GM Reverse Engineering

[VX L67 Getrag]

That's awesome work!!!

BTW I think the last bit was meant for Holden202T not VL, lol

[Holden202T]

get her about 16 psi and i'll be interested

[VL400]

Excellent work Tazzi And thanks for the waiting for boost pic

[Tazzi]

Well least I know its possible to send custom text to the clusters screen.

Had another go this arvo and had no luck. But least it was something.

Anyway, the whole point of this thread was to reverse engineer the frames sent via the tech2 so maybe start getting back on track.
Will be trialing out if I can turn the radio rear speakers on/off via the tech2 in the coming days. Since theres not much else to do with the radio, will move onto the other devices. Can try the climate control option although I dont think there will be anything interesting in there...

Guessing next will be the PIM: F3,57,01,00,B5
What sort of info is stored on the PIM? I remember reading something about it locking tunes or something alike? Or was that the pcm? (confused )

And then will do some more on the BCM, which I can easily just grab the data from mine although wouldnt mind getting som responses from different cars to check if any changes occur. Dont think much changes between vy/vz in bcm responses but wouldnt mind getting a read from both to double check. Also would like to use the responses to see if the "key writing" method changes at all.

[antus]

The PIM takes data from OBD2 Pids and translates the protocol to dashboard ALDL. Im not sure its programmable at all? Just a VPW->ALDL protocol translator, probably for a specific couple of PIDS.

[Tazzi]

The PIM takes data from OBD2 Pids and translates the protocol to dashboard ALDL. Im not sure its programmable at all? Just a VPW->ALDL protocol translator, probably for a specific couple of PIDS.

Ah alright, still curious to what the tech2 thinks its going to get from it though. Just had a look through a PIM .bin dump. Seems it stores the VIN and also a security number for bcm -> PIM (I think).
Cant imagine PIMS are interchangeable without a bit of "editing"

[Tazzi]

Well got the SRS stuff all down pack. Would have thought there were more faults but there wasnt.. Makes sense though since it goes through the main bits and pieces eg pretensioners, driver bag, sidebags ect. Moving onto bcm stuff now. And maybe other devices although apart from engine related info (tuner pro handles all that), dont think theres much more "Useful" fault logs in other devices to obtain. Main ones I look for are engine, bcm and SRS.

This will be the new fault finder:


I did notice when logging the faults.. that the History fault log had two extra faults that the current fault log did not have. These were the "Configuration mismatch to instrument" and also the "SDM internal Fault" logs... I couldnt get either of those to display in the "current" log section within the tech2 no matter what I put in.. (tried everything incase it didnt match the general format). So the tech2 does tell you when you have the wrong airbag settings in the instrument... although doesnt display in the actual current log... (good thinking guys....)

Incase anyones interested, the faults iv so far got are below (Current faults are the same including fault number minus the top 2):

Code: Select all

161 HISTORY: CONFIGURATION MISMATCH TO INSTRUMENT
163 HISTORY: SDM Internal Fault

133 HISTORY: LEFT PERIPHERAL ACCELERATION SENSOR IDENTIFICATION FAULT
134 HISTORY: RIGHT PERIPHERAL ACCELERATION SENSOR IDENTIFICATION FAULT
135 HISTORY: LEFT PERIPHERAL ACCELERATION SENSOR HARDWARE FAULT
136 HISTORY: RIGHT PERIPHERAL ACCELERATION SENSOR HARDWARE FAULT
129 HISTORY: LEFT PERIPHERAL ACCELERATION SENSOR LINE FAULT
130 HISTORY: RIGHT PERIPHERAL ACCELERATION SENSOR LINE FAULT
131 HISTORY: LEFT PERIPHERAL ACCELERATION SENSOR COMMUNICATION FAULT
132 HISTORY: RIGHT PERIPHERAL ACCELERATION  SENSOR COMMUNICATION FAULT

97 HISTORY: RIGHT HAND SIDE AIRBAG CIRCUIT SHORT TO BATTERY
98 HISTORY: RIGHT HAND SIDE AIRBAG CIRCUIT SHORT TO GROUND
99 HISTORY: RIGHT HAND SIDE AIRBAG CIRCUIT CAPACITANCE TOO HIGH
100 HISTORY: RIGHT HAND SIDE AIRBAG CIRCUIT CAPACITANCE TOO LOW
101 HISTORY: RIGHT HAND SIDE AIRBAG CIRCUIT RESISTANCE TOO HIGH
102 HISTORY: RIGHT HAND SIDE AIRBAG CIRCUIT RESISTANCE TOO LOW
247 HISTORY: RIGHT SIDE AIRBAG CIRCUIT POWER STAGE ERROR

81 HISTORY: LEFT HAND SIDE AIRBAG CIRCUIT SHORT TO BATTERY
82 HISTORY: LEFT HAND SIDE AIRBAG CIRCUIT SHORT TO GROUND
83 HISTORY: LEFT HAND SIDE AIRBAG CIRCUIT CAPACITANCE TOO HIGH
84 HISTORY: LEFT HAND SIDE AIRBAG CIRCUIT CAPACITANCE TOO LOW
85 HISTORY: LEFT HAND SIDE AIRBAG CIRCUIT RESISTANCE TOO HIGH
86 HISTORY: LEFT HAND SIDE AIRBAG CIRCUIT RESISTANCE TOO LOW
247 HISTORY: LEFT HAND SIDE AIRBAG CIRCUIT POWER STAGE ERROR

65 HISTORY: RIGHT HAND PRETENSIONER CIRCUIT SHORT TO BATTERY
66 HISTORY: RIGHT HAND PRETENSIONER CIRCUIT SHORT TO GROUND
67 HISTORY: RIGHT HAND PRETENSIONER CIRCUIT CAPACITANCE TOO HIGH
68 HISTORY: RIGHT HAND PRETENSIONER CIRCUIT CAPACITANCE TOO LOW
69 HISTORY: RIGHT HAND PRETENSIONER CIRCUIT RESISTANCE TOO HIGH
70 HISTORY: RIGHT HAND PRETENSIONER CIRCUIT RESISTANCE TOO LOW
247 HISTORY: RIGHT HAND BELT PRETENSIONER CIRCUIT POWER STAGE ERROR

49 HISTORY: LEFT HAND PRETENSIONER CIRCUIT SHORT TO BATTERY
50 HISTORY: LEFT HAND PRETENSIONER CIRCUIT SHORT TO GROUND
51 HISTORY: LEFT HAND PRETENSIONER CIRCUIT CAPACITANCE TOO HIGH
52 HISTORY: LEFT HAND PRETENSIONER CIRCUIT CAPACITANCE TOO LOW
53 HISTORY: LEFT HAND PRETENSIONER CIRCUIT RESISTANCE TOO HIGH
54 HISTORY: LEFT HAND PRETENSIONER CIRCUIT RESISTANCE TOO LOW
247 HISTORY: LEFT HAND BELT PRETENSIONER CIRCUIT POWER STAGE ERROR

33 HISTORY: PASSENGER AIRBAG CIRCUIT SHORT TO BATTERY
34 HISTORY: PASSENGER AIRBAG CIRCUIT SHORT TO GROUND
35 HISTORY: PASSENGER AIRBAG CIRCUIT CAPACITANCE TOO HIGH
36 HISTORY: PASSENGER AIRBAG CIRCUIT CAPACITANCE TOO LOW
37 HISTORY: PASSENGER AIRBAG CIRCUIT RESISTANCE TOO HIGH
38 HISTORY: PASSENGER AIRBAG CIRCUIT RESISTANCE TOO LOW
247 HISTORY: PASSENGER AIRBAG CIRCUIT POWER STAGE ERROR

17 HISTORY: DRIVER AIRBAG CIRCUIT SHORT TO BATTERY
18 HISTORY: DRIVER AIRBAG CIRCUIT SHORT TO GROUND
19 HISTORY: DRIVER AIRBAG CIRCUIT CAPACITANCE TOO HIGH
20 HISTORY: DRIVER AIRBAG CIRCUIT CAPACITANCE TOO LOW
21 HISTORY: DRIVER AIRBAG CIRCUIT RESISTANCE TOO HIGH
22 HISTORY: DRIVER AIRBAG CIRCUIT RESISTANCE TOO LOW
247 HISTORY: DRIVER AIRBAG CIRCUIT POWER STAGE ERROR

If anyones seen any different ones let me know, although fairly certain I got them all.

Will move onto the bcm ones next when the tech2 decides to work again.

[Tazzi]

Due to a dodgy VCI module for my tech2.. Been struggling to get reads or reverse engineer the responses.

Although the eluding true custom message has been solved... Looks like we got onto the right track with the custom text.. but just didnt have the font byte selected properly!
Sending this will give you true custom text with big letters:
B9,83,02,00,00,10,00,00,0A,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00

[antus]

Nice find!

[Tazzi]

Cant take all the glory, had some eager boys in the US play with the radio string we figured out.. and they eventually spat that back out