2009/10 Impreza 2.0T Diesel 6MT EDM JZ2F401A | 6644D87207

dschultz · **Posted:** Sat Dec 18, 2010 7:00 pm

Jochen_145 wrote:

Because of RR these days is not able to display int16 and int8 some maps are in "wrong" storagerate.

Try RR RC7 and correct your def with the int8 & int16 tables. It should work properly now.

Jochen_145 wrote:

Now I looking for a few importend maps:

- scaling of sensors
- temperature compensation of injecation quantity
- friction loose of enigne (if it exists at DENSO)
- spezifical fuel consuption

The attached IDA script should help you identify the known SSM routines. From there you can trace the code back to lookups of RAM values and further to some maps.

Attachment:

File comment: SSM parameter routines

stdparam.zip [2.25 KiB]
Downloaded 203 times

I think the 32 ADC registers are read by the routine @ loc_A148 and stored starting at RAM:0xFFFF4CEC as words (16bit). That first location maybe the Main Throttle Sensor which is converted to float and stored at RAM:0xFFFF6330.

Jochen_145 wrote:

Does someone allready found trouble codes ?

The trouble codes seem to have a different layout from the petrol ROMs. I have not figured it out yet.

Costa · **Joined:** Wed Dec 01, 2010 7:03 am **Posts:** 7

dschultz wrote:

I think the 32 ADC registers are read by the routine @ loc_A148 and stored starting at RAM:0xFFFF4CEC as words (16bit).

Confirmed.

dschultz wrote:

That first location maybe the Main Throttle Sensor which is converted to float and stored at RAM:0xFFFF6330.

According to SDC guys first one is most certainly MAF sensor voltage. It has 2D calibration table record at 8DDB0. Calculated MAF is at FFFF61F8 in kg/h.
Throttle sensor voltage at FFFF6330 is correct.
I also may tell that most sensors have already been identified, XML gen tool not working yet but they're answering questions if someone's interested in something.

Jochen_145 · **Joined:** Wed Nov 10, 2010 7:56 am **Posts:** 418

dschultz wrote:

I think the 32 ADC registers are read by the routine @ loc_A148 and stored starting at RAM:0xFFFF4CEC as words (16bit).

Asking some "silly newby" questions again:
where to look at RAM: 0xFFFF4CEC in dump ? my OLS tells about adresses form 0x00000 up o 0x0FFFFE ?
Any links or hints to get solutions to my "problems" ? :oops:

Quote:

According to SDC guys first one is most certainly MAF sensor voltage. It has 2D calibration table record at 8DDB0. Calculated MAF is at FFFF61F8 in kg/h.

This is an adress I foud. According to this, the calibration of the MAF can be found @ 0x0B9540 size 40 , it axis started @ 0x0B94A0 in dump.
Update of ECU-deffinitons will follow, if more new things found

Quote:

I also may tell that most sensors have already been identified, XML gen tool not working yet but they're answering questions if someone's interested in something.

nice:
I found allready coolant temp sensor, MAF, exhause gas temp sensors, fuel temp, charge air (mainfold) temp, air in temp.

Still looking for MAP and differenial pressure sensor..
Any adresses ?

Bwt:
anyone looking for any temperature compensation map of injection quantity ?
If I calculate with only with duartion map, my injection times are to long (between 100 and 65 µs). This can be cause by differential fuel tempeature ..

Measured SOI of main injection is the same then calculating it by the maps, so SOI of main injection is veryfied

Didn´t stared seartching for any regeration maps :-(

dschultz · **Posted:** Wed Dec 29, 2010 10:37 am

Jochen_145 wrote:

Asking some "silly newby" questions again:
where to look at RAM: 0xFFFF4CEC in dump ? my OLS tells about adresses form 0x00000 up o 0x0FFFFE ?
Any links or hints to get solutions to my "problems" ? :oops:

The internal RAM is addressed starting at 0xFFFF0000 to 0xFFFFBFFF.

RomRaider

2009/10 Impreza 2.0T Diesel 6MT EDM JZ2F401A | 6644D87207

Who is online