View Single Post
Old 12-29-2013, 05:28 AM   #355
ztan
Senior Member
 
Join Date: Jul 2013
Drives: Toyota 86
Location: Gold Coast, Australia
Posts: 311
Thanks: 44
Thanked 361 Times in 145 Posts
Mentioned: 60 Post(s)
Tagged: 0 Thread(s)
Quote:
Originally Posted by Td-d View Post
Hmm.. Ztan, can you have a look at the following code - normally, the SSMGet routines fetch a float direct parameter, run it through a makeuint 8 or makeuint16 subroutine, and pop out the SSM parameter - this is the way MAF voltage is pulled in the SH7058 roms.

This one pulls another subroutine, which I have not had the patience to pull apart in understanding Maybe you can have a look?
Starting from scratch, got the Renesas 72531 manual, this stuff really makes my head hurt.

12FCC looks like a routine where eventually r0 gets tested and if:
0 - goes to 129C4 and loads FFF842A0 into r5
1 - goes to 12FF2 and loads FFF848FE into r5
2 - goes to 12FFE and loads FFF8490E into r6
result from subroutine gets returned in r2

I'll need a lot more time to learn how these things work...

Is there any way to trace RAM addresses from their map locations?
Code:
010E00: 000D0560 pointer to MAF scaling table info

0D0560: 00360000 ?2D table with 0x36 (54) values
0D0564: 0011FCD4 pointer to 54 MAF_Volt float values
0D0568: 0011FDAC pointer to 54 MAF_G/S float values
I couldn't find any references to 10E00, which I assume is indirectly referenced.
ztan is offline   Reply With Quote