RomRaider

It will be interesting to see if the new OpenPort cable can flash the Mazda roms.

You can read this old post with some basics the 2d/3d map structure for Subarus which will be the same:
http://forums.openecu.org/viewtopic.php?t=503

From this, you can make some guesses about MAF scaling, timing and fuel tables but nothing definitive. Beyond that, you would need to reverse engineer the ROM with IDA. This is no easy task. You are talking about many, many hours of work and that is if you know what you are doing.

Thanks for link! I will have to subscribe to get the files posted there, and read it several times to understand it. For right now, I was interested in some fueling tables and ignition tables. And yes I understand what loooong hours for r&d are like, but this is one thing that I would have to learn first, ugg, and that is very daunting. Although I am willing to try, and am a quick learner. Any more tips?

Check out Freon's thread on getting started with IDA:
topic2184.html

Some guesses based on this particular rom:
MAF SCALING? 0x67F28
PRIMARY FUEL? 0x685B4, 0x68624, 0x6865C
TIMING? 0x67974, 0x679AC

Merchgod,

What version of IDA Pro will work wiht our ECUs? I saw that v 4.9 is avail as a free download and if that works, I may start playing with it. Not sure I want to spend $515 to get v5.2 though.

I'm pretty sure the freeware version won't work because it doesn't support either processor, although I think Colby created his own HC16 module to work with an older version (do a search at the openecu site).

Okay, I have been looking over alot of pages trying to understand it all. Some of it makes sense, some of it I don't understand yet. So far though, I don't think I am looking at the same things you guys are. The locations you mention for possible maps, don't look like maps to me... I also found a different rom, I have found what looks to be timing/fueling maps, and others, but they would be a guessing game to me. Since you guys are more familiar with this stuff, maybe you could compare what else I got...

The offsets I listed are not the actual data, they are the map "description" (a look-up table which describes the x/y/z offsets, size, etc. for each 2d/3d map). These are described in the link I posted earlier.

There's little you can do with a hex editor but make a few guesses and usually not very good ones at that. It would be like putting together a puzzle in a completely dark room. You might get a few pieces together, but you are not going to get very far. See if someone in the mazda community is/has worked on disassembly of these roms.

They link in openecu I read and couldn't