dream3R
|
|
« Reply #45 on: December 19, 2015, 04:40:31 PM »
|
|
|
0000:00000000 ; Format : Binary file 0000:00000000 ; Base Address: 0000h Range: 0000h - 80000h Loaded length: 80000h 0000:00000000 0000:00000000 ; Processor : c166 [C167CR-LM_MS43] 0000:00000000 ; Target assembler: Keil A166 Assembler 0000:00000000 ; Byte sex : Little endian 0000:00000000 $MOD167 0000:00000000 $CASE 0000:00000000 $NOMACRO 0000:00000000 0000:00000000 0000:00000000 ; =========================================================================== 0000:00000000 0000:00000000 ; Segment type: Pure code 0000:00000000 MEM_EXT_0 section CODE word public 0000:00000000 procMEM_EXT_0 proc 0000:00000000 ; assume dpp0: 1Ch (page 0x70000) 0000:00000000 ; assume dpp1: 3Bh (page 0xEC000) 0000:00000000 ; assume dpp2: 10h (page 0x40000) 0000:00000000 ; assume dpp3: 3 (page 0xC000) I just looked at your drive files and those are correct DPP's for the MS43's files. That's where the confusions came from assumption! Nice logger BTW
|
|
|
Logged
|
|
|
|
AG
Newbie
Karma: +0/-0
Offline
Posts: 8
|
|
« Reply #46 on: December 20, 2015, 12:24:53 AM »
|
|
|
AIF storage found, ISN found. AIF has some good amount of offset to MS43, but ISN is pretty similar.
Anti-bounce counter section found, axis description section found, too. I just have a hard time finding the linearization for main load measurement. Do these cars use a MAF sensor?
Very interresting could you find more details? R50-R53 use MAP sensor
|
|
« Last Edit: December 21, 2015, 05:04:51 AM by AG »
|
Logged
|
|
|
|
Cloudforce
Full Member
Karma: +5/-13
Offline
Posts: 106
|
|
« Reply #47 on: December 20, 2015, 12:51:37 PM »
|
|
|
Very interresting could you find more detaiis. R50-R53 use MAP sensor
Haven´t looked tooooo deep into code, but i tend to think MAP sensor linearization is done at 0x7BF18 in the file from ddillenger. I need to take a look where its located in the code. Crosscomparing to other siemens ecus like MS43 and MS42 should give a good hint whats going on and what map does what.
|
|
|
Logged
|
|
|
|
dream3R
|
|
« Reply #48 on: December 20, 2015, 01:25:46 PM »
|
|
|
Happy to chip in just lmk
|
|
|
Logged
|
|
|
|
adriancl
Jr. Member
Karma: +3/-4
Offline
Posts: 30
|
|
« Reply #49 on: December 20, 2015, 01:28:04 PM »
|
|
|
x
|
|
« Last Edit: December 21, 2015, 05:45:01 AM by adriancl »
|
Logged
|
|
|
|
adriancl
Jr. Member
Karma: +3/-4
Offline
Posts: 30
|
|
« Reply #50 on: December 20, 2015, 02:13:30 PM »
|
|
|
winols map for Intake manifold MAP sensor.
|
|
|
Logged
|
|
|
|
ddillenger
|
|
« Reply #51 on: December 20, 2015, 02:30:58 PM »
|
|
|
Any chance you can post a JCW R53 file? I'd love to compare it to the non JCW...
|
|
|
Logged
|
Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your experience!
Email/Google chat: DDillenger84(at)gmail(dot)com
Email>PM
|
|
|
adriancl
Jr. Member
Karma: +3/-4
Offline
Posts: 30
|
|
« Reply #52 on: December 20, 2015, 02:57:18 PM »
|
|
|
yes of course,
|
|
|
Logged
|
|
|
|
Cloudforce
Full Member
Karma: +5/-13
Offline
Posts: 106
|
|
« Reply #53 on: December 21, 2015, 04:50:10 AM »
|
|
|
Do we have a specific softwareversion we should be working on? In my experience its much easier if all work on the same version as in every iteration there´s offset and new maps/constants.
|
|
|
Logged
|
|
|
|
dream3R
|
|
« Reply #54 on: December 21, 2015, 04:59:23 AM »
|
|
|
Do we have a specific softwareversion we should be working on? In my experience its much easier if all work on the same version as in every iteration there´s offset and new maps/constants.
I think this is how I got confused, and also the calibration section layout.
|
|
|
Logged
|
|
|
|
OKCZ
Newbie
Karma: +0/-0
Offline
Posts: 5
|
|
« Reply #55 on: December 21, 2015, 05:01:40 AM »
|
|
|
I think the best is to use latest software versions. Select one for EMS2K (pre-facelift models) and one for MS5150 (facelift models).
|
|
|
Logged
|
|
|
|
dream3R
|
|
« Reply #56 on: December 21, 2015, 05:04:37 AM »
|
|
|
I think the best is to use latest software versions. Select one for EMS2K (pre-facelift models) and one for MS5150 (facelift models).
Agreed, which EMS2000 file then and I'll crank IDA, a OLS would be helpful in defining a few functions, I'm assuming an A2L doesn't exist lol. Didn't stop me on Volvo but I had something to go with, I figured out he diag routine with rkams help, then I blagged info from Volvo, that was a major breakthrough. Fairly easy to find the map function if you identify the VAR lol.
|
|
« Last Edit: December 21, 2015, 05:07:24 AM by dream3R »
|
Logged
|
|
|
|
OKCZ
Newbie
Karma: +0/-0
Offline
Posts: 5
|
|
« Reply #57 on: December 21, 2015, 05:07:40 AM »
|
|
|
Here, both latest sw versions from facelift and pre-facelift models.
EMS2K and MS5150 are in practical same units.
|
|
« Last Edit: December 21, 2015, 05:10:26 AM by OKCZ »
|
Logged
|
|
|
|
dream3R
|
|
« Reply #58 on: December 21, 2015, 05:19:44 AM »
|
|
|
Here, both latest sw versions from facelift and pre-facelift models.
EMS2K and MS5150 are in practical same units.
EMS2000: dpp0: 0x1Ch (page 0x70000) dpp1: 0x24h (page 0x90000) dpp2: 0x1D (page 0x74000) dpp3: 0x3 (assumed as it points to 0xc000 in the older file, haven't seen the instruction yet, this is RAM inside the PROC)
|
|
|
Logged
|
|
|
|
Cloudforce
Full Member
Karma: +5/-13
Offline
Posts: 106
|
|
« Reply #59 on: December 21, 2015, 05:32:59 AM »
|
|
|
Here, both latest sw versions from facelift and pre-facelift models.
EMS2K and MS5150 are in practical same units.
Do you have different stock tunes with that softwareversion to compare for config switches and antibounce counter? Mainly EMS2k interested
|
|
|
Logged
|
|
|
|
|