Alfa bin files
Re: Alfa bin files
Ok didn't really phrase the question properly...
DPTR loads at 0000
The question should have been when the lcall references outside the code area what does it reference?
The info has worked well found at least 1 multiply function and another 3b lookup....
Spare time is at a premium so it's slow going.
Still trying to figure the DPTR loads the PC doesn't seem to match???
DPTR loads at 0000
The question should have been when the lcall references outside the code area what does it reference?
The info has worked well found at least 1 multiply function and another 3b lookup....
Spare time is at a premium so it's slow going.
Still trying to figure the DPTR loads the PC doesn't seem to match???
Re: Alfa bin files
Things are going well when I get the time
Starting to build routines...
Looking for the conversions...
Data rx tx.....
Still having trouble trying to make the 2d 3d lookups reference a table, thinking its something to do with an offset from a lcall outside the rom area
Found another couple of multiples and a div routine.....
Starting to build routines...
Looking for the conversions...
Data rx tx.....
Still having trouble trying to make the 2d 3d lookups reference a table, thinking its something to do with an offset from a lcall outside the rom area
Found another couple of multiples and a div routine.....
Re: Alfa bin files
Ok have the conversion db tables found the table lookup calls
Still working on the conversion functions......
Still working on the conversion functions......
Re: Alfa bin files
Found something that looks alot like constant lookups
Its better now not as frustrating
Its better now not as frustrating
- antus
- Site Admin
- Posts: 8253
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: Alfa bin files
Sounds like your making really good progress
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Re: Alfa bin files
yeah Festys stuff isn't exactlly the same but close enough for a guide to get it started.
Now it's a slow methodical run through the code, finding the obvious then going back and working with
whats left......
Now it's a slow methodical run through the code, finding the obvious then going back and working with
whats left......
Re: Alfa bin files
My Motronic plug-in for TP is still a bit rough around the edges, but it works so if you want to do some data logging PM me.
And if you can get me a pic of the ECU's digital board, I'll see if my RT module will work with your ECU.
Have you worked out how the 2d/3d table lookup routine works?
I've documented it in plain english if you're still fighting with it...
And if you can get me a pic of the ECU's digital board, I'll see if my RT module will work with your ECU.
Have you worked out how the 2d/3d table lookup routine works?
I've documented it in plain english if you're still fighting with it...
Re: Alfa bin files
Found a lot of references to the area just before the MAP data area.
Looks like the A/D and other conversion tables and constants.
Have ljmp and lcall addresses.
There are no disassembled references that relate to the MAP area itself.
? Is there an adjustment to the addressing reference that I'm missing...
Another problem is there are mov calls to the area outside the ROM code.
These are addressed to h8000 and greater????
Bit lost on the last one........
Looks like the A/D and other conversion tables and constants.
Have ljmp and lcall addresses.
There are no disassembled references that relate to the MAP area itself.
? Is there an adjustment to the addressing reference that I'm missing...
Another problem is there are mov calls to the area outside the ROM code.
These are addressed to h8000 and greater????
Bit lost on the last one........
Re: Alfa bin files
OK heres a question i have
the disassembly looks ok until i see this
ljmp 8029h
this runs through to
mov dptr #9f29h
movc a,@a+dptr
my bin finishes at 7fffh
I believe i have found the MAP lookup routines however they all have lcalls into the 8000 - 9fff region???????
Any Ideas??????????????
the disassembly looks ok until i see this
ljmp 8029h
this runs through to
mov dptr #9f29h
movc a,@a+dptr
my bin finishes at 7fffh
I believe i have found the MAP lookup routines however they all have lcalls into the 8000 - 9fff region???????
Any Ideas??????????????
Re: Alfa bin files
I recently got the opportunity to have a look at a rather rare motronic ECU from an alfa 164 24v Q4 (super-hi-tech 4wd model), and on reading the eprom found the same empty space from 0-1FFF... there appears to be an eprom on-board that occupies this space and is used for things like the immobiliser etc.DieselBob wrote:MOTRONIC M7.1
This is for a Motronic M1.7.
Some extracts…
0x0000 - 0x1fff (Main internal code ... I need a friend at BOSCH!)
So I connected to the ECU with my TP plugin and was able to download the bin for it
This ECU has been modded for immo delete apparently (and the eprom has been replaced with one from the non-immo version of this ECU) and I'm not sure how close it will be to the M1.7's code but imagine it would be similar...
- Attachments
-
- internal_eprom.bin
- (8 KiB) Downloaded 317 times