Page 3 of 3 FirstFirst 123
Results 41 to 52 of 52

Thread: Protocol for reading the PCM Flash Memory

  1. #41
    Potential Tuner
    Join Date
    Oct 2002
    Location
    Greenville MS
    Posts
    9

    Re: Protocol for reading the PCM Flash Memory

    Quote Originally Posted by gary

    VIN number: 1G8ZK8279WZ152531
    PCM number: 21008768

    It is possible(?) the Tech-2 generates its key based upon
    the seed --AND-- either the car model, VIN number or PCM number.

    Gary,
    I am unsure but I Believe this is correct because. Every upload/download I’ve sniffed (DiabloSport,Hypertech,Tech-2) the VIN is always requested right before the seed request.



  2. #42
    Potential Tuner
    Join Date
    Nov 2003
    Location
    Posts
    5

    Re: Protocol for reading the PCM Flash Memory

    Jimter,

    Thank you for your reply.

    Jimter said:

    >I am unsure but I Believe this is correct because. Every upload/download
    >I've sniffed (DiabloSport,Hypertech,Tech-2) the VIN is always requested
    >right before the seed request.

    Unfortunately I do not own or have access to a Tech-2. Could someone please
    access a Tech-2 with a sniffer attached and type in the following VIN:

    1G8ZK8279WZ152531

    This VIN was from a wreck that I pulled the PCM.

    The seeds that I need keys for are:

    0x6095
    0x95dc

    The reason why there are two seeds is because three bytes of data appeared
    after the seed request:

    Command word: 20 02 05 6c 10 f1 27 01 00 00 00 00 00 00 9c
    Response: 40 82 6c f1 10 67 01 60 95 dc 00 00 00 28

    The seed is imbedded within 0x6095dc. Therefore the extra byte was either
    0x60 which was a Saturn specific status byte or 0xdc which was some sort
    of extra checksum. I'll have to try both seeds to find out which one was
    the live seed.

    Thanks!!

    Gary


  3. #43

    Re: Protocol for reading the PCM Flash Memory

    unlikely to include the VIN, since it is usually programmed *after* the seed key pair is already set.

    I count sheep in hex...

  4. #44

    Re: Protocol for reading the PCM Flash Memory

    The seed key algo is not vin or pcm related... Actually I know the seed/key algo but for V8's only.. and its not working for v6s but magnus should know them since he has a cable and programmer almost ready to go out on the market soon.

  5. #45

    Re: Protocol for reading the PCM Flash Memory

    Quote Originally Posted by gameover

    Agree it's a possibility but do you think i should switch to high speed mode after the mode $A0 and send the mode $A1 in high speed mode? Or send the mode $A1 and then switch to high speed mode?

    It would seem kind stupid that the cable would junk the response since it supports high speed mode itself so why would it junk the commands required to send/recv using it? Strange...

    Definately send them in this order 28, A0, A1, 34.
    2nd Place is the first looser by the way who is General Failure and why is he reading my disk anyways.

  6. #46
    Potential Tuner
    Join Date
    Nov 2003
    Location
    Posts
    5

    Re: Protocol for reading the PCM Flash Memory

    The_Highlander said:

    >The seed key algo is not vin or pcm related... Actually I know the seed/key
    >algo but for V8's only and its not working for v6s but magnus should know
    >them since he has a cable and programmer almost ready to go out on the market
    >soon.

    Earlier on, Highlander provided a key based upon a seed that I obtained from
    a 4-cylinder engine Saturn PCM. Unfortunately the key did not work (Thanks
    again for trying!). If the algorithm is not dependent upon the VIN or PCM
    number but is dependent upon the specific engine then how does the Tech-2
    modify or select the seed/key algorithm that it uses? I'm still hoping that
    someone can provide a key for my Saturn PCM (seeds 0x6095 or 0x95dc). If
    no one knows the answer then I'll have to connect a micro-controller to my PCM
    and have it try every possible key through an exhaustive search. Such an
    approach could take several weeks.


    Gary

  7. #47

    Re: Protocol for reading the PCM Flash Memory

    Quote Originally Posted by gary
    The_Highlander said:

    If the algorithm is not dependent upon the VIN or PCM
    number but is dependent upon the specific engine then how does the Tech-2
    modify or select the seed/key algorithm that it uses?
    it queries the PCM for information before it unlocks it. not sure exactly what info it needs/uses but theres more than enough info available thru mode $3c requests to work out which algo to use that's for sure

    edit: I think Highlander meant that the VIN# or PCM# is not used in the seed/key calc directly.





    I count sheep in hex...

  8. #48
    Guest
    Guest

    Re: Protocol for reading the PCM Flash Memory

    email me with your specifics, i can help you.


    [quote author=gary

    link=board=gmvpwcomm;num=1060298791;start=40#45 date=12/08/03 at 13:44:08]The_Highlander said:

    >The seed key algo is not vin or pcm related... Actually I know the seed/key
    >algo but for V8's only and its not working for v6s but magnus should know
    >them since he has a cable and programmer almost ready to go out on the market
    >soon.

    Earlier on, Highlander provided a key based upon a seed that I obtained from
    a 4-cylinder engine Saturn PCM. Unfortunately the key did not work (Thanks
    again for trying!). If the algorithm is not dependent upon the VIN or PCM
    number but is dependent upon the specific engine then how does the Tech-2
    modify or select the seed/key algorithm that it uses? I'm still hoping that
    someone can provide a key for my Saturn PCM (seeds 0x6095 or 0x95dc). If
    no one knows the answer then I'll have to connect a micro-controller to my PCM
    and have it try every possible key through an exhaustive search. Such an
    approach could take several weeks.


    Gary
    [/quote]

  9. #49
    Potential Tuner
    Join Date
    Oct 2004
    Location
    Posts
    6

    Re: Protocol for reading the PCM Flash Memory

    HELLO

    I had below information, who can tell me hoe to decode these? thx

    6D F0 10 36 00 10 00 00 20 00 0C 40 FA 60 6D 08 60 0A 30 3C 05 9F 60 04 30 3C FA 60 D0 78 99 C2 0C 40...................................79 7C 28 15 52


    6D 10 F0 36 00 0F A0 FF A0 10 63 18 10 38 9B 7C B0 39 00 03 A0 01 65
    30 38 99 00 B0 79 00 03 9F .................................................
    ???

  10. #50
    Potential Tuner
    Join Date
    Oct 2004
    Location
    Posts
    6

    Re: Protocol for reading the PCM Flash Memory

    Hi, everyone

    I get the register now.
    It's my first time to go to here, and I have a question, wish any guy can help me.
    My question, I got a flash data from my GM car. but I don't know how to explain the data??? ??? I just know the it has included more paramteres.
    if any guy can pxplain, I will appreciate you.

    meny

  11. #51
    Potential Tuner
    Join Date
    Oct 2004
    Location
    Posts
    6

    Re: Protocol for reading the PCM Flash Memory

    Dear all:

    Who can tell me, what is it? Thanks!!

    6C 10 F0 2A 01 85 9D
    6C F0 10 6A 85 00 F7 C1 D7 50 4A A5
    6C 10 F0 2A 01 86 BA
    6C F0 10 6A 86 00 F7 AF B1 41 42 2C
    6C 10 F0 2A 01 87 A7
    6C F0 10 6A 87 00 F7 9C F6 41 47 27
    6C 10 F0 2A 01 88 1C
    6C F0 10 6A 88 00 F7 01 F4 42 5A BF
    6C 10 F0 2A 01 89 01
    6C F0 10 6A 89 00 F7 01 D6 42 4C 52
    6C 10 F0 2A 01 8A 26
    6C F0 10 6A 8A 00 F7 06 20 42 54 E9

    James

  12. #52
    Advanced Tuner
    Join Date
    Oct 2002
    Posts
    206

    Re: Protocol for reading the PCM Flash Memory

    Quote Originally Posted by meny_usa
    Dear all:

    Who can tell me, what is it? Thanks!!

    6C 10 F0 2A 01 85 9D
    6C F0 10 6A 85 00 F7 C1 D7 50 4A A5
    6C 10 F0 2A 01 86 BA
    6C F0 10 6A 86 00 F7 AF B1 41 42 2C
    6C 10 F0 2A 01 87 A7
    6C F0 10 6A 87 00 F7 9C F6 41 47 27
    6C 10 F0 2A 01 88 1C
    6C F0 10 6A 88 00 F7 01 F4 42 5A BF
    6C 10 F0 2A 01 89 01
    6C F0 10 6A 89 00 F7 01 D6 42 4C 52
    6C 10 F0 2A 01 8A 26
    6C F0 10 6A 8A 00 F7 06 20 42 54 E9

    James

    What did you capture this with? It looks like a DPS capture window info.

    Loyde