PCM Hammer P12 development
Re: PCM Hammer P12 development
Here are the stock files from a few other ones I have recently done.
- Attachments
-
- p12 stock files.zip
- (1.5 MiB) Downloaded 101 times
Re: PCM Hammer P12 development
Using 12605261 as a base, looks like high octane ignition table starts at 0x02CCF2 and low octane starts at 0x02D22A. Is vats a single bit switch or code patch?
Edit
looks like a single switch at 0x020520 for vats still need to verify
Power enrichment ratio starts at 0x029458
Edit
Primary VE is located at 0x02B6B4
Edit
maf table is located at 0x02C2A4
Edit
regarding vats it looks like it is a single bit switch 0 = enabled and 1 = off. Checked in several software versions all seem to have the same structure
Edit
open loop eq while in gear 0x0288A2
open loop eq while in park or neutral 0x028D0A
Hopefully I have time tomorrow to find more maps, the larger ones are easy to find so ill try to do all of those first
Edit
looks like a single switch at 0x020520 for vats still need to verify
Power enrichment ratio starts at 0x029458
Edit
Primary VE is located at 0x02B6B4
Edit
maf table is located at 0x02C2A4
Edit
regarding vats it looks like it is a single bit switch 0 = enabled and 1 = off. Checked in several software versions all seem to have the same structure
Edit
open loop eq while in gear 0x0288A2
open loop eq while in park or neutral 0x028D0A
Hopefully I have time tomorrow to find more maps, the larger ones are easy to find so ill try to do all of those first
- Attachments
-
- 12605261 stock.bin
- (1 MiB) Downloaded 102 times
-
- Untitled.png (3.61 KiB) Viewed 3313 times
Re: PCM Hammer P12 development
Had a little time tonight found some injector calibration maps
Dead times (offset vs kpa) 0x025014
injection quantity (flow vs kpa) 0x026122
Dead times (offset vs kpa) 0x025014
injection quantity (flow vs kpa) 0x026122
- Attachments
-
- Untitled.png (4.43 KiB) Viewed 3259 times
Re: PCM Hammer P12 development
Am I the only one whos currently working on defining the P12? It would be nice to collaborate... IDA project anyone?
- Attachments
-
- giphy.gif (929.9 KiB) Viewed 3257 times
-
- Posts: 397
- Joined: Wed Jul 05, 2017 8:30 am
- cars: 2001 Pontiac Grand AM SE
LD9 2.4l I4, 4T40E
2005 Chevrolet Venture
LA1 3400 V6, 4T65E - Location: North TX, USA
Re: PCM Hammer P12 development
I'd be more than willing to help on any of this as I have plenty of time.Lowlyfe1 wrote:Am I the only one whos currently working on defining the P12? It would be nice to collaborate... IDA project anyone?
BUT, I don't really know HOW to use IDA.
Anyone have a link to a video on HOW to use IDA for this?
Mike
- Gatecrasher
- Posts: 278
- Joined: Sat Apr 25, 2020 6:09 am
Re: PCM Hammer P12 development
Use Ghidra. It's free and every bit as capable. Once you learn it, it's pretty damn powerful.
-
- Posts: 397
- Joined: Wed Jul 05, 2017 8:30 am
- cars: 2001 Pontiac Grand AM SE
LD9 2.4l I4, 4T40E
2005 Chevrolet Venture
LA1 3400 V6, 4T65E - Location: North TX, USA
Re: PCM Hammer P12 development
OK, Can I assume that they got CPU32 support working properly now?Gatecrasher wrote:Use Ghidra. It's free and every bit as capable. Once you learn it, it's pretty damn powerful.
ALSO, any video tutorials on WHERE to start?
I REALLY want to learn so I can better contribute as I have LOTS of free time now.
Mike
- Gatecrasher
- Posts: 278
- Joined: Sat Apr 25, 2020 6:09 am
Re: PCM Hammer P12 development
It looks like CPU32 is mostly fixed?
viewtopic.php?f=42&t=7920
There's some really good how-to info in that thread as well.
I might take a quick look at it too. I came up with some really helpful auto labeling scripts for my E92 disassembly. It'd be interesting to see if the same logic works on an older PCM.
viewtopic.php?f=42&t=7920
There's some really good how-to info in that thread as well.
I might take a quick look at it too. I came up with some really helpful auto labeling scripts for my E92 disassembly. It'd be interesting to see if the same logic works on an older PCM.
-
- Posts: 397
- Joined: Wed Jul 05, 2017 8:30 am
- cars: 2001 Pontiac Grand AM SE
LD9 2.4l I4, 4T40E
2005 Chevrolet Venture
LA1 3400 V6, 4T65E - Location: North TX, USA
Re: PCM Hammer P12 development
Thanks, I had forgotten all about that thread.Gatecrasher wrote:It looks like CPU32 is mostly fixed?
viewtopic.php?f=42&t=7920
There's some really good how-to info in that thread as well.
I might take a quick look at it too. I came up with some really helpful auto labeling scripts for my E92 disassembly. It'd be interesting to see if the same logic works on an older PCM.
Mike
- Gatecrasher
- Posts: 278
- Joined: Sat Apr 25, 2020 6:09 am
Re: PCM Hammer P12 development
It was only dumb luck that I saw it and remembered it.
I found the diagnostic PID table. It's not laid out as conveniently as the E92, so it'll be a lot harder to script.
It starts at 0x6263a and ends at 0x6347a. The format is like this:
2 byte PID (Padded with 00 for the OBD2 standard PIDS. So PID 0x0C for RPM is 0x000C)
4 byte function address
1 byte count of bytes returned
1 byte padding. 0x00
That should help get you started matching up memory locations to the data they represent. I'll keep looking for other stuff. This may come in handy if I decide to poke around in the E67 on my Hummer.
How similar is this OS to the E40s? I've got some address info for those.
I found the diagnostic PID table. It's not laid out as conveniently as the E92, so it'll be a lot harder to script.
It starts at 0x6263a and ends at 0x6347a. The format is like this:
2 byte PID (Padded with 00 for the OBD2 standard PIDS. So PID 0x0C for RPM is 0x000C)
4 byte function address
1 byte count of bytes returned
1 byte padding. 0x00
That should help get you started matching up memory locations to the data they represent. I'll keep looking for other stuff. This may come in handy if I decide to poke around in the E67 on my Hummer.
How similar is this OS to the E40s? I've got some address info for those.