[cfocosta]

Hi, Folks!

I need to know the mileage of a Citroen BSI (from Johnson Controls) code 96.640.591.80-02 / 04EV K05-00, with eeprom 95128, where I found the VIN and PIN, but I do not know the mileage and their addresses:
- VIN -> Addr 0x0F3h till 0x103h;
- PIN -> Addr 0xA76h till 0xA79h.

Which addresses are the mileage written and how I can calculate it?
I did not find the addresses of this mileage when I read the eeprom.

Attached is the BSI eeprom file.

Many thanks for your help.

Carlos Frederico Costa

[ads05]

mileage is 171499, this is crypto.. how much you need km?

[cfocosta]

mileage is 171499, this is crypto.. how much you need km?

Many Thanks for your answer.

As the original BSI was damaged, the owner bought this BSI, and he said that the mileage is about 100000 km.
Please if you can change to this new value I appreciate very much.

Do you know how I can calculate this value and which eeprom addresses are pointed to it?

Many Thanks.

Carlos Frederico Costa

[Clusters]

Mileage X 10 to hex, inverted, CRC Kermit repeated 8 times from 0336-0365.

[ads05]

here your file with 100000 try it and report

[cfocosta]

here your file with 100000 try it and report

Hi, "ads05" and also "Clusters"!


Thank you for your help. Each day I learn something new.

I tried to calculate again what "Clusters" said and "ads05" did in the original eeprom file, calculating for 100.000 km mileage.
Let me show step by step.

For km = 100.000, we have:
- KM x 10 = 1000000, converting to hex =>  00 0F 42 40;
- Inverting the values => 40 42 0F 00
- Calculating the CRC, using the WEB site crccalc.com and looking at CRC-16/Kermit => 0x26B1h

In the file sent by "ads05" it showed 0x61D2h instead 0x26B1h calculated by CRC web site.
I would like to know what it is the corrected CRC value.

ADDRES: 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F
0x0330: 00 40 00 00 5B DF 40 42 0F 00 61 D2 40 42 0F 00
0x0340: 61 D2 40 42 0F 00 61 D2 40 42 0F 00 61 D2 40 42
0x0350: 0F 00 61 D2 40 42 0F 00 61 D2 40 42 0F 00 61 D2
0x0360: 40 42 0F 00 61 D2 00 00

The complete addresses for the mileage are from 0x0336h till 0x365h.

Many Thanks.

Carlos Frederico Costa

[Clusters]

To calculate Kermit, swap bytes, then Xor with ff ff 00 00

40 42 0f 00 swap 42 40 00 0f Xor bd bf 00 0f

Kermit result = d2 61 byte swap = 61 d2

[cfocosta]

To calculate Kermit, swap bytes, then Xor with ff ff 00 00

40 42 0f 00 swap 42 40 00 0f Xor bd bf 00 0f

Kermit result = d2 61 byte swap = 61 d2

Many Thanks "Clusters". It works.

Now I can understand how mileage can be calculated.

Best regards,

Carlos Frederico Costa

[cfocosta]

To calculate Kermit, swap bytes, then Xor with ff ff 00 00

40 42 0f 00 swap 42 40 00 0f Xor bd bf 00 0f

Kermit result = d2 61 byte swap = 61 d2

Many Thanks "Clusters". It works.

Now I can understand how mileage can be calculated.

Best regards,

Carlos Frederico Costa

Solved...