Search found 381 matches
- Mon May 31, 2021 8:21 am
- Forum: EECGeeks
- Topic: MAP Sensor Transfer Function Lookup
- Replies: 1
- Views: 3789
Re: MAP Sensor Transfer Function Lookup
I've never seen a lookup table for the conversion of frequency to pressure. As in the LHBH document, it's a polynomial equation that is used. In your bin, it's at 0x34A0
- Sun Nov 15, 2020 3:50 pm
- Forum: EECGeeks
- Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
- Replies: 79
- Views: 79455
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
You need to get out more and read more bins if you think there is anything missing here. You've either forgotten or never realized that the way these bin files are put together is full of more history than sense. There is no canonical way that the banks are put in the "bin" file. People made things ...
- Sun Nov 15, 2020 1:36 am
- Forum: EECGeeks
- Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
- Replies: 79
- Views: 79455
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Your files are good.baba_banana wrote: ↑Sat Nov 14, 2020 9:01 pm but it would be great if someone could clarify if my files are good or the program can't read it or I'm lacking some files.
thanks
attached are the files forementioned
- Tue Jan 21, 2020 8:45 am
- Forum: EECGeeks
- Topic: ROM1 address
- Replies: 19
- Views: 21375
Re: ROM1 address
7826
- Fri Oct 11, 2019 1:26 pm
- Forum: EECGeeks
- Topic: Disassembling Speed Density (SD) Injector Timing Table
- Replies: 1
- Views: 5325
Re: Disassembling Speed Density (SD) Injector Timing Table
I've been hacking away at my Speed Density (SD) binary, and have run into a snag with me not understanding exactly what the following code is doing, or if i disassembled it incorrectly: ??InjTTable?? 22ea: 75,37,00,16,0a,10,20,4d,08,ff,94,00 struct Sub34, 0, 16, a,Q1, 20, 4d,ff08, 94 22f6: 96,37,00...
- Sun Dec 09, 2018 6:54 pm
- Forum: Tuning the EEC....
- Topic: Diagnostic Correctness: Open Loop at Idle?
- Replies: 18
- Views: 25387
Re: Diagnostic Correctness: Open Loop at Idle?
So that calibration matches your TAG0 PCM, and the diagram shows a single thermactor air valve.
And yet you said you checked 3 check valves. What did I misunderstand?
Michael
And yet you said you checked 3 check valves. What did I misunderstand?
Michael
- Sat Dec 08, 2018 11:55 pm
- Forum: Tuning the EEC....
- Topic: Diagnostic Correctness: Open Loop at Idle?
- Replies: 18
- Views: 25387
Re: Diagnostic Correctness: Open Loop at Idle?
Thank you Micheal. I'm wondering, do DIY tuners have access to the EEC lookup table values and know the decision tree well enough to predict what EEC outputs ought to be based on inputs? By tuners, I'm guessing you mean the devices you can attach to your EEC-IV to allow you to inspect ROM and RAM v...
- Sat Dec 08, 2018 2:25 pm
- Forum: Tuning the EEC....
- Topic: Diagnostic Correctness: Open Loop at Idle?
- Replies: 18
- Views: 25387
Re: Diagnostic Correctness: Open Loop at Idle?
As I look again at the code, I see that both MAP in inches of Mercury and Map frequency in Hz are part of the datastream available. I don't know which one Bosch has chosen to display, and it may be that the MAP value you got was accurate. 10:Hg at idle seems a reasonable value.
- Fri Dec 07, 2018 12:24 am
- Forum: Tuning the EEC....
- Topic: Diagnostic Correctness: Open Loop at Idle?
- Replies: 18
- Views: 25387
Re: Diagnostic Correctness: Open Loop at Idle?
Here's a couple of things you might look at. 1 your value of IAC value of 33% seems low compared to mine at 48% for idling in Neutral/Park. I see you've checked it, but I'm wondering if it could be sticking (as 33% is what's being commanded, it's just assumed that it works. If it sticks an integrato...
- Sat Dec 01, 2018 11:34 pm
- Forum: Tuning the EEC....
- Topic: Diagnostic Correctness: Open Loop at Idle?
- Replies: 18
- Views: 25387
Re: Diagnostic Correctness: Open Loop at Idle?
Michael, I think the letters/numbers you need are TAG0. See attached photo of sticker. TAG0 is it indeed. This is the same "Strategy" as my own TOE0, and the "Calibration" is at least 95% the same. I'm going to just respond to this thread on this forum, the 460ford one might prefer you had a carbur...
- Fri Nov 30, 2018 6:22 pm
- Forum: Tuning the EEC....
- Topic: Diagnostic Correctness: Open Loop at Idle?
- Replies: 18
- Views: 25387
Re: Diagnostic Correctness: Open Loop at Idle?
I've answered some of your questions on th eford460 forum, so I won't type them in here again, except to say that if you can tell us the calibration code from your PCM label, I may be able to answer more questions. And also if this is a California spec truck. The figure you have labelled as short Te...
- Wed Sep 26, 2018 10:17 pm
- Forum: EECGeeks
- Topic: Why auto disassembly is tough
- Replies: 310
- Views: 375215
Re: Why auto disassembly is tough
Actually, I've written the code so that it should handle ALL 16 banks, so there !! Well, yeah, OK, code does check for 0,1,8,9 in a few places, but for all addressing, it's full 20 bits, 16 banks capable. Anyone got a (8065) bin with >4 banks ?? I'm sure many people do, possibly even yourself if yo...
- Tue Sep 25, 2018 10:38 pm
- Forum: EECGeeks
- Topic: Why auto disassembly is tough
- Replies: 310
- Views: 375215
Re: Why auto disassembly is tough
So that means you're not going to support any more than 4 banks? 

- Tue Sep 25, 2018 5:13 pm
- Forum: EECGeeks
- Topic: Why auto disassembly is tough
- Replies: 310
- Views: 375215
- Tue Jun 13, 2017 2:51 pm
- Forum: EECGeeks
- Topic: question about ALTSTACK
- Replies: 2
- Views: 6622
Re: question about ALTSTACK
When the Alt Stack is used, it is often (as here) used for the background dispatch tables/lists.
In the PTP2 bin, these start at 1A4D6 and continue through 1A70C. !A634 is in between these, and so when the Alt Ret instruction executes, it will go to the address at 1A634 which is 831DE
In the PTP2 bin, these start at 1A4D6 and continue through 1A70C. !A634 is in between these, and so when the Alt Ret instruction executes, it will go to the address at 1A634 which is 831DE
- Fri Dec 16, 2016 2:36 pm
- Forum: Tuning the EEC....
- Topic: Tuning Marine Ford 351W GT40
- Replies: 81
- Views: 128602
Re: Tuning Marine Ford 351W GT40
The bin is good.
- Tue Jan 19, 2016 4:35 pm
- Forum: EECGeeks
- Topic: Suspected FN037 behavior in X2J (Taurus SHO)
- Replies: 11
- Views: 19077
Re: Suspected FN037 behavior in X2J (Taurus SHO)
It's a similar concept to FN037, but FN037 is a simple function of N. X2J uses an Alpha-N table and then corrects that with ACT and normalizes with BP, at [code] 687C EF68F5 L687C call FLUW_UU 687F 0801 word FN070(N) (#$C108) 6881 AA00 vect N 6883 A03830 ldw REG_30,REG_38 6886 EF5EF5 call FLUW_UU 68...
- Fri Nov 06, 2015 4:08 pm
- Forum: EECGeeks
- Topic: Inline parameters(arguments)
- Replies: 67
- Views: 71342
Re: Inline parameters(arguments)
dividing by 4 is SLOW, shifting right by 2 places is much faster, and gives the same answer......... That fact that the LZBW reads an upper byte of a word therefore means from a maths point of view that it is ...... ? Given your target audience, I don't think they are quite that far along to infer ...
- Fri Nov 06, 2015 11:25 am
- Forum: EECGeeks
- Topic: Inline parameters(arguments)
- Replies: 67
- Views: 71342
Re: Inline parameters(arguments)
OK, here's some elaboration of exactly the form of replies I need to see. I want to identify the registers and memory of interest for the example 9code fragment), and I want to see the contents of each register before and after each instruction. The relevant registers here are PC the Program Counter...
- Thu Nov 05, 2015 12:52 pm
- Forum: EECGeeks
- Topic: Inline parameters(arguments)
- Replies: 67
- Views: 71342
Re: Inline parameters(arguments)
Let me try for one more, and possibly last time, to steer this back to the explanation of how to disassemble 8061 code. This is the second time I've had to quote a big chunk of my own post to try and get it back on track. Now, I hope we can go back to my earlier simpler example from HHX0, specifical...
- Thu Oct 29, 2015 11:02 am
- Forum: EECGeeks
- Topic: Inline parameters(arguments)
- Replies: 67
- Views: 71342
Re: Inline parameters(arguments)
very good derek thats much easier to follow ------------------------------------------------------------------------------------ call 3654 = stack [3e2b] scall 3695 = stack [3656, 3e2b] popw = 38 = 3656, stack [3e2b] popw = 3a = 3e2b, stack [] ldb 3c = [3e2b], 3c = 08, 3a = 3e2c ldb 3d = [3e2c], 3d...
- Wed Oct 28, 2015 5:20 pm
- Forum: EECGeeks
- Topic: Inline parameters(arguments)
- Replies: 67
- Views: 71342
Re: Inline parameters(arguments)
I saw that, but didn't relate how doing all that would help with what tvrfan's point was with these 6 lines of code. I have no clue what the stack is already loaded with. this is all about understanding and not guessing. Even if you guess correctly, you will have no understanding. Even decip[ha's a...
- Wed Oct 28, 2015 1:52 pm
- Forum: EECGeeks
- Topic: Inline parameters(arguments)
- Replies: 67
- Views: 71342
Re: Inline parameters(arguments)
You haven't shown me that this is anything more than another guess. Another assumption... I don't know what you are looking for to convince you. Any constructive feedback about my next post? well, yeah, I thought I was already being quite explicit in post http://eectuning.org/forums/viewtopic.php?f...
- Wed Oct 28, 2015 10:35 am
- Forum: EECGeeks
- Topic: Inline parameters(arguments)
- Replies: 67
- Views: 71342
Re: Inline parameters(arguments)
Ok, that explains more about what it is doing. The CALL pushes a return address to the stack. However because you don't want to return to data, the code using the inline data is increment the pointer pushed by the CALL past the data section. So the RET pops off the stack the correct return address....
- Tue Oct 27, 2015 6:28 pm
- Forum: EECGeeks
- Topic: Inline parameters(arguments)
- Replies: 67
- Views: 71342
Re: Inline parameters(arguments)
I doubt much is going to be learned by just guessing, even if you guess correctly. So let me advise against doing that. The call and return instructions have been explained above, and the push and pop can come from the microcontroller manual, or just about any microprocessor manual. So the method sh...
- Sat Oct 24, 2015 12:28 pm
- Forum: EECGeeks
- Topic: Looking up a 2D table; How to recognize the code
- Replies: 17
- Views: 22863
Re: Looking up a 2D table; How to recognize the code
Could you put up a link for ironman please?
- Fri Oct 23, 2015 7:08 pm
- Forum: EECGeeks
- Topic: Looking up a 2D table; How to recognize the code
- Replies: 17
- Views: 22863
Re: Looking up a 2D table; How to recognize the code
That's a good point. Calling cgrey!ironmanisanemic wrote:
Do you have a link to the 8061 instruction guide? I dont believe i have it already.
Thank you
was this just not restored after the board crash a few years ago, or is it gone for good?
Michael
- Fri Oct 23, 2015 6:55 pm
- Forum: EECGeeks
- Topic: word address requirements ?
- Replies: 7
- Views: 12057
Re: word address requirements ?
I don't know if there was a different processor for Ford ECUs before EEC-IV, but you will see code in 8061 that loads words a byte at a time. So this word on an address divisible by 2 business may not always have been the case.
- Wed Oct 21, 2015 6:56 am
- Forum: EECGeeks
- Topic: Why are there inline parameters ?
- Replies: 20
- Views: 25218
Re: Why are there inline parameters ?
i seriously doubt that earlier Ford bins were written in C. I don't doubt that there is pseudo code posing as documentation written in C.decipha wrote:The original ford code was written in C, I have actually seen with my own 2 a portion of the actual cbaza source code
- Tue Oct 20, 2015 7:05 pm
- Forum: EECGeeks
- Topic: Why are there inline parameters ?
- Replies: 20
- Views: 25218
Re: Why are there inline parameters ?
People have asked before "Why did those morons do it that way?" Please take that to another thread. Humour me momentarily please. Is it a way to have data where it is needed so the 8061 can keep accepting bytes from RAM or ROM in a continuous stream instead of issuing requests for other memory addr...