This patent and PDF are very interesting. I'm pretty sure the TI PDF explains a system that is used in LS1 type PCMs, as knock filtering parameters are set there by software. LT1 will still have what...
Type: Posts; User: dzidaV8
This patent and PDF are very interesting. I'm pretty sure the TI PDF explains a system that is used in LS1 type PCMs, as knock filtering parameters are set there by software. LT1 will still have what...
The new GM direct injection systems use a humidity sensor, e.g. 2015+ gen V trucks. Fuel temperature sensor is an option on 2004+ green plug PCMs and later ones, but it's an fuel VAPOR temperature...
Well I was wrong, I don't have dedicated 9381344 xdf, but I've succesfully used 9360361 xdf for that os. They are virtually identical.
I'll try to go through that OS on the next few evenings :)
Hi!
I made a small program to help editing XDF files, especially for OBD2 applications.
Many OSes have same parameters but located at different addresses, usually just moved an offset as...
I have one that is mostly correct, I'll try to finish it today and publish it.
What PCM are you disassembling? Ghidra currently does not support CPU32 specific opcodes so the disassembly of any P01, P59, P04 and so on will not be complete. The best way to start disassembling is...
Sure, I added an updated xdf to the first post :) And there's a lot more, beyond the A/C type switch.
Yes it will, BUT you have to adjust the diagnostic voltage threshold like in B-body bin. I'll give you details in a moment.
EDIT: value "20B8 vs knock sensor voltage 2" in EEXTRA xdf should be...
Here are my findings for the unused pins:
Here are my findings from the time I was reverse engineering the boards of LT1:
[disregard the TPU address mapping, it was done assuming the TPU was another HC11]
Another interesting piece to read about the TPU in LS1 PCMs
I agree with you, and I think we shouldn't consider the TPU as a microprocessor, I'm pretty sure it's an FPGA matrix with a tiny bootloader, like in 68332 micros. The binary opcodes for 68332 TPU are...
kur4o, I already have working reflash kernel for LT1 OBD2 PCMs, I'm using PCMHammer fork for PC side, the plan is to make PCMHammer usable on all VPW enabled PCMs/ECMs, so maybe it would be a good...
Ugh, scripts... Not my kind of thing really.
I'm trying to figure out the SLEIGH language to add missing CPU32 opcodes, but it makes my head explode...
I have a few PCMs lying around so I could help with testing, what is the project?
Hi!
I have ported my work on 12212156 OS from IDA to Ghidra, although there's no support for CPU32 tblu commands yet so the disassembly is incomplete, but the C decompiler view is an amazing help...
Here's my XDF for '603
EDIT: deleted due to possible copyright violation
Another interesting read about TPU: http://www.eslave.net/tpu/pdf/TPUMASMREF_D3.pdf
I think it's quite possible that the chip used in LT1 PCM is what was later integrated in CPU32 and HC16...
The later CPU32 Motorola chips might be helpful in figuring the LT1 TPU out. They have integrated TPU on a FPGA matrix that can also be custom microcode programmed.
Have a look at the documentation:...
Sounds like you're on a good path to figuring out the TPU!
Here's my disassembly of E and T sides with your info added.
I'm working on Ghidra 68HC11 implementation so we could transfer the work...
That's only true for 94-95 PCMs, 96-97 have separate knock sensor inputs.
The IRQ seems to be triggered every low resolution opti pulse, I'd have to trace the PCB but my guess is that IRQ pin is driven by TPU chip.
I made some progress on the E40 code. I think I've found built in block reflash routines starting at 0xEA0E4. From the commands there I think the flash chip is 29F800 series. Have a look at .idc file...
Hi all!
Since I have E40 PCM powered car I was thinking about opening the platform for open source flashing. Recently I have started the disassembly work on a Impala LS4 bin file I found here.
...
Mode $19 is "Read DTC Information", so it should return status of every specified DTC. I'm not sure exactly...
I've made a huge progress last couple of days! E-side SPI comms are finally working...