Pages: 1 [2] 3 4 ... 9
Author Topic: Maps study for Mini Cooper R50 and R53 Siemens EMS2000  (Read 80051 times)
adriancl
Jr. Member
**

Karma: +3/-4
Offline Offline

Posts: 30


« Reply #15 on: December 17, 2015, 04:20:23 AM »

just out of interest:
which cheap tools will read this ecu
MPPS, Galletto 1260,FGTech, the fastest is MPPS,read in 2 minutes, write in 75 sec.
Logged
adriancl
Jr. Member
**

Karma: +3/-4
Offline Offline

Posts: 30


« Reply #16 on: December 17, 2015, 04:27:34 AM »

just out of interest:
which cheap tools will read this ecu
MPPS, Galletto 1260,FGTech, the fastest is MPPS,read in 2 minutes, write in 75 sec.
Logged
adriancl
Jr. Member
**

Karma: +3/-4
Offline Offline

Posts: 30


« Reply #17 on: December 17, 2015, 04:44:02 AM »

512kb is full flash file Wink


This is full flash read , and look at address 4000 to 4800 on file posted by ddillinger and this file, of course are from diff.  cars, ddillinger file is from Cooper S,2004,manual gearbox, my file is from Cooper 2003, automatic gearbox.
Logged
Cloudforce
Full Member
***

Karma: +5/-13
Offline Offline

Posts: 106


« Reply #18 on: December 17, 2015, 07:46:42 AM »

This is full flash read , and look at address 4000 to 4800 on file posted by ddillinger and this file, of course are from diff.  cars, ddillinger file is from Cooper S,2004,manual gearbox, my file is from Cooper 2003, automatic gearbox.

4000-4800 is most probably measured values Wink So it depends on how one reads the flash, there will be entries or simply FF. Nothing to worry about.

AIF storage found, ISN found. AIF has some good amount of offset to MS43, but ISN is pretty similar.

Anti-bounce counter section found, axis description section found, too. I just have a hard time finding the linearization for main load measurement. Do these cars use a MAF sensor?
« Last Edit: December 17, 2015, 07:50:54 AM by Cloudforce » Logged
dream3R
Hero Member
*****

Karma: +18/-8
Offline Offline

Posts: 1194


« Reply #19 on: December 17, 2015, 08:22:40 AM »

Very interesting to me this, are you guys referring to an FR?

Logged



How to work out values from an A2L Smiley

http://nefariousmotorsports.com/forum/index.php?topic=5525.msg52371#msg52371


Starting Rev's http://nefariousmotorsports.com/forum/index.php?topic=5397.msg51169#msg51169

noobs read this before asking http://nefariousmotorsports.com/forum/index.php?topic=9014.0title=


ORGORIGINAL 05 5120 creator for Volvo
ORIGINAL Datalogger (Freeware) Author
ORGINAL finder of the 'extra' torque' limits
I don't have ME7.01 A2L I just use ID
Cloudforce
Full Member
***

Karma: +5/-13
Offline Offline

Posts: 106


« Reply #20 on: December 17, 2015, 08:27:47 AM »

Very interesting to me this, are you guys referring to an FR?

Me? No. I´m just referring to my MS42/43 disassembly and it look so much similar Smiley
Logged
dream3R
Hero Member
*****

Karma: +18/-8
Offline Offline

Posts: 1194


« Reply #21 on: December 17, 2015, 08:31:16 AM »

It disassembles so beautiful Smiley Let me take a look if i can deactivate EWS for you guys.

Disassembly is somewhat similar to MS43 Cheesy

Checksum handling found, we could turn off checksum for calibration.

Could you post your settings is it a C167?
Logged



How to work out values from an A2L Smiley

http://nefariousmotorsports.com/forum/index.php?topic=5525.msg52371#msg52371


Starting Rev's http://nefariousmotorsports.com/forum/index.php?topic=5397.msg51169#msg51169

noobs read this before asking http://nefariousmotorsports.com/forum/index.php?topic=9014.0title=


ORGORIGINAL 05 5120 creator for Volvo
ORIGINAL Datalogger (Freeware) Author
ORGINAL finder of the 'extra' torque' limits
I don't have ME7.01 A2L I just use ID
dream3R
Hero Member
*****

Karma: +18/-8
Offline Offline

Posts: 1194


« Reply #22 on: December 17, 2015, 08:50:17 AM »

DPP1 = 0x1C?
Logged



How to work out values from an A2L Smiley

http://nefariousmotorsports.com/forum/index.php?topic=5525.msg52371#msg52371


Starting Rev's http://nefariousmotorsports.com/forum/index.php?topic=5397.msg51169#msg51169

noobs read this before asking http://nefariousmotorsports.com/forum/index.php?topic=9014.0title=


ORGORIGINAL 05 5120 creator for Volvo
ORIGINAL Datalogger (Freeware) Author
ORGINAL finder of the 'extra' torque' limits
I don't have ME7.01 A2L I just use ID
dream3R
Hero Member
*****

Karma: +18/-8
Offline Offline

Posts: 1194


« Reply #23 on: December 17, 2015, 08:59:54 AM »

DPP2 =0x1D?
Logged



How to work out values from an A2L Smiley

http://nefariousmotorsports.com/forum/index.php?topic=5525.msg52371#msg52371


Starting Rev's http://nefariousmotorsports.com/forum/index.php?topic=5397.msg51169#msg51169

noobs read this before asking http://nefariousmotorsports.com/forum/index.php?topic=9014.0title=


ORGORIGINAL 05 5120 creator for Volvo
ORIGINAL Datalogger (Freeware) Author
ORGINAL finder of the 'extra' torque' limits
I don't have ME7.01 A2L I just use ID
dream3R
Hero Member
*****

Karma: +18/-8
Offline Offline

Posts: 1194


« Reply #24 on: December 17, 2015, 09:04:48 AM »

DPP3 = 3 RAM?
Logged



How to work out values from an A2L Smiley

http://nefariousmotorsports.com/forum/index.php?topic=5525.msg52371#msg52371


Starting Rev's http://nefariousmotorsports.com/forum/index.php?topic=5397.msg51169#msg51169

noobs read this before asking http://nefariousmotorsports.com/forum/index.php?topic=9014.0title=


ORGORIGINAL 05 5120 creator for Volvo
ORIGINAL Datalogger (Freeware) Author
ORGINAL finder of the 'extra' torque' limits
I don't have ME7.01 A2L I just use ID
Cloudforce
Full Member
***

Karma: +5/-13
Offline Offline

Posts: 106


« Reply #25 on: December 17, 2015, 09:05:28 AM »

Code:
0000:00000000             ; Format      : Binary file
0000:00000000             ; Base Address: 0000h Range: 0000h - 80000h Loaded length: 80000h
0000:00000000
0000:00000000             ; Processor       : c166 [C167CR-LM_MS43]
0000:00000000             ; Target assembler: Keil A166 Assembler
0000:00000000             ; Byte sex        : Little endian
0000:00000000             $MOD167
0000:00000000             $CASE
0000:00000000             $NOMACRO
0000:00000000
0000:00000000
0000:00000000             ; ===========================================================================
0000:00000000
0000:00000000             ; Segment type: Pure code
0000:00000000             MEM_EXT_0       section CODE word public
0000:00000000             procMEM_EXT_0 proc
0000:00000000                             ; assume dpp0: 1Ch (page 0x70000)
0000:00000000                             ; assume dpp1: 3Bh (page 0xEC000)
0000:00000000                             ; assume dpp2: 10h (page 0x40000)
0000:00000000                             ; assume dpp3: 3 (page 0xC000)

Logged
dream3R
Hero Member
*****

Karma: +18/-8
Offline Offline

Posts: 1194


« Reply #26 on: December 17, 2015, 09:32:39 AM »

I make it:

0 = 0x1c
1= 0x24
2 = 0x1D
3 = 3

 Huh Huh

Ext ram range? 0x300000?? or does it just use internal xram
Logged



How to work out values from an A2L Smiley

http://nefariousmotorsports.com/forum/index.php?topic=5525.msg52371#msg52371


Starting Rev's http://nefariousmotorsports.com/forum/index.php?topic=5397.msg51169#msg51169

noobs read this before asking http://nefariousmotorsports.com/forum/index.php?topic=9014.0title=


ORGORIGINAL 05 5120 creator for Volvo
ORIGINAL Datalogger (Freeware) Author
ORGINAL finder of the 'extra' torque' limits
I don't have ME7.01 A2L I just use ID
Cloudforce
Full Member
***

Karma: +5/-13
Offline Offline

Posts: 106


« Reply #27 on: December 17, 2015, 09:56:50 AM »

Anyone knows the position of partial checksum?

It should be located at 0x77FE0/1
« Last Edit: December 17, 2015, 02:28:52 PM by Cloudforce » Logged
Cloudforce
Full Member
***

Karma: +5/-13
Offline Offline

Posts: 106


« Reply #28 on: December 18, 2015, 12:32:18 AM »

I make it:

0 = 0x1c
1= 0x24
2 = 0x1D
3 = 3

 Huh Huh

Ext ram range? 0x300000?? or does it just use internal xram

Seems you´re right, even though i have no idea why Smiley
Logged
AG
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 8


« Reply #29 on: December 18, 2015, 12:47:05 AM »

Need full flash read 29F400 to deactivate EWS,OBD read is useless.

You don't need to read 29F400 or read C167 in BootMode to get fullflash.
But you have to upload your disabled-EWS-rom in BootMode because the record "EWS signal to start" is in write-protected area and it can't be changed online. (There is opportunity to do it online, but has not been studied yet)

Ext ram range? 0x300000?? or does it just use internal xram

As I can found there is no Ext RAM on the circuit board.
Logged
Pages: 1 [2] 3 4 ... 9
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.054 seconds with 17 queries. (Pretty URLs adds 0.001s, 0q)