Above routine is used on more ECU's btw

Here's a bunch more arays.
0x0A, 0x24, 0xC4, 0xC1: SAAB 9-3. Level 5 (Write)
0x56, 0x21, 0xBD, 0xEF: SAAB 9-3 and 9-5. Level 7 (Read)

private static byte[] SecArr = { 0x7E,0x49, 0xBD, 0xF1 }; for (byte b = 0; b < 0x23; b++) { bool oldtmp = false; for (int e = 4; e > 0; e--) { bool tmp = (buf[e - 1] & 0x80) > 0 ? true : false; buf[e - 1] += buf[e - 1]; buf[e - 1] += oldtmp ? (byte)1 : (byte)0; oldtmp = tmp; } if (oldtmp) { for...

IDA is pretty much your only option. You could perhaps use disassembler.io but it lacks many features. Unless you're exceptionally gifted you'd need every ounce of help you could get from the disassembler. Been working on edc16c9/39 for 6 months now and I still haven't cracked much more than a bunch...

Regular ELM327 and stn11xx are all working fine over usb/serial, bluetooth is theoretically possible but not considered safe. Wifi was implemented for a while but later disabled due to how extremely unreliable it was. Be vary of ELM clones identifying themself as V1.5. Especially those that can not ...