|
Welcome to the GSM-Forum forums. You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. Only registered members may post questions, contact other members or search our database of over 8 million posts. Registration is fast, simple and absolutely free so please - Click to REGISTER! If you have any problems with the registration process or your account login, please contact contact us . |
|
Register | FAQ | Donate | Forum Rules | Root any Device | ★iPhone Unlock★ | ★ Direct Codes ★ | Direct Unlock Source |
CAR Electronics however its a non GSM/Phone Related, but why not !! you can get here All Car Electronics Programming and Unlocking tools & Codes. |
| LinkBack | Thread Tools | Display Modes |
10-15-2011, 20:41 | #1 (permalink) |
Junior Member Join Date: Oct 2011 Location: Netherlands, Utrecht
Posts: 5
Member: 1672284 Status: Offline Thanks Meter: 3 | Pioneer AVIC-F930BT code I have an pioneer avic-f930bt where I lost my password I already opened the radio and have read the 93c56 smd chip. The password in this radio can be changed in the menu. It can have letters, numbers and a space. I though it should be in the serial CMOS 93c56 chip but I'm not sure. This are the chips in the pioneer: CMOS serial E2PROM (256): IC1303 S-93C56BD0I-I8 e-nand (4gbyte): IC4501 PEN002A hynix H26m31001EFR flash rom (8mbit): IC4403 CXX3406 spansion al008j70bf102 sram (4mbit): IC4406 CY62147EV30LL45BVA I readed the 93c56 chip and here is the zip file. Inside the zip file there is an e2p and bin file. I hope that someone of you guys can find the code there Hotfile.com: One click file hosting: pioneer.zip There was pretty difficult to solder such smd chip. Last edited by melvin v/d berg; 10-15-2011 at 20:47. |
10-16-2011, 14:43 | #2 (permalink) |
No Life Poster Join Date: Apr 2007 Location: Reading UK
Posts: 1,949
Member: 493754 Status: Offline Thanks Meter: 629 | welcome good post!!! THX for it so it is a new model , you say pass can be letters and numbers let we see how long it is 4 or 5 letters ,and it is not probably in 93c56 cause i think it will act same if you remove it and power it to work try to read nand flash regards |
The Following User Says Thank You to zlix For This Useful Post: |
10-16-2011, 18:39 | #3 (permalink) |
Junior Member Join Date: Oct 2011 Location: Netherlands, Utrecht
Posts: 5
Member: 1672284 Status: Offline Thanks Meter: 3 | You can enter a password up to 20 characters. In the manual it says it can be 5 to 16 characters. If I disable the power to the 93c56 the radio gives no display anymore. I tried to enter a password. After that I readed the 93c56 again and there is no difference with me previous dump. Maybe the counter is stored somewhere else or maybe there is no counter. I don't know how to read the nand. It is BGA. It is really difficult to trace because I think the PCB is triple sided. Here is an service manual with all the traces and every chip AVIC-X930BT Service Manual (EN).pdf - 4shared.com - document sharing - download It is for the X930BT but is exactly the same for the F930BT every trace is the same. If someone can find how to read this chip I would be very happy. I have an Olimex LPC-H2148 to read some nand chips. There is also an test mode in this radio. For that I need this: "Download GGS1098 from the Service Site". Maybe someone can access the pioneer service site and provide that zip/rar? |
10-16-2011, 19:36 | #4 (permalink) |
Junior Member Join Date: Oct 2011 Location: Netherlands, Utrecht
Posts: 5
Member: 1672284 Status: Offline Thanks Meter: 3 | I found some traces to get to these pins of the nand: CLK CMD DAT0-7 NAND3 (VCC) CCD3_IOON (VCC?) A lot of grounds This nand chip is an e-mmc. How do I read that chip? :S I really think the password is in there. Also all the sofware is in there Maybe it could also be in the flash rom? If I look at the user manual I don't think it is in the flash rom. All other data is there that you can reset from the system menu. The flash rom has also an reset pin. I don't really think the password is in there but maybe someone can tell me that? |
10-16-2011, 20:02 | #5 (permalink) | |
Junior Member Join Date: Mar 2010 Location: breda, holland
Posts: 2
Member: 1262663 Status: Offline Thanks Meter: 1 | pioneer Quote:
code in flash package:BGA i will decode it on my table in 5 minutes. wbr | |
The Following User Says Thank You to oemrepair For This Useful Post: |
10-16-2011, 20:12 | #6 (permalink) |
Junior Member Join Date: Oct 2011 Location: Netherlands, Utrecht
Posts: 5
Member: 1672284 Status: Offline Thanks Meter: 3 | So do I need to read the nand and send the 4gb? http://rere.qmqm.pl/~mirq/JESD84-A44.pdf It seems the password is really in the nand. How do I wire up the nand to the lpc-h2148? And what software do I need? |
10-17-2011, 00:22 | #7 (permalink) |
Junior Member Join Date: Oct 2011 Location: Netherlands, Utrecht
Posts: 5
Member: 1672284 Status: Offline Thanks Meter: 3 | I searched my self blind. The radio didn't even had to open. And yes the key is in the nand. Al I had to do is find this page Condi's HACKMODE v1.4 - DiskRW, GpsGate, TextFiller, RegEditor with .reg files associated! [updated: 13.06.2011] - AVIC411.com On user/system/security/password there is a plain text file with your password |
The Following 3 Users Say Thank You to melvin v/d berg For This Useful Post: |
10-18-2012, 23:33 | #8 (permalink) | |
Junior Member Join Date: Oct 2012
Posts: 1
Member: 1827140 Status: Offline Thanks Meter: 0 | Quote:
| |
06-04-2018, 11:15 | #13 (permalink) |
Junior Member Join Date: Jun 2018
Posts: 1
Member: 2842256 Status: Offline Thanks Meter: 0 | code for pioneer avic f930 bt Hi! Can someone to give me the code for my pioneer avic f930 bt? I was changed my car battery and now audio wanted code. My serial number is KITM035400EU. |
Bookmarks |
| |
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Help: Forgot my 6110 user lock code!! | GByte9 | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 4 | 02-26-2016 14:52 |
PIN1/PIN2 CODE | Jon | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 1 | 12-26-2012 04:40 |
5110 Security Code Help! | cahrisma | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 6 | 07-05-2010 09:04 |
Orange IL, Nokia 5110 GSM codes... | rosso11 | Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L ) | 0 | 11-05-1999 21:38 |
|