RomRaider

Hi
I do a few custom function in older siemens MS41/2/3 where is Siemens C166 but I have problem with MS45.
I can't find ignition maps, torque map itd in code section...
In picture is function for vanos. Its look very nice and "clear". I also can find rev limier (also looks clear), fuel function etc but all this map in IDA start from "addi r3 r3" or "addi r3 r2". But this is maybe a 20-30% maps from calibration section.
The same situation is with MSV70 or Bosch ECUs with PowerPC (M9.2, MEV9). So more precisely my problem is with the PowerPC processor.
How I can find the rest map in code section? For example ignition maps or injection dead time? I try everything and spent a lot of time but nothing. I create all function in code section and I did analize more of them and nothing.
Function for vanos looks very nice. There is idle recognize, wot recognize etc. In all function what I analize I don't see any sense like in vanos function. So I must ask for help. How I can find rest of maps? How they start in IDA? For sure is not "addi r3 r3" or "addi r3 r2"...

I know there is a few people here who have experience with IDA Pro and MS45. I wrote to a few person but they didnt respond or stop respond when I send my .idb file from IDA..

Any progress of this ? Interested.

got some info:
MS45 CPU Used: Motorola MPC55x
Ida Pro offers processor for Disassembling which should work: (PowerPC big endian [PPC] -> MPC5XX)
For proper disassembly we need SDA and TOC addresses: SDA(r13), TOC(r2) -> both can be found in first disassembly in IDA Pro.

Ram/Rom memory addresses / length found in MS45 A2L: