Starting to disassemble Euro Bin
-
- Posts: 224
- Joined: Wed Oct 08, 2014 11:08 am
- cars: Barina SB C14SE
Lexus RX350
VW Golf Mk5 TDI DSG
Starting to disassemble Euro Bin
Hi all, I am getting started on disassembling the bin from my 1997 Barina 1.4. Yes, I can hear the laughter from here but it will be interesting to see how much of a common code base is in use between Europe and the rest of GM.
I have made a start with IDAPro on the BFZN bin which is also for the same engine until my EPROM burner arrives.
What I was looking for is some commented disassembly to assist in understanding what is going on, with a focus on the serial routines so that I can work out how to talk to the bugger. I have managed to locate a number of maps but have not yet fathomed out how they are processed. Understanding the IO port allocations is also on the hit list for deciphering the code.
Any assistance would be greatly appreciated. I plan to post the final result on this forum.
Simon
I have made a start with IDAPro on the BFZN bin which is also for the same engine until my EPROM burner arrives.
What I was looking for is some commented disassembly to assist in understanding what is going on, with a focus on the serial routines so that I can work out how to talk to the bugger. I have managed to locate a number of maps but have not yet fathomed out how they are processed. Understanding the IO port allocations is also on the hit list for deciphering the code.
Any assistance would be greatly appreciated. I plan to post the final result on this forum.
Simon
- antus
- Site Admin
- Posts: 8253
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: Starting to disassemble Euro Bin
I think it'll be motorola 68k, possibly similar to this (via diy-efi for an american pcm of the same vintage)
- Attachments
-
- serial_flash.zip
- (1.03 MiB) Downloaded 527 times
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
-
- Posts: 224
- Joined: Wed Oct 08, 2014 11:08 am
- cars: Barina SB C14SE
Lexus RX350
VW Golf Mk5 TDI DSG
Re: Starting to disassemble Euro Bin
Thanks antus but it is definitely 68hc11f1 going by the rom mask id, and the code disassembles fine with the hc11 in IDAPro. Thanks for the file - I will have a look at the attached code for educational purposes.antus wrote:I think it'll be motorola 68k, possibly similar to this (via diy-efi for an american pcm of the same vintage)
If it suits you, I can keep any code confidential.
Simon
- VL400
- Posts: 4991
- Joined: Sun Mar 01, 2009 2:54 pm
- cars: VL Calais and Toyota Landcruiser. Plus some toys :)
- Location: Perth, WA
- Contact:
Re: Starting to disassemble Euro Bin
I dont use IDA, but if you post the BFZN bin will disassemble it using M6811dis and post it here. Can likely add some comments too.
-
- Posts: 224
- Joined: Wed Oct 08, 2014 11:08 am
- cars: Barina SB C14SE
Lexus RX350
VW Golf Mk5 TDI DSG
Re: Starting to disassemble Euro Bin
The comments would be extremely welcome. Do you want just the bin or also a copy of my disassembly as well? I have managed to find the vectored jump tables, some calibration tables and have commented some of the IO and ADC read routines. There seems to be quite a bit in common with some code that I have seen. I will post them in the morning as I am on the ipad now.VL400 wrote:I dont use IDA, but if you post the BFZN bin will disassemble it using M6811dis and post it here. Can likely add some comments too.
Thanks.
Simon
- VL400
- Posts: 4991
- Joined: Sun Mar 01, 2009 2:54 pm
- cars: VL Calais and Toyota Landcruiser. Plus some toys :)
- Location: Perth, WA
- Contact:
Re: Starting to disassemble Euro Bin
Can post whatever you have so far.
-
- Posts: 224
- Joined: Wed Oct 08, 2014 11:08 am
- cars: Barina SB C14SE
Lexus RX350
VW Golf Mk5 TDI DSG
Re: Starting to disassemble Euro Bin
VL400, here is the bin. It is a 27C256 in a small blue memcal carrier.
Simon
Here is the ASM - I have tried to define some maps but am quite sure that I have made a mess. Do the maps have a 3 byte header?
Thanks again.Simon
-
- Posts: 1215
- Joined: Sun Mar 15, 2009 10:20 am
- cars: 2004 VYII Acclaim Wagon V6 Auto LPG/Petrol
2004 VYII Berlina sedan V6 Auto
2005 VZ Monaro CV8 manual - Location: Geelong, VIC
Re: Starting to disassemble Euro Bin
A lot of tables have a 3 byte header for X start value, Y start value and 3rd byte for number of rows in the table. The x and y values are then normally multiplied by a constant, for RPM as an example it is normally 25.
- antus
- Site Admin
- Posts: 8253
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: Starting to disassemble Euro Bin
You might be able to find some of the common functions here. Specifically those like P4LKUPQ.
http://www.diy-efi.org/gmecm/papers/anht_hac.pdf
http://www.diy-efi.org/gmecm/papers/anht_hac.pdf
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
-
- Posts: 1215
- Joined: Sun Mar 15, 2009 10:20 am
- cars: 2004 VYII Acclaim Wagon V6 Auto LPG/Petrol
2004 VYII Berlina sedan V6 Auto
2005 VZ Monaro CV8 manual - Location: Geelong, VIC
Re: Starting to disassemble Euro Bin
There are also a heap of disassemblies here:
http://pcmhacking.net/forums/viewforum. ... 6&start=25
http://pcmhacking.net/forums/viewforum. ... 6&start=25