![]() |
ROM Table Discovery & Definitions
Seeing as there isn't a specific thread for this I thought I'd start one rather than tagging it in the middle of the Tactrix threads.
I decided to try WinOLS with some success, however I was wondering if those with IDA could look through and determine if these tables are of any use and what they do. It seems that WinOLS is fairly good at determining the actual tables and has a go at formulating the expressions, as well as allowing you to view them in a table or 3D format you would be familiar with. Below are the 10 largest tables that are not yet defined, on my definition at least, for ZA1JA02G. I haven't looked at the A01G but so far the 2 are the same. @Td-d @ztan I'll post the same over on Romraider to see if they can be of any assistance. Addresses: Code:
<table name="Alpha 1" storageaddress="1070B8">Code:
<table type="3D" name="Alpha 1" category="Alpha" storagetype="uint8" endian="big" sizex="19" sizey="31" userlevel="3"> |
I'll have a look in IDA.
Last tried to use WinOLS in 2006... |
Unpicking "Alpha 1":
From addresses given: Code:
ROM:00106FF0 flt_106FF0: .float 800.0, 1200.0, 1600.0, 2000.0, 2400.0, 2800.0, 3200.0, 3600.0, 4000.0, 4400.0Code:
ROM:000B2EF4 stru_B2EF4: Table_type <h'13, 0, h'1F> ; DATA XREF: sub_4FFD2+1CoCode:
ROM:0004FFD2 sub_4FFD2: ; CODE XREF: sub_4FEBE+Ep |
*Thanks, I've updated the code. I figured it would be something like that as the table looks like this:
https://dl.dropboxusercontent.com/u/...lub/Alpha1.jpg Seems to have higher numbers in the lower torque areas. As more are found I'll update the 1st post. |
Some more ;)
Addresses: Code:
<table name="Alpha 11" storageaddress="103310">Code:
<table type="3D" name="Alpha 11" category="Alpha" storagetype="uint16" endian="big" sizex="9" sizey="7" userlevel="3"> |
Rather than just picking random tables I have been overlooking the entire ROM, I found these 4 2D tables all in the same portion of the hex dump. They seem to correspond to RPM so I wonder if these are cylinder comp tables of some sort. When viewed as a chart they vary quite a bit.
Code:
<table name="Alpha 21" storageaddress="11E61C">Code:
<table type="2D" name="Alpha 21" category="Alpha" storagetype="float" endian="big" sizey="15" userlevel="3"> |
i dont know what it is but i wanna learn all about it
|
i need help here
i tried find FFF106FF0 it is same but not analyze Code:
OM:00106FF0 dword_106FF0: .data.l h'44480000, h'44960000, h'44C80000, h'44FA0000Quote:
|
Quote:
An option box will come up with data type rotations that you want included in the data carousel - check "float". Pressing "d" in IDA will change the data type. To change the line of numbers into an array, press "*" and enter the length of the array. |
So this data is available on the CANBUS:
http://www.ft86club.com/forums/showthread.php?t=91170 I want it on my Tactrix. How do we go about getting it? |
Quote:
I suspect what the oft guys did was aquired a device that performes those read functions then sniffed the can buss data requests and coppied requests into oft. |
Quote:
|
Quote:
I had a look at this briefly a couple of years ago, sniffing Techstream requests on CAN: http://www.romraider.com/forum/viewt...8475&start=296 |
Quote:
Quote:
|
| All times are GMT -4. The time now is 10:19 AM. |
Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
User Alert System provided by
Advanced User Tagging v3.3.0 (Lite) -
vBulletin Mods & Addons Copyright © 2026 DragonByte Technologies Ltd.