what other forum is @th3magpi3 flashing
1 Like
You have to send 0x07, 0xAE, 0x2a, 0x80 multiple times you will get a 31 error every time until it accepts it with a 78. If any one needs programming our company can do it. NavRepair.com and Infotainment.com we have bench setups for all gm units 2007-2019. I am trying to crack the IOB seed key. Also the new 18-19 radios have same seed key as the IOBs. Pain in my ass!!!
2 Likes
Because he’s making money in the GM-truck forums reflashing HMI modules as we speak, which is good, gives CW some competition.
What features get left out? I know magpie was able to get the 2016s running on the 2018 firmware so they can have wifi updates and the store and all that, do you think that he flashed the HMI with a 2018 VIN and all with SPS, also unlocking the new features via the update, and then cleared the VIN on the bench? This is the only thing I can think of.
I found an intersting PDF (https://www.scribd.com/doc/85336952/Interpreters-April-01-2011)
“Service Programming System (SPS) Interpreter Programmers Reference Manual”
Specially the section -Step $11 “Part 2” – Write the VIN
Says that link is not valid.
Hmm, direct link to the download doesn’t work on Scribd. Edited the original post, should work now.
I believe he’s referring to this one. But it’s from 2011
Anyone looked at the content on this page? Is this of any use?
http://canbushack.com/hate-the-vin-wanna-change-it/
Think you could program the module on the bench with the wrong VIN in SPS, then update the VIN using the details above?
SPS does not allow Bench programming anymore, it will show a message (Offboard programming detected!) and some people report having their accounts being suspended for that.
any way to upload programming if you have the files from TIS and know the seed key? or do offboard programming?
I believe the 2017 Global TIS had SPS included but not sure if it works for all GM line or Just for European.
1 Like
Hi there, I’m new here.
I might be helpful with researching of reprogramming the HMI modules
Does anyone here got SPS access?
I only got GME access but no GM NAO
On the GME HMI units the VIN doesnt get written by SPS.
Only the binary blobs get block transferred and those (as it seems) are signed by GM
After reprogramming, the programming date (DID 99) and Shopcode (DID 98) get written.
Didnt GlobalTIS go till early 2012 ?
Last version with SPS that I know of was v32b
The very last version was 45 but no where to be found.
I have SPS access for my vehicles. I have since traded the 2017 Camaro RS that I was attempting to program for. My solution was programming it in my 2017 ZL1 using it’s data while physically installed in the ZL1. After programming, I moved it to the 2017 RS. What do you need from SPS?
Sent you a PM 
talk about bringing back the dead, was this ever figured out i know now there are many websites that figured it out and offer programming still want to figure this out as a pass time
Hey Tazzi,
Have you got an email address I could contact you on please??
Also curious about that. I know @th3magpi3 was able to get it figured out after help from the community, but now it seems he is more interested in profiting off of their help than giving back. I cannot help with bench flashing, as that seems to be an issue, but I did contact tjshadyluver through a different means and he gave me some decent info. He said to “send CAN id 252 ,- 0x07, 0xAE, 0xFE, 0x80, 0, 0, 0, 0” and “You should see that the vin will be cleared. you could even loop it until you get a 03,7F,AE,78,AA,AA,AA,AA on the can id 652. Then send the command one more time then you will get 02,EE,FE,AA,AA,AA,AA,AA on 652 can id. That will mean vin is cleared”
I do not have the mechanisms to test this but given that it is summer I might grab a used 2.5 and tinker around with it in my truck. TJ also said he uses a bench setup with a virgin BCM (no vin), although that was a year ago and I imagine since then GM has put in the checks to see is SPS is being done on a bench setup.
gm-trucks. He now has a website and offers services similar in price to the usual suspects. If only this hacking community was more open, imagine what we could have accomplished by now. I’m personally holding out for full on root HMI access or custom OS’s for them. But maybe my dreams are far too ambitious.