Reading Rover Sawdoc module with PIC18F252

[mihotd]

Hello everyone,
I was asked about making keys for freelander with sawdoc module. Then I make some search and the way I found is that people are reading PIC with programmer, and then from EE data are making keys. Well, there are locked pic's also and this become a problem. Solutions are at enormous prices.
Tools for unlocking pic, programmers, adapters, tools ... all this is BULLS**T !
So I decided to make an obd (or sort of) interface for reading this module. Now my question is:

Did anyone know this is possible?
Are there so many cars with this immo (and respectively people that will need it, so the project will be not just waste of time) ?

The goal is to make some interface for tens of euro, not prices of hundreds that I see on the net. It's madness to give so much money for making that crap immo ...

[PierreTheron]

Hi
Best solution is another lockset . But there are some member on here that can make key on these .

Just search sawdoc related threads

And also landrover freelander sawdoc was around year 2006 .

http://www.digital-kaos.co.uk/forums/search.php?searchid=677884

[912secured]

Ford ids with JLR should work.

[keygargoil]

Spare keys can be added by obd but if it is a lost key it will need a dealer prepared key or to read the pic processor and add the key by Tm pro

[mihotd]

Spare keys can be added by obd but if it is a lost key it will need a dealer prepared key or to read the pic processor and add the key by Tm pro

Thanks for this info.
Actually I mean making a complete solution - preparing key and adding it without other tools (except transponder writer of course). Now I'm working on finding the "dealer" data and will post results soon.

Update:
It seems to be this way (not tested, I don't have immo nor key. Data is extracted only from HEX) :
PCF7936 used in cipher mode. PSW-B[32bit] and SK[48bit] are the default ones. PSW-T[24bit] is changed to 414932 (default is AA4854).
User pages also filled with similar data on all 3 dumps that I have.

The thing that is not clear: where is saved unique data for each car? One possibility is the serial number IDE from PCF.

[mihotd]

After some research it become clear that all can be done via OBD interface. Important data is saved in both flash and eeprom of the PIC. Solution will be available after a month or so.

[whiskeyman]

look forward to the post and will see how this pans out

[Fallen]

Any updates on this? I'm interested in an OBD option!

[mihotd]

Don't have sawdoc module yet. I think it will be easy to take one but they are not very common in my country :(