EDC17 Immo remove, work in progress

[bubu55]

I have created a software that I'm finishing, for automatic removal immo in all EDC17

All solution and sequences inside sw is tested

I called it "IMMO destroyer", a little preview attached

[chli1976]

Is this soft also for VAG, PM me with more infos (price)

[svrecar]

Hahaha BUBU.....nice
How did you solve step sequence for finding location of immo in flash?

Br,

[svrecar]

and handling of different ecu versions ?

Br,

[macxlulu666]

very easy to immo off other group ,work bmw ,opel edc17 ,all PSA ,VAG etc ONLY BOSCH EDC17

for pcr2.1 is possible clone all tricore or unlock otp fuse

[bubu55]

Hahaha BUBU.....nice
How did you solve step sequence for finding location of immo in flash?

Br,

Yes

Sw include:
-Vag EDC17/MED17
-Psa EDC17/MEDV17
-Fiat EDC17
-Ford EDC17 IMMO OFF
-Hyundai EDC17 IMMO OFF

More protocols will be available soon
Provided with dongle and lifetime upgrade for free

[Youneselm]

How much cost it?


Younes

[mancinofranco]

I'm interested how much?
Thank you.

[mancinofranco]

I'm interested how much? sw immo destroyer edc17
Thank you.

[ALVARES]

hi, I saw that was also released software ecuvonix, EDC17 immo unlock

[ampibali]

In case anybody interested in helping, this is how it looks:


<PARAMETER-NAME>OTP_Key</PARAMETER-NAME>
<PARAMETER-VALUE>0x00800020;0x80014000;0x3f01;0x88B51171;0x00 800090;0x80010000;0x4001;0xDD921F64;</PARAMETER-VALUE>
</PARAMETER>
<PARAMETER>
<PARAMETER-NAME>OTP_OverView</PARAMETER-NAME>
<PARAMETER-VALUE>0x00800020;0x00800090;</PARAMETER-VALUE>
</PARAMETER>
</PARAMETERS>
</KWP2000-STYLE>
<CHECKSUMS>
<CHECKSUM>
<CHECKSUM-NAME>CB_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80004000</TARGET-START-ADR>
<TARGET-END-ADR>0x8000fcfc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B7976CA</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>CTPROT_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80010000</TARGET-START-ADR>
<TARGET-END-ADR>0x80013ff8</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B420407</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>ASW0_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80020000</TARGET-START-ADR>
<TARGET-END-ADR>0x8017fefc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B19FB7F</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>DS0_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x801A0000</TARGET-START-ADR>
<TARGET-END-ADR>0x801ffefc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B3B9585</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>VDS_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80180000</TARGET-START-ADR>
<TARGET-END-ADR>0x8019fefc</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2BC33C68</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>SB_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80018000</TARGET-START-ADR>
<TARGET-END-ADR>0x8001fef8</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B99B549</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>TPROT_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x80014000</TARGET-START-ADR>
<TARGET-END-ADR>0x80017ef8</TARGET-END-ADR>
<CHECKSUM-ALG>CRC32</CHECKSUM-ALG>
<CHECKSUM-RESULT>0x2B1F24AE</CHECKSUM-RESULT>
</CHECKSUM>
<CHECKSUM>
<CHECKSUM-NAME>MWB26_cs</CHECKSUM-NAME>
<TARGET-START-ADR>0x00</TARGET-START-ADR>
<TARGET-END-ADR>0x00</TARGET-END-ADR>
<CHECKSUM-ALG>ADD8</CHECKSUM-ALG>
<CHECKSUM-RESULT>0xE326</CHECKSUM-RESULT>
</CHECKSUM>
</CHECKSUMS>


So now we have adresses for chks and otp in flash.

CHECKSUM-NAME TARGET-START-ADR TARGET-END-ADRCHECKSUM-ALGCHECKSUM-RESULT
CB_cs 0x80004000 0x8000fcfc CRC320x2B3305A3
CTPROT_cs 0x80010000 0x80013ff8 CRC320x2B4868DC
ASW0_cs 0x80020000 0x8017fff8 CRC320x2B379F9B
DS0_cs 0x801A0000 0x801ffff8 CRC320x2B117000
VDS_cs 0x80180000 0x8019fef8 CRC320x2B604782
SB_cs 0x80018000 0x8001fef8 CRC320x2B8DA03D
TPROT_cs 0x80014000 0x80017ef8 CRC320x2BBE930B
MWB26 0x0 0x0 0xFF1C



For instance:

Sia_CWWFS_C (1x1)

/-

-
0
-0129.00


Sia=Supervisor Immobiliser Authority
CW=description in german (Constant Werte)which is constant value
WFS=description in german (Weg Fahr Sperre)which is immobiliser (drive away lock)
C=constant


In attachement is all the files needed.
Any experts are highly appreciated to jump in.

Hence there are some files inside archive which shouldn't be public , please PM me for PW.

Br,

Hello svrecar.

Can you send me password this file.
Thank you.

Tapatalk-kal k?ldve az ?n GT-I9295-el

[soxten]

I try'd to buy from Ecuvonix but on this product they write "not available"?

Product:EDC17 Unlock IMMo

[ALVARES]

I wrote them. Software will ship by the end of the week.

[bubu55]

Good luck with ecuvonix solution

[yavirom]

I'm interested how much? sw immo destroyer edc17
Thank you.