E77 Immo off ME9.6.1 for LY7 Commodore

Bosch Motronic etc ECUs and PCMs
User avatar
hsv08
Posts: 547
Joined: Thu May 09, 2013 6:50 pm
cars: (EX) VT SENATOR 355 STROKER
(EX) VT SS 304 MANUAL
NOW VX V6 HACK

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by hsv08 »

julespatch wrote:Hey yes it definitely works! Just disconnect the key reader if your in the car!
You only need to write the eeprom, just 00 it out like above.
So to confirm you have it all working by just zeroing out the Eprom data in above locations?
julespatch
Posts: 159
Joined: Fri Aug 25, 2017 5:28 pm
cars: liberty gen 5
Location: Adelaide

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by julespatch »

hsv08 wrote:
julespatch wrote:Hey yes it definitely works! Just disconnect the key reader if your in the car!
You only need to write the eeprom, just 00 it out like above.
So to confirm you have it all working by just zeroing out the Eprom data in above locations?
Yep, confirmed
User avatar
Gareth
Posts: 2505
Joined: Fri Mar 14, 2014 8:37 pm
Location: Bacchus Marsh, Vic

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by Gareth »

I also can confirm that it works, we have the ECU as a standalone now with no known issues (haven't hit the dyno yet)

The process was simple, BDM read EEPROM with KTAG, write Julespatch's IMMO off file from MHHauto, job done.

Having looked deep into this it appears that PCMflash can read the EEPROM via OBD, that will be the way I do this next time.
According to chemistry, alcohol is a solution...
User avatar
Lowlyfe1
Posts: 32
Joined: Thu Dec 12, 2019 7:43 am
cars: 2002 silverado 5.3, 88 300 zx

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by Lowlyfe1 »

I found another thread relating to immo off on med9.6.1 and it looks like all they did was fill in the whole block with FF. I'm assuming you just have to disable some kind of jump?
Attachments
Untitled.png
In-Tech
Posts: 779
Joined: Mon Mar 09, 2020 4:35 pm
Location: California

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by In-Tech »

Hiya,
Following along as best I can, in 8 bit land, it will just keep going forward until another instruction op code. In most code I follow, we will jump to the end of the end of a subset to keep the stack correct, "ret, rts or eret". Of course, in this instance it never gets "jumped" and doesn't affect the stack. Interesting, they use FF which is normally a 00 as well.
Last edited by In-Tech on Fri Jun 02, 2023 2:54 pm, edited 1 time in total.
User avatar
antus
Site Admin
Posts: 8237
Joined: Sat Feb 28, 2009 8:34 pm
cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Contact:

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by antus »

Are you thinking this is code? I think its parameter data, and one or more of those fields are the VATS flag. First person probably just cleared a chunk of it and hit the right flags with a sledge hammer, next person narrowed it down better, but maybe there is only 2 or 3 bits that need to be set or cleared. Strange that one person cleared the data, the other set the data. I have a feeling both are not right, and we know the clear one is verified.
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
In-Tech
Posts: 779
Joined: Mon Mar 09, 2020 4:35 pm
Location: California

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by In-Tech »

antus wrote:Are you thinking this is code? I think its parameter data, and one or more of those fields are the VATS flag. First person probably just cleared a chunk of it and hit the right flags with a sledge hammer, next person narrowed it down better, but maybe there is only 2 or 3 bits that need to be set or cleared. Strange that one person cleared the data, the other set the data. I have a feeling both are not right, and we know the clear one is verified.
Agreed, it could simply be data and not code. Again, I am just trying to follow along. Parameter data still gets set upon boot and in my mind is something the ecm "decides"
Fix the boot and no parameter area will be affected. Just thoughts :)
User avatar
antus
Site Admin
Posts: 8237
Joined: Sat Feb 28, 2009 8:34 pm
cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Contact:

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by antus »

I believe this data is in a small stand alone eeprom of to the side of the main flash and ram, its not a logical place for code, and is not written at boot. Yes there will have to be code somewhere else, but this is about setting the flags.
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
In-Tech
Posts: 779
Joined: Mon Mar 09, 2020 4:35 pm
Location: California

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by In-Tech »

Interesting thoughts. I know nothing about the e77. The e38,e67,e78,e92 has its' "slave modules" and interestingly enough, this is where the permanent codes are stored that cause an instant failure at smog time here in Calif if not fixed :wall:
User avatar
antus
Site Admin
Posts: 8237
Joined: Sat Feb 28, 2009 8:34 pm
cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B
Contact:

Re: E77 Immo off ME9.6.1 for LY7 Commodore

Post by antus »

This is a Bosch platform, and even though it was used by GM, it is a completely different heritage to the delco/delphi pcms and a different way of doing things.
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Post Reply