Per Gear Max Requested Torque for 08+ WRX, 09+ FXT

td-d · **Posted:** Mon Sep 02, 2013 3:45 pm

Go to address DD7AC in IDA (Control G, DD7AC and enter) and then press D at the location. Tell me what you get then.

whitewater · **Joined:** Thu Dec 29, 2011 2:04 am **Posts:** 181

Thanks for the quick reply. In order to do that, I had to undefine the structure above otherwise it wouldn't let me define the other address as data. So once I have done it I got this :

No cross ref found. Does IDA automatically find the cross references when you define a location as data or do you have to do something else ?

I know this is kinda basic, thanks for your help

td-d · **Posted:** Mon Sep 02, 2013 6:28 pm

No worries, we all start somewhere!

What CAL id is this, so I can have a look?

td-d · **Posted:** Mon Sep 02, 2013 6:32 pm

And by the way, that is the correct address - FA00 * 0.0078125 will give you 500.

If you do a hex search for 000DD7AC, you will find the lookup table reference.

whitewater · **Joined:** Thu Dec 29, 2011 2:04 am **Posts:** 181

The CAL ID of the 2011 rom is : AE5I910V

Good idea about the search, I found a table structure with that pointer in it. Why would IDA not see the xref for that particular table ?

I need to get a 7058 compiler to write some C code and see what the assembly looks like so I can get a better understanding on how to read this ...

This is pretty cool

td-d · **Posted:** Mon Sep 02, 2013 7:02 pm

You need to download Dale's scripts here: https://github.com/dschultzca/Definitio ... er/src/IDA

Use MakeTablePointers.idc to automatically format the full set of lookup tables. If you scroll down from where you found that reference, you will eventually find the end of the lookup table range. Note that address, then scroll back up to the beginning of that range, and run the script. It will automatically format all the tables for you. I find running it 2 / 3 times works the best.

icekitten · **Joined:** Sat Apr 06, 2013 7:24 pm **Posts:** 2

Would it also work for a 4EAT like the foresters on a 08 JDM Impreza SGT AT?

A2TB100V

td-d · **Posted:** Tue Sep 03, 2013 7:12 am

icekitten wrote:

Would it also work for a 4EAT like the foresters on a 08 JDM Impreza SGT AT?

A2TB100V

Not quite the same. Interestingly, there are limiter tables, but only 2D, and referencing RPM (not gear). Still useful.

Code:

ROM:0008B420 word_8B420:     .data.w h'10            ; DATA XREF: sub_BE1F0+94o
ROM:0008B420                                         ; sub_BE1F0:off_BE418o
ROM:0008B422                 .data.w h'800
ROM:0008B424                 .data.l flt_DBAC4
ROM:0008B428                 .data.l word_DBB04      ; = 4.0e2
ROM:0008B42C                 .float 0.0078125
ROM:0008B430                 .float 0.0
ROM:0008B434 word_8B434:     .data.w h'10            ; DATA XREF: sub_BE9DA+36o
ROM:0008B434                                         ; ROM:off_BEB3Co
ROM:0008B436                 .data.w h'800
ROM:0008B438                 .data.l flt_DBB24
ROM:0008B43C                 .data.l word_DBB64      ; = 4.0e2
ROM:0008B440                 .float 0.0078125
ROM:0008B444                 .float 0.0

throttlehappy · **Posted:** Tue Sep 03, 2013 12:18 pm

Looks to be the same as the 07+ LGT for the JDM SGT AT

whitewater · **Joined:** Thu Dec 29, 2011 2:04 am **Posts:** 181

td-d wrote:

You need to download Dale's scripts here: https://github.com/dschultzca/Definitio ... er/src/IDA

Use MakeTablePointers.idc to automatically format the full set of lookup tables. If you scroll down from where you found that reference, you will eventually find the end of the lookup table range. Note that address, then scroll back up to the beginning of that range, and run the script. It will automatically format all the tables for you. I find running it 2 / 3 times works the best.

Thanks ! I was able to dig up the tables by searching but I will give the script a try later tonight or tomorrow

throttlehappy · **Posted:** Fri Dec 20, 2013 12:27 am

Just an update on the capabilities of this table:

Per gear rev limiting is possible by rescaling the RPM rows in the far right columns as an example: get 7500rpm in say 1st gear, then 7200rpm in 2nd gear, 6900 for 3rd gear, 6600 in 4th/5th/6th gear etc by shutting the throttle to induce a soft cut

Example:

Attachment:

per_gear_rev_limiter.png

wrxt4cy · **Posted:** Fri Dec 20, 2013 3:51 am

That's a very clever use for this feature!

But - I've never understood per gear rev limits. What makes it any safer to rev higher in a lower gear?

If anything, I would think it would be more dangerous to rev high when you are in a low rear and the rate of increase of the revs is higher to begin with. Seems you'd be more likely to float a valve in 2nd vs 4th by my thinking.

throttlehappy · **Posted:** Sat Dec 21, 2013 12:15 pm

Less engine load in first gear makes it possible and the values are an example of how to do it, not actual values used

I personally have atune I use for family members that borrow the car where car won't rev over 4000rpm in 3rd gear, 3000 in 4th and 2400 in 5th by shutting throttle which gave me the idea

RomRaider

Per Gear Max Requested Torque for 08+ WRX, 09+ FXT

Who is online