Not sure if it is scope creep... Loader used all the same OBDII structure for commands. Most of the time spent is still of value. Target changes from my loader to GM's code and the module Kur4o...
Type: Posts; User: Tom H
Not sure if it is scope creep... Loader used all the same OBDII structure for commands. Most of the time spent is still of value. Target changes from my loader to GM's code and the module Kur4o...
Use of the EEPROM as a loader is not workable. In expanded mode there is no way to move or remove the EEPROM from the memory map. It hides the last 512 bytes of flash. I have looked hard, there is no...
Thanks! I found my problem in an unexpected place. The loader I planned to use to prevent bricking puts the EEPROM in the upper memory at $FE00. Since it overlays the flash, my checksum is wrong....
Hi,
Question for you all... In my disassembly it is marked where the checksum is located for the TSide ($2015). What does this checksum cover? Is it the calibration, calibration + code, sum of E...
Hi,
Going way back there were some details given regarding repair of bricked PCMs. I have had reason with the re-programming project to make use of this. I wanted to document some bits here as this...
Hi,
Going back a week or so, we were discussing ways to prevent creating bricks when programming is interrupted for some reason. I had the idea to use the on chip EEPROM that is part of the...
Code is OK... loading ok, working ok. Rub I have is that the S9 record which is the "go execute here" address points to $0000, not where the code is. Bandaid is that I manually calculate the S9...
Thanks Carl.
I am writing this tool for everyone, it's all public.
I added a line using #S19WRITE to the end of my file. This generates a text version of the S9 record. At least I only need to...
Hi Carl,
Here if the loader file we have been talking about. See attached
-Tom
Hi In-Tech,
I wrote the loader and now have it working, but have run into a problem with my assembler. I have variables that I map into the internal ram starting at 0. My program is resident in...
Hey Carl,
Am I confused? The tight loop is just execution waiting for the watchdog/cop to hit. At this point it is just setting a ram location and resetting. When it reboots the GM software leaves...
Prayer? We need more of a chant.
Both Motorola and GM tested the heck out of these things, extreme cold & extreme hot. Elevated voltage and under voltage. Substrate will be fine.
Here is an...
Thanks to everyone for the information + help.
I will soon have all the resources I need to do the testing. Fun part will be testing out this idea of Brick Free Technology using the EEPROM. Two...
Hi!
Tight loop is actually intended. For the remaining duration of the COP (CPU or PRU) the CPU keeps accessing three locations in repetition. Presents no troubles, I have tested it well. The loop...
Just a WAG from me: Chip drives the gate (base?) of the transistor and provides over current protection. Transistor drives the coil based on the input from PCM. Want more dwell? -> fatten the pulse...
It might be cleaner to have three routines within the app.
- Install boot loader
- Program flash
- Remove boot loader
Once boot loader is installed, the PCM would be non functional until...
Hi Steveo,
Original bin locks the EEPROM unless it finds a tag. On finding the tag the BPROT register remains $00 which permits writing of the config *for that boot only*. This is done less than...
I was thinking more like:
Install the loader in EEPROM and program the CONFIG to place it top of memory. This means the vectors are all replaced with those in EEPROM. Now on boot, the CPU takes...
Hi,
This morning I tested the idea of reprogramming the EEPROM to hold some sort of non-volatile loader while programming. This *should* prevent making bricks even if the power is removed half way...
HI,
The TPU asserts and de-asserts the ignition control output. It also monitors the ignition control, verifying that there is no external short (it may also look at timing to ensure there isn't too...
Hi,
I will give you all that I have, some hope it will be what you need.
The signal we are speaking about: ignition control is generated by the ESide and connects out through Black or C2 pin 5....
Interesting that locking of the register... I think we can get around that.
Writing the config register is locked into it's state once 64 eclocks have been run. Looking at the software (at least...
Thank you, Can't wait to start the testing!
-Tom
Hi,
I have not been reading EEPROM, but plan to. Thinking to add it into the TSide bank 0 buffer and into the ESide buffer.
Do other programming software use the EEPROM as safety in case of...
Hi,
Project is going ok, but with a few wrinkles. I have the module used to program the TSide loading into the PCM now. I can do all the easy work prior to programming like turn on/off vpp, read the...