DIY ECU Flash

Yeti · **Posted:** Fri May 01, 2015 3:22 pm

sorry , but I must watch the map in 8 bit ?

Yeti · **Posted:** Fri May 01, 2015 3:31 pm

got it , I must watch the map in 8bit for find the right address , my compliment for these study , great job ...........really

HrastProgrammer · **Joined:** Fri Jan 16, 2015 5:32 am **Posts:** 11

Yes, error classes are 8-bit values. Enjoy

Yeti · **Posted:** Sun May 03, 2015 6:41 am

can you explain me how you can find the address of the dtc ? example P0102 on the map ? I know there is a formula , but I can't find it

HrastProgrammer · **Joined:** Fri Jan 16, 2015 5:32 am **Posts:** 11

You don't need a formula for this. Just open the appropriate DTC file from my list (for example, 808_DTC.txt) with a text editor (or in a browser, for that matter). Then search for the code you need:

Code:

[001] P0630 P0630 U0168 P0513: E4872=02
[002] P0647 P0646 P0645 P0647: E4873=00
[003] P0533 P0532 U1113 -----: E4874=02
[004] P0606 P0606 P0606 P0606: E4875=00
[005] ----- ----- ----- -----: E4876=02
[006] ----- ----- ----- -----: E4877=00
[007] P0101 P0101 ----- -----: E4878=25
[008] P0103 P0102 ----- -----: E4879=16 => This is the location you searched for!
[009] B10B5 B10B4 B10B6 B10B5: E487A=02
[010] ----- ----- ----- -----: E487B=00
[011] P2123 P2122 ----- P2138: E487C=02
[012] P2128 P2127 ----- P2138: E487D=02
[013] ----- ----- ----- -----: E487E=00
...

So, all you need to do is to change (using WinOLS) the value at the address E4879 from 16 to zero ...

Yeti · **Posted:** Sun May 03, 2015 10:51 am

I understand it , but I'd like to know how you did find them

HrastProgrammer · **Joined:** Fri Jan 16, 2015 5:32 am **Posts:** 11

I bought some info from:

https://sites.google.com/site/vagecumapmirror/edc16-error-dtc-removal

... and used it as a kick start while exploring CRD map file (the info is for Seat Leon).

Yeti · **Posted:** Sun May 03, 2015 12:31 pm

Yeti · **Posted:** Mon May 04, 2015 4:57 am

now I can do by hand :-)r

thanks again , I have another question , how you have find the start of Error code block and error path block

Squeeto · **Posted:** Mon May 04, 2015 12:13 pm

Yeti wrote:

now I can do by hand :-)r

thanks again , I have another question , how you have find the start of Error code block and error path block

Is this what you want?:

HrastProgrammer wrote:

For versions 513, 516, 526, 808 and 812 Error Code Block starts at $E3FDA and Error Path Block starts at $E4872.

For versions 809 and 811 Error Code Block starts at $E39F2 and Error Path Block starts at $E426C.

Yeti · **Posted:** Mon May 04, 2015 5:09 pm

thanks Squeeto , but no , I would want to know how to find this address .....example in other map of other car , I know is a very difficult job and HrastProgrammer have impressed me doing this , and I would be honored if he could explain to me how did this

Squeeto · **Posted:** Mon May 04, 2015 5:19 pm

HrastProgrammer wrote:

I bought some info from:

https://sites.google.com/site/vagecumapmirror/edc16-error-dtc-removal

... and used it as a kick start while exploring CRD map file (the info is for Seat Leon).

BTW, if anyone is interested and this link doesn't work for them (it didn't for me), try the non-mirror:
https://sites.google.com/site/vagecumap ... tc-removal

HrastProgrammer · **Joined:** Fri Jan 16, 2015 5:32 am **Posts:** 11

Yeti wrote:

thanks Squeeto , but no , I would want to know how to find this address .....example in other map of other car , I know is a very difficult job and HrastProgrammer have impressed me doing this , and I would be honored if he could explain to me how did this

Well, there is no universal recipe for this. And various greedy dealers and tuners are charging hundreds/thousands of dollars/euros/whatever to remove DTCs but don't disclose any info about how they did it :wink:

Based on this EDC16 info for Seat Leon I searched for a few codes in the map file trying to figure out the beginning of the table. Basically, search for the four consecutive 0606 codes (0606 0606 0606 0606) and you will be very close to the start of Error Code Block table. Then go upwards until the values don't show a meaningful DTCs anymore. I don't have WinOLS here so I cannot give you the exact example but there is a byte like DE hexadecimal immediately before the table.

To find the start of Error Path Block search for a 200+ consecutive bytes of 0 to 31 (hex. 00 to 1F) values and there is a pretty good chance this will be an Error Path Block (I wrote a simple program for this). Then I used those TCM P0700 codes as a reference (15 consecutive bytes with a value of 22) and counted upwards to find the start of the table. Or something like that, I don't remember the exact details anymore.

I am a computer programmer so I am used to try to figure out "what the writer had in mind" ...

Yeti · **Posted:** Tue May 05, 2015 6:09 am

thanks again , I have understand it and find the 1st start block , but the second is much more difficult , I'll try to study more

Yeti · **Posted:** Tue May 05, 2015 6:43 am

BTW I can't understand were.....or why........ you use to count 200+ bite , where this number come from ? thanks again for your patience

HrastProgrammer · **Joined:** Fri Jan 16, 2015 5:32 am **Posts:** 11

Well, if you have more than 200 error paths (222 in this case) then you should have more than 200 memory locations where class IDs for those paths are stored, don't you?

I really cannot give you more info (because I don't have any) about all this beside what I already wrote and beside what you can find in this EDC16 document. And that's why too much for a public forum because various scavengers can use this to make money. Buy I just wanted to return a favor to a few valuable members of this forum (like you, Squeeto, etc.) without whom I probably wouldn't get into all this.

You should experiment a lot until you find what you are looking for, there is no other way ...

Yeti · **Posted:** Wed May 06, 2015 3:52 am

thank you very much :wink:

Rotor · **Posted:** Wed May 06, 2015 2:13 pm

I just wanted to say this has been an awesome resource! I modified the stock 516 tune and added the FCV delete, and that ran great. I recently modified the stock 516 to add the FCV delete and Yeti's Mild tune (vers 1.02). It has also been running great. I would be happy to post them up for review. I will be adding the stage 2 Hot tune next, since I have a suncoast torque converter.

I don't trust myself yet to change the DTC stuff (to get rid of CEL for FCV removal) for the 516. But If someone does, Ill be happy to make the rest of the changes to the tune.

Thank you again guys.

AndrewCRD · **Joined:** Mon Dec 22, 2014 12:45 pm **Posts:** 50

OOOOOkk ... so i undertook this task and its starting to get annoying. All worked well until i got to the ECM titanium bit ... that is absolutely inexistent.

Any ideas if there is another program that is available somewhere ... also sorry i tried searching this thread but search didnt come up very good.

Rotor · **Posted:** Thu May 07, 2015 3:37 pm

Did you read the whole thread? page 21

clehmann wrote:

Here's a link to a Dropbox with the 2 installers I used:

https://www.dropbox.com/sh/08l7doemzbqp ... 7zCla?dl=0

MPPS 13.02
ECM4Free

It's been a few months since I installed them, but I'm pretty sure they were clean.

DIY ECU Flash

Who is online