Siemens Simtec help greatly appreciated

European GM ECUs and PCMs
eurotech
Posts: 19
Joined: Wed Aug 22, 2012 9:59 pm
cars: holden commodore 3.8

Re: Siemens Simtec help greatly appreciated

Post by eurotech »

Hi.

I've been searching in my database, this memory is similar to the Opel Corsa in 1800 with 125cv.

The follow is a memory with change in rpm limiter.

you can make the following changes:

partial point 1/2
address: 003b93 - 003c52
partial point 2/2
eddress: 003cb7 - 003d76
partial injection 1/1
eddress: 0044bb - 004 573

rpm limiter
eddress: 0001cd, 001d1.
Attachments
BASE READ MOD rpm.bin
(23.75 KiB) Downloaded 483 times
silentshout
Posts: 25
Joined: Sat May 17, 2014 5:49 am
cars: Holden Barina XC SRI 1.8L

Re: Siemens Simtec help greatly appreciated

Post by silentshout »

That looks very similar to data i found on another forum however the info i found was from the Simtec 70 ecu and my car uses the simtec 71

This is what i found:

RPM Limiter - C0E5 & C20C
MAF Linearisation in kg/h - CBBA
Spark 1 - D7F8
Spark 2 - E3FC
Spark 3 - E4BC

RPM Scale - C41A
Airflow Scale in kg/h - C43C

C0E5 & C20C are RPM Limiters in 16 bit LoHi with correct factor.

C0E6 & C20D - RPM Limiters in 8 bit. Single value - factor 32; offset 0

You must change both limiters. If not the car will still limit the RPM at 6500.

C0E5 - RPM Red line start
C20C - RPM Limiter

RPM is here 00C20D , 00C214 , 00C0E6 ( 8 bit ) faktor 32


I have yet to check if theres anything in my file at those addresses as im at work at the moment.

There are a few differences between the engines that the 70 and the 71 operate such as fly by wire throttle etc.
User avatar
antus
Site Admin
Posts: 8237
Joined: Sat Feb 28, 2009 8:34 pm
cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Contact:

Re: Siemens Simtec help greatly appreciated

Post by antus »

Thanks for the posts. Ive not seen that winols hex editor view with the bar graphs showing the values on the right before. Thats pretty cool, and makes more sense than ascii for this type of work.
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Leinad78
Posts: 10
Joined: Tue Jan 13, 2015 4:26 pm

Re: Siemens Simtec help greatly appreciated

Post by Leinad78 »

I´ve made some good progress and would like to contribute what i found so far ;)

I think i found the MAF table Its located at 0x15A8 and its 16x16 (16bit). The x axis has no description and the y-axis has 4 possible descriptions which are hard to decide. Option 1 starts at 0x1071 1x16 (8bit), Option 2 is located at 0x126B 1x16 (8bit), Option 3 starts at 0x128B 1x16 (8bit) and the last one is at 0x136F 1x16 (8bit).


Just by the looks the aera around 0x3120-3280 should deal with knock.

There are some nice rpm scalars in 16bit starting at 0xC3C

Heres an ols file and the mappack with all the axis descriptors

http://www59.zippyshare.com/v/O0jNyGR1/file.html
http://www59.zippyshare.com/v/TfcJGPmq/file.html
Leinad78
Posts: 10
Joined: Tue Jan 13, 2015 4:26 pm

Re: Siemens Simtec help greatly appreciated

Post by Leinad78 »

I´ve made a bloody mistake, i opened the ols file in a demo version of winols and all changes i made the last 2 hours are gone, because i can´t export the file...

Here´s the maplist from the file in case i really can´t force winols to save it. :thumbdown:
Kennfeldliste_16-01-2015.jpg
Kennfeldliste_16-01-2015.jpg (1.1 MiB) Viewed 7630 times
VX L67 Getrag
Posts: 2877
Joined: Sun Aug 02, 2009 9:16 pm
Location: Bayside, Melbourne, Victoria
Contact:

Re: Siemens Simtec help greatly appreciated

Post by VX L67 Getrag »

Leinad78 wrote:Having a short look at your file, it turns out its pretty much the same structure as Siemens MS43 and MS42 :mrgreen:

This is what the guys at Siemens MS41 are using to find the correlation, but either i´m not clever enough to work it out at MS43 or its just not working at newer ecus. Maybe you guys have more luck.
map locations array pointers.jpg
I'm not sure what the 2CDA is referring to here in this highlighted section at 5E1E location?
Leinad78
Posts: 10
Joined: Tue Jan 13, 2015 4:26 pm

Re: Siemens Simtec help greatly appreciated

Post by Leinad78 »

VX L67 Getrag wrote:
Leinad78 wrote:Having a short look at your file, it turns out its pretty much the same structure as Siemens MS43 and MS42 :mrgreen:

This is what the guys at Siemens MS41 are using to find the correlation, but either i´m not clever enough to work it out at MS43 or its just not working at newer ecus. Maybe you guys have more luck.
map locations array pointers.jpg
I'm not sure what the 2CDA is referring to here in this highlighted section at 5E1E location?
Its quite difficult to to read and understand, at least to me. There seems to be 6 or 8 different referencies in the disassembled code and one is 2CDA. At 0x5E1E/F theres the reference for the ecu to look at 0x2CDA and finally at 0x2CDA the ecu will find the listing of 47 maps, where the position of each map is given whitin the next 47*2 bytes. (edit) Frankly its just the position of the map and not the actual axis description if thats what you mean?! (/edit)

I´m sorry if that doesn´t make to much sense or is some typo in it ;) english is just my second language
VX L67 Getrag
Posts: 2877
Joined: Sun Aug 02, 2009 9:16 pm
Location: Bayside, Melbourne, Victoria
Contact:

Re: Siemens Simtec help greatly appreciated

Post by VX L67 Getrag »

Oh cool yeah it sort of makes sense... I could see the other marked references but just was sure about that reference!

I really wish it was any sort of language to me, but hoping to get there 1 day!
Leinad78
Posts: 10
Joined: Tue Jan 13, 2015 4:26 pm

Re: Siemens Simtec help greatly appreciated

Post by Leinad78 »

Do we know what exact processor is used in that ecu and what exact flash?
eurotech
Posts: 19
Joined: Wed Aug 22, 2012 9:59 pm
cars: holden commodore 3.8

Re: Siemens Simtec help greatly appreciated

Post by eurotech »

Hi.

The memory of the first post base.bin, is equal to the corsa 1.8 16v Simtec 71 or 90 with checksun 857F , in some countries can use the same memory with ECU call Simtec 90, is the same memory of vectra 1.8 16v, but in vectra has changes that you guys can compare with the memories attached.
I believe that my notes in the previous post with change rpm is right, it is interesting to experiment with memory changes with rpm and the vectra memory.
Attachments
ecu vectra 18 b simtec 71.bin
(23.75 KiB) Downloaded 492 times
CORSA 18 SIMTEC 90.BIN
(23.75 KiB) Downloaded 453 times
Post Reply