I wasted another three hours on the ELM.

All it does is saying "? >" all day.
Sucks. Stupid ic. Should be burned forever

Ill skip that for now and check the J2534.dll thing next.

This one works like E38, just verified on my desk.


You have to check where internal flash is blended into memory space.
Probably 0x400000.

Read there

Ill do the same tonight.
Hopefully its empty, so no third flash driver needs to be developed

Personaly i would beeing interested in GM E38 or GM E67 description files (in automotive industry we use A2L files). And functional Software description also. These are non existent for gm pcms, and the description files you are used to from bosch are also non existent. You will be on a steep learn...

Hey guys. The night was not very productive. I ended up with being able to send and receive with the ELM. But when it comes to "fast" sending for readout and write, it got stucked, loses frames. But not unexpected. Some slow downs or more checks have to be integrated. I will work on that t...

My E67 bruteforce was successful this night. The seed&key does not match E38, of course. Ill check tonight if i can find out any similarities between the two pairs i have now :) @Ironduke: It is made with VS2005, so using .Net2.0 and VC2005 runtimes should do it. I tested it on Windows10 Laptop,...

Welcome to the forum! You might consider taking the code from the Devices and Ports directories of the PcmLibrary and PcmLibraryWindowsForms projects here: https://github.com/LegacyNsfw/PcmHacks/tree/develop/Apps That gives a Device base class with derived classes for all of the interfaces mentione...

Awesome work! Not sure what you mean by not full J2534? Is Dice not a proper J2534 tool? Also, valid E67 seed/key should be: 09:14:17.5 MsgType=2, >[.H..]00 00 06 41 67 01 8B 58 [0008] 09:14:17.6 MsgType=1, <[.H..]00 00 02 41 27 02 64 97 [0008] FramePad Thanks. :) The Dice pretends to be J2534, but...

Welcome to the forums! Thats quite an excellent first post! :) There is a GM MDI, which might work without too much trouble. I use that for anything that needs J2534 and have never had a problem with it. Its bashed on bosch hardware, and supports the whole spec. As for elm, they tend to be incredib...

Hi, this looks very interesting.. For a J2534 device you could probably use one of the toyota ones.. I had one that worked fine with the E38 and gm sps programming up until I tried to update it and bricked it.. lol.. I'll paste a link below of one that looks just like the one I have.. https://www.a...

I think it does not need a manual. Choose tool from drop down, click connect. Connection to ecu is established, flashloader is send and executed. Now you can read or write. Write only if full 2MB binary file has been loaded privious! After read or write, click disconnect. If soemthing went wrong, ec...