EWS2 dump modification

[qubits]

Hi friends,

I'm trying to code a junkyard key to an existing EWS2 (after ignition change). It's easier to change the transponder or program a new one. But my curiosity got the worst of me and I don't have a new transponder.

The key I want to insert to the EWS2 dump looks like this:
55 04 C5 D0 1E 68 10 08 83 F1 28 07 98 00 00 00
I'm assuming the only bytes I need are:
C5 D0 1E 68 10 08 83 F1

And insert this into one of the unused key #10
offset 10d-114

and I'm done?

[bram380]

BMW used key can reuse to other EWS if the password known.

[qubits]

You mean ISN of the junkyard key? I don't have the junkyard EWS or DME to know that. I have the ISN of existing EWS.

[bram380]

ISN different with transponder password.
ISN = sync code EWS to ECU
Transponder password = secrect code for chip transponder

[qubits]

where is transponder password located? in the key or matching ews?

[bram380]

Key will be accepted by the "ews", if the password on ews and transponder is the same.

[qubits]

it would be super nice if someone shares how to calculate... :excitement:

[bram380]

Until now no tool can calculate password used bmw key (pcf7935/pcf7930).

If you need to solve the problem:
- get new blank pcf7935
- get used ews + key (matched)

with used ews+key you can transfer to others ews1,2,3

[qubits]

oh I see. There is no real use for calculating the password. Just buy a new transponder! Thank you bram, you're always the best BMW expert on dk.