pcmhacking.net

Chrysler/Dodge internal firmware is the weirdest I have ever seen. I thought Ford stupidity was bad till I saw what these guys do. It's so bad I can't believe they can meet Calif emissions testing. Even better is they are speed dense I don't have a prob with MAF or speed density(MAP) tuning, it's just surprising to see an OEM using only one.

In-Tech wrote:Chrysler/Dodge internal firmware is the weirdest I have ever seen. I thought Ford stupidity was bad till I saw what these guys do. It's so bad I can't believe they can meet Calif emissions testing. Even better is they are speed dense I don't have a prob with MAF or speed density(MAP) tuning, it's just surprising to see an OEM using only one.

I am yet to properly decompile their firmware and look at how its done, but I wouldnt be surprised for it to be some kind of hybrid of communication form other manufactures such as GM and Ford.

I am trying to put off purchasing about a dozen different SAE documents to check if there is any communication protocol breakdowns, but I have a feeling its inside the factory software which proper breakdowns, just need a bit more time to work through it.

After getting trolled by not realizing I solved the level5 seed/key algo for GPEC2/3 but I actually needed level1 seed/key algo

Next is the GPEC1 ecus I have are either not GPEC1.. or Im losing my mind. Factory software files indicate these should be a 2byte seed/key ecu, but when requesting the seed, I am receiving a 4 byte seed/key.

I would hope there is not two different variants of seed/keys for these, but honestly would not be surprised!

I've had a look through the files I have(no that i think it will help with seed/key) but the only GPEC1 files I have are around 2008 era & in the 2.4L petrol if you need any raw binary files of them let me know it seems 1 type is 1.6Mb & another is 1Mb.

Thanks mate!
But appears Ill need to do a bunch of logging or searching through factory files to extract the details I need

Just a thought, HP Tuners supports the Chrysler 200 (2011-2016), if you had a HPT interface, could you have a listen to the coms to help with the seed/key?

(Sorry, I'm probably not much help on this but it was a very interesting read )

LangasLS wrote:Just a thought, HP Tuners supports the Chrysler 200 (2011-2016), if you had a HPT interface, could you have a listen to the coms to help with the seed/key?

(Sorry, I'm probably not much help on this but it was a very interesting read )

Good idea, but that would just be the lvl5 seed/key which I have already figured which is what factory software uses for read/writing

Hey it seems this might be a dead thread but I'm a dodge owner who has been having a nightmare of a time with both the gpec3 for my dodge dart and a goec2 for my spare care a jeep Patriot which has a gpec2 a I believe how if possible was somebody able to write to the ecu to get it to ask for the seed key and how would one start to figure out the seed key for the dart I'm running nitrous and am limited to how big a shot o can safely do due to ignition timing would love to be able to take it somewhere to have it tuned for nitrous but as far as I know it's untunable without the skim disabled.

The_Lishp wrote:Hey it seems this might be a dead thread but I'm a dodge owner who has been having a nightmare of a time with both the gpec3 for my dodge dart and a goec2 for my spare care a jeep Patriot which has a gpec2 a I believe how if possible was somebody able to write to the ecu to get it to ask for the seed key and how would one start to figure out the seed key for the dart I'm running nitrous and am limited to how big a shot o can safely do due to ignition timing would love to be able to take it somewhere to have it tuned for nitrous but as far as I know it's untunable without the skim disabled.

Sounds like you are after tuning software, not resetting SKIM?

Recently I looked at some older chrysler pcms SBEC2 actually, common around 2000, for that skim linking with pcm. It turns out there is a pin stored in eeprom of skim module that must match a pin stored in pcm eeprom. Skim uses vpw chrysler alternative[PCI bus is called there], but the pcm is some sci enabled.

Good news is some guys took it seriously and developed some sci board to communicate with pcm and actually have some software written.
I also found some program that can extract data from drb3 database with commands, protocols and other useful info.
They also figured the unlocking routine that allows reading pcm.

Some resources can be found here

https://chryslerccdsci.wordpress.com/

and the drb3 database reader

https://github.com/MWisBest/DRBDBReader