Skip to content
Install the CameraLoops App

Browse CameraLoops via the app. Learn more.

www.CameraLoops.ru

Use the CameraLoops full-screen app on your home screen with push notifications, badges and more.

To install the CameraLoops app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install the CameraLoops app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

How to trick GM's SPS into giving files when the module is already updated to the latest calibration version.

Featured Replies

  • GM Car Hacking Expert

It's beneficial to read up on this other tutorial to familiarise yourself with GM's calibration files concept if you're new. 

 

 

I will demonstrate how to trick GM's online SPS into giving you the needed calibration files when the module is already updated to the latest calibration version, or has a different part number version for the car/VIN it was originally coded for.
Before you approach this method, you need to already have a set of calibration files for the editing process, maybe from a different car's Vin number, which is using the same specs module.
This method works best with GM's European marketed cars. With the marketed European cars, only one file needs to be edited to carry out the trick. More than likely, all the files in the calibration package will need to be edited with the American marketed cars( I could be wrong on this).


This trick can be useful for various reasons.
Examples are:

  • Say you install a used IPC into your car and update that IPC to the latest calibration version, later you change your mind and you need to revert the IPC back to stock, you can use this trick to get the original files for your IPC if you don't already have them.
  • Say you bought a used BCM module that came out of a Insignia/Buick Regal car and you want to install that used BCM module into a Mokka/Buick Encore, you can use this trick to get the needed calibration files from GM's online SPS service for the Mokka/Buick Encore car.
  • You can use this trick to mix and match calibration files for experiments, activating features.

There could be many other reasons why you would need to get calibration files.

You can use this trick as a mind sparker for sparking ideas and possibilities to overcome some hurdles for gaining what you need to achieve your goals.

 

A good tip 
Label and keep an archive of all the calibration files and other files when you come across them.

  1. They may come in handy down the line.
  2. Nothing last forever, GM may choose to alter their system and stop handing out files to their cache folder.🙂

 

Only use calibration files coded for that line of module. 
Meaning: do not try to install files coded for an HMI module onto a BCM module.

 

In most cases, the method consists of two stages.

  1. Editing the calibration file.
  2. Correcting the checksum after editing the file.

 

I'll explain a bit about the checksum in simple terms for those who don't know what it is.
The checksum is a security method GM uses for a calibration file to identify if the file has been edited/hacked before the core system gives it access to run on its system's platform.
Imagine the binary codes in each calibration file are marbles.
Some of the marbles are very important, while some are not.
GM places all the marbles in the middle of a circle to form a circle with a nice round circular edge line, and they then take a photo snapshot of the circle and various measurements as a reference.
When we edit the calibration file/marbles, we end up altering that nice rounded circular line. Remember GM took a photo snapshot of the file, and they know the precise measurements for how the circle should look before they give that file access to operated in the system.
Correcting the checksum is basically rearranging some of the other unimportant marbles to form back that perfect circle, which then tricks the modules core system into believing the file was not edited/hacked.
Other mathematical calculations are going on, but the concept is basically the same.

I won't include a tutorial on how to correct the checksum, as I need to figure out a simple none confusing method to demonstrate the process.
However, you can do a google search on correcting first-4 byte Big-Endian checksums to understand the process.

 

With that said, let's get down to explaining the trick.

Other than the checksum part, the trick is pretty simple.


Input the modules VIN number into the website

TIS2WEB.SERVICE.GM.COM


Copy the System Calibration part number.Screenshot 2021-07-28 at 10.56.44 pm.png

 

 

Use an online converter to convert the part number decimal value into hexadecimal value.

Screenshot 2021-07-28 at 11.20.41 pm.png

 

Open the System Calibration file in a hex editor.
Use the hex editor to search for the hexadecimal part number.

Screenshot 2021-07-28 at 11.27.29 pm.png


You now need to change the part number's last digit to one digit down.
Example: The System Calibration part number is 23402917. You need to change it to 23402916.
Convert 23402916 into hexadecimal and use it to replace the original part number that's in the calibration file.
You may or may not need to correct the checksum.
Save the file.
 Program the calibration package to the module using DPS.
When you connect the module to GM online SPS service,
GM's SPS will now see your module as not having the latest calibrations and gives the needed files.

In some cases, you can get away by only changing the System Calibration part number with no need to correct the checksum. 
So, do that and if it doesn't work, then correct the checksum.

 

 

 

Tutorial on correcting the checksum.

 


View full article

  • Replies 35
  • Views 8.1k
  • Created
  • Last Reply

Top Posters In This Topic

Most Popular Posts

  • Later I’ll demonstrate the process for correcting the first 4 byte checksum. 

  • great job   thank you Troy

  • The top part number 13582622 is the part number SPS usually use to decide on the EU modules.    

Posted Images

Can you guide me to correct the checksum in this case? Thank you so much.

  • GM Car Hacking Expert
  • Author
4 hours ago, Alexpham said:

Can you guide me to correct the checksum in this case? Thank you so much.

Later I’ll demonstrate the process for correcting the first 4 byte checksum. 

  • Contributor

Great tutorial Troy.

Thank you.

hi Troy

I try do change BCM part no. but not sure, you say only first file need to do change and checksum correction,

because first file "bcm operation software" and second "bcm vehicle system calibration" so don't need to do second one, see picture

thanks

 

 

 

  • GM Car Hacking Expert
  • Author
1 hour ago, M Ch said:

hi Troy

I try do change BCM part no. but not sure, you say only first file need to do change and checksum correction,

because first file "bcm operation software" and second "bcm vehicle system calibration" so don't need to do second one, see picture

thanks

 

 

 

 

The top part number 13582622 is the part number SPS usually use to decide on the EU modules.

 

 

hi 

DPS shuld working on Astra J?

  • GM Car Hacking Expert
  • Author

Yes, DPS can be used on astra J. I think the astra J uses the dvd 800 and 600 stuff which wofy has uploaded file for.

I'm assuming DPS should be able to write to all the modules in the astra J.

 

  • 2 weeks later...
  • 4 weeks later...
  • Contributor
On 9/8/2021 at 10:55 AM, yajooz stores said:

can this methos fix E6787 error on sps , same calibration ?

no, but there are other methods for this error

  • 2 weeks later...
2 hours ago, phison said:

I tried convert calibration file from deci to hexa  but why i can't find hexa number same on Hex'file @Troy

Note Hexadecimal value: 28BA123

z2798466646047_92301af3200a9f9037c031b76da88fd1.jpg

That loops like its still zipped? save the file as .rar, and unzip with winrar, then resave again as bin, and open. 

 

  • 1 year later...

Hi quick question. Thank you so much for the tutorial. I have a Cadillac ELR and I want to change the BCM Calibration on my car so I can enable the Blindspot monitor system (i have the sensors retrofitted). Can I use this procedure to get the BCM Calibration files from an ELR with a different vin number that has this option, get the calibration files for that vin from SPS, and then flash those calibration files on my car with DPS or will I brick? Do the calibration files contain the vin on them? What's the correct procedure for this? I don't want to brick my car. Thank you for any help 

  • GM Car Hacking Expert
  • Author
5 hours ago, Nicholas Trambitas said:

Hi quick question. Thank you so much for the tutorial. I have a Cadillac ELR and I want to change the BCM Calibration on my car so I can enable the Blindspot monitor system (i have the sensors retrofitted). Can I use this procedure to get the BCM Calibration files from an ELR with a different vin number that has this option, get the calibration files for that vin from SPS, and then flash those calibration files on my car with DPS or will I brick? Do the calibration files contain the vin on them? What's the correct procedure for this? I don't want to brick my car. Thank you for any help 

You won’t brick the module with dps. 

  • 2 weeks later...

Hi does this method still work as of 2022? I just bought the XML files tutorial as well. I saw that GM changed from SPS to SPS2. Do they still provide the cache folder in SPS2? Thanks

  • GM Car Hacking Expert
  • Author
2 hours ago, Nicholas Trambitas said:

Hi does this method still work as of 2022? I just bought the XML files tutorial as well. I saw that GM changed from SPS to SPS2. Do they still provide the cache folder in SPS2? Thanks

 

Yes it's the same process for SPS2.

  • 2 months later...

@Troy hey Troy, do you know the difference between the 8 digit cvn vs the 4 digit cvn? 

  • 5 months later...

Mr Troy, 2018 chevy colorado I have a use pscm an i would like to get the vin an security pin reset so I could use sps2 software an program after. Thanks

  • 6 months later...

 

 

I have sps 1 screen

If you show me how to do this

I can give you 1 month sps 1 screen for free

  • 1 month later...
  • 6 months later...
  • Contributor
AM 13.9.2021 UM 16:38 UHR SAGTE PLSA:

Nein, aber es gibt andere Methoden für diesen Fehler

Hello what trick is that?

I am trying to get my original BCM files. Unfortunately, Troy's trick doesn't work.

  • GM Car Hacking Expert
  • Contributor

what error you get?

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

Popular Members

  1. hassan77h
    +hassan77h
    27
  2. Troy
    Troy
    24
  3. uglyoldbastard
    +uglyoldbastard
    13
  4. regloops
    +regloops
    10
  5. GM-Enthusiast
    +GM-Enthusiast
    7

CameraLoops™
Powered by Art
All Trademarks appearing on this website are the property of their respective owners.

Account

Navigation

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.
CameraLoops members who viewed this content
Pavel brennyn21 colibrig Adelin Elviss Pereira kobrak16 Firestars Dog hassan77h regloops DennisH Fred G Marcin Tulowiecki Rxzo dfyznu Ali Albaqali AMJar lbarbar mechanix tungnv93pt arvydax