PDA

View Full Version : VW Passat comfort module error


FIRAS72
24th April, 2017, 01:31 PM
Hi
i have a big problem with
VW passat cc
comfort module orig with corrupted file 95320
i find other comfort module
can same one help me to change CS+PIN+Power class+MAC1-2 +ELV mac



i have a example:

(xx) - Sample
$xxx ? Data from the address xxx

Var
Pin , Xor1, Xor2, Lxor3, Hxor4, Lmac1, Hmac1, Lmac2, Hmac2, CS10x, PoClas

Const
St = FF

XOR
Xor1 = $5FE( 71 )
Xor2 = $5FF( 8D )
Lxor3 = $507( 3F ) xor St( FF ) = 3F xor FF = C0
Hxor4 = ?

PIN
Pin = $4A1( 84 ) $4A2( FB ) xor Lxor3( C0 ) Lxor3( C0 ) = 84FB xor C0C0 = hex ( 443B )

= dec ( 17467 )

Pin= 17467
---------
Power class
PoClas = $50E( 73 ) xor Xor2( 8D ) = 73 xor 8D = FE

Power Class = FE
---------
CS Bytes
CS10-1 = $4AE( F6 ) xor Lxor3( C0 ) = F6 xor C0 = 36
CS10-2 = $4A8( 2E ) xor Lxor3( C0 ) = 2E xor C0 = EE
CS10-3 = $4AC( 36 ) xor Lxor3( C0 ) = 36 xor C0 = F6
CS10-4= $4AD( B4 ) xor Hxor4(?) = ?
CS10-5= $4B1( 0D ) xor Hxor4(?) = ?
CS10-6= $4A9( BD ) xor Hxor4(?) = ?
CS10-7= $4B0( 2D ) xor Lxor3( C0 ) = 2D xor C0 = ED
CS10-8= $4AA( 64 ) xor Lxor3( C0 ) = 64 xor C0 = A4
CS10-9= $4AB( 13 ) xor Hxor4(?) = ?
CS10-10= $4AF( 69 ) xor Hxor4(?) = ?

CS Bytes = 36 EE F6 ? ? ? ED A4 ? ?
---------
MAC1-2
Lmac1=$4C7( 0E ) xor Hxor(?) = ?
Hmac1=$4C6( D2 ) xor Lxor3( C0 ) = D2 xor C0 = 12
Lmac2=$4CF( 38 ) xor Lxor3( C0 ) = 38 xor C0 = F8
Hmac2=$4D0( 6F ) xor Hxor4(?) = ?

MAC1-2 = ? 12 F8 ?
---------
ELV mac
Emac1=$4FE( 79 ) xor Lxor3( C0 ) = 79 xor C0 = B9
Emac2=$4FD( 90 ) xor Hxor4(?) = ?

ELV mac = B9 ?


thanks
koyot
24th April, 2017, 01:56 PM
mac2 is variable
kostas
24th April, 2017, 02:16 PM
Hi
i have a big problem with
VW passat cc
comfort module orig with corrupted file 95320
i find other comfort module
can same one help me to change CS+PIN+Power class+MAC1-2 +ELV mac



i have a example:

(xx) - Sample
$xxx – Data from the address xxx

Var
Pin , Xor1, Xor2, Lxor3, Hxor4, Lmac1, Hmac1, Lmac2, Hmac2, CS10x, PoClas

Const
St = FF

XOR
Xor1 = $5FE( 71 )
Xor2 = $5FF( 8D )
Lxor3 = $507( 3F ) xor St( FF ) = 3F xor FF = C0
Hxor4 = ?

PIN
Pin = $4A1( 84 ) $4A2( FB ) xor Lxor3( C0 ) Lxor3( C0 ) = 84FB xor C0C0 = hex ( 443B )

= dec ( 17467 )

Pin= 17467
---------
Power class
PoClas = $50E( 73 ) xor Xor2( 8D ) = 73 xor 8D = FE

Power Class = FE
---------
CS Bytes
CS10-1 = $4AE( F6 ) xor Lxor3( C0 ) = F6 xor C0 = 36
CS10-2 = $4A8( 2E ) xor Lxor3( C0 ) = 2E xor C0 = EE
CS10-3 = $4AC( 36 ) xor Lxor3( C0 ) = 36 xor C0 = F6
CS10-4= $4AD( B4 ) xor Hxor4(?) = ?
CS10-5= $4B1( 0D ) xor Hxor4(?) = ?
CS10-6= $4A9( BD ) xor Hxor4(?) = ?
CS10-7= $4B0( 2D ) xor Lxor3( C0 ) = 2D xor C0 = ED
CS10-8= $4AA( 64 ) xor Lxor3( C0 ) = 64 xor C0 = A4
CS10-9= $4AB( 13 ) xor Hxor4(?) = ?
CS10-10= $4AF( 69 ) xor Hxor4(?) = ?

CS Bytes = 36 EE F6 ? ? ? ED A4 ? ?
---------
MAC1-2
Lmac1=$4C7( 0E ) xor Hxor(?) = ?
Hmac1=$4C6( D2 ) xor Lxor3( C0 ) = D2 xor C0 = 12
Lmac2=$4CF( 38 ) xor Lxor3( C0 ) = 38 xor C0 = F8
Hmac2=$4D0( 6F ) xor Hxor4(?) = ?

MAC1-2 = ? 12 F8 ?
---------
ELV mac
Emac1=$4FE( 79 ) xor Lxor3( C0 ) = 79 xor C0 = B9
Emac2=$4FD( 90 ) xor Hxor4(?) = ?

ELV mac = B9 ?


thanks

orig pin 62235 CS: C1 40 85 13 82 81 0A
new comfort pin32836 CS: 3B 68 A6 97 B5 09 0D
FIRAS72
24th April, 2017, 03:38 PM
orig pin 62235 CS: C1 40 85 13 82 81 0A
new comfort pin32836 CS: 3B 68 A6 97 B5 09 0D
i know pin and cs of the both of comfort module
i need the file of new comfort module withe old cs+pin+power class+mac1-2+mak elv
yugo45
24th April, 2017, 06:09 PM
i know pin and cs of the both of comfort module
i need the file of new comfort module withe old cs+pin+power class+mac1-2+mak elv

It looks like you have VVDI , so you can use Adopt control module function. Just chnage Power class , put D7 at 0x050E,0x050F, 0x0510.
you post calculation above.
It looks like they are different , Other data should sync with VVDI .
FIRAS72
24th April, 2017, 08:38 PM
It looks like you have VVDI , so you can use Adopt control module function. Just chnage Power class , put D7 at 0x050E,0x050F, 0x0510.
you post calculation above.
It looks like they are different , Other data should sync with VVDI .
can you repire this file445254
steveleo
24th April, 2017, 10:17 PM
You can't just plug in a new comfort module. Comfort module is married to elv and can only decrypt it's values with the right elv. And you can't just transfer the immodata to a new comfort module as it needs to be married to elv. I tried already to make one virgin with all data crypted as if it was virgin. Didnt work. If someone knows more i am happy to learn
yugo45
25th April, 2017, 12:30 AM
can you repire this file445254

No I do not, I told you this can be done with VVDI , just chnage Power class in New CCM.
amigokola
25th April, 2017, 07:49 AM
Yugo VVDI can't adapt CCM as I know neither do AVDI ??
yugo45
26th April, 2017, 02:15 AM
I attach picture, I never had need for this , but it has this function.


FIRAS72 Can try and let us know .
haroutioun
26th April, 2017, 08:32 AM
Hello.
by VVDI and by AVDI its also so far to done adapt the comfort module, 75% done problem when trying to do by obd2 using vvdi & avdi. for me best way (Odis online).
FIRAS72
26th April, 2017, 08:42 AM
I attach picture, I never had need for this , but it has this function.


FIRAS72 Can try and let us know .
now i have this problem
http://www.digital-kaos.co.uk/forums/showthread.php/592284-VW-Passat-comfort-module-error-elv