RomRaider

OK I have been researching the calling code and trying to take in as much as I can in one sitting, almost 5 hours now

For today's lesson I have made comments in Ida next to each instruction to what I think is going on. It is sub routine 31E4 which is the first sub referenced in the rom. (First pic)
I think this sub's job is to initialize the register for the next lot of information when the ignition is turned on. I could be wrong though.....
The second pic sort of confirms my assumption(to me anyway) as all other sub routines seem to branch from sub_31E4

Please let me know if I am correct and maybe clear up the confusing instructions
I really appreciate this as is so difficult to learn, I am stepping into the unknown, it is confusing and yet fascinating all at the same time !

Ooops the pics are not clear as I had to shrink them, I can type it out again if necessary....

Hardware and Software Reset

ROM_:000031B0 ; START OF FUNCTION CHUNK FOR sub_31E4
ROM_:000031B0
ROM_:000031B0 loc_31B0: ; CODE XREF: ROM_:00000000j
ROM_:000031B0 ; sub_31E4:loc_300j
ROM_:000031B0 ldi8 R0, #0
ROM_:000031B2 mvtc R0, psw ; PSW init
ROM_:000031B4 ldi8 R0, #0 || nop
ROM_:000031B8 ld24 R1, IMASK ; Interrupt Mask Register init
ROM_:000031BC stb R0, @R1 || nop
ROM_:000031C0 ld24 R2, #unk_809B00
ROM_:000031C4 mvtc R2, spi || nop ; Stack pointer init
ROM_:000031C8 ld24 R3, #unk_809BA0
ROM_:000031CC ld24 R0, #unk_809BA0
ROM_:000031D0 st R3, @R0 || nop ; Buffer pointer init
ROM_:000031D4 ld24 fp, #unk_808000 ; fp will be used as Index register and is init here
ROM_:000031D8 ldi8 R0, #0x40 ; '@'
ROM_:000031DA mvtc R0, psw ; PSW set
ROM_:000031DC bl.s sub_31E4 || nop ; No return is awaited from this sub
ROM_:000031E0 bra.l loc_300 ; Panick dump
ROM_:000031E0 ; END OF FUNCTION CHUNK FOR sub_31E4

Merlin, from AUS has a Pajero DiD rom listed somewhere online. I emailed, and he said that he hadn't gotten very far. Might want to at least start there. I know a few Triton and Paj owners would be happy with opensource work.

Thank you, mine is a petrol....

The diesel ECU's are proving a lot harder to crack as they seem to be locked. Also there is almost unlimited piggyback chips available for the diesel Triton/Pajero and therefore not as much demand for ECU tunes, in Australia anyway. The chips cover almost all parameters able to be tuned and some are doing extraordinary things; 'Chipit' (Australia) have a 3.2Litre turbo diesel in a Triton at almost 600HP
EkuTeK offer an ECU tune for the diesels but the cost is comparable to a chip and so far the results are a bit behind the chip technology....



Ok wow.
There is a lot going on there that I cannot see as yet, I think I will try to analyse another sub somewhere as the above seems a bit beyond my comprehension at the moment. I can see my thoughts were correct in a couple of lines though with the init of the psw and stack.

Salt, Merlin wrote THE tuning guide for EVOs, so you might have a chat with him anyway. He might be able to get you in contact with people that could help you. As an off-topic aside, what triton/paj forums are there for the newer DiD stuff? Pajeroclub seems to be full of the 2.X liter drivers.

Thanks Dust, Merlin wrote my xml file Paid of course...... I have been in contact with him regarding getting Evoscan to work with my ECU and he is willing to help.
This is something I want to pursue anyway, call it a hobby if you like...I know it is going to take a long time to learn the ins and outs of the rom but i am patient.

I am also very grateful to Sasha and Dshultz for your guys input, I hope you can spare me a few more guiding words

Dust I am a senior member of this forum;

http://www.newtriton.net/phpbb/index.ph ... cd42d7c4eb

It is for the owners of 2006 onward Tritons and a wealth of DID info, if you are interested join up and make yourself welcome.
The forum is full of terrific people who all help each other. It is Triton only though, perhaps the DID info could be the same as the newer Pajero DID's ?

Are you in Australia Dust ?

I'm in Japan. Unfortunately, I don't have the Japanese or kanji knowledge to participate in Japanese truck forums, and I don't think the stuff I do to cars would fit in over here. So it was left to finding English information, i.e. Down under or England. Was looking at staying here long term, and if that happened I would be driving what I wanted, instead of little throw away cars.

Guys I have an annoying problem.

I have just rebuilt my engine and swapped crankshaft, pistons, and heads, also bored 2mm to take the stock 3.5Litre out to 3.8Litre.

The engine runs fine, heaps more power than the stock.

I am getting consistent P0172 and P0175 codes, usually together. These are fuel enrichment codes and say the ECU has to pour more fuel in to keep the engine running 14.7afr in closed fuel loop mode.

I have been searching for a vacuum leak for the last week and last night took all inlet manifolds off and sealed them again properly. No leaks as far as I can tell. Drove it tonight after letting the sealant cure for 24 hours and another CEL and same codes......

I am assuming that the bigger capacity engine demands more fuel than the ECU is set to deliver.

One thing I have not done yet is have the ECU learned value reset, am not sure if this would make any difference ?
I think I need to log the fuel trims and compensate via the ECU.

Could you please point me to the relevant part of my rom?
Or even help me to be able to log the fuel trims ?

I realise this is going to take me a long time to learn to do myself and would like to fastrack this portion to get rid of the CEL and codes each time I drive I am also willing to donate $ or whatever, I make some cool things from timber, furniture, Jewelry boxes etc.

I would really appreciate the help.

OK cool, Try the Thailand forums as well, they are doing some crazy stuff over there

Do you have access to shop manuals that explain the cause and diagnostic procedures for these codes? In the Subaru world the diagnostic procedures have all the enabling parameters and the limits that need to be met to set and clear the codes. This can be valuable info in determining some of the code routines.

Yes I have the manual, I am sure i have eliminated the chance of vacuum or gasket leakage.

The next steps are to test the injectors, I don't have the gear to do this though, so will have to wait until i get time off to get them tested. If not injectors then off to Mitsubishi for an extremely expensive diagnosis.

I would rather log the fuel trims first so I can then tell if the enrichment is consistent at all times, then it is a case of tuning the ECU. From watching the AFR gauge the trims do seem to be consistent, the engine will run lean to around 14.9:1 then corrects back to 14.7:1. More noticeable at idle after driving, when stopped at traffic lights etc. Also when the ECU switches from open loop to closed loop it runs almost to 15:1 then corrects to 14.7:1. These are the times the CEL appears.
If the trims are not consistent I may be able to narrow the options and pinpoint a faulty injector or wiring plug/loom....

Mitsubishi is the same, unfortunately the software Mits uses is $10,000 plus. The manual uses the software immediately so other than obvious things like a vacuum leak I am flying blind.

It is going to take me a long time to learn all this, anyway I will get there eventually.

Subaru manuals are cheap, $35 for 24 hours of access (not $10,000). There's a whether of info in these manuals.

I am struggling a bit with the letters and symbols after the address reference, these are in grey in the pic.

What are they ?

Some are explained in the various manuals but not many. They are anything from letters to all sorts of symbols.

Can anyone explain their meaning ?