How to clone PSA MED17.4 Tprot8-12? (Tricore 1796)

[soxten]

I have a broken MED17.4 0261201602 / 9664416980 as I need to clone to a used.
Magicmotorsport can`t read this full only Xrom.

Ecu has Tricore 1796
Eeprom
Irom
Xrom

Xrom I can read by magic, but get checksum fault(?)
Irom is not PW/OTP protected (it say) but I need a pass file to read info and Magic cant do that.
Eeprom (I cant find a separate Eeprom so it must be inside MCU Tricore 1796)


I attached my reading of Xrom


Is the best way to do Immo of in Xrom? Can "EDC17 immo off" from ECUVionix do that?

356355
Please need help!

[soxten]

Any experiens here on DK?
Help

[ecumix]

Here you are immo off but checksum must calculate by programmer use ktag no problem with checksum .

Enjoy

[soxten]

Here is Xrom from used as I need immo off.

356828

[soxten]

ECUmix can you help me?

[CustomCars]

ECU can be cloned but:
- needed install new MCU in second ecu
- jump OPT sector, but then will work only immo off or second ecu must by adapted.

[soxten]

Hi CustomCars
New mcu in used ecu?
Problem is that We can only read Xrom, Irom is code protected....

So I think we get problem to change mcu(?)

Immo off, who or what tool can immo off?

Adapted used ecu? Who or what tool?

[acab]

can anybody help to read flash from med17.3.1?

[antlio]

Hi

You can t read the eeprom at TC1796 .Only flash and you can im*o off in flash .

regards

[soxten]

Antlio what program or who can do this?

[antlio]

Hi

I use byteshooter but also FGtech clone can do this .

regards

[soxten]

Reading is no problem but immo off.
What program can do immo off?

[H2Deetoo]

I can do immo off in eeprom for M(EDC)17.
There are some public tools to do immo off in flash also.

[soxten]

On this MED17.4 you cant read Eeprom, pass protection.
Only flash to read.

[Zmann]

This's part of eeprom data in your flash file :)

358881

[antlio]

There isn t part of eeprom in the flash . There isn t code .

[soxten]

Magicmotorsport did make a working immo off file to me.
Work perfekt.

[i_shot_the_sheriff]

Mate , care to share the immo off file that worked for this ecu?

I've tried several options in manual immo off but none worked. I'm programming it with KTAG original...

Thanks in advance

[acmotor]

Try this ...

Immo is in MPC


search for this sequence in whole or just part of it:


F00FF480208B022022


Change it to:


F00FF4802000008212


done,


immo is off!

It works all the time!

[i_shot_the_sheriff]

Hello mate

I already tried this solution and make checksum with KTAG while write but still ecu not unlock !

[elneomaster]

Hi;
I have the same problem, I need Immo Off for this ecu 0261201602 / 9664416980 MED 17.4 with TC1796. The original ecu was stolen.

This are the files read with ktag.

[esse]

Hi,
Here..........