E9 MR

[spooky]

I have inherited either these two JDM 88570008.xml or 82980002.xml files for this rom image.

Try to reflash back...below is the msg i have copied & paste down..
[00:34:16.281] Version 1.29.906
[00:34:16.281] 8 memory models read.
[00:34:18.781] 157 ROM metadata models read.
[00:34:18.781] checksum module "subarudbw" loaded.
[00:34:18.781] flashing tool "wrx02" loaded.
[00:34:18.781] flashing tool "wrx04" loaded.
[00:34:18.781] flashing tool "sti04" loaded.
[00:34:18.781] flashing tool "sti05" loaded.
[00:34:18.781] flashing tool "mitsukernel" loaded.
[00:34:18.781] flashing tool "mitsukernelocp" loaded.
[00:34:18.781] flashing tool "mitsubootloader" loaded.
[00:34:22.265] 524288 byte image read.
[00:34:52.281] 524288 byte image written.
[00:35:10.734] sending init sequence 1 (0001)
[00:35:11.750] got 0x05 response
[00:35:11.750] sending init sequence 2
[00:35:11.765] got 0x1B response
[00:35:11.765] sending init sequence 3
[00:35:12.187] entering bootloader
[00:35:12.203] sending kernel size (0)
[00:35:12.218] sending kernel load address (0xFFFF6000)
[00:35:12.265] uploading kernel
[00:35:12.265] verifying kernel checksum response
[00:35:12.265] kernel valid
[00:35:12.281] sending init sequence 2
[00:35:12.312] got 0x1C response
[00:35:12.312] sending init sequence 3
[00:35:12.734] entering bootloader
[00:35:12.750] kernel read area: addr: 03FFFA len: 0006
[00:35:12.859] kernel rsp page: 030000
[00:35:12.875] kernel read addr: 03FFFA len: 06
[00:35:12.875] kernel rsp end
[00:35:14.906] sending init sequence 1 (0001)
[00:35:15.937] got 0x05 response
[00:35:15.937] sending init sequence 2
[00:35:15.937] got 0x1B response
[00:35:15.937] sending init sequence 3
[00:35:16.359] entering bootloader
[00:35:16.375] sending kernel size (0)
[00:35:16.406] sending kernel load address (0xFFFF6000)
[00:35:16.437] uploading kernel
[00:35:16.437] verifying kernel checksum response
[00:35:16.437] kernel valid
[00:35:16.453] sending init sequence 2
[00:35:16.484] got 0x1C response
[00:35:16.500] sending init sequence 3
[00:35:16.921] entering bootloader
[00:35:16.968] sending kernel size (3064)
[00:35:17.015] sending kernel load address (0xFFFF7000)
[00:35:17.062] uploading kernel
[00:35:17.562] verifying kernel checksum response
[00:35:17.562] kernel valid
[00:35:17.781] kernel get version
[00:35:17.812] kernel version is : OpenECU Mitsubishi SH7055 OCP Kernel V0.21
[00:35:17.828] Flashing image to ECU memory...
[00:35:18.234] comparing ECU flash memory pages to image file
[00:35:18.250] segment len ecu CRC32 img CRC32 same?
[00:35:18.281] FB01 00001000 FAB8AA11 FAB8AA11 YES
[00:35:18.328] FB02 00001000 8AA36F0E 8AA36F0E YES
[00:35:18.375] FB03 00001000 ACAA85F5 2F20E1B7 NO
[00:35:18.421] FB04 00001000 DE55A945 DE55A945 YES
[00:35:18.453] FB05 00001000 C3AE73EB C3AE73EB YES
[00:35:18.500] FB06 00001000 1FA5204B 1FA5204B YES
[00:35:18.546] FB07 00001000 D8083493 D8083493 YES
[00:35:18.593] FB08 00001000 46845B87 46845B87 YES
[00:35:18.750] FB09 00008000 7ACE14AF 7ACE14AF YES
[00:35:19.015] FB10 00010000 F5938ED7 F5938ED7 YES
[00:35:19.265] FB11 00010000 49A86DE7 49A86DE7 YES
[00:35:19.546] FB12 00010000 A0246194 A0246194 YES
[00:35:19.812] FB13 00010000 7549D4FD 7549D4FD YES
[00:35:20.093] FB14 00010000 DEAB7E4E DEAB7E4E YES
[00:35:20.359] FB15 00010000 DEAB7E4E DEAB7E4E YES
[00:35:20.625] FB16 00010000 DEAB7E4E DEAB7E4E YES
[00:35:20.640] kernel flash enable
[00:35:20.656] kernel blank flash page: addr: 00002000
[00:35:20.765] erased in 1 pulse(s)
[00:35:20.765] kernel write flash buffer addr: 00002000 len: 00000200
[00:35:20.875] kernel write flash buffer addr: 00002200 len: 00000200
[00:35:20.984] kernel write flash buffer addr: 00002400 len: 00000200
[00:35:21.093] kernel write flash buffer addr: 00002600 len: 00000200
[00:35:21.203] kernel write flash buffer addr: 00002800 len: 00000200
[00:35:21.312] kernel write flash buffer addr: 00002A00 len: 00000200
[00:35:21.421] kernel write flash buffer addr: 00002C00 len: 00000200
[00:35:21.531] kernel write flash buffer addr: 00002E00 len: 00000200
[00:35:21.640] kernel commit flash addr: 00002000 crc32 2f20e1b7
[00:35:21.718] written in 1 pulse(s)
[00:35:21.734] kernel flash disable
[00:35:21.734] verifying result...
[00:35:21.734] comparing ECU flash memory pages to image file
[00:35:21.734] segment len ecu CRC32 img CRC32 same?
[00:35:21.765] FB01 00001000 FAB8AA11 FAB8AA11 YES
[00:35:21.796] FB02 00001000 8AA36F0E 8AA36F0E YES
[00:35:21.828] FB03 00001000 2F20E1B7 2F20E1B7 YES
[00:35:21.875] FB04 00001000 DE55A945 DE55A945 YES
[00:35:21.906] FB05 00001000 C3AE73EB C3AE73EB YES
[00:35:21.953] FB06 00001000 1FA5204B 1FA5204B YES
[00:35:21.984] FB07 00001000 D8083493 D8083493 YES
[00:35:22.031] FB08 00001000 46845B87 46845B87 YES
[00:35:22.187] FB09 00008000 7ACE14AF 7ACE14AF YES
[00:35:22.453] FB10 00010000 F5938ED7 F5938ED7 YES
[00:35:22.718] FB11 00010000 49A86DE7 49A86DE7 YES
[00:35:23.000] FB12 00010000 A0246194 A0246194 YES
[00:35:23.265] FB13 00010000 7549D4FD 7549D4FD YES
[00:35:23.546] FB14 00010000 DEAB7E4E DEAB7E4E YES
[00:35:23.812] FB15 00010000 DEAB7E4E DEAB7E4E YES
[00:35:24.078] FB16 00010000 DEAB7E4E DEAB7E4E YES
[00:35:24.093] flash correct! exiting.

Does it means it is successful? I tested by enabling the launch at 3000rpm but it doesnt works. Seems like nothing has been flashed into the ecu.

Please advise. The rom image is JDM E9MR 6speed.

[S54fan]

The one you've posted has stationary rev limiter at 7969, have you posted the standard one?

Your flash log does show that one area was successfully changed.

This location does work on my JDM IX GSR ECU for the stationary rev limiter and the value appears to be showing as expected at 7969 on yours.

[S54fan]

Try comparing the ECU to your altered ROM file?

Post the altered ROM file?

[spooky]

HiHi,

This is the stock rom image of this JDM E9MR. The only area i have altered is the stationary rev limit only. The stationary rev limit is set to 2000 to do testing as in whether the flash is correct & working. But it seems that it is not working at all.

The rev limit is at 7606 (not touched).

I have inherited the 89280002.xml file. I have also noticed that the Boost Desired Engine Load #4 is missing for this E9MR GSR 6 speeder.

Please advise.

The one you've posted has stationary rev limiter at 7969, have you posted the standard one?

Your flash log does show that one area was successfully changed.

This location does work on my JDM IX GSR ECU for the stationary rev limiter and the value appears to be showing as expected at 7969 on yours.

[S54fan]

I asked it to inherit my 88570008.xml and the maps all appeared correctly, except I put BDEL and some of the other WG tables under Misc. You might also need to change the level to developer. I've not had time to tidy up some of these xml files.

I did a quick disasm on the file you posted and I think that 274b listed as RPMstatbyte is correct. The stock value is 7969. There is code that reads this value and compares it with RPM, but that is as far as I've had time to look for you.

I've only tested this limiter down to 5000 RPM, if you are changing the correct address perhaps also try 5000 RPM?

If not that then there must be a difference in the way the stationary rev limiter works on this ECU.

[S54fan]

PROBLEM FOUND.

Change the address to from 274b to 274a and change the scaling to RPMstat limit. Save models to make changes to the xml you have for this ROM only.

For some reason this model doesn't have the byte at 274a set to zero like the earlier 9 GSR/GT/RS.

[S54fan]

This should have the 3000 RPM limit and then be able to be adjusted by either the original or the altered xml file.