EVO X Piasiniengineering Read/Write DONE !

Announcements, dicussion about any topic that would have broad interest to the forum members

Moderator: Freon

EVO X Piasiniengineering Read/Write DONE !

Postby christian_piasini » Sat Feb 09, 2008 9:03 am

Finaly I get the ECU of the Lancer EVO X to work on.....

and in 10 min. we done the reading....

See the picture of the ecu below connect to Serial Suite Piasiniengineering.

Christian Piasini
R&D Piasiniengineering
Attachments
EVO X ECU.JPG
EVO X ECU.JPG (686.08 KiB) Viewed 19251 times
christian_piasini
 
Posts: 101
Joined: Sat Nov 25, 2006 8:50 am
Location: Italy

Postby FrSTi » Sun Feb 10, 2008 10:01 am

And then... ?
FrSTi
 
Posts: 79
Joined: Wed Jun 29, 2005 6:09 am
Location: facing my laptop

Postby DarkECU » Mon Feb 11, 2008 3:12 am

FrSTi wrote:And then... ?


and then he'll wants a lot of euro...
DarkECU
 
Posts: 25
Joined: Tue Apr 25, 2006 12:01 am

Postby FrSTi » Wed Feb 13, 2008 11:46 am

DarkECU wrote:
FrSTi wrote:And then... ?


and then he'll wants a lot of euro...


That's not the right place to advert :lol:
FrSTi
 
Posts: 79
Joined: Wed Jun 29, 2005 6:09 am
Location: facing my laptop

Postby wickedchimp » Thu Mar 20, 2008 6:33 am

Any new developements here. I would love to be able to tune my evo x in the near future. What software did you use to read/writee from the ECU?
wickedchimp
 
Posts: 3
Joined: Thu Feb 28, 2008 10:19 am

Postby DarkECU » Fri Jun 06, 2008 1:49 am

here is Evo-X Euro rom

i've just looked it for a small time and found some maps fast

<map name="Timing Map High Octane" type="3" active="1" help="" class="Timing" map_struct="" level="0">
<rows count="23" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="22" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data count="1" offset="#5590B" storagetype="int8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc="" inc="1" incb="5" incdata="0" incdatab="0" inc_dir="1" order="rc" color_dir="1"/>
</map>

<map name="Timing Map Low Octane" type="3" active="1" help="" class="Timing" map_struct="" level="0">
<rows count="23" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="22" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data count="1" offset="#55B0D" storagetype="int8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc="" inc="1" incb="5" incdata="0" incdatab="0" inc_dir="1" order="rc" color_dir="1"/>
</map>

<map name="VVT" type="3" active="1" help="" class="Mivec" map_struct="" level="0">
<rows count="24" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="21" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data scaling="Evo32_data_VVT_Angle" count="1" offset="#5D7F7" order="rc" color_dir="1"/>
</map>

<map name="VVT2" type="3" active="1" help="" class="Mivec" map_struct="" level="0">
<rows count="24" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="21" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data scaling="Evo32_data_VVT_Angle" count="1" offset="#5D9F7" order="rc" color_dir="1"/>
</map>

<map name="VVT3" type="3" active="1" help="" class="Mivec" map_struct="" level="0">
<rows count="24" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="21" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data scaling="Evo32_data_VVT_Angle" count="1" offset="#5DBF7" order="rc" color_dir="1"/>
</map>

<map name="VVT4" type="3" active="1" help="" class="Mivec" map_struct="" level="0">
<rows count="24" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="21" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data scaling="Evo32_data_VVT_Angle" count="1" offset="#5DDF7" order="rc" color_dir="1"/>
</map>

<map name="Fuel Map Low Octane1" type="3" active="1" help="" class="Fuel" map_struct="" level="0">
<rows count="21" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="16" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data scaling="Evo32_axis_AFR" count="1" offset="#55027" storagetype="uint8" order="cr" color_dir="1"/>
</map>

<map name="Fuel Map High Octane" type="3" active="1" help="" class="Fuel" map_struct="" level="0">
<rows count="21" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="16" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data scaling="Evo32_axis_AFR" count="1" offset="#5517F" storagetype="uint8" order="cr" color_dir="1"/>
</map>

<map name="Fuel Map Low Octane" type="3" active="1" help="" class="Fuel" map_struct="" level="0">
<rows count="21" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="16" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data scaling="Evo32_axis_AFR" count="1" offset="#552D7" storagetype="uint8" order="cr" color_dir="1"/>
</map>

<map name="Fuel Map High Octane1" type="3" active="1" help="" class="Fuel" map_struct="" level="0">
<rows count="16" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<cols count="21" offset="#0" storagetype="uint8" func_2val="[value]" func_val2="[value]" format="%.2f" metric="" caption="" desc=""/>
<data count="1" offset="#5542F" storagetype="uint8" func_2val="14.7/([value] / 128)" func_val2="[value]" format="%.2f" metric="" caption="" desc="" inc="1" incb="5" incdata="0" incdatab="0" inc_dir="1" order="rc" color_dir="1"/>
</map>
Attachments
EVO-X.zip
(320.66 KiB) Downloaded 695 times
DarkECU
 
Posts: 25
Joined: Tue Apr 25, 2006 12:01 am

Postby alan678 » Fri Jun 06, 2008 7:39 pm

Got an XML file yet :D
alan678
 
Posts: 1
Joined: Sun Jul 23, 2006 10:47 am
Location: Vista, CA (San Diego)

Here's some x and y offsets for the hex above

Postby SEFIxMR » Sat Jun 07, 2008 1:43 am

fuel rpm offset: 60946
fuel load offset: 60876
ign rpm offset: 609D8
ign load offset 60A0C
mivec load offset: 60dde
mivec rpm offset: 6104a
SEFIxMR
 
Posts: 1
Joined: Wed May 10, 2006 4:46 pm

Postby S54fan » Sat Jun 07, 2008 3:20 am

What MCU is it? I want to disassemble the ROM, but can't find an entry point so far by using a guess of M32R variants.
S54fan
 
Posts: 233
Joined: Fri Dec 16, 2005 4:39 am

Postby S54fan » Sat Jun 07, 2008 3:49 am

Entry point seems to be 0, but I can't work out the memory mapping yet or which M32R to use to get the right instructions...
S54fan
 
Posts: 233
Joined: Fri Dec 16, 2005 4:39 am

Postby S54fan » Sun Jun 08, 2008 1:21 am

"The EIT vector entry is located at the beginning of the internal ROM/extended external areas. The branch instruction
for jumping to the start address of each EIT event processing handler is written here. Note that it is the branch
instruction and not the jump address itself that is written here."

The first bytes are actual code, not a vector... change it to code and you can start to disassemble the code. I'm moving house in 48 hours and have boxes everywhere, wish I could play more.
S54fan
 
Posts: 233
Joined: Fri Dec 16, 2005 4:39 am

Postby Freon » Sun Jun 08, 2008 9:40 am

What chip is this based on?
Freon
 
Posts: 700
Joined: Thu Nov 17, 2005 5:50 pm
Location: Indianapolis, IN

Postby S54fan » Sun Jun 08, 2008 1:10 pm

M32176 appears as text in the ROM, but the 32176 is only 512k flash ROM whereas this image is 1024k.
S54fan
 
Posts: 233
Joined: Fri Dec 16, 2005 4:39 am

More details

Postby christian_piasini » Wed Jun 11, 2008 1:57 pm

I see a nice map at A62D5, maybe can be the read sequence... ;-)


Below the picture of the MCU



Best regards


Christian Piasini
R&D Piasiniengineering
Attachments
DSCN0192.JPG
DSCN0192.JPG (1.06 MiB) Viewed 18832 times
christian_piasini
 
Posts: 101
Joined: Sat Nov 25, 2006 8:50 am
Location: Italy

Postby radsdau » Wed Jun 11, 2008 3:36 pm

I see a nice map at A62D5, maybe can be the read sequence...
lol I guess this ROM is one of yours... :)
radsdau
 
Posts: 674
Joined: Wed Feb 08, 2006 6:56 pm

Next

Return to General Discussion

Who is online

Users browsing this forum: No registered users and 9 guests