it was way more similar than the AL), works perfectly now! Thanks for all the help on this forum!
|
|
|
|
« Last Edit: October 26, 2017, 05:18:36 PM by NateDawg »
|
Logged
|
|
|
|
antoffka666
Full Member
Karma: +11/-2
Offline
Posts: 82
|
|
« Reply #344 on: November 16, 2017, 12:13:21 AM »
|
|
|
Thanks for the help!) Solved the problem in a different way.
Address still searching USMIN
Used a "hipeka" friend's code and decoded
00 00 00 00 00 00 00 01 00 00 01 01 01 00 00 00 01 00 00 00 00 01 00 00 00 00 01 02 00 01 01 04 0F 00 01 00 01 00 00 01 00 00 06 00 00 00 04 7D AF 15
Hello ! I encountered such a problem by changing the code as I wrote earlier , Swim idle speed on a warm car . If I turn off the air mass meter then everything is fine . the flowmeter is 100% reliable. tell me what I could do wrong, could I get the code wrong. |
|
|
|
« Last Edit: November 17, 2017, 05:03:59 AM by antoffka666 »
|
Logged
|
|
|
|
|
