IC222 - 2761 - 8-8 for SW2: 2059028504 Unlock_EE_Data_Access

[tncbsr]

ECU Name
Name of the target, e.g. IC222

Source file
Name of the source file where the algorithm and definition can be reverse-engineered from, e.g. IC222_IC205_E016_Muster

I would like to make manual coding in Vediamo for IC222, when i send 27 61 to ECU it sends 67 61 XX XX XX XX XX XX XX XX but i can't generate 8 lenght key to ECU with UnlockECU. If i genereta 8 lenght key i'll send it to ECU with 27 62 YY YY YY YY YY YY YY YY than it can be unlocked.

SKCTool;
SW : 2539025904
Seed from ECU : 24 06 FF F8 F4 8E 87 81
Key to ECU : F6 AE 54 AE BD 7A 50 AD

UnlockECU;
SW : 2539025904
Seed from ECU : 24 06 FF F8 F4 8E 87 81
Key to ECU : 0A 28 91 EA

Do you know an algorithm to unlock IC222 like SKCTool in the attached program ?

UnlockECU generate same seed in 4 lenght, what's the difference between UnlockECU and SKCTool ?
Is one of them add SW into calculation ?

[MBRetrofit]

As you can see in SKC Tool, the Eeprom access is made with level 61.
With Unlockecu you tried with lecel 17.

[MRWGNRRR]

These blocks have a timeout for entering the key
You won't have enough time
But if you need it, I can calculate the key for you

[Novi4ek24]

@tncbsr
Hello. can you download the SKCTool program or post it somewhere to download, I also want to try to unlock the IC222 block

[tncbsr]

These blocks have a timeout for entering the key You won't have enough time But if you need it, I can calculate the key for you

Hello Richard, i think i can solve timeout problem with save the reply code in Vediamo. Than i can response in a second to ECU.

Can you calculate this one for me;

SW Block #2 : 2059028504
Seed from ECU : E7 C0 C0 BF C2 8E 8A 84
Key to ECU : ?

Thanks a lot.

[tncbsr]

@tncbsr Hello. can you download the SKCTool program or post it somewhere to download, I also want to try to unlock the IC222 block

Hello, here is the online calculator. It's asking coins for calculations. I don't have setup

https://portal.ecu.pro/?do=seedkey

[MBRetrofit]

These blocks have a timeout for entering the key You won't have enough time But if you need it, I can calculate the key for you

Hello Richard, i think i can solve timeout problem with save the reply code in Vediamo. Than i can response in a second to ECU.

Can you calculate this one for me;

SW Block #2 : 2059028504 Seed from ECU : E7 C0 C0 BF C2 8E 8A 84 Key to ECU : ?

Thanks a lot.

Explain how do you intend to solve the timeout and if is correct, I may send the calculated key

[tncbsr]

These blocks have a timeout for entering the key You won't have enough time But if you need it, I can calculate the key for you

Hello Richard, i think i can solve timeout problem with save the reply code in Vediamo. Than i can response in a second to ECU.
Can you calculate this one for me;

SW Block #2 : 2059028504 Seed from ECU : E7 C0 C0 BF C2 8E 8A 84 Key to ECU : ?
Thanks a lot.

Explain how do you intend to solve the timeout and if is correct, I may send the calculated key

I can add request messages to list in manual command input;

Fist you can send 27 61 and solve the response with calculator
Save the response, add to list with 27 62 XX XX XX XX XX XX XX XX

Now you're ready for just click 27 61 and saved 27 62 direct. Timeout should be passed

[MBRetrofit]

Do you know that every time when you request 27 61 the result is different?

[tncbsr]

Do you know that every time when you request 27 61 the result is different?

I tried 2 times and get same results as i saved them to a notepad.

Bad news for me, i need a real calculator than.

[Feezex]

its been done long time ago, @jglim have all information to publicate

sw 5904 has same key

[MBRetrofit]

Great contribution @Feezex !!
I tested with 2059028504 and works flawless!
Read SSID
23 14 02 00 01 9D 04
Write ssid
3D 14 02 00 01 9D 04 FE FF FF FF
Anyone can share the KM addreses for IC222?

[cliffordwijaya]

whats command 10 03 when manual command input and when do we input 10 03

[jakka351]

Do you know that every time when you request 27 61 the result is different?

OH FOR REAL REALLY? THATS NEXT LEVEL THINKING BY THE ECU MANUFACTURER DONT YOU THINK?