Scribd
Upload
461 views6 pages

Unican Immobilizer Emulator: Can H Can L

This document describes an immobilizer emulator that communicates via CANBUS to unlock vehicles. It supports various vehicle systems including Renault, PSA, VAG, Fiat, Nissan, Mercedes, and more. The emulator uses a 24C02 EEPROM chip to store synchronization bytes and CANBUS speed settings for different vehicle systems. Instructions are provided on programming the EEPROM with the correct data for a given vehicle.

Uploaded by

Ngako Serge
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
461 views6 pages

Unican Immobilizer Emulator: Can H Can L

This document describes an immobilizer emulator that communicates via CANBUS to unlock vehicles. It supports various vehicle systems including Renault, PSA, VAG, Fiat, Nissan, Mercedes, and more. The emulator uses a 24C02 EEPROM chip to store synchronization bytes and CANBUS speed settings for different vehicle systems. Instructions are provided on programming the EEPROM with the correct data for a given vehicle.

Uploaded by

Ngako Serge
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 6

UNICAN IMMOBILIZER EMULATOR

VERSION 1.04 - 24C02 EEPROM SYNCHRO / SPEED SETTINGS


Immobilizer emulator for systems communicating via CANBUS

CAN H
TERMINATOR
I2C RESISTOR
CAN
eeprom L
I2C
GND
eeprom
LED RED

I2C
IGN 12V
eeprom

I2C
24C02
eeprom JUMPER FOR
EEPROM PROGRAMMING BY
CANBUS ANALYZER

LED BEHAVIOR :
LED blink once -> NO QUERY FROM ECU OR WRONG CANBUS SPEED
SELECTED
LED is ON all the time -> THE EMULATOR SEES THE QUERY FROM
THE ECU, THE SPEED IS SELECTED WELL BUT THE SYNCHRO BYTES ARE
WRONG, THE ECU IS NOT UNLOCKED
LED blinking –> ECU IS UNLOCKED OK

THE SOFTWARE VERSION 1.04 INCLUDES THE FOLLOWING PROGRAMS , WHICH IS


SELECTED AUTOMATICALLY :

1. RENAULT – speed of CANBUS : 250/500


2. PSA – speed of CANBUS : 250/500
3. VAG WFS4 – speed of CANBUS : 500
4. FIAT – speed of CANBUS : 50/250/500
5. NISSAN NATS6/7 – speed of CANBUS : 500
6. MERCEDES FBS2 – speed of CANBUS : 125/500
7. MERCEDES CR2(EDC15 ONLY) – speed of CANBUS : 500
8. VAG3 WFS3 – speed of CANBUS : 500

TO CHOOSE THE CORRECT SPEED OF THE CANBUS, YOU NEED TO ENTER THE
APPROPRIATE VALUE INTO THE 24C02 EEPROM MEMORY MOUNTED ON THE
EMULATOR, SPEED SETTING ADDRESS IS 0X01:

• Value 0x50 speed is set to 500 kbps


• Value 0x25 speed is set to 250 kbps
• Value 0x12 speed is set to 125 kbps
• Value 0x05 speed is set to 50 kbps
SYNCHRONIZATION BYTES -> DEPENDING ON THE SYSTEM TO WHICH WE
WANT TO USE THE EMULATOR, ENTER FROM ECU DUMPS TO 24C02 ON
EMULATOR PCB, START WRITE FROM THE ADDRESS 0X10, E.G :

RENAULT – 8C 0F 94 33 E7 14, SPEED 500

PSA – 51434644 (QCFD – ASCII PIN CODE), SPEED 250

MERCEDES CR2/FAKE FBS3 (EDC15 ONLY) - CHOOSE A SPEED OF


500, AND DO NOT ENTER ANYTHING ELSE INTO THE EMULATOR,
IN THE ECU WE MODIFY ONE LINE IN THE EEPROM 95P08 AT THE
ADDRESS 0X1D0 : 02 03 00 FF FF XX XX XX

2
VAG WFS4 – CS 6 BYTES, MAC 4 BYTES, BRAND 1 BYTE
VW -01, AUDI – 03, SKODA – 06, SEAT – 05
SPEED 500

FOR CREATE CONTENT TO WFS4 EMULATOR YOU CAN USE


VAG IMMO CALCULATOR SOFTWARE

3
FIAT – A5 A5 A5 A5 A5 A5, SPEED 500

NISSAN NATS6/7 – A5 A5, SPEED 500

MERCEDES FBS2 – 1B 55 86 C8, SPEED 500

4
VAG WFS3 – CS 6 BYTES, SPEED 500

5
22.09.2020
Initial release v1.00

14.10.2020
Version release v1.01

Fixed:
- PSA critical bug fix (error in the algorithm)

15.10.2020
Version release v1.02

Fixed:
- FBS2 MB bug fix (some ECU gasoline in previous versions may not work)

03.11.2020
Version release v1.03

Added:
- VAG WFS3 algorithm (6 bytes CS CANBUS immo system)

27.11.2020
Version release v1.04

Fixed:
- In PSA improved immobilizer disarm signaling (LED) for newer ECUs
that use multiple query to the immo system

You might also like