E92 PCM Reverse Engineering
Re: E92 PCM Reverse Engineering
My nomenclature may be incorrect since I have been out of the loop so long. Basically power to the "chip"
- antus
- Site Admin
- Posts: 8261
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: E92 PCM Reverse Engineering
Yeah VPP means Voltage Programming Power. For Intel you can see 12v on VPP on the flash chip with a multimeter, AMD doesn't do this as it has an internal voltage generator that can create the power from the lower system voltage the chip is running at. When you are writing you can usually see 100-250ma more current on a lab bench supply with current meter. When developing the flash kernels on the earlier PCMs I could see at a glance to the current draw on the supply if it was really programming or not.
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Re: E92 PCM Reverse Engineering
Well I just discovered Mode 9 via SAE J1979 which seems to be a very good resource.
Hopefully I can learn some more from that.
Edit: Looks like Mode 9 took me to the function that computes the CVN's.
This is the first time I've seen CVN's (since I'm more used to P01/P59) and it seems like they are related to checksums, but they are calculated real time and not stored in ROM of the ECU.
Hopefully I can learn some more from that.
Edit: Looks like Mode 9 took me to the function that computes the CVN's.
This is the first time I've seen CVN's (since I'm more used to P01/P59) and it seems like they are related to checksums, but they are calculated real time and not stored in ROM of the ECU.
LS1 Boost OS V3 Here. For feature suggestions post in here Development Thread. Support future development ->Patreon.
Re: E92 PCM Reverse Engineering
Just fyi, the cvn's are stored in flash, they are related to the checksums and I don't understand all of it. Sometimes I have to use 2 different "scratchpads" to do the correction per module. If not done correctly, the GM kernel/bootloader will discard the attempt to write. In the beginning of working on this, I had to bdm the write. Now after satisfying, I can write through the obd2 port.
Good work bubba, I enjoy following along. I wish I could dive deep
Good work bubba, I enjoy following along. I wish I could dive deep
Re: E92 PCM Reverse Engineering
are you trying to find the cvn/checksum address ranges and algo? that's all known for the e92
Re: E92 PCM Reverse Engineering
Yes! I wasn't aware that was already known.gmtech825 wrote:are you trying to find the cvn/checksum address ranges and algo? that's all known for the e92
LS1 Boost OS V3 Here. For feature suggestions post in here Development Thread. Support future development ->Patreon.
Re: E92 PCM Reverse Engineering
What BDM did you use? And do you have a pinout for the connections?In-Tech wrote:In the beginning of working on this, I had to bdm the write.
Is there someplace this is documented?gmtech825 wrote:are you trying to find the cvn/checksum address ranges and algo? that's all known for the e92
LS1 Boost OS V3 Here. For feature suggestions post in here Development Thread. Support future development ->Patreon.
Re: E92 PCM Reverse Engineering
I apologize if I have mislead you. I have not BDM'd an e92. If anyone else has and have a schematic to share, I would love to hear.
Curious on the next question though. I thought I was alone
Curious on the next question though. I thought I was alone
- antus
- Site Admin
- Posts: 8261
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: E92 PCM Reverse Engineering
I dont know what else is being referred to, but Joukoy and Kar4o look to have it covered with universal patcher, see them in the xml config in here: https://github.com/joukoy/UniversalPatc ... master/XML
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Re: E92 PCM Reverse Engineering
yes, see this. the eng op section is different then the other segments. the extra checksums for the eng op segment seem to only be used on the e92 and not the e92a from what I've seen.antus wrote:I dont know what else is being referred to, but Joukoy and Kar4o look to have it covered with universal patcher, see them in the xml config in here: https://github.com/joukoy/UniversalPatc ... master/XML