Vxdiag nano

**aholmes28191** · 30th October, 2018, 08:36 PM

Hey just more so curious than any thing, I have one for VW but I have noticed that there are others for different brands, visually there isn't much difference in each and by there discription they all support the same protocols, and support j2534 pass thru. So is it just the firmware/software that locks them To a brand ? Also seeing that they do a 3 in 1 pro version makes me even more curious, as this version gives you three different brands and can purchase more. So can the brand specific versions be unlocked/ hacked to support these other brands?

As before it's more a curiosity Thing, is vxdiag charging the cost of each tool just for firmware/software or is there a difference in the tool, by the looks of it all the vcx nano tools support the same protocols.

**DWT** · 31st October, 2018, 04:06 PM

I think that the solution to this problem is in our hands. You need a dump of the firmware in the Vxdiag processor, it must contain the serial number and license. Making the necessary changes we will achieve the result. Can you take a dump - lay out here, I'll work on it.

**aholmes28191** · 31st October, 2018, 06:18 PM

hey DWT thanks, but at the risk of looking like an idiot im am unsure how to dump the firmware from the device. i did how ever come across a download for the GM firmware .bin file, the vcx device has wifi update software which is approx the same file size and .bin so this is purely a guess, can you advise of the process of dumping the firmware. the vcx file is the GM dump and the user 2 file is from the wifi update sofeware folders

**DWT** · 1st November, 2018, 06:48 PM

IMG_20181005_163534.jpgGood day. I looked through both of these files, but found nothing interesting in them for us. These are update files, they do not have a serial number and current licenses. It is necessary to consider a dump from the processor. With my device I tried to do it with the help of STlink or Jlink. Connect as in the picture. However, in view of the worthless experience, nothing good came of my idea. It is necessary to consider the board from Vxdiag VAG and with the help of the datasheet to determine the points of connection of the programmer to the processor.

**JareckiPL** · 6th December, 2018, 04:02 PM

What about write protection sectors?. Can you check it?.
Here you got connection 100% working. No need RST.

**JareckiPL** · 6th December, 2018, 04:17 PM

Hi. I got firmware for GM and ford. BTW i Need dump FTDI chip (ept).

**DWT** · 13th December, 2018, 05:09 PM

Originally Posted by JareckiPL

What about write protection sectors?. Can you check it?.
Here you got connection 100% working. No need RST.

After trying to read, I got a completely empty dump. Simply put, I killed it.

**DWT** · 13th December, 2018, 05:32 PM

This is dumps for Ford and GM Vxdiag. But your files is under unknown password...

**DWT** · 13th December, 2018, 05:35 PM

Ept FTDI Dumps:

**Str3atW** · 20th December, 2018, 05:26 AM

Did you end up finding where serial is stocked? I've just ordered a St-Link programmer to do some testing on my own VXdiag VCX Nano GDS2... Should be here in a week. If you want we can compare .bin file once i grabbed mine, see where the difference is

**DWT** · 20th December, 2018, 07:59 AM

Serial number is not found by me. Will read - read with caution so as not to destroy the firmware when reading. I am glad that our thoughts are going in the same direction, as if we change the serial number, we will get work with all the brands. Good luck.

**JareckiPL** · 23rd December, 2018, 10:49 PM

Here without pass:

try to get bootloader. You have to lower protection from level 2 to 1. All in pdf.

**DWT** · 24th December, 2018, 04:24 PM

Thank. I will read, I will try. I will write about the results.

**JareckiPL** · 24th December, 2018, 06:26 PM

Originally Posted by DWT

Thank. I will read, I will try. I will write about the results.

Ok, i waiting for the results.

**Str3atW** · 24th December, 2018, 10:11 PM

I found a way to get the license file from vcxdiag servers, but they are clearly encrypted. I downloaded the file for my serial, and one for a VCX Pro unit. Same size license file, both files start with this :

Code:

LSFUEsDBBQACQAIAAg5uEoAAAAAAAAAACAQAAALABEATGljZW5zZS5sc2ZVVA0AB

And ends with this :

Code:

WVBLBQYAAAAAAQABAEIAAAB7EAAAAAA=

Everything in between is different. I made a local nginx web server and redirected software's license URL to use my local ones that i downloaded. My original license file for my interface works without a problem. If i rename the Pro unit's license to my original license's filename, it doesn't work, gives me a license error. I'm far from a pro in debugging, and i tried to play with the software to see exatly what it was doing with the license file, but it's too advanced for me. If any of you have good experience in debug/reverse engineering, maybe we can find a way to do this with the software...