Alfa bin files

Bosch Motronic etc ECUs and PCMs
User avatar
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
Location: Brisbane QLD

Re: Alfa bin files

Postby DieselBob » Thu Aug 02, 2012 5:59 pm

Ok didn't really phrase the question properly...
DPTR loads at 0000
The question should have been when the lcall references outside the code area what does it reference?

The info has worked well found at least 1 multiply function and another 3b lookup....
Spare time is at a premium so it's slow going.

Still trying to figure the DPTR loads the PC doesn't seem to match???

User avatar
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
Location: Brisbane QLD

Re: Alfa bin files

Postby DieselBob » Sun Aug 05, 2012 11:43 am

Things are going well when I get the time :)
Starting to build routines...
Looking for the conversions...
Data rx tx.....
Still having trouble trying to make the 2d 3d lookups reference a table, thinking its something to do with an offset from a lcall outside the rom area :(

Found another couple of multiples and a div routine.....

User avatar
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
Location: Brisbane QLD

Re: Alfa bin files

Postby DieselBob » Tue Aug 07, 2012 7:18 pm

Ok have the conversion db tables found the table lookup calls :)
Still working on the conversion functions......

User avatar
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
Location: Brisbane QLD

Re: Alfa bin files

Postby DieselBob » Wed Aug 08, 2012 7:27 pm

Found something that looks alot like constant lookups :D
Its better now not as frustrating

Site Admin
User avatar
Posts: 6163
Joined: Sat Feb 28, 2009 8:34 pm

Re: Alfa bin files

Postby antus » Wed Aug 08, 2012 10:46 pm

Sounds like your making really good progress :thumbup:
Have you read the FAQ? For lots of information and links to significant threads see here: viewtopic.php?f=7&t=1396

User avatar
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
Location: Brisbane QLD

Re: Alfa bin files

Postby DieselBob » Thu Aug 09, 2012 8:34 pm

yeah :) Festys stuff isn't exactlly the same but close enough for a guide to get it started.
Now it's a slow methodical run through the code, finding the obvious then going back and working with
whats left......

User avatar
Posts: 1036
Joined: Sat Apr 30, 2011 6:27 pm
Location: Narellan, NSW

Re: Alfa bin files

Postby festy » Thu Aug 16, 2012 8:47 am

My Motronic plug-in for TP is still a bit rough around the edges, but it works so if you want to do some data logging PM me.
And if you can get me a pic of the ECU's digital board, I'll see if my RT module will work with your ECU.

Have you worked out how the 2d/3d table lookup routine works?
I've documented it in plain english if you're still fighting with it...

User avatar
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
Location: Brisbane QLD

Re: Alfa bin files

Postby DieselBob » Fri Aug 17, 2012 4:11 pm

:) Found a lot of references to the area just before the MAP data area.
Looks like the A/D and other conversion tables and constants.
Have ljmp and lcall addresses.

There are no disassembled references that relate to the MAP area itself.
? Is there an adjustment to the addressing reference that I'm missing...

Another problem is there are mov calls to the area outside the ROM code.
These are addressed to h8000 and greater????

Bit lost on the last one........

User avatar
Posts: 164
Joined: Sun Mar 28, 2010 5:43 pm
Location: Brisbane QLD

Re: Alfa bin files

Postby DieselBob » Sat Aug 25, 2012 11:31 pm

OK heres a question i have

the disassembly looks ok until i see this

ljmp 8029h
this runs through to
mov dptr #9f29h
movc a,@a+dptr

my bin finishes at 7fffh

I believe i have found the MAP lookup routines however they all have lcalls into the 8000 - 9fff region???????

Any Ideas??????????????

User avatar
Posts: 1036
Joined: Sat Apr 30, 2011 6:27 pm
Location: Narellan, NSW

Re: Alfa bin files

Postby festy » Fri Nov 09, 2012 12:45 pm

DieselBob wrote:MOTRONIC M7.1
This is for a Motronic M1.7.

Some extracts…
0x0000 - 0x1fff (Main internal code ... I need a friend at BOSCH!)


I recently got the opportunity to have a look at a rather rare motronic ECU from an alfa 164 24v Q4 (super-hi-tech 4wd model), and on reading the eprom found the same empty space from 0-1FFF... there appears to be an eprom on-board that occupies this space and is used for things like the immobiliser etc.
So I connected to the ECU with my TP plugin and was able to download the bin for it ;)

This ECU has been modded for immo delete apparently (and the eprom has been replaced with one from the non-immo version of this ECU) and I'm not sure how close it will be to the M1.7's code but imagine it would be similar...
Attachments
internal_eprom.bin
(8 KiB) Downloaded 148 times

PreviousNext

Return to Bosch ECUs

Who is online

Users browsing this forum: No registered users and 3 guests