1. what is the offset at which the ROM is based/loaded at ? The first segment is RAM. At what offset would the downloaded DENSO image be the 'read' image that we see when we download the ROM ?
2. In the A4TH100H for example, the AVCS elements as here
<table name="Intake Cam Advance Angle (AVCS)" address="2a621">
<table name="X" address="2a603" elements="14" />
<table name="Y" address="2a5e0" elements="17" />
A. These addresses can't be relative to the image itself can it ? The image is only reads to 0x27ff0, how does it reach 2a621 ? I'm assuming these are not absoute addresses ?
B. How did you determine what offsets relates to each map ? Did you reverse the entire ROM to follow the numerous simultaneous threads ? How did you figure out which interrupt, I/O etc relates to the different entry points ? eg 0x220, 0x240. Is this information available anywhere to share ?
Cheers.