0% found this document useful (0 votes)
47 views

Retrieve Immobilzer Code

This document provides instructions for obtaining the immobilizer code from a Ducati 848/1089/1198 style Digitek dash. It explains that the dash has a CPU and memory chip that stores data like mileage, language settings, immobilizer code, and key codes. By using an EEprom clip connected to a USB programmer, one can read the data directly from the memory chip in binary code and view it in a hex editor. This allows retrieval of the immobilizer code and key codes, as well as modifying the displayed mileage. The document then provides step-by-step instructions for accessing the memory chip and interpreting the data, including an example where one user retrieved their immobilizer code.

Uploaded by

VINCENZO BARBATO
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
47 views

Retrieve Immobilzer Code

This document provides instructions for obtaining the immobilizer code from a Ducati 848/1089/1198 style Digitek dash. It explains that the dash has a CPU and memory chip that stores data like mileage, language settings, immobilizer code, and key codes. By using an EEprom clip connected to a USB programmer, one can read the data directly from the memory chip in binary code and view it in a hex editor. This allows retrieval of the immobilizer code and key codes, as well as modifying the displayed mileage. The document then provides step-by-step instructions for accessing the memory chip and interpreting the data, including an example where one user retrieved their immobilizer code.

Uploaded by

VINCENZO BARBATO
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 8

HELLO

This is a ‘How to’ describing how to obtain the Ducati 848/1089/1198 style Digitek dash immobilizer
code. The goal of this thread is to understand how the dash works and continue with reverse
engineering. Hopefully other guys can help to find the meaning of the unknown code.

WHY ?

Well, I bought my Bike with two working keys BUT the owner lost his code card  . I wanted to have
the code so in the future I can copy the keys or start the bike with the code when necessary.
Searching on the internet I found a lot of guys with the same problem, bought a used bike but the
previous owner just had 1 key or lost the code card.

FOR NERDS ONLY

In case you think I am some kind of whizkid with square eyes playing computer games in the middle
of the night.. Nope, I am a mechanical engineer who likes a beer and bikes. what I am trying to tell
you: .. any moron (this means you and me) with common sense can do this.

HOW THE !@#% DOES MY BIKE WORKS ?

Soo.. first of all some background information:

The dash has a CPU (processor) and program running but the variables (settings) are stored on a
memory chip (Eeprom). This Eeprom is the 24C16 and is able to store data like: Mileage, language
settings, Mile/Kilometer settings, Mileage, stored keys codes, Immobilzer code etc.

The trick is to read the data directly from the chip. Its stored in Binary code ( 0 and 1 ) which can be
opened in a hex editor. The good news, it is not encoded so the immobilizer can be read, (if you can
read)

At the moment I can and understand:

Retrieve Immobilizer code, read the key codes, read the mileage, modify mileage
 Needed tools and software;

- EEprom 8 pin memory clip (Ebay China)


- USB Eeprom reader (Ebay China)
- Torx screwdriver
- Hex editor (Freeware) I use ‘ Hex Editor Neo’
1. Take the dash from your bike.
2. Use the torx screwdriver top open the dash ( 9 screws around the edge). And Remove the
back cover.

3. Remove the flat cable to the display. Slide the black part in the direction of the arrows and
pull the flat cable out.
4. Unscrew the three hex screws on the PCB.

5. Lift the PCB carefully and disconnect the power cable to the PCB (just slide it off).

6. Mount the USB Eeprom programmer in the USB port. The pins are numbered, pin number 1
(red) is top right.

7. Install the drivers.


8. Connect the 8 pin Eeprom clip to the Eeprom programmer. Careful, the chip has 8 pins,
numbered from …1 till 8. The flatcable has one red cable, this is number 1.
9. Open the chipreader and select 24C16, click read the chip by click on the read button, a lot of
numbers should appear in the program. Resistance is useless.
10. IMPORTANT: Back-up, Save the original binary file first. Open the *.BIN file in a hex editor.
Here is an example: ALSO IMPORTANT: Congratulations, you did it! Beertime.

11. Open the saved Binary file in a hex-editor, now it gets really interesting.
In line three and four is the mileage stored, it’s always stored in kilometers. If the lines are
not equal the mileage is not valid and will be reset to 0. This dashboard reads “5F BC” this
value can be calculated manually as shown below. The value is in calculated value is shown in
100 meter so it needs to be divided by 10 for the actual displayed mileage.

Its not possible to calculate your own mileage because the number ‘ A9’ is a generated
checkcode. I don’t know the calculation so I cannot generate the check code.

The immobile code and key codes are saved 3 times. The codes is shown in Binary and
shown in the first line of the block. It reads 04 04 06 08 06, so the code is: 44686 , I tested
it and it works, Eureka! The second code 05 07 01 04 05 (57145) is also a immobilizer code !
Still a mystery why the dash has two immobilizer codes ??? both codes works!

The other two codes are most likely the key codes; each key is equipped with a coded chip .
When starting the bike it reads the key code and compares it with the codes stored in the
dash. When the codes are corresponding with the codes stored in the dash the dash releases
the immobilizer and the bike can be started.

You might also like