Single O2 sensor for VC264, VC269 & VD70A - USD$350

bradsm87 · **Joined:** Thu Apr 14, 2011 8:16 am **Posts:** 425

Nobody ever wants to put their two O2 sensors pre-turbo in their separate banks when turbocharging TB48DEs. They end up putting them in the downpipe and as a result, their bank trims constantly fight each other and it just runs badly and needs closed loop disabled and lots of tuning work to run nicely and economically.

From my limited Ghidra and disassembly knowledge, these ROMs do not appear to have a mfO2SENSOR bit in their mSPECOTHER byte. I may be wrong. The other items I'd like to learn more about are mfOSCBANK and mfF2IN1 but there may be more.

I guess there are two main ways this can happen:

- Make the bank 1 trims apply to both banks.

- Make the bank 2 cylinders members of bank 1

I'm happy to reach out to crowdfund a higher bounty if someone interested can have a look and if there is a high likelihood of success, I can see what I can do.

Even if someone can demonstrate if any of mfOSCBANK, mfF2IN1 or mfO2SENSOR are definitely NOT useful for this to rule them out and get them out of my mind, that'd be great, or if you have other flags you think I should consider.

Alex-Angarsk · **Joined:** Sat Mar 30, 2019 3:04 am **Posts:** 362

bradsm87 wrote:

Nobody ever wants to put their two O2 sensors pre-turbo in their separate banks when turbocharging TB48DEs. They end up putting them in the downpipe and as a result, their bank trims constantly fight each other and it just runs badly and needs closed loop disabled and lots of tuning work to run nicely and economically.

From my limited Ghidra and disassembly knowledge, these ROMs do not appear to have a mfO2SENSOR bit in their mSPECOTHER byte. I may be wrong. The other items I'd like to learn more about are mfOSCBANK and mfF2IN1 but there may be more.

I guess there are two main ways this can happen:

- Make the bank 1 trims apply to both banks.

- Make the bank 2 cylinders members of bank 1

I'm happy to reach out to crowdfund a higher bounty if someone interested can have a look and if there is a high likelihood of success, I can see what I can do.

Even if someone can demonstrate if any of mfOSCBANK, mfF2IN1 or mfO2SENSOR are definitely NOT useful for this to rule them out and get them out of my mind, that'd be great, or if you have other flags you think I should consider.

In my case (ROM CE811 1Mb) Single O2 is activated by changing the Word at just one address.

bradsm87 · **Joined:** Thu Apr 14, 2011 8:16 am **Posts:** 425

Alex-Angarsk wrote:

bradsm87 wrote:

Nobody ever wants to put their two O2 sensors pre-turbo in their separate banks when turbocharging TB48DEs. They end up putting them in the downpipe and as a result, their bank trims constantly fight each other and it just runs badly and needs closed loop disabled and lots of tuning work to run nicely and economically.

From my limited Ghidra and disassembly knowledge, these ROMs do not appear to have a mfO2SENSOR bit in their mSPECOTHER byte. I may be wrong. The other items I'd like to learn more about are mfOSCBANK and mfF2IN1 but there may be more.

I guess there are two main ways this can happen:

- Make the bank 1 trims apply to both banks.

- Make the bank 2 cylinders members of bank 1

I'm happy to reach out to crowdfund a higher bounty if someone interested can have a look and if there is a high likelihood of success, I can see what I can do.

Even if someone can demonstrate if any of mfOSCBANK, mfF2IN1 or mfO2SENSOR are definitely NOT useful for this to rule them out and get them out of my mind, that'd be great, or if you have other flags you think I should consider.

In my case (ROM CE811 1Mb) Single O2 is activated by changing the Word at just one address.

Nice. Is it something in the Renault A2L with a name? How do the trims and injectors log after the change? Do banks 1 and 2 show the same A/F Alpha and injector duty cycle values or does bank 2 show nothing and all cylinders become a member of bank 1?

Alex-Angarsk · **Joined:** Sat Mar 30, 2019 3:04 am **Posts:** 362

bradsm87 wrote:

Alex-Angarsk wrote:

bradsm87 wrote:

Nobody ever wants to put their two O2 sensors pre-turbo in their separate banks when turbocharging TB48DEs. They end up putting them in the downpipe and as a result, their bank trims constantly fight each other and it just runs badly and needs closed loop disabled and lots of tuning work to run nicely and economically.

From my limited Ghidra and disassembly knowledge, these ROMs do not appear to have a mfO2SENSOR bit in their mSPECOTHER byte. I may be wrong. The other items I'd like to learn more about are mfOSCBANK and mfF2IN1 but there may be more.

I guess there are two main ways this can happen:

- Make the bank 1 trims apply to both banks.

- Make the bank 2 cylinders members of bank 1

I'm happy to reach out to crowdfund a higher bounty if someone interested can have a look and if there is a high likelihood of success, I can see what I can do.

Even if someone can demonstrate if any of mfOSCBANK, mfF2IN1 or mfO2SENSOR are definitely NOT useful for this to rule them out and get them out of my mind, that'd be great, or if you have other flags you think I should consider.

In my case (ROM CE811 1Mb) Single O2 is activated by changing the Word at just one address.

Nice. Is it something in the Renault A2L with a name? How do the trims and injectors log after the change? Do banks 1 and 2 show the same A/F Alpha and injector duty cycle values or does bank 2 show nothing and all cylinders become a member of bank 1?

I don't use this, I have two O2s in front of the turbine. The information above is from UpRev.

bradsm87 · **Joined:** Thu Apr 14, 2011 8:16 am **Posts:** 425

Alex-Angarsk wrote:

In my case (ROM CE811 1Mb) Single O2 is activated by changing the Word at just one address.

Any chance you can find out what address it is? That may help me find the same on the VC/VD/VV ROMs.

Alex-Angarsk · **Joined:** Sat Mar 30, 2019 3:04 am **Posts:** 362

bradsm87 wrote:

Alex-Angarsk wrote:

In my case (ROM CE811 1Mb) Single O2 is activated by changing the Word at just one address.

Any chance you can find out what address it is? That may help me find the same on the VC/VD/VV ROMs.

CE811 ROM 1MB Single O2 activated by changing word 0x8551 to 0x6051 at address 0x41E08

bradsm87 · **Joined:** Thu Apr 14, 2011 8:16 am **Posts:** 425

Alex-Angarsk wrote:

bradsm87 wrote:

Alex-Angarsk wrote:

In my case (ROM CE811 1Mb) Single O2 is activated by changing the Word at just one address.

Any chance you can find out what address it is? That may help me find the same on the VC/VD/VV ROMs.

CE811 ROM 1MB Single O2 activated by changing word 0x8551 to 0x6051 at address 0x41E08

Thanks heaps.

I don't think there are any CE811 stock files floating around. I sent you a PM.

Alex-Angarsk · **Joined:** Sat Mar 30, 2019 3:04 am **Posts:** 362

bradsm87 wrote:

Thanks heaps.

I don't think there are any CE811 stock files floating around. I sent you a PM.

Sent to PM

Alex-Angarsk · **Joined:** Sat Mar 30, 2019 3:04 am **Posts:** 362

What successes?

bradsm87 · **Joined:** Thu Apr 14, 2011 8:16 am **Posts:** 425

Alex-Angarsk wrote:

What successes?

No luck unfortunately. The stock CE811 ROM copies bvALPHAE_R#1 to bvALPHA_R#1 and bvALPHAE_R#2 to bvALPHA_R#2. The single O2 patch copies bvALPHAE_R#1 to both bvALPHA_R#1 and bvALPHA_R#2. After days of digging using lots of different methods, I'm not sure if the bvALPHAE values even exist on the VC/VD/VV ROMs. There are 3 places that the two bvALPHA values are written from on CE811, 2 of them are accounted for on the VC/VD/VV ROMs but Ghidra's auto analysis does not find a 3rd on those ones. There are a lot of subroutines etc as part of one of the functions that may be it but it's very complicated.

Alex-Angarsk · **Joined:** Sat Mar 30, 2019 3:04 am **Posts:** 362

bradsm87 wrote:

Alex-Angarsk wrote:

What successes?

No luck unfortunately. The stock CE811 ROM copies bvALPHAE_R#1 to bvALPHA_R#1 and bvALPHAE_R#2 to bvALPHA_R#2. The single O2 patch copies bvALPHAE_R#1 to both bvALPHA_R#1 and bvALPHA_R#2. After days of digging using lots of different methods, I'm not sure if the bvALPHAE values even exist on the VC/VD/VV ROMs. There are 3 places that the two bvALPHA values are written from on CE811, 2 of them are accounted for on the VC/VD/VV ROMs but Ghidra's auto analysis does not find a 3rd on those ones. There are a lot of subroutines etc as part of one of the functions that may be it but it's very complicated.

Why don't you look at private messages?

bradsm87 · **Joined:** Thu Apr 14, 2011 8:16 am **Posts:** 425

Alex-Angarsk wrote:

bradsm87 wrote:

Why don't you look at private messages?

Sorry I missed it. I need to enable email notifications. Just replied.

RomRaider

Forum rules

Single O2 sensor for VC264, VC269 & VD70A - USD$350

Who is online