SaturnFans.com
what's new (beta) - classifieds - forums - photos


Go Back   SaturnFans.com Forums > Models > Saturn S-Series > S-Series Tech
Register FAQ Members List Groups Calendar Chat Room Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Display Modes
Old 08-11-2011, 08:01 PM   #41
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,662
 

2002 SL1
Default Re: Breaking the code

That temp seems real to me on a short drive....5401 is the memory location I have the scangaugeII poll for information. I believe it's a mode 22 request

REWARD EXCELLENCE!

Add to 1996SL11.9L's Reputation
Rate the quality of this post and help 1996SL11.9L reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
1996SL11.9L is offline   Reply With Quote
SaturnFans.com Sponsored Links
Old 08-11-2011, 08:05 PM   #42
Redhotftw!
Advanced Member
Redhotftw! will become famous soon enough
 
Join Date: Jul 2010
Posts: 647
Default Re: Breaking the code

I would be in love if the fuel tables and map could be cracked to support boost on the PCM

...
1998 "Red Hot" Sc2

REWARD EXCELLENCE!

Add to Redhotftw!'s Reputation
Rate the quality of this post and help Redhotftw! reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
Redhotftw! is offline   Reply With Quote
Old 08-11-2011, 09:32 PM   #43
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

Quote:
That temp seems real to me on a short drive....5401 is the memory location I have the scangaugeII poll for information. I believe it's a mode 22 request
Mode 22 == Request_Diag_Data_by_PID 8D

Ok, something you may want to try is to keep pinging "memory" locations, with the y byte set to 01

I'm looking at the code, and it pulls from the buffer, then loads the part of it and cmp's it to 01 Now we are getting somewhere, I'm going to keep tracing from there. The function it jumps into is NOT pretty.

REWARD EXCELLENCE!

Add to Thisita's Reputation
Rate the quality of this post and help Thisita reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
Thisita is offline   Reply With Quote
Old 08-11-2011, 09:45 PM   #44
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

Some numbers to try for x
$11
$12
$13
$1C
$51
$59
$CF
$F4

There seems to be checking for these numbers

REWARD EXCELLENCE!

Add to Thisita's Reputation
Rate the quality of this post and help Thisita reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
Thisita is offline   Reply With Quote
Old 08-11-2011, 09:47 PM   #45
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,662
 

2002 SL1
Default Re: Breaking the code

The scangauge is bydirectional I can look at places, but if the math isn't correct the return is gibberish

I've gone from 00 to 60 so far seeing what's in there....but left the math the same as the temp display request.

REWARD EXCELLENCE!

Add to 1996SL11.9L's Reputation
Rate the quality of this post and help 1996SL11.9L reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
1996SL11.9L is offline   Reply With Quote
Old 08-11-2011, 10:21 PM   #46
OldNuc
Super Member
OldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond repute
 
Join Date: Apr 2008
Location: Far Southwestern Iowa
Posts: 63,586
 

1998 SC2
Default Re: Breaking the code

The encryption will drive you nuts.

The transaxle temperature is continuously monitored and if hi or low will cause changes in transmission shifting. The ECTS, IAT, And TTS are all compared on a cold start as a operability/accuracy check.

This is why I was thinking of attempting this with the code out of a DOHC manual PCM, less code to deal with.

REWARD EXCELLENCE!

Add to OldNuc's Reputation
Rate the quality of this post and help OldNuc reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
OldNuc is offline   Reply With Quote
Old 08-11-2011, 10:36 PM   #47
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

http://www.fastfieros.com/tech/vpw_c...n_protocol.htm

Great reference for me, it lets me know how the data is formatted without having the docs. Since I know where the base address of serials are, I should be able to kick through the tracing easier now

And yes the encryption will, but it is ok lol
I'm guessing TTS is an auto-only feature?

REWARD EXCELLENCE!

Add to Thisita's Reputation
Rate the quality of this post and help Thisita reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
Thisita is offline   Reply With Quote
Old 08-11-2011, 10:48 PM   #48
OldNuc
Super Member
OldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond repute
 
Join Date: Apr 2008
Location: Far Southwestern Iowa
Posts: 63,586
 

1998 SC2
Default Re: Breaking the code

Yes, the TTS is auto only. With that auto trans dump you have all of the code for operating the autotragic transmission. I am sure it increases the complexity slightly.

I thought I could find a 96-98 DOHC Manual PCM for cheap but so far no luck. Trying to pick all the AT control foo out of the code will be a pain.

REWARD EXCELLENCE!

Add to OldNuc's Reputation
Rate the quality of this post and help OldNuc reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
OldNuc is offline   Reply With Quote
Old 08-11-2011, 11:03 PM   #49
TwinRevver
Advanced Member
TwinRevver is on a distinguished road
 
Join Date: May 2007
Location: Toledo, OHIO!
Posts: 925

1995 SL2
1995 SL1
Default Re: Breaking the code

i wonder if u convert hex into bin then unencryption using Gray code....

i think we have to find what encryption pattern is used to undo this epa bs....

...
now with problems and getting a newer car but not a saturn :(
My 95 SL2 white top of the line car Priceless..

REWARD EXCELLENCE!

Add to TwinRevver's Reputation
Rate the quality of this post and help TwinRevver reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
TwinRevver is offline   Reply With Quote
Old 08-11-2011, 11:23 PM   #50
OldNuc
Super Member
OldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond repute
 
Join Date: Apr 2008
Location: Far Southwestern Iowa
Posts: 63,586
 

1998 SC2
Default Re: Breaking the code

Data lines swapped. Its hardware.

REWARD EXCELLENCE!

Add to OldNuc's Reputation
Rate the quality of this post and help OldNuc reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
OldNuc is offline   Reply With Quote
Old 08-11-2011, 11:31 PM   #51
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

Packet should look like this being sent:
6C 10 F1 22 xx yy 01

PCM_ID = 10
TOOL_ID = F1 (I need to find the memory location of this)

Mode 22 replies are formed in memory location 383 and can be a total of 9 bytes looking like this
6C F1 10 62 xx yy aa bb cc dd ee

Still need to find the input memory location.

REWARD EXCELLENCE!

Add to Thisita's Reputation
Rate the quality of this post and help Thisita reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
Thisita is offline   Reply With Quote
Old 08-11-2011, 11:52 PM   #52
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,662
 

2002 SL1
Default Re: Breaking the code

Yes I sent 6C10F122115401

REWARD EXCELLENCE!

Add to 1996SL11.9L's Reputation
Rate the quality of this post and help 1996SL11.9L reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 11:24 AM   #53
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

So the real PID for Tranny Temp is $1154

The cmp I was seeing before, was doing a sanity check on the packet.

Hmmm, can you try sending $119D for BARO in kPa?
I doubt it is the right, but worth a shot.

REWARD EXCELLENCE!

Add to Thisita's Reputation
Rate the quality of this post and help Thisita reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
Thisita is offline   Reply With Quote
Old 08-12-2011, 01:34 PM   #54
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,662
 

2002 SL1
Default Re: Breaking the code

Will it be the same math as for the temp?

REWARD EXCELLENCE!

Add to 1996SL11.9L's Reputation
Rate the quality of this post and help 1996SL11.9L reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 02:16 PM   #55
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,662
 

2002 SL1
Default Re: Breaking the code

I get a 246 for that address but I need to look into what math I'm doing. Am currently using math for knock retard.

Last edited by 1996SL11.9L; 08-12-2011 at 02:22 PM..

REWARD EXCELLENCE!

Add to 1996SL11.9L's Reputation
Rate the quality of this post and help 1996SL11.9L reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 02:45 PM   #56
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,662
 

2002 SL1
Default Re: Breaking the code

If I put in the math for GM vpw baro at that address I get 738. It's calling it inches of mercury. But the 9d is on scangauge's list for GM baro vpw coms

REWARD EXCELLENCE!

Add to 1996SL11.9L's Reputation
Rate the quality of this post and help 1996SL11.9L reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 03:26 PM   #57
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

Hmmm, should be no math, and be in kPa <.< The base system is metric if I remember right. I think OldNuc can confirm on that.

That still doesn't sound like it is it though, was worth a shot, I'll have to check a few more. That was another number that I saw on the internetz

REWARD EXCELLENCE!

Add to Thisita's Reputation
Rate the quality of this post and help Thisita reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
Thisita is offline   Reply With Quote
Old 08-12-2011, 03:39 PM   #58
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,662
 

2002 SL1
Default Re: Breaking the code

That is why I had to walk through the addresses looking for trans temp, Internet info was wrong....at least for saturn's.

REWARD EXCELLENCE!

Add to 1996SL11.9L's Reputation
Rate the quality of this post and help 1996SL11.9L reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 04:54 PM   #59
OldNuc
Super Member
OldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond repute
 
Join Date: Apr 2008
Location: Far Southwestern Iowa
Posts: 63,586
 

1998 SC2
Default Re: Breaking the code

Saturn is unique except for the small set of FED mandated codes. Makes almost everything you find on the interwebs wrong.

Yes, I think the actual calculations are metric system.

REWARD EXCELLENCE!

Add to OldNuc's Reputation
Rate the quality of this post and help OldNuc reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
OldNuc is offline   Reply With Quote
Old 08-13-2011, 07:13 AM   #60
LTond56
Member
LTond56 is on a distinguished road
 
Join Date: Sep 2008
Posts: 217
Default Re: Breaking the code

I have a general question about the process.

Are you using a Datacom Analyzer to record a Tech 2 scanner session?

REWARD EXCELLENCE!

Add to LTond56's Reputation
Rate the quality of this post and help LTond56 reputation points. Click the reputation button near the bottom left corner of this message box. Thank you!
LTond56 is offline   Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
breaking 14's? Diezeltitan08 S-Series Mods 8 10-22-2010 06:51 PM
Saturn keeps breaking down? Heirophantress S-Series General 29 04-25-2009 09:40 PM
98 SL2 Revs while breaking orlana S-Series Tech 9 01-04-2008 10:30 AM
Breaking in: the EFX spoiler BlueIonDriver Ion General 23 03-11-2004 10:07 PM
Breaking into your Saturn! Whelan General Saturn Discussion 10 12-11-2001 05:25 PM


All times are GMT -5. The time now is 05:25 AM.

Advanced Forum Search | Advanced Photo Search


Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2017, vBulletin Solutions, Inc.
SaturnFans.com. The Saturn Enthusiasts Site.