Alfa bin files
Re: Alfa bin files
Not sure I'll ask.... I'll try the calc tonight and see what it throws out
Re: Alfa bin files
Not sure how far along you are with this, but here's a very basic xdf for all the tables I could find if you haven't already made one.
- Attachments
-
- Alfa164_24v.xdf
- (142.41 KiB) Downloaded 353 times
Re: Alfa bin files
I'll look tonight tomorrow..
Got most of the tables looking for the constants and op codes.
The chipset is a siemens copy of an intel based 80c515
variant 80535
found the userguide for the chipset and a pocket guide in english for the opcodes..
tried a couple of dissassemblers but i'm having a checksum invalid problem... must be a bosch specific thing...
when i get it running properly i'll let you know trying to automate the spreadsheet to find and build the tables and show the table lookup address calls..
opcode stuff will take longer but reasonble progress so far
Got most of the tables looking for the constants and op codes.
The chipset is a siemens copy of an intel based 80c515
variant 80535
found the userguide for the chipset and a pocket guide in english for the opcodes..
tried a couple of dissassemblers but i'm having a checksum invalid problem... must be a bosch specific thing...
when i get it running properly i'll let you know trying to automate the spreadsheet to find and build the tables and show the table lookup address calls..
opcode stuff will take longer but reasonble progress so far
Re: Alfa bin files
Ok dissassembly done
Tables found.
Now to work out the addresssing and find the constants..
Like norm found loads of good info scattered all over
Kinda wondering if anyone had ideas on where to post it
here or another forum?
Let me know
Tables found.
Now to work out the addresssing and find the constants..
Like norm found loads of good info scattered all over
Kinda wondering if anyone had ideas on where to post it
here or another forum?
Let me know
Re: Alfa bin files
If not here, BoschDME yahoo group maybe?
- antus
- Site Admin
- Posts: 8250
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: Alfa bin files
I think you should post it here. We love pulling ecus apart and seeing what we can figure out. Its good fun stuff
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Re: Alfa bin files
Here it is then
Re: Alfa bin files
MOTRONIC M7.1
This is for a Motronic M1.7.
From what I can find out it applies to most early motronic ECM’s.
M1.x Probably M1.3 to M1.7 the M1.7.x variations are different and I don’t know how much is relevant.
First I tried brute force with a Excel sheet and found most of the tables then with some help from Festy got the start of a .xdf..
Then I started finding the gems.
Some extracts…
0x0000 - 0x1fff (Main internal code ... I need a friend at BOSCH!)
0x2000 - 0x3fff (Engine specific subroutines / interrupt service code)
0x4000 - 0x4fff (Data MAPs used by the EPROM subroutines)
0x5000 - 0x65ff (THIS IS THE GOOD STUFF!!!)
0x6600 - 0x7fff (More Engine specific subroutines working with 0x2000-3fff)
"The upper 4kB of ROM contains the constants and maps along with a jump table
that allows manufacturers to change certain operations in the 24-pin DMEs even
though the internal 4kB ROM in the micro is untouchable"
The chipset user manual Siemens SAB80535 is a copy of the Intel 80C515 - 535 variant using the same instruction set.
Which are covered in the Siemens 80C5xx Pocket Guide.
Then I found DIS8051 which is a free disassembler.
Then I got onto the ECUConnections website.. The mother lode how-to guides and all sorts of goodies mostly thanks to Midas, the .xdf generator is his.
The RAM load from 0000 to 1FFF is loaded from a separate chip on the main board (don’t know haven’t gone there yet..).
So with an offset of 2000 in a disassemble you should be able to make sense of most of the code..
At this stage still working on the code trying to isolate Rev limit and AFM constants.
This is for a Motronic M1.7.
From what I can find out it applies to most early motronic ECM’s.
M1.x Probably M1.3 to M1.7 the M1.7.x variations are different and I don’t know how much is relevant.
First I tried brute force with a Excel sheet and found most of the tables then with some help from Festy got the start of a .xdf..
Then I started finding the gems.
Some extracts…
0x0000 - 0x1fff (Main internal code ... I need a friend at BOSCH!)
0x2000 - 0x3fff (Engine specific subroutines / interrupt service code)
0x4000 - 0x4fff (Data MAPs used by the EPROM subroutines)
0x5000 - 0x65ff (THIS IS THE GOOD STUFF!!!)
0x6600 - 0x7fff (More Engine specific subroutines working with 0x2000-3fff)
"The upper 4kB of ROM contains the constants and maps along with a jump table
that allows manufacturers to change certain operations in the 24-pin DMEs even
though the internal 4kB ROM in the micro is untouchable"
The chipset user manual Siemens SAB80535 is a copy of the Intel 80C515 - 535 variant using the same instruction set.
Which are covered in the Siemens 80C5xx Pocket Guide.
Then I found DIS8051 which is a free disassembler.
Then I got onto the ECUConnections website.. The mother lode how-to guides and all sorts of goodies mostly thanks to Midas, the .xdf generator is his.
The RAM load from 0000 to 1FFF is loaded from a separate chip on the main board (don’t know haven’t gone there yet..).
So with an offset of 2000 in a disassemble you should be able to make sense of most of the code..
At this stage still working on the code trying to isolate Rev limit and AFM constants.
Last edited by DieselBob on Sat Aug 10, 2013 9:16 pm, edited 1 time in total.
Re: Alfa bin files
I found the bosch realtime write routine today for the ml4.1 - first tests look good with nvram board
- antus
- Site Admin
- Posts: 8250
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: Alfa bin files
Good progress there
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396