$1A mask Where to start with it?
#1
$1A mask Where to start with it?
I just got something new to play with. A 94 G30 diesel van with a 4l80e standalone system in it. I have already read the bin file it is here: http://dl.dropbox.com/u/7235253/BJDK.bin for anyone who wants to look at it. It appears to be a $1A and there is nothing out there for it other than an A268.DS file. The ecm is part number 16196390 and that is about everything I know about it. I have the factory service manual but it doesn't give much more than what the tech 1 scanner expects to see from it.
I figured first thing would be to create an adx file but I am not sure I am doing it right. Here is what I think is making it fail when trying to read anything from the ecm.
Here is what I put in the adx file.
Can anyone see what I am doing wrong?
Also if I get this working is there a good howto on building an xdf file for this thing? Or does anyone have anything already put together for the 1A or the older $D3 system might be close enough to use as a starting point.
If this thing could be figured out it would make an excellent stand alone controller for the 4l80e transmission to stick it up against just about any type of engine.
I figured first thing would be to create an adx file but I am not sure I am doing it right. Here is what I think is making it fail when trying to read anything from the ecm.
Code:
MODE 1 (TRANSMIT FIXED DATA STREAM) ALDL REQUEST: - MESSAGE ID = $F5 - MESSAGE LENGTH = $57 - MODE = $01 - MESSAGE = $00 - SUM CHECK THE TCM WILL RESPOND WITH THE FOLLOWING MESSAGE: - MESSAGE ID = $F5 - MESSAGE LENGTH = $AB - MODE = $01 - DATA BYTE 1 . . - DATA BYTE 85 - SUM CHECK
Code:
<ADXCSENDCOMMAND id="COMMAND0" idhash="0xC579AD33" title="Mode 1 ALDL Dump Request Send"> <bytestring size="0x5">F5570100B3</bytestring> </ADXCSENDCOMMAND> <ADXCLISTENPACKET id="COMMAND0RE" idhash="0xE6B79C55" title="Mode 1 ALDL Dump Request Reply" flags="0x00000005"> <listentimeout>400</listentimeout> <packetbodylength>88</packetbodylength> <packetoffsetinbody>3</packetoffsetinbody> <packetsize>85</packetsize> </ADXCLISTENPACKET>
Also if I get this working is there a good howto on building an xdf file for this thing? Or does anyone have anything already put together for the 1A or the older $D3 system might be close enough to use as a starting point.
If this thing could be figured out it would make an excellent stand alone controller for the 4l80e transmission to stick it up against just about any type of engine.
#2
#3
Re: $1A mask Where to start with it?
I changed the body size to 89 and it works. So I put the rest of the data in the adx file and it is now more or less complete. I just need to go through it and clean it up and make it look nicer with a dash and things.
The only thing I can't figure out is what the difference between "CURRENT MALFUNCTION WORD" and "MALFUNCTION WORD"? They look like the same things but are on different bytes so I am not sure. I just put both in the adx file for now.
Now that the adx is working and the 4l80e transmission and the controller are in the car and running I just need to get the xdf file built so I can adjust the shift points and things. I have tried using the disassembler but can't really figure out what I am doing. Anyone got a good tutorial on getting the bin disassembled? I tried the tutorial in the sticky but it seems to miss a few steps when it talks about finding entry points. Either that or I just don't get it.
The only thing I can't figure out is what the difference between "CURRENT MALFUNCTION WORD" and "MALFUNCTION WORD"? They look like the same things but are on different bytes so I am not sure. I just put both in the adx file for now.
Now that the adx is working and the 4l80e transmission and the controller are in the car and running I just need to get the xdf file built so I can adjust the shift points and things. I have tried using the disassembler but can't really figure out what I am doing. Anyone got a good tutorial on getting the bin disassembled? I tried the tutorial in the sticky but it seems to miss a few steps when it talks about finding entry points. Either that or I just don't get it.
#4
Senior Member
Join Date: Nov 2006
Location: Camden, MI
Posts: 672
Likes: 0
Received 1 Like
on
1 Post
Car: 1985 IROC-Z28
Engine: LB9
Transmission: 700R4
Axle/Gears: 3.73
Re: $1A mask Where to start with it?
disassembly still gets me at times, though i am getting better with more experience... then again, using IDA-Pro, looking at the reset vector and just letting it go on it's way helps as well
and the "malfunction word" is likely history-based codes, as in "not stored during this key-on engine run sequence"
and the "malfunction word" is likely history-based codes, as in "not stored during this key-on engine run sequence"
#5
Re: $1A mask Where to start with it?
I used the "MALFUNCTION WORD" in the adx definitions that I've made, but you've got me thinking that I may have used the wrong ones. I don't remember testing to see if they worked. I'll test them when I get a chance, or if you get to it before I do, let me know.
Take a look at the hacks for $0E and $31. I guessing that they will be similar to the $1A. Also, take a look at my "Advance $0E v175.xdf" (available at Moates), maybe it might help some.
Take a look at the hacks for $0E and $31. I guessing that they will be similar to the $1A. Also, take a look at my "Advance $0E v175.xdf" (available at Moates), maybe it might help some.
Thread
Thread Starter
Forum
Replies
Last Post
92camaroJoe
Tech / General Engine
6
08-13-2015 06:07 AM