GM E38 E67 E40 Kernel/Bootloader Development Extravaganza

[Tre-Cool]

if you guys are going to all the trouble of doing these canbus ecu's, I'd love to see you have support for the t43 based ecu's for the trans.

I have a bunch of different year gearbox's on the shelf and a bench harness i can do test reads with.

I'm unlimited for all these ecu's with both efilive & hpt, but i'd love to see the bin file for some of these trans.

[Tazzi]

Yeah iv been asked a few times now about the T42 and T43 Tcms, honestly don't even know what's in the T43 CPU and memory wise.

For some odd reason I feel like they have an inbuilt bootloader. If I monitored a GM update I could tell from that.

Might have to see if my Ute has an update to sniff

[In-Tech]

Not sure if this will help you, if so, I will dig up a T42 as well.

T43
TCM Service No: 24241890
TCM Traceability Code: DV0598Q218407614
TCM Security Seed: A2F4

TCM Module 1: 24270599
TCM Module 2: 24271132
TCM Module 3: 24271134
TCM Module 4: 24271135

[Tazzi]

That actually did help alot!

Taking a scroll through the bin.. and I spotted this...

T43MPC562.PNG (27.35 KiB) Viewed 7243 times

Maybe its indicating its a MPC562 processor?? Same as the E38??

And some more interesting stuff

T43Interesting.PNG (19.98 KiB) Viewed 7243 times

Id say if it doesnt have its own kernel.. its using a MPC562 and similar flash being 2Mb.. so thats going to be pretty straight forward.

[In-Tech]

Cool Tazzi, here is another file.

T42

TCM Service No: 24252114
TCM Traceability Code: BKYLNMK061236327
TCM Security Seed: 3922

TCM Module 1: 24235341
TCM Module 2: 24232586
TCM Module 3: 24237702
TCM Module 4: 24232583

[In-Tech]

Code: Select all

00006050 4F7A FFFF 3922 4441 2020 424B 594C 4E4D Oz..9"DA  BKYLNM
00006060 4B30 3631 3233 3633 3237 4300 4150 4142 K061236327C.APAB
00006070 4158 0171 C28A 0171 D686 0171 C287 FFFF AX.q...q...q....
00006080 0171 CD4D 4141 FFFF FFFF FFFF FFFF FFFF .q.MAA..........
00006090 FFFF FFFF FFFF FFFF FFFF 2006 0522 FFFF .......... .."..
000060A0 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF ................
000060B0 FFFF FFFF FFFF FFFF 5043 4D4F 5354 4E23 ........PCMOSTN#
000060C0 3536 3632 3334 3439 3635 3147 4E45 5331 56623449651GNES1
000060D0 3348 3136 3233 3434 3936 35FF 8E9F FFFF 3H162344965.....

And

Code: Select all

00018F60 0001 A050 5434 3220 5443 4D00 4E56 0000 ...PT42 TCM.NV..

Appears seed/key at 0000604,5,6,7 and the regular stuff to follow. Didn't see anything else interesting but maybe you will.

[Tazzi]

Yeah I cant find too much in the T42 bin. The processor literally looks like the E55 one to be honest... I wonder if they are the same.. considering they are used in the VZ V6 also.

I think if trying to decompile in a few different options in IDA or GHIDRA and see what turns up. But.. I also dont think the T42 needed a kernel.. Im sure I had it on the bench before and could read its memory when I also tinkered with the VZ V6 (E55) ECU.

Had a bunch of ECUs rock up today. Now have E92, E39, E39A, E37, E78. Wont bother opening those yet.. since I will just get distracted
But I believe at least 2 of those will use the MPC5XX processors so will be very simple to integrate with.

[kur4o]

T42 bin have opcodes for 68332 processor in it. If it doesn`t have built in code for read and write will be POS to develop.

I scored a incomplete file of e78. It is 3mb size and you can look for the bin layout here.

e78_decode.txt

(1.56 KiB) Downloaded 238 times

I am eager to look at a bin dump for the other pcms.

[ironduke]

I see some postings of the T43 bins, Don't want to sidetrack, but here's some of mine, maybe this will help?

T42.24235341.bin

(704 KiB) Downloaded 214 times

T43.24256125.bin

(2 MiB) Downloaded 233 times

T43.24256125.2.bin

(2 MiB) Downloaded 204 times

T43.24270599.bin

(2 MiB) Downloaded 210 times

T43.24655260.bin

(2 MiB) Downloaded 203 times

[Highlander]

VE V6, E77.. uses MPC562 also... that should fall inline to being supported also.

Currently tracking down the following ecus:
E39 (VE V6 ECU)
E39a (VF V6 ECU)
E92 (Colorado)
E98 (Colorado)

I have an E98 here, although unfortunately is not mine to strip apart, being held for a conversion. I can use it to get a SPS log but thats about it.

The Colorado V6 is an E82.. the Diesel is E98.