VZ Immo Off

[Tazzi]

I have just tried messing around with the VZ V6 ecu with those bytes, and it still says immobilized, both with and without the PIM fitted.

Although, I do not have a VZ V6 here to actually plug it into and see if it fires up.

[delcowizzid]

Send me a modded 929 os and some way to flash it in with tactrix cable I'll test it ASAP

[Knackersjewels]

That can be done with fermec tool!

Fermec tool can't read full eeprom, only vin and IMMO, I use pcmflash

[keysersoze]

Currently working on the MED9.6.1 IMMO for stand-alone use. The EEPROM method doesn't seem to work. But this single IMMO function is a years work alone to sort out...

[Gareth]

Watching with great interest!!

[keysersoze]

A US based E69 ME9-6 Funktionsrahmen would be so useful for understanding the labels and their values. The SAAB ME9-6 function sheet has only a few useful hints.

So far two US OS's have completely different IMMO functions as it is. So there's that as well...

[delcowizzid]

I have a new cable on the way that "should" be able to read the whole ecu and clone an ecu so I'll be back into this when it arrives and I get an eeprom read

[antus]

@keysersoze How did you go about disassembling the bin? Just load a bin in to Ghidra and pick MPC555 and let it run? Anything special to set up?

[antus]

update: Looks like its easy to run ghidra on ubuntu 24 LTS. Just apt install python3 openjdk-21-jre openjdk-21-jdk then from an unzipped version of ghidra run it with ./ghidraRun
Once its open create a project, import the bin file from the PCM and use processor type powerpc big endian 64 VLE/Alitivac 64/32 bit. That may be overkill for the processor type (im pretty sure it doesnt use the PPC VLE function and perhaps not 64 bit) but it seems to be covering everything and appears to have found all the functions.... much more than the out of the box ida experience when getting started with what to me is a new architecture.

[Tazzi]

update: Looks like its easy to run ghidra on ubuntu 24 LTS. Just apt install python3 openjdk-21-jre openjdk-21-jdk then from an unzipped version of ghidra run it with ./ghidraRun
Once its open create a project, import the bin file from the PCM and use processor type powerpc big endian 64 VLE/Alitivac 64/32 bit. That may be overkill for the processor type (im pretty sure it doesnt use the PPC VLE function and perhaps not 64 bit) but it seems to be covering everything and appears to have found all the functions.... much more than the out of the box ida experience when getting started with what to me is a new architecture.

Ghidra is great!
Allows also implementing scripts to auto perform various tasks to speed up a process.