Opel Vectra C pin code from CIM

**ruffles1986** · 23rd February, 2014, 10:30 PM

Originally Posted by flyins

No not software he uses friend, he uses his brain, ive posted a link to another post and he explained how its done, but trust me it took ages to learn, well it did for me, i got run through how to do it through a friend of mine that did it, but that was on astra h, so im just assuming the algo maybe the same on vec c

I not good with english... then "BECS" means something in english? i'm trying to stand algorithm

**paul_12345** · 23rd February, 2014, 10:40 PM

Originally Posted by ruffles1986

I not good with english... then "BECS" means something in english? i'm trying to stand algorithm

forget becs the astra algo from that thread is get the 4 bytes that are the encrypted pin code

eg.. ttvb which is 74747662 in hex use this number in windows calc then press xor and then 42454353 then this will be the pin code in hex format type this into your hex edit program on the left (anywhere) then look at the right for the pin

**ruffles1986** · 24th February, 2014, 12:37 AM

Originally Posted by paul_12345

forget becs the astra algo from that thread is get the 4 bytes that are the encrypted pin code

eg.. ttvb which is 74747662 in hex use this number in windows calc then press xor and then 42454353 then this will be the pin code in hex format type this into your hex edit program on the left (anywhere) then look at the right for the pin

Thanks now i stand the algorithm

**plasma533** · 27th February, 2014, 02:15 AM

Thanks for the extra info on this one, for some reason I'm not subscribed to this thread

I can see how this one is particular pain to have worked out the algo for it... If the Vectra-C ones are 'very' encrypted and this was only 'encrpyted' I do think that its going to be a nightmare to try to figure that one out.. Looks like I need to get a program calculating what are the suspect offsets against a large XOR range of numbers... thats if they are not applying anything else to this algo... I'd rather try to work out the algo rather than building a table I think...

**Ath3si** · 14th November, 2016, 07:50 PM

Sure, algorithm for UEC is correct. I've written a software to find XOR keys from 2 knowns references but when I take 2 CIM files result is blank so it's not a common XOR key.
pin_opel.JPG

**Bllinda** · 15th November, 2016, 08:47 AM

is what IC loads the data ....

**Mr BLACK** · 15th November, 2016, 12:01 PM

so from this ttvb is pin code and becs is the key at what location in eeprom is found the key

**Bllinda** · 15th November, 2016, 02:46 PM

I think that this knowing very easy to find ....

**Mr BLACK** · 16th November, 2016, 07:46 AM

Originally Posted by Bllinda

I think that this knowing very easy to find ....

if you have an example pls share 'it . Thanx

**gucio** · 27th November, 2017, 10:49 PM

Hi i'm new here. Did someone help me read PIN from this dump Vectra C CIM 93lc76?

Sorry. I don't know how paste dump file.

**Johnner** · 27th November, 2017, 11:08 PM

Have a read of that mate : http://www.digital-kaos.co.uk/forums...-Files-To-Kaos

**death9891** · 10th August, 2018, 10:05 AM

Hello, I am asking for help counting vectra c 93c76 pin

Attachment 548206

**death9891** · 16th August, 2018, 09:46 AM

op-com accepts pin 0000 and 5555
no one knows the algorithm?

Attachment 549505

**bank** · 11th September, 2018, 04:26 AM

Originally Posted by death9891

op-com accepts pin 0000 and 5555
no one knows the algorithm?

Attachment 549505

It's XOR in A6-A9, key for XOR is on the screen with pin "0000"

But, I think, somesing more determines XOR key for decrypting code

**bank** · 11th September, 2018, 04:27 PM

I think, I found algo.

Pin stores in a6-a9 and b0-b3, XORed by two different keys
XOR for a6-a9 is 3f 46 33 d5
XOR for b0-b3 is 46 3c d9 3f
After XOR pin will be a7, a6, a9, a8 and the same in b1, b0, b3, b2. It's works for 16bit dumps which starts with "7F 01", "7E 01"

The same algo and pin location for 16bit dumps which starts with "6A 0C", "6B 0C" but another keys for XOR:
XOR for a6-a9 is 51 87 44 3C
XOR for b0-b3 is 5A 3C 9F 35

The same algo and pin location for 16bit dumps which starts with "04 88", "05 88" but another keys for XOR:
XOR for a6-a9 is 8D FF 3A 3C
XOR for b0-b3 is 3C 8E F7 C3

I checked this algo on different dumps with khown pin and it works correctly