openecu.org

Hi folks,

So, I just bought a USDM 2005 MR, followed immediately by a bit of time with the laptop and ecuflash. However, the ROM that I'm getting off this car is...well...weird. The ECUID it's reading is blank, and it's identifying it as a 2004 with an internal ID of 94170008. Opening up the high-octane fuel map, I see nothing but "inf" across the board, and other ROM locations are similarly confused.

I've attached the ROM that I pulled in case anyone can tell me what exactly I'm looking at, and perhaps suggest if I'm doing something wrong (or just have an oddball flash on this car). I've verified this several times, and compared what's been read against the ECU. I'm using the Tactrix 1.3 Mitsu cable. I'll be happy to post any additional information, if it would help.

Thanks!

Just for the archives, I found the problem: it was a simple matter of the ECUID having been changed to a 2004 ID, in what I can only guess was a rather lame attempt to prevent someone from opening the ROM in EcuFlash. Pulling up the ROM in a hex editor and changing it to the correct ECU ID (96940011, in my case), did the trick.

Can you explain ?

Sure. Basically, I just added the following to my "evo7base.xml" file (just before </rom> at the end of the file):

Code: Select all

<table name="ECU Internal ID" category="Misc" type="2D" level="4" address="f52" scaling="Hex8">
        <table name="ID" type="Static X Axis" elements="4">
                <data>-</data>
                <data>-</data>
                <data>-</data>
                <data>-</data>
        </table>
</table>

Then, I copied the "correct" ROM metadata file (in my case, "96940011.xml") to whatever ROM ID was being reported by EcuFlash (in this case, "94170008.xml"), and opened the ROM up in EcuFlash. Then, I just changed the "ECU Internal ID" field to 96940011, saved the ROM, and re-opened it. At that point, you could just delete the extra metadata copy ("94170008.xml") you'd just made.

If you have a hex editor that you're comfortable with, editing the data at address 0xf52 in the ROM itself to the ROM ID it's supposed to be will work too.

This seems to be a pretty common trick employed by Certain Professional Tuners.

Here's my xml :

Code: Select all

<rom>
   <romid>
      <xmlid>96940011</xmlid>
      <internalidaddress>f52</internalidaddress>
      <internalidhex>96940011</internalidhex>
      <caseid>MN132874</caseid>
      <make>Mitsubishi</make>
      <market>USDM</market>
      <model>Lancer</model>
      <submodel>EVO8</submodel>
      <transmission>Manual</transmission>
      <year>2004</year>
      <flashmethod>mitsukernel</flashmethod>
      <memmodel>SH7052</memmodel>
   </romid>

   <include>evo7base</include>

   <table name="High Octane Fuel Map" address="33bd">
      <table name="Load" address="6440" elements="18"/>
      <table name="RPM" address="6418" elements="15"/>
   </table>

   <table name="Low Octane Fuel Map" address="34d7">
      <table name="Load" address="6440" elements="18"/>
      <table name="RPM" address="6418" elements="15"/>
   </table>

   <table name="High Octane Ignition Map 1" address="39d5">
      <table name="Load" address="64a0" elements="19"/>
      <table name="RPM" address="646e" elements="20"/>
   </table>

   <table name="Low Octane Ignition Map 1" address="3b5d">
      <table name="Load" address="64a0" elements="19"/>
      <table name="RPM" address="646e" elements="20"/>
   </table>

   <table name="Injector Battery Voltage Latency Compensation" address="37c0">
      <table name="Battery Voltage" address="6380" elements="7"/>
   </table>

   <table name="Rev Limit" address="158c"/>

   <table name="Stationary Rev Limit" address="2b4a"/>

   <table name="Accel Enrichment" address="3864">
      <table name="RPM" address="61b2" elements="15"/>
   </table>

   <table name="Boost Control Load Offset" address="1a70"/>

   <table name="Turbo Boost Error Correction" address="4488">
      <table name="Boost Error" address="6758" elements="17"/>
   </table>

   <table name="Boost Desired Engine Load # 1" address="44f8">
      <table name="RPM" address="672e" elements="16"/>
   </table>

   <table name="Boost Desired Engine Load  # 2" address="450e">
      <table name="RPM" address="672e" elements="16"/>
   </table>

   <table name="Boost Desired Engine Load # 3" address="4524">
      <table name="RPM" address="672e" elements="16"/>
   </table>

   <table name="Boost Desired Engine Load # 4" address="453a">
      <table name="RPM" address="672e" elements="16"/>
   </table>

   <table name="Max Wastegate Duty # 1" address="44a0">
      <table name="RPM" address="672e" elements="16"/>
   </table>

   <table name="Max Wastegate Duty # 2" address="44b6">
      <table name="RPM" address="672e" elements="16"/>
   </table>

   <table name="Max Wastegate Duty # 3" address="44cc">
      <table name="RPM" address="672e" elements="16"/>
   </table>

   <table name="Max Wastegate Duty # 4" address="44e2">
      <table name="RPM" address="672e" elements="16"/>
   </table>

   <table name="Open Loop Load # 1" address="3624">
      <table name="RPM" address="61b2" elements="15"/>
   </table>

   <table name="Open Loop Load # 2" address="363a">
      <table name="RPM" address="61b2" elements="15"/>
   </table>

   <table name="Open Loop Throttle Low Load" address="3656">
      <table name="RPM" address="61b2" elements="15"/>
   </table>

   <table name="Open Loop Throttle High Load" address="366c">
      <table name="RPM" address="61b2" elements="15"/>
   </table>

   <table name="IC Relay Timer Time" address="2498">
      <table name="Condition"/>
   </table>

   <table name="IC Relay Timer Control Judgement" address="209e">
      <table name="Condition"/>
   </table>

   <table name="IC Relay Timer Air Temp" address="20a2"/>

   <table name="IC Relay Timer ON Mode Switch Time" address="247e"/>

   <table name="IC Relay Timer Control RPM" address="2480"/>

   <table name="IC Relay Timer Control Water Temp" address="2482">
      <table name="Condition"/>
   </table>

   <table name="IC Relay Control Vehicle Speed" address="2486"/>

   <table name="IC Relay Control EV" address="2488"/>

   <table name="Desired ISCV intial step position with AC off-Neutral"

address="4276">
      <table name="Engine Temp" address="6630" elements="8"/>
   </table>

   <table name="Desired ISCV intial step position with AC off-Drive" address="4284">
      <table name="Engine Temp" address="6630" elements="8"/>
   </table>

   <table name="Desired ISCV intial step position with AC on-Neutral"

address="4292">
      <table name="Engine Temp" address="6630" elements="8"/>
   </table>

   <table name="Desired Idle RPM-Neutral" address="425a">
      <table name="Engine Temp" address="6630" elements="8"/>
   </table>

   <table name="Desired Idle RPM-Drive" address="4268">
      <table name="Engine Temp" address="6630" elements="8"/>
   </table>

   <table name="High Intake Air Temp ISCV Increase" address="220e">
      <table name="Condition" elements="2"/>
   </table>

   <table name="Boost Limit" address="3614">
      <table name="RPM" address="6b7e" elements="9"/>
   </table>

   <table name="Desired Idle RPM with AC on" address="186c">
      <table name="Condition"/>
   </table>

   <table name="High Intake Air Temp Idle Speed Target" address="220a">
      <table name="Condition"/>
   </table>

   <table name="Wastgate Solenoid Activation RPM" address="1668">
      <table name="Condition"/>
   </table>

   <table name="Speed Limit" address="158e">
      <table name="Condition"/>
   </table>

   <table name="Injector Scaling" address="1506"/>

   <table name="Min Coolant Temp for Closed Loop" address="15aa"/>

   <table name="Boost Cut Delay Timer" address="159a" elements="2"/>

   <table name="MAF Scaling" address="3306" scaling="AirFlow8">
      <table name="Load" address="6330" elements="21"/>
   </table>

   <table name="MAF Smoothing Table" address="3322">
      <table name="Load" address="6330" elements="21"/>
   </table>

   <table name="Air Temperature Compensation" address="333e" scaling="uint8">
      <table name="Degrees" address="654e" elements="8"/>
   </table>

   <table name="Barometric Pressure Compensation" address="3351">
      <table name="Atmosphere Pressure" address="631e" elements="4"/>
      <table name="RPM" address="6364" elements="9"/>
   </table>

   <table name="Idle Stepper Look-up Table" address="4399">
      <table name="Throttle Position" address="6664" elements="8"/>
      <table name="RPM" address="667e" elements="27"/>
   </table>

   <table name="Knock Sensor Filter Map 1" address="4850">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 2" address="48eb">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 3" address="497b">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 4" address="4a0b">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 5" address="4a9b">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 6" address="4b2b">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 7" address="4e09">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 8" address="4e99">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 9" address="4f29">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 10" address="4fb9">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 11" address="5049">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Knock Sensor Filter Map 12" address="50d9">
      <table name="TAR" address="6836" elements="12"/>
      <table name="RPM" address="6816" elements="11"/>
   </table>

   <table name="Immobilizer"/>

   <table name="Boost Enhancement (Anti-Lag) Start RPM" address="1680"/>

   <table name="MAF Sensor Filtering" address="1508">
      <table name="Load"/>
   </table>

   <table name="MAF Size" address="150c"/>

   <table name="Boost Enhancement (Anti-lag) Stop RPM" address="1682"/>

   <table name="Min Temp for Full Boost Control" address="2200"/>

   <table name="Boost Control Limiting Vehicle Speed" address="2204">
      <table name="Condition"/>
   </table>

<table name="ECU Internal ID" category="Misc" type="2D" level="4" address="f52" scaling="Hex8">
        <table name="ID" type="Static X Axis" elements="4">
                <data>-</data>
                <data>-</data>
                <data>-</data>
                <data>-</data>
        </table>
</table>

</rom>

When i open the rom , i've all time " inf " or incredible value ( timing advance sometimes 104 ° )

I add you on messenger