pcmhacking.net

Here are the stock files from a few other ones I have recently done.

Using 12605261 as a base, looks like high octane ignition table starts at 0x02CCF2 and low octane starts at 0x02D22A. Is vats a single bit switch or code patch?
Edit
looks like a single switch at 0x020520 for vats still need to verify

Power enrichment ratio starts at 0x029458

Edit
Primary VE is located at 0x02B6B4

Edit
maf table is located at 0x02C2A4

Edit
regarding vats it looks like it is a single bit switch 0 = enabled and 1 = off. Checked in several software versions all seem to have the same structure

Edit
open loop eq while in gear 0x0288A2
open loop eq while in park or neutral 0x028D0A

Hopefully I have time tomorrow to find more maps, the larger ones are easy to find so ill try to do all of those first

Had a little time tonight found some injector calibration maps
Dead times (offset vs kpa) 0x025014
injection quantity (flow vs kpa) 0x026122

Am I the only one whos currently working on defining the P12? It would be nice to collaborate... IDA project anyone?

Lowlyfe1 wrote:Am I the only one whos currently working on defining the P12? It would be nice to collaborate... IDA project anyone?

I'd be more than willing to help on any of this as I have plenty of time.
BUT, I don't really know HOW to use IDA.
Anyone have a link to a video on HOW to use IDA for this?

Mike

Use Ghidra. It's free and every bit as capable. Once you learn it, it's pretty damn powerful.

Gatecrasher wrote:Use Ghidra. It's free and every bit as capable. Once you learn it, it's pretty damn powerful.

OK, Can I assume that they got CPU32 support working properly now?
ALSO, any video tutorials on WHERE to start?
I REALLY want to learn so I can better contribute as I have LOTS of free time now.

Mike

It looks like CPU32 is mostly fixed?

viewtopic.php?f=42&t=7920

There's some really good how-to info in that thread as well.

I might take a quick look at it too. I came up with some really helpful auto labeling scripts for my E92 disassembly. It'd be interesting to see if the same logic works on an older PCM.

Gatecrasher wrote:It looks like CPU32 is mostly fixed?

viewtopic.php?f=42&t=7920

There's some really good how-to info in that thread as well.

I might take a quick look at it too. I came up with some really helpful auto labeling scripts for my E92 disassembly. It'd be interesting to see if the same logic works on an older PCM.

Thanks, I had forgotten all about that thread.

Mike

It was only dumb luck that I saw it and remembered it.

I found the diagnostic PID table. It's not laid out as conveniently as the E92, so it'll be a lot harder to script.

It starts at 0x6263a and ends at 0x6347a. The format is like this:

2 byte PID (Padded with 00 for the OBD2 standard PIDS. So PID 0x0C for RPM is 0x000C)
4 byte function address
1 byte count of bytes returned
1 byte padding. 0x00

That should help get you started matching up memory locations to the data they represent. I'll keep looking for other stuff. This may come in handy if I decide to poke around in the E67 on my Hummer.

How similar is this OS to the E40s? I've got some address info for those.