TunerPro User Forum

We have A/T car with manual gearbox. Works fine, all A/T stuff is removed, but wiring harness still has A/T controller connector. How did you actually re-scale your injectors? What values you are changed from ROM? All load dependent tables must be rescale. missing v-signal makes your engine run abou...

WOT tables, as also PT and idle tables, are not actual injection time. It's correction factor. 128 is "basic" value.

623 bin: There is throttle position tables for idle/pt/wot transition. I have no idea where is rpm axis data for those tables... But rpm's are about 1800, 2000, 2400, ???? for idle-pt and 2000, 2400, 3200, ???? for pt-wot. idle-pt 4x1 table, 0xD53C pt-wot 4x1 table, 0xD540 What MAF you are using? MA...

I believe this K value should be used as both a tuning factor for adjustment of injector size and engine size to attempt to maintain an ideal VE correction factor of 128 for the part throttle tables. I think such same way: D5 and D6 are 8bit load values, D5 filtered and D6 raw, but only 8bit. So, m...

D2 "descriptor" seems it's RPM negative delta. D2 value increases when engine speed is decreasing, and D2 is higher when speed decreasing rate is higher.

WOT acceleration problems :? M50B25TU, 240/240 cams, open loop, rest stock. Is there somewhere positive deltaRPM fuel correction factor? AFR is very good when engine is under max load and constant rpm, but rapid acceleration at high load goes very lean. Error is multiplied as higher is rate of accel...

WOT tables was blocked by some faults or some special conditions. I can't remember, but maybe vehicle speed sensor? cam sensor? I don't know why, but something discrepancy happened. WOT was recognized by TPS, but wot tables was not in use. Also, for a while from engine start, there is no any WOT tab...

I never found RPM axis data for idle/pt/wot tables, i think it is shared for multiple tables and it is somewhere close of those threshold tables. RPM's for those thresholds in my XDF was purely found by testing and tracing. They are not very accurate. I did take a break in playing with this device, ...

Direct copy from 80196 user's manual A/D section:

"11.0 A/D CONVERTER

Analog Inputs to the 80C196KB System are handled
by the A/D converter System. As shown in Figure
11-4, the converter system has an 8 channel multiplexer,
a sample-and-hold, and a 10 bit successive approximation
A/D converter. Conversions can be performed
on one of eight channels, the inputs of which share pins
with port 0. A conversion can be done in as little as 91
state times.

Conversions are started by loading the AD_COMMAND
register at location 02H with the channel number.
The conversion can be started immediately by setting
the GO bit to a one. If it is cleared the conversion
will start when the HSO unit triggers it. The A/D command
register must be written to for each conversion,
even if the HSO is used as the trigger. The result of
the conversion is read in the ADÃ￾RESULT(High)
and AD_RESULT(Low) registers. The AD_RESULT(
High) contains the most significant eight bits of
the conversion. The AD_RESULT(Low) register contains
the remaining two bits and the A/D channel number
and A/D status. The format for the AD_COMMAND
register is shown in Figure 11-1. In Window
15, reading the AD_COMMAND register will read
the last command written. Writing to the AD_RESULT
register will write a value into the result register."

02H:

BIT FUNCTION
0 Channel selection (+1)
1 Channel selection (+2)
2 Channel selection (+4)
3 GO-bit (when written to "1" conversion will start asap)
4 X
5 X
6 Least significant result bit
7 Second least significant result bit

By reading 02H is used to check ADC status and last used channel. Bit 3 will clear to "0" automatically, when conversion is finished, so, when reading 02H and bit 3 is "1" it means AD conversion is running, converter is busy.

I believe this is simply the raw 256 bit values from the A2D converter. I get that the A2D is 10bit and would then have to convert into 8bit somewhere in the code, that would simply be the 0-1023 converted to 0-255. The A2D works from 0-5v, with 255 values available that's 0.019531V/value. The sens...

They was missing, but reason can be only there is nothing action in that area in external ram chip. Those dumps was pulled out from real external ram chip, what is taken out from fully working system by suddenly disabling write ability. Nothing was changed, chip was freezed in it's state, moved to r...

If i was understood right that basic principle: ADC is multiplexed, only one channel can be in use at time. Control register (02H) is used to point one of those channels and transmit the command to start conversion, and some other information. Result is stored to 03H and partially also in 02H.

How do you mean "tracing dummy tables"? I am not sure I understand the method you suggest. I choose a some table, what is in use at all times, and doesn't do anything. Like 0xD7D4. It takes 57 bytes. So, i can put "dummy table" which is maximum 57 bytes long: XX 01 01 XX 1A 0A 0...

RAM dump from 0x1A to 0xFF matches, if i do "dummy table" and watch those values with tracing, or watch those values with INPA. So, "descriptors" are pointed directly from register file. If i take RAM dump from 0xD0, it is engine rpm and so on. That is nothing new, because i was ...

Full disassembly needs lots of work and effort, and those who have time to do it do not know how, and they who know, do not have a time Laughing Tell me about it. I'm hoping someone I work with now may be able to help on that side, at the moment putting together an arduino program to measure and ca...

I think that delta load attenuation is used for tune acceleration enrichment sensitivity and scaling load change rate (indirectly throttle opening rate) to enrichment. I can imagine that is comparable to acceleration pump pivot ratio in traditional carb system. Still i don't know what that other del...

You must split that byte to bits. As in emission stage 0xD00B BIT2. 0xD00C value is 08H, so it is 00001000 in binary. You count bits from right to left, and start from bit 0. When you turn BIT4 to "1", D00C value is 00011000 and it is 18H.

Seems to work, my frend's race car has that like modified bin and no vanos. But if it were official toggle for vanos code, it should switch whole vanos control off...

0xD00C- BIT4 is controlling VANOS output stage. It's "0" in stock bin, but if you put "1" the vanos output stage switches continuously "ON" and fault code from vanos will never stored, if solenoid plug is pulled off. Vanos control algorithm is still in use, but if it ne...

If i remember right, i measured it with scopemeter and it was x/100, 255 = 2.55ms :? And yes, it's raw addition. If 403 and 413 injector dead time tables looks such similar, i think it is x/100 in 403 too. ..On another subject: by looking at the four "lambda tables" used to disable closed ...

VIN code, date of manufacturing and some other information is located at 0xFEBE. INPA can show it clear, but it's not in ASCII format in BIN... And it's not directly written, it's splitted in "blocks" or something. Can somebody explain how that code can be translated to VIN? :D VIN's first...

I'm waiting for my ADS TINY adapter and planning to purchase complete engine simulator, like MST-9000. It can be used with other ecus too.

413/623 : 0xDC79 - 4x1 D7 - Some kind table for overrun fuel cut? Needs more clearing, but it seems like those values are RPM thresholds - Actual RPM below those values = fuel cut is disabled.? If this is fuel cut table, there can be similar function in 403 too. I wrote that in my notes at last summ...

Indeed. There is no reason for use compromissed ignition systems. Example with vw (tsi, fsi and others...) cop coils and some improvisation you get full features out of motronic.

You propably must put some "dummy load" for every coil output. I think ECU cuts fuel from the cylinder which it detects the ignition primary failure. About 1kohm resistor from "ign feed" to "coil output" is enough, so ecu detects there is 12 volts present between primar...

I think it is that knock prevent table combo. I will check. Also, i think, raise knock control load threshold to 254 and timing reduction is gone. I have intensively tried to find that correction what is changing "LOAD" by IAC-valve position in "Alpha-N" mode. But without success...

Yes, coils will fire "wasted spark" and also, knock sensing will switch off, and ignition timing reduced for safety. (M3.3.1)

Why not to get direct data from K-line to Tunerpro? Needs some work to log RS232 data and clear it, but then we know how scan tool "asks" data from ECU.

Needs something bus sniffer, and software for it. And a car. (or much better simulator) Then we can view datastream what ecu sends to EGS and what it sends back.

200 is 10ms in load. But 623 has "200" only at max. rpms. That 0xD768 "latency" or "damper" is one thing what i would try to adjust, if i had ITB setup, or throttle valve size is changed. There is practically no delay when ITB:s are pressed from closed to WOT, so there ...

D5 vs D6: Seems like: D6 is "raw" load signal, it can vary from 0 to 255H (0..12.75 ms) D5 is load signal, but it has RPM dependent "clamp" by 0xD752 4x1 table. If i put 255 to this table, D5 and D6 is exactly same. Stock 623BIN has D5 "LOAD" limited/cutted to 10.00ms. ...

D4F9 : Zero values = acceleration enrichment is very low. Filling this table to same value, seems like 100 there is no matter how fast load inreases, enrichment is always same. Zero values provides some minor enrichment, 255 in start of table = full enrichment immediatelly when adding load very slig...

I think D6 might be rate of TPS change... D6 follows LOAD. I think D6 and D5 are LOAD, but with and without some correction.. Must to do more tests... I did one "dummy" table and changed it's descriptor between D5 and D6. Seems like they are exactly same or very close, when i viewed they ...

Acceleration enrichment: Triggered from rapid or less rapid LOAD increase... 0xDC15 D0xD5 4x4: Acceleration enrichment quantity by RPM and LOAD 0xDC31 D7 4x1: Coolant temperature correction for quantity These are multiplied by each other and determines how much is maximum enrichment. 255*255 = about...

Evil wrote:There is one table in 16x1 just after these 2, could it be E050 for PT and E0A1 for WOT?

Yes, similar function like E050 and it's traced only in WOT. E050 isn't traced in WOT.

I have intensively tried to find that correction what is changing "LOAD" by IAC-valve position in "Alpha-N" mode. But without success. But i found something else: 413/623 BIN: 0xE039 and 0xE050. We know, this "E039" is some kind knock prevention table what it is control...

...Maybe the fact I run alpha/N (no MAF) has something to do with these results, changing idle valve position while she's not "functional" means I have to re-tune the VE table? (it could make sense at low throttle openings but not as much at high openings...) I will try with less extremes...

...Maybe the fact I run alpha/N (no MAF) has something to do with these results, changing idle valve position while she's not "functional" means I have to re-tune the VE table? (it could make sense at low throttle openings but not as much at high openings...) I will try with less extremes...

No, 0 = Closed, 255 = Open. But actual dutycycle doesn't go to 0 or full 100..

On my 403 this one is traced everytime EXCEPT on overrun fuel cut... Tested - again - and no tracing in overrun. IAC valve gets different duty cycle from somewhere else in overrun. :oops: EDIT:But this 4x6 (0xE3F0 - decel/overrun fuel) seems to be overrun idle valve position table. Its traced at ov...

Having 4 very big problems with the.. - "Acceleration enrichment table" feels to me it is not actually acceleration enrichment, but it affects to it. I did some tests at last summer, and IMO it's not for it or it is very tricky to use to adjust accleration enrichment. - There is one or fe...

That's some last information for 413/506: - Explanation for weird looking ignition dwell table - that's actually timing table for primary current switching on before desired ignition event, and same x*0.75 conversion works with it. So, simply, if you want to calculate new dwell table for different c...

0xE3BC 6x6 Rpm x ECT which is named "Idle Valve Airflow" in the Excel file ; I think that is only a some kind base position of idle valve at different engine speeds and temperatures. Ecu reads it always when engine is running. I was used that to correct idle problems (stalling, "pump...

Olafu - Do you have the ability to test the speed limiter (in a controlled way), the 0xC9 10 marked on the XDFs and 413 BIN is in the DTC section and I think its actually a lambda DTC. I have heard complaints before that the one on the XDF does not work. There is a 0xC9 (0xD0E7) just above in the c...

when i get inpa i will check those.

Next to faultcode itself comes flags what tells what is wrong with input/output: signal high/low, short to b+, short to ground, no signal and whatever, maybe flag, if fault is triggered by more than one times/limits? 01110010 signal low, 01110001 signal high, 01101000 no signal, tested: 11110010 sig...

Question - Are you sure the fault code ID needs to be converted to decimal? Fault code 69 does not seem to be present in the 413 data while 0x45 would indicate a knock sensor error (number 2 to be specific). I believe all the INPA/BMW codes are in pure hex. All fault codes for motronic inputs/outpu...

Very cool. Just read the .txt. Am I misunderstanding this or is the info you're reading off the external ram the same info that you would get from Rx & Tx serial communication used by CarSoft diag software? Diagnostic tool reads parts of this ram through K-line. But i don't know can it read who...

I did some tests and get few RAM dumps. https://www.dropbox.com/sh/n71udyq6nkl688u/AAAtF1eZJbGqYsOjy5WfBksla?dl=0 Those can be "noisy" because write enable is forced off by mechanical switch. But if i write bin which have DTC's, and fit it in the ECU, scanner shows all DTC's as original si...

RAM dump is coming for curious buddies... :) i will try to read out that SRAM chip which is underside of PCB. Don't ask how, but i have the plan. :twisted: ECU stores in that SRAM at least DTC:s with freeze frame, long term fuel trim tables and maybe knock adaptation tables. Maybe other adaptation v...