EvoScan v2.6 Beta11 now supports EvoX and OpenPort2.0 datalogging
Evolved Member
Joined: Mar 2008
Posts: 730
Likes: 3
From: Lattitude 48.38°, Longitude 17.58°, Altitude 146m = Slovakia, for common dude
Dave, I have just spitted out what I have found in 7-9 ECU's, hoping someone with standard tool (e.g. ELM327 based) will try it out. If the translation from OBDII to CAN
is straight forward and they have kept the functionality in CAN processing then X guys could benefit from my finding. I only hope they have retained the functionality with CAN, but I cannot test it, nor confirm it via disassembly.
is straight forward and they have kept the functionality in CAN processing then X guys could benefit from my finding. I only hope they have retained the functionality with CAN, but I cannot test it, nor confirm it via disassembly.
Evolved Member
Joined: Mar 2008
Posts: 730
Likes: 3
From: Lattitude 48.38°, Longitude 17.58°, Altitude 146m = Slovakia, for common dude
ok.
well MUT technically isn't OBD - as far as I know (Hamish told me) the sequence for CT9A is:
send 1byte "0x00" init code @ 5bps
set baudrate to 15625bps
receive 3 bytes - just make sure you get 3
send 1byte request which is the MUTID - ie 0x26
receive 1byte response for that ID
Now 0x00 doesn't work on the X. 0x33 which is the REAL OBD init code doesn't work either, 0x10 DOES work but that's something different again (repeating sequence of key info @ 10400bps)
I spent a LOT of time looking at the disasm trying to uncover the new init code. But I can't find it.
Also the MUT_TABLE is refernced ONLY in the serial parts of the code, No CAN routines are associated with the MUT_TABLE.. So I think its unlikely that MUTTABLE over CAN works...
I will try some more init codes, but apart from that we are up a dirty creak without a paddle...
well MUT technically isn't OBD - as far as I know (Hamish told me) the sequence for CT9A is:
send 1byte "0x00" init code @ 5bps
set baudrate to 15625bps
receive 3 bytes - just make sure you get 3
send 1byte request which is the MUTID - ie 0x26
receive 1byte response for that ID
Now 0x00 doesn't work on the X. 0x33 which is the REAL OBD init code doesn't work either, 0x10 DOES work but that's something different again (repeating sequence of key info @ 10400bps)
I spent a LOT of time looking at the disasm trying to uncover the new init code. But I can't find it.
Also the MUT_TABLE is refernced ONLY in the serial parts of the code, No CAN routines are associated with the MUT_TABLE.. So I think its unlikely that MUTTABLE over CAN works...
I will try some more init codes, but apart from that we are up a dirty creak without a paddle...
Evolved Member
Joined: Mar 2008
Posts: 730
Likes: 3
From: Lattitude 48.38°, Longitude 17.58°, Altitude 146m = Slovakia, for common dude
ok.
well MUT technically isn't OBD - as far as I know (Hamish told me) the sequence for CT9A is:
send 1byte "0x00" init code @ 5bps
set baudrate to 15625bps
receive 3 bytes - just make sure you get 3
send 1byte request which is the MUTID - ie 0x26
receive 1byte response for that ID
Now 0x00 doesn't work on the X. 0x33 which is the REAL OBD init code doesn't work either, 0x10 DOES work but that's something different again (repeating sequence of key info @ 10400bps)
I spent a LOT of time looking at the disasm trying to uncover the new init code. But I can't find it.
Also the MUT_TABLE is refernced ONLY in the serial parts of the code, No CAN routines are associated with the MUT_TABLE.. So I think its unlikely that MUTTABLE over CAN works...
I will try some more init codes, but apart from that we are up a dirty creak without a paddle...
well MUT technically isn't OBD - as far as I know (Hamish told me) the sequence for CT9A is:
send 1byte "0x00" init code @ 5bps
set baudrate to 15625bps
receive 3 bytes - just make sure you get 3
send 1byte request which is the MUTID - ie 0x26
receive 1byte response for that ID
Now 0x00 doesn't work on the X. 0x33 which is the REAL OBD init code doesn't work either, 0x10 DOES work but that's something different again (repeating sequence of key info @ 10400bps)
I spent a LOT of time looking at the disasm trying to uncover the new init code. But I can't find it.
Also the MUT_TABLE is refernced ONLY in the serial parts of the code, No CAN routines are associated with the MUT_TABLE.. So I think its unlikely that MUTTABLE over CAN works...
I will try some more init codes, but apart from that we are up a dirty creak without a paddle...
If I am not mistaken standard CAN uses OBD protocol i.e. Mode, PID to retrieve operational parameters. If I should test this one out, I would connect any CAN standard device to CAN ECU, and I would send Mode A0 PID 07 request to ECU
which is responsible for engine at the bus to see if it fits with MUT request 07.
yeh on the 3 bytes
- Hamish ignores them, just ensures he gets 3 back...
ok so YOUR saying that a mode of 0xA0 should allow access to the MUT TABLE.
well I can test that out - HOWEVER like I said I find ZERO links between the MUT_TABLE and the CAN routines.
I have found the main CAN routine which handles all the different MODES, ie 0x01 (current), 0x21 (by ID)... etc etc
- Hamish ignores them, just ensures he gets 3 back...ok so YOUR saying that a mode of 0xA0 should allow access to the MUT TABLE.
well I can test that out - HOWEVER like I said I find ZERO links between the MUT_TABLE and the CAN routines.
I have found the main CAN routine which handles all the different MODES, ie 0x01 (current), 0x21 (by ID)... etc etc
Thread Starter
Former Sponsor
iTrader: (4)
Joined: Dec 2003
Posts: 723
Likes: 1
From: TGA, New Zealand
No, what I have meant is standard OBDII init sequence as described e.g. here, and then you are sending OBDII requests down the line e.g. Mode 01 PID 05 would return standard OBDII temperature.
Now if you are initialized and connection is build up for OBDII communication according to ISO9141, one can send Mode=A0, PID= MUT_RequestId to get value from MUT table. e.g. Mode A0 PID 26 for knock sum retrieval.
If they have retained the functionality with CAN then it would be helpful for X guys, but as I have said, I am not that far with CAN ECU disassembly yet to confirm it, and I have no mitsu CAN ECU around
Now if you are initialized and connection is build up for OBDII communication according to ISO9141, one can send Mode=A0, PID= MUT_RequestId to get value from MUT table. e.g. Mode A0 PID 26 for knock sum retrieval.
If they have retained the functionality with CAN then it would be helpful for X guys, but as I have said, I am not that far with CAN ECU disassembly yet to confirm it, and I have no mitsu CAN ECU around

Thread Starter
Former Sponsor
iTrader: (4)
Joined: Dec 2003
Posts: 723
Likes: 1
From: TGA, New Zealand
I looked back at January 2008 and we already know how to do MUT over OBDII using 0xA0. Here is the information from my website from last year:
Hybrid 95-99 DSM/3000GT/Eclipse (16Pin) Supported Vehicles:
EvoScan is the first to support these vehicles. Select "Hybrid" and select ECU "EFI" in EvoScan.
EvoScan software is confirmed working with these vehicles, using the EvoScan 1.3U Datalogger/Reprogramming cable.
34) Mitsubishi Eclipse/DSM (1995 and 1996 support Hybrid MUT Protocol)
35) Mitsubishi 3000GT (Hybrid MUT Protocol)
36) Mitsubishi Eclipse (Hybrid MUT Protocol)
Hybrid 95-99 DSM/3000GT/Eclipse (16Pin) Supported Vehicles:
EvoScan is the first to support these vehicles. Select "Hybrid" and select ECU "EFI" in EvoScan.
EvoScan software is confirmed working with these vehicles, using the EvoScan 1.3U Datalogger/Reprogramming cable.
34) Mitsubishi Eclipse/DSM (1995 and 1996 support Hybrid MUT Protocol)
35) Mitsubishi 3000GT (Hybrid MUT Protocol)
36) Mitsubishi Eclipse (Hybrid MUT Protocol)




