k0mpresd Hero Member Karma: +146/-54 Posts: 1655 |
exact same thread is here basically: http://nefariousmotorsports.com/forum/index.php?topic=453.15 | ||||
|
k0mpresd Hero Member Karma: +146/-54 Posts: 1655 |
Quote from: AARDQ on November 18, 2012, 08:38:43 AM I've found what I take to be maps and am beginning to disassemble, but haven't been able to spend much time on it, unfortunately. Maybe over the holidays... where do your maps start? i havent looked at the tcu dump i posted in a while but from what i remember it looked like all the maps were pretty near the end of the code. some of them had bosch 8 bit axis definitions in front. | ||||
|
AARDQ Sr. Member Karma: +11/-0 Posts: 338 |
Quote from: k0mpresd on November 24, 2012, 07:31:43 PM where do your maps start? i havent looked at the tcu dump i posted in a while but from what i remember it looked like all the maps were pretty near the end of the code. some of them had bosch 8 bit axis definitions in front. Yes, exactly. Most of them start about 2/3 of the way through. Like this one at 63F26. Sure looks like torque (or maybe airflow) vs. RPM. | ||||
|
AARDQ Sr. Member Karma: +11/-0 Posts: 338 |
Based on the Freescale/Motorola 68376 (extension of 68020) so there's some hope for this. TouCan (printed on CPU) is reference to a built-in CAN controller. | ||||
|
k0mpresd Hero Member Karma: +146/-54 Posts: 1655 |
it has bdm as well. | ||||
|
prj Hero Member Karma: +1054/-443 Posts: 5905 |
So the next thing is to disassemble the binary and see how it works. If that could be gotten down that'd help a lot. The CAN messages we already now - because of the spec on the ECU side. | ||||
PM's will not be answered, so don't even try. |
AARDQ Sr. Member Karma: +11/-0 Posts: 338 |
Quote from: prj on December 01, 2012, 01:29:47 PM So the next thing is to disassemble the binary and see how it works. If that could be gotten down that'd help a lot. The CAN messages we already now - because of the spec on the ECU side. I'm going to pick a spare up off of fleabay and start playing. Unfortunately the exact match for the one in my car is pricey. May just learn with a cheaper version and transfer knowledge to the in-car TCU once I'm confident I mostly know what I'm doing. Seems like there's not much knowldege out there on interchangeability. I want to keep traction/stability control so need to be careful with that aspect. I've downloaded CodeWarrier (thinking that it would be better than Ida Pro in this instance -- any views on that?). As soon as I can get the stupid registration that didn't work resolved... | ||||
|
prj Hero Member Karma: +1054/-443 Posts: 5905 |
I think IDA will be much better... | ||||
PM's will not be answered, so don't even try. |
AARDQ Sr. Member Karma: +11/-0 Posts: 338 |
Ida (5.X, anyway) using the 68330 definition file... Trivia: the file posted by k0mpressed in the other thread is from a W8-powered car. The processor is definitely a 68376; ZC439616CFT16 is listed in a product-change announcement for the part on the Freescale site. Just posting in case anybody else is interested. Editing the above crap info lest anybody waste time trying to duplicate, it looks like the correct entry point is (may be?) 0x412h. Not sure why TBL lookup instructions don't seem to be used, since they are 'new' to the 6833x series. Or maybe I just don;t know what I'm looking at (a definite possibility). | ||||
|
AARDQ Sr. Member Karma: +11/-0 Posts: 338 |
As it turns out, the Nefmoto flash software can connect with the TCU, address 0x02. I had never noticed that the address is selectable from the KWP2000 Settings page. The software won't negotiate timing properly and some precondition isn't met (among other things?) and so won't read the flash, though. Anybody able to provide guidance? Log attached. On the bench, K is pin 88, power to pins 26 and 55 (switched) and ground pin 34. Cable connections as usual. | ||||
|
ratherb1 Full Member Karma: +5/-5 Posts: 115 |
Quote from: skprod on March 28, 2013, 06:52:34 PM audi a6 c5 2001 original tcu dump. I wish i could tune it This would be so great if someone could tune it ....... How did you pull it? | ||||
-ROMIE |
S4dizzle219 Jr. Member Karma: +0/-0 Posts: 33 |
So is this a working tcu tune or are tree any? If I could get my shift times down my car would e incredible and I'm not a fan of the cookie cutter tubes offered. Did connectivity ever get figured out here | ||||
4 rings to rule them all! |
AARDQ Sr. Member Karma: +11/-0 Posts: 338 |
Quote from: S4dizzle219 on April 26, 2013, 08:28:02 PM So is this a working tcu tune or are tree any? If I could get my shift times down my car would e incredible and I'm not a fan of the cookie cutter tubes offered. Did connectivity ever get figured out here Haven't worked on it in a while -- decided to convert to 6MT. Sorry. | ||||
|
Mantis Jr. Member Karma: +0/-0 Posts: 36 |
I have had a TCU with TIP file on it sitting on my desk for 4years, mine is a soldered version, if anyone thinks it could be of use, I will try to dump the file | ||||
|