reading dumps & calculators for pin and key codes

[JIMMYQ]

hi guys what software is used to extract the key number and pin code from a dump. Ive been programming keys etc using mvp and sbb but sometimes when these dont work or there is no key i no you have to read the eeprom etc from the ecu or immobiliser box
so i bought a upa-usb and x-prog-m as i can remove and refit chips no probs but whats confusing me is how to extract the key code or pin from the dump.?

I mean i cant see everyone out there spending ?1250.00 EUR on ICC immobiliser calculator?

ive been reading around on the forums but cant find the software to be used after the dumps have been read
also whats the procedure of disabling the immobilser from the dump if there is one

sorry if i sound thick but i am learning

[darrenhyland]

pm me and i will tell you all you need to know.....:cool:

[Meat-Head]

Yeah, i'll join the party, please

[darrenhyland]

Eh Meat-head, sarcasm so becomes you!!.........on a more serious note lets try get a tutorial section on pin code extraction as alot of guys out there are waffled when they try to figure this out.....after all the idea behind dk is to help each other and share info...isnt it??:hmmmm2:

[darrenhyland]

hi to all....i am currently composing a beginners guide to pin extraction and immo removal from dumps....i will post the info as soon as i have completed it...any input would be greatly appreciated!!!:wavey:

[JIMMYQ]

I got a zed bull clone from chine that reads dumps and extracts the pin codes on some dumps ive tried so thats one way of doing it

[Meat-Head]

Also want to be on this trip.

Thanks...

Here, found this, you order it, think we are going to need it

World's Largest Bus? (http://www.3v8.org/blog/worlds-largest-bus/)

[canorivera]

Here, found this, you order it, think we are going to need it

World's Largest Bus? (http://www.3v8.org/blog/worlds-largest-bus/)


LOL :congrats:

[PierreTheron]

hi to all....i am currently composing a beginners guide to pin extraction and immo removal from dumps....i will post the info as soon as i have completed it...any input would be greatly appreciated!!!:wavey:
Hi
I hope you did not bite more than you can chew .

Thats big word you said in your first post.

thanks for all your work on this.

Any help on this will be much appreciated.

Regards:congrats::congrats::congrats::congrats:

[JIMMYQ]

im sure there must be others on here who do this or have done why not all of us share what we know in this thread then we can make a tut out of it. Instead of having to rely on one person to do all the work

if everyones one posts their techniques i dont mind making a tut out of it and uploading it here

all i know is ive used my zed bull clone to extract pins off a few dumps people uploaded here and i gave them the pins which worked.
you can also use the galletto tool which does some makes and models from the obd connector and vag ecu tool for vags (ive not tried either as yet)

ive bought a toyota key programmer which takes the eeprom simply place it on the tool press r to read place the key on the other side press p to program the data from the eeprom onto the key place the eeprom back into the ecu and start the car ( well thats what it says again ive not used it as yet) but heard off a freind it works well so i bought one too...lol

[Meat-Head]

all i know is ive used my zed bull clone to extract pins off a few dumps people uploaded here and i gave them the pins which worked.

Tell us more, where from etc how much, can you update it etc etc?

[Meat-Head]

this is gonna be a big list!

Scrub what i said earlier. Worlds longes train instead

LookLex / Mauritania / World's longest train (http://lexicorient.com/mauritania/matrain.htm)

[JIMMYQ]

Scrub what i said earlier. Worlds longes train instead

:boring:

nah mate i think its going to be more like this to be honest :)

YouTube - Getting on board a train in China

[Meat-Head]

looks like "we have you money, your going to ~~~~ off"

good job being one of guards, when it comes to a pretty bird

[darrenhyland]

patience guys,............nearly ready............friday maybe!!!!

[ray-ray]

hex/s19/eef am i think correctly?

[turner]

patience guys,............nearly ready............friday maybe!!!!

Which Friday?











Seriously though, good luck with it, well done for offering to do it.

[Meat-Head]

There is enough members in this thread now.

Can we choose one of these to use for all the members intreasted in this thraead?

Aerospaceweb.org | Ask Us - Largest Plane in the World (http://www.aerospaceweb.org/question/design/q0188.shtml)

[Meat-Head]

As there seems to a lot of 'spam' posts in here, will add another one.

Sorry, meant to say add another post and link for other members to teach other members how to read codes
http://www.digital-kaos.co.uk/forums/f178/fiat-pin-code-needed-116629/#post809823

thanks

[Meat-Head]

Think we have:-

1) The members/intreast
2) The transport
3) Think we might be better off joining member Fallen in Aus - only place big enough
4) This will do for accommodation - it's a 1985 clone of the original 1965 version
so they said on Meat FM

YouTube - Caravan of love - Housemartins



5) Just hope that we are ok with this suggestion

YouTube - Pulp -- Common People

[ray-ray]

is he the only one that is willing to share?why is there such a hold back on these info. i see other in these forum that can do the same thing and give out key logic from dump. if there getting it from zen bull or ad900 to get the logic then lets play with dumps. we can crack it with all the bright minds in these forum.

[JIMMYQ]

is he the only one that is willing to share?why is there such a hold back on these info. i see other in these forum that can do the same thing and give out key logic from dump. if there getting it from zen bull or ad900 to get the logic then lets play with dumps. we can crack it with all the bright minds in these forum.

ive shared all i know which is about ~~~~ all :(

[Fallen]

Ok, enough of the "add me to the list" spam.

I just run my dumps through my TMpro and it spits out the key, to me it's a bit like witchcraft.

Believe me guys, if I knew how it works I would of written a guide on it!

Here is a starting point for us all.
I took this dump off a 4C 2000 Toyota land cruiser today and this is the key data that it spat out.

7E476569C000000000DF377E0000

This key data is stored somewhere in the 32 lines from this dump.
Impress us all and show us where it is somebody!

[PremierD]

Right people .. The original poster said .. PM me for information ... nothing about lists or signing up please keep it to the subject being discussed

[ahl]

..why is there such a hold back on these info.

Because it takes time, money and effort to work out the relationships.

The OP asked for input and received virtually nothing but 'gimme' and 'me too' messages in return. Hardly an inspiration for him to want to continue the project I would think. There are some very smart people on this forum but there also appears to be far more that are just after a free ride.

Ray-Ray, I know that you, Fallen and several others are working very hard toward finding the answers, so please don't think I'm having a go at you people.

Most of the answers can be found on this very forum in the lost keys and immo off request threads. Compare the dumps that are posted with virgin dumps and the key solutions that are posted in replies. Be careful though, as some of the solutions that are provided are wrong.

Ok, rant over and time to provide some constructive input.

There are 4 keys in Fallen's Landcruiser sample.
His extraction program has provided him with the values for key 1. Convert the key data his program provided to TIRIS and compare that to the dump. The individual keys will then stick out like dog nutz.

The early 8 bit toyota stuff is simple enough to work out. The 16 bit and crypto ones are a bit of a puzzle though.

[Fallen]

Thanks for the input ahl.
I'm pretty sure I can see the keys but I am unable to see the correlation between

E2 A6 03 00 00 00 00 and 7E476569C000000000DF377E0000

E2 in hexadecimal is 226

EAA60300000000 in hexadecimal is 63795876551720960

I take it there is a TIRIS conversion that I have to use?
As in E2 =7E47

[ahl]

I take it there is a TIRIS conversion that I have to use?

It depends on what you are using to read the chip or to extract the key data from the dump.

If there is no sign of the 'Tiris' the decoding application is presenting you with, it's usually because the key data is being output in hex. There's a few ways to do the conversion, but we'll see if anyone else is going to stump up with some input before progressing with that.

Cheers!

[Fallen]

Yeah, I'm just looking at the BIN file straight from my UPA.

I notice all the Toyota key logics start with 7E but thats all I can work out at the moment.

TIRIS stands for Texas Instruments Registration and Identification System. Spent the last hour googling " hex to tiris" and so on but no luck.

Have a look at this post here, it explains a similar toyota system.

http://www.digital-kaos.co.uk/forums/f178/edit-dump-immo-toyota-62151/

It seems the bus has broken down guys so how about a few of you guys sitting on it help me push it?

[ray-ray]

i will flash a toyota 16bit. virgin . then i will present the first key and read dump and save with the key value.then i'm going to add 2nd key read dump and save, same for the 3rd key. now we can see ever differance and location. i have done these before but i belive that key logic shift the address.

[nzlockie]

:) :) :) :) :)

:)

[Bishop c4]

ok friends as you know I?m a simple locksmith but I want to make a little contribution too (even if you dont notice me trying to push the bus) i find this little piece of info
I dont know exactly how much its gonna help but take me 1 hour to find it.
http://www.ti.com/rfid/docs/manuals/refmanuals/micro_8.pdf

P.D 73 means Read Only

best regards

[Fallen]

Cheers for the push Bishop!

I have found a few like that, what we are looking for is some sort of hex to TIRIS conversion program or conversion sheet.

We are on the right track mate.

[ray-ray]

i order the kit from ti ,looking to build a cloner that works off iphone apps.

[Bishop c4]

Hello Friends after a few hours of search I found this program IMMO TOOL TMW V.26.12.07
it seems to make the calc of the 93lc66, (and another little sttuff) check this out and report the results.


Regards

[Fallen]

Got the link there Bishop?

[ahl]

.... what we are looking for is some sort of hex to TIRIS conversion program or conversion sheet.

Or a clapped out old RW2 as well as a hex reader. :D

The bigger challenge is mapping out where and how the key data and security pins are being recorded in the various eeproms.

Cheers!

[Digital Auto's]

I'd like to get involved with this as its good to know how the system operates in the background. I think from the clues we've been given that its nothing too awkward on this model. Maybe there is no 'conversion algorythm' just a way of organising the data for transmission from chip-immo. I'll check througth the data manuals for some of these 4c texas transponders to see if there's any structure to it there and report back....

[gazzaull22]

Thanks for the input ahl.
I'm pretty sure I can see the keys but I am unable to see the correlation between

E2 A6 03 00 00 00 00 and 7E476569C000000000DF377E0000

E2 in hexadecimal is 226

EAA60300000000 in hexadecimal is 63795876551720960

I take it there is a TIRIS conversion that I have to use?
As in E2 =7E47





All 4c carbon transponders start with 7E

If You read a 4c transponder with a key cloning machine this is a example of what u get.

7E0426CF000000
00006A177E0000

If you notice
7E 0426CF 000000
0000 6A17 7E0000

In red will always be the same with any 4c carbon transponder.

In yellow is the key data which will be in the dump.

In green is some sort of check sum or calculation.

So the green part is what is need to be worked out, thats as far as i got.

[ahl]

Beauty! We're getting some more participants.

As gazzaull22 says, the immobiliser dump contains the TIRIS value of the key. That's why a transponder programmer that displays TIRIS makes life a whole lot easier. You can work the Hex to TIRIS conversion out manually but it's just not worth the effort when there are easier ways to do it.

The dump doesn't store the '7E' bytes from the key data as it's redundant information as far as it's concerned. The checksum is used in some types though.

So, first of all. Make sure you are using TIRIS values and then start studying dumps, or be like Ray-Ray and do some experiments. Watch for what changes when you program or clear a key. Things to look for are blocks of data that are grouped together. Data that is repeated three to four times. Data that changes each time.

Look for anomalies in dumps that are submitted to the forum and compare them with known good examples. There are dumps that are very similar to Fallen's sample, but from different models produced in different countries. There are subtle differences in those immos that have fooled the script kiddies several times over.

That'll do from me for the time being... NEXT!

[Digital Auto's]

So the yellow part of the data above is connected by a direct algorythm (tiris) to what you actually see in the dump. the green bit isn't a key for the algorythm by any chance.

If thats the case, can anyone explain the algorythm????

I'm not trying to take away anyone's crown jewels here, but it would be nice just to see it work that once. Its got me interested now and I'd like to crack it out of curiosity. If no one is going to cough up, we need to get as many toyota key examples as possible. I'll trawl the net tomorrow and try get them presented on a excel for comparison. This can't be to hard....

[ray-ray]

here is 16bit. dump key 1 and key 2 and 3

key1=7e2f40fc6000000000fcc57e0000

key2=7ed07ca0200000000009737e0000

key3=7ece45856000000000bff67e0000

[ahl]

Ray,

Is key3's data correct or is there a typo?
should it be 7ece45856000000000bff67e0000 ??

[ray-ray]

correction on key 3 (thanks ahl)

[ahl]

correction on key 3 (thanks ahl)

It took ages to figure out what was wierd about it. :hmmmm2:

[ahl]

Ray-Ray's keys identified in the dump.

36663

[Bishop c4]

hello again I found this a litle piece of info that show how to make a lector RFID with a phone (if some one want to make) and more
http://meag.tele.pw.edu.pl/pubs/pdf/RFID-ToolBox-Thesis.pdf
and this magazzine (if you dont want to make a lector RFID with a phone) but with a little material no expensive and with another info to
http://down.jdgcs.org/file/download/AD1D65EC3D8942B4E2670ACE51F6570F/

Best Regards all of you

[ray-ray]

prius dump zen bull could not make a working key from dump.the dump looks good so the program is not working
(not a clone machine.) can some post the key value?

[nzlockie]

looks pretty straight forward to me, The key shown in the bottom half of the picture is a working existing key right?

Master Key #1: 7EF62135 A0000000 005D387E 0000
Master Key #2: 7E4F55B3 A0000000 00A30A7E 0000
Valet Key #1: 7E26350D A0000000 00BFAE7E 0000

All these values are written as Hex which is what you would use to write the keys to start this vehicle.

[juan andres]

Hi, I need help with a tidal fiat weekend, I need to program the remote central locking and alarm, and I have the 4 digit code, I have the procedure to program but not the code, anyone know how to extract it?

[ray-ray]

i got it thanks for your guide nzlockie.

[Bishop c4]

Ok, enough of the "add me to the list" spam.

I just run my dumps through my TMpro and it spits out the key, to me it's a bit like witchcraft.

Believe me guys, if I knew how it works I would of written a guide on it!

Here is a starting point for us all.
I took this dump off a 4C 2000 Toyota land cruiser today and this is the key data that it spat out.

7E476569C000000000DF377E0000

This key data is stored somewhere in the 32 lines from this dump.
Impress us all and show us where it is somebody!

this is the location of the keys
Key 1: 7E E2 A6 96 03 00 00 00 00
Key 2: 7E E2 A6 96 03 00 00 00 00
Key 3: 7E 5E A7 96 03 00 00 00 00

key 1 master
key 2 master
key 3 valet

about the tiris values no info yet
Regards

[cammy25]

Hi guys ,

here is a source file for a transponder machine for 4C. Its in PASCAL.

[ahl]

If one is going to post information gleaned from this forum on another locksmith forum, it would be considered good form to not claim the work as one's own.

At least have the decency to credit where the work came from and that you are not the original author. Then you may not look like such a dik when you post incorrect details for the transponder, also pilfered from here, and again claimed as your own work.

It kind of shoots your credibility to sh!t.....

[Digital Auto's]

How about a link/clue....

[Geps]

Hi,

I'm also interested in this and have enough of an electronics background to make sense of all this so far.

Cammy, when your file was unzipped I appeared to get a file that I couldn't open?

[ahl]

How about a link/clue....

37596

Identifying information removed to protect the innocent and the not so innocent.

[gazzaull22]

i am please the info i supplied is some help but if your going to copy it at leased change it a little lol

[cammy25]

If one is going to post information gleaned from this forum on another locksmith forum, it would be considered good form to not claim the work as one's own.

At least have the decency to credit where the work came from and that you are not the original author. Then you may not look like such a dik when you post incorrect details for the transponder, also pilfered from here, and again claimed as your own work.

It kind of shoots your credibility to sh!t.....

Is ithis towards me??:hmmmm2::hmmmm2:
if it is ....WHAT THE ~~~~ ARE YOU TALKING ABOUT???


here is right one Geps

[ahl]

Is this towards me??:hmmmm2::hmmmm2:


No it wasn't Cammy. It turns out that the person concerned is technically savvy, but not the best of writers. It was a copy and paste v's cross reference then write issue.

Cheers!

BTW, what makes you think that it was you?....:hmmmm:

[cammy25]

then sorry for the offence.

because you said that after i posted a sourcefile.:bandit:

[Bishop c4]

well im think its a reality that many people come here to stolen info, i saw many info from here in many web sites, but that situation are fully discused in other treads and seems not have end aparently; so thank you all for continue with the good work despite that situation.
becausse my bad english I can not fully deep in this topic, but not let such thing desapointed you from give

Best Regards

[ahl]

then sorry for the offence.

None taken Cammy. :beer:

We might have to get Admin to insist that info pinched from here includes a "love DK long time" tag....:champions:

[JIMMYQ]

hi ive read the chip out of a toyota hilux 2001 d4d it was a blue immobiliser box chip 93c66 i have attatched the bin file and also programmed two electronic head 4c chips which programmed sucessfully through zedbull i used these 8 bytes

0A E3 D9 32 key1

F9 CD 0C 70 Key2


but car still not starting :hmmmm2:

[nzlockie]

Yo Jimmy, you are close mate. Try:

E3 0A D9 32 = Key 1

Your solution is correct if it is a 16bit box, but since it didn't work, I'm assuming it is 8bit.

You ARE adding the extra data onto the key right?

Your 1st key IN HEX should be:

16bit: 7E50C79B 4C000000 0033707E 0000
8bit: 7EC7504C 9B000000 008D587E 0000

[JIMMYQ]

thanks mate :) so i presume its the right chip as someone told me i should be using a 4d60 :hmmmm2: therefore the car is not starting ill reprogram the electronic head chip with the data and the bytes this way

E3 0A D9 32 = Key 1

yes its 8 bit ill give this a try and let you know within the next hour hopefully fingers crossed it should start

thanks

[JIMMYQ]

ive wrote the bites E3 0A D9 32 to the 4c electronic head via zed bull

then i automatically got this

7ec7509b4c00000000b19b7e0000

tiris format

7e e3 0a d9 32 00 00 00 00 8d d9 7e 00 00

?

ill also try another transponder manually with the hex you wrote

8bit: 7EC7504C 9B000000 008D587E 0000

[nzlockie]

hmm that's weird. As far as I know there can only be one CRC answer that is correct...
try both and see which one works. I'll be interested to hear.

Yes I think it should be 4C. 4D comes in about 2003 on Hilux. (over here anyway...)

[JIMMYQ]

this car is really annoying me now tried both ways still no joy the engine light goes off for 1 second then it wants to start otherwise the sound is starter just spinning wont start as this engine light wont go off anything else i can try coil seems to be ok too

[ahl]

Jimmy,

What did you use to read the eeprom and did you run an extraction script on it before saving it?

The extra byte of data after the usual four Tiris identity bytes is unusual. Your file looks very similar to the 2003 Sequoia dumps that have been posted elsewhere on this forum and there is a fair bit of confusion in those threads as to whether they are 4C or 4D keys as well.

Can't offer much more as the local versions of Hilux of that era are a different setup.

[JIMMYQ]

i used upa-usb read the chip and thats it? i just called a friend round who has a similar car but a year newer i read his key its showing up as a 4d-67 ? valet key

Now i may sound stupid here but when i wrote to a 4d-60 chip yesterday after it wrote to it i re-read it in zedbull and it was showing me 4d-67 master key
i wrote this information to the 4d-60 (thanks to automatedmad)

Password: 52 - Locked
Identifier: 95 - Locked
Serial number: 63D6C904 - Locked
Secret key: Locked


and in the transponder book it shows hilux-1999-2004
tp07 and tpx1

[ahl]

i used upa-usb read the chip and thats it?

I was taking a punt that the bytes had been flipped as I'd noticed that some scripts do that when extracting the key ID from the dump. I was chasing rainbows with that idea though. :shot:

Is the car a goer with Automated's help or still a no go?

[JIMMYQ]

still no go just about had enough with it now

[gazzaull22]

What is the security light doing?

Can you not reflash the immo box with virgin file?

Did you desolder the chip or read in-circuit

[JIMMYQ]

i desoldered it and placed it back in can i wipe it out with virgin file? if so does someone have a virgin file? as ive still got the car here

[workas]

i used upa-usb read the chip and thats it? i just called a friend round who has a similar car but a year newer i read his key its showing up as a 4d-67 ? valet key

Now i may sound stupid here but when i wrote to a 4d-60 chip yesterday after it wrote to it i re-read it in zedbull and it was showing me 4d-67 master key
i wrote this information to the 4d-60 (thanks to automatedmad)

Password: 52 - Locked
Identifier: 95 - Locked
Serial number: 63D6C904 - Locked
Secret key: Locked


and in the transponder book it shows hilux-1999-2004
tp07 and tpx1
Hi JIMMYQ,you made with id 60 just Id 76 writing
Password: 52 - Locked
Identifier: 95 - Locked By this you Made ID67 and no more...
To write real ID 67 youy must know Secret key!and for test you dont need write lock bits in secret key area . i am wrong?


Password: 52 - Locked
Identifier: 95 - Locked with this you can write everything you wish ,just dont write Lock function!!!! you can try write a lot of times and by this test ID

[JIMMYQ]

here is the 16 bit file for the dump i read as i read it in both 8 and 16

[JIMMYQ]

just got another immobiliser box from a hiace same sort of year but its yellow and fits in i also have the keys with this box still not starting do i need to change the ecu or info in the ecu for the a new key and immobiliser box ?

[nzlockie]

Can you post a pic of the original box from the hilux?
Maybe we'd better go for the theory that it is a 4D, although the original file sure looks like a classic 4C to me!
When you insert the key, did the light go out?

What Workas said is right. By locking the first two pages of your ID 60 chip, you have created an ID67 chip.

By locking the last page of the same chip you have burned the chip! It is now useless.

In future, don't lock the last page or the chip is useless for anything.

[nzlockie]

ok, the more I look at this, the more I think this is a 4D 67.

I will do some digging and see if I can work it out.

[JIMMYQ]

Can you post a pic of the original box from the hilux?
Maybe we'd better go for the theory that it is a 4D, although the original file sure looks like a classic 4C to me!
When you insert the key, did the light go out?

What Workas said is right. By locking the first two pages of your ID 60 chip, you have created an ID67 chip.

By locking the last page of the same chip you have burned the chip! It is now useless.

In future, don't lock the last page or the chip is useless for anything.

And theres me thinking im cracking up as i was telling someone that the damn 4d-60 chip reads as a 4d-67 when programmed that way.

Impossible i was told!

so come on guys lets get to the bottom of this is it a

4c/4d-60 or a 4d-67

Im not giving up so easy with the help of you guys im sure we can crack this together :)

ive also got another immobiliser box as mentioned above which is from a hiace but plugs straight in alongside they matching key for the box which read as a 4c

[gazzaull22]

if your immo box is black with a blue and white sticker it is a 4c transponder. 4d on a hilux cam in the year 2003 if the hilux is a uk spec

[jbes]

its a 4D67 file

[JIMMYQ]

if your immo box is black with a blue and white sticker it is a 4c transponder. 4d on a hilux cam in the year 2003 if the hilux is a uk spec

its black with blue and white sticker will add photos in the morning

[nzlockie]

As Jbes says it is a 4D 67 file. There are two master keys and 1 valet key in there.

The problem you are going to have, I reckon, is that the page 4 data is not contained in this dump.
Unless someone wants to say otherwise.

I realise it is probably too late, but you do not want to try to start this vehicle with the 4C box from the Hiace.

Jimmy, if it were me, I would reflash this using the AD100. Do you have access to one with the toyota software?

Otherwise I'd look at purchasing it. We paid for ours in the first job on this vehicle. None of the dealers wanted to touch it.

[JIMMYQ]

http://i977.photobucket.com/albums/ae254/ukmegadeals/Untitled-1.jpg

Hi the hilux is the one i have the other one is from the hiace just incase someone wanted to look at that if i use immo kill/otocheck on the hiace one will that work in the hilux as it does plug straight in?

[nzlockie]

I would NOT try the Hiace.

You could try these guys: http://www.motor-ecu.eu/decoding/toyotalexus/decoding

Your immo is listed there. At the very least if you asked them what they needed you'd find out if it was all contained in the Immo box or if you needed the ecu as well.

[JIMMYQ]

does anyone have a virgin file for this im going to strip it one last time and try otocheck but i only get option for the hiace?

[ngakson2002]

Dear Jymmyq
From your two immo dumps read in both 8 and 16 byte mode post in this forum,there is no dought and i hereby confirm 200% that your dump is for 4D - 67 transponder chip.
Fitting the immobox of the Hiace will not solve the problem because immo dump in the 93lc66 of the memory device belongs to a 4C transponder chip.

Furthermore, it was wise from you reading the dump in both 8 and 16 bit mode.However, i confirm reading in 16 bit which is exactly the structure your dump should have.
This explain, do not worry, as i ask you yesterday, just send me data from a 4D - 67 transponder chip and in less than 1 hour you will have your car back on the road.
You can even sent it directly to my email Regards

[JIMMYQ]

anyone have a virgin file for this thing ? my last resort after ngackson2002 attempt just waiting for him to get back to me maybe it will start:hmmmm2: but if not will try virgin file or can i kill the immobiliser with otocheck etc?

[Meat-Head]

*CONFUSED*

aS YOU HAVe both keys to the box from 'the scrapyard' yet vechile won't start because

1) immo and ecu are not paired)
2) ecu locked out - to many 'theift' attempts

*TRY*

3) a) copy the data out of the HIACE and load that data into orihgnal box (don't think will start)
3)b) use key pr0grammer to 're-learn' the keys and *HOPE* it says to the ecu 'let's all be friends'
4) EEPROM OR ECU OUT OF 'THE SCRAPYARD' -dam caps lock

[nzlockie]

Jimmy:
1: Forget the Hiace. That box will definately NOT start the Hilux, and may in fact damage it.

2: I don't think there is any Immo killer for this Hilux box.

3: If you COULD find a virgin file, the IMMO would still need to be matched to the main ECU and you need a tester to do that. If you have a tester with the corrcet software, then you may as well just use it to add keys in rather than reflash the box.

I reckon that Ngakson's method should work - the only thing I'm not sure about is how he plans to get the Page 4 data? Maybe he could enlighten all of us?

[JIMMYQ]

i dont have the ingo for pg4 off him as yet and i cant write to the transponder without this either? as soon as i get it i will update the post here

thanks guys

[JIMMYQ]

ok heres another one from another hilux what keys this then please?

[nzlockie]

well it's clearly another 4D67, how did you go with the last one? Did Ngakson's dump work?

I've got one of these coming in next week. Where did you find the immo box, and what chip was it that you read? Did you do it in circuit?

Maybe I'll play around with my one and see what we can see.

[JIMMYQ]

no mate heres what happened as you can imagine i soldered and unsoldered the 93lc566 chip off the original immobilser so many times that i thought it's probably knackered by now...lol

anyhow a friend of mine had one with an ecu so i took that off him to experiment with just incase this one was knackered as it looked worn now but the good thing is im now a master in soldering and desoldering...lol

as for Ngakson's dump its not worked as yet maybe due to the ~~~~ed immobiliser box but im waiting for him to sort this new dump out off the new immo and ecu.
its the same part number and off the another hilux just no key again but a healthy box and ecu

tried a virgin file too left im getting so many different opinions on what transponder type it is. even when i open the dumps in zedbull it shows it as 4c :hmmmm2:

i programmed a 4c transponder via zedbull with this dump as thats what it said but still nothing!
ps ive still got the car a few more days so maybe i might get lucky

[JIMMYQ]

the immobiliser box is in the centre console just below the ash tray and the ecu is behind the glove compartment mate the chip you need to read is in the immobiliser box ic2 93c5l66 8 pin you cant miss it

i used a hot air to remove it then a soldering iron and desolder pump/vac to remove all the excess solder and the chip goes in again and again :)

[ahl]

...tried a virgin file too
Jimmy,

What did you use for a virgin dump? I've been frigging around with a few ideas for clearing the file back to new but I'm stuck with what one part of it should be.

Cheers!

[JIMMYQ]

ive got a virgin dump pm me your email ill send you it
as for all the help i got from you guys its much appreciated for your efforts an help i finally got it done using a 4d key and a different dump with all the page info on it too :)

thanks guys :)

[ahl]

Just a screen shot of the dump would be great if you can please Jimmy.

[BimmerGT1]

patience guys,............nearly ready............friday maybe!!!!



Hi to all, we know some of you guys have a lot of experience on this field , some like me have some or nothing but we try to learn, in my case I like to bring some of what I know, I have used some tools like scanners, lexia , star c3, vaspc, zed bull clone 508 with IEA software it does reads some files 57 brands, dont know how or when to use hitag, so I can help some members who dont have this tool if they send a file I will try to decode and if someone knows how to use it and wants to tell me how to do it will be ok, if you allready have the manual post it.



We are here to help each other

[allobd]

why not just using immo tool, immo killer, otocheck softwares to clear the dump or extracting the pin code ?? also there is ICC immo calculator but needs to be cracked to work without the dongol, am sure those are old info. for most of ya ,so i wonder why no one mentioned any of those softwares ,any way i have them cracked already, if any one needs any of them ,just PM me.. keep the hard working people plz ...:idea:

[JIMMYQ]

why not just using immo tool, immo killer, otocheck softwares to clear the dump or extracting the pin code ?? also there is ICC immo calculator but needs to be cracked to work without the dongol, am sure those are old info. for most of ya ,so i wonder why no one mentioned any of those softwares ,any way i have them cracked already, if any one needs any of them ,just PM me.. keep the hard working people plz ...:idea:

erm thats the easy bit we want to learn the ins and out so we know what information is inside the dump and how to add and extract key information manually

as for the toyota dumps ive learnt the 4c has 4 sets of 2 numbers and 4d has 4 sets :)

[JIMMYQ]

oh by the way guys just thought id share as theres alot of toyota stuff going on in this thread too

other day i got a toyota previa d4d 2003 which had no transponder key so it was'nt starting anyhow first i took the immobiliser box out too read the dump tried adding a key to the dump with the help of ngakson (thanks mate)

but for some reason it dint work

anyhow i thought id use the orange dongle which ive had sat doing nothing for a month or so i put original dump back on to the chip plugged it back in and got the orange dongle out and guess what! the dongle took less than 2 minutes to add a key and the car fired up broom broom!!

so some chinese shite (as most say) is really worth buying especially for $30usd!!

[Bishop c4]

ive got a virgin dump pm me your email ill send you it
as for all the help i got from you guys its much appreciated for your efforts an help i finally got it done using a 4d key and a different dump with all the page info on it too :)

thanks guys :)

wich of this two stories the first one in quotes
or this new one in your recent post was the solution for your problem? causse seem's to you have two solutions for one problem. or no solutions and just problems? or I miss something?
by the way your advice is use the your so called: some chinese shite (as most say)

Regards

[JIMMYQ]

wich of this two stories the first one in quotes
or this new one in your recent post was the solution for your problem? causse seem's to you have two solutions for one problem. or no solutions and just problems? or I miss something?
by the way your advice is use the your so called: some chinese shite (as most say)

Regards

two different cars two different stories and two different problems :)

[Bishop c4]

thank you for your reply
litle confuse about.

Regards

[phill sand]

hi to all....i am currently composing a beginners guide to pin extraction and immo removal from dumps....i will post the info as soon as i have completed it...any input would be greatly appreciated!!!:wavey:


Hi,
darrenhyland did you finish your guide for newbie? because I'm really interested on your guide. I really need to knew more, and I'm ready to work hard to learn this kind of information.
BTW
any help from anyone will be really apreciated......:D

[darrenhyland]

to be honest i started with gusto but the i got pi**ed off with all the 'i want' posts and pm's looking for the holy grail and i realised why i got it hard to find the bible of 'HOW TO' when i started off....it's because the people who know didnt get where they are in a weekend, it takes hours every day trawling through the net for info, using sites like DK to ask those more knowledgable for help and applying that knowledge in their field of practice..they wont give that info up freely to anyone..so all you need is a good eeprom reader eg. upa, use the download section on this site and a bit of mental application ability. oh and yes a bit of common courtesy when asking for help..i have asked many times here and i never have been refused..EVER.
I hope all this is a help to those that need it.

[Digital Auto's]

to be honest i started with gusto but the i got pi**ed off with all the 'i want' posts and pm's looking for the holy grail and i realised why i got it hard to find the bible of 'HOW TO' when i started off....it's because the people who know didnt get where they are in a weekend, it takes hours every day trawling through the net for info, using sites like DK to ask those more knowledgable for help and applying that knowledge in their field of practice..they wont give that info up freely to anyone..so all you need is a good eeprom reader eg. upa, use the download section on this site and a bit of mental application ability. oh and yes a bit of common courtesy when asking for help..i have asked many times here and i never have been refused..EVER.
I hope all this is a help to those that need it.


Any chance in releasing thie above guide in 'hardback' form or better still on DISC! Thanks

:D

[darrenhyland]

sorry. soft cover version available only...and only one copy printed so if you want to read it you have to look between my earslol

[darrenhyland]

Bye the way, just to let all you out there so desperate for knowledge and info know you are already reading the BIBLE OF KNOWLEDGE.....it's the DK website!!!! There isn't a more comprehensive source of information and knowledgable people anywhere else..its got all the bases covered and with round the clock access to people who are willing to help what more could a person ask for!!! ROLL ON DK!!!:cheer:

[elosomaloso]

Send pm you

[ecufix]

thats the spirit

[bazbaz]

ha ha it's just took me half hour to read through this thread to find the answer , and the answer was what i thought all along !

[Meat-Head]

ha ha it's just took me half hour to read through this thread to find the answer , and the answer was what i thought all along !

What was the question?

How many red ballons did Nina have? In German

Nena-99 Luftballons new version (2009) with lyrics - YouTube (http://www.youtube.com/watch?gl=GB&v=TZwhzf8NC4o)

[PierreTheron]

What was the question?

How many red ballons did Nina have? In German

Nena-99 Luftballons new version (2009) with lyrics - YouTube (http://www.youtube.com/watch?gl=GB&v=TZwhzf8NC4o)
Seems this guide is between the ears .

If dedicated to dk you might find what you are seeking for .

It depends on how many grey matter between west and east ears there are .

Mostly the solutions are posted here . (But not given)

[kamel bouslama5]

can any one send immo box virgin file from boxer hdi 2004
ref bosh 246. THANKS

[kamel bouslama5]

CAN ANY ONE HAVE AN IMMOBOX VIRGIN FILE FROM A CAR BOXER 2004 HDI PLEASE

[Meat-Head]

CAN ANY ONE HAVE AN IMMOBOX VIRGIN FILE FROM A CAR BOXER 2004 HDI PLEASE

HELLO - YOU FIND THAT HERE ON DK - THE WORLDS BESTWEBSITE - SOMETIMES NO ***** HELPS YOU AT ALL.

IF YOU DO A SEARCH BY MEMBER OBDMASTER - HE POSTED A DUMP OFF A DUCATO OR SOMETHING - THAT DUMP WAS LEECHED AND USED BY ANOTHER MEMBER - IGOR OR SOME BODY - NOT IN THE MOOD TO LOOK.

MEAT

[ecufix]

can any one send immo box virgin file from boxer hdi 2004
ref bosh 246. THANKS
Start your own thread mate

[Meat-Head]

Start your own thread mate

or at least hijack the relevent type of thread

[Fallen]

I love it when old threads that have been dead for ages come back to life, it's like revisiting old friends!

[neriuks007]

meat-head spirit of the Forum.....

[toximatic]

pm me and i will tell you all you need to know.....:cool:


I am so keen to learn but I got no one to help .. I would appreciate your help much .. t:wink:hanks

[turner]

I love it when old threads that have been dead for ages come back to life, it's like revisiting old friends!

Maybe now is a good time for this one to wake up again.

Thanks for all the contributions guys, I am sure I will get my head around it soon!

[chinga]

hi to all....i am currently composing a beginners guide to pin extraction and immo removal from dumps....i will post the info as soon as i have completed it...any input would be greatly appreciated!!!:wavey:

Hi All,
Did anyone ever post a beginners tutorial on "guide to pin extraction and immo removal from dumps" please.

[tawclay43]

Hello,
I would be interested to get the emergency start code for my Punto mk2..
I have the eeprom dumps and soon to have a go following a Galleto thread..
Essentially ECU fried and got an ebay replacement.
Seems following a thread I can do an immo off solution and I would like to get the emerg. start code too.
Please help
Thx