HyperDisorder

iTrader: (1)

Has anyone got NLTS working on their 3 plug ECU (especially if your car didn't come with a top clutch switch) on the 96260009 based Evo 8?

I know that of course you need to install the switch first, but I haven't read anywhere that anyone has successfully installed the switch, plugged it in to a pin (presumably pin 88 like the Evo 9) and got it working, so that's why I'm asking. If it's trivial, sweet as I won't reinvent the wheel. But if no one's got it working, then I'm keen to get stuck in to sort it. I'm planning on sticking a switch in in a day or so to try it out anyway.

I'm playing around comparing roms in IDA Pro at the moment and am keen to understand all the bells and whistles that a lot of people are enjoying, including the mods courtesy of the gurus' efforts on this site. If anyone is willing to post up documented disassemblies of any rom, modded or not, it'd be muchly appreciated for getting me on my way.

I'm sure that I've found all of the lean spool definitions for the 96260009 rom, but until I learn how to check it properly in disassembled code, I better not post them up yet! Whether they're useful to anyone is another story haha

My car romid was originally 93660005 in case anyone was wondering.

HyperDisorder

iTrader: (1)

Bump.

No luck with pin 88 so far. Has no one ever gotten NLTS working with a 3 plug Evo 8 ECU then?

d1kid

Did you get anywhere with this mate? was looking into doing this:https://www.evolutionm.net/forums/7417817-post1152.html

When I get everything running, surely there is an unused input somewhere that can be referenced to in the code?

Taylor

d1kid

Ps Just noticed your In WHK, im in auckland..

HyperDisorder

iTrader: (1)

I've been slowly giving things a shot, and looking through the code, not that I'm understanding much of it yet.

There's definitely a fair few unused inputs!

I'll get back onto it tomorrow morn. Will ask Tephra for the location too.

That link is a way smarter way than what I was going to do. My way probably didn't even make too much sense.

What part of Auckland are you in d1kid? I'd be keen to meet up next time I head up

HyperDisorder

iTrader: (1)

Maybe academic, but I've gone through most of the MUT table to look for the clutch switch memory address just by testing in evoscan, given that I plugged the switch into pin 88 (like on all 3 plug ECU's).

Anyway, for 96260709, the MUT address is B8 for pin 88 (memory location FFFF8895).

Here's the xml - the switch turns on both bits 2 and 3 at once:

<DataListItem DataLog="Y" Display="ClutchFlag2" LogReference="ClutchFlag2" RequestID="B8" Eval="x bit 2" Unit="unit" MetricEval="" MetricUnit="" ResponseBytes="1" GaugeMin="0" GaugeMax="1" ChartMin="0" ChartMax="1" Notes=""/>
<DataListItem DataLog="Y" Display="ClutchFlag3" LogReference="ClutchFlag3" RequestID="B8" Eval="x bit 3" Unit="unit" MetricEval="" MetricUnit="" ResponseBytes="1" GaugeMin="0" GaugeMax="1" ChartMin="0" ChartMax="1" Notes=""/>

But, possibly a pointless excercise, as what matters is what Tephra set the memory address to.

d1kid

Hey mate, im in the central city.

So you have confirmed for pin88, the memory address is ffff8895

If we knew the memory address for the pin used in the 4plug ecu surely that would be the quickest way of finding the nlts function in the code?

I could be going off on the wrong tangent here, need to get ida pro set up myself and get my teeth into it, ive got a mate who has managed to port the launch control and antilag off cedys evo 6 stuff into v6 twin turbo vr4 ecus, might have to pay him a visit.

I havnt done much assembly, used to a higher level language.

I dont have ecu or loom in the car yet, but that is soon to change.

HyperDisorder

iTrader: (1)

I've compared the stock 88690015 rom to Tephra's old V2 mod (which had NLTS and knock CEL) in a Hex editor to find where the code was. I also compared it to the V7 version of the mod. I used that particular rom because it was from a 3 plug ECU and because I had the memory address for the clutch switch - which would've been correct for the V2, but maybe out of date come the V7. Anyway here it is:
https://www.evolutionm.net/forums/ec...-shift-15.html

Nowhere in the mod did I find FFFF6A35 in the Hex editor, so things aren't that straight forward I think. Gotta learn to read disassembled code better! Maybe there's some masked mapping (seeing as the clutch info required is a bit, not a word), or a length of words are being referenced in some way, not starting with FFFF6A35. Speculation is free isn't it?

A much better idea to get the memory location for 96260709 off Tephra instead of continuing with 88590015 I reckon though.

d1kid

What rom are you running? Im hoping for a Rom that will work on my 3plug evo 8 mr ecu, which will do speed density, live tuning and nlts as well as antilag through sas valve

I think I could be dreaming.. Does your 96260009 have the sas/als code in it?

donner

iTrader: (1)

Yes, 9626 does have SAS code in it.

donner

iTrader: (1)

Ok, in 96260709 clutch flag is expected to be at 0x88CB (or 0x88CA...), this is the same address as 96530706 is using (9653 is used in four plug ecu's). 88CB does not exist in MUT table so if you want to check if it is activated when you press clutch, you need to add it on MUT table.

HyperDisorder

iTrader: (1)

As far as I know, there is no SD rom for 96260709. But I think that at least one or two people have gotten 96530706 working on their 3-plug ECU's.
Alternatively send some money to someone who could patch 96260709

I've been trying 88CA in the rom with no luck yet (I think that my probe to ground the pins is a bit sub-standard though). I did read somewhere to add 1 to the memory address and try again (i.e. 88CB). Is there any reason for this?

donner

iTrader: (1)

Yes, 88CA (or 88CB, logged both) is not correct one for pin 88 in 3 plug ecu. I also tried every other N/C pin and no one setted 88CA. It seems that 8895 bit 1 was set when pin 88 was grounded so conditions for NLTS activation should be changed in code or atleast 88CA bit 0 is not correct one with pin 88.

88CA is also used for Auto ICS (bit 6, 0x40) and it works correctly (and then map switch from auto ics works and so on...).

HyperDisorder

iTrader: (1)

Would be nice if it were as easy to change the memory location to pin 88, then get the map switching via the map-switching harness instead of using 88CA... I'm just dreaming though. Probably not a good idea to just go try. Although, I think that I'll see if pin 64 does work for map switching tomorrow (memory location FFFF8929 I think).

I'll see if 88CB logs anything for any pins, too. If no luck there, then maybe those of us who want NLTS could send Tephra another donation to get 8895 to work

d1kid

Ok Found the NLTS Code



Also found the altmap code and it is doing similar, but testing it against 0x40

This is the livemap version, 96532706

So this would be where to change the memory location

Not too keen on using pin88, Is there a pin that when grounded only flags one memory location? even better if it just flagged bit 1, because it would be straight forward to change the address

also, Tephra, couldn't find any license or Copyright on your work, so hoping it is ok to post the above, if not contact me and I will remove it ASAP