Memory dump of ECU - Page 57

TomsSVX · #**841** 09-23-2008, 03:17 PM

Ok got all the addresses off the 92-96 SVX SSMI

in order of functions on the SSM

F00- 0C3D ( ROM ID NUMBER "YEAR")
F01- 102F ( BATTERY VOLTAGE)
F02- 1071 ( VEHICLE SPEED)
F03- "" ( VEHICLE SPEED)
F04- 106F ( ENGINE SPEED)
F05- 1185 ( WATER TEMP)
F06- "" ( WATER TEMP)
F07- 10A2 (IGNITION TIMING)
F08- 1283 (AIRFLOW SENSOR)
F09- 1282 (LOAD DATA)
F10- 128C (THROTTLE POSITION SENSOR)
F11- 1280 (INJECTOR PULSE WIDTH)
F12- 129D (BY-PASS AIR CONTROL)
F13- 1291 (02 RIGHT HAND)
F14- 1292 (02 LEFT HAND)
F15- 12B0 (02 R MAX)
F16- 12B1 (02 R MIN)
F17- 12B2 (02 L MAX)
F18- 12B3 (02 L MIN)
F19- 1097 (AFR CORRECTION 1)
F20- 109F (AFR CORRECTION 2)
F21- 12A7 (KNOCK CORRECTION)
F22- 12A5 (CANISTER PURGE CONTROL)
F23- 125F (ATMOSPHERIC PRESSURE)
FB0- 1029 (DIAG. READ)
FB1- 12BC (DIAG. MEMORY)

I still need to get the formulas but most are pretty close as is.

Tom

genzzel · #**842** 09-23-2008, 05:28 PM

WOW--Great job!!!!!!! Thank you for doing that!!!

b3lha · #**843** 09-24-2008, 03:44 AM

Fantasic Tom!!! Good Work.

Thanks for doing that. How long did it take to get them all?

b3lha · #**844** 09-24-2008, 07:15 AM

I've just started marking these in the ECU program to see if it makes any more sense now. It will take a while.

Quote:

Originally Posted by TomsSVX

F00- 0C3D ( ROM ID NUMBER "YEAR")

I'm pretty sure this one should be 8C3D. Not that it's particularly important.

TomsSVX · #**845** 09-24-2008, 08:23 AM

Phil, it really only took about 10 minutes mostly because my trial of the hex-com tool will only run for 5 mins at a time

. That and I hand wrote all of the addresses.

I have double checked all but the ID and the diag. addresses in Evoscan and they all work. I will try and do it to Eric's 96 next chance I get to get those ID's as well since they do not carry over.

Thanks again for all of your help.

Tom

TomsSVX · #**846** 10-15-2008, 10:52 AM

OK, got the TCU commands up... I may try to run them in Evoscan today if I can get it.

F01 VB- 45104400
F02 VSP1- 45001900
F03 VSP1- 45001900
F04 VSP2- 45001A00
F05 VSP2- 45001A00
F06 EREV- 4500B600
F07 ATFT- 45001700
F08 ATFT- 45001700
F09 THV- 45104000
F10 GEAR- 45004E00
F11 PLDTY- 4500B300
F12 LUDTY- 4500B400
F13 4WDTY- 4500B500
F14 BAROP.- 45104600

Its a short list of commands but this is what I got from a totally stock 1992 LS-L

Tom

genzzel · #**847** 10-15-2008, 03:28 PM

Again Great Job!! I have to ask--how will these run in EvoScan?? I am not sure how to do that.

TomsSVX · #**848** 10-15-2008, 04:39 PM

Not sure, didn't touch on them today.. maybe sometime soon though

Tom

b3lha · #**849** 10-16-2008, 03:51 AM

Quote:

Originally Posted by TomsSVX

OK, got the TCU commands up... I may try to run them in Evoscan today if I can get it.

F01 VB- 45104400
F02 VSP1- 45001900
F03 VSP1- 45001900
F04 VSP2- 45001A00
F05 VSP2- 45001A00
F06 EREV- 4500B600
F07 ATFT- 45001700
F08 ATFT- 45001700
F09 THV- 45104000
F10 GEAR- 45004E00
F11 PLDTY- 4500B300
F12 LUDTY- 4500B400
F13 4WDTY- 4500B500
F14 BAROP.- 45104600

Its a short list of commands but this is what I got from a totally stock 1992 LS-L

Tom

Battery Voltage 1044
Vehicle Speed Sensor 1 0019
Vehicle Speed Sensor 2 001A
Engine RPM 00B6
ATF Temperature 0017
TPS Signal 1040
Gear Position 004E
Line Pressure SolA Duty 00B3
Lockup SolB Duty 00B4
4WD SolC Duty 00B5
Atmospheric Pressure 1046

Fantastic Tom! Thanks. That helps a lot.

I can't see a way in Evoscan to change the 78(ecu) command to 45(tcu). I'm going to email Hamish and see if he is willing to include this in the next version of Evoscan. Being able to look at ATF temperature would be particularly useful.

TomsSVX · #**850** 10-16-2008, 07:29 AM

sounds good... The reason I included the 4500 is the fact that a couple were 4510 while most were 4500, i wanted to be sure that this was noticed.

Tom

genzzel · #**851** 10-19-2008, 10:48 AM

I have written Hamish couple of times and no answer??? If you guys come up with anything or if he puts out version that works with TCU please let me know.

b3lha · #**852** 10-19-2008, 05:50 PM

Quote:

Originally Posted by b3lha

Dear Hamish,

Thanks for all the work you have done to support older Subarus. We in the SVX community are very happy to finally have some good datalogging software for our cars.

Would it be possible for you to support the OBD1 Subaru TCU (transmission control unit) in your next version?

It shouldn't be too hard to implement. The query is exactly the same as for the ECU but you send 0x45 instead of 0x78.
ie. The "read" command is "45aaaa00" instead of "78aaaa00" where aaaa is the address. The "stop" command remains "12000000" just like on the ECU.

The parameter addresses are:
Battery Voltage 1044
Vehicle Speed Sensor #1 0019
Vehicle Speed Sensor #2 001A
Engine RPM 00B6
ATF Temperature 0017
TPS Signal 1040
Gear Position 004E
Line Pressure Solenoid Duty Cycle 00B3
Lockup Solenoid Duty Cycle 00B4
4WD Solenoid Duty Cycle 00B5
Atmospheric Pressure 1046

Thanks.
Phil Skuse.

Quote:

Originally Posted by evoscan

Date: 2008-10-19 18:53:14
Name: Hamish Ahern

Message:

ok I'll implement that for v2.6. thanks for the info.

Regards,
Hamish Ahern.

Let's hope he does.

genzzel · #**853** 11-26-2008, 03:11 PM

Chesked evoscan site today and there is a 2.6beta4 version out--down loaded it but do not see anything for tcu logging

TomsSVX · #**854** 11-27-2008, 01:41 PM

Phil, wondering if you had some insight on the following things

Injector voltage correction time @ the following voltages
10.0v
10.3v
10.7v
11.0v
11.3v
11.7v
12.0v
12.3v
12.7v
13.0v
13.3v
13.7v
14.0v
14.3v
14.7v
15.0v

I know this is stuffed into the ECU's programming, I am just wondering if you have found it.

Also wondering if you have stumbled over the water temp correction maps?Cold start phasing?Cold start Primer?

The voltage correction time is crucial to my writing the base maps to the Nemesis. There is a VERY lengthy and boring procedure that I can do to get the correct values but i would love to avoid them if you have the data already

Tom

Mrdjc · #**855** 12-22-2008, 06:31 AM

Good to see there has been progress in the last few months, I more or less forgot about this whole project!

About the eavesdropping.. Where are you meant to get three female connectors? Strip them out of three cars? I had a look on the Molex website, but to no avail.

Also, can an idiots proof guide be written as to how to eavesdrop?
It looks a bit confusing to me

Also, do you connect it to B35, or to the ECU?

When you refer to SSM, do you mean the scanner available from Subaru?
or another pc with software like VWRX or Evoscan?

What are m and c in your calculations??

Cheers,
Daniel.