zivillian
zivillian
It look's like I've found [the method which validates the received packets](https://github.com/zivillian/outlander-phev/blob/70c359dd116f9f6cb686d3bb9af4c15492fc6fc4/OUTLANDER%20PHEV%20Remote%20Ctrl_vA.3.1.1_apkpure.com/smali/com/inventec/iMobile2/z1/p.smali#L6454). The comments are my interpretation - maybe it helps: ```java private static int b(byte[] paramArrayOfbyte, int paramInt1, int...
That is interesting: > 09-26 14:18:55.774 3611 3611 W iMobile2: SIGNATURE不一致 > 09-26 14:18:55.774 3611 3611 W iMobile2: APP has been modified! I'll try to find and remove this check,...
@buxtronix I've [published a new version](https://github.com/zivillian/outlander-phev/releases/tag/v0.0.2) which should pass the app modification test ;-)
The XOR value is logged as `s_key` and `r_key` and seems to change with each send or received message (but not ping). This means it may be different for send...
[Found it](https://github.com/zivillian/outlander-phev/blob/d38fb1a8c1e7b2cc14dd4fb7566e7b23faa33aa6/OUTLANDER%20PHEV%20Remote%20Ctrl_vA.3.1.1_apkpure.com/smali/com/inventec/iMobile2/iMobile_AppGlobalVar.smali#L599). The following code generates a byte array with the XOR values used. ```csharp byte[] CalculateXorTable(int security_key) { var result = new byte[256]; for (int i = 0; i...
I finally found [the method](https://github.com/zivillian/outlander-phev/blob/d38fb1a8c1e7b2cc14dd4fb7566e7b23faa33aa6/OUTLANDER%20PHEV%20Remote%20Ctrl_vA.3.1.1_apkpure.com/smali/com/inventec/iMobile2/z1/p.smali#L2079) which calculates (and logs) the `security_key`. From that it is clear, that the `security_key` is only changed, when the app received a packet of type...
This is misleading, because the app is logging multiple packets in a single row: ``` 10-04 21:01:15.680 19913 14857 W iMobile2: recv: 42 18 1D 1D 1C 78 5E 0C...
It's interesting, that the procotol has more features than the app. E.g. the app supports a climate timer duration of 40 minutes if reported by the car, but does not...
I had the same problem and fixed it by unregistering my smartphone - the car only supports a limited number of client devices (2 on my model) and all slots...
I successfully registered my app to my "car simulator" - so there is nothing special about the registration. Next step is to check if any of the responses from the...