NefMoto

Technical => Reverse Engineering => Topic started by: benni4000 on November 23, 2021, 03:38:56 PM



Title: Learning MapSwitch with IDA
Post by: benni4000 on November 23, 2021, 03:38:56 PM
Hi,

i just wanna do a little mapswitch by myself.
I want to switch (TMOTELI) Temperatur Motor Erfassung u. Lineraisierung, Inverskennlinie.

What i Did
1. I've set the whole TMOTELI to 10°C and checked in VCDS the TMOT on Bench and it shows 10°C.
2. Copied the TMOTELI and created a new one.
3. In IDA it's showed at seg207:11B4 but it doesnt has any xref? How can this be?
    I find Tmotlinc (RAM 0x38489C) in IDA but doesn't find any function callup where is accessing to the TMOTELI

Can Someone help me to unterstand and maybe to finish this little switch?

Regards Benni


Title: Re: Learning MapSwitch with IDA
Post by: prj on November 23, 2021, 04:27:00 PM
If it was as simple as pressing X on everything we'd have an army of geniuses by now.

No references for pointers passed to functions in C166 variants in IDA. Figure out how map lookup is done and go from there.
There is more than enough info on it here.