I have been trying to figure out how the addresses for 2-byte logging are actually found. It seems that people are requesting it, and someone posts up the values to use. But how are those values found?

 

Through dissassembling the code contained in the ROM.

 

its found by looking at the fuel/ign maps then going to the routines that use them...

u need to use IDA.

Did I post up 2byte load for your ROMID already?

 

Would love some help for 2byte load for this romid 89970017. The MUT table hex I think is 33fcc.

Matt romid should be 80700010

 

It is 80700010 and it hasnt been posted yet. The big question is why Mitsubishi didn't allow the full load range to be viewed in the first place? Surely even at the factory level there are circumstances where they need to see what is going on under full load. So Mr Tephra sir, what is actually in the code that says to look at one location over another for its data? I dont need to know the code itself, just the logic behind it, and what it looks for.

BTW, I am not a newbie. Almost all of the roughly 220 maps I have found have been without any disassembly, so I figured there was a way to find it. There is a scale range that looks for all the world like the 2-byte load scale in there, but knowing what value it stops reading at is the other issue. It scales from 0 to 320 as a max, but our ECU has a map load scale up to 260 in the main maps. Just interested in the journey here, not just the destination.

 

Matt you need to get into the asm, then it all will become fairly obvious...

looking up axis's for maps becomes very easy once u get into asm..

I will try and find 2byte for u, can you pls post hi fuel and hi ign address's? (just 1...)

 

ok try logging 0xFFFF6978 as your 2byte load...

 

I will give it a try in the next day or so. Thanks for your efforts, it's much appreciated.

 

I would love to get into asm. I might look into getting IDA, but the trouble is I am a tuner with a Physics background, not an IT background. :-)

 

yeah... which makes identifying maps a lot easier for you - as you can understand the need for the map in the first place...

ps - can you tell me the location of the rpm injector cut.. I want to try and find it in yours/mine based on ASM

cheers
d.

 

For 80700010 try the decel fuel cut resume rpm @ 3a28 and there are 11 elements to the map. It appears to be an rpm offset going by the size of the numbers. I didnt spend a huge amount of time on it, but it appeared to be vs engine temp which would make the most sense as that is how we map aftermarket systems. So maybe an rpm offset to the target idle or something similar.

If you want new maps! I have ~30 fuel maps , ~39 ignition or knock related maps, ~11 idle maps, and 2 boost maps undefined. That will keep you busy if you want them :-) if you find the scales, I can find the application for them all.