Scar0 wrote:
I'd be interested on what you have so far. Post it here or PM me.

What I basically did was purposely set some fault codes that are only visible to specific modules (Airbag, ABS, etc) so I could see which address went to which module. When I found the ABS module, I scanned for mode $21 pids and searched the data for any numbers that were close to a standard tire radius/diameter/circumference. Once I had that list, I scanned a few more times to see what stayed the same. The only one I found that met all that criteria was $21 $60. Once I get new tires, I plan on trying to change this value after a test drive and compare GPS to reported speed. If I see it make a difference, I'll know for sure. Down below is a list of CAN adresses and their modules I have found so far. I'm not 100% sure on the cluster one though.
Code:
ECU Send To Receive from
Cluster? 514 6A0
ABS 785 784
PCM 7E8 7E0
ORC 51C 6E0
WCM 500 600
TIPM 620 504
I am also in the middle of making a quick program to scan for DTCs in those listed modules. All you have to do is send 1800FF00 to each of those addresses and they should respond with any fault codes.