CAS3++ istap lost isn

[abdelkmel]

Hello,

i'am working on BMW X6 from 2011 all keys lost
after downgrade cas3 for key programming with VVDI2, cas eprom corrupted
no isn in cas eprom.
i need long ISN from ECU to repair my CAS eeprom file

i have BMD dumps from ecu and 95640 eprom dump
ECU is EDC16CP35 with eeprom 95640
CAS3++ Istap version

[abdelkmel]

Hello,

i'am working on BMW X6 from 2011 all keys lost
after downgrade cas3 for key programming with VVDI2, cas eprom corrupted
no isn in cas eprom.
i need long ISN from ECU to repair my CAS eeprom file

i have BMD dumps from ecu and 95640 eprom dump
ECU is EDC16CP35 with eeprom 95640
CAS3++ Istap version

files are attached

[Chriz123]

ISN is not lost
But there are only a hand full of devices that can handle BMW X5/X6 (E70/71)

You need the EGS ISN in this case

Tools: autohex or Explorer (ori)
Or find a person who can decrypt EGS RAM

[ecuprogramer]

abdelkmel


(https://www.digital-kaos.co.uk/forums/member.php/492528-abdelkmel) Hello, you're right, now I looked at cas3 + eeprom in Ori Bmw explorer and it doesn't have an ISN number..the only way to create and synchronize with vvdi2 is to read the ECU ISN number on the obd2 port and type it in cas3 +, because the cas3 + file is coded to you and I can't to change isn number ..

[Chriz123]

And the next one...

He posted His ECU too, so tell us the long ISN out of the ECU!

[ecuprogramer]

every bmw ecu I can extract ISN number via dump, only edc16 I can only read via obd2 port, for edc16 ecu I have no option via dump

[Chriz123]

sorry when im a bit rude
but youre complete on the wrong way
sure you have a option, you have to learn the location and search ISN manual with a HexEditor

ISN from EDC16 Dump: 48 0B

its a edc16 and every edc16 has a short ISN so the ISN from ECU is useless

for E70/e71 the EGS ISN is the way to solve All keylost
EGS ISN is 4bit EGSISN and 4bit DME ISN
as example D5 35 48 0B, with this ISN some tools can generate the long ISN for the keys...
Exmaple calculation with D5 35 48 0B (0F30010F30010F30010F30010F30010F)

as you can see this ISN differs from the Normal long ISN

X5/X6 are a bit special

For a normal BMW Car with EDC17 youre on the right way with reading Engine ISN

[abdelkmel]

hi,

thanks for your fast feedback,
ok i will try to read the EGS isn.
VVDI can convert it to long?
can you tell me with which soft i can convert it to 16bit ?
can you do it ?

[abdelkmel]

isn from EGS is 72 3A 84 01
can you convert to 16bits ?

[ricked]

isn from EGS is 72 3A 84 01
can you convert to 16bits ?

A83F01A83F01A83F01A83F01A83F01A8

[Chriz123]

isn from EGS is 72 3A 84 01
can you convert to 16bits ?

i dont think this is correct ISN

how did you read it ?

[abdelkmel]

thanks, i tried
you converted it with autohex?

[abdelkmel]

tested but not working, i think SN convertion is not good

any help ?

[K1nd3r]

tested but not working, i think SN convertion is not good

any help ?
egs reading is not good first

[abdelkmel]

EGS reading with Abrites, look at the picture

[ricked]

tested but not working, i think SN convertion is not good

any help ?

conversion is correct...

[abdelkmel]

solved, i used starter kit, CAS+key+DME...

thanks for your help.

[negrete]

kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk

[baddaren]

Hello , anyone Making CAS3+ by OBD with VVDI BMW or VVDI BIM TOOL? Is it safe? Jakob

[g5n14]

Hello , anyone Making CAS3+ by OBD with VVDI BMW or VVDI BIM TOOL? Is it safe? Jakob

How can you ask something like that if you have read that thread. No, it is not even close to safe. If you want 100% success rate - take CAS out. If you want to make OBD jobs - work with pre 43 ista versions.

[baddaren]

Hello g5n14. I am asking becaurse my locksmith friends bought Autel IM608 and makes BMW CAS3+ by OBD as I understood it. I was in tellford oktober 2019, MLA. Moe was there presenting the new VVDI BMW TOOL. Where you can save emergency flash. As I understod it no need to remove CAS. MOE sait it would work in 70% of the cases. The rest of 30% you had to do on bench. I you can not do it by obd, what is ide with VVDI BIM TOOL? Jakob

[abdulrauf]

please i need isn for bmw cas3+ , i attached the cas and ecu msv80 dumps.
thanks

[dijo]

please i need isn for bmw cas3+ , i attached the cas and ecu msv80 dumps.
thanks

For what you need ISN...?
Your Cas is Crypted, that means that need to be decrypted to work with ISN / SK...

[negrete]

EGS/DME

52 61 72 21

[negrete]

try this. :wink:

[negrete]

try this :wink:

ISN DME

F0 19 AD 60 03 F6 90 E1 0F 8D 18 D5 C0 E6 3C F0

CD 70 CF F1 66 13 F0 FC 62 EB C6 67 D0 CA 1E A3

E5 00 40 C7 59 C3 D1 6A C5 37 25 38 AD 39 0C E2

[ricked]

try this :wink:

ISN DME

F0 19 AD 60 03 F6 90 E1 0F 8D 18 D5 C0 E6 3C F0

CD 70 CF F1 66 13 F0 FC 62 EB C6 67 D0 CA 1E A3

E5 00 40 C7 59 C3 D1 6A C5 37 25 38 AD 39 0C E2


that cracked software you use dont always give the correct infos as that file is crypto... just a hint

[abdulrauf]

try this. :wink:
thanks i will try and reply

[Fx323i]

Hello guys, I know the thread is a bit old but I would appreciate to know how do you calculate the long ISN from EGS ISN. I would appreciate if anyone of you would be able to give me the long ISN based on EGS ISN is 61 64 C9 09

C9 09 is DDE ISN so I believe it is OK. DDE is EDC16CP35

My estimation of the long ISN was 0AD0A70AD0A70AD0A70AD0A70AD0A7A0, it is accepted by the multi tool but key won't work for ignition on. Only remote works.

Thank you.

EDIT: I see, the CAS3+ I have hands on is SOPT45+, so there is 64 possible long ISNs. Will go through them and report.


05DFA805DFA805DFA805DFA805DFA805


0AD0A70AD0A70AD0A70AD0A70AD0A70A


0FD5A20FD5A20FD5A20FD5A20FD5A20F


11CBBC11CBBC11CBBC11CBBC11CBBC11


14CEB914CEB914CEB914CEB914CEB914


1BC1B61BC1B61BC1B61BC1B61BC1B61B


1EC4B31EC4B31EC4B31EC4B31EC4B31E


22F88F22F88F22F88F22F88F22F88F22


27FD8A27FD8A27FD8A27FD8A27FD8A27


27F28527F28527F28527F28527F28527


2DF7802DF7802DF7802DF7802DF7802D


33E99E33E99E33E99E33E99E33E99E33


36EC9B36EC9B36EC9B36EC9B36EC9B36


39E39439E39439E39439E39439E39439


3CE6913CE6913CE6913CE6913CE6913C


419BEC419BEC419BEC419BEC419BEC41


449EE9449EE9449EE9449EE9449EE944


4B91E64B91E64B91E64B91E64B91E64B


4E94E34E94E34E94E34E94E34E94E34E


508AFD508AFD508AFD508AFD508AFD50


558FF8558FF8558FF8558FF8558FF855


5A80F75A80F75A80F75A80F75A80F75A


5F85F25F85F25F85F25F85F25F85F25F


63B9CE63B9CE63B9CE63B9CE63B9CE63


66BCCB66BCCB66BCCB66BCCB66BCCB66


69B3C469B3C469B3C469B3C469B3C469


6CB6C16CB6C16CB6C16CB6C16CB6C16C


72A8DF72A8DF72A8DF72A8DF72A8DF72


77ADDA77ADDA77ADDA77ADDA77ADDA77


78A2D578A2D578A2D578A2D578A2D578


7DA7D07DA7D07DA7D07DA7D07DA7D07D


82582F82582F82582F82582F82582F82


875D2A875D2A875D2A875D2A875D2A87


88522588522588522588522588522588


8D57208D57208D57208D57208D57208D


93493E93493E93493E93493E93493E93


964C3B964C3B964C3B964C3B964C3B96


99433499433499433499433499433499


9C46319C46319C46319C46319C46319C


A07A0DA07A0DA07A0DA07A0DA07A0DA0


A57F08A57F08A57F08A57F08A57F08A5


AA7007AA7007AA7007AA7007AA7007AA


AF7502AF7502AF7502AF7502AF7502AF


B16B1CB16B1CB16B1CB16B1CB16B1CB1


B46E19B46E19B46E19B46E19B46E19B4


BB6116BB6116BB6116BB6116BB6116BB


BE6413BE6413BE6413BE6413BE6413BE


C3196EC3196EC3196EC3196EC3196EC3


C61C6BC61C6BC61C6BC61C6BC61C6BC6


C91364C91364C91364C91364C91364C9


CC1661CC1661CC1661CC1661CC1661CC


D2087FD2087FD2087FD2087FD2087FD2


D70D7AD70D7AD70D7AD70D7AD70D7AD7


D80275D80275D80275D80275D80275D8


DD0770DD0770DD0770DD0770DD0770DD


E13B4CE13B4CE13B4CE13B4CE13B4CE1


E43E49E43E49E43E49E43E49E43E49E4


EB3146EB3146EB3146EB3146EB3146EB


EE3443EE3443EE3443EE3443EE3443EE


F02A5DF02A5DF02A5DF02A5DF02A5DF0


F52F58F52F58F52F58F52F58F52F58F5


FA2057FA2057FA2057FA2057FA2057FA


FF2552FF2552FF2552FF2552FF2552FF


00DAAD00DAAD00DAAD00DAAD00DAAD00

[wojtauek]

Hello, i know this topic is old, but i have mini all keys lost, cas3+ encrypted, ECU is edc16c35 with short ISN: 2A3B, egs isn: 99492A3B. I have flash from ECU and eeprom from cas. Is anyone here able to provide 32digits ISN that would decrypt cas / let me add new key? I tried with tango, it did write a key and locked it but key does not work.