avital

Privet Ja eto skazal na piervyj vzgliad glaza, teper budu vnimatelono smotriet etu transmisju (sobiraju poznakomit s niejo tak stoby emulator postroit), PWM eto po nasemu :) modulacja serokosti impulsa, spasiba za podskazku.

U nats2 i nats4 nakaчka poslie komandy iz ecu, format komandy manhester. patrol_nats4.bmp

kliucze eto nie problem, no nada rodnyj damp on synchronized z ECU.

Omega orange 1.25 - ST6245,ST6249

Tam stoit 93c86 i kliucze temic11 ? wylozyj damp piered i po korektirowce.

NO no !!! kak ty znaesz geografiu odkuda Ostrava w Polsze ? a?;) P.S. Mastery u was nieczem nie otliczaetsia ot naszych :). Marcin from Warszawa.

1- niet 2-lampocka code 3-+30 4-masa 5-linia K pin 8 obd 6- ECU 7- niet 8+15

a jest kod iz transpondera i z CPH kak ty ewo uze propisal ? w takom widzie 30 XX XX XX XX XX XX XX XX XX XX XX XX 00 70 1C u etich CPH kazdyj kliucz okonczetsja 00 70 1C

Jest wapros - kod transpondera naczinajetsia po adresam - 0x0BF ? i eto takaja konversja kak u sagem(cangoo),siemens(vw-opel), valeo (laguna 98-00) i insze staryje ?

Emulator w etom ECU goworit po 10400 Baud

immo stoit w body 93c56 transponder meg 13

nie prawilno wybral w ETL

immo stoit w TWICE modul

wylozyj etyje proshiby od ATEGO na 93c86&key dump (megamos) mozet on w takom widzie propisan kak twoj.

Avensis D4D g.2000

raboczyje dampy god 2003 CDI

Na kakoi nozke (motorola) nada podkluczit etyi prowod ? u Gomela ?

1- eto kusok dissasem... prosziby iz emuliatora katory walaetsa po internece(on raboczyj tolko po9600 baud), dumaju eti kusok otweczaet za charoszyj otwet emu to ECU? +000000BE: 91800063 LDS R24,0x0063 Load direct from data space +000000C0: 91900064 LDS R25,0x0064 Load direct from data space +000000C2: 91B00066 LDS R27,0x0066 Load direct from data space +000000C4: 9488 CLC Clear Carry +000000C5: FDB0 SBRC R27,0 Skip if bit in register cleared +000000C6: 9408 SEC Set Carry +000000C7: 9587 ROR R24 Rotate right through carry +000000C8: 9597 ROR R25 Rotate right through carry +000000C9: 6A85 ORI R24,0xA5 Logical OR with immediate +000000CA: E402 LDI R16,0x42 Load immediate +000000CB: 2B90 OR R25,R16 Logical OR +000000CC: 2780 EOR R24,R16 Exclusive OR +000000CD: E801 LDI R16,0x81 Load immediate +000000CE: 2790 EOR R25,R16 Exclusive OR +000000CF: 9580 COM R24 One's complement +000000D0: 9590 COM R25 One's complement +000000D1: B50C IN R16,0x2C In from I/O location +000000D2: 2FA0 MOV R26,R16 Copy register +000000D3: B50D IN R16,0x2D In from I/O location +000000D4: 2FB0 MOV R27,R16 Copy register +000000D5: 9408 SEC Set Carry +000000D6: 9587 ROR R24 Rotate right through carry +000000D7: 9597 ROR R25 Rotate right through carry +000000D8: 95A7 ROR R26 Rotate right through carry kusok odmeny - tablicy net! interesno czy eto wsio? 0x60 0x61 0x62 0x63 0x64 0x65 0x66 0x67 - data iz ECU (data space) 07 01 D7 F9 8F 7D 03 03 - ECU 07 02 3D A0 5C C2 62 03 - IMMO na primer - 0x0063 = F9, 0x0064 = 8F .... dla assebler R24,0x0063 Load direct from data space R25,0x0064 Load direct from data space etc... ALGO poutic iz etogo mozna? 2 - etyj kusok posylaet to ECU +000000D9: E007 LDI R16,0x07 Load immediate +000000DA: 93000060 STS 0x0060,R16 Store direct to data space +000000DC: 91000061 LDS R16,0x0061 Load direct from data space +000000DE: 9503 INC R16 Increment +000000DF: 93000061 STS 0x0061,R16 Store direct to data space +000000E1: E30D LDI R16,0x3D Load immediate +000000E2: 93000062 STS 0x0062,R16 Store direct to data space +000000E4: 93800063 STS 0x0063,R24 Store direct to data space ? +000000E6: 93900064 STS 0x0064,R25 Store direct to data space ? +000000E8: 93A00065 STS 0x0065,R26 Store direct to data space ? +000000EA: 93B00066 STS 0x0066,R27 Store direct to data space ? +000000EC: E003 LDI R16,0x03 Load immediate h03 +000000ED: 93000067 STS 0x0067,R16 Store direct to data space +000000EF: 9508 RET Subroutine return protokol VAG ja znam no mnie nada algo pouczyc

Synhro w etih dampach OK - 5C26 tam synchro pseudo rolling. tak kak nissan.

1349 Login to Ecu <> login to immo:)