NefMoto

Technical => Reverse Engineering => Topic started by: BWF on April 24, 2020, 12:48:17 AM



Title: Starting with Mitsubishi H8539FA
Post by: BWF on April 24, 2020, 12:48:17 AM
Good morning, I want to disassemble the mitsubishi H8539FA control unit from a Montero, I want to find more maps, because the ones I have from various programs are not enough to put the diesel pump at 100%.

The file is read with Ktag, but before opening it with IdaPro, it must be modified from "PROM mode" to "MCU mode" (the zone from H00000 to H03FFFF will be duplicated)

I attach the project in IDA with some interruptions and other things identified.
Now I try to find the routines to find the maps, the image shows a few byts in front of the map, I suppose this has to do with the route to find the map or the axes.



Title: Re: Starting with Mitsubishi H8539FA
Post by: BWF on April 26, 2020, 08:22:19 AM
I can already find all the maps, with the axes.
Here I show the location of two maps 0x622C and 0x6610.

The Z axis of the two maps could be "word_F266" which is after the call to "sub_29AAF"


Title: Re: Starting with Mitsubishi H8539FA
Post by: BWF on May 10, 2020, 12:58:26 PM
I see that there is not much interest in this ecu.

At the moment I have found almost all the maps, I found 174 maps, most of them are in 2D

I also found the turbo overpressure limp mode, now we can blow 2 bar without problems.

I still have to find the different values of X, Y, Z axes