Search found 534 matches

by tvrfan
Fri Jul 16, 2021 8:38 pm
Forum: Lounge
Topic: California to make EEC retuning illegal
Replies: 17
Views: 2032

Re: California to make EEC retuning illegal

What about all those classic cars which have stuff like Megasquirt to replace the carbs ? (etc.) There's got to be some kind of sanity. But who knows with all this anti-petrol global warming crap and Govmints - it's all crazy. As you say, the test can't be that invasive, it would take too long, and ...
by tvrfan
Mon May 31, 2021 3:04 pm
Forum: Tuning the EEC....
Topic: LA3_SD.BIN correct XDF file?
Replies: 9
Views: 1674

Re: LA3_SD.BIN correct XDF file?

In case it helps any, LA3 is one of my 'test set' of bins for my disassembler. Although not perfect yet, it does produce a useful listing of code and most of the data structures. Unfortunately it cannot tell you what each actual data structure does, but I have attached the listing and message file (...
by tvrfan
Sun May 30, 2021 11:56 pm
Forum: EECGeeks
Topic: 22CA bin - anyone analyzing this one ??
Replies: 7
Views: 1646

Re: 22CA bin - anyone analyzing this one ??

In the first post you asked if anyone is using this bin. It is a very commonly used bin here in Australia for our 2001-2002 XR8 5.0 Falcons. I use the 22NA bin which is from the NGVC0 strategy, but its pretty much identical with some different address locations but that's about all. Pretty much the...
by tvrfan
Fri May 14, 2021 6:12 pm
Forum: EECGeeks
Topic: redundant ops, proves compiler was used ?
Replies: 3
Views: 1062

Re: redundant ops, proves compiler was used ?

Yep, agree totally, could be a macro type construct too.

and the old programming rule -- "make it work first before you make it work fast" is always wise...
by tvrfan
Fri May 14, 2021 4:38 pm
Forum: EECGeeks
Topic: redundant ops, proves compiler was used ?
Replies: 3
Views: 1062

redundant ops, proves compiler was used ?

I just spotted this in DOAV654 bin.... 031d8: 3c,7b,1e jb B4,R7b,031f9 if (B4_R7b = 1) goto 031f9; 031db: b3,01,56,03,90 ldb R90,[R0+356] R90 = R356; 031e0: 3b,90,16 jb B3,R90,031f9 if (B3_R90 = 1) goto 031f9; 031e3: fd regbk 3 031e4: 91,08,56 orb R356,8 B3_R356 = 1; 031e7: f4 regbk 0 031e8: fd regb...
by tvrfan
Wed May 12, 2021 1:36 pm
Forum: EECGeeks
Topic: 22CA bin - anyone analyzing this one ??
Replies: 7
Views: 1646

Re: 22CA bin - anyone analyzing this one ??

I honestly didn't spot that....
by tvrfan
Tue May 11, 2021 7:22 pm
Forum: EECGeeks
Topic: 22CA bin - anyone analyzing this one ??
Replies: 7
Views: 1646

Re: 22CA bin - anyone analyzing this one ??

I have not done anything much with the NVGB5 strategy but if you look at the ROM checksum routine at 0x0434A it appears that they treat ROM bank 1 as if it is 32k in size. The CRAJ0 strategy is the same. Thanks Bob, didn't check that. OK. Seems from looking at listing that true actual data ends at ...
by tvrfan
Mon May 10, 2021 3:44 pm
Forum: EECGeeks
Topic: 22CA bin - anyone analyzing this one ??
Replies: 7
Views: 1646

22CA bin - anyone analyzing this one ??

I'm looking at how to improve detection of the 'Copyright' and 'Ident' texts from bins like 4DBG which have this text outside the bank data, and discovered 22CA from trying out test subjects. Also discovered SAD was missing some ID strings within banks, so trying to fix this as well. I found that 22...
by tvrfan
Sun May 02, 2021 2:49 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

What I said above about 'open minded' and bugs - just discovered my 4DBG bin copy *does* have a copyright and strategy text, but NOT in a proper bank structure (i.e. a start with interrupt pointers and a loopback jump. So that's something that I will have to get SAD to cater for.
by tvrfan
Sat May 01, 2021 3:28 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

... In terms of addressing the external RAM then I think we agreed previously that it was bank 1. ... Yeah, I was just covering my ass in case we find some really weird bin. I don't think we will, but the 'short ROM bank' + extra RAM (RZAS) was a surprise to me, so I'm keeping an open mind on every...
by tvrfan
Fri Apr 30, 2021 5:13 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

Ok.. 8065 always has 0-0x3ff as INTERNAL ram (= registers) organised as 4 RAM banks, so that all those 8061 instructions still work for 8 bit addresses (or in other words 'kludge 1'). I have a few single ROM bank 8065 bins, which I believe are all Australian vehicles (probably because of emission/OD...
by tvrfan
Thu Apr 29, 2021 3:14 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

That's one of our questions - as the 8065 always has 4 REGISTER banks, even with one ROM bank, it's still technically valid, so without testing we simply don't know.
by tvrfan
Tue Apr 27, 2021 6:38 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

I'll just stick my 2 cents in here and say I find it VERY hard to believe that nothing changed over EEC lifetime. I reckon we WILL find versions of 8065 which behave differently. Identifying them may be a challenge. I agree with jsa's approach that testing is the only sure fire way, but the (disasse...
by tvrfan
Tue Apr 27, 2021 3:22 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

Quick code examples for why bank 1 is always data bank, from xdt2. Near the start 820b8: fa di interrupts OFF; 820b9: 11,0b clrb Rb IDDQ_Test = 0; 820bb: b1,11,11 ldb R11,11 BANK_Select = 11; 820be: 91,10,0a orb Ra,10 MEM_Expand = 1; 820c1: 11,0c clrb Rc HSI_Mask = 0; 820bb - R11 sets bank for DATA ...
by tvrfan
Tue Apr 27, 2021 3:06 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

824b0: f4 regbk 0 824b1: c3,01,00,1f,00 stw R0,[R0+1f00] [11f00] = 0; or have I got that wrong ? (this may be a bit off topic, but shows that errors do creep in everywhere...) I read that as the following: - ^F4 BANK0, select bank 0 for the following instructions - ^c3 stw, 01 long index, 00 lowbyt...
by tvrfan
Tue Apr 27, 2021 3:00 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

Ah, by 'short bank' you mean 'shortened ROM bank' :) As the conversation was about RAM your phrase confused me. No idea what the BANK0 of the BANK0, STW ZR,$11F00[ZR] is about but 0x1F00 is related to the use of a Research Console (RCON) and can be found in 8061 code too. Out of curiosity why the 1...
by tvrfan
Mon Apr 26, 2021 4:11 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

'short bank' - RZAS etc have a bin format with bank 1 only being 0x2000- 0xdfff instead of 0xffff. From disassembler analysis this makes it a 'short bank' as RAM area doesn't appear. This messed up my SAD bank detection code, which assumed a 'full bank' in the file, with or without the first 0x2000 ...
by tvrfan
Mon Apr 26, 2021 3:17 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

I found this in BWAK3N2 (called it 'regbnk' for 'register bank') ..... Why do this ??? 824b0: f4 regbk 0 824b1: c3,01,00,1f,00 stw R0,[R0+1f00] [11f00] = 0; 824b6: f4 regbk 0 824b7: c3,01,00,1f,00 stw R0,[R0+1f00] [11f00] = 0; 824bc: f4 regbk 0 824bd: c3,01,00,1f,00 stw R0,[R0+1f00] [11f00] = 0; 824...
by tvrfan
Mon Apr 26, 2021 2:47 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

Bob, my opinion - I'm open minded on whether 8065 silicon actually changed or not, but remember Ford handbook has this "from Step D" reference, so it's implied that it did. I'm inclined to agree with you that the manuals are more likely wrong/inconsistent. I noticed a LOT of the 8065 CPU wording app...
by tvrfan
Sun Apr 25, 2021 3:22 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

... Yes, as I have noted to TVRfan, treat the manuals with great suspicion they were printed well before production silicon and revisions thereof. ... I wouldn't go so far as to say "great suspicion", I think it's more like "some details may have changed since", but the principle is right. also I s...
by tvrfan
Sat Apr 24, 2021 11:33 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

The hardware reference manual states the 8063 was only used in development and wasn't put into production ECU's. Can anyone point me to a specific example of where the accessing of the upper 3 ram banks is not as described in the reference manuals? Also, I have not seen anything in the various disa...
by tvrfan
Sat Apr 24, 2021 3:42 pm
Forum: EECGeeks
Topic: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference
Replies: 74
Views: 22878

Re: I've got the EEC Software Manual and Custom IC Hardware Architecture Reference

however it has become apparent that not all is exactly as described. It is all exactly as described. If your EEC-IV/V doesn't have the memory to support multiple ROM/RAM banks, there will not be any bank memory offsets happening. The uP supports it just fine, its the EECs with 64K only that do not....
by tvrfan
Fri Dec 18, 2020 8:06 pm
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 16673

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

This kind of thing goes on all the time.....We all think some issue/functionality/.../etc has been settled, until a new discovery is made or someone asks a detail question, and then we find out more facts. Despite the docs, there is still quite a lot of little detail unknowns in the software and har...
by tvrfan
Mon Dec 14, 2020 5:24 pm
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 16673

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

LOS = L imited O peration S trategy (aka limp home mode) It could be that in these early ECU's the tickling of LSO Port bit 6 is for LOS control. On EFI-VM115 hardware LSO#6 connects to a 74001MC IC which also connects to the CPU's /reset line. The 74001MC also connects to some of the hybrid circui...
by tvrfan
Sun Dec 13, 2020 11:49 pm
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 16673

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

I do not think that LSO Port bit 6 is hardware related to the watchdog timer. For example, in the CBAZA and GHAJ0 strategies LSO Port bit 6 appears to be only used for controlling the aircon cutout relay. Why the bit gets tickled in the AA binary is a mystery to me as the watchdog timer gets reset ...
by tvrfan
Sun Dec 13, 2020 7:56 pm
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 16673

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

'Wraps" - if you count in a limited space, say 16 bits............ start at 0 and go to 65534, 65535 and add another 1, what happens ?? The result goes back to zero, and 'overflow' condition is set in the CPU. (For us geeks, I'm ignoring further details..). This is what I meant by 'wraps'. This also...
by tvrfan
Fri Dec 11, 2020 5:48 pm
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 16673

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

Checksums - these are used all over the place in software designs, everything from verification of something, to signatures, to indexes of data. Checksums can be simple additions through to complicated maths tricks, depending what is required. For the EEC boxes, the entire contents of the ROM (0x200...
by tvrfan
Fri Dec 11, 2020 1:01 pm
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 16673

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

It IS in the hardware manual , page 6-84, WATCHDOG TIMER. CPU_OK (bit 6 register 2) The idea is that if something goes wrong and the system locks up (hardware or software) then the watchdog timer forces a hardware reset, and a restart. So every er.... (it's in there somewhere...) 65,000 ? clock cycl...
by tvrfan
Wed Dec 02, 2020 12:57 pm
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 16673

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

Just to confirm, early bins/boxes had no CAN or OBDII or any external info bus at all. They had a single 'test' input (which was grounded for one second) and a single very low speed error output, designed for a buzzer or lamp, and error codes were groups of pulses which could be counted by eye/ear. ...
by tvrfan
Tue Dec 01, 2020 8:48 pm
Forum: EECGeeks
Topic: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Replies: 79
Views: 16673

Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU

I meant when I have a bug (like the banks not being seen in SAD) , then the bare file is neatly laid out in binary, so I can see if file looks OK...
cron