Pages: [1] 2
Author Topic: ME7.3H4 Immo off --EXOTIC  (Read 29970 times)
stutga
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 4


« on: June 25, 2013, 02:36:51 PM »

Hi All,

I am having fun with the ECU below, belonging to Fiat Punto Mk2 Automatic 1.2 16V ELX.
The thing is that I read through the internet, and probably this is the most exotic ECU ever.
I could not find a single reference to 7.3 on this site either.

This is a matching ECU from a donor car, but obviously Immo locked. The challenge is to remove this locking in any way.

Bytes: 7FFFF
Checksum: 056B
Marca: Bosch
Num. HW: 0261206982
Num. SW: 1037362063

The things I tried:
me7 tools from this site.
Nefmoto program.
universal immo decoding (produced some output, but probably checksum broken. ECU does not start up.)
otocheck.

If you can give me any advice (that leads to solution), or make the necessary changes, please help me. you wont be left unpaid.  Wink

I attached the binary image that starts up the ECU, but IMMO locked.
There is no secondary "settings" ram image, as i could not download it or does not exists for this exotic plaything.

Thanks,
stutga

PS: I use Galletto 1260 for flashing.

Logged
ddillenger
Moderator
Hero Member
*****

Karma: +641/-21
Offline Offline

Posts: 5640


« Reply #1 on: June 25, 2013, 02:56:56 PM »

The immobilizer data isn't stored with the flash. You need to read the eeprom.
Logged

Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your experience!

Email/Google chat:
DDillenger84(at)gmail(dot)com

Email>PM
stutga
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 4


« Reply #2 on: June 25, 2013, 03:13:23 PM »

Are you sure?
Again, this is not a popular 7.1/7.5...
Certainly i am unable to read that eeprom. -if exists.

I was wondering if the program could be changed so that it does not check the immo code?

Unfortunately the ME7 ida plug in does not find too much useful stuff in the binary...
Logged
ddillenger
Moderator
Hero Member
*****

Karma: +641/-21
Offline Offline

Posts: 5640


« Reply #3 on: June 25, 2013, 03:19:23 PM »

I'm sure that every single ME7 I've ever seen has had a separate eeprom for adaptations, coding, and immobilizer data. Take pictures of the board.
Logged

Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your experience!

Email/Google chat:
DDillenger84(at)gmail(dot)com

Email>PM
prj
Hero Member
*****

Karma: +1072/-485
Offline Offline

Posts: 6041


« Reply #4 on: June 25, 2013, 03:50:46 PM »

Immo can be disabled in flash as well...
Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
ddillenger
Moderator
Hero Member
*****

Karma: +641/-21
Offline Offline

Posts: 5640


« Reply #5 on: June 25, 2013, 03:53:25 PM »

I know this, but not as easily. Doing so is beyond the reach of most people not skilled with IDA I'd think.
Logged

Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your experience!

Email/Google chat:
DDillenger84(at)gmail(dot)com

Email>PM
stutga
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 4


« Reply #6 on: June 26, 2013, 12:35:15 AM »

Take pictures of the board.

Here is the picture. I would rather not solder it. Cheesy
http://www.ferrarilife.com/forums/attachments/modern-v8s-360-f430/52872d1357035439-how-bench-flash-your-me7h4.jpg

The trouble with IDA that ME7 plug-in does not really work. Or I chose the wrong processor at startup.

Do you know what sort of uProcessor is in this ECU?

Thanks.
« Last Edit: June 26, 2013, 01:10:52 AM by stutga » Logged
stutga
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 4


« Reply #7 on: November 04, 2013, 03:26:37 PM »

If anyone in the future wants to know the answer.

Here is how i managed to defeat this ~@%^ ECU-immo See attached files. Read documentation before using any of the binaries.

Best of luck. Feel free to ask.

Thank you guys who responded, and tried to help.
Logged
DiegoAC
Newbie
*

Karma: +11/-0
Offline Offline

Posts: 19


« Reply #8 on: November 07, 2013, 10:22:29 PM »


There`s also a generic immo off file you can flash via obdII, works on most of these. If you need it let me know.

Cheers.
Logged
conan981
Newbie
*

Karma: +0/-2
Offline Offline

Posts: 5


« Reply #9 on: November 10, 2013, 02:24:09 AM »

i played months ago with this ecu and had the same problem. I need to do it virgin, but solutions online are only for immo off. hardware used : GALLETTO
At the end, car starts but i had always immo mil ON. didn't know if it is a checksum matter or else.
until now no one , could read/write the eeprom in obd2 or on bench without complex hardware work.
Logged
spiki_x
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 1


« Reply #10 on: May 10, 2014, 05:19:48 AM »

I do it via obd in bootmode.

You just have to disconnect the connector B and connect pin 20 to gnd.
I have a fiat idea 2008 that failed completely and I want to do immo off but the program is different then punto......

Anyone know how to do it?
Logged
TheDSI
Full Member
***

Karma: +12/-0
Offline Offline

Posts: 78


« Reply #11 on: May 10, 2014, 12:53:33 PM »

hi, here are 2 files ...
immo2 is the solution tested for this bin .
the immo file is another solution but not tested .

compare with your bin
« Last Edit: May 11, 2014, 06:15:08 AM by TheDSI » Logged
cstefan
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 14


« Reply #12 on: October 28, 2014, 05:03:50 AM »

hi, here are 2 files ...
immo2 is the solution tested for this bin .
the immo file is another solution but not tested .

compare with your bin
hi mate, can you help me do immo off on a punto? i followed the steps of the pdf but the car doesnt start :/ only if i put the pin code with the accelerator and engine light blinks.
Logged
flisko
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 1


« Reply #13 on: April 03, 2017, 01:30:42 PM »

There`s also a generic immo off file you can flash via obdII, works on most of these. If you need it let me know.

Cheers.

old topic but do you still have the file to turn off immobilizer?
i got 1.2 8v punto year 2000
Logged
kido resuri
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 4


« Reply #14 on: May 24, 2017, 12:59:01 PM »

Hi, nice topic, i really like it!

I have similar Fiat Punto mk2, with manual transmission, same ECU type.
I have trouble reading the EEPROM over EOBD2. I tried with me7_95040 and a KKL on pin 7, no luck.
Also tried with Galleto, but still no luck.

I would appreciate any help, thank you!
Logged
Pages: [1] 2
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.024 seconds with 16 queries. (Pretty URLs adds 0s, 0q)