HOW TO: Get Started Reverse Engineering An LS1 ECU

Автокөліктер мен көлік құралдары

LS1 PCM Reverse Engineering with Ghidra - Getting Started
Help Contribute at PCMHacking.net -
pcmhacking.net/forums/viewtop...
1. Software Setup
a. Download Ghidra github.com/NationalSecurityAg...
b. Download CPU32 Instructions pcmhacking.net/forums/viewtop...
c. Copy CPU32 Instructions to Ghidra
2. Start Ghidra Project
a. Open Ghidra (ghidraRun.bat)
b. Create New Project
c. Import Bin File
d. Create RAM Memory Blocks
3. Reference Docs/Websites
a. Bin File Repository github.com/BoredTruckOwner/LS...
b. MCU 68376 User Manual www.nxp.com/docs/en/user-guid...
c. CPU32 Instruction Reference Manual www.nxp.com/docs/en/reference...
d. OBD-II PID Listing www.dashlogic.com/docs/technic...
e. Ghidra Cheat Sheet ghidra-sre.org/CheatSheet.html
00:00 - Intro
01:00 - Software Install
03:10 - Open Ghidra
03:30 - Create Ghidra Project
03:53 - Import Bin File
07:22 - Code Starting Point
10:46 - Create RAM Memory Blocks
13:44 - CPU32 Instruction Reference Example
15:30 - Reverse Engineering Example
Like the Video and Subscribe if you want to see more!
Support me on Patreon: / turbo_v6
Follow me on Instagram: / turbo_v6
Follow me on TikTok: / turbo_v6
Follow my Facebook Page: / turb0.v6
Join the 4.3L V6 Performance Facebook Group: / 3544677405630523

Пікірлер: 23

  • @mstover2809
    @mstover2809 Жыл бұрын

    Just an FYI for those that are unaware. The 4.3l V6 uses the SAME P01/P59 PCM as the LS series V8s. ALL of the FWD V6 through around 2005, and F-Body V6, PCMs are P04 models, and are NOT the same.

  • @ericjon262
    @ericjon2622 жыл бұрын

    Definitely interested in learning more! Thank you for showing us this much!

  • @bigcrazycarboy672
    @bigcrazycarboy6729 ай бұрын

    I appreciate the dive into Ghidra - I'm taking a reverse engineering class this semester at uni so it's interesting to see how the tools I'm familiar with are used in a cool practical application that I am interested in. How ridiculous that the car manufactures don't just give us the option to do it ourselves!

  • @moccasinmarine
    @moccasinmarine2 жыл бұрын

    Thanks for posting this. I’m too busy to watch now but I can’t wait to learn this. I already know how to patch OBDI but want to learn the LS logic. If you are monetized turn on super thanks so I can make a donation.

  • @JohnDoe-mx1sq
    @JohnDoe-mx1sq Жыл бұрын

    There is a commented disassembly on Pcmhackers that will be extremely useful for finding routines. I'm glad there is more work being done on this. I think there could be a more plebian real time and faster logging solution for people with $80 dongles to bridge a gap between $500 real time boards. For example if you gutted the PIDs you could store two sequentially and double the speed. I'm positive the baud over OBDII can be increased. The PCM also listens for commands, you can have 2axis fuel and spark modifiers in the ram that get changed in real time. Maybe a max of +-4 degrees in 2 2d tables, load and RPM. There is definitely a place for RT boards, especially for devs. The ability to flash an experimental ROM in seconds and read the ram is invaluable. I'm interested to see what this processor can do. I've seen the 8086 in 80's/90's so full of commands it was lagging past 4k rpm.

  • @highlanderc

    @highlanderc

    Жыл бұрын

    He probably did this disassembly...

  • @JohnDoe-mx1sq

    @JohnDoe-mx1sq

    Жыл бұрын

    @@highlanderc He didn't, it was made ~4 years ago by someone that doesn't post a lot anymore.

  • @Foryourinfo369
    @Foryourinfo369 Жыл бұрын

    Very interesting bro

  • @projectLSaudiA4
    @projectLSaudiA47 ай бұрын

    Great content, very well organized and easy to follow even for the beginner. Subbed

  • @dariocardajoli6831
    @dariocardajoli683111 ай бұрын

    this was exactly what i was looking for! thank you for the istructive video , im gonna try do this with an honda cbr 1000rr bike (exclusively for track usage)

  • @DanCycles

    @DanCycles

    Ай бұрын

    How did it go?

  • @kaase4879
    @kaase4879 Жыл бұрын

    Thanks for this. Would love a follow up if you're still planning one.

  • @therealblakekirkham5701
    @therealblakekirkham57017 ай бұрын

    If im doing the swap from black box how do i download a base toon can i download the file off the black box

  • @racrx7
    @racrx7 Жыл бұрын

    “I’m not the best C programer” while I’m watching this with my lower jaw dropped looking stupid AF lol.

  • @ericjon262
    @ericjon262 Жыл бұрын

    so, I've started looking into this again, for one of my crappy V6 projects, and for my own personal improvement/learning experience. My understanding is that you have a wideband directly input into your 0411 on your Synoma, is that the case? did you do that using otherwise unused code in the bin file? I noticed the PID list you linked to had PID's for WBO2, were you able to track that to something useful in the stock program?

  • @turbov6

    @turbov6

    Жыл бұрын

    I reused some code in the stock pcm for the closed loop wideband control. This pcm doesn’t come with a wideband so that PID doesn’t work.

  • @ericjon262

    @ericjon262

    Жыл бұрын

    @@turbov6 10-4, that's more or less what I was expecting to hear, I thought maybe the OEM's used widebands on the PCM's during engine development or something maybe, and there might be cool stuff hidden deeper in the code. I also kinda figured if it was there, someone probably would have already exploited it commercially by now.

  • @Zerio
    @Zerio20 күн бұрын

    How would I go about acquiring the bin files from an ECU?

  • @turbov6

    @turbov6

    15 күн бұрын

    For this style ECU PCM Hammer can be used and you would also need a compatible cable to connect the OBD2 port to a computer.

  • @jimmycarson2278
    @jimmycarson2278 Жыл бұрын

    p̴r̴o̴m̴o̴s̴m̴ 🤩

  • @user-tq6hj8bh9y
    @user-tq6hj8bh9y Жыл бұрын

    Great stuff!! Have you ever read +ORC reverse eng. articles? Ever heard of him? o_O

  • @turbov6

    @turbov6

    Жыл бұрын

    No I haven’t. Where can I find that?

  • @user-tq6hj8bh9y

    @user-tq6hj8bh9y

    Жыл бұрын

    ​@@turbov6My mistake, its +ORC , I was trying to find the original articles from the 90's but its getting harder and harder to find them. Basically its one of the pioneers of hacking . en.wikipedia.org/wiki/Old_Red_Cracker . Looks like he died from mysterious cause.... Didn't know that.

Келесі