Advant Controller 31 Programming and test aids 7.

3
Intelligent Decentralized Access, operating and test functions

Automation System Monitor functions

Memory overviews
Functions in the instruction list
Programming

Advant Controller 31 / Issued: 09.99

Table of contents, Volume 7.3

1 Programming and test aids ............................. 1

1.1 Programming software 907 PC 33 ..................... 1
1.2 Programming via ARCNET ................................. 4
2 Access, operating and test functions ............. 5
2.1 Introduction ........................................................ 7
2.2 Operands ........................................................... 9
2.3 Serial interface COM1 ...................................... 14
2.4 Operating and test functions ............................ 16
3 Monitor functions ........................................... 41
4 Memory overviews ........................................ 50
5 Functions in the instruction list .................... 54
5.1 Texts in the IL .................................................. 54
5.2 Syntax diagrams for IL ..................................... 56
Note:
The individual chapters include a detailed table of con-
tents when required.

Advant Controller 31 / Issued: 05.99 Contents-1

7.3
7.3 Contents-2 Advant Controller 31 / Issued: 05.99
1 Programming and test aids

1.1 Programming software Features

907 PC 33 The scope of the listed features depends on the capabili-
ties of the individual PLCs.
General
General features
The programming and test software 907 PC 33 is
available as • All of the functions can be controlled with the mouse
• Programming and test software 907 PC 331 for ABB • Clear display of project data and program configura-
Procontic CS31 / Advant Controller 31 (basic units tion at one glance
07 KR 31, 07 KR 91, 07 KT 92, 07 KT 93, 07 KT 94)
and ABB Procontic T200 (Communication processor • Scrollability in all directions in the editors
07 KP 62), order number GJP5204500R0102. • Automatic recognition of revisions
• Programming and test software 907 PC 332 for ABB Menu prompting
Procontic T200, order number GJP5204300R0102.
• Modern, clearly arranged menu interface employing
The software products 907 PC 331 and 907 PC 332 are pop-up menus
delivered respectively including system-specific documen-
tation. • Color display

The functions which are indentical for both software prod- • Quick selection of menu options with the mouse or on
ucts are described in the documentation "General part the keyboard
907 PC 33". This documentation folder can be ordered
• Call-up of external programs on the DOS level directly
separately with the following order number:
from the menu (DOS shell)
GJP5203900R0102.
The software can be run on IBM/AT-compatible personal Path information
computers. An extensively automatic installation program • Input of data name with the affiliated DOS path
installs the software package 907 PC 33 on this unit or on
another IBM/AT-compatible personal computer. • Display of the project overview in a file directory

The programming and test software 907 PC 33 permits a Take-over of the file name incl. path, selection via cur-
simple and economic programming of PLC programs in sor.
the following notations:
Password protection
• Function block diagram (FBD) • Several access privilege levels
• Ladder diagram (LD)
Data safeguarding
• Extended instruction list (Exxt. IL) • Data safeguarding directly from the editor
Both symbolic and absolute program input is possible. • Data safeguarding of complete projects on discs
The PLC program is supplemented by symbolic identifi-
ers, long text, and commentary. Auxiliary and error mes-
sages which can be called at all times facilitate program
input. Program creation as a FBD or as a LD takes place
in a joint editor. Elements from the FBD and LD are there-
fore mixable and can be linked together. The library con-
tains numerous connection elements and function blocks
which considerably simplify the realization of complex func-
tions (e.g. PID-type controller).

Advant Controller 31 / Issued: 01.99 1 Programming software 907 PC 33

7.3
Modularization Editor functions
• Handling of large projects An extensive spectrum of commands is available in the
editors for program creation:
• Arrangement of projects in logical structures
• Syntax test and plausibility test during the input of
• Subdivision into program and variable modules variables
• Module change within the FBD/LD and the extended • Block commands
IL possible – for processing of program seg-
• Modules can be called up from all levels (total project/ ments and variables
program module function selection) – delete
– shift
• Simplified input of the module name and the correspond- – copy
ing file name – store
– load
Segment plans
– print
• The subdivision of the programs and/or program mod- – delete unused variables
ules into segment plan yields a good program over-
view. • Search commands
– according to sentence number
• Simple administration due to segment plan name and – according to word number
segment plan number – according to variable
– according to symbol
FBD/LD editor – according to command
• Uniform editor for programming with graphic symbols – according to line number
as function block diagram and ladder diagram – repeat
– according to segment plan
• Connection of ladder diagram networks with elements – according to connection element
of the function block diagram – according to unassigned terminal
Extended IL editor • Search and replace
• Notation with symbols and long text in various forms • Insert

• Selection of links via a selection menu with the mouse • Delete

• Integration of the IL capabilites in the extended IL Library

• Translation is not conducted when the extended IL does • Operating interface with mouse
not contain any connection elements • Programming of a connection element in the FBD/LD
• The translated IL can be displayed, the segment plan • Hierarchical arrangement possibility of the connection
structure is retained thereby. Also possible online. elements (similar to DOS directories)
• Auxiliary texts and short commentaries for connection
elements
• Terminal allocation test for the timely recognition of
program errors.
• For every manufacturer connection element a detailed
function description can be called up directly out of
the FBD as a help text.
Variable editor
• Complete list of all of the entered variables
• Sorting selectable according to absolute or symbolic
variables
• One or more symbol names can be allocated to the
variables
• Adoption and transfer of the variable lists to and from
any word processing system
• Provision and adoption of variable lists for specific CAD/
CAE systems

7.3 Programming software 907 PC 33 2 Advant Controller 31 / Issued: 01.99

Text editor • Direct "overwriting" and "forcing" out of the editors
• Input of any ASCII files, up to 255 characters per line • ONLINE list with direct adoption of variables from the
PLC program to "forcing", "overwriting"
Commentaries
• Simple setting of breakpoints with the cursor also in
• Verbal description of networks or program segments
the FBD
ONLINE functions • ONLINE notation of variables in various numeric forms
Numerous ONLINE functions support the user during the (decimal, octal, hexadecimal, binary).
commissioning phase, e.g.
Program documentation
• Status display in – function block diagram
The automatic program documentation includes the print-
– ladder diagram
ing of the following lists:
– instruction list
– variable list • Function block diagram
• Program – transfer • Instruction list
– start
– abort • Connection element library
– stop • Logic plan diagram
– continuation
– status • Ladder diagram

• Single cycle on/off • Variable list

• Single step on/off • Cross reference list

• Breakpoint – setting • Commentary list

– display • ONLINE list
– tracing during the complete
program • Text page
– delete
• Data area
• Triggering – time
– variable • Modularization list

• Overwriting • Total variable list

• Jogging • Total cross reference list

• Forcing • System configuration

• Modification of – time and counter setpoints Outputs can be adapted to any printer.
– variables Printing format editor
– programm segments
A special printing format enables the addition of individual
• Online program modification headers and footers to the respective list. Specific data
In addition selected variables can be summarized in ON- can be included in this header and/or footer, e.g. name of
LINE lists and their status can be displayed on the screen. the project file, date and time.

• "Hotkeys" for quicker operation

• Switch into ONLINE operation directly out of the FBD/
LD, extended IL, variable list, ONLINE list.
• Direct PLC communication, e.g. "Send program" out
of the editors
• Translate and transfer program modifications with press
of a key

Advant Controller 31 / Issued: 01.99 3 Programming software 907 PC 33

7.3
1.2 Programming via ARCNET
It is possible to program the control system of the AC31
series via ARCNET on DOS level. The following is required
to do this:
• PC with installed ARCNET card or coupler connected
to a parallel printer interface
• AC31 basic modules with integrated ARCNET coupler
• Special driver software
• 907 PC 331
For further information see description 907 PC 331 R0402.

7.3 Programming software 907 PC 33 4 Advant Controller 31 / Issued: 01.99

2 Access, operating and test functions

Table of contents of the chapter Access, operating 2.2 Operands ....................................................... 9

and test functions
2.2.1 Operands of 07 KT 94, 07 KT 93 R202/262,
2.1 Introduction ..................................................... 7 07 KT 92 R303/363 ......................................... 9
2.2.1.1 Available variables and constants ................... 9
2.1.1 Access to the basic units 07 KR/KT 31, 2.2.1.2 Direct constants ........................................... 10
07 KR 91, 07 KT 92, 07 KT 93, 07 KT 94 and 2.2.1.3 Flags ............................................................ 10
to the communication processor 07 KP 62 2.2.1.4 System constants ........................................ 10
of the ABB Procontic T200 ............................. 7 2.2.1.5 System flags / Diagnosis flags ...................... 11
2.1.2 Interface standard ........................................... 7 2.2.1.6 CS31 status word .......................................... 11
2.1.3 Interface operating mode ................................. 7
2.1.4 System behavior of the PLC ........................... 7 2.2.2 Operands of 07 KR 31 and 07 KT 31 ............. 11
2.1.5 Synchronization of the data exchange ............ 8 2.2.2.1 Available variables and constants .................. 11
2.1.6 Echo ............................................................... 8 2.2.2.2 Direct constants ........................................... 12
2.1.7 Abort of a signal output ................................... 8 2.2.2.3 Flags ............................................................ 12
2.1.8 Ready message.............................................. 8 2.2.2.4 System constants ........................................ 12
2.1.9 Error message ................................................ 8 2.2.2.5 Diagnosis flags ............................................. 12
2.1.10 Notes on implementation ................................ 8 2.2.2.6 CS31 status word ......................................... 12
2.2.3 Operands of 07 KP 62 .................................. 12
2.2.3.1 Available variables and constants ................. 12
2.2.3.2 Direct constants ........................................... 13
2.2.3.3 Flags ............................................................ 13
2.2.3.4 System constants ........................................ 13
2.2.3.5 Diagnosis flags ............................................. 13
2.3 Serial interface COM1 ............................... 14
2.4 Operating and test functions ..................... 16

Advant Controller 31 / Issued: 01.99 5 Access, operating and test functions

7.3
7.3 Access, operating and test functions 6 Advant Controller 31 / Issued: 01.99
2.1 Introduction Connectable units:
– Terminal in the VT100 mode
– Computer with VT100 emulation
2.1.1 Access to the basic units – Computer with a program for the handling of the
07 KR/KT 31, 07 KR 91, 07 KT 92, clear text telegrams of the operating and test func-
07 KT 93, 07 KT 94 and to the tions
communication processor 07 KP 62 2.1.2 Interface standard
of ABB Procontic T200
Interface standard: EIA–RS232
The access to the AC31/CS31 basic units (07 KR 31,
07 KR 91, 07 KT 92 to 07 KT 94) and to the communica- 2.1.3 Interface operating mode
tion processor 07 KP 62 of ABB Procontic T200 is con-
ducted via the serial interface COM1. The serial interface COM 1 must be set the operating mode
"Active mode" to use the operating and test functions.
RUN/STOP switch in position: STOP
In the switch position STOP the PLC generally sets the
operating mode "active mode" on COM 1.
RUN/STOP switch in position: RUN
In the switch position RUN the operating mode "active
mode" is set on COM 1, when one of the following two
conditions is fulfilled:

Interface COM1 – System constant KW 00,06 = 1

or
Fig. 1: Advant Controller 31 / ABB Procontic CS31: – System constant KW 00,06 = 0 and Pin 6 on COM1
Access to control via the interface COM1 of has 1-signal (1-signal on Pin 6 is set by using the
07KR31 / 07 KT 31, 07 KR 91, 07 KT 92 / system cable 07 SK 90 or by not connecting Pin 6)
07 KT 93 / 07 KT 94
2.1.4 System behavior of the PLC
The following applies:
The processing of the PLC program has higher priority
than the communication via the serial interfaces.
The PLC operates the receiving direction of the serial in-
terface COM1 with interrupt-control. During a running PLC
program cycle incoming characters respectively trigger an
interrupt impulse, which interrupts the running PLC pro-
gram until the received characters are stored in the recep-
tion buffer. To avoid a permanent interruption of the pro-
gram processing, the PLC controls the data reception via
the RTS line so that it takes place in the breaks between
two PLC cycles.
The PLC processes the jobs received via COM1 exclu-
sively in the breaks between the PLC program cycles.
Interface COM1 The output of characters via COM1 is also only conduct-
ed in the breaks between two program cycles. The lower
Fig 2: ABB Procontic T200: the utilization rate of the PLC is, the longer the breaks are
Access to control via the interface COM1 of between the program cycles and the higher the possible
07 KP 62 communication rate is to COM1.

Every operating and test function of the PLC can be called

via an ASCII clear text telegram. The operating mode "ac-
tive mode" must be set on the serial interface.

Advant Controller 31 / Issued: 01.99 7 Introduction

7.3
2.1.5 Synchronization of the data 2.1.9 Error message
exchange If the PLC receives an unallowed job or a job with incor-
The synchronization of the data exchange between the rect syntax, this is signalized via COM 1 as follows:
control and the connected unit is conducted via the hard- <# Error message as clear text>
ware handshake lines RTS and CTS.
The readiness for a new order is then signalized by the
The PLC blocks data reception via the RTS line under the output of the ASCII character
following limiting conditions:
CR LF > (0DH 0AH 3EH)
– Reception buffer has reached a certain fill.
via COM 1.
– A PLC program cycle is just running.
This means that the ASCII character > (larger than) is set
The control still reacts during output of characters in addi- at the beginning of a new line.
tion to the XOFF/XON characters of the connected unit.
The control itself does not use these SW handshakes. 2.1.10 Notes on implementation
2.1.6 Echo If the operating and test functions of the PLC should be
called by a computer connected to COM 1, these func-
In the breaks between two PLC program cycles the PLC tions can first be easily tried out with a terminal in the
processes the jobs collected in the reception buffer. To do VT100 mode.
this, the characters are read out of the interrupt-controlled If the operating and test functions are used for the man-
reception buffer by the PLC, immediately echoed via machine communication (MMC), then mostly the follow-
COM 1, checked for correct syntax, and then processed. ing functions are required:
The characters are echoed in the same order as received
via COM 1. • Overwrite variable / indirect constant
Y command
2.1.7 Abort of a character output
• Display status of variable
By sending <CTRL C> the connected unit can cause the Z command
PLC to abort the currently running character output. The ZO command
respective operating or test function is also aborted there- ZD command
by. ZZ command
If a computer is connected to COM1, the ZZ command is
2.1.8 Ready message
recommended. With the ZZ command the PLC does not
After complete processing of an operating or test function send any ESC sequences to the cursor control.
the PLC is ready again for a new job. This readiness is
signalized by the output of the ASCII characters • Enter/modify values of indirect constants
K command
CR LF > (0DH 0AH 3EH)
via COM 1.
This means that the ASCII character > (larger than) is set
at the beginning of a new line.

7.3 Introduction 8 Advant Controller 31 / Issued: 01.99

2.2 Operands
During man-machine communication the display and modification of operands play a large role. For this reason an
overview of all of the operands of the PLC is given here.

2.2.1 Operands of 07 KT 94
2.2.1.1 Available variables and constants
Inputs
E 00,00...E 61,15 : Digital inputs, CS31 remote module
E 62,00...E 63,15 : Digital inputs of the basic unit 07 KT 94
E 64,00...E 64,07 : Digital inputs of the basic unit 07 KT 94 (formed of EW 06,00...EW 6,07)

E 65,00...E 99,15 : reserved

E 100,00...E 163,15 : reserved
E 200,00...E 263,15 : reserved
EW 00,00...EW 05,15 : Analog inputs, CS31 remote module
EW 06,00...EW 06,07 : Analog inputs of the basic unit 07 KT 94
EW 07,00...EW 07,07 : reserved
EW 07,08...EW 07,14 : Reading of the real time clock
EW 07,15 : Status for CS31 system bus
EW 08,00...EW 15,15 : Analog inputs CS31 remote module
EW 16,00...EW 34,15 : reserved
EW 100,00...EW 107,15 : reserved
EW 200,00...EW 207,15 : reserved

Outputs
A 00,00...A 61,15 : Digital outputs, CS31 remote module
A 62,00...A 63,07 : Digital outputs of the basic unit 07 KT 94
A 62,00 : High-speed counter, after activation direct output of the "zero crossing"
A 65,00...A 99,15 : reserved
A 100,00...A 163,15 : reserved
A 200,00...A 263,15 : reserved
AW 00,00...AW 05,15 : Analog outputs, CS31 remote module
AW 06,00...AW 06,03 : Analog outputs of the basic unit 07 KT 94
AW 07,00...AW 07,15 : reserved
AW 08,00...AW 15,15 : Analog outputs CS31 remote module
AW 16,00...AW 34,15 : reserved
AW 100,00...AW 107,15 : reserved
AW 200,00...AW 207,15 : reserved

Internal Operands
M 00,00...M 254,15 : Binary flags
M 255,00 : Oscillator approx. 2 Hz
M 255,01 : Oscillator approx. 1 Hz
M 255,02 : Oscillator approx. 0,5 Hz
M 255,03 : Oscillator with period interval of approx. 1 minute
M 255,04 : Oscillator approx. 1/8 Hz
M 255,05 : Oscillator approx. 4 Hz
M 255,06 : Oscillator approx. 8 Hz

M 255,10 : Sum error message

M 255,11 : Error message FK1
M 255,12 : Error message FK2
M 255,13 : Error message FK3
M 255,14 : Error message FK4
M 255,15 : Recognition "new start"
M 256,00...M 279,15 : System flags / reserved
M 280,00...M 511,15 : Binary flags

Advant Controller 31 / Issued: 09.99 9 Operands

7.3
S 00,00...S 255,15 : Steps
K 00,00...K 00,01 : Binary constants
MW 00,00...MW 253,15 : Word flags
MW 254,00...MW 255,15 : Error message
MW 256,00...MW 259,15 : System flags / reserved
MW 260,00...MW 511,15 : User area
KW 01,00...KW 79,15 : Word constants
MD 00,00...MD 63,15 : Double word flags
KD 00,01...KD 23,15 : Double word constants
Time values for time functions
KD yy,xx : Time values for time functions such as ESV, ASV etc. are configured as double word constant or as
MD yy,xx : double word flags. Only integer multiples of 1 ms are permitted.

2.2.1.2 Direct constants

Direct constants are only permitted with function blocks on certain inputs. Where this is the case it is explained in
the description of the function modules.
# -32768...+32767
#H 0000...FFFF

2.2.1.3 Labels
Labels serve as jump targets for forward jumps and consecutive number blocks.
MA 0...999

2.2.1.4 System constants

Setting the operating modes
The constants KW 00,00...KW 00,15 are reserved as system constants. Even the constants KW 00,13...KW 00,15
which are not used yet may under no circumstances be used for other purposes.

KW 00,00 : Setting the PLC operating mode (stand-alone PLC, master PLC, slave PLC)
KW 00,01 : Initialization: bit flag area
KW 00,02 : Initialization: word flag area
KW 00,03 : Initialization: double word flag area
KW 00,04 : Initialization: step chain flag area
KW 00,05 : Initialization: historical values
KW 00,06 : Application modes of the serial interface COM 1
KW 00,07 : PLC reaction to class 3 errors
KW 00,08 : PLC reaction to an overload/short-circuit at the transistor outputs
KW 00,09 : Minimum number of remote modules integrated in the CS31 system bus cycle
KW 00,10 : Size of the transmitting area of the slave PLC
KW 00,11 : Size of the receiving area of the slave PLC
KW 00,12 : Automatic warm start after an FK2 error
KW 00,15 : Deactivate oscillators at M 255,00...M 255,06

KW 85,00...KW 85,03 : Configuration of the signal delay of digital inputs

KW 85,02 : Configuration of the operating modes of the high-speed counter
KW 86,00...KW 86,07 : Configuration of the analog inputs
KW 88,00...KW 88,03 : Configuration of the analog outputs
Setting the cycle time
KD 00,00 : This constant serves as the specification of the cycle time for the PLC program. The cycle time
is given in milliseconds. Only integer multiples of 1 ms are permitted.

7.3 Operands 10 Advant Controller 31 / Issued: 09.99

2.2.1.5 System flags / Diagnosis flags
M 00,00...M 254,15 : Binary flags
M 255,00 : Oscillator approx. 2 Hz
M 255,01 : Oscillator approx. 1 Hz
M 255,02 : Oscillator approx. 0.5 Hz
M 255,03 : Oscillator with period interval of approx. 1 minute
M 255,04 : Oscillator approx. 1/8 Hz
M 255,05 : Oscillator approx. 4 Hz
M 255,06 : Oscillator approx. 8 Hz

M 255,10 : Sum error message, signalizes that an error was detected by the PLC
M 255,11 : Error messageFK1, fatal error, detailed information in MW 254,00...MW 254,07
M 255,12 : Error messageFK2, serious error, detailed information in MW 254,08...MW 254,15
M 255,13 : Error messageFK3, light error, detailed information in MW 255,00...MW 255,07
M 255,14 : Error messageFK4, warning, detailed information in MW 255,08...MW 255,15

M 255,15 : Detection "new start"

MW 254,00...MW 255,15 : error messages

First cycle detection

M 255,15
This binary flag can be used for detection of the first program cycle after a program start. It is always set to "zero"
after each program start, independent of the initialization instructions given by the system constants. If this flag is
requested by the user program and then set to "1", it can be determined whether or not the user program was re-
started.

2.2.1.6 CS31 status word

EW 07,15
Bit 0 = 1 : no CS31 error of class 2 present
Bit 1 = 1 : PLC has been adopted in CS31 cycle (only relevant when used as a slave)
Bit 2 = 1 : Time and date are valid
Bit 3 = 1 : Battery present
Bit 4...7 : unused
Bit 8..15 : currently determined maximum number of modules on CS31 system bus
(only relevant when used as a master)

2.2.2 Operands of 07 KR 31 and 07 KT 31

2.2.2.1 Available variables and constants

Inputs
E 00,00...E 61,15 : Digital inputs, CS31 remote module
E 62,00...E 62,11 : Digital inputs of the basic unit 07 KR 31 / 07 KT 31
E 63,14 : Digital inputs high-speed (Tv = 0.02 ms), signal identical to E 62,00
E 63,13 : high-speed counter, request "zero crossing"
EW 00,00...EW 05,15 : Analog inputs, CS31 remote module
EW 06,15 : high-speed counter, request "zero crossing"
EW 07,00...EW 07,07 : reserved (for diagnosis on the CS31 system bus)
EW 07,08...EW 07,14 : Read the real time clock
EW 07,15 : Status for CS31 system bus

Outputs
A 00,00...A 61,15 : Digital outputs, CS31 remote module
A 62,00...A 62,07 : Digital relay outputs of the basic unit 07 KR 31 / 07 KT 31
A 63,15 : high-speed counter, adopt inital value
AW 00,00...AW 05,15 : Analog outputs, CS31 remote module
AW 06,15 : high-speed counter, initial value

Advant Controller 31 / Issued: 09.99 11 Operands

7.3
Internal Operands
M 00,00...M 21,15 : Binary flags
M 230,00...M 239,15
M 255,00...M 255,15 : Diagnosis flags
S 00,00...S 15,15 : Steps
K 00...K 00,01 : Binary constants

MW 00,00...MW 05,15 : Word flags

MW 230,00...MW 239,15
MW 254,00...MW 255,15 : Diagnosis words
KW 00,00...KW 07,15 : Word constants
MD 00,00...MD 01,15 : Double word flags
KD 00,00...KD 01,15 : Double word constants
Time values for time functions
KD yy,xx : Time values for time functions such as ESV, ASV etc. are configured as double word constant or as
MD yy,xx : double word flags. Only integer multiples of 5 ms are permitted.

2.2.2.2 Direct constants

Direct constants are only permitted with function blocks on certain inputs. Where this is the case it is explained in
the description of the function modules.
# -32768...+32767
#H 0000...FFFF

2.2.2.3 Labels
Labels serve as jump targets for forward jumps and consecutive number blocks.
MA 0...999

2.2.2.4 System constants

Identical to chapter 2.2.1.4, except of:
KW 00,08 : not used

2.2.2.5 Diagnosis flags

Identical to chapter 2.2.1.5

2.2.2.6 CS31 status

Identical to chapter 2.2.1.6, except of:
Bit 2...7 : not used

2.2.3 Operands of 07 KP 62

2.2.3.1 Available variables and constants

Inputs
The module has no process inputs.
EW 00,04...EW 00,07 : high-speed inputs from ABB Procontic T200
Outputs
The module has no process outputs.
AW 00,04...AW 00,03 : high-speed outputs to ABB Procontic T200
Internal operands
MW 00,00...MW 05,15 : Output flags to ABB Procontic T200
MW 06,00...MW 11,15 : Input flags from ABB Procontic T200
MW 12,00...MW 253,15 : free word flags
Setting the cycle time
KD 00,00 : This constant serves as the specification of the cycle time for the PLC program. The cycle time
is given in milliseconds. Only integer multiples of 5 ms are permitted.

7.3 Operands 12 Advant Controller 31 / Issued: 09.99

Time values for time functions
KD yy,xx : Time values for time functions such as ESV, ASV etc. are configured as double word constant or as
MD yy,xx : double word flags. Only integer multiples of 5 ms are permitted.

2.2.3.2 Direct constants

Direct constants are only permitted with function blocks on certain inputs. Where this is the case it is explained in
the description of the function modules.
# -32768...+32767
#H 0000...FFFF

2.2.3.3 Labels
Labels serve as jump targets for forward jumps and consecutive number blocks.
MA 0...999

2.2.3.4 System constants

Setting the operating modes
The constants KW 00,00...KW 00,15 are reserved as system constants. Even the constants KW 00,12...KW 00,15
which are not used yet may under no circumstances be used for other purposes.
In module 07 KP 62 there are only the system constants KW 00,01...KW 00,07.
Setting the cycle time
KD 00,00 : This constant serves as the specification of the cycle time for the PLC program. The cycle time
is given in milliseconds. Only integer multiples of 5 ms are permitted.

2.2.3.5 Diagnosis flags

M 255,10 : Sum error message, signalizes that an error was detected by the PLC
M 255,11 : Error message FK1, fatal error, detailed information in MW 254,00...MW 254,07
M 255,12 : Error message FK2, serious error, detailed information in MW 254,08...MW 254,15
M 255,13 : Error message FK3, light error, detailed information in MW 255,00...MW 255,07
M 255,14 : Error message FK4, warning, detailed information in MW 255,08...MW 255,15

First cycle detection

M 255,15
This binary flag can be used for detection of the first program cycle after a program start. It is always set to "zero"
after each program start, independent of the initialization instructions given by the system constants. If this flag is
requested by the user program and then set to "1", it can be determined whether or not the user program was re-
started.

Advant Controller 31 / Issued: 09.99 13 Operands

7.3
2.3 Serial interface COM1 Conditions for setting the operating modes of the
serial interface COM1
Interface standard: EIA RS-232
RUN/ System System cable/ Mode set
Assignments of the serial interface COM1 STOP- constant device by this
The serial interface COM1 has the following connection Switch KW00,06
assignment: STOP x x Active
RUN 1 x Active
RUN 2 x Passive
RUN 0, <0, >2 07 SK 90 Active
RUN 0, <0, >2 07 SK 91 Passive

x: without effect

Temporary leaving the passive mode

During a running communication between the blocks
DRUCK and/or EMAS and a module connected to COM1,
G Housing Protective Ground (Shield) it can become necessary to change a program. To do this
1 PGND Protective Ground (Shield) COM1 must be switched from the passive mode to the
2 TxD Transmit Data (Output) active mode.
3 RxD Receive Data (Input)
4 RTS Request To Send (Output) Switching: Passive mode ––> Active mode
5 CTS Clear To Send (Input) The following three possibilities apply for switching:
6 PROG * (Input)
7 SGND Signal Ground (0V) • Set the RUN/STOP switch to "STOP" position
8 0V out (0V)
• Replace the cable 07 SK 91 with the cable 07 SK 90
9 +5 V out reserved
(when KW 00,06 is set to <0 or >2)
* 1= Active mode (Programming/Test)
• Send the following special command to the PLC:
Pin 6 open
<DEL><DEL><DEL>
0= Passive mode (PRINT/EMAS applica-
tions), Pin 6 short-circuited with 0V out The third possibility also enables the switching to be per-
formed remote-controlled, e.g. via telephone lines and suit-
able dialing modems. The ASCII character <DEL> has
Fig. 3: Assignment of the serial interface COM1 the decimal code 127 and the hexadecimal code 7FH. This
character is created on the PC by simultaneously press-
ing the control key <CTRL> and the (backspace) delete
key <––.
Operating modes of the serial interface COM1
Notes:
The operating mode of the interface must be set accord-
On German keyboards the control key is not labelled with
ing to the respective application:
<CTRL> but with <Strg>.
– Programing and test or
– man-machine communication MMC If switching into the active mode is carried out with the
special command <DEL><DEL><DEL>, the following ap-
Active mode: The active mode is used for program-
plies:
ming and testing of the basic unit,
i.e. it provides access to all program- During the running PLC program the system constant
ming and test functions of the basic KW 00,06 must not be sent to the PLC because it will
unit. switch back to the passive mode.
Passive mode: The passive mode is used to conduct The special command allots the value "1" to the image of
communication configured with the the system constants KW 00,06 stored in the operand
DRUCK und EMAS blocks between the memory. The PLC evaluates the value of this image and
user program and a device connected sets the application mode of COM1 accordingly.
to the serial interface.

7.3 Serial interface COM1 14 Advant Controller 31 / Issued: 09.99

Switching back: Active mode ––> Passive mode For the passive mode of COM1, the interface parameters
can be changed using the SINIT function block. If the
The three possibilities to switch back are as follows:
changed values are not plausible, the COM1 interface uses
• Set the RUN/STOP switch back to the "RUN" position the default values.

• Replace the cable 07 SK 90 again with the cable Every time the operating mode is switched the interface
07 SK 91 is re-initialized.

• Cancel the special command <DEL><DEL><DEL> In the active mode the active mode parameters are set, in
again as follows: the passive mode the paramters defined by SINIT and/or
the default values are set.
– If the PLC program has been "interrupted":
start the PLC program.
– If the PLC program is "running":
re-send the original value of the system constants
KW 00,06 to the control (907 PC 33 menu option
"send constants")
or
overwrite the system constants KW 00,06 with the
original value (907 PC 33 menu option "overwrite")

Interface parameters
Active mode: The settings of the interface parameter
can not be changed.
Data bits: 8
Stop bits: 1
Parity bit: none
Baud rate: 9600
Synchronization: RTS/CTS
Passive mode: Default–setting
Synchronization: RTS/CTS
Interface identifier COM1: 1
Baud rate: 9600
Stop bits: 1
Data bits: 8
Parity Bit: none
Echo: off
Send Break Character: 0
Enable end-of-text-character
for sending direction: no 1)
Sending end-of-text character: <CR> 1)
Receiving end-of-text character: <CR> 2)
1) The default end-of-text character for the sending direc-
tion (CR) is not sent. Nevertheless, this default end-of-
text character (CR) must not appear in the message
text of the assigned DRUCK block.
2) For the receive direction, an end-of-text character is
always necessary. This default end-of-text character
(CR) must not appear neither in the message text nor
in the user data of the assigned EMAS block.

Advant Controller 31 / Issued: 09.99 15 Serial interface COM1

7.3
2.4 Operating and test functions Commands for creating the user program (overview)
Command and function Page
Operator control commands
AEND Prepare a program change on a
The operator control commands can be subdivided into: running PLC program .................................. 18
• Commands for creating and modifying user AEND Reject a program change
programs which has not yet been enabled .................. 18
• Commands for testing the user programs ALT Reject an enabled program change on
• Commands for configuring the PLC a running PLC program and reactivate
the old program status ................................ 18
Notes:
AL Display capacity utilization ......................... 18
• User entries require no "blanks". Any "blanks" entered
are ignored. CROSS *) Display CROSS reference list ................... 19

• In order to provide greater clarity when describing the D Display program .......................................... 20
commands, the user entries DEEP Erase PLC program from Flash EPROM ..... 20
- for keywords are shown in F *) Search for string in user program ................ 20
UPPER-CASE LETTERS FREI Enable a program change on a
- and other entries (addresses etc.) are shown running PLC program .................................. 20

in lower-case letters FRD Read data files from Flash EPROM ............. 21

• Outputs generated by the PLC software on the moni- FWR Write data files to Flash EPROM ................ 21
tor are shown in FDEL Delete data segment in Flash EPROM ....... 21
lower-case italics FCINIT *) Initialize SmartMedia Card .......................... 22
FCRD *) Read data from SmartMedia Card ............... 22
All available commands are displayed with the HELP com-
mand on the monitor. FCWR *) Write data to SmartMedia Card ................... 22

Help command FCDEL *) Delete data segment in SmartMedia Card ... 22

SIZE16 Double user program memory ..................... 23
IDA Display program identification ..................... 23

1st text page IDR Delete program identification ....................... 23

IDS Enter program identification ......................... 23
K Enter/edit values of indirect constants ......... 23
NOP Delete programm part, i.e.
overwrite with NOPs .................................... 24
O Optimize program ....................................... 25
next text page
P Display free program memory ..................... 25
PA *) User programm preparation ......................... 25
S Enter/edit user program (Substitute)............ 25
Function: SO *) Enter/edit user program without echo .......... 25
All available operator control and test functions are dis-
played on the monitor. Use <CR> to scroll the HELP text. SP Save PLC program in Flash EPROM
and in SmartMedia Card ............................. 26

*) not with series 30, 40, 50

**) only with series 30, 40, 50

7.3 Operating and test functions 16 Advant Controller 31 / Issued: 05.99

Commands for testing the user program (overview) Command and function Page
Command and function Page L *) Continue user program ................................ 31
V Move user program ..................................... 26 PS Display program status ............................... 31
A Abort user program ..................................... 27 ST Display PLC status ..................................... 32
BA*) Diplay break points ..................................... 27 TRACE *) TRACE-mode ....................................... 32
BR *) Reset break points ...................................... 27 TRACE *) Display TRACE memory ...................... 32
BS *) Set break points.......................................... 27 TRACE E *) Activate TRACE mode ......................... 32
<CTRL>W *) Switching between operator TRACE A *) Deactivate TRACE mode ...................... 32
control functions <––> monitor ............. 28
W *) Stop user program ....................................... 33
EA *) I/O test mode ............................................. 28
Y Overwrite value of a variable with a
EAA *) Deactivate I/O test mode ............................. 28 value to be defined ...................................... 33
ES *) Single step mode ON .................................. 28 Z Display status of variables........................... 33
ESA *) Single step mode OFF ................................ 28 ZZ Display only the values of the variables ....... 34
EZ *) Single cycle mode ON ................................ 28 ZD Display and continually update
status of variables ....................................... 34
EZA *) Single cycle mode OFF .............................. 29
FEHLER Display contents of the error register ........... 29
FORC Enter force value ......................................... 30 Commands for configuration
FORC A Display force value ...................................... 30 KONFS Display/change operating modes ................ 35
FORC R Delete forcing .............................................. 30 MAIL Configuration of CS31 remote modules ....... 35
G Start user program ...................................... 30 PASS **) Password .................................................... 39
KALT Perform cold start ....................................... 31 UHR Display time and date ................................. 39
WARM Perform warm start ..................................... 31 UHRS Set time and date ....................................... 40

**) not with series 30, 40, 50

**) only with series 30, 40, 50

Advant Controller 31 / Issued: 05.99 17 Operating and test functions

7.3
2.4.1 Commands for creating the user program Rejecting an enabled change on a running PLC
program and reactivating the old program status
Preparing a program change on a running PLC
program Command:
Command:

Function:
Modifications which have been performed on a running PLC
Function: program and which have been enabled are rejected again.
In addition, the PLC restores the old program status. The
The command announces to the PLC that modifications old program status is the status of the program which
are to be carried out on the running PLC program. After existed before the program modification, i.e. before entry
this command has been entered, the PLC is ready to ac- of command AEND to the PLC.
cept the program and constant modifications.
After command ALT is entered, the old program status is
When command AEND is entered, all currently active test reactivated within approximately 1 ms without further in-
functions are deactivated. However, force values of I/O sig- tervention on the part of the user.
nals remain active.
The command can be used if the user recognizes that the
The following commands for program modifications and program modifications implemented do not achieve the
operation of the PLC are permitted after entering com- intended result.
mand AEND:
Display capacity utilization
AL, CROSS, D, F, IDA, IDR, IDS, K, N, NOP, O, P, PA, S,
SO, V, CTRL W, FEHLER, LED. Command:

Rejecting a program change which has not been

enabled yet
Entering the AEND command again rejects all program
modifications performed to date, and the PLC is ready to
accept program modifications again.
The following commands are activated during the running Function:
program and in addition reject the AEND command and
thus all program modifications performed after entry of the The PLC’s present capacity utilization is displayed in per-
AEND command: cent. This display indicates to what extent the capacity of
the PLC is being utilized owing to execution of the user
A, BA, BR, BS, EA, EAA, ES, ESA, EZ, EZA, FORC, program.
FORC A, FORC R, G, L, PS, ST, TRACE, TRACE E, W,
Y. In order to perform new program modifications, the com- The processor capacity which corresponds to the differ-
mand AEND must be entered again. ence between 100 % and the capacity utilization display
is available for operation of the serial interfaces, i.e. for
communication with the devices connected to the serial
interfaces. The utilization should not be greater than 95 %
for the longest program path so that communication is
still possible via the serial interfaces. Note that the ca-
pacity utilization of the PLC is also determined by the
current program branches (conditional jumps and consec-
utive number blocks).
Note:
The capacity utlization display indicates the correct utili-
zation caused by the user program only if at the moment
of display no communication is occurring via the serial
interfaces.

7.3 Operating and test functions 18 Advant Controller 31 / Issued: 05.99

Display cross reference list
Command:

Where: Function:
E: Abbreviation for input The cross reference list is the assignment of operands to
A: Abbreviation for output the program memory addresses at which they occur. The
S: Abbreviation for step cross reference list can be put out for
M: Abbreviation for flag
K: Abbreviation for constant • all operands occurring in the program:
W: Abbreviation for word variable Entry: CROSS <CR>
D: Abbreviation for double-word variable • a specific operand type:
nr: Number of the operand Entry e.g.: CROSS E <CR>
• one single operand:
Entry e.g.: CROSS KD 00,12 <CR>

Advant Controller 31 / Issued: 05.99 19 Operating and test functions

7.3
Display program Function:
Command: A PLC program stored on the Flash EPROM is erased
(rendered invalid).

Search for string in the user program (Find)

Command:

,
,

aa: Start address as of which the program is to be adr: Start address as of which searching is to be
displayed carried out. If no start address is entered,
searching is performed as of address 0.
ea: End address of the program part to be displayed
string: Maximum 8 commands, i.e. 16 words of the
L: Length (keyword)
intermediate code.
az: Number of program memory words to be displayed
Function:
Function:
The specified program part is displayed. The user program memory is searched for the string en-
tered by the user as of the entered start address through
Example: to the end of the user program memory. If the string is
• D 0,20 <CR> found, the address is displayed. If the string occurs sever-
al times in the program, the next program address which
The user program is displayed from address 0 through corresponds to the string is displayed in each case if you
to address 20 on the monitor. enter a semicolon (;).
• D 10 L 20 <CR>
Example:
20 program memory words are displayed, starting from
address 10. F, E 0,0 & E 0,1 <CR>

Display format in the case of sentences: The entered string is sought as of the program memory
start address 0.
start address operator operand
: F 100, !BA1 <CR>
:
Block call 1 is sought as of the program memory start
Display format in the case of block calls: address 100.
address n !ba number Enable a program change on a running PLC program
address n+1 type
address n+2 content of addr n+2 Command:

Example:
000000 !E 00,00
000002 &E 00,01
000004 =A 00,00
000006 !BA001
000007 AWT Function:
000008 A 00,00
The modifications on a running PLC program performed
000009 KW 00,00
after entry of command AEND are enabled for execution.
000010 KW 00,01
000011 AW 00,00 Before entry of command FREI, the performed program
Erase PLC program on Flash EPROM modifications have not been executed by the PLC yet.

Command: After entry of command FREI, the performed modifica-

tions are executed by the PLC. Command ALT can be
used to reactivate the old program status. The functional-
ity of the PLC program can be further modified by a new
program change.

7.3 Operating and test functions 20 Advant Controller 31 / Issued: 05.99

Read data records from the Flash EPROM Writing data records on the Flash EPROM
Command: Command:

seg: Number of the data segment in the Flash

EPROM
valid values: 0...3
bnr: Number of the block in the data segment
valid values: 0...480

seg: Number of the data segment in the Flash ;: The individual values of the command must
EPROM be separated by semicolons.
valid values: 0...3 dat: new value
bnr: Number of the block in the data segment, ;: The individual values are separated
valid values: 0...480 by semicolons.
nb: Number of blocks, Function:
valid values: 1...481
The user can write data records into the Flash EPROM.
;: The individual values of the command must be The data are entered as decimals (–32768...+32767). The
separated by a semicolon. data are always stored in blocks in the Flash EPROM
bnr: Number of the block in the data segment and safeguarded with a checksum. Each block can store
16 words. If less than 16 word values are entered, the rest
w00: 1. word value of the block of the words are filled with the value zero. After 8 word
: : : values are entered, a <CR><LF> and 2 blanks are dis-
w15: 16. word value of the block played on the monitor.
;: The individual values of the answer are Erase data segment on the Flash EPROM
separated by a semicolon
Command:
Function:
The user can read out data records from the Flash EPROM.
The data are stored in blocks (16 words) in the Flash
EPROM. The data of each block is safeguarded with a
checksum. If a checksum error is detected when a block
is read out, "ERROR" is put out instead of the number of
the block (bnr). The checksum error is simultaneously seg: Number of the data segment in the Flash
entered into the respective data field as an FK3 error (Er- EPROM
ror indentification: 131 (83H), Detailed Info: Offset, Seg- valid values: 0...3
ment).
Function:
After switching on the voltage, a checksum test of the
entire Flash EPROM is performed. If a checksum error is The user can erase a data segment in the Flash EPROM.
detected, the FK3 error with the error identification 131 is During erasing all data in this data segment are lost.
displayed on the monitor and entered into the correspond-
ing error flag.
Note: When a PLC program is started, the FK3 error flag
(binary flag M 255,13) is always erased. The details (error
identification, detailed information) are kept in the word
flag data field (MW 255,00...MW 255,07).

Advant Controller 31 / Issued: 05.99 21 Operating and test functions

7.3
Initialize SmartMedia Card Writing data records to the SmartMedia Card
Command: Command:

FCINIT <CR> *) FCWR seg ; bnr

; dat <CR>
Function:
The SmartMedia Card is initialized as a user data card.
Only on initalized cards data can be written.
When the SmartMedia Card is initialized, all previous data seg: Number of the data segment in the
is deleted. A card, initialized for user data, can no more SmartMedia Card
be used for storing user programs. valid values: 1...250
bnr: Number of the block in the data segment
Read data records from the SmartMedia Card valid values: 0...127
Command: ;: The individual values of the command must
be separated by semicolons.
dat: new value
*) FCRD seg ; bnr
;: The individual values are separated
by semicolons.
<CR>
Function:
The user can write data records into the Smart Media Card.
The data are entered as decimals (–32768...+32767). The
data are always stored in blocks in the SmartMedia Card
bnr w00;w01;w02;w03;w04;w05;w06;w07;
w08;w09;w10;w11;w12;w13;w14;w15 and safeguarded with a checksum. Each block can store
w16;w17;w18;w19;w20;w21;w22;w23; 32 words. If less than 32 word values are entered, the rest
w24;w25;w26;w27;w28;w29;w30;w31 of the words are filled with the value zero. After 8 word
values are entered, a <CR><LF> and 2 blanks are dis-
played on the monitor. A block only can be written once to
the SmartMedia Card. Before rewriting the block, the seg-
ment has to be deleted.
seg: Number of the data segment in the
SmartMedia Card Delete data segment on the SmartMedia Card
valid values: 1...250
Command:
bnr: Number of the block in the data segment,
valid values: 0...127
;: The individual values of the command must be *) FCDEL seg <CR>
separated by a semicolon.
bnr: Number of the block in the data segment
w00: 1st word value of the block seg: Number of the data segment in the
: : : SmartMedia Card
w31: 32nd word value of the block valid values: 1...250

;: The individual values of the answer are Function:

separated by a semicolon
The user can delete a data segment in the Smart Media
Function: Card. During deleting all data in this data segment is lost.

The user can read out data records from the SmartMedia
Card. The data are stored in blocks (32 words) in the
SmartMedia Card. The data of each block is safeguarded *) A block only can be written once to the SmartMedia
with a checksum. Card. Before rewriting the block, the segment has to be
deleted.

7.3 Operating and test functions 22 Advant Controller 31 / Issued: 05.99

Double user program memory Delete program identification
Command: Command:

SIZE16 is available only for the basic units 07 KR 91, Function:

07 KT 92 R202/R262 and 07 KT 93 R101/R171. SIZE 16
is no longer required for the other basic units because of The identification entered by the user for the user program
their larger memories. is deleted.

Function: Enter program identification

The user program memory is doubled (to 15296 instruc- Command:

tions). After this command is entered it is no longer possi-
ble to change a program during a running PLC program.
The command can be entered only under the following
conditions:
– no error of error class 2 present and
Program
– PLC in the status "ABORTED" identification
and
– invalid user programm (DEEP command) *)
on the Flash EPROM
After this command is entered, the SP command must be Program identification: These characters are assigned as
executed (save the user program on the Flash EPROM). the identification to the user program.
This way the double program is stored and cannot be lost
during a voltage shutdown. Function:
If the SP command is not executed, the doubling of the The identification entered by the user for the user program
program memory is cancelled when the voltage is switch- is stored in the program memory. The identification may
ed OFF/ON and/or WARM command or COLD command comprise maximum 16 characters. It serves, for instance,
are given. to store the project name and the creation date of the
program in the PLC.
The doubling of the program memory is reversed as fol-
lows: Enter/Edit values of indirect constants
– Execute DEEP command and Command:
– Voltage OFF/ON, WARM command or COLD
command

Display program identification

Command:

W: Abbreviation for word constants

Function: D: Abbreviation for double-word constants

The identification entered by the user for the user program nr: Entered number of the constant
is displayed. If no identification has been issued for the
program, nothing is displayed (see also command IDS). *): No program identification is entered for this path. An
already existing program identification is deleted.

Advant Controller 31 / Issued: 05.99 23 Operating and test functions

7.3
 Example:
constant no.
old value K 0,0 <CR>
Output of the number and value of the binary constant
K 00,00. This value can be overwritten if required. If a semi-
colon is entered, the number and value of the next binary
new value constant (K 00,01) is output.
KW 0,4 <CR>
Output of the number and value of the word constant
KW 00,04.
KD 0,0 <CR>
Output of the number and value of the double-word con-
stant KD 00,00. The cycle time is preset with this con-
stant.
constant no. old value: Delete program part, i.e. overwrite with NOPs
Displayed number and value of the constant.
Command:
new value:
The user can overwrite the value of the displayed con-
stant by a new value. In the case of the word and dou-
ble-word constants, a hexadecimal value may also be
entered in place of a decimal value. An H is prefixed to
the numerical value for this purpose. ,
Caution: Values H8000 and H8000 0000 are forbidden in
two’s-complement arithmetic (practical only in the case
of masks for instance).
;: Entering a semicolon results in display of number and
value of the constant with the next number up. If the
semicolon is entered without entering a new value, the aa: Start address of the program part to be deleted
old value of the displayed constant is retained.
ea: End address of the program part to be deleted
↑: Entering character "↑" results in the display of number
and value of the constant with the next number down. L: Length (keyword)
If the character "↑" is entered without entering a new az: Number of program memory words to be deleted
value, the old value of the displayed constant is re-
tained. (Use character " ^ "on the PC keyboard.) Function:
<CR>: The command is terminated by entering a <CR>. The specified program part is deleted. Before deletion, a
prompt is displayed in order to establish whether you re-
Function: ally do want to delete this program part. The user must
The required numerical values are assigned to the indirect once again either confirm deletion with "Y" or cancel dele-
constants. tion with "N".

This value assignment can also be performed with the user Example:
program running. This means that time values of timers NOP 0,20 <CR>
can be modified when the system is running for instance.
The user program is deleted from address 0 through to
Cycle time: address 20.
The cycle time is set with the double word constant NOP 10 L 20 <CR>
KD 00,00. The set cycle time must be an integer multiple
of the basic time of 1 ms, i.e. 1 ms, 7 ms, 23 ms etc. 20 program memory words are deleted, as of address 10.

7.3 Operating and test functions 24 Advant Controller 31 / Issued: 05.99

Optimize program Prepare user program
Command: Command:

Function:
The I/O signals planned in the user program are enabled
in the I/O configuration list of the PLC. In addition, a syn-
tax check is carried out for the user program. In the case
aa: Start address of the area as of which the program
of sentences with relational operators using bracketed ex-
memory is to be optimized
pressions, the RIGHT BRACKET in front of the binary as-
ea: End address of the area signment is stored by the translator as a binary RIGHT
BRACKET in the intermediate code. This binary RIGHT
L: Length (keyword) BRACKET is corrected to form a word bracket by pro-
az: Number of program memory words gram preparation. PA computes the target addresses and
the historical values to be skipped for the branch blocks
Function: and consecutive number blocks. The PA command is
called automatically each time the program is started
All NOPs are removed from the given program part and
(G command).
thus the program is compressed.
Example: Enter/Edit user program (substitute)
Command:
O 0 <CR>
The entire program memory is optimized.
O 0,10 <CR>
The program memory is optimized as of address 0 through
to address 10.
address
O 10 L 10 < CR> content/command
The NOPs within the next 10 program memory words as
of address 10 are removed and the program is compressed
accordingly.
new
Display free program memory content

Command:

adr: Program memory address as of which the program

is to be entered or modified in instruction list.
Function: address: The program memory address whose content is
to be modified is displayed by the PLC.
The program memory is searched for NOPs from the end.
If a word which does not correspond to a NOP is found in content: Applies to block calls only. The content of the
the intermediate code, the number of NOPs found, i.e. program memory address, translated back, is dis-
the number of free program memory words, is displayed. played.

Advant Controller 31 / Issued: 05.99 25 Operating and test functions

7.3
command: Applies to sentences and the block header Save PLC program in Flash EPROM and in the
(number and type). The command or block header, SmartMedia Card
translated back, is displayed, always as an entire com-
Command:
mand, i.e. operand and operator or block call and block
type. If an address which does not point to the start of
a command or to a block call is entered, this is cor-
rected to the start of the command by the PLC.
new content: New content of the user program.
;: Entering a semicolon displays the subsequent program
memory address and its content, and this can be mod- Function:
ified if required. If no new "content" is entered before The PLC program is transferred from the RAM to the Flash
the semicolon, the old content of the displayed pro- EPROM and, if existing, also to the SmartMedia Card.
gram memory address remains unchanged. Character <*> is displayed on the monitor at intervals of
Function: approximately 1 second during programming.

Entering or modifying the PLC program in instruction list. Move user program
A program memory word is selected and displayed on the Command:
monitor as an instruction or operand. The displayed con-
tent can then be overwritten.
Note:
,
You will also find the following information for entering/
modifying the instruction list with this command at the
end of this Appendix:
- Syntactic structure of the instruction list.
- Instructions on how texts for function blocks aa: Start address of program part to be moved
DRUCK/EMAS are entered and displayed.
ea: End address
Enter/Edit user program without echo
L: Length (keyword)
Command:
az: Number of program memory words by which the
program part is to be moved
Function:
The program is moved from address aa to address ea or
from address aa by the specified number of program mem-
ory words. The gap which results is filled with NOPs. New
content program parts can be inserted in this gap. Moving is pos-
new sible only if the required space is still available at the end
of the user program. However, this is checked automati-
cally.
Example:
adr: Program memory address as of which the pro- V 0,10 <CR>
gram is to be entered or modified
The program is moved from address 0 to address 10.
NOPs are inserted from address 0 through to address 9.
content new: New content of the user program
V 10 L 20 <CR>
Function:
The program is moved from address 10 by 20 program
The program memory address as of which the program is memory words to address 30, and 20 NOPs are inserted.
to be entered is preset. The program can then be entered
consecutively. The PLC returns no echo of the entered
program. However, in the event of an error, the PLC re-
turns an error message (e.g. Incorrect Entry).

7.3 Operating and test functions 26 Advant Controller 31 / Issued: 05.99

2.4.1 Commands to test the user program Function:
Abort user program The breakpoints can be individually deleted. The command
Command: BR <CR>
deletes all of the breakpoints of the program.

Set breakpoints
Command:

Function:
Execution of the user program is aborted. All outputs (bi-
nary and word) are set to zero. The user program can be ,
restarted by entering "G".
Timers which have been started continue to run indepen-
dently of the program status in the operating system. They
are aborted only by a cold-start or power OFF/ON. adr: Address of the breakpoint
,: If several breakpoints are set, the addresses must
Display break points
be separated by a comma when entering.
Command:
Breakpoints can be set:
• to the address of the operand after an assignment char-
acter
• to the address of a RIGHT BRACKET
• to the address of the last parameter of a block

Function: • to the address of the end of the program

All breakpoints of the program are displayed. The address Function:

of the start of the command and its content are displayed After the program start, the program stops at the first break-
and not the breakpoint address when the command is point. Breakpoints may also be entered with the program
issued. running. A maximum of 15 breakpoints may be set.
Reset break points Advancing to the next breakpoint: If a semicolon is en-
Command: tered, the program runs to the next breakpoint after expiry
of the cycle time and displays the program address and
the command at this address. If the next breakpoint is not
reached after a specific period, owing to a long cycle time,
the display operation can be aborted by entering <CTRL>C
if required.
If a breakpoint is set to a program point which is not exe-
cuted, e.g. owing to a jump, the program continues its
cycles but with four times the cycle time, which may have
,
a disadvantageous effect on the functionality.

adr: Address of the break point to be deleted

,: If only certain break points are deleted, the indi-
vidual addresses must be separated by a comma
when entering.

Advant Controller 31 / Issued: 05.99 27 Operating and test functions

7.3
Change over between operator control functions Function:
<–––> Monitor
Mode I/O test is deactivated with this command, i.e. the
Command: user program continues to run normally as of this point. It
is advisable to abort the program before deactivating the
I/O test.

Activate single step mode

Command:

Function:
Pressing key <CTRL> and key W simultaneously takes
you to the monitor program of the PLC. This makes avail-
able certain basic functions at the monitor level to the
user. If you are in the monitor program, you can switch
back to the operating program of the PLC by entering Function:
<CTRL> and W again.
After starting the program, only one sentence or one block
I/O-Test is executed and the program stops after each assignment,
RIGHT BRACKET and at the end of each block.
Command:
Command Z can be used to display variable values.
Command "ES" can also be entered with the program run-
ning. In this case, the mode does not take effect until the
start of the next program cycle.
Advancing by one step:
If you enter a semicolon, the program runs to the next
Function:
breakpoint after expiry of the cycle time and displays the
This mode permits the user to check the wiring of his I/O program address and the command at this address. If the
signals from the PLC through to the process in order to next breakpoint is not reached after a specific period, owing
ensure that the wiring is correct. to a long cycle time, the display operation can be aborted
by entering <CTRL>C if required.
After starting the user program, it is not executed. Only
the I/O signals planned in the program are operated, i.e.
Deactivate single step mode
the input signals are read in and the output signals are
brought out. Command:
By actuating limit switches etc., it is possible to check
whether the signals arrive under the declared designation
in the PLC. By setting outputs in targeted manner, it is
possible to check whether the signals arrive at the correct
point in the process. Command Z or ZD can be used to
display the required I/O variables in the PLC.
Command "EA" can also be entered with the program run-
ning. In this case, the mode does not take effect until the Single-step mode is deactivated, i.e. the user program
start of the next program cycle. continues to run normally as of the current breakpoint.

Deactivate I/O test mode Activate single step mode

Command: Command:

7.3 Operating and test functions 28 Advant Controller 31 / Issued: 05.99

Function: Maximum number of I/O signals to be forced:
When the program is started, the program stops at the • Digital inputs: 64
end of the program. Command "EZ" can also be entered
with the program running. • Word inputs: 16

The mode does not come into effect until the start of the • Digital outputs: 64
next program cycle. • Word outputs: 16
Advancing by one program cycle: Forcing is performed in the following way:
If a semicolon is entered, the program is run through once Forcing inputs
after expiry of the cycle time and displays the program
address and the command at this address (!PE). If the The PLC generates an image of the input signals planned
next breakpoint is not reached after a specific period, owing in the PLC program at the start of each program cycle. If
to a long cycle time, the display operation can be aborted inputs are to be forced, their real values are replaced by
by entering <CTRL>C if required. the force values preset by the user after read-in. The PLC
operates only with the modified input image during the
Deactivate single cycle mode: program cycle, and, thus, signal changes on the input
Command: device during the program cycle are unimportant.

Forcing outputs
At the end of the program cycle, the PLC transfers the
output image of the output signals planned in the PLC
program to the output devices. If outputs are to be forced,
their real values are replaced by the force values before
they are output in the output image.
Function: Behavior after power failure, RESET or warm start
Single-cycle mode is deactivated, i.e. the program is ex- After a power failure, the PLC has "forgotten" the force
ecuted normally again. job. The list of I/O signals to be forced, entered before the
power failure, is, however, still present in the PLC and can
Display the contents of the error registers
also be displayed with command FORC A <CR>. The over-
Command: all force list is reactivated and forcing is placed back into
effect by entering a single signal to be forced.
The following commands are available for forcing I/O sig-
nals:
• FORC: Enter force value
• FORC A: Display force value
Function: • FORC R: Delete forcing
The error information stored in the PLC is output.

Forcing I/O signals

On the PLC, the user can "force" input signals and output
signals. This means that values are preset for I/O signals
by the user. The PLC then operates with the force values
instead of the real input signals. In turn, the PLC issues
the force values to the output devices and not the output
signals computed in the PLC program. The force values
apply until forcing is cancelled for individual I/O signals or
for all I/O signals. Both the values supplied by the input
devices and the values assigned to outputs in the PLC
program thus have no effect during forcing. Forcing can
be applied both to binary I/O signals and to word I/O sig-
nals.

Advant Controller 31 / Issued: 05.99 29 Operating and test functions

7.3
Enter force value Delete forcing
The name of the I/O signal to be forced and the force value Command:
are entered with the command FORC.
Command:

name
name ; value

name: Name of the input or output signal to be forced

value: Force value for the input or output
;: A semicolon is used as the separator between the
name and the force value. If several inputs/outputs ;
are to be forced, they must also be separated by a
semicolon.

Display force value name: Name of the inputs/outputs for which forcing is to
Command: be terminated
;: If forcing is terminated only for specific inputs/out-
puts, the individual names must be separated by a
semicolon when entering them.
Function:
(1) Terminating forcing for all I/O signals
(2) Terminating forcing for single I/O signals
(3) Terminating forcing for one specific group of I/O
signals

Start user program

Command:

Function:
• Display of all of the inputs and outputs to be forced
• Display of all of the inputs and outputs of a specific Function:
group of inputs/outputs to be forced
The user program is started and the operands are initial-
ized.
The operand areas are initialized according to the corre-
sponding system constant.

7.3 Operating and test functions 30 Advant Controller 31 / Issued: 05.99

Perform cold start Performing a warm start
Command: – Command WARM <CR> in terminal mode or
– voltage OFF/ON, when there is a battery or
– menu option "Enable PLC mode" in the programming
system.

Continue user program

Command:
Function:
The cold start command is only allowed when the PLC
program is "aborted".
– All RAM memories are tested and deleted.
– If there is no user program in the Flash EPROM, the
default values are set for all of the system constants
(same as factory setting). Function:
– If there is a user program in the Flash EPROM, it will The user program is continued after a preceding stop ("W").
be stored in the RAM together with the system con- When continuing, the flags and internal statuses have the
stants. same value as with program stop.
– The operating modes defined by the system constants Timers which have started continue to run independently
are set. of the program status in the operating system. They are
– The CS31 system bus is re-initialized (only in case of aborted only by a cold-start or power OFF/ON.
CS31 system bus master). Display program status
Performing a cold start Command:
– Command KALT <CR> in terminal mode or
– voltage OFF/ON, when there is no battery or
– menu option "Cold start" in the programming system.

Perform warm start

Command:
Function:
The program status (program at breakpoint, program abort-
ed, program stopped, program running) of the user pro-
gram is displayed.

Function:
The warm start command is only allowed when the PLC
program is "aborted".

Warm start
– All RAM memories are tested and deleted with the
exception of the program memory and the operand
memory (flags).
– If there is a user program in the Flash EPROM, it will
be stored in the RAM together with the system con-
stants.
– The operating modes defined by the system constants
are set.
– The CS31 system bus is re-initialized (only in case of
CS31 system bus master).

Advant Controller 31 / Issued: 05.99 31 Operating and test functions

7.3
Display PLC status Command: Activate TRACE mode
Command:

Function: Command: Deactivate TRACE mode

The entire PLC status is displayed as follows:
Program identification
Cycle time
Program status
Active test functions
TRACE registers
Error messages
Function:
Capacity utilization
In TRACE mode, the PLC notes the address of the block
TRACE mode last executed or the address of the instruction last exe-
Command: Display TRACE memory cuted. After a system crash, the operator is thus provided
with information as to how far the user program has been
executed. The contents of the TRACE memory are re-
tained in the event of a RESET.

7.3 Operating and test functions 32 Advant Controller 31 / Issued: 05.99

Stop user program Display status of variables
Command: Command:

L number

Function:
The user program is stopped. ;
The values of the outputs and of the flags are retained.
Timers which have been started continue to run indepen-
dently of the program status in the operating system. They
are aborted only by a cold-start or power OFF/ON.

Overwrite value of a variable with value to be

entered var: Variable (flag, step, input, output, indirect constant)
Command: to be displayed
;: The individual variables must be separated by
semicolons.
L number: Number of consecutively numbered variables
as of the variable var which are to be displayed.

; value Example: M 0,0 L 3

The following are displayed:
M 0,0 M 0,1 M 0,2
;

value of var
value of var
var: Name of the variable or indirect constant
value of var
value: New value which is to be assigned to the variable
;: There must be a semicolon between the name
and the value of the variable. If several variables
are to be overwritten, these must also be separat-
ed by a semicolon.
Note:
Z: The values of the variables (max. 22) are each
If the variable is a step variable, it can only be set and not
updated when character Z <CR> is entered.
reset. When step variables are set, all other steps of the
chain are automatically reset. Function:
If an indirect constant is modified with this command, this The variable names preset by the user are displayed on
modification is performed only in the operand memory and the monitor. The value of this variable is updated each
not in the program memory, i.e. this value is overwritten time the character Z <CR> is entered. The displayed vari-
again by the value from the program memory with the next able values always originate from the same program cy-
program start. cle and represent a "snapshot" at the end of the cycle.
The number of variables to be displayed is restricted to 22
with this command since no more screen lines than this
are available.

Advant Controller 31 / Issued: 05.99 33 Operating and test functions

7.3
Computer connection instead of terminal
If a computer is connected instead of the terminal for eval-
uation of the status values, the following commands may
also be used if required instead of Z (same syntax dia-
gram as with command Z): value of var
value of var
ZO: Number of possible variables maximum 120, other- value of var
wise as for command Z.
Screen control: In the case of commands Z, ZO and ZD,
the following control characters are used by the PLC for
screen control:
Carriage return: <CR>
Line feed: <LF>
Clear screen: <ESC>[2J
Position cursor: <ESC>[<line>;<column>H
ZZ: Number of possible variables maximum 120. The
PLC sends no ESC sequences to the screen con-
troller, but only the variable values, each followed Function:
by a <CR>. The variable values have the same or- The variable names preset by the user are displayed on
der as the preset variable list, otherwise as with the monitor. The related variable values are updated auto-
command Z. matically. The displayed variable values always originate
from the same program cycle and represent a "snapshot"
Display and continually update status of variables
at the end of the cycle.
Command:
The maximum number is 22. The command is terminated
by a <CTRL>C.
If character Z <CR> or ZD <CR> is then entered, the sta-
tus display is reactivated for the previously entered vari-
ables.

L number

var: Variable (flag, input, output, indirect constant) to

be displayed
;: The individual variables must be separated by
semicolons.
L number: Number of consecutively numbered variables
as of the variable var which are to be displayed.
Example: M 0,0 L 3
The following are displayed:
M 0,0 M 0,1 M 0,2

7.3 Operating and test functions 34 Advant Controller 31 / Issued: 05.99

2.4.3 Commands for configurating grn: Group number with which the remote module is
addressed by the PLC program
Display/change operating modes
code: Job code
Command:
d1: 1st data byte of the job
: : :
d8: 8th data byte of the job
;: The individual values of the job must be separated
by semicolons.
status: Status of the response:
51 (OK response)
170 (Not OK response)
German / English
a1: 1st data byte of the response
: : :
a7: 7th data byte of the response
;: The individual values of the job are separated
Quit command by semicolons.
Function:

Function: The user has the option of configuring CS31 remote mod-
ules and interrogating the set configuration. The jobs are
After command KONFS <CR> is entered, the set language handled internally via a transmit mailbox (job) and receive
is displayed on the monitor. If you press key <DELETE> mailbox (response).
(<CTRL> and the backspace key on PCs), the language
is switched over. The command is terminated by entering List of jobs:
a <CR>.
The OK responses are described for the respec-
Note: tive jobs. The not OK responses always appear
as follows:
The DELETE key is frequently not available on personal
computers. The key code (7FH) of the DELETE key can • Not OK response
be generated on such keyboards by pressing two keys. status: 170
In general, these keys are keys <CTRL> and the back-
a1: 1 =
Unknown job code
space key.
2 =
Invalid parameter, e.g. group number
Configuration/interrogation of the configuration of 3 =
Remote module does not respond
CS31 remote module (07 KR 31, 07 KR 91, 07 KT 92, 10 =
Mail Box is not free within 3 sec.
07 KT 93, 07 KT 94) 11 =
Job aborted by activation of the
RUN/STOP switch
Command: 12 = Job is not fetched within 6 sec.
13 = No reply within 6 sec.
a2...a7: 0
• Updating the maximum number of remote
modules detected
The contents of the input word EW 07,15 include the max-
imum number of remote modules detected in the past.
The current actual number of existing remote modules may
be less than this.
This command updates this value. The existing modules
are counted and the value is stored.

status;a1;a2;a3;a4;a5;a6;a7

Advant Controller 31 / Issued: 05.99 35 Operating and test functions

7.3
The user can interrogate this value in the PLC program • Activating or deactivating open-circuit monitor-
(EW 07,15, bit 8...15). ing of an output
– Job – Job
grn: 255 (master PLC with bus) grn: Group number 0...63
code: 132 code: 225 = Open-circuit monitoring ON
d1...d8: not used 161 = Open-circuit monitoring OFF
d1: Channel number 0...15
– OK response d2...d8: not used
status: 51
a1...a7: 0 – OK response
status: 51
• Interrogation whether open-circuit monitoring is a1...a7: 0
activated or deactivated for an input
• Interrogation whether a channel is configured
– Job as an input or as an input/output
grn: Group number 0...63
code: 32 – Job
d1: Channel number 0...15 grn: Group number 0...63
d2...d8: not used code: 34
d1: Channel number 0...15
– OK response d2...d8: not used
status: 51
a1: 47 = Open-circuit monitoring ON – OK response
32 = Open-circuit monitoring OFF status: 51
a2...a7: 0 a1: 34 = Input
35 = Input/Output
• Interrogation whether open-circuit monitoring is a2...a7: 0
activated or deactivated for an output
• Configuration of a channel as an input or input/
– Job output
grn: Group number 0...63
code: 33 – Job
d1: Channel number 0...15 grn: Group number 0...63
d2...d8: not used code: 162 = Input
163 = Input/Output
– OK response d1: Channel number 0..15
status: 51 d2...d8: not used
a1: 47 = Open-circuit monitoring ON
32 = Open-circuit monitoring OFF – OK response
a2...a7: 0 status: 51
a1...a7: 0
• Activating or deactiving open-circuit monitoring
of an input • Interrogation of the input delay of a channel
– Job – Job
grn: Group number 0...63 grn: Group number 0...63
code: 224 = Open-circuit monitoring ON code: 38
160 = Open-circuit monitoring OFF d1: Channel number 0...15
d1: Channel number 0...15 d2...d8: not used
d2...d8: not used
– OK response
– OK response status: 51
status: 51 a1: Input delay:
a1...a7: 0 2 = 2 ms
4 = 4 ms
.
.
.
30 = 30 ms
32 = 32 ms
a2...a7: 0

7.3 Operating and test functions 36 Advant Controller 31 / Issued: 05.99

• Setting the input delay of a channel – Job
grn: Group number 0...63
– Job code: 233
grn: Group number 0...63 d1: first channel number on the module:
code: 166 0 = first channel number on the
d1: Channel number 0...15 module is 0 (<7)
d2: Input delay 8 = first channel number on the
2 = 2 ms module is 8 (>7)
4 = 4 ms
. d2: Module type:
. 0 = Digital input
. 1 = Analog input
30 = 30 ms 2 = Digital output
32 = 32 ms 3 = Analog output
d3...d8: not used 4 = Digital input/output
5 = Analog input/output
– OK response
status: 51 Note:
a1...a7: 0 Bit: even number (0, 2, 4)
Wort: odd number (1, 3, 5)
• Acknowledge error on remote module d3...d8: not used
This command resets the error messages on the se- – OK response
lected remote module. The error messages can only status: 51
be reset when the cause of error has been remedied. a1...a7: 0
– Job • Interrogation of the configuration of an analog
grn: Group number 0...63 input
code: 232
d1: smallest chan. number on the module: – Job
0 = smallest channel number on the grn: Group number 0...63
module is 0 (<7) code: 42
8 = smallest channel number on the d1: Channel number 0...15
module is 8 (>7) d2...d8: not used
d2: Module type: – OK response
0 = Digital input status: 51
1 = Analog input a1: 51 = Input ±10 V
2 = Digital output 50 = Input 0...20 mA
3 = Analog output 49 = Input 4...20 mA
4 = Digital input/output a2...a7: 0
5 = Analog input/output
• Interrogation of the configuration of an analog
Note: output
Bit: even number (0, 2, 4)
Word: odd number (1, 3, 5) – Job
d3...d8: not used grn: Group number 0...63
code: 43
– OK response d1: Channel number 0...15
status: 51 d2...d8: not used
a1...a7: 0
– OK response
• Acknowledge error on the remote module and status: 51
reset configuration values to default setting a1: 50 = Output 0...20 mA
49 = Output 4...20 mA
In addition to "Acknowledging error on remote module" 51 = Output ±10V
all of the configurable settings are reset to default set- a2...a7: 0
ting.

Advant Controller 31 / Issued: 05.99 37 Operating and test functions

7.3
• Configuration of an analog input • Reading 1...6 bytes (07 KR 91, 07 KT 92, 07 KT 93
and 07 KT 94)
– Job
grn: Group number 0...63 – Job
code: 170 grn: Group number 0...63
d1: Chanel number 0...15 code: 49 = Read 1 byte
d2: 51 = Input 10 V 50 = Read 2 bytes
50 = Input 0...20 mA 51 = Read 3 bytes
49 = Input 4...20 mA 52 = Read 4 bytes
d3...d8: not used 53 = Read 5 bytes
54 = Read 6 bytes
– OK response d1: first channel number on the module:
status: 51 0 = first channel number on the
a1...a7: 0 module is 0 (<7)
• Configuration of an analog output 8 = first channel number on the
module is 8 (>7)
– Job
d2: Module type:
grn: Group number 0...63
0 = Digital input
code: 171
1 = Analog input
d1: Channel number 0...15
2 = Digital output
d2: 50 = Output 0...20 mA
3 = Analog output
49 = Output 4...20 mA
4 = Digital input/output
51 = Output ±10V
5 = Analog input/output
d3...d8: not used
Note:
– OK response
Bit: even number (0, 2, 4)
status: 51
Word: odd number (1, 3, 5)
a1...a7: 0
d3: Byte start address (low byte)
• Interrogation of the bus configuration
d4: Byte start address (high byte)
The bus interface of the master PLC has a list which stores d5...d8: not used
specific data of the remote modules. In this list, the re-
– OK response
mote modules are numbered in the order in which they
status: 51
are encountered on the CS31 bus. This command involves
a1: Value of the 1st byte
specifying the internal number of the modules. The re-
a2: Value of the 2nd byte or 0
sponse received is the group number stored under this
a3: Value of the 3rd byte or 0
number and the status information on the corresponding
a4: Value of the 4th byte or 0
module.
a5: Value of the 5th byte or 0
– Job a6: Value of the 6th byte or 0
grn: 0 (is not evaluated) a7: 0
code: 80
• Reading 1 bit of a byte
d1: Number from the module list (1...31)
d2...d8: not used – Job
grn: Group number 0...63
– OK response
code: 63
status: 51
d1: first channel number on the module:
a1: Status of the remote module:
0 = first channel number on the
Bit 0...3: Number of process data bytes
module is 0 (<7)
(binary module) and/or words
8 = first channel number on the
(word module) sent to the master
module is 8 (>7)
by the module
Bit 4...7: Number of process data bytes d2: Module type:
(binary module) and/or words 0 = Digital input
(word module) sent to the module 1 = Analog input
by the master 2 = Digital output
a2: Group number (0...63) 3 = Analog output
a3: Bit 0: 0 = smallest channel number <7 4 = Digital input/output
1 = smallest channel number >7 5 = Analog input/output
Bit 1: 0 = Binary module Note:
1 = Word module Bit: even number (0, 2, 4)
a4...a7: 0 Word: odd number (1, 3, 5)

7.3 Operating and test functions 38 Advant Controller 31 / Issued: 05.99

 d3: Byte start address (low byte) d2: Module type:
d4: Byte start address (high byte) 0 = Digital input
d5: Bit position within the bytes 0...7 1 = Analog input
d6...d8: not used 2 = Digital output
3 = Analog output
– OK response 4 = Digital input/output
status: 51 5 = Analog input/output
a1: Bit value (0 or 1)
a2...a7: 0 Note:
Bit: even number (0, 2, 4)
Word: odd number (1, 3, 5)
• Writing 1...4 bytes (07 KR 91, 07 KT 92, 07 KT 93
and 07 KT 94) d3: Byte start address (low byte)
d4: Byte start address (high byte)
– Job d5: Bit position within the byte 0...7
grn: Group number 0...63 d6: Bit value (0 or 1)
code: 65 = Write 1 byte d7...d8: not used
66 = Write 2 bytes
67 = Write 3 bytes – OK response
68 = Write 4 bytes status: 51
a1...a7: 0
d1: first channel number on the module:
0 = first channel number on the Password (only for series 30, 40, 50)
module is 0 (<7)
8 = first channel number on the Command:
module is 8 (>7)
d2: Module type:
0 = Digital input
1 = Analog input
2 = Digital output
3 = Analog output
4 = Digital input/output
5 = Analog input/output
Note: Function:
Bit: even number (0, 2, 4)
The command PASS activates and/or deactivates the pass-
Word: odd number (1, 3, 5)
word function. Any 4 digit hexadecimal number (except
d3: Byte start address (low byte) 0000) can be entered as a password. If the password word
d4: Byte start address (high byte) is activated, the following functions are disabled:
d5: Value of the 1st byte AEND, D, DEEP, FREI, N, NOP, O, S, V.
d6: Value of the 2nd byte or not used Value: Any 4 digit hexadecimal number.
d7: Value of the 3rd byte or not used Attention: The value 0000 has not effect.
d8: Value of the 4th byte or not used
status: The activation/deactivation of the password
– OK response function is displayed.
status: 51
a1...a7: 0
Display of time and date (07 KR 91, 07 KT 92,
07 KT 93 and 07 KT 94)
• Writing 1 bit of a byte
Command:
– Job
grn: Group number 0...63
code: 79
d1: first channel number on the module: UHR
0 = first channel number on the
module is 0 (<7)
8 = first channel number on the
module is 8 (>7) Function:
The time and the date are displayed on the monitor in the
following form:

Advant Controller 31 / Issued: 05.99 39 Operating and test functions

7.3
SYSTEM TIME : HH:MM:SS Function:
SYSTEM DATE: DAY OF WEEK TT.MM.JJ
Setting the time and date. For the day of the week, the
Where: clock possesses a number between 1 and 7 internally.
When converting the number to the name, it assumes
HH: Hours that Monday is the first day of the week (number 1 -->
MM: Minutes Monday). If the clock is set with block UHR (see also
SS: Seconds block catalog), a different number may then be assigned
DAY OF WEEK: Name of the day of the week to Monday. In this case, the display of the day of the week
TT: Day no longer corresponds to the command UHR <CR> since
MM: Month the display function always assumes that Monday is as-
JJ: Year signed the number 1.
hh and/or hh: Hours
Setting time and date mm and/or mm: Minutes
ss and/or ss: Seconds
Command: tt and/or tt: Day
mm and/or mm: Month
jj and/or jj: Year
UHRS day of week: Name of the day of the week
n: Input for ’no’
j: Input for 'yes'

enter new time (hh:mm:ss)

enter new date (tt:mm:jj)

select day of week (j/n): day of week

7.3 Operating and test functions 40 Advant Controller 31 / Issued: 05.99

3 Monitor functions for 07 KR 91 and 07 KT 92 to 07 KT 94

The monitor program offers the specialist access at hexa- • The blank character (space) is ignored and can be used
decimal level to the entire address range of the PLC. Mem- for more clearly structured entries.
ory areas can be displayed and modified, and hardware
tests can be conducted. • The character CTRL-C aborts the currently running
operation.
Monitor commands which change memory storage
areas may endanger the functionality of the PLC. For • Every display on the screen can be stopped with
this reason the monitor functions should be handled <CTRL>S (XOFF) and be continued with <CTRL>Q
with care. (XON).

• The modules work with monitor commands with 32 bit • If no segment is specified when entering an address,
addresses. The high word of the 32 bit address is set the working segment is used (see Y instruction).
with the Y command.
Example: Overview of the monitor functions
Y = 20 <CR> } The value of the address Function and explanation Page
DW0 <CR> } 0020 0000H is displayed.
H Display help text / calculate hexadecimal ... 42

Switchover D Display memory contents ........................... 42

operator control functions <--> Monitor functions I Fill memory area with a value ...................... 43
Command: M Transfer memory areas ............................... 43
P Read/write port ............................................ 44
S Display/edit memory contents ..................... 45
Y Display/edit working segment ..................... 45
ZG Simultaneous output of 3 values .................. 46
Command not available in 07 KR 31.
ZR RAM test .................................................... 46
Function:
ZZA Output of 3 values after entering
By pressing key <CTRL> and key W simultaneously the
a semicolon (;) ............................................ 47
monitor program of the PLC is accessed. If the you are in
the monitor program, you can change back to the opera- ZZF Search for string.......................................... 47
tor-control program of the PLC by re-entering <CTRL>
and W. ZZV Compare memory commands word-serially . 48

Explanation of the syntax: R Read Intel HEX file ...................................... 49

• The monitor pogram responds with the character * and W Write Intel HEX file ...................................... 49
waits for an entry.
• All of the numbers are hexadecimal numbers (leading
zeors may be omitted).
• If more digits than necessary are entered, only the last
digits are valid (with byte commands the last two dig-
its and with word commands the last 4 digits).

Advant Controller 31 / Issued: 05.99 41 Monitor functions

7.3
Display help text / calculate hexadecimal
After the command H <CR> is entered, all of the available functions of the monitor are displayed on the screen. In
addition, this command enables the calculation of simple hexadecimal arithmetic expressions.
Command:

hex: Hexadecimal numbers

Display memory contents

The memory contents can be displayed byte-serially or word-serially.
Command:

B: Byte-serially (keyword)
W: Word-serially (keyword)
aa: Start address as of which the memory contents are to be displayed
,: Keyword (separator)
ea: End address of the memory contents to be output
L: Length (keyword)
az: Number of bytes/words to be output
Example:
DB 0:0L2<CR> Display memory contents byte-serially
0000:0000 02 00 Monitor display
DW 0,2<CR> Display memory contents word-serially
0000:0000 0002 0000 Monitor display

7.3 Monitor functions 42 Advant Controller 31 / Issued: 05.99

Fill memory area with a value
Command:

B: Byte-serially (keyword)
W: Word-serially (keyword)
aa: Start address as of which the memory contents are to be filled with the specified value
,: keyword (separator)
ea: End address of the memory area
L: Length (keyword)
az Number of bytes/words to be filled
hex: Hexadecimal value with which the memory area is to be filled
Example:
IB 8000:80L3=FF<CR> The memory contents of 8000:80H, 8000:81H and 8000:82H are overwritten with FF.

Transfer of memory areas

A memory area can be copied to another area. The data are transferred word-serially, but the number is specified in
bytes when entering (i.e. when az = 3 one word is transferred).
Command:

aa: Start address as of which the memory contents are to be copied

,: Keyword (separator)
ea: End address of the memory area
L: Length (keyword)
az: Number of bytes to be copied
za: Target address of the memory area
Example:
M 8000:80L4,8000:90<CR> or M 8000:80,84,8000:90<CR>
The following is copied:
8000H :80H ---> 8000H :90H
:81H ---> :91H
:82H ---> :92H
:83H ---> :93H

Advant Controller 31 / Issued: 05.99 43 Monitor functions

7.3
Read/write port
Command:

adr

value

adr: I/O-Address
value: Byte value to which the I/O address is written
=: Keyword

7.3 Monitor functions 44 Advant Controller 31 / Issued: 05.99

Display/edit memory contents Display/edit working segment
The memory contents can be displayed and edited byte- If only an offset and no segment is specified when enter-
serially or word-serially. ing an address, the working segment Y is used as the
segment. The default value of the working segment is zero.
Command:
The modules work with monitor commands with 32 bit
addresses. The high word of the 32 bit address is set with
the Y command.
Command:

address
value new
value

seg: new segment address of the working segment

=: keyword
Example:
Y = 20 <CR> User command: Edit high word of
the 32 bit address
B: Byte-serially (keyword) DW0 <CR> Display memory contents word-
W: Word-serially (keyword) serially
aa: Start address as of the which the memory
contents are to be displayed/edited 0020:0000 0200 Monitor display
address: Address of the memory content
value: Value of the memory contents
value new: New value of the memory contents
(user entry)
;: Entering a semicolon increments the address
by 1 (command SB) or by 2 (command SW).
↑: Entering an "arrow up" (^ on the PC)
decrements the adress by 1 (command SB) or
by 2 (command SW)

Advant Controller 31 / Issued: 05.99 45 Monitor functions

7.3
Simultaneous display of 3 values
The ZG command permits the display of the values of maximum 3 addresses. Whenever the value of the first address
changes, the values are updated on the monitor. The expression "expr" states how frequently updating of the values is
to be suppressed.
Command:

adr1: 1st address whose value is displayed on the monitor. If the value of adr1 changes, the values are updated
on the monitor.
adr2: 2nd address whose value is displayed on the monitor.
adr3: 3rd address whose value is displayed on the monitor.
expr: Number expressing how frequently updating of the values on the monitor is to be suppressed when the
value of adr1 changes.
,: Keyword (separator)
=: Keyword
Example:
ZG 1000:0, 1000:100 <CR>
The values of addresses 1000:0H and 1000:100H are displayed on the monitor. If the value of address 1000:0H
changes, the values of the two addresses are updated on the monitor.

RAM test
The specified area is written with a test pattern (FFFF, 5555, AAAA), and a check is then conducted in order to
establish whether the test values have been stored correctly in the specified area. If an error is established, the address,
actual value and required value are output. The test can be continued by pressing any key (apart from <SPACE>).
CTRL C aborts the test.
3 test cycles are performed with test values whose order is reversed. The 4th test cycle consists of storing a counter at
the start address, checking for correct storage and repeating the test with the decremented counter until it reaches
value zero. The RAM test is then terminated with monitor message (*).
Command:

aa: Start address of the RAM area

ea: End address of the RAM area
L: Length (keyword)
az: Number of bytes of the RAM area
,: Keyword (separator)
Example:
ZR 1000:0L100<CR> RAM test over the specified memory area.

7.3 Monitor functions 46 Advant Controller 31 / Issued: 05.99

Output of 3 values after entering a semicolon (;)
Command ZZA permits the display of the values (byte or word) of maximum 3 addresses every time a semicolon is
entered. The command can be aborted with <CR>.
Command:

B: Byte-serially (keyword)
W: Word-serially (keyword)
adr1: 1st address whose value is displayed on the monitor
adr2: 2nd address whose value is displayed on the monitor
adr3: 3rd address whose value is displayed on the monitor
,: Keyword (separator)
Example:
ZZA 1000:0, 1000:100 <CR>
After entry of a semicolon (;), the values of addresses 1000:0H and 1000:100H are displayed on the monitor.

Search for String

Command ZZF can be used to search for a string with maximum 3 words in the specified memory area. If the string is
found, the address is displayed on the monitor. The search is continued by entering a semicolon (;). If the string is not
found the monitor message <#07> is displayed.
Command:

aa: Start address of the memory area

ea: End address of the memory area
L: Length (keyword)
az: Number of words of the memory area
exp1: 1st word of the string
exp2: 2nd word of the string
exp3: 3rd word of the string
,: Keyword (separator)
Example:
ZZF 1000:0, 100 = AAAA, BBBB <CR>
The entered string (AAAAH, BBBBH) is sought in the area 1000:0H to 1000:100H.

Advant Controller 31 / Issued: 05.99 47 Monitor functions

7.3
Compare memory areas word-serially
Command ZZV is used to compare a memory area 1 word-serially with a memory area 2. If a difference is detected,
address 1, contents 1, address 2, and contents 2 are displayed on the monitor. The operation can be aborted with
CTRL C.
Command:

aa1: Start address of memory area 1

ea1: End address of memory area 1
L: Length (keyword)
az1: Number of words of memory area 1
aa2: Start address of memory area 2
,: Keyword (separator)
Example:
ZZV A000:0 L 100, 8000:0 <CR>
The memory area 1 between A000:0H and A000:100H is compared with memory area 2 as of 8000:0H.

7.3 Monitor functions 48 Advant Controller 31 / Issued: 05.99

Read INTEL HEX File Write INTEL HEX file
Using the R command it is possible to read in an INTEL The W command enables the output of a data area of the
HEX file via the serial interface COM2 of the basic units PLC as an INTEL-HEX file via the serial interface COM2 of
07 KT 92/93/94 and to store the HEX file data in the PLC. the basic units 07 KT 92/93/94.
The following records are accepted in this case: The following records are accepted in this case:
– address extension record – address extension record
– data record – data record
– end record – end record
The following transfer format applies: The following transfer format applies:
– 8 data bits – 8 data bits
– no parity bit – no parity bit
– 1 stop bit – 1 stop bit
The data of the INTEL HEX files are stored in the PLC as Command:
of the following address:
• The segment address is determined by the address in
the address extension record of the INTEL HEX file. If area
an offset is specified when entering the command, this
offset is added to the segment address in the address
extension record. This results in a new segment ad-
dress as of which the data of the HEX file are stored.
area: Memeory area to be output as Intel Hex file
Thus the storage area of the HEX file data can be pre-
sented in the PLC.
Example:
• The offset address is determined by the address in the
data record of the INTEL HEX file. W 8000:0,FFFF <CR> The memory area from
8000:0H up to 8000:FFFFH is
Command:
output as INTEL HEX file via
the serial interface COM2 of
the PLC.
W 8000:0LFFFF <CR> The memory area from
8000:0H up to 8000:FFFFH is
output as INTEL HEX file via
the serial interface COM2 of
the PLC.
offset

offset: Offset (the new segment address is calculated

through addition of the offset to the segment
address of the address extension record)
Example:
R <CR> The PLC is ready to receive an INTEL
HEX file.
R 2F00 <CR> The PLC is ready to receive an INTEL
HEX file. The HEX value 2F00H is added
to the segment address of the address
extension record. The resultant new
segment address is the address used
to store the HEX file data.

Advant Controller 31 / Issued: 05.99 49 Monitor functions

7.3
4 Memory overviews

4.1 Memory overviews for 07 KT 94

002FFFFF
Important: Turbo RAM program 2
At blocks which work with segments (COPY, WAES, 30000H bytes
DWAES, WOL, DWOL, WOS, DWOS), the value of the Descriptors
descriptor must be assigned at the segment inputs. 768D to 784D (300H to 310H)
002D0000
Example: 002CFFFF
At the 07 KT 94 the flag MW 0,00 is to be copied to reserved 002C0000
MW 1,00: 002BF7FF
CS31 EA copy
COPY block: 800H bytes 002BF000
Value at input: FREI = 1D 002BEFFF
reserved
ANZ = 1D 002B0000
QOFF = 8A80H (35456D) 002AFFFF
Turbo RAM program 2
QSEG = B8H (184D)
ZOFF = 8AA0H (35488D) 40000H bytes
ZSEG = B8H (184D) Descriptors
736D to 760D (2E0H to 2F8H)
4.1.1 User program RAM 00270000
0026FFFF
Turbo RAM program 1
Explanation of terms:
70000H bytes
• ARCNET intermediate store: Descriptor 176D (B0H) Descriptors
• Organizational directory: Descriptor 168D (A8H) 392D to 440D (188H to 1B8H)
00200000
001FFFFF
– PLC-specific: This is used to store organizational Operand memory
001F0000
data relating to the entire PLC.
Constants for program 2
– For AWP 1: This is used to store organizational 1142H bytes
data relating to program memory 1. 001C0000
User program memory 2 001BEE3F
– For AWP 2: This is used to store organizational
data relating to program memory 2. 3EE40H bytes 00180000
• Program identification: Constants for program 1
16 bytes for an identification, e.g. project name 1142H bytes
00170000
• User program memory 1 and/or 2: User program memory 1 0016EE3F
Memory for the PLC program
3EE40H bytes
00130000
User program memory 1:
0012FF7F
Descriptor 328D to 384D (148H to 180H) Program identification
0012FF70
User program memory 2:
Organizational directory for program 2
Descriptor 600D to 656D (258H to 290H) 0012FF5A
• Turbo RAM program 1 and/or 2: Organizational directory for program 1
0012FF44
Machine code for user program memory 1 and/or 2
Organizational directory PLC-specific
• Constants for program 1 and/or 2: 0012FF30
This area is used to store the indirect constants Control block 0...2 0012FF00
of the user program memory 1 and/or 2.
ARCNET intermediate store 0011621F
Constants for program1: Descriptor 448D (1C0H)
Constants for program 2: Descriptor 464D (1D0H) 6220H bytes 00110000
• Operand memory: Descriptor 184D (B8H) User program RAM

7.3 Memory overviews 50 Advant Controller 31 / Issued: 06.99

4.1.2 User program Flash EPROM

• User data segment 0 to segment 3:

User data segment 3 The user data segment 0 to segment 3 are stored in
7860H bytes this area. The user data are secured with a check-
02470000
sum.
User data segment 2
7860H bytes
02460000

User data segment 1

7860H bytes
02450000

User data segment 0

7860H bytes
02440000

Checksum 0 to 3
0243FFF8

not used 6H bytes

0243FFF2

User program part 3

EE40H bytes
024311B2

Constants
1142H bytes
02430070

not used 20H bytes

02430050

Program identification
02430040

Organizational directory
for program 2
0243002A

Organizational directory
for program 1
02430014

Organizational directory
PLC-specific
02430000
User program part 2
10000H bytes
02420000
User program part 1
10000H bytes
02410000

User program part 0

10000H bytes
02400000

Advant Controller 31 / Issued: 06.99 51 Memory overviews

7.3
4.1.3 Operand memory 07 KT 94 Explanation of terms:
ASAS 1: Work memory program 1
Stack1: Stack for program 1
1FF200 SEG:F200 VWS: Historical value memory

Stack 2 K: Indirect constants BINARY

1FF100 100H SEG:F100 K 00,00...K 00,01
KW: Indirect constants WORD
ASAS
1FF000 100H SEG:F000 KW 00,00...KW 89,15
KD: Indirect constants DOUBLE WORD
1FEA80 580H SEG:EA80 KD 00,00...KD 23,15
E: Process image of the inputs BINARY
S E 00,00...E 99,15
1FDA80 1000H SEG:DA80
E 100...E 163,15
E 200...E 263,15
MD
1FCA80 1000H SEG:CA80 EW: Process image of the inputs WORD
EW 00,00...EW 34,15
MW EW 100,00...EW 107,15
1F8A80 4000H SEG:8A80
EW 200,00...EW 207,15
M A: Process image of the outputs BINARY
1F6A80 2000H SEG:6A80 A 00,00...A 99,15
A 100,00...A 163,15
AW A 200,00...A 263,15
1F6420 660H SEG:6420
AW: Process image of the outputs WORD
A AW 00,00...AW 34,15
1F55E0 E40H SEG:55E0 AW 100,00...AW 107,15
AW 200,00...AW 207,15
EW
1F4F80 660H SEG:4F80 M: Flags BINARY
M 00,00...M 511,15
E
1F4140 E40H SEG:4140 MW: Flags WORD
MW 00,00...MW 511,15
KD
1F3B40 600H SEG:3B40 MD: Flags DOUBLEWORD
MD 00,00...MD 63,15
KW S: Step chains
1F3000 B40H SEG:3000
S 00,00...S 255,15
K ASAS2: Work memory for program 2
1F2FFE 2H SEG:2FFE
Stack 2: Stack for program 2
Free Pool
1F2EF0 10EH SEG:2EF0
Important:
At blocks which work with segments (COPY, WAES,
1F2200 CF0H SEG:2200 DWAES, WOL, DWOL, WOS, DWOS), the value of the
descriptor must be assigned at the segment inputs.
VWS
1F0200 2000H SEG:0200 For examples see chapter 4.1.

Stack 1
1F0100 100H SEG:0100
SEG=001FH
ASAS 1
1F0000 100H SEG:0000 (High word of the 32 bit address,
descriptor 0B8H = 184DEC)

7.3 Memory overviews 52 Advant Controller 31 / Issued: 06.99

4.1.3 Dual port RAM: 4.1.4 Dual port RAM:
CS31 Inputs and outputs of the basic module

SEG:05FF
CS31:
AW 08,00...AW 15,15
SEG:0500
SEG:04FF
CS31:
EW 08,00...EW 15,15
SEG:0400
SEG:03FF
CS31 status
(EW 07,15) All of the memory areas which
SEG:03FE
SEG:03FD are not allocated are reserved.
Read real time clock
(EW 07,08...EW 07,14)
SEG:03F0
SEG:03EF
Spontaneous mail box
(EW 07,04...EW 07,07)
SEG:03E8
SEG:03E7
Receive mail box
EW 07,00...EW 07,03
SEG:03E0
SEG:03DF SEG:006F
CS31:
EW 00,00...EW 05,15 EW 06,00...EW 06,15
SEG:0300 SEG:0050

reserved SEG:02FF
SEG:02FE
Send mail box
SEG:02F4
SEG:02F3
reserved
SEG:02E0
SEG:02DF SEG:00AF
CS31:
AW 00,00...AW 05,15 AW 06,00...AW 06,15
SEG:0200 SEG:0090
SEG:01FF SEG:0033
CS31:
E 00,00...E 61,15 E 62,00...E 63,15
SEG:0180 SEG:0030
SEG:017F
reserved E 64,00...E 64,07 SEG:0034
SEG:0080
SEG:007F SEG:0042
CS31:
A 00,00...A 61,15 A 62,00...A 63,15
SEG:0000 SEG:0040

SEG=0050H SEG=0060H
(High word of the 32 bit address, (High Word of the 32 bit address,
descriptor 0C8H = 200DEC) descriptor 058H = 88DEC)

Advant Controller 31 / Issued: 06.99 53 Memory overviews

7.3
4.2 Memory overviews for 07 KR 91 4.2.2 User program Flash EPROM

4.2.1 User program RAM

not used 38C20 Checksum

38C12 A7FFE

Constants for program 2 not used

702H bytes 8CH bytes
38510 A7F72

Turbo RAM program 2 User programm

12EB0H bytes 7800H bytes
25660 A0772

User program memory 2 Constants

7800H bytes 702H bytes
1DE60 A0070

not used not used

1DE52
20H bytes
A0050
Constants for program 1
702H bytes Program identification
1D750 A0040
Turbo RAM program 1 Organizational directory for program 2
A002A
12EB0H bytes
0A8A0
Organizational directory for program 1
A0014
User program memory 1
7800H bytes Organizational directory PLC-specific
030A0 A0000

not used
03080

Program identification
03070

Organizational directory for program 2

0305A
Organizational directory for program 1
03044
Organizational directory PLC-specific
03030

Control block 0...2

03000
• User program memory 1:
Memory for the PLC-program
• Turbo RAM program 1:
Explanation of terms: Machine code for user program memory 1

• Organizational directory • Constants for program 1:

This area is used to store the indirect constants of
– PLC-specific: This is used to store organizational the user program memory 1.
data relating to the entire PLC.
• User program memory 2:
– For AWP 1: This is used to store organizational Speicher für das SPS-Programm
data relating to program memory 1.
• Turbo RAM program 2:
– For AWP 2: This is used to store organizational Machine code for user program memory 2
data relating to program memory 2.
• Constants for program 2:
• Program identification: This area is used to store the indirect constants of
16 bytes for an identification, e.g. project name the user program memory 2.

7.3 Memory overviews 54 Advant Controller 31 / Issued: 06.99

4.2.3 Operand memory MD: Flags DOUBLE WORD
S: Step chains
VWS: Historical value memory
40000 SEG:F3E0
ASAS 2: Work memory for program 2
not used 10H I/O force lists:
3FFF0 SEG:F3D0
This is where the I/O signals to be forced and
I/O configuration list 2 190H their force values are entered.
3FE60 SEG:F240
I/O configuration list 1:
I/O configuration list 1 190H
3FCD0 SEG:F0B0 This is where the I/O signals planned in
not used program 1 are entered so that they are taken
3FCC8 8H SEG:F0A8 into consideration when generating and
I/O force lists 288H outputting the process image.
3FA40 SEG:EE20
I/O configuration list 2:
not used 10H This is where the I/O signals planned in
3FA30 SEG:EE10
program 2 are entered so that they are taken
Stack 2 100H
3F930 SEG:ED10 into consideration when generating and
ASAS 2
outputting the process image.
3F830 100H SEG:EC10
VWS 1800H
3E030 SEG:D410 4.2.4 Dual-Port RAM
S 800H
3D830 SEG:CC10
MD 800H C03FF
3D030 SEG:C410 CS31 status (EW 07,15) C03FE
MW 2000H C03FD
3B030 SEG:A410 Read real time clock
M EW 07,08...EW 07,14 C03F0
3A030 1000H SEG:9410
C03EF
AW Spontaneous mail box
39F30 100H SEG:9310 EW 07,04...EW 07,07 C03E8
A 400H C03E7
39B30 SEG:8F10 Receive mail box
EW EW 07,00...EW 07,03 C03E0
39A30 100H SEG:8E10
C03DF
E 400H Direct: EW 06,00...EW 06,15
39630 SEG:8A10
CS31: EW 00,00...EW 05,15 C0300
KD 200H
39430 SEG:8810
reserved C02FF
KW 500H C02FE
38F30 SEG:8310
Send mail box C02F4
K 2H C02F3
38F2E SEG:830E reserved C03E0
Free Pool 10EH C02DF
38E20 SEG:8200
Direct: AW 06,00...AW 06,15
Stack 1 100H CS31: AW 00,00...AW 05,15
38D20 SEG:8100 C0200
C01FF
ASAS 1 100H
38C20 SEG:8000 Direct: E 62,00...E 63,15
CS31: E 00,00...E 61,15 C0180
SEG=30C2
C017F
reserved
C0100
Explanation of terms: C00FF
Read/write permission
ASAS 1: Work memory program 1 Read/write request C00FE
Stack 1: Stack for program 1 C00FD
K: Indirect constant BINARY reserved
C0080
KW: Indirect constant WORD C007F
KD: Indirect constant DOUBLE WORD Direct: A 62,00...A 63,15
E: Process image of the inputs BINARY CS31: A 00,00...A 61,15 C0000
EW: Process image of the inputs WORD
A: Process image of the outputs BINARY
AW: Process image of the outputs WORD
M: Flags BINARY
MW: Flags WORD

Advant Controller 31 / Issued: 06.99 55 Memory overviews

7.3
5 Functions in the instruction list for 07 KR 91 and
07 KT 92 to 07 KT 94

5.1 Texts in the instruction list

Some PLC blocks (DRUCK, EMAS) operate with texts
stored in the user program.

Entering the texts in the user program

With a terminal, text is entered embedded in the code
characters #" and "#. The key code character #" identifies
the start of a text string and the key code character "#
identifies the end of a text string.
All ASCII characters between 0H and 7FH may be entered.

Storing the texts in the user program

Each text character entered occupies one word in the user
program. The ASCII code of the text character is stored in
the low byte and the prefix FA is stored in the high byte.
Example:
Text entry and storage as of address 100 in the PLC pro-
gram:
Entry: S 100 <CR>
00100 NOP
#"ABB"#<CR>
Storage: 00100 FA41
00101 FA42
00102 FA42

7.3 Functions in the instruction list 56 Advant Controller 31 / Issued: 05.99

Overview of the possible text characters, their entry and their display on the monitor
ASCII Hex- User Display ASCII Hex- User Display ASCII Hex- User Display
char- value entry char- value entry char- value entry
acter acter acter

NUL 00 <CTRL><SP> <NUL>* 0 30 0 0 ` 60 ` `

SOH 01 <CTRL> A <SOH> 1 31 1 1 a 61 a a
STX 02 <CTRL> B <STX> 2 32 2 2 b 62 b b
ETX 03 <CTRL> C <ETX> 3 33 3 3 c 63 c c
EOT 04 <CTRL> D <EOT> 4 34 4 4 d 64 d d
ENQ 05 <CTRL> E <ENQ> 5 35 5 5 e 65 e e
ACK 06 <CTRL> F <ACK> 6 36 6 6 f 66 f f
BEL 07 <CTRL> G <BEL> 7 37 7 7 g 67 g g
BS 08 <CTRL> H <BS> 8 38 8 8 h 68 h h
HT 09 <CTRL> I <HT> 9 39 9 9 i 69 i i
LF 0A <CTRL> J <LF> : 3A . . j 6A j j
VT 0B <CTRL> K <VT> ; 3B ; : k 6B k k
FF 0C <CTRL> L <FF> < 3C < < l 6C l l
CR 0D <CTRL> M <CR> = 3D = = m 6D m m
SO 0E <CTRL> N <SO> > 3E > > n 6E n n
SI 0F <CTRL> O <SI> ? 3F ? ? o 6F o o
DLE 10 <CTRL> P <DLE> @ 40 @ @ p 70 p p
DC1 11 <CTRL> Q <DC1> A 41 A A q 71 q q
DC2 12 <CTRL> R <DC2> B 42 B B r 72 r r
DC3 13 <CTRL> S <DC3> C 43 C C s 73 s s
DC4 14 <CTRL> T <DC4> D 44 D D t 74 t t
NAK 15 <CTRL> U <NAK> E 45 E E u 75 u u
SYN 16 <CTRL> V <SYN> F 46 F F v 76 v v
ETB 17 <CTRL> W <ETB> G 47 G G w 77 w w
CAN 18 <CTRL> X <CAN> H 48 H H x 78 x x
EM 19 <CTRL> Y <EM> I 49 I I y 79 y y
SUB 1A <CTRL> Z <SUB> J 4A J J z 7A z z
ESC 1B <CTRL> [ <ESC> K 4B K K { 7B { {
FS 1C <CTRL> \ <FS> L 4C L L | 7C | |
GS 1D <CTRL> ] <GS> M 4D M M } 7D } }
RS 1E <CTRL> ~ <RS> * N 4E N N ~ 7E ~ ~
US 1F <CTRL> ? <US> * O 4F O O DEL 7F <DEL> <DEL>
SP 20 <SP> <SP> ** P 50 P P * The follwing applies with older
! 21 ! ! Q 51 Q Q terminals:
NUL 00 <CTRL>@ <NUL>
" 22 " " R 52 R R
RS 1E <CTRL>^ <RS>
# 23 # # S 53 R R US 1F <CTRL>_ <US>
$ 24 $ $ T 54 T T
** In the case of text entry a SPACE is
% 25 % % U 55 U U displayed as a blank. When display-
& 26 & & V 56 V V ing the user program it is displayed
' 27 ' ' W 57 W W as <SP> for easier recognition.
( 28 ( ( X 58 W W Note:
) 29 ) ) Y 59 Y Y Interrelationship between value and
ASCII character:
* 2A * * Z 5A Z Z
+ 2B + + [ 5B [ [ Binary value in the computer:
1011 (0BH, 11DEC)
, 2C , , \ 5C \ \
Represented as:
– 2D – – ] 5D ] ]
– Decimal ASCII: 31H, 31H
. 2E . . ^ 5E ^ ^ – Hexadecimal ASCII: 42H
/ 2F / / _ 5F _ _ Output by DRUCK as hex value: 1011

Advant Controller 31 / Issued: 05.99 57 Functions in the instruction list

7.3
5.2 Syntax diagrams for instruction list (IL)
5.2.1 Syntax diagram: BOOLEAN SENTENCE

Signal flow: In the direction of the arrow, otherwise from left to right
Brackets: Sum "LEFT BRACKET" = Sum "RIGHT BRACKET", nesting depth: 15
B-OPR: Binary operand (E, A, M, S, K)
Examples: E 00,03 A 07,15 M 05,01 S 05,04 K 00,01

7.3 Functions in the instruction list 58 Advant Controller 31 / Issued: 05.99

5.2.2 Syntax diagram: ARITHMETIC SENTENCE

Signal flow: In the direction of the arrow, otherwise from left to right
Brackets: Sum "LEFT BRACKET" = Sum "RIGHT BRACKET", nesting depth: 15
W-OPR: Word operand (EW, AW, MW, KW)
Examples: EW 03,05 AW 11,12 MW 22,15 KW 09,06

Advant Controller 31 / Issued: 05.99 59 Functions in the instruction list

7.3
5.2.3 Syntax diagram: HYBRID SENTENCE
see also chapter "Language repertoire", Relational operators

Signal flow: In the direction of the arrow, otherwise from left to right
Brackets: Sum "LEFT BRACKET" = Sum "RIGHT BRACKET", nesting depth: 15
W-OPR: Word operand (EW, AW, MW, KW)
Examples: EW 03,05 AW 11,12 MW 22,15 KW 09,06
B-OPR: Binary operand (E, A, M, S, K)
Examples: E 00,03 A 07,06 M 05,01

7.3 Functions in the instruction list 60 Advant Controller 31 / Issued: 05.99

 Printed on chlorine-free bleached paper

ABB Schalt- und Steuerungstechnik GmbH

Eppelheimer Straße 82 Postfach 10 50 09
D-69123 Heidelberg D-69040 Heidelberg

Telephone +49 6221 777-0

Telefax +49 6221 777-111
E-Mail desst.helpline@de.abb.com
Internet http://www.abb-sst.de Printed in the Federal Republic of Germany (09.99)