Search found 381 matches

by mpaton
Mon May 31, 2021 8:21 am
Forum: EECGeeks
Topic: MAP Sensor Transfer Function Lookup
Replies: 1
Views: 3789

Re: MAP Sensor Transfer Function Lookup

I've never seen a lookup table for the conversion of frequency to pressure. As in the LHBH document, it's a polynomial equation that is used. In your bin, it's at 0x34A0
by mpaton
Sun Nov 15, 2020 3:50 pm
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 79455

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

You need to get out more and read more bins if you think there is anything missing here. You've either forgotten or never realized that the way these bin files are put together is full of more history than sense. There is no canonical way that the banks are put in the "bin" file. People made things ...
by mpaton
Sun Nov 15, 2020 1:36 am
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 79455

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

baba_banana wrote: Sat Nov 14, 2020 9:01 pm but it would be great if someone could clarify if my files are good or the program can't read it or I'm lacking some files.

thanks

attached are the files forementioned
Your files are good.
by mpaton
Tue Jan 21, 2020 8:45 am
Forum: EECGeeks
Topic: ROM1 address
Replies: 19
Views: 21375

Re: ROM1 address

7826
by mpaton
Fri Oct 11, 2019 1:26 pm
Forum: EECGeeks
Topic: Disassembling Speed Density (SD) Injector Timing Table
Replies: 1
Views: 5325

Re: Disassembling Speed Density (SD) Injector Timing Table

I've been hacking away at my Speed Density (SD) binary, and have run into a snag with me not understanding exactly what the following code is doing, or if i disassembled it incorrectly: ??InjTTable?? 22ea: 75,37,00,16,0a,10,20,4d,08,ff,94,00 struct Sub34, 0, 16, a,Q1, 20, 4d,ff08, 94 22f6: 96,37,00...
by mpaton
Sun Dec 09, 2018 6:54 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 25387

Re: Diagnostic Correctness: Open Loop at Idle?

So that calibration matches your TAG0 PCM, and the diagram shows a single thermactor air valve.

And yet you said you checked 3 check valves. What did I misunderstand?

Michael
by mpaton
Sat Dec 08, 2018 11:55 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 25387

Re: Diagnostic Correctness: Open Loop at Idle?

Thank you Micheal. I'm wondering, do DIY tuners have access to the EEC lookup table values and know the decision tree well enough to predict what EEC outputs ought to be based on inputs? By tuners, I'm guessing you mean the devices you can attach to your EEC-IV to allow you to inspect ROM and RAM v...
by mpaton
Sat Dec 08, 2018 2:25 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 25387

Re: Diagnostic Correctness: Open Loop at Idle?

As I look again at the code, I see that both MAP in inches of Mercury and Map frequency in Hz are part of the datastream available. I don't know which one Bosch has chosen to display, and it may be that the MAP value you got was accurate. 10:Hg at idle seems a reasonable value.
by mpaton
Fri Dec 07, 2018 12:24 am
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 25387

Re: Diagnostic Correctness: Open Loop at Idle?

Here's a couple of things you might look at. 1 your value of IAC value of 33% seems low compared to mine at 48% for idling in Neutral/Park. I see you've checked it, but I'm wondering if it could be sticking (as 33% is what's being commanded, it's just assumed that it works. If it sticks an integrato...
by mpaton
Sat Dec 01, 2018 11:34 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 25387

Re: Diagnostic Correctness: Open Loop at Idle?

Michael, I think the letters/numbers you need are TAG0. See attached photo of sticker. TAG0 is it indeed. This is the same "Strategy" as my own TOE0, and the "Calibration" is at least 95% the same. I'm going to just respond to this thread on this forum, the 460ford one might prefer you had a carbur...
by mpaton
Fri Nov 30, 2018 6:22 pm
Forum: Tuning the EEC....
Topic: Diagnostic Correctness: Open Loop at Idle?
Replies: 18
Views: 25387

Re: Diagnostic Correctness: Open Loop at Idle?

I've answered some of your questions on th eford460 forum, so I won't type them in here again, except to say that if you can tell us the calibration code from your PCM label, I may be able to answer more questions. And also if this is a California spec truck. The figure you have labelled as short Te...
by mpaton
Wed Sep 26, 2018 10:17 pm
Forum: EECGeeks
Topic: Why auto disassembly is tough
Replies: 310
Views: 375215

Re: Why auto disassembly is tough

Actually, I've written the code so that it should handle ALL 16 banks, so there !! Well, yeah, OK, code does check for 0,1,8,9 in a few places, but for all addressing, it's full 20 bits, 16 banks capable. Anyone got a (8065) bin with >4 banks ?? I'm sure many people do, possibly even yourself if yo...
by mpaton
Tue Sep 25, 2018 10:38 pm
Forum: EECGeeks
Topic: Why auto disassembly is tough
Replies: 310
Views: 375215

Re: Why auto disassembly is tough

So that means you're not going to support any more than 4 banks? :wink:
by mpaton
Tue Sep 25, 2018 5:13 pm
Forum: EECGeeks
Topic: Why auto disassembly is tough
Replies: 310
Views: 375215

Re: SAD 3.08 released

tvrfan wrote: Mon Sep 24, 2018 6:52 pm I have a couple of bins which seem to have two code banks (not allowed!!) but from names, may be a dump of original followed by modded version, so I have changed SAD to print first code bank found.
I don't understand the issue with 2 banks of code.
by mpaton
Tue Jun 13, 2017 2:51 pm
Forum: EECGeeks
Topic: question about ALTSTACK
Replies: 2
Views: 6622

Re: question about ALTSTACK

When the Alt Stack is used, it is often (as here) used for the background dispatch tables/lists.

In the PTP2 bin, these start at 1A4D6 and continue through 1A70C. !A634 is in between these, and so when the Alt Ret instruction executes, it will go to the address at 1A634 which is 831DE
by mpaton
Fri Dec 16, 2016 2:36 pm
Forum: Tuning the EEC....
Topic: Tuning Marine Ford 351W GT40
Replies: 81
Views: 128602

Re: Tuning Marine Ford 351W GT40

The bin is good.
by mpaton
Tue Jan 19, 2016 4:35 pm
Forum: EECGeeks
Topic: Suspected FN037 behavior in X2J (Taurus SHO)
Replies: 11
Views: 19077

Re: Suspected FN037 behavior in X2J (Taurus SHO)

It's a similar concept to FN037, but FN037 is a simple function of N. X2J uses an Alpha-N table and then corrects that with ACT and normalizes with BP, at [code] 687C EF68F5 L687C call FLUW_UU 687F 0801 word FN070(N) (#$C108) 6881 AA00 vect N 6883 A03830 ldw REG_30,REG_38 6886 EF5EF5 call FLUW_UU 68...
by mpaton
Fri Nov 06, 2015 4:08 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 71342

Re: Inline parameters(arguments)

dividing by 4 is SLOW, shifting right by 2 places is much faster, and gives the same answer......... That fact that the LZBW reads an upper byte of a word therefore means from a maths point of view that it is ...... ? Given your target audience, I don't think they are quite that far along to infer ...
by mpaton
Fri Nov 06, 2015 11:25 am
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 71342

Re: Inline parameters(arguments)

OK, here's some elaboration of exactly the form of replies I need to see. I want to identify the registers and memory of interest for the example 9code fragment), and I want to see the contents of each register before and after each instruction. The relevant registers here are PC the Program Counter...
by mpaton
Thu Nov 05, 2015 12:52 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 71342

Re: Inline parameters(arguments)

Let me try for one more, and possibly last time, to steer this back to the explanation of how to disassemble 8061 code. This is the second time I've had to quote a big chunk of my own post to try and get it back on track. Now, I hope we can go back to my earlier simpler example from HHX0, specifical...
by mpaton
Thu Oct 29, 2015 11:02 am
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 71342

Re: Inline parameters(arguments)

very good derek thats much easier to follow ------------------------------------------------------------------------------------ call 3654 = stack [3e2b] scall 3695 = stack [3656, 3e2b] popw = 38 = 3656, stack [3e2b] popw = 3a = 3e2b, stack [] ldb 3c = [3e2b], 3c = 08, 3a = 3e2c ldb 3d = [3e2c], 3d...
by mpaton
Wed Oct 28, 2015 5:20 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 71342

Re: Inline parameters(arguments)

I saw that, but didn't relate how doing all that would help with what tvrfan's point was with these 6 lines of code. I have no clue what the stack is already loaded with. this is all about understanding and not guessing. Even if you guess correctly, you will have no understanding. Even decip[ha's a...
by mpaton
Wed Oct 28, 2015 1:52 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 71342

Re: Inline parameters(arguments)

You haven't shown me that this is anything more than another guess. Another assumption... I don't know what you are looking for to convince you. Any constructive feedback about my next post? well, yeah, I thought I was already being quite explicit in post http://eectuning.org/forums/viewtopic.php?f...
by mpaton
Wed Oct 28, 2015 10:35 am
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 71342

Re: Inline parameters(arguments)

Ok, that explains more about what it is doing. The CALL pushes a return address to the stack. However because you don't want to return to data, the code using the inline data is increment the pointer pushed by the CALL past the data section. So the RET pops off the stack the correct return address....
by mpaton
Tue Oct 27, 2015 6:28 pm
Forum: EECGeeks
Topic: Inline parameters(arguments)
Replies: 67
Views: 71342

Re: Inline parameters(arguments)

I doubt much is going to be learned by just guessing, even if you guess correctly. So let me advise against doing that. The call and return instructions have been explained above, and the push and pop can come from the microcontroller manual, or just about any microprocessor manual. So the method sh...
by mpaton
Sat Oct 24, 2015 12:28 pm
Forum: EECGeeks
Topic: Looking up a 2D table; How to recognize the code
Replies: 17
Views: 22863

Re: Looking up a 2D table; How to recognize the code

Could you put up a link for ironman please?
by mpaton
Fri Oct 23, 2015 7:08 pm
Forum: EECGeeks
Topic: Looking up a 2D table; How to recognize the code
Replies: 17
Views: 22863

Re: Looking up a 2D table; How to recognize the code

ironmanisanemic wrote:
Do you have a link to the 8061 instruction guide? I dont believe i have it already.

Thank you
That's a good point. Calling cgrey!

was this just not restored after the board crash a few years ago, or is it gone for good?

Michael
by mpaton
Fri Oct 23, 2015 6:55 pm
Forum: EECGeeks
Topic: word address requirements ?
Replies: 7
Views: 12057

Re: word address requirements ?

I don't know if there was a different processor for Ford ECUs before EEC-IV, but you will see code in 8061 that loads words a byte at a time. So this word on an address divisible by 2 business may not always have been the case.
by mpaton
Wed Oct 21, 2015 6:56 am
Forum: EECGeeks
Topic: Why are there inline parameters ?
Replies: 20
Views: 25218

Re: Why are there inline parameters ?

decipha wrote:The original ford code was written in C, I have actually seen with my own 2 a portion of the actual cbaza source code
i seriously doubt that earlier Ford bins were written in C. I don't doubt that there is pseudo code posing as documentation written in C.
by mpaton
Tue Oct 20, 2015 7:05 pm
Forum: EECGeeks
Topic: Why are there inline parameters ?
Replies: 20
Views: 25218

Re: Why are there inline parameters ?

People have asked before "Why did those morons do it that way?" Please take that to another thread. Humour me momentarily please. Is it a way to have data where it is needed so the 8061 can keep accepting bytes from RAM or ROM in a continuous stream instead of issuing requests for other memory addr...