pcmhacking.net

80gus wrote:I have had recovery happen, from an accidental key cycle whilst writing. your right tho there is no real need to swap O/S.

I can think of a few... BA/BF turbo manual and typhoon manual PCM's go for a bucket load more than normal PCM's online. but if you can load the BF typhoon manual tune onto a BF auto turbo and swap it in.. it'd be a lot cheaper. My own PCM used to be a 4 speed auto and now has a 6 speed manual in there and it was done by the guy that did the PCM link mentioned earlier. (Matt at BPR)

I'm not sure you can change an manual to an auto.. because the auto PCM has soleniod controls for gearboxes. (the BA does at least, BF's have the ZF and a seperate TCM so who knows) When I first converted my car from BTR to T56 I tried doing the old resistor trick... have the PCM think the auto is at a good temp and in neutral.. just so I didn't have to drive it 30km down the freeway at 2am going 40kph an hour.. Sadly it wasn't to be and I did do the journey at 40kph that night.. (scary because everyone else was doing 110+ and they didn't know I wasn't so they'd catch up really quick. Eventually I'd pull into the breakdown lane whenever someone appeared behind me.) Fell asleep 4 times on that journey too.. was exhausted because in one afternoon, I'd pulled out a BTR, tranny lines, shifter flexplate and torque converter, changed the rear core plug, put in the T56, the shifter, the manual pedal box, (then put the column and brake booster back in) then hooked it all up.. bled the clutch.. did all the wiring.. then drove home 30kph at 40 an hour.

Turns out the PCM can detect when the soleniods are connected and/or working.. so I couldn't trick the BA PCM the way I did the EL before it. But Matt transferred most of my old tune to a manual one and I flashed it onto the PCM.

The thing is.. the auto PCM's have everything needed for a Manual PCM.. the reverse however probably isn't true. so I know for a fact that auto to manual works.. but I am not certain if Manual to auto works... don't know why you'd want the later though as auto PCM's are dirt cheap and you can flash any tune from the same hardware number on it.. (different hw numbers though.. guess you'd have to disassemble both and see how different they are to know if a turbo tune will work on a LPG PCM.)

Matt wanted to get all of a specific version of BA PCM that I could find.. basically they were the same hardware version as the turbo PCM's.. but the BA non turbo/gas PCM's only have 2 plugs, the third is blank.. so you can do it, but you'll need your own boost controller afterwards. I wanted to experiment with putting a BA turbo tune onto an LPG PCM as in the BA's they are the only other PCM with all three plugs populated.

The reason the application doesn't work on Windows XP is they have discontinued support for .NET on XP. Hence all new .NET releases will not install and nor will applications compliled in .NET 4.6 (what I used).

4.5 is the last version that will be supported (I think), fortunately I haven't used any 4.6 components so I can roll back but this may change in the future. Next version will be compiled for 4.5

XP is now 13 years old so not really surprised.

rolls wrote:XP is now 13 years old so not really surprised.

15 actually, it come out in 2001.

rolls wrote:The reason the application doesn't work on Windows XP is they have discontinued support for .NET on XP. Hence all new .NET releases will not install and nor will applications compliled in .NET 4.6 (what I used).

4.5 is the last version that will be supported (I think), fortunately I haven't used any 4.6 components so I can roll back but this may change in the future. Next version will be compiled for 4.5

XP is now 13 years old so not really surprised.

Uses the smallest resources though in a VM

Fun fact for anyone with a VCM...
Installing drivers onto the PC newer than on your VCM will prevent you from using it, it requests VCM2 must be updated (Sigh).

When using Rolls tool, a box pops up to select the VCM2 connected, and this is where it does not allow you to select as its technically 'out of date'.

Get a VM and set it to 2003, turn off time sync, take a snapshot, install drivers.

That is what I did to get IDS working. You can also roll back the snapshot.

On another topic I added DMR logging to csv. You have to manually enter the addresses atm as it is just a proof of concept so I can implement map tracing in my editor program.

Ill send it out on the weekend. Not sure if it will be useful to anyone.

I fuzzed the DMR logging command (0xA1) which takes the following format

0x00 00 07 E0 A1 01 8C 00 3F A5 44

Where 0xA1 is the SETUP_DMR UDS command
0x01 is the index (can poll up to 20 I think)
0x8C is a magic byte (most likely subfunction code )
0x3FA544 is the RAM address

ECU responds with
0x00 00 07 E8 E1 01
Where 0x01 is an echo of the index you sent

Then once you have finished sending the commands you pump TESTER_PRESENT and send
0x00 00 07 E0 A0 08
Where 0xA0 08 is the READ_DMR command

Now I tried fuzzing the DMR command and replaced 0x8C with every number from 0-255 and I got a successfull response from the following bytes.
If anyone is bored I'd be curious what these other commands do. I suspect they are different blocks of memory reads.

I found that you can poll the KAM reflash counter with the following:
0x00 00 07 E0 A1 01 A9 00 3F A8 44

Which takes the 0xA9 subfunction code.

Anyway I'll play with it sometime later but it is definitely something I'd like to figure out as it may mean you can poll more than 4 bytes of memory at once. Love to figure out how to do a poke and pull the entire RAM in one block.

If anyone has a play let me know what you find.

I hope that by making all this stuff public it encourages people to join in. I think a lot of people are scared to share the information they discover be it source code or tuning tips e in fear someone will steal it.

I figure if someone is going to steal it they will probably reverse your software anyway, and the idea or the information on its own isn't very valuable. It is the final product that is valuable. Even if you steal the information you still have to understand it, and it still takes 1000s of hours to produce a polished product with it, and that is what is actually valuable.

I think Microsoft has realised this recently and google and others did long ago.

rolls wrote:Get a VM and set it to 2003, turn off time sync, take a snapshot, install drivers.

That is what I did to get IDS working. You can also roll back the snapshot.

Yeah thats what Iv already got (Updated from xp).

It was the ids 101 drives which were causing the problems. Had to smash in the older drivers to get it all hunky dorey

Will have a few ECU bins to throw up tomorrow

rolls wrote: On another topic I added DMR logging to csv. You have to manually enter the addresses atm as it is just a proof of concept so I can implement map tracing in my editor program.
Ill send it out on the weekend. Not sure if it will be useful to anyone.

Is IDS using DMR? I havent checked that out yet? If so, I can help simulate data to get the calcs?

Tazzi wrote:

rolls wrote: On another topic I added DMR logging to csv. You have to manually enter the addresses atm as it is just a proof of concept so I can implement map tracing in my editor program.
Ill send it out on the weekend. Not sure if it will be useful to anyone.

Is IDS using DMR? I havent checked that out yet? If so, I can help simulate data to get the calcs?

Probably, though I've never checked. You'd need to manually simulate the commands to figure out what they do.

rolls wrote: Probably, though I've never checked. You'd need to manually simulate the commands to figure out what they do.

I'll check that tomorrow as well then!