SaturnFans.com
saturnfans.com - classifieds - forums - webmail


Go Back   SaturnFans.com Forums > Models > Saturn S-Series > S-Series Tech

Reply
 
Thread Tools Display Modes
Old 08-11-2011, 09:01 PM   #41
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,962
 

2002 SL1
Default Re: Breaking the code

That temp seems real to me on a short drive....5401 is the memory location I have the scangaugeII poll for information. I believe it's a mode 22 request
1996SL11.9L is offline   Reply With Quote
SaturnFans.com Sponsored Links
Old 08-11-2011, 09:05 PM   #42
Redhotftw!
Advanced Member
Redhotftw! will become famous soon enough
 
Join Date: Jul 2010
Posts: 647
Default Re: Breaking the code

I would be in love if the fuel tables and map could be cracked to support boost on the PCM
...
1998 "Red Hot" Sc2
Redhotftw! is offline   Reply With Quote
Old 08-11-2011, 10:32 PM   #43
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

Quote:
That temp seems real to me on a short drive....5401 is the memory location I have the scangaugeII poll for information. I believe it's a mode 22 request
Mode 22 == Request_Diag_Data_by_PID 8D

Ok, something you may want to try is to keep pinging "memory" locations, with the y byte set to 01

I'm looking at the code, and it pulls from the buffer, then loads the part of it and cmp's it to 01 Now we are getting somewhere, I'm going to keep tracing from there. The function it jumps into is NOT pretty.
Thisita is offline   Reply With Quote
Old 08-11-2011, 10:45 PM   #44
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

Some numbers to try for x
$11
$12
$13
$1C
$51
$59
$CF
$F4

There seems to be checking for these numbers
Thisita is offline   Reply With Quote
Old 08-11-2011, 10:47 PM   #45
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,962
 

2002 SL1
Default Re: Breaking the code

The scangauge is bydirectional I can look at places, but if the math isn't correct the return is gibberish

I've gone from 00 to 60 so far seeing what's in there....but left the math the same as the temp display request.
1996SL11.9L is offline   Reply With Quote
Old 08-11-2011, 11:21 PM   #46
OldNuc
Super Member
OldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond repute
 
Join Date: Apr 2008
Location: Far Southwestern Iowa
Posts: 66,694
 

1998 SC2
Default Re: Breaking the code

The encryption will drive you nuts.

The transaxle temperature is continuously monitored and if hi or low will cause changes in transmission shifting. The ECTS, IAT, And TTS are all compared on a cold start as a operability/accuracy check.

This is why I was thinking of attempting this with the code out of a DOHC manual PCM, less code to deal with.
OldNuc is offline   Reply With Quote
Old 08-11-2011, 11:36 PM   #47
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

http://www.fastfieros.com/tech/vpw_c...n_protocol.htm

Great reference for me, it lets me know how the data is formatted without having the docs. Since I know where the base address of serials are, I should be able to kick through the tracing easier now

And yes the encryption will, but it is ok lol
I'm guessing TTS is an auto-only feature?
Thisita is offline   Reply With Quote
Old 08-11-2011, 11:48 PM   #48
OldNuc
Super Member
OldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond repute
 
Join Date: Apr 2008
Location: Far Southwestern Iowa
Posts: 66,694
 

1998 SC2
Default Re: Breaking the code

Yes, the TTS is auto only. With that auto trans dump you have all of the code for operating the autotragic transmission. I am sure it increases the complexity slightly.

I thought I could find a 96-98 DOHC Manual PCM for cheap but so far no luck. Trying to pick all the AT control foo out of the code will be a pain.
OldNuc is offline   Reply With Quote
Old 08-12-2011, 12:03 AM   #49
TwinRevver
Advanced Member
TwinRevver is on a distinguished road
 
Join Date: May 2007
Location: Toledo, OHIO!
Posts: 925

1995 SL2
1995 SL1
Default Re: Breaking the code

i wonder if u convert hex into bin then unencryption using Gray code....

i think we have to find what encryption pattern is used to undo this epa bs....
...
now with problems and getting a newer car but not a saturn :(
My 95 SL2 white top of the line car Priceless..
TwinRevver is offline   Reply With Quote
Old 08-12-2011, 12:23 AM   #50
OldNuc
Super Member
OldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond repute
 
Join Date: Apr 2008
Location: Far Southwestern Iowa
Posts: 66,694
 

1998 SC2
Default Re: Breaking the code

Data lines swapped. Its hardware.
OldNuc is offline   Reply With Quote
Old 08-12-2011, 12:31 AM   #51
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

Packet should look like this being sent:
6C 10 F1 22 xx yy 01

PCM_ID = 10
TOOL_ID = F1 (I need to find the memory location of this)

Mode 22 replies are formed in memory location 383 and can be a total of 9 bytes looking like this
6C F1 10 62 xx yy aa bb cc dd ee

Still need to find the input memory location.
Thisita is offline   Reply With Quote
Old 08-12-2011, 12:52 AM   #52
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,962
 

2002 SL1
Default Re: Breaking the code

Yes I sent 6C10F122115401
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 12:24 PM   #53
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

So the real PID for Tranny Temp is $1154

The cmp I was seeing before, was doing a sanity check on the packet.

Hmmm, can you try sending $119D for BARO in kPa?
I doubt it is the right, but worth a shot.
Thisita is offline   Reply With Quote
Old 08-12-2011, 02:34 PM   #54
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,962
 

2002 SL1
Default Re: Breaking the code

Will it be the same math as for the temp?
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 03:16 PM   #55
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,962
 

2002 SL1
Default Re: Breaking the code

I get a 246 for that address but I need to look into what math I'm doing. Am currently using math for knock retard.

Last edited by 1996SL11.9L; 08-12-2011 at 03:22 PM.
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 03:45 PM   #56
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,962
 

2002 SL1
Default Re: Breaking the code

If I put in the math for GM vpw baro at that address I get 738. It's calling it inches of mercury. But the 9d is on scangauge's list for GM baro vpw coms
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 04:26 PM   #57
Thisita
Member
Thisita is on a distinguished road
 
Join Date: Jun 2011
Location: Kentucky
Posts: 305

1996 SC2
Default Re: Breaking the code

Hmmm, should be no math, and be in kPa <.< The base system is metric if I remember right. I think OldNuc can confirm on that.

That still doesn't sound like it is it though, was worth a shot, I'll have to check a few more. That was another number that I saw on the internetz
Thisita is offline   Reply With Quote
Old 08-12-2011, 04:39 PM   #58
1996SL11.9L
Senior Member
1996SL11.9L has a spectacular aura about1996SL11.9L has a spectacular aura about
 
1996SL11.9L's Avatar
 
Join Date: Sep 2009
Location: Stouchsburg, PA
Posts: 1,962
 

2002 SL1
Default Re: Breaking the code

That is why I had to walk through the addresses looking for trans temp, Internet info was wrong....at least for saturn's.
1996SL11.9L is offline   Reply With Quote
Old 08-12-2011, 05:54 PM   #59
OldNuc
Super Member
OldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond reputeOldNuc has a reputation beyond repute
 
Join Date: Apr 2008
Location: Far Southwestern Iowa
Posts: 66,694
 

1998 SC2
Default Re: Breaking the code

Saturn is unique except for the small set of FED mandated codes. Makes almost everything you find on the interwebs wrong.

Yes, I think the actual calculations are metric system.
OldNuc is offline   Reply With Quote
Old 08-13-2011, 08:13 AM   #60
LTond56
Member
LTond56 is on a distinguished road
 
Join Date: Sep 2008
Posts: 217
Default Re: Breaking the code

I have a general question about the process.

Are you using a Datacom Analyzer to record a Tech 2 scanner session?
LTond56 is offline   Reply With Quote
Reply

Bookmarks

Tags
code, pcm, reverse engineering


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
breaking 14's? Diezeltitan08 S-Series Mods 8 10-22-2010 07:51 PM
Saturn keeps breaking down? Heirophantress S-Series General 29 04-25-2009 10:40 PM
98 SL2 Revs while breaking orlana S-Series Tech 9 01-04-2008 11:30 AM
Breaking in: the EFX spoiler BlueIonDriver Ion General 23 03-11-2004 11:07 PM
Breaking into your Saturn! Whelan General Saturn Discussion 10 12-11-2001 06:25 PM


All times are GMT -4. The time now is 01:18 AM.

Advanced Forum Search | Advanced Photo Search


Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2021, vBulletin Solutions Inc.
SaturnFans.com. The Saturn Enthusiasts Site.