I was able to read the data off the smart ecu using the 30pin wire and lonsdor. For the DK member the new Camry is using a 4A aes system like Corolla Cross.https://www.tiktok.com/t/ZPRwvsNS1/
I was able to read the data off the smart ecu using the 30pin wire and lonsdor. For the DK member the new Camry is using a 4A aes system like Corolla Cross.https://www.tiktok.com/t/ZPRwvsNS1/
It is BA 4A?
4A AES (hi tag) NCF chipset most cloner can’t wake up the chip to read its data.
Can you read eeprom with Tango? On AA and BA there is specific byte at not locked area.
according to the key type , i thinkk p4 is BA
same chip type with Corolla Cross 2022+
Wrong Corolla, & Cross and new Camry chip I.D. 4A which is a different family then 8A (AA,BA or B8 coming soon).. 4A is high tag 3 with aes encryption. Most cloner can not wake it up so doesn’t see transponder. Other cloner can only give you very little info.( I.d. And chipset NCF )like megamos 48 where 8A is like tris easy to decrypt. Lonsdor needs to create a new board that can run the 4A chipset ncf. On 8A AA or BABA page 6 is your unlocking area ( 00800000) Virgin. But can not be registered, because lexus and Toyota can no longer share smart keys. There remote section has change and Lexus added 433 mhz to the USA region. There is a hidden page with a virgin dump that get checksum written on to it when gets registered to a car. That virgin number can not be written back RF. How can I prove that ie. I used smart BABA and unlock it, read the oem board with lonsdor so can write to the emulator. Now my emulator has a copy of the oem transponder i.d. And a virgin remote dump ready for the car to register. I took that virgin and wrote it back to the oem and tried to register. Failed..
Last edited by ray-ray; 18th May, 2024 at 05:48 AM.
castin (31st May, 2024), Manta1600 (20th May, 2024), ucokseparoh (20th May, 2024)
Bookmarks