Toyota GR86, 86, FR-S and Subaru BRZ Forum & Owners Community - FT86CLUB - View Single Post - ECUFlash

ztan · 01-12-2014, 05:41 PM

I've finally found MAF voltage call. Many thanks to td-d, NSFW, and dschultz for their disassembly posts on the RomRaider forum.

Address is the same on A00C and A01G ROMs, is a 16 bit parameter called indirectly, gets scaled, and then indirectly references the MAF scaling table:

paramname = MAF_V
paramid = 0xFFF842AC
databits = 16
scalingrpn = x,0.000076293945,*

It is very indirectly referenced and took a lot of puzzling to find. For those interested in finding out how this ECU works, derivation of this RAM address and indirect referencing headaches posted in the Romraider forums:
http://www.romraider.com/forum/viewt...p=96956#p96956

01-12-2014, 05:41 PM	#359
ztan Senior Member Join Date: Jul 2013 Drives: Toyota 86 Location: Gold Coast, Australia Posts: 311 Thanks: 44 Thanked 362 Times in 145 Posts Mentioned: 60 Post(s) Tagged: 0 Thread(s)	I've finally found MAF voltage call. Many thanks to td-d, NSFW, and dschultz for their disassembly posts on the RomRaider forum. Address is the same on A00C and A01G ROMs, is a 16 bit parameter called indirectly, gets scaled, and then indirectly references the MAF scaling table: paramname = MAF_V paramid = 0xFFF842AC databits = 16 scalingrpn = x,0.000076293945,* It is very indirectly referenced and took a lot of puzzling to find. For those interested in finding out how this ECU works, derivation of this RAM address and indirect referencing headaches posted in the Romraider forums: http://www.romraider.com/forum/viewt...p=96956#p96956 Last edited by ztan; 01-13-2014 at 02:43 AM.