I've had a good run tonight and found the VTC limits for these ECUs

Add the following to your address files and let me know how it goes
Background info: I started with the known VTC points on Z32 8 bit ... which are the same addresses as Z32 16 bit. Using the VTC routine on the Z32 16 bit, it was just a matter of hunting down similar code where temp, TP and RPM were used around the same location
I'll work on ER34 next since I've been asked that a few times now...
VTC_TEMP_MIN_CUT,&HE7D0,1,1,1,1,VTC Solenoid ON > min temp
VTC_TEMP_MAX_CUT,&HE7D1,2,1,1,2,VTC Solenoid OFF > max temp
VTC_SPEED_CUT,&HE7D2,1,1,1,1,VTC Solenoid ON > speed
VTC_RPM_RECOVER,&HE7D3,2,1,50,VTC Solenoid ON > min RPM
VTC_RPM_CUT,&HE7D4,2,1,1,50,VTC Solenoid OFF > max RPM
VTC_TP_CUT,&HE7D5,1,1,1,1,VTC Solenoid ON > min TP