I am currently well on my way to having at least the basic shell together for a
68hc11 reverse assembler (based in windows excel vba) so I can quickly take the data dumps from the logic analyzers...
Type: Posts; User: sabercatpuck; Keyword(s):
I am currently well on my way to having at least the basic shell together for a
68hc11 reverse assembler (based in windows excel vba) so I can quickly take the data dumps from the logic analyzers...
I have been off on honeydo projects for awhile. If things go relatively well this winter I am hoping to have a chance to go at it some more.
Well for those of you playing the home game :) I have some info from logic analyzer world. The major enhanced mode entry points. This is all in the 3rd upper memory block.
10 $8F26
12 $8FE8
13...
Well I officially have the logic analyers up and working. Just need to make the connections and away I go.
Took a quick run arround the net and did not pull up a free dissasembler, IDA is supposed to be good for many processors, but it isn't free.
BTW I do think I have a way of getting the stuff off of...
Well my agilent logicwave logic analyzers will hopefully show up tomorrow. Probably will take a bit to work the bugs out since they do not have cables (what can you expect for cheap :) ) but...
By the way, these are some of the numbers on the IC's on the board just in case it helps:
185
16196452
e87j (this is the 68hc11F1)
18391m64
66285
delco 466
a8372y25
This is bank 3, it resides on the flash from 18000 to 1ffff
This is bank 2, it physically resides on the flash from 10000 to 17fff
This is the engine side lower 64K. Note the area near location $5666, there are several entry points that control a couple bit's on Port G. This is how it bankswitches in the other two sections of...
There looks like some wierd stuff tward the end that I am not sure of yet but otherwise this is mostly disassembled.
These are the two original bin files for the engine and tranny sides of the ECM (I don't know if calling them that is strictly correct yet, but most of the IO on the tranny side goes to the tranny...
Well I have just about finished up with disassembling the source code. I want to make another pass through it to make sure I got all of the code found. What are the rules on posting the files on...
At least I know I won't be stepping on your toes since it would be bad of me to thieve your business on your own forum.
There is some salivating going on on the Saturnfans forum for this though. ...
So I suppose now that I have gotten to this point, I should ask the EFILive guy's what info do you need to start supporting these ECM's. I will do what I can to work tward that.
So is it just me or does this look like the kind of table that would make one of those pretty 3d graphs.
AC9D db $FF, $FF, $FF, $FF, $F3, $E6, $DC, $D4, $CD, $C7
ACA7 db $C2, $BD, $B9, $B5,...
So I was thinking about the memory map this morning and it dawned on me that the biggest section of memory that I did not know what was going just so happened to be about $1100 to $1fff. There is...
OK finally figured out what they are doing with the bank switching. I thought it was wierd how the lower half was easy to decypher but the upper half was being very problematic. It is because they...
Last serious stuff I did was in the 80's on 6502. Although some of the page swapping stuff I did back then could be usefull for this little project. That's what I get for seeing someone say it...
Tap and tpa move bytes between the a and the
condition register. The cr is where several flags are kept like carry zero etc. Di disables the interupts.
As for having fun, yep, been awhile since...
Here is a couple code snippets arround the Port G memory bank switch routine and a couple of the entry points. Note, was dissasembled with DHC11.exe so a few of the pneumonics may be slightly...
I decided to start a thread to document things as I move allong in cracking the ECU of a '99 Saturn. The specific type I pulled from the JY was from a 1.9L DOHC Auto tranny. I have it sitting on a...