NefMoto > Technical > Reverse Engineering > MED17 Cruise control buttons on CAN
Pages: [1]
« previous next »
Author Topic: MED17 Cruise control buttons on CAN  (Read 7639 times)
yoshi63
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 3
« on: September 16, 2015, 02:43:51 AM »
Hi everyone,

I'm looking for the CAN ID of the state of the cruise control buttons +/-  on MED17. If someone have a trick to help me to find this I would appreciate.

 Grin
Logged
k0mpresd
Hero Member
*****

Karma: +146/-54
Offline Offline

Posts: 1655
« Reply #1 on: September 16, 2015, 02:56:26 AM »
do you know the name or the map id?
Logged
yoshi63
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 3
« Reply #2 on: September 16, 2015, 03:03:22 AM »
After research I have found a variable usually called B_canfgr but itdoesn't content state of buttons, I think it's just a condition to enable/disable fgr signals by CAN. I try to identify the variable to find the CAN associated function.
« Last Edit: September 30, 2015, 08:23:14 AM by yoshi63 » Logged
TC
Newbie
*

Karma: +1/-2
Offline Offline

Posts: 16
« Reply #3 on: September 18, 2015, 01:39:08 PM »
DO you have Funtionsrahmen to MED17 ?
Logged
Teitek
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 21
« Reply #4 on: September 21, 2015, 01:12:41 PM »
Quote from: TC on September 18, 2015, 01:39:08 PM
DO you have Funtionsrahmen to MED17 ?

+1
Logged
TC
Newbie
*

Karma: +1/-2
Offline Offline

Posts: 16
« Reply #5 on: September 21, 2015, 05:30:01 PM »
please dont send me offers with price of FR MED17 ... I dont need it .
I just gave hint where author of the topic should look for solution
Logged
ozzy_rp
Jr. Member
**

Karma: +16/-1
Offline Offline

Posts: 49
« Reply #6 on: September 23, 2015, 10:48:47 PM »
Here list of all CAN ID served in MED17.5

PFLASH:8002CDD0                CAN_struct <0, CAN_ID_0x010, 0xFFFFFFFF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002CDE8                 CAN_struct <1, CAN_ID_0x011, 0xFFFFFFFF, 0, 2, 8, 1, 0x1FFFF, Can_data_parser1>
PFLASH:8002CE00                 CAN_struct <2, CAN_ID_0x740, 0x7FF, 0, 2, 8, 1, 0x1FFFF, Can_data_parser2>
PFLASH:8002CE18                 CAN_struct <3, CAN_ID_0x300, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002CE30                 CAN_struct <4, CAN_ID_0x741, 0x7FF, 0, 2, 8, 1, 0x1FFFF, Can_data_parser2>
PFLASH:8002CE48                 CAN_struct <5, CAN_ID_0x301, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002CE60                 CAN_struct <6, CAN_ID_0x200, 0x7FF, 0, 2, 8, 1, 0x1FFFF, Can_data_parser3>
PFLASH:8002CE78                CAN_struct <7, CAN_ID_0x214, 0x7FF, 0, 2, 8, 1, 0x1FFFF,   Can_data_parser3>
PFLASH:8002CE90                 CAN_struct <8, CAN_ID_0x7E0, 0x7FF, 0, 2, 8, 1, 0x1FFFF, Can_data_parser4>
PFLASH:8002CEA8                 CAN_struct <9, CAN_ID_0x7DF, 0x7FF, 0, 2, 8, 1, 0x1FFFF, Can_data_parser4>
PFLASH:8002CEC0                 CAN_struct <0xA, CAN_ID_0x7E8, 0x7FF, 0, 1, 8, 1, 0x1FFFF, Can_data_parser5>
PFLASH:8002CED8                 CAN_struct <0xB, CAN_ID_0x280, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002CEF0                 CAN_struct <0xC, CAN_ID_0x380, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002CF08                 CAN_struct <0xD, CAN_ID_0x488, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002CF20                 CAN_struct <0xE, CAN_ID_0x58C, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002CF38                 CAN_struct <0xF, CAN_ID_0x540, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002CF50                 CAN_struct <0x10, CAN_ID_0x1A0, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002CF68                 CAN_struct <0x11, CAN_ID_0x2A0, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002CF80                 CAN_struct <0x12, CAN_ID_0x440, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002CF98                 CAN_struct <0x13, CAN_ID_0x540, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002CFB0                 CAN_struct <0x14, CAN_ID_0x442, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002CFC8                 CAN_struct <0x15, CAN_ID_0x44A, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002CFE0                 CAN_struct <0x16, CAN_ID_0x44C, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002CFF8                 CAN_struct <0x17, CAN_ID_0xC2, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D010                 CAN_struct <0x18, CAN_ID_0xD0, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D028                 CAN_struct <0x19, CAN_ID_0x362, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D040                 CAN_struct <0x1A, CAN_ID_0x284, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D058                 CAN_struct <0x1B, CAN_ID_0x56A, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D070                 CAN_struct <0x1C, CAN_ID_0x48C, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D088                 CAN_struct <0x1D, CAN_ID_0x288, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D0A0                 CAN_struct <0x1E, CAN_ID_0x480, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D0B8                 CAN_struct <0x1F, CAN_ID_0x588, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D0D0                 CAN_struct <0x20, CAN_ID_0x48A, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D0E8                 CAN_struct <0x21, CAN_ID_0x368, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D100                 CAN_struct <0x22, CAN_ID_0x362, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D118                 CAN_struct <0x23, CAN_ID_0x50, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D130                 CAN_struct <0x24, CAN_ID_0x5E0, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D148                 CAN_struct <0x25, CAN_ID_0x5A0, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D160                 CAN_struct <0x26, CAN_ID_0x4A0, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D178                 CAN_struct <0x27, CAN_ID_0x4A8, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D190                 CAN_struct <0x28, CAN_ID_0x1AC, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D1A8                 CAN_struct <0x29, CAN_ID_0x1AA, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D1C0                 CAN_struct <0x2A, CAN_ID_0x320, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D1D8                 CAN_struct <0x2B, CAN_ID_0x420, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D1F0                 CAN_struct <0x2C, CAN_ID_0x520, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D208                 CAN_struct <0x2D, CAN_ID_0x570, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D220                 CAN_struct <0x2E, CAN_ID_0x572, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D238                 CAN_struct <0x2F, CAN_ID_0x372, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D250                 CAN_struct <0x30, CAN_ID_0x38A, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D268                 CAN_struct <0x31, CAN_ID_0x390, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D280                 CAN_struct <0x32, CAN_ID_0x58F, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D298                 CAN_struct <0x33, CAN_ID_0x580, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D2B0                 CAN_struct <0x34, CAN_ID_0x5B7, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D2C8                 CAN_struct <0x35, CAN_ID_0x51A, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D2E0                 CAN_struct <0x36, CAN_ID_0x7D0, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D2F8                 CAN_struct <0x37, CAN_ID_0x5D0, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D310                 CAN_struct <0x38, CAN_ID_0x392, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D328                 CAN_struct <0x39, CAN_ID_0x7C4, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D340                 CAN_struct <0x3A, CAN_ID_0x7C3, 0x7FF, 0, 2, 8, 1, 0xFFFF, 0>
PFLASH:8002D358                 CAN_struct <0x3B, CAN_ID_0x7C7, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D370                 CAN_struct <0x3C, CAN_ID_0x7C5, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
PFLASH:8002D388                 CAN_struct <0x3D, CAN_ID_0x7C6, 0x7FF, 0, 1, 8, 1, 0xFFFF, 0>
Logged
MED17/EDC17 Reverse engineering
conversion sgo and frf to bin https://osotec.com/
yoshi63
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 3
« Reply #7 on: September 30, 2015, 08:21:44 AM »
Thanks ozzy_rp Wink I already found this table but my problem is I can't find associated functions. I'm looking for functions which read/write the RAM with the CAN messages of each ID ( before an other function read/write the RAM to read/send message on CAN bus ).

I tried to make a RAM dump by CCP but I'm not able to read all RAM ( just few adress before access denied )
« Last Edit: September 30, 2015, 08:24:38 AM by yoshi63 » Logged
terminator
Sr. Member
****

Karma: +15/-4
Offline Offline

Posts: 425
« Reply #8 on: October 06, 2015, 08:17:15 AM »
looking for this too.
« Last Edit: October 06, 2015, 11:05:53 AM by terminator » Logged
ozzy_rp
Jr. Member
**

Karma: +16/-1
Offline Offline

Posts: 49
« Reply #9 on: October 11, 2015, 10:16:36 AM »
How to find reference to CAN_struct:

PFLASH:8014D90C             Init_CAN_interface:                     ; DATA XREF: PFLASH:800376D0o
PFLASH:8014D90C                                                     ; PFLASH:8003827Co
PFLASH:8014D90C 7B 30 00 F8                 movh            d15, #0x8003
PFLASH:8014D910 D9 1F 75 E5                 lea             a15, [a1](Adr_8003262D - Base_a1_addr) ; Load addres 0x8003262D
PFLASH:8014D914 91 00 00 CF                 movh.a          a12, #@HIS(CAN_CLC) ; CAN Clock Control Register
PFLASH:8014D918 1B 0F DD FC                 addi            d15, d15, #(CAN_Structure - word_80030000) ; CAN Srtucture:
PFLASH:8014D91C 59 0F 30 3A                 st32.w          [a0](Addr_CAN_Structure - Base_a0_addr), d15 ; Store 0x8002CDD0
PFLASH:8014D91C                                                     ; Pointer to CAN_Structure
PFLASH:8014D920 7B 30 00 F8                 movh            d15, #0x8003
PFLASH:8014D924 D9 CC 00 04                 lea             a12, [a12]@LOS(CAN_CLC) ; CAN Clock Control Register
PFLASH:8014D928 1B 8F DB FC                 addi            d15, d15, #(byte_8002CDB8 - word_80030000) ; Struct size 0x0C byte
PFLASH:8014D928                                                     ; 0x00 - CAN Node number
PFLASH:8014D928                                                     ; 0x01
PFLASH:8014D928                                                     ; 0x04 - word compared with word from Node struct
PFLASH:8014D92C 59 0F 34 3A                 st32.w          [a0](unk_D00048D4 - Base_a0_addr), d15 ; Store 0x8002CDB8 at 0x0xD00048D4
PFLASH:8014D930 7B 30 00 F8                 movh            d15, #0x8003
PFLASH:8014D934 1B 0F D9 FC                 addi            d15, d15, #(dword_8002CD90 - word_80030000) ; Struct size 0x08 bytes
PFLASH:8014D934                                                     ; 0x00 - word
PFLASH:8014D934                                                     ; 0x04 - half init value for NBTRx
PFLASH:8014D938 59 0F 08 4A                 st32.w          [a0](unk_D00048E8 - Base_a0_addr), d15 ; Store 0x8002CD90
PFLASH:8014D93C 6D FF 76 FF                 call32          Chk_msg_obj ; Check all message object data registers
PFLASH:8014D940 0C F0                         ld16.bu         d15, [a15]0
PFLASH:8014D942 6E 0A                         jz16            d15, loc_8014D956
PFLASH:8014D944 C2 FF                         add16           d15, #-1
PFLASH:8014D946 D9 0F 28 3C                 lea             a15, [a0](unk_D00068C8 - Base_a0_addr)
PFLASH:8014D94A 82 F0                         mov16           d0, #-1


And in main code references used variable Addr_CAN_Structure

PFLASH:80163C98 19 0F 30 3A                 ld32.w          d15, [a0](Addr_CAN_Structure - Base_a0_addr) ;
PFLASH:80163C98                                                     ; Load CAN_Structure 0x8002CDD0
Logged
MED17/EDC17 Reverse engineering
conversion sgo and frf to bin https://osotec.com/
Pages: [1]
  Print  
« previous next »
 
Jump to:  

Navigation
Personal Tools
  • April 27, 2024, 02:15:34 PM
  • Welcome, Guest. Please login or register.
    Did you miss your activation email?

    Login with username, password and session length
Search
 
Advanced Search
About Disclaimer
All Rights Reserved 2010 Nefarious Motosports
Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.026 seconds with 16 queries. (Pretty URLs adds 0s, 0q)