Page 3 of 10 FirstFirst 12345678 ... LastLast
Results 31 to 45 of 145

Thread: EE dissection

  1. #31
    LT1 specialist steveo's Avatar
    Join Date
    Aug 2013
    Posts
    4,008
    Quote Originally Posted by kur4o View Post
    I am thinking of adding nitro spark retard switch.
    There is existing circuit in the pcm that takes signal from Ebcm for spark retard request.
    Typical value for that pin is B+ /pin is red 23 if someone is interested in testing/
    So the signal must be b+ or ground, still to find out.
    I need help finding the traction control tables associated with that hardware signal, so there is no hidden suprises.

    That v6 xdf is the best cracked code i`ve seen so far.
    robertisaar i see your the author so big greetings to you.
    I hope some day we crack the EE code that far.
    im trying too, we can share whatever we find. nice to have someone else that wants more out of it

    i assume you're already playing ball with the EE XDF that i work on (in my sig) so you have table definitions for all the "known" stuff?

    it's getting quite a bit more complete than it was, just based on pulling everything i could find, and from some help from guys like robert especially on the o2 config stuff, which was a very important step forward (CL instability has always been a problem in EE)

    traction control is pretty straightforward signalling from what i know, i do know of someone else that used it for timing retard on spray, i know it was functional. but i think there must be more configuration, i think each timing retard request from the BCM subtracts a fixed amount of timing up to the limit in the max retard vs rpm table (which is known). perhaps there is a constant for the amount retarded per request.

    i actually use the traction control timing retard, without the ASR motor, i have it working pretty well. would love more config.

    would you be interested in contributing your findings to the XDF that i already maintain, or are you planning on making your own?

  2. #32
    LT1 specialist steveo's Avatar
    Join Date
    Aug 2013
    Posts
    4,008
    Quote Originally Posted by EagleMark View Post
    I think the best way to crack code on $EE or any... is to chip in and buy Robert the car and get him out of the V6!

    Great work guys!
    actually the best way would be to steal ALL of roberts ecms in the middle of the night, and leave him with a half a dozen EE ecms, and some connectors.. maybe a few opti wheels.. i bet we'd end up with nAstLT1 pretty quick. anyone got a ski mask?

  3. #33
    Super Moderator
    Join Date
    Mar 2011
    Location
    Camden, MI
    Age
    35
    Posts
    3,026
    i already have a handful of the connectors it uses from the P66 V6 PCM(i would only be missing i think the red connector since the V6 uses the black, blue and clear already)).... nAstLT1 sounds neat though. if one were to have a decent idea of how the E-side works, it really wouldn't be that difficult to patch in all of the engine-related stuff i've done for nAst1, especially since i believe i've released commented assembly of everything i've done so far. if i'm remembering correctly, with as much free space is on the E-side, SO MUCH STUFF could be added. you could even throw in a small JPG/GIF/PNG in the empty space just for fun. or ASCII art.

    i have an unusual amount of love for the V6 stuff though. i really don't know how much of it would translate to the LT1.
    1995 Chevrolet Monte Carlo LS 3100 + 4T60E


  4. #34

  5. #35
    RIP EagleMark's Avatar
    Join Date
    Feb 2011
    Location
    North Idaho
    Age
    63
    Posts
    10,477
    Quote Originally Posted by RobertISaar View Post
    ...nAstLT1...
    Nice!

    1990 Chevy Suburban 5.7L Auto ECM 1227747 $42!
    1998 Chevy Silverado 5.7L Vortec 0411 Swap to RoadRunner!
    -= =-

  6. #36
    Fuel Injected!
    Join Date
    Mar 2013
    Posts
    1,470
    I am sorry for the late input.

    But here is what i found out so far.
    I mapped all the undefined data in the bin, next step is to find out what is used for.

    Still to find out where is the non linear sensors calibration data. aldl messages tables.


    Transmission tables in v6 l32 and v8 lt1 are very similar and i managed to find some more tables based on v6 xdf, again credits go to robertisaar


    After many hours contemplating how the hardware is working i made a big discovery
    E stands for engine or engine side of controller
    T stands for transmission or transmission side of controller

    T side is controlling trasmission, also process all the inputs from engine sensors/except maf/ including o2 sensors and is controlling aldl communication.
    After processing the sensor inputs it send the info to e- side either via spi/serial peripheral interface/ bus or with direct connection with the e side processor.

    E Side is controlling spark output and injectors firing
    There is some third motorola processor with d84g mask code which is most likely dedicated with the maf signal calculations.
    I am still trying to identify the d84g


    Steveo i will be glad to contribute to the xdf you are already building and will be happy if you put all the findings in it, which is very comprehensive already.
    Attached Files Attached Files

  7. #37
    Fuel Injected! fbody_Brian's Avatar
    Join Date
    Mar 2013
    Location
    Biloxi MS
    Posts
    166
    Hey Steve, Just wondering what's up with the version numbering on your xdf, you went from 2.6 to 1.7, was that intentional?

  8. #38
    LT1 specialist steveo's Avatar
    Join Date
    Aug 2013
    Posts
    4,008
    haha did i?

    that's just like me. it shouldnt have been on 2.x in the first place.

    i think im going to just use a revision control system in the future

    it's worth it to just pull this link once in a while to make sure it's up to date: http://resfilter.net/files/carstuff/...DF_CURRENT.zip

  9. #39
    LT1 specialist steveo's Avatar
    Join Date
    Aug 2013
    Posts
    4,008
    also sorry for the lack of updates lately, i never release without testing nearly every new feature and revision, but i've flashed my ecm too many times now, im going to hold off till i get a spare to keep going with it.

    my disassembly is going kinda slow too, havent' had a lot of free time lately, glad someone else is doing a bit of work too!

    lets find some new stuff soon

  10. #40
    Fuel Injected! fbody_Brian's Avatar
    Join Date
    Mar 2013
    Location
    Biloxi MS
    Posts
    166
    Quote Originally Posted by steveo View Post
    also sorry for the lack of updates lately, i never release without testing nearly every new feature and revision, but i've flashed my ecm too many times now, im going to hold off till i get a spare to keep going with it.

    my disassembly is going kinda slow too, havent' had a lot of free time lately, glad someone else is doing a bit of work too!

    lets find some new stuff soon
    I'm happy there's any work being done on it at all!
    I completely understand about the no free time, that's the one reason I haven't dug into this yet. I have absolutely no time to spare. My band is currently practicing 2x a week, gigging weekends, full time job, 2 young kids, repairing and building effects pedals for friends, keeping the cars running.......it never ends. I guess eventually I'll just have to make some time. :)

  11. #41
    LT1 specialist steveo's Avatar
    Join Date
    Aug 2013
    Posts
    4,008
    Quote Originally Posted by fbody_Brian View Post
    ..repairing and building effects pedals for friends..
    that's right up my alley too

    seriously i work in a seasonal business (powersports/boating) so im really burned out spring/summer, and i usually take on my heavy projects in the fall and winter

  12. #42
    Fuel Injected!
    Join Date
    Jan 2014
    Location
    AZ
    Posts
    93
    Steve
    I'll be beck in town soon I could run some tests if you want. Just give me a heads up on what your looking for> I'll see about scoring a different computer. Thinking it may be as cheap as the pumps we got.

  13. #43

  14. #44
    Fuel Injected!
    Join Date
    Nov 2014
    Age
    41
    Posts
    25
    New here. I used to own a few firebirds, my brother has a 94 TA. I'm investigating his rom in IDA and found this thread.

    Has anybody made any logical hacks for these? Is there any empty space in the rom? What about ram?
    i have hacked my WRX and am building a virtual flex fuel code and antilag for the turbos. Thought it would be fun to see if there's room to add some turbo logic.

    anyway, looking forward to dissecting it and seeing how much more defined it has gotten in the last few years.

  15. #45
    LT1 specialist steveo's Avatar
    Join Date
    Aug 2013
    Posts
    4,008
    there's plenty of empty rom space, a few fairly continuous sections that could be used for extra code or tables.

    there's this old hack that i've been basing a lot of my findings on, and there's another guy here working on a fresh start with IDA and finding lots of stuff.

    http://www.gearhead-efi.com/Fuel-Inj...7&d=1357956073

    unfortunately im pretty slow with disassembly, and there are lots of parts of EE that aren't understood yet...

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •