E38 - 24x Reluctor - 1x Cam - $$ Reward

[Tre-Cool]

Throwing this out there for the clever ducks with PowerPC knowledge.

Basically I'd like to get 2 x E38 Oses capable of running the ls1 24x crank reluctor. so 12624402 (2009) & 12639270 (2011) to support the early/late TCM's.

I've found that there are switches in the factory code that allow for multiple crank / camshaft options & while a mate has tested that the 1x cam sensor seems to work. we get nothing when trying alternative crank solutions.

Internet posts alluded to a guy called Jesse from wait4me performance getting it to work back in 2013 or so on e38/e67 ecu's, so i reached out to him but unfortunately he lost a lot of his stuff from a hard disk crash years back & no one was really interested in it at the time, so he never got back to it, but the theory is that while the switching is there, the pattern info is not actually in the underlying OS binary. (not confirmed)

Now to offer some incentive, I'm willing to offer some of my disposable income up to 2k AUD to help get it done. (Money talks, bullshit walks) I wont be keeping this info secret, it will be free for dissemination & potentially patching into other oses via something like Universal Patcher. My main purpose for wanting this done is to give another alternative option for conversions & being able to use the 6l50-90 gearbox's since i absolutely despise the 4l60.

I will obviously share the relevant factory calibration locations here to get you started (or can just give you ghidra repository access) as an example here are some of the options i have mapped into an efilive cax file for the 270 os since i primarily use that as my main tuning tool. (Units may be incorrect for some of the below until i correct)

e38-crank.PNG (94.17 KiB) Viewed 8766 times

[Cincinnatus]

4l60 doesn't deserve any hate, but i'm all for getting an e38 to run 24x.

[BillNobody]

I have an Arduino sketch that converts a 24x/1x to 58x/4x and vice versa if you are interested.

[Highlander]

The effort to do this is a lot more than 2k. Way more.

[antus]

I didn't want to jump in this thread too early, because I don't know what I don't know, but since nobody has jumped in with a solution yet here are my 2 cents.

the theory is that while the switching is there, the pattern info is not actually in the underlying OS binary. (not confirmed)

Generally speaking, because these are not aftermarket PCMs, I don't think the code is written in a way that that has a hardware abstraction layer for the trigger pattern where there is a set of timing data for the trigger that is looked up and used and translated to something common for the rest of the OS. I think it's more written in to the code to expect a certain pattern with certain timings. The switch might be a jump between two code paths in the relevant place or places. If that is the case (I am assuming the E38 functions similar to the previous ones which I am more familiar with) then it's a case of finding any of the code that has the trigger pattern baked in to it, checking the type switch (if that test is in the right places, adding it if its not) and then jumping to some unused code space and processing the other type. However because its timing related it's possible you find the code isn't executing at the right time for what's needed and you might have to make some heavy changes to the OS internal timings. If that's the case, then it would be very difficult without source code.

Anyway I don't know for sure this is the case in the E38, and it wouldn't be the first time someone with fresh eyes finds a way to do something amazing, so if anyone still wants to have a go.. don't stop because of my currently unfounded thoughts.

[04colyZQ8]

The effort I put into this is worth 10k! And it still doesn’t work!!

The hardware at least on the e67 is there! I have proof. I took a standard e67 and flashed it with mefi 5 firmware and 24x works, I have a adrino simulator that does both 58x and 24x.

I also have all the factory locations obtained from the same likely file you have and ported to a e67, the crank tooth count, cam tooth count and such is definitely correct but does not work. I have disassembled and labeled both the e67 and mefi and determined most of the functions involved. There is at least 20 of them!

The trouble is that neither e38 nor e67 from the factory have the functions for 0x0, 0x1 24xa or 24xb defined. In fact the only ones are 0x8, 0x9, and 0x7 for 58x time and angle baised, and two of them just point back to the same functions. I fact you can use either 0x7 or 0x8 and it will run exactly the same!

However in the mefi the they are all individually coded, including 0xA lo res with distributor as in 2002 express van 5.7l old school 350.

It’s next to impossible to translate those functions over to the standard e67, I tried and no matter what it doesn’t quite work! We are talking over 500 lines of assembly code being edited by hand!! I have spent thousands of hours and thousands of dollars on pe micro, and 4 bricked e67s, 800 usd for mefi 5 software and 600 usd for mefi controller. So yeah 2k drop in the bucket still not working!!

[04colyZQ8]

I suppose I should open source but had hoped to recoup some money! For 2k I might consider posting the mefi labeled disassembly and the partly labeled e67. Plus I can test code as it’s worked on. I have a custom cax file for efi live to display logging 24x and 58x functions and variables.

I also have a mefi5 scanner and I can directly dump the ram taking a snap shot on the mefi using a hacked mefi burn program I modified.

[darkman5001]

This is a VERY interesting subject to me. I have been wanting to know how to change the crank trigger in a stock GM PCM for quite some time. I would imaging that once someone figure out how it actually works in the different GM PCMs it would be easy.

One aftermarket PCM that I was able to play around with on a well built (2000 HP 6.0L) is the MegaSquirt Gold Box. After playing around with it's tuning software and going through the tuning process on this, I can tell you that this is a SUPER IMPRESSIVE system. It can run any engine from 4-12 cylinders, can do variable valve timing, can handle quad-cams, transmission tuning, can run ANY crank trigger setup you want, and so much more. I have had this gold box apart and I can tell you there isn't much to the board, so all of the secrets must be in the programming, whether it is a MegaSquirt, GM, Ford, etc.

I really hope to see more development on this subject.

[1fast72nova]

I want to run 58x on the older p01 or p59 ... Is this possible?

[Phoenix]

I want to run 58x on the older p01 or p59 ... Is this possible?

The solution today is to wire in the Lingenfelter TR-002 box or physically change the crankshaft reluctor wheel and cam sprocket.