NefMoto > Technical > Cluster and Immobilizer (Moderator: ddillenger) > ECU & Cluster dump, Need help decoding IMMO Pin
Pages: [1]
« previous next »
Author Topic: ECU & Cluster dump, Need help decoding IMMO Pin  (Read 10456 times)
vjborelli
Jr. Member
**

Karma: +1/-0
Offline Offline

Posts: 27
« on: November 21, 2013, 12:50:10 PM »
So I've read up as much as I can, and gotten pretty far ( I think anyway ) with my attempts to retrieve my ImmoIII PIN, but I can't seem to get the PIN to log into the cluster or ECU via VAGCOM. So i'm hoping someone can shed some light on what I might be doing wrong. I've attached my Cluster & ECU bin files as well to make sure I've actually read them correctly.

So here is a view of the ECU dump, and you can see 32 & 33 are "03 0E". Reversed the position and convert to decimal, and you get 3587. Add a 0 to the front of this and that "should" be the ECU ImmoIII PIN, right? So it would be "03587", and you enter it in "Coding II" in the ECU section in VAGCOM. I'm using the newest release 12.12 with a Genuine Ross-Tech HEX+CAN USB cable, and VCP drivers. Same thing was done to the Cluster dump. Cluster was "93 AC". After converting, I got 44179... which also does not work to log into either ECU or Cluster. When I used VAG Commander 2.5 to pull the dump files, only the Cluster listed a "Login" code on the right, and that was "20151" But that didn't work either.

VIN: WAULC68E33A326961   Mileage: 254310km/158020miles
-------------------------------------------------------------------------------
Address 01: Engine        Labels: 06B-909-518-AMB.lbl
   Part No SW: 8E0 909 518 AF    HW: 8E0 909 018 A
   Component: 1.8L R4/5VT     G   0003 
   Coding: 0016701
   Shop #: WSC 14129 411 460358
   VCID: 74EC2AA71478FEBE80B-50E6

Address 17: Instruments        Labels: 8E0-920-9xx-8E2.lbl
   Part No: 8E0 920 950 L
   Component: KOMBI+WEGFAHRS. RB4 D36 
   Coding: 01201
   Shop #: WSC 00000 
   VCID: 3260ECBFFEECB08E527-50C8
   WAULC68E33A326961     AUZ6Z0C0000571
« Last Edit: November 21, 2013, 03:03:53 PM by vjborelli » Logged
mdmaroon
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 5
« Reply #1 on: November 21, 2013, 01:43:26 PM »
I'm trying to do the same thing, but not having much luck finding out how.

One thing I notice is that your ECU dump is only 0.5kb.  Mine is 4KB from an EDC16u31 ECU in a 2004 Golf TDI.

I downloaded my eeprom dump using BDM.
Logged
vjborelli
Jr. Member
**

Karma: +1/-0
Offline Offline

Posts: 27
« Reply #2 on: November 21, 2013, 02:51:11 PM »
Did a little bit more digging and found out the cluster dump pin location is different, so I'll see if I can find the location in the cluster another way.
Logged
vjborelli
Jr. Member
**

Karma: +1/-0
Offline Offline

Posts: 27
« Reply #3 on: November 21, 2013, 04:15:33 PM »
So if I did things correctly, my PIN from the Cluster dump would be "255".
"FF 00" is repeated 3 times in sequence. Reversing this and converting to decimal gives "255". Add two zeros to the beginning to make a complete 5 digits and hopefully that is my PIN. I will find out later when I get out of work.

Can anybody confirm my findings?

Address locations:
1D0x0B - "FF"
1D0x0C - "00"
1D0x0D - "FF"
1D0x0E - "00"
1D0x0F - "FF"
1E0x00 - "00"
Logged
f1torrents
Sr. Member
****

Karma: +17/-1
Offline Offline

Posts: 303
« Reply #4 on: November 21, 2013, 05:22:10 PM »
You have a Bosch RB4 encrypted cluster there.
The SKC is not in the same place that it is in VDO clusters.

Also you need to have the decrypted data from the cluster to get the SKC.
The encrypted data is needed when flashing the file back to the cluster.

The file you have is encrypted.

However if the cluster came out of the same car it will have the same SKC as the ECU.
Logged
vjborelli
Jr. Member
**

Karma: +1/-0
Offline Offline

Posts: 27
« Reply #5 on: November 21, 2013, 10:01:55 PM »
Quote from: f1torrents on November 21, 2013, 05:22:10 PM
You have a Bosch RB4 encrypted cluster there.
The SKC is not in the same place that it is in VDO clusters.

Also you need to have the decrypted data from the cluster to get the SKC.
The encrypted data is needed when flashing the file back to the cluster.

The file you have is encrypted.

However if the cluster came out of the same car it will have the same SKC as the ECU.


Yeah, that was part of my first attempt. When I bought the car last year, before I knew anything about Audi's & tuning, I was unaware that the ECU had a Stage 1 tune from a still unknown company. I only found this out earlier this year when I bought my HEX+CAN cable from an Audizine member, and was able to finally log the boost & such with VAGCOM.

I tried to use memory location 32 & 33 to use as the PIN number, but that didn't work on the ECU login or the Cluster login. So my only guess is either I am doing something wrong, or the ECU in my car is not the original that came with it.
Logged
vjborelli
Jr. Member
**

Karma: +1/-0
Offline Offline

Posts: 27
« Reply #6 on: November 22, 2013, 12:48:42 PM »
Haven't been able to get the PIN to work from ECU either. Can't use it on the ECU or on the Cluster. Should I be keeping the cable in "dumb" mode in VCDS when I go to log into the ECU or Cluster with the PIN? What might I be doing wrong?

My next question is.... Do I need to be in boot mode to properly read the ECU eeprom?

I used VAG Commander 2.5 to retrieve the ECU dump via OBDII with my HEX+CAN cable in "dumb" mode, but I wasn't in boot mode. I'll have to use me7_95040 in boot mode tonight to see if I get a different dump file I guess. This will be my first time attempting to do a boot mode though.
« Last Edit: November 22, 2013, 12:51:52 PM by vjborelli » Logged
f1torrents
Sr. Member
****

Karma: +17/-1
Offline Offline

Posts: 303
« Reply #7 on: November 22, 2013, 02:46:55 PM »
Your ECU EEPROM dump looks bad.
I'd try with the 95040 tool and chuck the VC 2.5

I was able to get my SKC with the 95040 tool in OBD mode.
It's a ME7.5 and that seems to be fairly good with that tool.
Needless to say its much easier to get it from the ECU than the Bosch cluster without the proper tools
Logged
vjborelli
Jr. Member
**

Karma: +1/-0
Offline Offline

Posts: 27
« Reply #8 on: November 22, 2013, 03:54:57 PM »
Quote from: f1torrents on November 22, 2013, 02:46:55 PM
Your ECU EEPROM dump looks bad.
I'd try with the 95040 tool and chuck the VC 2.5

I was able to get my SKC with the 95040 tool in OBD mode.
It's a ME7.5 and that seems to be fairly good with that tool.
Needless to say its much easier to get it from the ECU than the Bosch cluster without the proper tools

When I went to use the 95040 tool, it only attempted to start in boot mode, failed, and then stopped operation. I'll take a screen shot later to show what I mean
Logged
vjborelli
Jr. Member
**

Karma: +1/-0
Offline Offline

Posts: 27
« Reply #9 on: November 26, 2013, 12:27:44 PM »
So I downloaded me7_95040 v1.31 and tried to read in OBD mode, and this is what I get as an error. Any idea?
I'm using a Genuine Ross-Tech HEX+CAN-USB cable.
Edit: Just downloaded 1.4 and will try it when I get out of work
« Last Edit: November 26, 2013, 03:25:42 PM by vjborelli » Logged
Pages: [1]
  Print  
« previous next »
 
Jump to:  

Navigation
Personal Tools
  • November 29, 2024, 05:01:36 PM
  • Welcome, Guest. Please login or register.
    Did you miss your activation email?

    Login with username, password and session length
Search
 
Advanced Search
About Disclaimer
All Rights Reserved 2010 Nefarious Motosports
Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.018 seconds with 18 queries. (Pretty URLs adds 0.001s, 0q)