MD360163 / MH7202f / H8 [Archive]

bfarnam

02-07-2010, 06:28 PM

Ceddy et al,

I have spent some time trying to understand and get to the bottom of some issues. In so far most development work has been spent on the 4 channel ECU’s for DSM, EVO, etc. As you know these are physically different from the 6 channel ECU’s (and by channel I am referring to the injector drive circuitry) for the 3000 platform.

There are some that have been very (very very) slowly decompiling and creating ECUFlash XML files for this (3000) ECU but their work has been progressing slowly and I have discovered some differences in your (Ceddy's) XML files vs. theirs (Jeff's).

Namely in your (Ceddy's) XML def file (http://ceddy.us/?page_id=12) your Octane Maps pull the Load from 2e116.

On Jeff aka Gatecrasher’s XML def file (http://www.3si.org/forum/f42/99-vr4-ecuflash-definition-file-477748/) his Octane Maps pull the Load from 2dfc8.

Can anyone explain the differences?

Also I am trying to get my copy of IDA Pro to work following the H8 decompile directions (http://www.geekmapped.com/forums/showthread.php?t=853) and while it works with an EVO rom it will not work with the 3000GT ROM – tons and tons of errors. Maybe I am doing something wrong but more than likely the renaming file is specific to the DSM/EVO ROMs.

Can anyone be of assistance?

What I am trying to accomplish is to map out all of the tables and compare them to make sure that Ceddy’s XML file is correct and also to further the development of the ECU. I would like to see our ECU to the point of the DSM/EVO ECU’s with all of the Ceddy’s Mods.

Sorry about the pics . . . they are from my phone. Eerie - looks a LOT like the DSM (http://ceddy.us/wp-content/uploads/MG_19291.JPG). . . Can any one say Sigma 6 (or whatever reusable methodology Mitsubishi prescribes too)?

PCB: JE331B32804B
ECU: MH7202F / A01 / 9F1
EMU: MD360163

http://www.taconicdrivingschool.com/images/b/SSPX4372.jpg
http://www.taconicdrivingschool.com/images/b/SSPX4373.jpg

bfarnam

03-07-2010, 08:36 PM

OK - I drag and drop into IDA

http://www.taconicdrivingschool.com/images/b/load_1.gif

http://www.taconicdrivingschool.com/images/b/load_2.gif

http://www.taconicdrivingschool.com/images/b/load_3.gif

After I OK the H8 code fixup, I get this . . .

http://www.taconicdrivingschool.com/images/b/error_1.gif

This is the output window:

bytes pages size description
--------- ----- ---- --------------------------------------------
524288 64 8192 allocating memory for b-tree...
524288 64 8192 allocating memory for virtual array...
262144 32 8192 allocating memory for name pointers...
-----------------------------------------------------------------
1310720 total memory allocated

Loading IDP module C:\Program Files\IDA\procs\pc.w32 for processor metapc...OK
Autoanalysis subsystem has been initialized.
Possible file format: PalmPilot program file (68K) (C:\Program Files\IDA\loaders\pilot.ldw)
Unloading IDP module C:\Program Files\IDA\procs\pc.w32...
Loading IDP module C:\Program Files\IDA\procs\h8500.w32 for processor h8500...OK
Analysis options are reset to the configuration file defaults
0. Creating a new segment (00010000-00030000) ... ... OK
Loading file 'C:\Documents and Settings\Brett\My Documents\Projects\Copy of 23860006.bin' into database...
Detected file format: Binary file
Flushing buffers, please wait...ok
File 'C:\Documents and Settings\Brett\My Documents\Projects\Copy of 23860006.bin' is successfully loaded into the database.
Compiling file 'C:\Program Files\IDA\idc\ida.idc'...
Executing function 'main'...
Compiling file 'C:\Program Files\IDA\idc\onload.idc'...
Executing function 'OnLoad'...
The initial autoanalysis has been finished.
H8/500 create segment 10000-1ffff
Deleting segment (00010000-00030000) ...

0. Creating a new segment (00010000-0001FFFF) ...
Additional segment (0001FFFF-00030000) ...
1. Creating a new segment (0001FFFF-00030000) ... ... OK
... OK
H8/500 create segment 20000-2ffff
2. Creating a new segment (00020000-0002FFFF) ...
Additional segment (0002FFFF-00030000) ...
3. Creating a new segment (0002FFFF-00030000) ... ... OK
... OK
H8/500 Create RAM
4. Creating a new segment (0000EE80-0000FFFF) ... ... OK
H8/500 Perform Vector Table Fixups
Entry Point Fixups Performed 1517c...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 160bf...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15a5c...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 163b2...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 168e7...
Entry Point Fixups Performed 15fae...
Entry Point Fixups Performed 15fd2...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15c90...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15db5...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15d78...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 16c18...
Entry Point Fixups Performed 16ec1...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 1682f...
Entry Point Fixups Performed 1682f...
Entry Point Fixups Performed 16869...
Entry Point Fixups Performed 15197...
Entry Point Fixups Performed 16875...
Entry Point Fixups Performed 16875...
Entry Point Fixups Performed 16876...
Entry Point Fixups Performed 15197...
H8/500 Mitsubishi ECU autonalysis finished.
IDA is analysing the input file...
You may start to explore the input file right now.

I have not Load File / Additional Binary File yet