Skip to content
Install the CameraLoops App

Browse CameraLoops via the app. Learn more.

www.CameraLoops.ru

Use the CameraLoops full-screen app on your home screen with push notifications, badges and more.

To install the CameraLoops app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install the CameraLoops app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Hacking the GM HMI 2.5 module.

I'm on a quest to hack the GM HMI 2.5 module to learn more about its functionality.

This article is a placeholder for future findings and experiments.

GM HMI 2.5 EMMC Chip Pinouts for dumping the HMI 2.5 Emmc Micro Chip

For dumping the contents of the HMI 2.5 module's EMMC chip, which stores the Sat-Nav maps, calibration files and other operating files.

 

To be continued 

IMG_5021 (3).jpeg



User Feedback

Recommended Comments

Nicholas Trambitas Apprentice

+Nicholas Trambitas

+Purchaser

@Troy Can you please share a mega link with the HMI 2.5 dump that contains the linux OS? I want to see if my software mods are possible first before I tear apart my dash or spend any money on this project. Thank you!

Troy Grand Master

Troy

Administrator

GM Car Hacking Expert

2 minutes ago, Nicholas Trambitas said:

@Troy Can you please share a mega link with the HMI 2.5 dump that contains the linux OS? I want to see if my software mods are possible first before I tear apart my dash or spend any money on this project. Thank you!

Hi I will try to dump EMMC from a working HMI 2.5 when I get some free time.

Nicholas Trambitas Apprentice

+Nicholas Trambitas

+Purchaser
9 minutes ago, Troy said:

Hi I will try to dump EMMC from a working HMI 2.5 when I get some free time.

Thanks, I appreciate it!!

Asinine Rising Star

Troll-Asinine

Troll-Troll

that would be cool to edit the chime. is there any other mods that can be done on Gm

Nicholas Trambitas Apprentice

+Nicholas Trambitas

+Purchaser
On 7/1/2025 at 8:44 PM, Asinine said:

that would be cool to edit the chime. is there any other mods that can be done on Gm

If I have a dump, I can see what else can be coded in... I'm going to assume that since the HMI 2.5 has both a bluetooth and wifi chip, maybe it's possible to somehow port over wireless carplay. Would be cool to look into

marcel_hack_guy Collaborator

+marcel_hack_guy

+Contributor
  • Contributor

For anyone who is Interesed in chance chime. I think it is not posible because it is on the silverbox to make noice at startup even whene the system is not up.

marcel_hack_guy Collaborator

+marcel_hack_guy

+Contributor
  • Contributor

@Arbe_gtc 

On 9/11/2024 at 9:33 PM, Arbe_gtc said:

Solved.

 

I have a CONSOLE in HMI:

 

image.png.c9d98bf2dae6e8585264f8e54a7d4d66.png

And SSH access wia WIFI

 

image.png.058f714f6280fd5c7105acca2aa1b9b8.png

 

Winter is cooming 🤣

 

 

THANKS @HMI_Guy

How did you get from no consol to the consol? I tryed the reset methote without luck. Did i need to connet the Silverbox and Display? or is there a secred?

Arbe_gtc Rookie

+Arbe_gtc

+Contributor

GM Car Hacking Expert

  • Contributor
2 hours ago, marceltestboy said:

@Arbe_gtc 

How did you get from no consol to the consol? I tryed the reset methote without luck. Did i need to connet the Silverbox and Display? or is there a secred?

Upgrade the HMI to the last firmware available and works

marcel_hack_guy Collaborator

+marcel_hack_guy

+Contributor
  • Contributor

I have the Pinout From the EMMC. But my Reader does not Reconice the Card. The power draw is arount 500mA is this nomal?

Arbe_gtc Rookie

+Arbe_gtc

+Contributor

GM Car Hacking Expert

  • Contributor
41 minutes ago, marceltestboy said:

I have the Pinout From the EMMC. But my Reader does not Reconice the Card. The power draw is arount 500mA is this nomal?

To read the eMMC chip, you need a very specific reader; not all readers will work. I also had to remove the silver capacitors from the HMI because they were charging with the current from the SD card reader, causing it to stop working and reading the eMMC. With serial access enabled and Wi-Fi/Ethernet access activated, I think eMMC access is pretty much unnecessary.

marcel_hack_guy Collaborator

+marcel_hack_guy

+Contributor
  • Contributor

Can anyone tell me how to enable WIFI? i have acess over UART and the EMMC.

Arbe_gtc Rookie

+Arbe_gtc

+Contributor

GM Car Hacking Expert

  • Contributor
On 2/3/2026 at 1:19 PM, marceltestboy said:

Can anyone tell me how to enable WIFI? i have acess over UART and the EMMC.

to enable the wifi you need change calibrations (the number 8 have the wifi seffings)

marcel_hack_guy Collaborator

+marcel_hack_guy

+Contributor
  • Contributor

Okay i see, can you Tell me what option this is in readeol.out? I found out how to use this tool to write configs. But there is no option for wifi. Maybe onstar? I have disasambel the programm to finde the options strings.

codebuilder Community Regular

+codebuilder

+Contributor

GM Car Hacking Expert

  • Contributor
7 hours ago, marceltestboy said:

Okay i see, can you Tell me what option this is in readeol.out? I found out how to use this tool to write configs. But there is no option for wifi. Maybe onstar? I have disasambel the programm to finde the options strings.

It'll actually read back the current calibration config in the HMI. When I buy used HMI's, I do this for fun sometimes, I wrote a script that dumps all of the existing commands. The VIN would get you that in most cases anyways (unless there's an updated calibration) but it's kind of neat.

marcel_hack_guy Collaborator

+marcel_hack_guy

+Contributor
  • Contributor

Is there a way to finde out what calibration file does what at what exakt location? The eolupdatetrigger is nice but there are many mystery reserved values

codebuilder Community Regular

+codebuilder

+Contributor

GM Car Hacking Expert

  • Contributor
5 minutes ago, marceltestboy said:

Is there a way to finde out what calibration file does what at what exakt location? The eolupdatetrigger is nice but there are many mystery reserved values

In some cases, you just have to play around. Languages for example, I had to trial and error that one when I was helping someone. The bench setup definitely helps in some cases for this.

marcel_hack_guy Collaborator

+marcel_hack_guy

+Contributor
  • Contributor

Yes i was not able to activate oder deactivate Features. I try onstar but the icon does not Show up. I hat the feeling no metter what i chance with this tool nothing chance. I have found the vin file and by removing the HMI learnd the vin frim my car. :D but it was a long way with ghidra

codebuilder Community Regular

+codebuilder

+Contributor

GM Car Hacking Expert

  • Contributor
1 minute ago, marceltestboy said:

Yes i was not able to activate oder deactivate Features. I try onstar but the icon does not Show up. I hat the feeling no metter what i chance with this tool nothing chance. I have found the vin file and by removing the HMI learnd the vin frim my car. :D but it was a long way with ghidra

What are you using to edit? Almost sounds like it's not working. I've turned every icon on, it's kind of fun to see lol.

marcel_hack_guy Collaborator

+marcel_hack_guy

+Contributor
  • Contributor

There is the app called readeol.out. if you create an symbol link with the Name writeeol.out you can write the values that you can normaly read. Writing works as i can read the changes back...

codebuilder Community Regular

+codebuilder

+Contributor

GM Car Hacking Expert

  • Contributor
6 minutes ago, marceltestboy said:

There is the app called readeol.out. if you create an symbol link with the Name writeeol.out you can write the values that you can normaly read. Writing works as i can read the changes back...

Interesting, I've never actually tried writing with that, I've only ever pulled values. I'll test it tonight and let you know. I always just use my calibration editor then throw the entire thing up. That would be quicker for sure. If you change the theme then restart, does it work?

marcel_hack_guy Collaborator

+marcel_hack_guy

+Contributor
  • Contributor

No even after a reboot nothing chance but the values are still readable with readeol. How can i Translate the values from the tool to the right calibration file and location? What file i think is writen in eolupdatetrigger. But how to get the right location and recalculate the checksum?

Can you Tell me what has to be aktivatet to enable wifi so i can use ssh? The manuel way over ifconfig in linux is a littel bit long

Arbe_gtc Rookie

+Arbe_gtc

+Contributor

GM Car Hacking Expert

  • Contributor
5 minutes ago, marceltestboy said:

No even after a reboot nothing chance but the values are still readable with readeol. How can i Translate the values from the tool to the right calibration file and location? What file i think is writen in eolupdatetrigger. But how to get the right location and recalculate the checksum?

Can you Tell me what has to be aktivatet to enable wifi so i can use ssh? The manuel way over ifconfig in linux is a littel bit long

you have the answer in the thread (to ssh access)

wifi, you need a cal 8 with the Shop enabled. there are a lo of changes to enable the wifi settings

Opelinsignia1985 Collaborator

+Opelinsignia1985

+Contributor
  • Contributor

Good morning everyone,

I was wondering if anyone has experience with the camera application on HMI (IO6 / HMI 2.5).

When the camera application is enabled, a panel appears at the bottom allowing selection between two different guideline styles. However, this layout is different from the reverse camera view. The addition of this bottom panel seems to slightly distort or “squeeze” the camera image compared to when the vehicle is in reverse.

I’ve tried adjusting various RVS definitions in the calibration (track width, overlay parameters, etc.), but these changes do not affect the camera application mode at all — only reverse mode.

Has anyone successfully:

  • Removed the bottom guideline selection panel in the camera app?

  • Forced the manual camera app to use the exact same guideline profile as reverse?

  • Identified whether this behaviour is controlled in a different calibration block or handled at application level?

I’ve attached comparison examples below.

Any guidance would be greatly appreciated.

CAMERA APPLICATION:

641939356_1216236160243956_8688158239928191395_n.jpg?stp=dst-jpg_p720x720_tt6&_nc_cat=107&ccb=1-7&_nc_sid=0024fc&_nc_ohc=wBIIQJ2CuSQQ7kNvwHghAgv&_nc_oc=AdmaqHchXxB7Nn3UJ6zirDsim72QxTXbB3pZKPgJX9ZI3SYXUVvpHz23EcV2GJ-d-BBBexUh4pizxIzi6gnbu5Q5&_nc_ad=z-m&_nc_cid=0&_nc_zt=23&_nc_ht=scontent-lhr8-1.xx&oh=03_Q7cD4gHfSG3r1Uum5MXAVoPjZMIskbDR7mAu98zCqnshg17s5g&oe=69C25E15

REAR VIEW CAMERA:
636713373_1586387459274282_9066030201080784050_n.jpg?stp=dst-jpg_p720x720_tt6&_nc_cat=104&ccb=1-7&_nc_sid=0024fc&_nc_ohc=S_uXdKshnjoQ7kNvwFybbPD&_nc_oc=Adm1zIgeTHe8Qp7y9naWVcW3yMnyZHcw3HIWe6pe03hDW2LHuNTmVOhHMEY8PIhFD2IwrWp1ba2PO3T-Khi1LAXm&_nc_ad=z-m&_nc_cid=0&_nc_zt=23&_nc_ht=scontent-lhr6-2.xx&oh=03_Q7cD4gGWMmtV78EvkE2wGUNMGgtL_wltPcoij-Pd82wczxewfw&oe=69C23820


Bonus question:
Is there any known method to extend the 8 second timeout when using the camera application, or is this hardcoded within the HMI software?


Car Hacking Services I Provide For General Motors Vehicles.

  • GM SPS Access (Europe)
  • GM SPS Access (USA)
  • GM GDS2 Access
  • GM Features Activation/Deactivation
  • GM Remote Diagnosing and Troubleshooting
  • All GM Modules Programming
  • Providing Required GM Calibrations
  • GM ECM/TCM Unlocking
  • GM ECM/TCM Tuning
  • Auto Mechanic Workshop
crakavelli Enthusiast

+crakavelli

+Contributor
  • Contributor

It is for cars with surround or 360 view cameras, there is an additional camera processor required. Have not found a way to bypass the time limit

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Add a comment...

All Articles

Popular Members

  1. hassan77h
    +hassan77h
    27
  2. Troy
    Troy
    23
  3. uglyoldbastard
    +uglyoldbastard
    13
  4. regloops
    +regloops
    8
  5. GM-Enthusiast
    +GM-Enthusiast
    7

New Members

  1. David Fontenot
    David Fontenot
      Member
    Joined
  2. SSAUTOZ
    SSAUTOZ
      Member
    Joined
  3. valdemarford
    valdemarford
      Member
    Joined
  4. Course faycal khalil
    Troll-Course faycal khalil
      Troll-Troll
    Joined
  5. Troll stevie nick
    Troll-Troll stevie nick
      Troll-Troll
    Joined
  6. Troll Parkerchevy
    Troll-Troll Parkerchevy
      Troll-Troll
    Joined
  7. Hayk Vardanyan
    Hayk Vardanyan
      Member
    Joined
  8. tunedbycasco
    tunedbycasco
      Member
    Joined
  9. freehugs
    freehugs
      Member
    Joined
  10. ceberon
    ceberon
      Member
    Joined

CameraLoops™
Powered by Art
All Trademarks appearing on this website are the property of their respective owners.

Account

Navigation

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.