Search found 971 matches
- Sat Mar 02, 2024 6:41 am
- Forum: Engineering and Reverse Engineering
- Topic: Bosch MED9.1.1
- Replies: 26
- Views: 3421
Re: Bosch MED9.1.1
Sometimes if code is not disassembled in correct order, you get weird result and need to start all over a fresh disassembly, following exact steps so IDA can setup internal registers first. In code various registers are repurposed in the code flow and program needs to track them. Usually you will ne...
- Sat Mar 02, 2024 4:53 am
- Forum: Engineering and Reverse Engineering
- Topic: Bosch MED9.1.1
- Replies: 26
- Views: 3421
Re: Bosch MED9.1.1
These are the built in offsets how cpu sees code in memory. Not sure why it is configured that way. I do like IDA and never used ghidra so can`t speak which one works best, Both have pros and cons. Before final analysis you need to specify r2,r13 and manually convert into code vectors, at start of 4...
- Sat Mar 02, 2024 3:39 am
- Forum: Engineering and Reverse Engineering
- Topic: Bosch MED9.1.1
- Replies: 26
- Views: 3421
Re: Bosch MED9.1.1
Smaller bin goes to 400000
Main bin to 0
calibration 5c2000
And you are good to go.
Main bin to 0
calibration 5c2000
And you are good to go.
- Sat Mar 02, 2024 3:01 am
- Forum: Engineering and Reverse Engineering
- Topic: Bosch MED9.1.1
- Replies: 26
- Views: 3421
Re: Bosch MED9.1.1
Just a general info that might get you started, based on similar ME9.6 layout and some a2l floating on the web The memory layout of calibration data starts at 5c2000 in disassembly [in bin it starts at 1c2000] The smaller bin should go at 400000 . The bigger bin goes to 0 It should be close enough. ...
- Fri Mar 01, 2024 10:49 pm
- Forum: GM LS1 512Kbyte and 1Mbyte and newer
- Topic: Hammer not reading ECU
- Replies: 51
- Views: 8253
Re: Hammer not reading ECU
Can you select device as serial with com port and not as j2534 device.
- Thu Feb 29, 2024 11:05 pm
- Forum: GM LS1 512Kbyte and 1Mbyte and newer
- Topic: Hammer not reading ECU
- Replies: 51
- Views: 8253
Re: Hammer not reading ECU
You have no communication with PCM. Something is wrong with setup, cable, or pcm is completely dead.
- Fri Feb 16, 2024 10:46 pm
- Forum: Engineering and Reverse Engineering
- Topic: 2004 to 2012 Colorado and 2006 -10 h3 cluster programming
- Replies: 32
- Views: 4159
Re: 2004 to 2012 Colorado and 2006 -10 h3 cluster programming
This sound like another option configuration data stored in eeprom. And it can be easily reconfigured using bus messages, if onboard code supports it. I don`t want to make the method available here. The nec site just ask for simple account creation. Don`t have one but you can give it a go, ans see w...
- Fri Feb 16, 2024 11:35 am
- Forum: Engineering and Reverse Engineering
- Topic: 2004 to 2012 Colorado and 2006 -10 h3 cluster programming
- Replies: 32
- Views: 4159
Re: 2004 to 2012 Colorado and 2006 -10 h3 cluster programming
You might get lucky, once you dial the communication issues you have.
- Fri Feb 16, 2024 11:24 am
- Forum: Engineering and Reverse Engineering
- Topic: 2004 to 2012 Colorado and 2006 -10 h3 cluster programming
- Replies: 32
- Views: 4159
Re: 2004 to 2012 Colorado and 2006 -10 h3 cluster programming
https://www.renesas.com/us/en/software-tool/pg-fp5-discontinued-product?dow_secondary=visible You will need an account. mileage usually is stored on eeprom, don`t expect to be on board mcu flash. I looked at tech2 data for this dash, It doesn`t even have a mileage on the datastream[only trip data],...
- Fri Feb 16, 2024 3:02 am
- Forum: Engineering and Reverse Engineering
- Topic: 2004 to 2012 Colorado and 2006 -10 h3 cluster programming
- Replies: 32
- Views: 4159
Re: 2004 to 2012 Colorado and 2006 -10 h3 cluster programming
That is partly due to missing tutorial. Can you give some screenshot what happens or log, is there any idle traffic from ipc on screen. The usual usage will be settings-> select device->configure device->connect button. On vpw console there is various checkboxs-> ->>screen checkbox prints traffic to...