Siemens S7 - begin address of FC or FB code

darekk0000

Member
Join Date
Feb 2007
Location
Gliwice
Posts
7
Hi all,

I need find begin address of code for FC or FB function. Do you know how can I find this?

Next I need copy part of FC or FB code to DB. It should be easy I suppose (using lar1 or pointer).

Best Regards,
Darek
 
Just I need machine code for S7.
I have found machine code for S5 but I can not find this for S7 and my idea is get it from PLC.
To be sure machine code for S5 e.g.
0x8000 - A M x.y​
0x8800 - O M x.y​
:​
0xB000 - R M x.y​
etc​
I need exactly machine code for logical operations for S7 PLC.​

 
There is no way to do this from the S7 program.

I have heard that the LIBNODAVE comms library allows to upload and download code blocks. Maybe you can use that as a start.
 
It is for sure possible. I remember a few yers ago I have wrote program which changed NOP 0 instruction to BE and oposite in real time. But I can not find it now.
I remember i used one of SFC function to do this, but which ... I do not remember.
 
JesperMP said:
Wha.. ????

Try to explain exactly what you want to achieve.

I repeat that question??

As far as I know you cannot auto gen FC's and FB's from within the code and if your planning on altering status words to point to areas within DB's, I would have thought that would be dangerous.

As far as the machine code's concerned,I know in S5 it was listed in the instruction manual but I have never seen it in S7 manuals.
 
Darek - just to clarify, you have written some self modifying code in Step 7 ? (As has been said, it is possible with Step 5).
 
I was also under the impression that the M7 code was not accessible with S7. Are you sure you didn't do this with one of the M7 processors? Or with the 614 CPU that uses assembly code?
 
I am sure it was after I had changed S5 to S7 (s7-315). I did not know then that it is impossible.
PeterW - I am aware that writting self modify program is dangerous, but I need this for decoding machine code coming from CPU and display it in dialog window.
regards,
 

Similar Topics

Hi, I'm setting up a modbus master on an S7-300. It seems to work in OB1 but not when I use it in OB35. Does anyone have any ideas why? Could...
Replies
10
Views
89
The past week we received a new piece of equipment from Germany which utilizes siemens controls. Typically in our company we use A.B. controls for...
Replies
12
Views
322
Hello I have a s7-1200 and I would like to read the tags present in this controller with my controllogix controller. The two controllers don't use...
Replies
5
Views
168
Hi need help why this “failure 5 emergency stop “ appears at every startup in the morning ? Have to shut off main switch at least 10 times on...
Replies
19
Views
319
i have two plc 1. s7-1212dc/dc/dc ip; 192.168.0.1 2. s7-1500 1513-1pn ip; 192.168.3.2 i need to get data from plc1 to plc2. any idea how to do...
Replies
5
Views
131
Back
Top Bottom