RomRaider

Has anyone found the address for 2007 Outback XT/ Legacy GT(A2UG000C)?

Did you try searching for the string they suggested at the beginning of the post?
I'll take a look.

I found 3 matches for 3F000000BF000000 in A2UG000C, none of them match the string on page 1.

35D98
341C8
33CA4

Is your AF3 correction not 0? You could do what I do which was to change each one , one at a time, and see if it goes to 0 after the change.

For 2011 ADM Forester XT S-Edition AZ1J500V

<table name="AF 3 Correction Limits" address="320B4">
</table>

Tested and works

Here is what I found for 2006 Outback XT AT - A2WF200R, which seems to be the same as the 2006 Legacy GT MT - A2WF200N.

AF 3 Correction Limits: 2EC58
AF 3 Compensation Limits: 2D648

After some testing, these appear to be the correct addresses for this ECU.

Anyone know where this would be located on a 05 baja turbo rom A2WC500L ? I found a copy of IDA pro and tried to search for the stings mentioned in other posts but just couldn't get it to work.

I have a downpipe with highflow cat and my AFR seems to jump or bounce from 14.6 to 14.2 at times, it looks like getting rid of the AF3 compensation has helped some other people.

I did maybe figure out ida a little bit, my best guess was af 3 correction is at 0002DBB8, when I added that address to to the table it gave me a value of High 0.5000 Low -0.5000, that seems right. I set them to 0 but it had no effect in af correction 3 while driving, so it does not seem to be the correct address.

Can someone with more experience take a look at my rom and see if I found the correct address ?

Hi Bob,

If you have RomRaider logger, can you see that your AF3 correction is not staying at 0 when you rev the engine in neutral? I was able to see AF3 changing in this setup, so what I did was found all instances of +/- 0.5 and started from the top, i changed them 1 at a time until I found the right one by watching for the AF3 correction stay at 0 after making the change. I did not reset the ECU in between any flashes.

When I found correction, I kept going until I found AF3 learning as well.

Speaking of logger, mine only has AF3 correction defined, is there a way to find out what the address location for AF3 Learning would be (without IDA)?

This rom does not have AF3 learning, only correction. The address you found are probably the rear O2 comps.

Just checked, 2D648 is indeed the rear O2 comps.

Yes, I checked with the logger each time and it still shows AF 3 correction making constant adjustments so I haven't found the correct address yet. When driving the ST fuel trim holds pretty steady but AF 3 correction goes all over and my WBO2 gauge also jumps all over.

If you don't mind me ask, what's 2EC58 used for then? Just curious on what it else I might have disabled .

Did they back out features for 2006's A2WF200R? My 2005 A2WC522N seems to have both Correction (2DF2C) and Learning (2C91C) in the rom but not in logger.

2C91C is not the AF3 learning thresholds, it's also the rear O2 comps. A2WC522N does not have AF3 learning either, hence no logger def.

2EC58 is the AF3 Correction limits.

Aha that makes sense! I was starting to think Compensation = Learning.

Based AF1 function I know that:
Correction is real time adjustments
Learning is learned corrections over time

Is Compensation an addition to the total fueling ontop of the correction then? Similar to say cold weather compensation, where it would add extra fuel?

I have an issue with in between shift rev hangs on a 2005 California emissions 2.5i.

A guy with the identical vehicle said it was fixed on his vehicle by replacing the middle o2 sensors (this is a 5 o2 car, so we're talking about AF3 and AF4 = the ones behind the forward cats).

I have already set "AF3" learning and correction to 0 (I have found that changing these tables affects both AF3 and AF4 together). Could these rear O2s still be doing something else contributing to the rev hang?