Help please. How to dump the E flash part

[Tom Hussey]

Hi Dave,

There is no way to read the other processor through the 8192bps serial
in a 1996 and later OBDII style PCM. Support for the uart was deleted on
that processor. This is now done through the J1850. Look at references
to $1060 and $1061. They are to a MC68HC58 data link controller. I don't
have the full detail right now but will assist once it becomes clear. 

I suspect we have reversed the names of the two processors. The
processor that folks (including myself) have been refering to as timing
may perhaps be the event processor. The reason we call it timing is
because of some text that is embedded into the code. Consider if
programming is done over the SPI bus as I think. The processor with the
target FLASH would be running the programming loop while the other would
look after comms and status reporting. I also think this is the case
because most of the timing stuff is done on that other processor (the
one with Event type messages in the binary). Both the VLSI that control
fuel and timing are on that board. Food for thought...

-Tom

DAVE_HEMPSTEAD at HP-Andover-om3.om.hp.com wrote:
> 
> Hi,
>    I'm working on my 95 Camaro ECM, and have successfully downloaded
> my .T
> (transmission, or time) flash part via the ALDL using the mode 2
> command.  I was
> able to dump the entire address space, which includes, flash, ram, and
> eeprom.
>    I've received a copy of Ken Kelly's .E (engine or event) flash
> contents,
> since he unsoldered the part and read it in a prom reader/programmer.
> I've gone
> through its contents and found that it should respond to an 0xE4
> command (as
> opposed to the 0xF4 command on the T side) and that it supports mode 2
> (dump
> memory block).
> 
>    I've been unable to communicate with the .E microcontroller.  I've
> sent 0xE4
> commands over the aldl but get no response.
> 
>    Has anyone been able to do this??  Any help would be greatly
> appreciated.
> 
> Dave Hempstead