So to confirm you have it all working by just zeroing out the Eprom data in above locations?julespatch wrote:Hey yes it definitely works! Just disconnect the key reader if your in the car!
You only need to write the eeprom, just 00 it out like above.
E77 Immo off ME9.6.1 for LY7 Commodore
- hsv08
- Posts: 547
- Joined: Thu May 09, 2013 6:50 pm
- cars: (EX) VT SENATOR 355 STROKER
(EX) VT SS 304 MANUAL
NOW VX V6 HACK
Re: E77 Immo off ME9.6.1 for LY7 Commodore
-
- Posts: 159
- Joined: Fri Aug 25, 2017 5:28 pm
- cars: liberty gen 5
- Location: Adelaide
Re: E77 Immo off ME9.6.1 for LY7 Commodore
Yep, confirmedhsv08 wrote:So to confirm you have it all working by just zeroing out the Eprom data in above locations?julespatch wrote:Hey yes it definitely works! Just disconnect the key reader if your in the car!
You only need to write the eeprom, just 00 it out like above.
Re: E77 Immo off ME9.6.1 for LY7 Commodore
I also can confirm that it works, we have the ECU as a standalone now with no known issues (haven't hit the dyno yet)
The process was simple, BDM read EEPROM with KTAG, write Julespatch's IMMO off file from MHHauto, job done.
Having looked deep into this it appears that PCMflash can read the EEPROM via OBD, that will be the way I do this next time.
The process was simple, BDM read EEPROM with KTAG, write Julespatch's IMMO off file from MHHauto, job done.
Having looked deep into this it appears that PCMflash can read the EEPROM via OBD, that will be the way I do this next time.
According to chemistry, alcohol is a solution...
Re: E77 Immo off ME9.6.1 for LY7 Commodore
I found another thread relating to immo off on med9.6.1 and it looks like all they did was fill in the whole block with FF. I'm assuming you just have to disable some kind of jump?
Re: E77 Immo off ME9.6.1 for LY7 Commodore
Hiya,
Following along as best I can, in 8 bit land, it will just keep going forward until another instruction op code. In most code I follow, we will jump to the end of the end of a subset to keep the stack correct, "ret, rts or eret". Of course, in this instance it never gets "jumped" and doesn't affect the stack. Interesting, they use FF which is normally a 00 as well.
Following along as best I can, in 8 bit land, it will just keep going forward until another instruction op code. In most code I follow, we will jump to the end of the end of a subset to keep the stack correct, "ret, rts or eret". Of course, in this instance it never gets "jumped" and doesn't affect the stack. Interesting, they use FF which is normally a 00 as well.
Last edited by In-Tech on Fri Jun 02, 2023 2:54 pm, edited 1 time in total.
- antus
- Site Admin
- Posts: 8253
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: E77 Immo off ME9.6.1 for LY7 Commodore
Are you thinking this is code? I think its parameter data, and one or more of those fields are the VATS flag. First person probably just cleared a chunk of it and hit the right flags with a sledge hammer, next person narrowed it down better, but maybe there is only 2 or 3 bits that need to be set or cleared. Strange that one person cleared the data, the other set the data. I have a feeling both are not right, and we know the clear one is verified.
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Re: E77 Immo off ME9.6.1 for LY7 Commodore
Agreed, it could simply be data and not code. Again, I am just trying to follow along. Parameter data still gets set upon boot and in my mind is something the ecm "decides"antus wrote:Are you thinking this is code? I think its parameter data, and one or more of those fields are the VATS flag. First person probably just cleared a chunk of it and hit the right flags with a sledge hammer, next person narrowed it down better, but maybe there is only 2 or 3 bits that need to be set or cleared. Strange that one person cleared the data, the other set the data. I have a feeling both are not right, and we know the clear one is verified.
Fix the boot and no parameter area will be affected. Just thoughts
- antus
- Site Admin
- Posts: 8253
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: E77 Immo off ME9.6.1 for LY7 Commodore
I believe this data is in a small stand alone eeprom of to the side of the main flash and ram, its not a logical place for code, and is not written at boot. Yes there will have to be code somewhere else, but this is about setting the flags.
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396
Re: E77 Immo off ME9.6.1 for LY7 Commodore
Interesting thoughts. I know nothing about the e77. The e38,e67,e78,e92 has its' "slave modules" and interestingly enough, this is where the permanent codes are stored that cause an instant failure at smog time here in Calif if not fixed
- antus
- Site Admin
- Posts: 8253
- Joined: Sat Feb 28, 2009 8:34 pm
- cars: TX Gemini 2L Twincam
TX Gemini SR20 18psi
Datsun 1200 Ute
Subaru Blitzen '06 EZ30 4th gen, 3.0R Spec B - Contact:
Re: E77 Immo off ME9.6.1 for LY7 Commodore
This is a Bosch platform, and even though it was used by GM, it is a completely different heritage to the delco/delphi pcms and a different way of doing things.
Have you read the FAQ? For lots of information and links to significant threads see here: http://pcmhacking.net/forums/viewtopic.php?f=7&t=1396