Over the canbus for these modules. I don't recall the kernal been public, however from what I'm told if you know your way around it can be easily had. Going back to the r2 register, it looks like the code that you provided (at 0x010290) is in the 10000-1FFFF area, which Kur4o said to be "some ...

Over the canbus for these modules. I don't recall the kernal been public, however from what I'm told if you know your way around it can be easily had.

Looks like it get's re-assigned. Here it is 8000h ROM:010290 3d a0 00 40 lis r13,0x40 ROM:010294 39 ad 00 00 addi r13,r13,0x0 ROM:010298 3c 40 00 01 lis r2,0x1 ROM:01029c 38 42 80 00 subi r2,r2,DAT_00008000 Flash kernal is loaded externally

Typically seen around max 10,500 on a few cars I've played with to give you a guide. Highest was 550rwkw, around 650g/s of air at around the 10kHz mark. That was LSA MAF sensor in a Harrop 4" tube.

These do surprising well. At the low end of town for sure. Still on the same set for a few years with occasional use.

https://www.amazon.com.au/Terminals-Rem ... B0D78SL8QG

He runs a good business. I can sense a rejection lol.

There was a rumour of it being done, but nothing public. 80gus would know, but I doubt anything will get let out of the bag.

Happy to help you out getting set up in ghidra. Flick me a pm or ask back here.

The recall on NHTSA states gas engine variants are not affected. Different model trans for diesel vs gas. Go figure.

Bin alignment is something I've always struggled with too. The obvious is to line up the start of each segment but the rabbit hole gets big pretty quick from there. Keeping an eye on this thread for any tips