RomRaider

SSM LUT

0x60 - ECU reset
0x6F - Ignition Timing Adjustment
0x70 - Idle RPM adjustment
0x71 - Idle RPM with Air Conditioner

What is there at 0xE8 ?

Has anybody traced this function call? It looks like this is the last SSM position where something can be writen and read.

I am still looking for a backdoor for realtime tuning..

0x6F door for ignition correction is allready running with 70 ms period and is done by OBD plugged microcontroller.

SSM based Target AFR correction is wanted badly.

Sasha,

any progress on that? Any way I can help?

thanx

Mart

Currently I have tried realtime Ignition Retard thru 0x6F door. This works fine for NA car and I am still checking this remotely for turbo. There is no reason for ignition advance (if possible) for the fuel available.

I have to design a "k-line router" to pass scanner requests for logging while EngineRPM and EngineLoad are read and IgnitionRetard is sent by such a "router".

Currently for turbo applications I have to cut MAF's wire (and hook AFsensor wire ) in order to correct MAFv and AFsensor current (in CL mode) in order to correct mixture. Thus, a software backdoor is wanted badly.

I hope some ECUs may probably be corrected by direct learnt (ignition, fueling) values being periodically rewriten.

Unfortunately I have no software to start studying SH7055 processor code. Any help will be appreciated.

Is this for Subarus not supported by RomRaider? If not, I'm curious what problem you're solving this way...

Not supported currently.

viewtopic.php?f=25&t=5704