Zed-Bull clone - Second Life

**ASCM** · 15th May, 2021, 06:44 PM

i have a situation kavasaki zx10r AKL i created image file but i put in dump editor and all 000000

**da2dda** · 21st May, 2021, 09:37 PM

Hi, i have a question - is it possible that a chinese Zed-Bull clone with EFfl or Zed-BULLv508 to read a locked PCF7936/HITAG 2/ID 46 transponder?
I know the proper crypto hi/low bytes, but don't know where to put them?
Any help will be highly appreciated.

**andreia67** · 22nd May, 2021, 05:20 PM

Originally Posted by da2dda

Hi, i have a question - is it possible that a chinese Zed-Bull clone with EFfl or Zed-BULLv508 to read a locked PCF7936/HITAG 2/ID 46 transponder?
I know the proper crypto hi/low bytes, but don't know where to put them?
Any help will be highly appreciated.

Yes, it is possible to unlock and reuse a transponder HITAG II if you know the ISK.
1. Select the transponder type (or press "Auto Detect");
2. Write the ISK in "Factory Config" (DON'T press "Factory Config" button;
3. Press "Read All Pages" and verify the reading;
4. In "Transponder" write 4F 4E in Crypto/ISK Hi fields and press "W2";
5. Write 4F 4E in Crypto Hi field of the Factory Config;
6. In "Transponder" write 4D 49 4B 52 in Crypto/ISK Lo fields and press "W1";
7. Press "Factory Config" button;
8. Now you can read the unlocked transponder with "Read All Pages" button.
After that you can prepare transponder.

**PierreTheron** · 18th August, 2021, 07:05 PM

Thanks m8 long you live in our memories >>>
For family and friends this was a clever guy .. Maybe younger than me but he always persisted in finding a solution with the tools he had .
Believe it must have been a lot and not al get mentioned ...

**Keyim** · 6th February, 2022, 03:37 AM

I have always been jealous of those of those owning a zed-bull back over the years. But we where too small, to afford one. Suddenly Silca they had a mega drive we could not resist. Perfect for a small company like ours. And now RW4+ has served us well, and finally made us some money and some rep. in our small town.
But I have always likes the Zed, except for the looks. and over Silca capabilties...
Zed-full whoa! But as we work slowly this was not an option for ROI for us.
Now cars are on a new direction, remotes, and finally we a new track (and we have finally grasped it - Autel it was).

// Keyim
Sorry, but I have always liked these machines, over Silca,even if wenewwr owned one . we are just too small.

**jonah1024** · 20th August, 2022, 08:43 PM

@andreia67 This info is really hard to find on the internet and I really appreciate for sharing it!

**jonah1024** · 20th August, 2022, 08:47 PM

Originally Posted by andreia67

Yes, it is possible to unlock and reuse a transponder HITAG II if you know the ISK.
1. Select the transponder type (or press "Auto Detect");
2. Write the ISK in "Factory Config" (DON'T press "Factory Config" button;
3. Press "Read All Pages" and verify the reading;
4. In "Transponder" write 4F 4E in Crypto/ISK Hi fields and press "W2";
5. Write 4F 4E in Crypto Hi field of the Factory Config;
6. In "Transponder" write 4D 49 4B 52 in Crypto/ISK Lo fields and press "W1";
7. Press "Factory Config" button;
8. Now you can read the unlocked transponder with "Read All Pages" button.
After that you can prepare transponder.

Really thank you for this valuable info. I've got this extra pcf7943 keyless card from another car for which I know the crypto hi and low values (With that in EFfi I can read all the values except the Remote section which stays greyed out). I'd like to program it on my personal car. Apart from what you've said above is there anything else I should do before programming it with my car? (so that I don't lose keyless function or remote) Thank you!

**andreia67** · 21st August, 2022, 06:43 PM

The card should be able to program immediately after decoding.

**jonah1024** · 21st August, 2022, 10:09 PM

Originally Posted by andreia67

The card should be able to program immediately after decoding.

Thanks for the quick reply!
Do I need to change anything else to keep the handsfree function as well? The bytes under Remote section for example? (I'm asking all this before trying anything stupid)

**andreia67** · 22nd August, 2022, 03:50 PM

Originally Posted by jonah1024

Thanks for the quick reply!
Do I need to change anything else to keep the handsfree function as well? The bytes under Remote section for example? (I'm asking all this before trying anything stupid)

I wouldn't change anything on the decrypted card.

**jonah1024** · 22nd August, 2022, 04:06 PM

Originally Posted by andreia67

I wouldn't change anything on the decrypted card.

So just replace the Crypto Lo/hi with default one in the Transponder section -> Write them on the chip and after that just program it with the car and everything should work in theory, right?