I realize this is likely not the best first post to make, but here goes.
First off, some background.
I have the complete engine/harness/PCM/immo/key setup from a wrecked 2001 Montero Sport 6G72 3.0L, originally equipped with the Invecs 4 speed auto, that is going into a 1990 Mighty Max V6 truck with a V5MT1 5 speed.
The engine runs perfectly fine on the test stand, no immo issues, just the normal "where are my extra CALIFORNIA TOYS!!!!" codes for the non-existent rear O2 sensors, the evap solenoid circuit, fuel temp sensor, and auto trans control relay.
As far as diagnostics/flashing, I have an OpenPort 2.0, the latest ECUFlash, a copy of Palmer PCMScan, and a hand-held code reader.
From 4 days of searching, it seems that an eclipse 5 speed rom won't play nicely on a Montero setup, mainly due to the DIS Vs dizzy issues, so I'll likely be modding my own rom to cut out the rear O2 and all that cruft.
The open-ecu forums seem to be dead on the subject of anything with more than 4 cylinders, so I'm asking here.
The main questions I have are:
1) How does one find the periphery bit locations in an unknown rom such as this? What methods are used, possibly looking for subroutines/hex markers?
2) Is there a central repository for binary/assembly code edits like the 1G DSM's had?
3) how are the immobilizer seed/key addresses found? I'd like to keep the immobilizer active and not just nuke it.
I have searched, but not found very much information on Montero PCM work.
Sorry for the questions and whatnot.
First off, some background.
I have the complete engine/harness/PCM/immo/key setup from a wrecked 2001 Montero Sport 6G72 3.0L, originally equipped with the Invecs 4 speed auto, that is going into a 1990 Mighty Max V6 truck with a V5MT1 5 speed.
The engine runs perfectly fine on the test stand, no immo issues, just the normal "where are my extra CALIFORNIA TOYS!!!!" codes for the non-existent rear O2 sensors, the evap solenoid circuit, fuel temp sensor, and auto trans control relay.
As far as diagnostics/flashing, I have an OpenPort 2.0, the latest ECUFlash, a copy of Palmer PCMScan, and a hand-held code reader.
From 4 days of searching, it seems that an eclipse 5 speed rom won't play nicely on a Montero setup, mainly due to the DIS Vs dizzy issues, so I'll likely be modding my own rom to cut out the rear O2 and all that cruft.
The open-ecu forums seem to be dead on the subject of anything with more than 4 cylinders, so I'm asking here.
The main questions I have are:
1) How does one find the periphery bit locations in an unknown rom such as this? What methods are used, possibly looking for subroutines/hex markers?
2) Is there a central repository for binary/assembly code edits like the 1G DSM's had?
3) how are the immobilizer seed/key addresses found? I'd like to keep the immobilizer active and not just nuke it.
I have searched, but not found very much information on Montero PCM work.
Sorry for the questions and whatnot.