GM ALDL Logging and Scanning

[gruntly69]

Was thinking about this on my drive home & I guess the BCM is doing all the talking, so probably should have sent a disable chatter command before i did this!

[jezzab]

Anyone got some packets of the coolant temp being sent to the cluster to display the temp?

[TazzI]

I figured it picked that up from the general engine data information, isnt directly sent as a F2 device ID.

As I was thinking the same with the FM radio info, Volume change, Trac on/off,cruise on/off.

I think the cluster may pick up certain information on the bus not directed to it (Is this possible?), or is there "levels" of communication on the communication line? As in do we need a modification to be able to see this possibly hidden information being sent between modules?

[jezzab]

Guess the only way is to parrot some packets and see what it does

[gruntly69]

biggsy don't worry about the security info, I managed to find it out myself!

With the other packets for temp & the likes wouldn't they be listed on the ADX of the tuner pro files?

[gruntly69]

This Thread has gone a bit cold so I thought I might update it with a bit of my testing with my scan-tool, but I think it does things different in the way it unlock's BCM & the likes compared to others & I've tried it on a bench just sending commands to BCM by itself & can't seem to get it to unlock, so if anyone else can test or has some insight please feel free to post it up!

New Key;

SENT - F1,5E,1A,80,0,E7,3,0,F,52,EE (CHECKSUM)
REPLY- F1,58,1A,AA,0 (CHECKSUM)

SENT - F1,5E,1A,81,0,0,E7,0,F,52,EE (CHECKSUM)
REPLY- F1,58,1A,C1,0 (CHECKSUM)


BCM-PCM Link;

SENT - F1,5A,13,80,0,E7,3(Checksum)
REPLY - F1,57,13,AA(Checksum)

Takes about 79Seconds & replies with this

SENT - F1,5A,13,81,0,E7,3(Checksum)
REPLY - F1,57,13,BB (Checksum)

All those commands can by sent direct with OSE tool, but I can't guarantee any of it & do it at own risk, but just what I listened to while doing it to 2 cars in particular!

[gruntly69]

Not sure if anyone has tried above?

I think from looking further into it with VT-VX BCM's they auto unlock once a key is connected in series, but with VY-VZ it needs key connected & then have to unlock the BCM with seed/key!

I'm hoping someone else has another option of getting security info off VY-VZ as I have some BCM's here without a key & without a key I can't get the security code to program a KEY!

[gruntly69]

Not Sure about Tazzi's program,

but what security code are you after?

For BCM security code it's in section 4, but catch is it needs to have a coded key in connection & then you also need seed key combo for VX s2 onwards, for earlier 1's it's different again!

[heathmurray1986]

well im pretty sure it was for the radio but doesnt matter anymore but if its the bcm code that would be good then i can crack open my bcm with my tech2 oh an its a s1 vy

[gruntly69]

Not sure why you don't know what code YOU want?

you can get the radio, key & glove box without having a coded key connected to the BCM & that is in section 5, but will have to confirm this tomorrow!