Reusing old Peugeot/Citroen remotes type 73373067B,C

[lyannoy]

xxxxxxxxxxxxxxxxxxxxxx Peugeot 307 2004 ?

Help /////mihotd
EA 01 00 00 94 F6 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 F7 FA 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 53 F5 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 66 F9 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 46 FB 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 F4 F5 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 15 F9 58 43 00 00 00 00 00 00 00 00
Keydiy read

[qeso705]

no one can give this algo !!!

Maybe you will share your experience with leeching. It should be quite much information

[RFRemotes]

This data is not relevant. Must begin with A5 AA ... you should know this from many previous posts

[Bllinda]

xxxxxxxxxxxxxxxxxxxxxx Peugeot 307 2004 ?

Help /////mihotd
EA 01 00 00 94 F6 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 F7 FA 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 53 F5 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 66 F9 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 46 FB 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 F4 F5 58 43 00 00 00 00 00 00 00 00
EA 01 00 00 15 F9 58 43 00 00 00 00 00 00 00 00
Keydiy read

Two ways to scan PIC read and Keydiy read

This data is not relevant. Must begin with A5 AA ... you should know this from many previous posts

https://www.digital-kaos.co.uk/forum...1&d=1363387998

[ersin]

In Citroen and Peugeot the remote is precoded with the transponder. Changing transponder makes the remote stop working. In other words transponder and remote are matched in factory. When you program new transponder it must contain also data for remote. This is needed for BSI module to recognize rf transmissions from the remote.
You can reuse old remotes if you know what kind of data to write into transponder. It is placed in USER 0,1,2,3 pages in PCF7936.
Actual problem is retrieving data from an old, used remote and then put it into blank transponder.

Here is a way to get this data. We need several things to do this: some used (but still working) remotes with fresh battery.
A kind of "reader" based on PIC12F629 and a way to get the data into PC (I use so called USB-to-TTL converter), only RX channel needed and software is the ordinary HyperTerminal for windows (or some of xxxCOM apps if you're using Linux)
Here are the pads used on the remote.
Next part coming soon ...

https://www.digital-kaos.co.uk/forum...21#post3659621

Will someone help me

[qeso705]

Contact RFremotes user.

[vanders]

Anymore news about this? have some peugeots CC without working remotes, have tryed with a cheap chinese fob, but resulted in a non starter, so have to be reprogrammed with diagbox.. with battery or print removed, these fobs poisening a working / starting car.

So very interested in this tread.

[ersin]

In Citroen and Peugeot the remote is precoded with the transponder. Changing transponder makes the remote stop working. In other words transponder and remote are matched in factory. When you program new transponder it must contain also data for remote. This is needed for BSI module to recognize rf transmissions from the remote.
You can reuse old remotes if you know what kind of data to write into transponder. It is placed in USER 0,1,2,3 pages in PCF7936.
Actual problem is retrieving data from an old, used remote and then put it into blank transponder.

Here is a way to get this data. We need several things to do this: some used (but still working) remotes with fresh battery.
A kind of "reader" based on PIC12F629 and a way to get the data into PC (I use so called USB-to-TTL converter), only RX channel needed and software is the ordinary HyperTerminal for windows (or some of xxxCOM apps if you're using Linux)
Here are the pads used on the remote.
Next part coming soon ...

Hello friends
mihotd how to reach this user

[qeso705]

As i already told you, contact RFremotes user. He will be able to help in similar range as mihotd.

[vanders]

So conclusion is: if you buy a new key.. ( transponder + remote from peugeot dealer ) they are already paired? but have to be programmed to the car ?

When buying a new or virginized remote with blank transponder, the remote will never work?

[jodge]

So conclusion is: if you buy a new key.. ( transponder + remote from peugeot dealer ) they are already paired? but have to be programmed to the car ?

When buying a new or virginized remote with blank transponder, the remote will never work?

if you buy from the ealer it will working after learning
in this case there is no such a thing "virginized remote" the remotes are remain the same. You must logging the remote trasmitted data (with those stuff in this topic) and mihodt or other members able to give you the remote type and serial number. Thats data is need to write to a virgin pc7936. Without this the remote never work, only the tp

[kosu]

Can someone tell me what the PSAReader hex file is supposed to be loaded into? Apologies if I've missed it somewhere in this thread. I understand it's used in decoding the output of the serial data read from the PIC12F629 somehow. But it seems multiple people asked and I missed the answer.
I'm wondering whether I can get the equivalent output using an SDR. Using rtl_433 I seem to be getting output the 3 73373067C/Ds that I have. e.g.
3e 05 ba 65 e7 f7 5e 60 fc f8 16 e9 97 9f dd 79 80
3e 0d 5e be de 5b b9 c0 fc f8 35 7a fb 79 6e e7 00
52 0b 7c fd fc 5e da a0 fd 48 2d f3 f7 f1 7b 6a 80
52 1b 3e bf db 4f fb ec fd 48 6c fa ff 6d 3f ef b0
7b 80 fd fa 26 f3 9f 60 fd ee 03 f7 e8 9b ce 7d 80
7b 83 3b cf 1f d3 5d c0 fd ee 0c ef 3c 7f 4d 77 00

But I doubt they are decoded correctly.

[vanders]

if you buy from the ealer it will working after learning
in this case there is no such a thing "virginized remote" the remotes are remain the same. You must logging the remote trasmitted data (with those stuff in this topic) and mihodt or other members able to give you the remote type and serial number. Thats data is need to write to a virgin pc7936. Without this the remote never work, only the tp

Ok thats clear, so a new one at the dealer is always including a transponder? then with diagbox / planet it must work?

( in my case its a PC7922V18 but that is making not a difference i think )

[jodge]

Ok thats clear, so a new one at the dealer is always including a transponder? then with diagbox / planet it must work?

( in my case its a PC7922V18 but that is making not a difference i think )

yepp its an complet key : case + blade + transponder + remote + battery
yes it will working if the chinese factory or the cracking guy or you with the install didn't f.ck something up

[jodge]

Can someone tell me what the PSAReader hex file is supposed to be loaded into? Apologies if I've missed it somewhere in this thread. I understand it's used in decoding the output of the serial data read from the PIC12F629 somehow. But it seems multiple people asked and I missed the answer.
I'm wondering whether I can get the equivalent output using an SDR. Using rtl_433 I seem to be getting output the 3 73373067C/Ds that I have. e.g.
3e 05 ba 65 e7 f7 5e 60 fc f8 16 e9 97 9f dd 79 80
3e 0d 5e be de 5b b9 c0 fc f8 35 7a fb 79 6e e7 00
52 0b 7c fd fc 5e da a0 fd 48 2d f3 f7 f1 7b 6a 80
52 1b 3e bf db 4f fb ec fd 48 6c fa ff 6d 3f ef b0
7b 80 fd fa 26 f3 9f 60 fd ee 03 f7 e8 9b ce 7d 80
7b 83 3b cf 1f d3 5d c0 fd ee 0c ef 3c 7f 4d 77 00

But I doubt they are decoded correctly.

third post in this thread

rf reader serial output --> 12F629 pic with mihodt hex--> usb-serial converter--> pc usb port--> your favorite serial port monitor sw