pcmhacking.net

WOW good work there mate! Youve delved much deeper than we ever have. The MSC Cartridges wern't a thing here in Aus as the Holdens basicly could do all models with a normal 512kb eeprom i think.

For now i rarely use the tech1a i use a vpecker instead which can do all the same things a tech1 can do. Not sure if Brazil is covered or not is it Opel cars? i can check if you like to see if your car is covered if you want to look into vpecker.

Hello The1. I think I came across some posts written by you or some other mate (sorry, can't remember the name. Tazy?) on Just Commodores. I remember someone mentioning a special T1 with Lilbug monitor ROM.

Anyway, GMB Tech1's covered from 1991 to 1998 and I don't know what size a regular cartridge would be. I think all were replaced by MSC's. And even those, are very, VERY hard to find. I just bought mine and I am reluctant to make any attempt of reading it, because I'm afraid of damaging or erasing it.

I have a spare GM/FORD/CHRYSLER PT cartridge that uses a larger AMD Flash (don't remember the size now) that may be useful to write this dump. Probably it is in the 512kB-1MB area. As I said before, the challenge is to fit the data in the right pages, because code runs from the cartridge and any wrong byte could crash the application.

I will take a look at vpecker. Didn't know about it.

GM Brazil from the 90's are most based on Opel designs under the Chevrolet brand (Corsa, Kadett, Vectra/Cavalier, Monza/Ascona, Omega), but with a few differences. I have two Omega-A I've been able to use an Opel cartridge to both, one with the regular option (basically the same car) and another, which was sold only in Brazil, with the Motronic 2.8.1 from the Omega B. Most of then (maybe all) runs on KW71/KW82 protocol instead of the widespread ALDL.

I also own a 2004 Vectra that has its modules updated from the original 1997 Opel Vectra, so an Opel program will just connect to Climate Control, ECU, TCM and Immo. I bougth a VCX Tech2Win clone for it (And still had to make some reverse engineering on it. Basically it cannot switch the various DLC pins used and do not work with the 200-baud init. Only 5-baud and KW2000).

By the way, from 1998 to 2011 we had Holden Comodores (VT, VZ and VE) rebadges as Chevrolet Omega here

By the way, the code that spits out data through the serial port runs from the Mass Storage Cartridge itself. Tried with other cartridges and it does not reply (at least to the same commands).

Don't know if any other cartridge allows this memory dump, but considering them as read-only, I think it is highly unlikely.

I figure this maybe of interest, i never had any luck with it and it is public if you dig for it.

Lilbug as far as i can see was written to copy a cartridge to a MSC cartridge, using both slots. I dont have photos of the internals but the tech1a was modified as in hardware like added circuits and components, the lilbug was on the tech1a's internal rom. I tried on mine but it wouldn't boot.

Once tech1a boots it showed something like "lilbug monitor for MSC".

The guy i got a copy of this from got the tech1a from an auction.

Ive included copies from my tech1 and tech1a internal rom to compair.

Nice info!

I already had the Tech1A ROM downloaded somewhere else.

Interesting to see that the Tech1 only uses 8kB. I thought that it would be somewhere near 16kB. The Tech1A serial and multimeter routines takes a lot!

I didn't saved but I remember the Reset vector being 0xE100, just like the ROM you posted.

Another line of investigation can be the "Tech1.dlll" that TIS2k uses to communicate. Unfortunely I'm terrible at disassembly, and can't make any meaningful information loading in IDAPro.

In the Log you can see some address belonging to each file. The addresses match when you run the "learn dir" funtion of MSC (holding F7).

You can see the lilbug menu system when you take a look inside the binary.

Yeah! And the Reset Vector pointing to 0x4000 explains why it needs a cartridge in the Slave position to boot..

ik im tardy to the party but i only found this recently and got verified today. Though id add a couple more things onto this thread about the tech 1 lol. I took a picture of the insides of a tech 1 with the rs232 on the side and the inside of a GM 81-93 Powertrain cartridge. Hopefully soon i'll figure out how to dump the contents on that amd chip

The AMD chip inside the cartridge is a standart EPROM. You can use a regular eprom reader like TL866.

AFAIK there is no way to dump via Tech1 serial non-flash cartridges.

By the way, we have the Tech1A resident V4 binary. Would be interesting to have yours V3.

Thought Id better add to the "Notes"

TECH-1 File listing:
====================

1988ECM.bin - Holdens 1988 ECM TECH-1 Cartridge ROM

O-V87-95.bin - OPEL / VAUXHALL 87-95 ECU-GB TECH-1 Cartridge ROM

VS-T4OEM.bin - VS/T4 Systems - OEM Dealer TECH-1 Cartridge ROM

VR-OEM.bin - VR Systems - OEM Dealer V2.0 TECH-1 Cartridge ROM

IZU87-95.bin - ISUZU 87-95 ECM TECH-1 Cartridge ROM

1991BODY.bin - OEM Dealer 1991 Body Computer TECH-1 Cartridge ROM

IZU90-92.bin - ISUZU 90-92 Elec.4-Speed AT TECH-1 Cartridge ROM

TECH-1.bin - Internal TECH-1 ROM From Inside TECH-1 Itself

tec1.res.bin - This is inside the tech 1. comonally called the boot rom.(27c64)

eeprom.te1.bin - This is th eeeprom program for some of the early flash ECMs (27c256)

8890.brk.bin - This is for the ABS systems from 1988 to 90 cars and trucks.(27c256)

8892bod.y.bin - This is for the 88 to 92 y body cars (i.e. corvette) (27c256)

8791ec.m.bin - This is for all car lines 87 to 91 (27c256)

8891bod.y.bin - This is for the 88 to 91 y body cars (i.e. corvette) (27c256)

8892br.k.bin - This is for the ABS systems from 1988 to 92 cars and trucks.(27c256)

8891t.r.bin - This is for all truck lines 88 to 91 (27c256)

8188ec.m.bin - This is for all gm stuff from 81 to 88 (27c256)

tk02050.bin - This is the 87-90 ECM "PLUS" (27c256)

tk03080.bin - W 88-89 ABS IPC & ALL 88-89 E&C SYSTEM (ABS & instruments - Systems like Olds Toronado that use a serial data line)

94-002.bin - E/K 86-87 System (Probably used on Cadillac and Olds and Buick E/K Platforms. Olds Toronado, Buick Riveara, Cad?)

94-011.bin - All 81-86 ECM, these are the computer controlled Carbs and early pfi stuff. P3 computers.

94-007.bin - A/J/L/W 87-88 2.8L PFI FTD

A = Ciera, Celebrity, Century
J = Cavalier
L = Baretta/Corsica
W = Cutlass Supreme,Lumina,Regal,Grand Prix. PFI ... Port fuel inj, FTD?


Tech-1 notes:

The Tech-1 and tech1a are based on a 6805 mot cpu

Tech-1a has a buitl in rs232 port

Tech-1 needed an external adapter for the rs232

Enjoy