|
Re: key code
Been busy on different project, so not done much on this. Here's most of the info i have got so far, (see attachment of locked a file).
address 70+ = 08 7f aa aa 00
08 - is the next key loading address ( increments 2 and location increments 4 bytes.
7f - number of counts from ff of door opening (usually 00 in here)
AA AA - occurs when count = 00
00 - occurs when unit is locked
address 00 - 03 not sure but could be codes for alarm
key code block constructed every 4 bytes starting at 04 :-
04 = A7 37 D0 AE (REM CODE)
24 = FC 66 81 E3 (ROLLING CODE ORIGINAL)
44 = 07 67 81 EF (ROLLING CODE PRESENT)
What I do to open rxvr is to re-write 71+ to FF FF FF
When a recvr is opened successfully by remote code (p/b) aqddress 72+ changes to code used to unlock it.
the rest of the bottom r/h corner of the data seems identival on all remotes.
Hope someone can make use of that.
|