RomRaider

So, I've been looking at the AF3/4 corrections, learning limits etc for some time for the ROM: D2WD701C.

This ROM appears more complicated to most when looking at the AF3/4 components, it has two 'front' O2 sensors (note, not 'AF'), rather than a singular rear. It's possible that some of the code is redundant, as some of it bears simliarity to 'rear' O2 sensor code for example.

Additionally, as there's less of this ROM defined than others, it's been tricky to confirm and nail these parameters down.

The ultimate goal is to disable these features, so that it can be ported to run flex fuel as part of the merpmod development. Without disabling the coding and signalling that these subroutines perform, the flex input isn't going to be possible. Indeed, this is the last stumbling block in terms of parameters to track down before making some coding adjustments in HEW and creating a patch for all to use.

I'm hoping that some of the heavy hitters out there are able to point me in the correct direction for these?? (please??)

This is what I've got to date, and as a reference, the ROMs where I've been comparing similarities in code to try and pin these down. Hopefully these can be confirmed as correct/jumbled or incorrect as the case may be.....

Hello... need address for A2WC510N - did not find definitive answer in this thread.

Much *thanks* in advance!

Just upgrade it to A2WC522N, it has some code fixes stability & cruise control bugs, plus that's what Subaru would do anyway if you ever had them do any ECU work.

Well, I continue to use 510N-based StreetTuner ROM, hence my attachment to the old version (for real time tuning).

Gotcha, that makes sense. Somedays I wish we had real time tuning myself, would save a lot of time...

Great, thank you.

Thanks for all the info in this thread.
Unfortunately I don't have IDA pro as it is quite expensive compared to what I would use it for, but I was able to check my rom (A8DK100Z - 07 EDM STi) and did a hex search as mentioned earlier.
There are three matches in my rom, and one (the first one) of them was matching with the 07 WRX address mentioned in an earlier post, so I gave it a try. I actually tried all three addresses and fortunately nothing vent wrong.

So for A8DK100Z it is #029A60 and right after re-flash, AF correction#3 was stuck to 0% from the earlier value of ~-45%.
(of course first I was logging the 16bit ecu version monitor and that gave me a -50% value, but after some time, I realized there is a 32bit ecu version of the same and that was showing 0%)

Based on td-d's work from here and here



td-d, sent you an email, did you receive it?

I did, sorry - haven’t had a chance to look, somewhat swamped at work at the moment.

Urghh.... Yup, I know that feeling. No worries, thanks for the confirmation! Don't sweat it, if you get the chance at some point down the track that would grand, but no rush. (Just wanted to know technology had not failed me!). Cheers!

Hi Lorax,
What exactly is the goal? I have a 5 o2 sensor car, I turned off AF3 and AF4 learning and correction but the reality is they really don't do much. It is a very small percentage that they will actually correct for that I've seen (less than 1%).

If you can get it to read other than 0% (giving throttle in park or something), you can figure it out by making the change and see if stays at 0.

Thanks Pzev.

Looking to run flex sensor through rear O2, after porting version of merpmod. Corrections need to be disabled, or flex input will cause aberrant fuelling.

Yes, could test what I've got to date code wise, but it's not my vehicle, nor same country and would prefer to confirm coding alterations, with support of the experts on this site. As opposed to; testing possible combinations with the theoretical chance of causing damage.

As an aside, I have looked at your ROM in IDA, and there are several more values of 0.5/-0.5 (and the reverse) in this particular ROM. Thus my reluctance to simply test them all, at least in the first instance.

Hi, I'm looking for the address for AZ1G401V, 09 USDM WRX

I could not find and exact match to the string in the first post but ... there was 3F000000 BF000000 FFFF2F94 4F22C79A F808D59A listed at the third location

This is my attempt, Can anyone confirm?

Halfway there: