Search found 378 matches

by mpaton
Tue Jan 21, 2020 8:45 am
Forum: EECGeeks
Topic: ROM1 address
Replies: 10
Views: 258

Re: ROM1 address

7826
by mpaton
Fri Oct 11, 2019 1:26 pm
Forum: EECGeeks
Topic: Disassembling Speed Density (SD) Injector Timing Table
Replies: 1
Views: 257

Re: Disassembling Speed Density (SD) Injector Timing Table

I've been hacking away at my Speed Density (SD) binary, and have run into a snag with me not understanding exactly what the following code is doing, or if i disassembled it incorrectly: ??InjTTable?? 22ea: 75,37,00,16,0a,10,20,4d,08,ff,94,00 struct Sub34, 0, 16, a,Q1, 20, 4d,ff08, 94 22f6: 96,37,00...
by mpaton
Sun Dec 09, 2018 6:54 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 2313

Re: Diagnostic Correctness: Open Loop at Idle?

So that calibration matches your TAG0 PCM, and the diagram shows a single thermactor air valve.

And yet you said you checked 3 check valves. What did I misunderstand?

Michael
by mpaton
Sat Dec 08, 2018 11:55 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 2313

Re: Diagnostic Correctness: Open Loop at Idle?

Thank you Micheal. I'm wondering, do DIY tuners have access to the EEC lookup table values and know the decision tree well enough to predict what EEC outputs ought to be based on inputs? By tuners, I'm guessing you mean the devices you can attach to your EEC-IV to allow you to inspect ROM and RAM v...
by mpaton
Sat Dec 08, 2018 2:25 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 2313

Re: Diagnostic Correctness: Open Loop at Idle?

As I look again at the code, I see that both MAP in inches of Mercury and Map frequency in Hz are part of the datastream available. I don't know which one Bosch has chosen to display, and it may be that the MAP value you got was accurate. 10:Hg at idle seems a reasonable value.
by mpaton
Fri Dec 07, 2018 12:24 am
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 2313

Re: Diagnostic Correctness: Open Loop at Idle?

Here's a couple of things you might look at. 1 your value of IAC value of 33% seems low compared to mine at 48% for idling in Neutral/Park. I see you've checked it, but I'm wondering if it could be sticking (as 33% is what's being commanded, it's just assumed that it works. If it sticks an integrato...
by mpaton
Sat Dec 01, 2018 11:34 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 2313

Re: Diagnostic Correctness: Open Loop at Idle?

Michael, I think the letters/numbers you need are TAG0. See attached photo of sticker. TAG0 is it indeed. This is the same "Strategy" as my own TOE0, and the "Calibration" is at least 95% the same. I'm going to just respond to this thread on this forum, the 460ford one might prefer you had a carbur...
by mpaton
Fri Nov 30, 2018 6:22 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 2313

Re: Diagnostic Correctness: Open Loop at Idle?

I've answered some of your questions on th eford460 forum, so I won't type them in here again, except to say that if you can tell us the calibration code from your PCM label, I may be able to answer more questions. And also if this is a California spec truck. The figure you have labelled as short Te...
by mpaton
Wed Sep 26, 2018 10:17 pm
Forum: EECGeeks
Topic: Why auto disassembly is tough
Replies: 310
Views: 74512

Re: Why auto disassembly is tough

Actually, I've written the code so that it should handle ALL 16 banks, so there !! Well, yeah, OK, code does check for 0,1,8,9 in a few places, but for all addressing, it's full 20 bits, 16 banks capable. Anyone got a (8065) bin with >4 banks ?? I'm sure many people do, possibly even yourself if yo...
by mpaton
Tue Sep 25, 2018 10:38 pm
Forum: EECGeeks
Topic: Why auto disassembly is tough
Replies: 310
Views: 74512

Re: Why auto disassembly is tough

So that means you're not going to support any more than 4 banks? :wink:
by mpaton
Tue Sep 25, 2018 5:13 pm
Forum: EECGeeks
Topic: Why auto disassembly is tough
Replies: 310
Views: 74512

Re: SAD 3.08 released

tvrfan wrote:
Mon Sep 24, 2018 6:52 pm
I have a couple of bins which seem to have two code banks (not allowed!!) but from names, may be a dump of original followed by modded version, so I have changed SAD to print first code bank found.
I don't understand the issue with 2 banks of code.
by mpaton
Tue Jun 13, 2017 2:51 pm
Forum: EECGeeks
Topic: question about ALTSTACK
Replies: 2
Views: 2015

Re: question about ALTSTACK

When the Alt Stack is used, it is often (as here) used for the background dispatch tables/lists.

In the PTP2 bin, these start at 1A4D6 and continue through 1A70C. !A634 is in between these, and so when the Alt Ret instruction executes, it will go to the address at 1A634 which is 831DE
by mpaton
Fri Dec 16, 2016 2:36 pm
Forum: Tuning the EEC....
Topic: Tuning Marine Ford 351W GT40
Replies: 80
Views: 37812

Re: Tuning Marine Ford 351W GT40

The bin is good.
by mpaton
Tue Jan 19, 2016 4:35 pm
Forum: EECGeeks
Topic: Suspected FN037 behavior in X2J (Taurus SHO)
Replies: 11
Views: 6976

Re: Suspected FN037 behavior in X2J (Taurus SHO)

It's a similar concept to FN037, but FN037 is a simple function of N. X2J uses an Alpha-N table and then corrects that with ACT and normalizes with BP, at [code] 687C EF68F5 L687C call FLUW_UU 687F 0801 word FN070(N) (#$C108) 6881 AA00 vect N 6883 A03830 ldw REG_30,REG_38 6886 EF5EF5 call FLUW_UU 68...
by mpaton
Fri Nov 06, 2015 4:08 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 23240

Re: Inline parameters(arguments)

dividing by 4 is SLOW, shifting right by 2 places is much faster, and gives the same answer......... That fact that the LZBW reads an upper byte of a word therefore means from a maths point of view that it is ...... ? Given your target audience, I don't think they are quite that far along to infer ...
by mpaton
Fri Nov 06, 2015 11:25 am
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 23240

Re: Inline parameters(arguments)

OK, here's some elaboration of exactly the form of replies I need to see. I want to identify the registers and memory of interest for the example 9code fragment), and I want to see the contents of each register before and after each instruction. The relevant registers here are PC the Program Counter...
by mpaton
Thu Nov 05, 2015 12:52 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 23240

Re: Inline parameters(arguments)

Let me try for one more, and possibly last time, to steer this back to the explanation of how to disassemble 8061 code. This is the second time I've had to quote a big chunk of my own post to try and get it back on track. Now, I hope we can go back to my earlier simpler example from HHX0, specifical...
by mpaton
Thu Oct 29, 2015 11:02 am
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 23240

Re: Inline parameters(arguments)

very good derek thats much easier to follow ------------------------------------------------------------------------------------ call 3654 = stack [3e2b] scall 3695 = stack [3656, 3e2b] popw = 38 = 3656, stack [3e2b] popw = 3a = 3e2b, stack [] ldb 3c = [3e2b], 3c = 08, 3a = 3e2c ldb 3d = [3e2c], 3d...
by mpaton
Wed Oct 28, 2015 5:20 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 23240

Re: Inline parameters(arguments)

I saw that, but didn't relate how doing all that would help with what tvrfan's point was with these 6 lines of code. I have no clue what the stack is already loaded with. this is all about understanding and not guessing. Even if you guess correctly, you will have no understanding. Even decip[ha's a...
by mpaton
Wed Oct 28, 2015 1:52 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 23240

Re: Inline parameters(arguments)

You haven't shown me that this is anything more than another guess. Another assumption... I don't know what you are looking for to convince you. Any constructive feedback about my next post? well, yeah, I thought I was already being quite explicit in post http://eectuning.org/forums/viewtopic.php?f...
by mpaton
Wed Oct 28, 2015 10:35 am
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 23240

Re: Inline parameters(arguments)

Ok, that explains more about what it is doing. The CALL pushes a return address to the stack. However because you don't want to return to data, the code using the inline data is increment the pointer pushed by the CALL past the data section. So the RET pops off the stack the correct return address....
by mpaton
Tue Oct 27, 2015 6:28 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 23240

Re: Inline parameters(arguments)

I doubt much is going to be learned by just guessing, even if you guess correctly. So let me advise against doing that. The call and return instructions have been explained above, and the push and pop can come from the microcontroller manual, or just about any microprocessor manual. So the method sh...
by mpaton
Sat Oct 24, 2015 12:28 pm
Forum: EECGeeks
Topic: Looking up a 2D table; How to recognize the code
Replies: 17
Views: 8550

Re: Looking up a 2D table; How to recognize the code

Could you put up a link for ironman please?
by mpaton
Fri Oct 23, 2015 7:08 pm
Forum: EECGeeks
Topic: Looking up a 2D table; How to recognize the code
Replies: 17
Views: 8550

Re: Looking up a 2D table; How to recognize the code

ironmanisanemic wrote:
Do you have a link to the 8061 instruction guide? I dont believe i have it already.

Thank you
That's a good point. Calling cgrey!

was this just not restored after the board crash a few years ago, or is it gone for good?

Michael
by mpaton
Fri Oct 23, 2015 6:55 pm
Forum: EECGeeks
Topic: word address requirements ?
Replies: 7
Views: 4765

Re: word address requirements ?

I don't know if there was a different processor for Ford ECUs before EEC-IV, but you will see code in 8061 that loads words a byte at a time. So this word on an address divisible by 2 business may not always have been the case.
by mpaton
Wed Oct 21, 2015 6:56 am
Forum: EECGeeks
Topic: Why are there inline parameters ?
Replies: 20
Views: 9477

Re: Why are there inline parameters ?

decipha wrote:The original ford code was written in C, I have actually seen with my own 2 a portion of the actual cbaza source code
i seriously doubt that earlier Ford bins were written in C. I don't doubt that there is pseudo code posing as documentation written in C.
by mpaton
Tue Oct 20, 2015 7:05 pm
Forum: EECGeeks
Topic: Why are there inline parameters ?
Replies: 20
Views: 9477

Re: Why are there inline parameters ?

People have asked before "Why did those morons do it that way?" Please take that to another thread. Humour me momentarily please. Is it a way to have data where it is needed so the 8061 can keep accepting bytes from RAM or ROM in a continuous stream instead of issuing requests for other memory addr...
by mpaton
Tue Oct 20, 2015 12:10 pm
Forum: EECGeeks
Topic: Looking up a 2D table; How to recognize the code
Replies: 17
Views: 8550

Re: Looking up a 2D table; How to recognize the code

So now ironman has "fixed" all the calls to the 1D lookups, what are they doing? Here's the first call 3F3B EF6006 call L459E 3F3E 8E00 word $008E 3F40 B600 word $00B6 or maybe we have 3F3B EF6006 call L459E 3F3E 8E byte $8E 3F3F 00 byte $00 3F40 B6 byte $B6 3F41 00 byte $00 depending on whether we ...
by mpaton
Sun Oct 18, 2015 10:01 pm
Forum: EECGeeks
Topic: Who is disassembling 8061 or 8065 code?
Replies: 93
Views: 42788

Re: Who is disassembling 8061 or 8065 code?

So i believe i have found all of the references given so far. mpaton, can you please check my work? i have attached my Dir file. Thanks That's a great effort. I think you've got almost all of them. But have a look at addresses 58A0 58B0 62F7 6628 6905 and see what you think. You haven't been carele...
by mpaton
Sun Oct 18, 2015 7:46 am
Forum: EECGeeks
Topic: Who is disassembling 8061 or 8065 code?
Replies: 93
Views: 42788

Re: Who is disassembling 8061 or 8065 code?

So searching for 459E, a couple of things seemed out of place. A rombnk opcode and an invalid opcode. Are these the sort of things that tip you off to LCALL 459E ? Those are, I'd say clues, to something not being right. And those clues do need to be fullowed up. In the case of 459E however, I got t...