Toyota Camry (Australia) 2002 immobolizer bypass no keys

[XedyvaKa]

Hi DK experts.

Hope you can help me with this one, as I have been trying for weeks and have come up empty handed.

Context:
No original master/valet keys
Immobox:89780-33021
EEPROM in immobox:93LC66. The chip is in 8bit mode on the immobox board so I have done all read/write operation below in 8bit.
ECU:89661-06440

I have tried two approaches so far, both result in the security light continuing to blink. No recognition of key, or programming of key.

Approach 1:
- Remove immobox
- I flashed the EEPROM with CH341A and ASprogrammer with virgin dump (attached for reference). Read and write in 8 bit.
- Put immobox back in, and bridged ODB port 4/13 for 30 mins.
- I purchased a generic key with 4C transponder. The 4C transponder was programmed with a code: 2B 6B 08 08 00 00 00 00
- I follow these instructions to try and program the generic key: http://www.locksmithcharley.com/toyotapostflash.pdf
- Nothing happens when I insert the key.
- I take the immobox out and read again - no code has been added to the EEPROM, still appears as virgin dump.

Approach 2 (approach_2.bin):
- Remove immobox
- I flashed the EEPROM with CH341A and ASprogrammer and add in two keys (still read/write in 8bit):
key 1: 2B 6B 08 08 00 00 00 00 (same as above)
key 2: 6B 2B 08 08 00 00 00 00 (byte swapped, in case this is what the immbox wants)
- I put the immobox back in the car
- the security light continues to blink when I insert the 2B 6B 08 08 00 00 00 00 key

I don't know what I'm doing wrong. Is anyone able to point me in the right direction?

I have attached:
- the original dump found on the immobox
- the virgin file used
- my attempt at manually writing the key into the original dump (approach_2)

Let me know if there's any other information you can find that might be of use.

I would be very appreciative of any help at all!!

[myma7up]

i think your problem is bad read and write you have to try another programmer and try to read with 16 bit

[XedyvaKa]

Thanks myma7up!

So that I can learn, what makes you think this is a bad read?

The reason why I have read/write in 8 bit, is because the 93LC66 is soldered to the immobox board in 8 bit mode. This implies the immobox reads/writes in 8bit.
These threads seem to support this: https://www.digital-kaos.co.uk/forums/showthread.php/543378-How-to-know-8-or-16-bit-read-on-93C66-Eeprom
https://www.digital-kaos.co.uk/forums/showthread.php/476750-PLEASE-IMMO-OF-(-IMMO-BOX-89780-12060-)-EPROM-93LC66-TOYOTA-CORLLA-1997

Is there something I've missed? Is there another reason why I should be read/writing in 16bit?

[myma7up]

i have suggested to try another programmer
but if you can't get one try 16 bit by yours

[tkumonryu]

The 4C transponder was programmed with a code: 2B 6B 08 08 00 00 00 00 <--- this code we are looking is Hex or Tiris ?
https://www.digital-kaos.co.uk/forums/showthread.php/438911-4C-keylogic-converted-to-eeprom-logic

[ray-ray]

Here is what I know if immo is separate from the Ecu, then read should be in 8 bit mode. Your chip 4C should be written in 16bit mode. Now if immo is inside the Ecu then read in 16bit mode and write chip 4C in 8bit. Mode.

[XedyvaKa]

The 4C transponder was programmed with a code: 2B 6B 08 08 00 00 00 00 <--- this code we are looking is Hex or Tiris ?
https://www.digital-kaos.co.uk/forums/showthread.php/438911-4C-keylogic-converted-to-eeprom-logic

This is the code that the guy who cloned the key for me had on his key cloning device. I assume it is in HEX. Perhaps I will convert it to TIRIS and give that a try.

[XedyvaKa]

Here is what I know if immo is separate from the Ecu, then read should be in 8 bit mode. Your chip 4C should be written in 16bit mode. Now if immo is inside the Ecu then read in 16bit mode and write chip 4C in 8bit. Mode.

This is interesting! In my case, the immo is in the immobox separate to the ECU. Therefore, the 4C transponder chip in the key should be in 16bit mode.

I wasn't aware that you could code the transponder chips in the key in 8bit vs 16bit.

[m-o-y]

original Dump 3 keys.
06 2F CE E1 06 2F CC FF
06 06 10 98
so , you can clone anyone
or try virgin dump in swap case.

[XedyvaKa]

Here is what I know if immo is separate from the Ecu, then read should be in 8 bit mode. Your chip 4C should be written in 16bit mode. Now if immo is inside the Ecu then read in 16bit mode and write chip 4C in 8bit. Mode.

Thanks ray-ray. Do you know if most key programmers have a feature that allow you to choose to program a 4C transponder chip in either 8 or 16bit mode?

[XedyvaKa]

Just providing an update for you all:

I purchased almost an entire (purportedly matching) immob system from a wrecker. It consists of integrated relay, ECU, immobolizer box, ignition barrel and keys.

I've installed all of the above in the car, and I STILL have the red flashing security light with the key inserted.

Other than the wiring loom, I have replaced the entire immobolizer system now - and it still isn't working. I must be missing something fundamental and obvious.

I've checked every single fuse, and they are all okay.

Does anyone have any other ideas of what could be causing this issue, or suggestions of things to try next?