Whats a problem to calculate key from seed for this ecu?
It's very easy.
Here is calculation pseudo code:
mov eax, Seed
for (i = 1; i <= 5; i++)
{
rol eax, 1
jno L0
xor eax, 0x1CDA81F7
L0:
}
mov Key, eax
ret
Hi gremlin, I'm sorry I don't know assembly language yet, but I want to learn it. So I only have to change on address 81F7 rol eax 1 to 0 and save it to the bin file, then OBD reading would be locked. If I understand correctly?