E92 PCM Reverse Engineering

[Gatecrasher]

I had to do the additional checksums when I updated my E92a (2017 Corvette).

[kur4o]

I had to do the additional checksums when I updated my E92a (2017 Corvette).

Do you have a copy of bins with updated checksum with small changes. I looked for patterns all over e92a, but didn`t find any.

[Gatecrasher]

I looked back over my notes and it may have just been CVN I had to fix. Skip shift variables are outside the checksum range. If you look into the code for P0601 DTC you'll find checksum references though.

I'll try to post some better info soon. Been dealing with some serious real life stuff recently.

[antus]

Is there a stock E92A bin to look at?

[ironduke]

Is there a stock E92A bin to look at?

Here's a link to a couple.. https://mega.nz/file/875UETTD#mNWdSgTbk ... a3MILA33-o

I can zip up and maybe post up individual bins here but size wise I figured this is easier..

[antus]

I turned off the auto transmission flag off in this one. It looks like there are 4 edits to the bin.

[kur4o]

Thanks, antus

That will be good enough for some research, how that torque security checksums are stored in engine segment.

[Gatecrasher]

You guys might already know this, but I wanted to share something I ran into this weekend. I screwed up one of the checksums on a calibration I was playing with on my 2017 E92A. Programming failed and the ECM stayed in the bootloader like it was supposed to. But the GM tools wouldn't reprogram it because it wouldn't answer mode 10. The bootloader doesn't even have a handler for mode 10, so it didn't give a negative response. It just ignored the request entirely. The software kept saying the module wouldn't respond to a programming request. It was responding to everything else though.

I was able to turn on a function that ignores non-compliant programming responses and from there was able to get a stock file back in the car.

[Vampyre]

anyone have pdbs or info they want to share for e92 e90 or any other files

[turbo_v6]

Ok, I took a break on this for a while as I couldn’t figure out the whole CVN thing. If seems like others have figured it out, but I just didn’t understand it. I’m sure I’ll come back to it at a later time.

I have got back into this as I was given an E38 PCM so I’m working on getting my read kernel to also work with it. I got a bench harness made and was able to communicate with it.

I was able to send unlock it and it seems like you could dump the entire contents using Mode 23, but that’s quite slow as it’s limited to 16 bytes in the OS.

Next will be confirming RAM area to upload the kernel and see if I can get a response from it.