Tuning options for Dodge Mopar

[RobertISaar]

6816 is totally workable...

now, can you get access to the BIN(s)?

[34blazer]

well i downloaded these from speedfreaks, wont open on my computer but maybe you can get it to open


source, post #31

http://thespeedfreaks.net/showthread...CM-Flash/page2


also found this link, this guy wrote a plugin to disassemble bins

http://www.andywhittaker.com/ECU/Dis...S/Default.aspx

[RobertISaar]

256KB BINs..... plenty to play with. the "52" BIN i have opened is empty from 29FF6 to the end of the BIN at 40000..... LOT of extra space.

odd that they use a 6816 as a main processor and a pair of 6811s for fuel/spark control... simplifies the main calibration a bit, but it would introduce things that cannot be changed....

anyways, i had that one loaded into IDA, but i have no idea where the reset vector is stored on the 6816s.... when that and the other vectors are determined, then i can get it disassembled at least.

[34blazer]

LOL glad you can make some sense out of it. you get this figured out and ill buy you a case of beer lmao

[RobertISaar]

if i get it figured out, from the sounds of it, i'll be putting a couple of dodge tuners out of business.

[34blazer]

nah, they might have to work a little harder lol

[RobertISaar]

found the pink book for the 68HC16....

good news is that it acts like an updated/upgraded 68HC11..... the bad news is that it's basically the halfway point between a 68HC11 and the 68332 as used in a lot of GM OBD2 stuff.... it's basically a 68HC11 with integrated bank switching capabilities and makes for some rather confusing instructions...

but i did find the vector table, so i have some idea of how the code is going to execute.

the reset vector is actually kind of hard to calculate due to the bank switching... but it looks like it is 10000h.

i've gotten a little bit of it disassembled..... initial impressions are that it was definitely not created in a lower level language.