Why I hate VZ V6 ECUs...

[Tazzi]

I layes the 10mm policarb on top dotted where I though the holes should be and drilled haha then glued the pins In I have some more 10mm if you need or could send you mine and some spare pins

Ill see if I cant pick something up today and begin the mess

[The1]

Ive successfully reset one on the bench via brute force. Took 3.5 hours. Pin was 7093. I found if you do a control mode on PID 7D and set bit 02, it will reset the immo timeout, so you can poll through each pin ruffly every 2 seconds. So 5.5 hours would be the maximum being pin 9999.

[Tazzi]

Ive successfully reset one on the bench via brute force. Took 3.5 hours. Pin was 7093. I found if you do a control mode on PID 7D and set bit 02, it will reset the immo timeout, so you can poll through each pin ruffly every 2 seconds. So 5.5 hours would be the maximum being pin 9999.

oh wow ok. What was the 'failed' response you got every time?

I can likely speed that up quite a bit with a J2534 tool, since firing off the AE 7D command and then sending the reset command should be pretty damn quick. Wouldnt be surprised if multiple can be sent per second.

[The1]

Same failed response as usual.

Yeh im only feeding my vxdiag J2534 cable a script, if you wrote a program looking for the responses you could speed it up. I think actually the command is resetting the whole immobilizer code routine and a byproduct is resetting the timeout as it takes quite a while, i allowed 2 seconds, when i tried 1 it overran itself quite a bit.

[Tazzi]

Right right right!

Ok, so it looks like its suppose to be 1 second intervals as a max speed. Any faster and A4 occurs.

Soooo... 9999 combos is 2.7hours. Its currently... 11:42pm.. so I probs wont see this make it.. but Imma run this and set an alarm to see if it worked.

[Tazzi]

correct key, 7096!!!

So that took...
[11:45:32:344] Trying Key 0000
[01:43:57:251] Correct Key is 7096

So a little under 2 hours!

[The1]

Nice, nearly the same pin as my test one but 1hr and 30mins quicker.

[Tazzi]

Nice, nearly the same pin as my test one but 1hr and 30mins quicker.

This demonic E55 is now on the bench... guess we will see what happens in the next couple hours.

[The1]

hopefully the invalid pin is equal to another number

[Tazzi]

hopefully the invalid pin is equal to another number

Im worrying it might be a none ASCII number... due to that bugger up

So it might be a value between.. 0x0... and.. 0xFFFFFF (4,294,967,295‬)

Which equates to 136 years of trial and error