PCM Hammer P12 development

They go by many names, P01, P59, VPW, '0411 etc. Also covering E38 and newer here.
User avatar
Lowlyfe1
Posts: 32
Joined: Thu Dec 12, 2019 7:43 am
cars: 2002 silverado 5.3, 88 300 zx

Re: PCM Hammer P12 development

Post by Lowlyfe1 »

Here are the stock files from a few other ones I have recently done.
Attachments
p12 stock files.zip
(1.5 MiB) Downloaded 78 times
User avatar
Lowlyfe1
Posts: 32
Joined: Thu Dec 12, 2019 7:43 am
cars: 2002 silverado 5.3, 88 300 zx

Re: PCM Hammer P12 development

Post by Lowlyfe1 »

Using 12605261 as a base, looks like high octane ignition table starts at 0x02CCF2 and low octane starts at 0x02D22A. Is vats a single bit switch or code patch?
Edit
looks like a single switch at 0x020520 for vats still need to verify

Power enrichment ratio starts at 0x029458

Edit
Primary VE is located at 0x02B6B4

Edit
maf table is located at 0x02C2A4

Edit
regarding vats it looks like it is a single bit switch 0 = enabled and 1 = off. Checked in several software versions all seem to have the same structure

Edit
open loop eq while in gear 0x0288A2
open loop eq while in park or neutral 0x028D0A

Hopefully I have time tomorrow to find more maps, the larger ones are easy to find so ill try to do all of those first
Attachments
12605261 stock.bin
(1 MiB) Downloaded 82 times
Untitled.png
Untitled.png (3.61 KiB) Viewed 2698 times
User avatar
Lowlyfe1
Posts: 32
Joined: Thu Dec 12, 2019 7:43 am
cars: 2002 silverado 5.3, 88 300 zx

Re: PCM Hammer P12 development

Post by Lowlyfe1 »

Had a little time tonight found some injector calibration maps
Dead times (offset vs kpa) 0x025014
injection quantity (flow vs kpa) 0x026122
Attachments
Untitled.png
Untitled.png (4.43 KiB) Viewed 2644 times
User avatar
Lowlyfe1
Posts: 32
Joined: Thu Dec 12, 2019 7:43 am
cars: 2002 silverado 5.3, 88 300 zx

Re: PCM Hammer P12 development

Post by Lowlyfe1 »

Am I the only one whos currently working on defining the P12? It would be nice to collaborate... IDA project anyone?
Attachments
giphy.gif
giphy.gif (929.9 KiB) Viewed 2642 times
MudDuck514
Posts: 397
Joined: Wed Jul 05, 2017 8:30 am
cars: 2001 Pontiac Grand AM SE
LD9 2.4l I4, 4T40E
2005 Chevrolet Venture
LA1 3400 V6, 4T65E
Location: North TX, USA

Re: PCM Hammer P12 development

Post by MudDuck514 »

Lowlyfe1 wrote:Am I the only one whos currently working on defining the P12? It would be nice to collaborate... IDA project anyone?
I'd be more than willing to help on any of this as I have plenty of time.
BUT, I don't really know HOW to use IDA.
Anyone have a link to a video on HOW to use IDA for this?

Mike
User avatar
Gatecrasher
Posts: 272
Joined: Sat Apr 25, 2020 6:09 am

Re: PCM Hammer P12 development

Post by Gatecrasher »

Use Ghidra. It's free and every bit as capable. Once you learn it, it's pretty damn powerful.
MudDuck514
Posts: 397
Joined: Wed Jul 05, 2017 8:30 am
cars: 2001 Pontiac Grand AM SE
LD9 2.4l I4, 4T40E
2005 Chevrolet Venture
LA1 3400 V6, 4T65E
Location: North TX, USA

Re: PCM Hammer P12 development

Post by MudDuck514 »

Gatecrasher wrote:Use Ghidra. It's free and every bit as capable. Once you learn it, it's pretty damn powerful.
OK, Can I assume that they got CPU32 support working properly now?
ALSO, any video tutorials on WHERE to start?
I REALLY want to learn so I can better contribute as I have LOTS of free time now.

Mike
User avatar
Gatecrasher
Posts: 272
Joined: Sat Apr 25, 2020 6:09 am

Re: PCM Hammer P12 development

Post by Gatecrasher »

It looks like CPU32 is mostly fixed?

viewtopic.php?f=42&t=7920

There's some really good how-to info in that thread as well.

I might take a quick look at it too. I came up with some really helpful auto labeling scripts for my E92 disassembly. It'd be interesting to see if the same logic works on an older PCM.
MudDuck514
Posts: 397
Joined: Wed Jul 05, 2017 8:30 am
cars: 2001 Pontiac Grand AM SE
LD9 2.4l I4, 4T40E
2005 Chevrolet Venture
LA1 3400 V6, 4T65E
Location: North TX, USA

Re: PCM Hammer P12 development

Post by MudDuck514 »

Gatecrasher wrote:It looks like CPU32 is mostly fixed?

viewtopic.php?f=42&t=7920

There's some really good how-to info in that thread as well.

I might take a quick look at it too. I came up with some really helpful auto labeling scripts for my E92 disassembly. It'd be interesting to see if the same logic works on an older PCM.
Thanks, I had forgotten all about that thread.

Mike
User avatar
Gatecrasher
Posts: 272
Joined: Sat Apr 25, 2020 6:09 am

Re: PCM Hammer P12 development

Post by Gatecrasher »

It was only dumb luck that I saw it and remembered it.

I found the diagnostic PID table. It's not laid out as conveniently as the E92, so it'll be a lot harder to script.

It starts at 0x6263a and ends at 0x6347a. The format is like this:

2 byte PID (Padded with 00 for the OBD2 standard PIDS. So PID 0x0C for RPM is 0x000C)
4 byte function address
1 byte count of bytes returned
1 byte padding. 0x00

That should help get you started matching up memory locations to the data they represent. I'll keep looking for other stuff. This may come in handy if I decide to poke around in the E67 on my Hummer.

How similar is this OS to the E40s? I've got some address info for those.
Post Reply