Tre-Cool, once I map some of the code and see what is needed, I can add some tableseek logic to find it on any e38 bins.
Currently you need to trace it in ghidra from start of calibration offset for CAN RX/TX settings.
Search found 953 matches
- Thu Apr 25, 2024 10:41 pm
- Forum: Bosch ECUs
- Topic: E67 to T87/T87A TCM interface needed
- Replies: 58
- Views: 11202
- Thu Apr 25, 2024 10:37 pm
- Forum: Bosch ECUs
- Topic: E67 to T87/T87A TCM interface needed
- Replies: 58
- Views: 11202
Re: E67 to T87/T87A TCM interface needed
If I counted correctly this is where bytes are stored from that message, r31 is the offset they get stored in numerical order. Now tracing down to individual bits will take some time, due to ppc crap code. Here is how bits are copied for first byte , r4 is the bit position, some bits might get inver...
- Thu Apr 25, 2024 8:25 pm
- Forum: Bosch ECUs
- Topic: E67 to T87/T87A TCM interface needed
- Replies: 58
- Views: 11202
Re: E67 to T87/T87A TCM interface needed
For anyone wondering how Cal data is defined per node, there is a table in OS that defines it, similar to DTC list logic. second dword per node defines???length ??size and some other ??data. M:000755C8 TX_table_dword_755C8:.long 0xC9 # DATA XREF: TX1_main_sub_74334+104o ROM:000755C8 # TX1_main_sub_7...
- Mon Apr 01, 2024 10:35 pm
- Forum: Ford ECUs
- Topic: ford ids with other j2534
- Replies: 4
- Views: 922
Re: ford ids with other j2534
Newer versions might have support for other j-tools. Which IDS version did you use with autel.
- Mon Apr 01, 2024 9:34 pm
- Forum: Ford ECUs
- Topic: ford ids with other j2534
- Replies: 4
- Views: 922
Re: ford ids with other j2534
Not possible, even different versions works with specific firmware of vci2. It needs specific vci2 dlls
I have some luck and got mdi working with it, but the process wasn`t very straightforward.
I have some luck and got mdi working with it, but the process wasn`t very straightforward.
- Mon Mar 25, 2024 7:11 pm
- Forum: Bosch ECUs
- Topic: Can anybody calculate a incode for me
- Replies: 6
- Views: 710
Re: Can anybody calculate a incode for me
This looks like a seed/key request.
Try 128E
Try 128E
- Fri Mar 22, 2024 3:37 am
- Forum: Bosch ECUs
- Topic: Tool to read out bin files
- Replies: 3
- Views: 668
Re: Tool to read out bin files
Do you have some vins to look at.
Can you read e37 with hptuners.
Can you read e37 with hptuners.
- Tue Mar 19, 2024 8:24 pm
- Forum: GM LS1 512Kbyte and 1Mbyte and newer
- Topic: Universalpatcher with Logger & Analyzer
- Replies: 148
- Views: 151141
Re: Universalpatcher with Logger & Analyzer
6c=priority f0 or f1 it doesn`t matter, this is the tool ID and can vary from f0-fd Last byte of pid request does have some meaning, and without it mode 22 is not working. Anyway mode 22 logging is way slower than DPID mode. To see actual communication on bus you can goto universal patcher vpw conso...
- Sun Mar 10, 2024 6:56 pm
- Forum: GM LS1 512Kbyte and 1Mbyte and newer
- Topic: Hammer not reading ECU
- Replies: 51
- Views: 6695
Re: Hammer not reading ECU
It is possible gt is not supported with pcmhammer, try some older version of hammer. You can also try running this script in universal patcher to confirm gt is good-> logger-> select device->connect->vpwconsole tab->check print to screen->upload script button->select attached file and wait till scri...
- Fri Mar 08, 2024 10:37 pm
- Forum: GM LS1 512Kbyte and 1Mbyte and newer
- Topic: Universalpatcher with Logger & Analyzer
- Replies: 148
- Views: 151141
Re: Universalpatcher with Logger & Analyzer
Added some more commands, ripped from scan tool.
For spark control I think $80 = 0degrees, below is retard above is advance, You can give it a try with $80 as starting point.
On some pcms 3 in hex equals 1 degree, but here scaling can differ,
For spark control I think $80 = 0degrees, below is retard above is advance, You can give it a try with $80 as starting point.
On some pcms 3 in hex equals 1 degree, but here scaling can differ,