NefMoto

Hi friends, could someone mod this file to immo off ?

Wrong forum, there are better forums for things like that, i dont know if it is allowed to link them here.

I did an immo of on a 156 0261204705 ages ago which should be the same hardware,
all i remember is that i based it off a immo off file for the 166 3.0 also with ME2.1.

There where two patterns which included a 0xDA byte which had to be replaced with 0x25.
Or was it 0x25 with 0xDA, i dont remember, but these are the "magic bytes" used on allmost all alfa gasoline ecus to signal IMMO allow/deny.

Thanks.
489C 25 to DA, looks promising i will test it. So there is no need to read and edit the HC711E9?

No, immo off works fine without touching the HC711E9 which emulates an eeprom iirc.

What you do is essentially patching the code in the flash from
if (wfsAllow == ALLOWED_0x25)
   allow_start_engine();

to

if (wfsAllow == NOTALLOWED_0xDA)
   allow_start_engine();

The side-effect is that it wont start anymore if the immo is completely ok ;-)

Yes, it works, great!
But i tought that it is too easy just to change the jump condition without having any other integrity/checksum testing done in the code.

But you should fix up the checksum as it can come up later.
Flash checksum can be done delayed or every X afterruns (when ignition is off and ecu does a few seconds housekeeping)

Hi fluke now we changed the 0261 206 168 ecu with wiring (dual NBO2) completly to 0261204705 due to changing the exhaust piping, but i cant make it work the immo on this one. Could you, please have a look at my file? Ive tried 0x50E0 but this looks to me like a map. Im attaching ori from my flash reader.

0x487c from 0x25 to 0xDA should do the trick ;-)

damn.... i cant find the checksum tool ive done it on this old ecu with before,  :-(, i edited the byte could you or some one do me checksum on this file?

Sorry, dont have any checksum tools for that old ecu anymore.
iirc i ran this for ages without doing the checksum.