Opel Frontera 3.2 V6 Delphi ECU Checksum

European GM ECUs and PCMs
Post Reply
Metaller27
Posts: 11
Joined: Fri Sep 13, 2024 2:44 pm
cars: Isuzu Trooper, Opel Frontera, Audi A6, Chevrolet Transsport

Opel Frontera 3.2 V6 Delphi ECU Checksum

Post by Metaller27 »

next game has started, Frontera Delphi ECU, 29F200 convert to USA software, here I also have a problem with the checksum, WinOLS 267 only finds the Trooper software, here the 800F is changed, I can't check whether that fits. Other software versions are not found.
Attachments
IMG_20240922_142316.jpg
29f800USAMTDSPX2002.BIN
(1 MiB) Downloaded 25 times
29F800MTUSADPYX.BIN
(1 MiB) Downloaded 25 times
29F800MTUSADMZY.BIN
(1 MiB) Downloaded 25 times
29f800 AXIOM.BIN
(1 MiB) Downloaded 25 times
am29f800bb_xxS.bin
(1 MiB) Downloaded 25 times
kur4o
Posts: 1012
Joined: Sun Apr 10, 2016 9:20 pm

Re: Opel Frontera 3.2 V6 Delphi ECU Checksum

Post by kur4o »

First you need to byteswap those files, looks like they are read with eeprom programmer.

There is similar holden pcm we have already some support for it. I think it can be read with some script, as long as you have access to a tool that support VPW protocol in x4 mode.

Writing will be not that far away once we dial checksums and find some volunteer to test it.

CPU is similar to 0411 ls1 pcm, DTC layout should be much similar too. Some disassembly will help find checksum range and where it is stored.

4000-8000 is eeprom area, 8000-20000 is calibration, 0-4000 is boot block, rest is code most of the time.
Metaller27
Posts: 11
Joined: Fri Sep 13, 2024 2:44 pm
cars: Isuzu Trooper, Opel Frontera, Audi A6, Chevrolet Transsport

Re: Opel Frontera 3.2 V6 Delphi ECU Checksum

Post by Metaller27 »

yes is read by eeprom, hi-low swap i know, but how to checksum? winols switch 800F 8bit test with am29f800bb_xxS, and found only with this file a checksum
Attachments
am29f800bb_xxSdtcoffchks.bin
(1 MiB) Downloaded 26 times
kur4o
Posts: 1012
Joined: Sun Apr 10, 2016 9:20 pm

Re: Opel Frontera 3.2 V6 Delphi ECU Checksum

Post by kur4o »

Partial success, after some indepth disassembly.

CAL checksum is at 800e
16 bits word sum 2`s complement
Range is tricky, It starts at 8000 and end is where FF`s starts before 1ffff[end of data in calibration], checksum address is skipped.


There is also another range for OS part but for now no match or checksum address found.
Post Reply