Search results

  1. 3p141592654

    3P's TCCS Disassembly/Analysis

    Gunnar, for Windows, just use Hyperterminal with hardware flow control, 9600,8, none,1 . Should be all you need to get going. Henri, I see your point now, I did miss the code overlap. With 12kB, they must have been under some pressure to write very tight code. The weird thing is that it...
  2. 3p141592654

    3P's TCCS Disassembly/Analysis

    The code doesn't make sense to me. The cmp operation appears to be useless. Could have accomplished the same thing with 3 nops. It's also puzzling that its checking _OMODE.
  3. 3p141592654

    3P's TCCS Disassembly/Analysis

    Yes, I am writing a module for the Denso processor. Its alot of work because of the large number of instructions with this processor (255).
  4. 3p141592654

    3P's TCCS Disassembly/Analysis

    I wrote a small test for the 8C opcode. It seems to work exactly as advertised, namely a test for register x against an immediate value. Here is the code I used:. ; start of test code 800f 8e122f ld x, #0x122f ; load x with test value 8012 8c122f cmp x, #0x122f ; compare to value 0x122f...
  5. 3p141592654

    3P's TCCS Disassembly/Analysis

    Played around a bit with the code and it can be reinterpreted using a different starting address, for example, 00f6e8 a935 cmp d, x + 0x35 00f6ea 59 cmpz b 00f6eb 018c77 jsr 0x8c77 00f6ee 73 reti 00f6ef 400a bra 0x26fb 00f6f1 7573 clrb bit3...
  6. 3p141592654

    3P's TCCS Disassembly/Analysis

    Henri, Looks like you've had a productive weekend! I will do a little detective work on the 8C opcode. Just from poking around it would seem that it appears correct, i.e. not inconsistent with adjacent opcodes. Consider 7C PULL A 8C Comparison x – # 9C Comparison x – M[op.2] AC...
  7. 3p141592654

    3P's TCCS Disassembly/Analysis

    There are at least two possible explanations for the two maps. From J. Ross's work we know that the MR2 of similar generation... There are in fact two fuel maps, one for when the engine is spinning below 3200rpm and one for when it is above 3200rpm. The reason the density mapping is split...
  8. 3p141592654

    3P's TCCS Disassembly/Analysis

    I think 400 rpm is the step size for the 3S-GTE maps. It would take you to 6400rpm. Given the redline for the 3S is 7200, I wonder wonder what happens above the map rpm? The engine position signals are raw from the CPS coils so voltage should be a function of rpm, and probably small. No info...
  9. 3p141592654

    3P's TCCS Disassembly/Analysis

    Never looked in the trans ECU. Anyone have a photo? Wouldn't surprise me to find another 151801 processor in it. Supermonitor has one too. We've got a long way to go still on the TCCS before we can move to the trans ECU, but it definitely something I would like to follow up on in the future.
  10. 3p141592654

    Quick Q about "necessity" of 12V Fuel Pump Mod!?

    The black thingy is a bypass capacitor and its purpose is to shunt ac noise from the motor to ground thereby preventing it getting back into the car electrical system. That extra wire goes to the +ve terminal of the pump.
  11. 3p141592654

    3P's TCCS Disassembly/Analysis

    In order to keep the revisions organized, I've created a project and moved the posted data to a revision control system located at www.assembla.com In order to checkout the project files to make changes, you will need to be invited to join the team. Anyone interested can send me a pm...
  12. 3p141592654

    3P's TCCS Disassembly/Analysis

    Figgie: x86 is more complicated than this stuff. Our ECU is just an ancient 8 bit processor. Henri, the interrupt vector1 is clearly an automatic reboot. Most likely comes from the watch dog timer interrupt. I need to do some experiments to figure out the other interrupts.
  13. 3p141592654

    3P's TCCS Disassembly/Analysis

    The ROM is in the chip and so the processor runs in internal mode. Forcing the chip to run in external mode means that ports A and B no longer exist, as those pins are now required to be used for address and data lines to the external memory. Ports A and B are vital to interface the processor...
  14. 3p141592654

    3P's TCCS Disassembly/Analysis

    Henri, thanks for the update. I added a little more info. There is a map from 0xf0b2 to 0xf0f6 that is in the format of [addr, data] that gets loaded to ram at startup using the subroutine starting at 0xfc96. These are presumable the defaults for learned values that you get with an ECU...
  15. 3p141592654

    3P's TCCS Disassembly/Analysis

    Photos of the 7MGE M/T ECU (p/n 89661-14092) whose code is posted above. Sorry for the bad lighting. The ECU has been removed in these photos.
  16. 3p141592654

    3P's TCCS Disassembly/Analysis

    TBBS and TBBC are a bit confusing to me too. Here is what I know. TBBS: Branch if bit set ( bit.(op.1) of M[op.2]) = 1 then PC=PC+op.3 opcode: 0x35 operand 1: first 3 bits specify bit to test (0 through 7), remaining 5 bits specify memory location (limited to first 32 bytes of RAM) operand 2...
  17. 3p141592654

    3P's TCCS Disassembly/Analysis

    Henri, it's very close, but from memory looks a little different. I'll post up a picture of the 7MGE board that I pulled the CPU out of for the assembly code posted above. Your ECU reader stuff is boxed up, need to get it mailed out today.
  18. 3p141592654

    3P's TCCS Disassembly/Analysis

    JJ: Intel Microcomputer Development System? Brutus: Check your PM. We are some ways out from a tunable factory ECU, but there is precedent over in the MR2 world. The stock ECU is pretty impressive for something that was developed about the same time as the IBM AT personal computer. More...
  19. 3p141592654

    3P's TCCS Disassembly/Analysis

    Ian, as it stands we are just pulling apart the code and learning how things work. We need to isolate the maps and figure out the algorithms they use before we can move to the next step of plotting the maps and deciding what to change. I have a very simple board made that can be used to run new...
  20. 3p141592654

    3P's TCCS Disassembly/Analysis

    Good work Brutus, nice to know I'm not the only one with some disassembler skills. A much delayed tapeout for a IC amplifier project I am working on plus last week spent in Atlanta at the IEEE microwave symposium is keeping me from pursuing this project lately, but I will pick it back up in a...