Notices
ECU Flash

IDA Pro tutorial request

Thread Tools
 
Search this Thread
 
Old Feb 20, 2008 | 03:15 PM
  #46  
burgers22's Avatar
Evolved Member
 
Joined: Jan 2006
Posts: 953
Likes: 2
From: Oxfordshire
Now my turn to ask a question, I can understand why the 3D tables has two memory addresses at the start of them, but why do some 2D tables like Fuel Map RPM have two memory addresses?

MB
Reply
Old Feb 20, 2008 | 03:46 PM
  #47  
tephra's Avatar
EvoM Guru
15 Year Member
iTrader: (6)
 
Joined: Feb 2007
Posts: 9,486
Likes: 67
From: Melbourne, Australia
can u post and example? can't tell what you mean!
Reply
Old Feb 20, 2008 | 04:04 PM
  #48  
burgers22's Avatar
Evolved Member
 
Joined: Jan 2006
Posts: 953
Likes: 2
From: Oxfordshire
Here is the 2d load axis from that the Fuel maps use, there appear to be 2 RAM addresses at the start of this 2d table

MB
Attached Thumbnails IDA Pro tutorial request-load.png  
Reply
Old Feb 20, 2008 | 04:47 PM
  #49  
tephra's Avatar
EvoM Guru
15 Year Member
iTrader: (6)
 
Joined: Feb 2007
Posts: 9,486
Likes: 67
From: Melbourne, Australia
ok load axis is different, its not really a 2d table, I mean it is in a logical sense but not according to the ECU.

ok Load axis has an input and an output, so for the RPM axis it will have 2byte RPM as the input, and some AXIS_variable as the output, so say you have the following RPM AXIS

0
500
1000
2000

If your 2byteRPM is 500, then the INPUT is 500, and the output will be 1, this means look in row 1 (don't forget 0 base).

Another example:
If your 2byteRPM is 1500, then the INPUT is 1500, and the output will be 2.5, this means look in row 2 and do a 50% interpolate with row 3

So the OUTPUT variable is used as the INPUT variable in the actual 3d table.
Reply
Old Feb 20, 2008 | 08:24 PM
  #50  
burgers22's Avatar
Evolved Member
 
Joined: Jan 2006
Posts: 953
Likes: 2
From: Oxfordshire
Gotcha. Thanks tephra.

MB
Reply
Old Mar 20, 2008 | 05:39 AM
  #51  
sba's Avatar
sba
Evolving Member
 
Joined: Nov 2007
Posts: 153
Likes: 2
From: East Europe
Can you help young people willing to learn to disassembly???
I'm trying to find some books/lessons/tutorials to understand how this ecu works and how can i learn to disassembly the roms.

If somebody will can do this, i think all the community will win something.

Sabin
Reply
Old Mar 20, 2008 | 06:28 AM
  #52  
tephra's Avatar
EvoM Guru
15 Year Member
iTrader: (6)
 
Joined: Feb 2007
Posts: 9,486
Likes: 67
From: Melbourne, Australia
best way is to do what I said in post #2 and have a look.

that and use another disasm as a source reference
Reply
Old Mar 20, 2008 | 06:38 AM
  #53  
Jack_of_Trades's Avatar
Evolved Member
iTrader: (17)
 
Joined: Jun 2007
Posts: 3,523
Likes: 2
From: Opelika,AL
Posting questions like burgers did will help everyone out too. I just learned something new. I really need to learn how the references all work and how one tables output corresponds with the next tables input.
Reply
Old Mar 20, 2008 | 12:50 PM
  #54  
JohnBradley's Avatar
Evolved Member
Shutterbug
Liked
Loved
Community Favorite
iTrader: (30)
 
Joined: Jan 2004
Posts: 11,406
Likes: 78
From: Northwest
Wow...I really need to get crackin on this. I understand about 35% of what I just read but I think when I have it in front of me and start asking questions and correlate answers to what I am seeing it will be like the old days of hex editing videogames.
Reply
Old Mar 20, 2008 | 12:54 PM
  #55  
l2r99gst's Avatar
Evolved Member
iTrader: (2)
 
Joined: Mar 2004
Posts: 3,499
Likes: 4
From: CA
Originally Posted by JohnBradley
...like the old days of hex editing videogames.
That was fun, wasn't it?

I remember I did that with Diablo where you could hex edit the characters to give them as much strength and money as you wanted. It made the game a lot easier when you could beat the final character with one swipe of your sword.

Anyway, back on topic.
Reply
Old Mar 20, 2008 | 12:58 PM
  #56  
JohnBradley's Avatar
Evolved Member
Shutterbug
Liked
Loved
Community Favorite
iTrader: (30)
 
Joined: Jan 2004
Posts: 11,406
Likes: 78
From: Northwest
BWAHAHAHA, Eric TOTALLY knows what I am talking about.

I used to use the gameshark to hack GT1 and 2 as well. Who wants a heavy underpowered car with not enough tire? Not me

Or playing mass online player games like Freelancer and pissing people off cause I have secret wormholes, bases, and a ship that can cross known space in 30 seconds
Reply
Old Mar 20, 2008 | 07:05 PM
  #57  
tephra's Avatar
EvoM Guru
15 Year Member
iTrader: (6)
 
Joined: Feb 2007
Posts: 9,486
Likes: 67
From: Melbourne, Australia
lol - I hacked privateer to give me 255 missiles instead of 20! only when I needed to kill lots enemies thou!
Reply
Old Mar 20, 2008 | 10:26 PM
  #58  
Jack_of_Trades's Avatar
Evolved Member
iTrader: (17)
 
Joined: Jun 2007
Posts: 3,523
Likes: 2
From: Opelika,AL
So one of these hex values is the RAM address for the load axis and the other hex value is for the RPM axis? I see people renaming the the 16bit code to something like 'RAM_load', how would you tag it like that?

Also, how do you know which code is the output value of the table and which one is the input value?

Also, what is this 'lookup table'?

Last edited by Jack_of_Trades; Mar 20, 2008 at 10:46 PM.
Reply
Old Mar 21, 2008 | 09:39 AM
  #59  
taavisev's Avatar
Newbie
 
Joined: Apr 2004
Posts: 60
Likes: 0
From: Estonia
help needed!
on the picture where should i but the 0xFFFF and where goes 0xFFFF0000

I have been testing everything but nothing works for me only when i leave as it is then i get something but the values are not right.

thanx
Attached Thumbnails IDA Pro tutorial request-nr.jpg  

Last edited by taavisev; Mar 21, 2008 at 09:44 AM.
Reply
Old Mar 21, 2008 | 09:04 PM
  #60  
tephra's Avatar
EvoM Guru
15 Year Member
iTrader: (6)
 
Joined: Feb 2007
Posts: 9,486
Likes: 67
From: Melbourne, Australia
set your RAM start address to 0xFFFF0000 and RAM size to 0xFFFF
Reply



All times are GMT -7. The time now is 08:12 AM.