GSM-Forum  

Welcome to the GSM-Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features.
Only registered members may post questions, contact other members or search our database of over 8 million posts.

Registration is fast, simple and absolutely free so please - Click to REGISTER!

If you have any problems with the registration process or your account login, please contact contact us .

Go Back   GSM-Forum > Non GSM/Mobile Related Forums > CAR Electronics

CAR Electronics however its a non GSM/Phone Related, but why not !! you can get here All Car Electronics Programming and Unlocking tools & Codes.

Reply
 
LinkBack Thread Tools Display Modes
Old 10-15-2011, 20:41   #1 (permalink)
Junior Member
 
Join Date: Oct 2011
Location: Netherlands, Utrecht
Posts: 5
Member: 1672284
Status: Offline
Thanks Meter: 3
Pioneer AVIC-F930BT code

Hello,

I have an pioneer avic-f930bt where I lost my password
I already opened the radio and have read the 93c56 smd chip.
The password in this radio can be changed in the menu. It can have letters, numbers and a space. I though it should be in the serial CMOS 93c56 chip but I'm not sure. This are the chips in the pioneer:
CMOS serial E2PROM (256):
IC1303
S-93C56BD0I-I8

e-nand (4gbyte):
IC4501
PEN002A
hynix H26m31001EFR

flash rom (8mbit):
IC4403
CXX3406
spansion al008j70bf102

sram (4mbit):
IC4406
CY62147EV30LL45BVA

I readed the 93c56 chip and here is the zip file. Inside the zip file there is an e2p and bin file. I hope that someone of you guys can find the code there

Hotfile.com: One click file hosting: pioneer.zip

There was pretty difficult to solder such smd chip.

Last edited by melvin v/d berg; 10-15-2011 at 20:47.
  Reply With Quote
Old 10-16-2011, 14:43   #2 (permalink)
No Life Poster
 
zlix's Avatar
 
Join Date: Apr 2007
Location: Serbia Vrbas ,now Wien Austria
Posts: 2,061
Member: 493754
Status: Offline
Thanks Meter: 618
welcome good post!!! THX for it
so it is a new model , you say pass can be letters and numbers let we see how long it is 4 or 5 letters ,and it is not probably in 93c56 cause i think it will act same if you remove it and power it to work
try to read nand flash
regards
  Reply With Quote
The Following User Says Thank You to zlix For This Useful Post:
Old 10-16-2011, 18:39   #3 (permalink)
Junior Member
 
Join Date: Oct 2011
Location: Netherlands, Utrecht
Posts: 5
Member: 1672284
Status: Offline
Thanks Meter: 3
You can enter a password up to 20 characters. In the manual it says it can be 5 to 16 characters. If I disable the power to the 93c56 the radio gives no display anymore. I tried to enter a password. After that I readed the 93c56 again and there is no difference with me previous dump. Maybe the counter is stored somewhere else or maybe there is no counter.
I don't know how to read the nand. It is BGA. It is really difficult to trace because I think the PCB is triple sided.
Here is an service manual with all the traces and every chip AVIC-X930BT Service Manual (EN).pdf - 4shared.com - document sharing - download
It is for the X930BT but is exactly the same for the F930BT every trace is the same.
If someone can find how to read this chip I would be very happy. I have an Olimex LPC-H2148 to read some nand chips.
There is also an test mode in this radio. For that I need this: "Download GGS1098 from the Service Site". Maybe someone can access the pioneer service site and provide that zip/rar?
  Reply With Quote
Old 10-16-2011, 19:36   #4 (permalink)
Junior Member
 
Join Date: Oct 2011
Location: Netherlands, Utrecht
Posts: 5
Member: 1672284
Status: Offline
Thanks Meter: 3
I found some traces to get to these pins of the nand:
CLK
CMD
DAT0-7
NAND3 (VCC)
CCD3_IOON (VCC?)
A lot of grounds

This nand chip is an e-mmc. How do I read that chip? :S
I really think the password is in there. Also all the sofware is in there

Maybe it could also be in the flash rom? If I look at the user manual I don't think it is in the flash rom. All other data is there that you can reset from the system menu. The flash rom has also an reset pin. I don't really think the password is in there but maybe someone can tell me that?
  Reply With Quote
Old 10-16-2011, 20:02   #5 (permalink)
Junior Member
 
Join Date: Mar 2010
Location: breda, holland
Posts: 2
Member: 1262663
Status: Offline
Thanks Meter: 1
pioneer

Quote:
Originally Posted by melvin v/d berg View Post
I found some traces to get to these pins of the nand:
CLK
CMD
DAT0-7
NAND3 (VCC)
CCD3_IOON (VCC?)
A lot of grounds

This nand chip is an e-mmc. How do I read that chip? :S
I really think the password is in there. Also all the sofware is in there

Maybe it could also be in the flash rom? If I look at the user manual I don't think it is in the flash rom. All other data is there that you can reset from the system menu. The flash rom has also an reset pin. I don't really think the password is in there but maybe someone can tell me that?

code in flash package:BGA

i will decode it on my table in 5 minutes.



wbr
  Reply With Quote
The Following User Says Thank You to oemrepair For This Useful Post:
Old 10-16-2011, 20:12   #6 (permalink)
Junior Member
 
Join Date: Oct 2011
Location: Netherlands, Utrecht
Posts: 5
Member: 1672284
Status: Offline
Thanks Meter: 3
So do I need to read the nand and send the 4gb?
http://rere.qmqm.pl/~mirq/JESD84-A44.pdf
It seems the password is really in the nand.
How do I wire up the nand to the lpc-h2148? And what software do I need?
  Reply With Quote
Old 10-17-2011, 00:22   #7 (permalink)
Junior Member
 
Join Date: Oct 2011
Location: Netherlands, Utrecht
Posts: 5
Member: 1672284
Status: Offline
Thanks Meter: 3
I searched my self blind. The radio didn't even had to open. And yes the key is in the nand. Al I had to do is find this page Condi's HACKMODE v1.4 - DiskRW, GpsGate, TextFiller, RegEditor with .reg files associated! [updated: 13.06.2011] - AVIC411.com

On user/system/security/password there is a plain text file with your password
  Reply With Quote
The Following 3 Users Say Thank You to melvin v/d berg For This Useful Post:
Show/Hide list of the thanked
Old 10-18-2012, 23:33   #8 (permalink)
Junior Member
 
Join Date: Oct 2012
Posts: 1
Member: 1827140
Status: Offline
Thanks Meter: 0
Quote:
Originally Posted by melvin v/d berg View Post
I searched my self blind. The radio didn't even had to open. And yes the key is in the nand. Al I had to do is find this page Condi's HACKMODE v1.4 - DiskRW, GpsGate, TextFiller, RegEditor with .reg files associated! [updated: 13.06.2011] - AVIC411.com

On user/system/security/password there is a plain text file with your password
Hey man thank you, i tried but can't find a file inside the maps.
  Reply With Quote
Old 09-04-2013, 10:59   #9 (permalink)
Junior Member
 
Join Date: Aug 2008
Posts: 23
Member: 839297
Status: Offline
Sonork: carradioaode
Thanks Meter: 0
pioneer AVIC-F930BT aeurre password
  Reply With Quote
Old 09-04-2013, 13:17   #10 (permalink)
Freak Poster
 
Join Date: Mar 2006
Location: Catamarca, Argentina
Posts: 386
Member: 245162
Status: Offline
Sonork: 370312
Thanks Meter: 171
Quote:
Originally Posted by fatme View Post
pioneer AVIC-F930BT aeurre password

Hi, read flash and post here for you help. And remember complete your profile . Regards
  Reply With Quote
The Following User Says Thank You to juisro For This Useful Post:
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
thread Thread Starter Forum Replies Last Post
PIN1/PIN2 CODE Jon Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 1 12-26-2012 03:40
Help: Forgot my 6110 user lock code!! GByte9 Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 3 04-03-2011 15:00
5110 Security Code Help! cahrisma Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 6 07-05-2010 09:04
Orange IL, Nokia 5110 GSM codes... rosso11 Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 0 11-05-1999 20:38
Pin Code Verdonn Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) 0 10-23-1999 15:35

 



All times are GMT +1. The time now is 15:18.



Powered by Searchlight © 2014 Axivo Inc.
vBulletin Optimisation provided by vB Optimise (Pro) - vBulletin Mods & Addons Copyright © 2014 DragonByte Technologies Ltd.
- GSM Hosting Ltd. - 1999-2014 -
Page generated in 0.33372 seconds with 8 queries

SEO by vBSEO