EFIDynoTuning Forum

Points is not quite the right word, uses is more appropriate.

No perceptible change so long as the extension is done properly.

If joins are high resistance or the wire is undersized then voltage drop would start to impact results.

Running the revised HEGO wiring with other high current circuits could impact results due to EMI.

Yes flag determines 8 or 2 added to 926e, which gives 9276 or 9270.

No, 9276 or 9270 is loaded into temp7l.

Indirect means get the value at the address held by the register. The register is temp7l, the address is 9276 or 9270 and the values at 9276 and 9270 are 13c8 or 13a4.

It is bank 1 for 9276 and 9270 because bank 1 is the data bank set as part of the boot sequence, and the operation is a data operation.

To put it another way, indirect means get the values 13c8 or 13a4, at the address 19276 or 19270 held by the register temp7l.

Temp2l gets the result of adding the rbase value 1723e to the indirect value 13c8 or 13a4.

Direct is what you were trying to do in your earlier post.

Direct is the value held by temp7l.
Indirect is the value @ the address held by temp7l.

Did you get this?

Something like this could go in CMT

You can get an unregistered copy of lux0.cry for unregistered BE from here

http://eecanalyzer.net/strategies?view= ... fileId=587

Limited use for unregistered though.

Ok, read up, post back if it still doesn't make sense.

Two things appear to be tripping you up.
Address mode for line 921a7, what do you make of that?
Data bank, once memory expansion is enabled and the data bank is set, which commands automatically get data from which bank?

From your pasted example, it could be 12af or 12b1, depends on B5_Rad.

Add a couple lines to your comment file for the sum results of both.

Questioning your example, R26 is loaded with 0. In this case it's 8 or a.

Rfe is an rbase, you can likely find the value it holds in your msg file or you could look in lst for where Rfe is loaded with a value.

Look at code preceding your pasted snippet for where r26 is loaded with a value. An rbase could be set over a range but the jump bit will foil the plan due to +8 vs +8+2.

Thanks for the updated files.

You could try Ghidra for digging around exe and dll.
https://ghidra-sre.org/

Usb sniffer or packet capture would allow looking at usb traffic.

The QH gives access to all of the ECU, so what is to be gained from the diagnostic subset??