I appreciate the dive into Ghidra - I'm taking a reverse engineering class this semester at uni so it's interesting to see how the tools I'm familiar with are used in a cool practical application that I am interested in. How ridiculous that the car manufactures don't just give us the option to do it ourselves!
Just an FYI for those that are unaware. The 4.3l V6 uses the SAME P01/P59 PCM as the LS series V8s. ALL of the FWD V6 through around 2005, and F-Body V6, PCMs are P04 models, and are NOT the same.
There is a commented disassembly on Pcmhackers that will be extremely useful for finding routines. I'm glad there is more work being done on this. I think there could be a more plebian real time and faster logging solution for people with $80 dongles to bridge a gap between $500 real time boards. For example if you gutted the PIDs you could store two sequentially and double the speed. I'm positive the baud over OBDII can be increased. The PCM also listens for commands, you can have 2axis fuel and spark modifiers in the ram that get changed in real time. Maybe a max of +-4 degrees in 2 2d tables, load and RPM. There is definitely a place for RT boards, especially for devs. The ability to flash an experimental ROM in seconds and read the ram is invaluable. I'm interested to see what this processor can do. I've seen the 8086 in 80's/90's so full of commands it was lagging past 4k rpm.
Thanks for posting this. I’m too busy to watch now but I can’t wait to learn this. I already know how to patch OBDI but want to learn the LS logic. If you are monetized turn on super thanks so I can make a donation.
this was exactly what i was looking for! thank you for the istructive video , im gonna try do this with an honda cbr 1000rr bike (exclusively for track usage)
so, I've started looking into this again, for one of my crappy V6 projects, and for my own personal improvement/learning experience. My understanding is that you have a wideband directly input into your 0411 on your Synoma, is that the case? did you do that using otherwise unused code in the bin file? I noticed the PID list you linked to had PID's for WBO2, were you able to track that to something useful in the stock program?
@@turbov6 10-4, that's more or less what I was expecting to hear, I thought maybe the OEM's used widebands on the PCM's during engine development or something maybe, and there might be cool stuff hidden deeper in the code. I also kinda figured if it was there, someone probably would have already exploited it commercially by now.
@@turbov6My mistake, its +ORC , I was trying to find the original articles from the 90's but its getting harder and harder to find them. Basically its one of the pioneers of hacking . en.wikipedia.org/wiki/Old_Red_Cracker . Looks like he died from mysterious cause.... Didn't know that.
