pcmhacking.net

That is partly due to missing tutorial.

Can you give some screenshot what happens or log, is there any idle traffic from ipc on screen.

The usual usage will be

settings-> select device->configure device->connect button.

On vpw console there is various checkboxs->
->>screen checkbox prints traffic to screen
->>file checkbox dumps traffic to file
-->buffered checkbox displays only one screen at a time of data->to overcome slow performance with heavy traffic, slow cpu[On vpw you can uncheck it]

To upload script click script button and select script file]
To send custom messages to bus-> print message on the message dialog , below traffic dialog and press enter.

More progress on the chip ..
found SI30, SO30, SK30
Vcc and vss should be easy enough, but vpp/vmdo and reset will be tough to find without a proper reference manual.

Chip is definitely a NEC upd78f0835 qfp 100-pin 14x14 mm fine
Closest chip a found is the upd78f0833y it has on board j1850, as I’m sure our target does as well! But it’s only 80 pin.

Anyone have a closer manual need the pinout!!

And if anyone has the prn files for Nec upd78083 / upd78f08x / upd78f035.prn


That would greatly help! Should be a flashpro 2, 3 or 5 to write to the chip. I think I can make a programmer from a ftdi chip. Just need the correct pinout and prn files.

Correction I think it’s a .pr5 file?

https://www.renesas.com/us/en/software- ... ry=visible

You will need an account.

mileage usually is stored on eeprom, don`t expect to be on board mcu flash.

I looked at tech2 data for this dash, It doesn`t even have a mileage on the datastream[only trip data], It may be stored in bcm or pcm.

You might get lucky, once you dial the communication issues you have.

The mileage is definitely not programmed by sps. You must send the cluster out to a special repair facility. That being said it’s easy to change I have done so several times it’s on the 93c56 eeprom, which is programmed with a ch314a I think.

Anyway I’m wanting to change more now I want to add tire pressure readings for each tire, and remote start disabled message, etc.

For that I need the full onboard flash dump and a way to flash it back after making changes.

How do you get a subscription to sign up to NEC? I don’t want to pay. Since it’s just a hobby.

This sound like another option configuration data stored in eeprom.
And it can be easily reconfigured using bus messages, if onboard code supports it.
I don`t want to make the method available here.

The nec site just ask for simple account creation. Don`t have one but you can give it a go, ans see what they ask for.

Oh ok. I don’t think the eeprom will allow me to make those changes since they were never available from the factory I’d need to create new code and find a code cave to patch it into the stock firmware.

More on reading the chip..
found vcc, sdi, so, sck, ground
Only two more pins on the 8 pin port that need. To be found vpp, and reset
One I’m getting 4 volts on power up, and the other 1 volt. Not sure how to tell which is which.

Also on the converter I have keyspan 19hs I don’t think I can invert two signals to provide vpp and vcc? I’ll have to get a legit ftdi converter

Trouble is I need to invert rts and dtr for vcc and flmd0 to be pulled up to 5 volts.

I’m thinking a simple pull up bread board circuit with 5 volt power from my e67 pcm could work? But can you control each pin with pyserial python on the keyspan 19hs like you can on a proper ftdi 232?
FTDI <-> 78K0

RX TX
TX RX
VCC VCC
GND GND
RTS RESET
VCC FLMD0

I see my mistake so, si, clk are not what I need I think txdo and rxdo are separate and I’ll never find it! Without a data sheet I’ll be forced to shelve this.

Hopefully someone at nec or the nec forum will respond with a proper data sheet.