VZ E55/E40/E38 ECU LINKER

[The1]

yeh likely but where to look, i havn't tried capturing before and after a pin program. Probably to much would have happened anyway.

[mattyjf01]

Keep up the good work mate!

I suspected I had a 3 pin factory ECM as it would not bruteforce rest, Seemed alive could get all the os info and read a bin out of it.

Went through and incremented the value from 001 and finally unlocked at 546.

If you need any bins or reads from different ECM's give us a message or I can uploads to a thread, I've got access to a few different vehicle configurations.

Cool post them here if you want

Just finished a Ve E77 E69 code reader and reset/linker(untested in a car yet)
Any way around the 10 minute security wait period?

Read my first bin file from an E77
Some areas of flash had to be read 2 bytes at a time and file is one byte too small but i can just add 0xFF to the end
Might try and read an E55 soon then learn how to download as well

[Tazzi]

Sorry didn't put a check ecu info after the button press
But you can just press the info button

It comes back saying its reset after clicking the info button, but its unable to be relinked.

The above issue occurs when TIS'ing a brand new ECM, Iv now seen this a few times from workshops so its something wonky happening when going from the base firmware to latest.

[mattyjf01]

Sorry didn't put a check ecu info after the button press
But you can just press the info button

It comes back saying its reset after clicking the info button, but its unable to be relinked.

The above issue occurs when TIS'ing a brand new ECM, Iv now seen this a few times from workshops so its something wonky happening when going from the base firmware to latest.

That's no good
$1000 paper weight?

[Tazzi]

That's no good
$1000 paper weight?

Pretty much.

Im thinking if I actually wrote back in the original firmware from factory ecus, it might get back into a state it can be security linked first, and then program newest OS and cals in.

[mattyjf01]

That's no good
$1000 paper weight?

Pretty much.

Im thinking if I actually wrote back in the original firmware from factory ecus, it might get back into a state it can be security linked first, and then program newest OS and cals in.

Let us know if it works or not
Ive never purchased a new unit before
Do you use your own software to read and write?
There are a few more areas that i found but never looked into it
I found the code in the first block (which was the highest )

[Tazzi]

Let us know if it works or not
Ive never purchased a new unit before
Do you use your own software to read and write?
There are a few more areas that i found but never looked into it
I found the code in the first block (which was the highest )

For putting the correct operating system and cals in, I use GMs official SPS to ensure it has the correct OS and cals to suit that exact car. But GMs system appears to be doing some weird stuff with security recently, more so with new vehicles using secondhand parts.

[The1]

Keep up the good work mate!

I suspected I had a 3 pin factory ECM as it would not bruteforce rest, Seemed alive could get all the os info and read a bin out of it.

Went through and incremented the value from 001 and finally unlocked at 546.

If you need any bins or reads from different ECM's give us a message or I can uploads to a thread, I've got access to a few different vehicle configurations.

Cool post them here if you want

Just finished a Ve E77 E69 code reader and reset/linker(untested in a car yet)
Any way around the 10 minute security wait period?

Read my first bin file from an E77
Some areas of flash had to be read 2 bytes at a time and file is one byte too small but i can just add 0xFF to the end
Might try and read an E55 soon then learn how to download as well

have you tried sending this to reset timer?
0x07, 0xE0, 0x03, 0xAE, 0x7D, 0x02

[mattyjf01]

have you tried sending this to reset timer?
0x07, 0xE0, 0x03, 0xAE, 0x7D, 0x02

its a TDM 10 minute wait
0x242

when using TDS it looks like it downloads a boot then some other routine
and it doesn't link the ecu

[The1]

oh ok

for VZ ecu it doesn't matter what state or timeout lock if you issue that command it'l unlock and reset timer.