Speedstop's Support
Downloads and Manuals
Price List
Contacts
UAB "Atomis" Ent. Code: 300091017,
Taikos str. 127C,
Kaunas 50472, Lithuania
Sales: sales@codecard.lt
GSM: +370 616 16161 Technical Support:support@codecard.lt
Technical Support for Speedstop & other emulators ONLY! GSM: +37069255738 +Viber support@codecard.lt
Office is open:
I-V, 9 a.m. - 6 p.m.
(GTM+02.00)
Carprog Manual
Language
Currency
Key data calculation for Megane I IR PLIP
| Forlix | 2013-01-07 12:12:57 | ||||||||||||
I have 2 PLIPs for my car, one is broken (it works fine but the EEPROM was somehow scrambled so I cannot resync it). I've built a programmer and read out the data from the working key. I can clone the key and the broken one works fine that way, but obviously I cannot resync both keys if they are perfect clones. I tried to figure out the algorithm on how to get from the key label code (S****, which seems to consist of digits 1 to 9 and letters of "RENAULT" to the actual data in memory (seems it is only 2 bytes large) but no success. No idea where CARPROG got this from?? But they would probably not disclose it either for profits sake.But I want to fix the second key myself... The data looks like this: 73FE496BB797FF00C63BDC2EEB000000 My current guess for the meaning is: RRRRRRRRUUUUIIRRRRRRRRRRRR?????? R = rolling codes (the key should calculate those itself) U = PLIP unique identifier (calculated from key label) I = PLIP id to differentiate between the two keys? (zero makes key act virgin) ? = candidate for PLIP id or simply always zero Now how can I extrapolate the second key's data for from this key's data?? |
|||||||||||||
Quote  |
|||||||||||||
 Reply |
| Tink | 2013-03-12 10:13:21 | |||
| Mate, my applause for the brilliant work you've done! I too have a similar problem (one good PLIP, one bad) but don't know how to clone my good PLIP. I'd be happe even just to clone them so I have a backup somehow. I have access to programmers (the chip inside is a motorola HC05, isn't it?) so if you can provide a little details how you read it with your programmer (in-circuit or by removing it from the board?) I can try it too. Also, how did you capture the transmitted data? |
||||
| Quote |
||||
| Forlix | 2013-03-13 03:18:28 | |||
| Hah you're the dude from renaultforums right? I read it in-circuit - all the required pins on the PCB are there (GND, VCC, RST, CLK, DATA). Just make sure you're reading the "personality EEPROM" as per datasheet, not the program memory or anything else it might have. And I never captured any transmitted data. The data I'm talking about above is the 128 bit of EEPROM content. Actually if you have the datasheet (MC68HC05K3) you should have everything you need. You can find out which pins on the PCB are which by using a multimeter. |
||||
| Quote |
||||
| Reply |