empty eeprom memory ? - GSM-Forum

spektrometer · 04-01-2010, 23:38

Hi all

I bought a vw beta blaupunkt radio from auto dismantlers, however, without code :-) .
I read, for this kind of radio, there is no way compute the security code from serial number, the only possibility is hacking eeprom.
On this site -= CODEDRADIO =- Base navigation is shown, the presence of 2 eeprom chips for my radio (there are 95160 and M92256, respectively).
But reality is different, in my radio is instead of 95160 eeprom one another chip - 25160. The other is the same - M92256.
I builded light version of pony prog (builded for only 25160 chip and without external source circuit).
Is wery interesting, this chip (25160) was empty. Full of zeros.

Where is saved code of my radio ? In M92256 ?

Thank you

gsmfriend · 04-02-2010, 01:54

hello,

in VW BETA code is stored in SPI EEPROM 25160 and it's the same as 95160 (25160 = 95160)
but verify your ponyprog circuit ,there is a problem in it , reading "0" means that EEprom read operation
is not correct, you have to rectify your circuit and try read the Eeprom again.

good luck.

M1DJF · 04-02-2010, 12:02

chances are you have not built the programmer 100% correct or the connections are not right.

Quote:

Originally Posted by spektrometer

Hi all

I bought a vw beta blaupunkt radio from auto dismantlers, however, without code :-) .
I read, for this kind of radio, there is no way compute the security code from serial number, the only possibility is hacking eeprom.
On this site -= CODEDRADIO =- Base navigation is shown, the presence of 2 eeprom chips for my radio (there are 95160 and M92256, respectively).
But reality is different, in my radio is instead of 95160 eeprom one another chip - 25160. The other is the same - M92256.
I builded light version of pony prog (builded for only 25160 chip and without external source circuit).
Is wery interesting, this chip (25160) was empty. Full of zeros.

Where is saved code of my radio ? In M92256 ?

Thank you

spektrometer · 04-02-2010, 20:58

Thank you, I`ll check my programmer circuit in the first line.

daz7773 · 04-03-2010, 13:37

Quote:

Originally Posted by spektrometer

Thank you, I`ll check my programmer circuit in the first line.

i find both my ponyprog programmers unreliable for spi -giving blank read but works for everything else (i2c ,microwire,pic)
i now use elnec seeprog for spi 100% reads every time.

spektrometer · 04-05-2010, 21:29

No defect in programmer circuit were found :-( . Experiment shows the same results - memory full of zeros :-( I`ll look for another smart programmer.

zlix · 04-05-2010, 21:47

and you tried to program then any data in eeprom 25160 or 95160 what ever you have there and verify it if it is wrote correctly all good and radio still no powers on ???? I don't think so

take your pony and add 100k potentiometer on 5v line to raise it on about 2.5v supply it need to be 2,7v before connect eeprom do calibration of pony and then attach and try to read ,might be something jump out from that eeprom

skyline-GTR · 04-06-2010, 00:36

yo zlix did u mean 100k potentiometer put on VCC line ???cuz i bought orange2 just for spi eproms

zlix · 04-06-2010, 12:38

good one then use orange don't use pony and potentiometer

spektrometer · 05-30-2010, 19:43

My friend read my eeprom and dump from my eeprom is here. Where can I find the security code ?

siti · 05-30-2010, 20:44

Quote:

Originally Posted by spektrometer

My friend read my eeprom and dump from my eeprom is here. Where can I find the security code ?

------your code xxx9

-----

freewillover · 05-30-2010, 20:49

what about depositefile or try another uploading site.

spektrometer · 05-31-2010, 21:29

I uploaded dump from memory onto my ftp server. dump

I tried code 1029, but code is wrong :-( . After 2 attemps, radio switched to SAFE 2 mode and I have to wait for 1 hour. Can anyone help me ? :-( :-( :-(

**shooting@orange** · 05-31-2010, 21:45

Quote:

Originally Posted by spektrometer

I uploaded dump from memory onto my ftp server. dump

I tried code 1029, but code is wrong :-( . After 2 attemps, radio switched to SAFE 2 mode and I have to wait for 1 hour. Can anyone help me ? :-( :-( :-(

Save it as a bin file and upload it here....

zlix · 05-31-2010, 21:55

ok ok ,wait that 1 hour and try my code in pm

04-01-2010, 23:38	#1 (permalink)
spektrometer Junior Member Join Date: Apr 2010 Location: Slovak republic Age: 42 Posts: 7 Member: 1275281 Status: Offline Thanks Meter: 0	empty eeprom memory ? Hi all I bought a vw beta blaupunkt radio from auto dismantlers, however, without code :-) . I read, for this kind of radio, there is no way compute the security code from serial number, the only possibility is hacking eeprom. On this site -= CODEDRADIO =- Base navigation is shown, the presence of 2 eeprom chips for my radio (there are 95160 and M92256, respectively). But reality is different, in my radio is instead of 95160 eeprom one another chip - 25160. The other is the same - M92256. I builded light version of pony prog (builded for only 25160 chip and without external source circuit). Is wery interesting, this chip (25160) was empty. Full of zeros. Where is saved code of my radio ? In M92256 ? Thank you

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
EEPROM memory map	papudrun	x1x to x45/x50	0	08-06-2003 01:00
PonyProg for read most used EEprom memory directly from circuit.	florinmar	Hardware Repair by brands	1	06-09-2003 14:44
i need info about eeprom memory map in old ericsson sh 888 phones	nuno_felicio	GSM Programming & Reverse Engineering	0	06-24-2002 05:55
Nokia 5110 v5.29 with EMPTY eeprom	roman220	Nokia Legacy Phones ( DCT-1 ,2 ,3 ,L )	1	11-05-2001 15:09
Eeprom memory map T1x	Broucek	Old Ericsson Phones & Sony Phones	1	05-31-2000 11:50

04-02-2010, 01:54	#2 (permalink)
gsmfriend Registered User Join Date: Aug 2003 Location: ALGERIA ,DZ Posts: 825 Member: 37521 Status: Offline Thanks Meter: 50	hello, in VW BETA code is stored in SPI EEPROM 25160 and it's the same as 95160 (25160 = 95160) but verify your ponyprog circuit ,there is a problem in it , reading "0" means that EEprom read operation is not correct, you have to rectify your circuit and try read the Eeprom again. good luck.

04-02-2010, 20:58	#4 (permalink)
spektrometer Junior Member Join Date: Apr 2010 Location: Slovak republic Age: 42 Posts: 7 Member: 1275281 Status: Offline Thanks Meter: 0	Thank you, I`ll check my programmer circuit in the first line.

04-05-2010, 21:29	#6 (permalink)
spektrometer Junior Member Join Date: Apr 2010 Location: Slovak republic Age: 42 Posts: 7 Member: 1275281 Status: Offline Thanks Meter: 0	No defect in programmer circuit were found :-( . Experiment shows the same results - memory full of zeros :-( I`ll look for another smart programmer.

04-05-2010, 21:47	#7 (permalink)
zlix No Life Poster Join Date: Apr 2007 Location: Reading UK Posts: 1,949 Member: 493754 Status: Offline Thanks Meter: 629	and you tried to program then any data in eeprom 25160 or 95160 what ever you have there and verify it if it is wrote correctly all good and radio still no powers on ???? I don't think so take your pony and add 100k potentiometer on 5v line to raise it on about 2.5v supply it need to be 2,7v before connect eeprom do calibration of pony and then attach and try to read ,might be something jump out from that eeprom

04-06-2010, 00:36	#8 (permalink)
skyline-GTR Freak Poster Join Date: Jan 2009 Location: Bosanska Krupa / BiH Posts: 136 Member: 939775 Status: Offline Thanks Meter: 52	yo zlix did u mean 100k potentiometer put on VCC line ???cuz i bought orange2 just for spi eproms

04-06-2010, 12:38	#9 (permalink)
zlix No Life Poster Join Date: Apr 2007 Location: Reading UK Posts: 1,949 Member: 493754 Status: Offline Thanks Meter: 629	good one then use orange don't use pony and potentiometer

05-30-2010, 19:43	#10 (permalink)
spektrometer Junior Member Join Date: Apr 2010 Location: Slovak republic Age: 42 Posts: 7 Member: 1275281 Status: Offline Thanks Meter: 0	My friend read my eeprom and dump from my eeprom is here. Where can I find the security code ?

05-30-2010, 20:49	#12 (permalink)
freewillover No Life Poster Join Date: Nov 2008 Location: Africa Posts: 2,624 Member: 909783 Status: Offline Thanks Meter: 829	what about depositefile or try another uploading site.

05-31-2010, 21:29	#13 (permalink)
spektrometer Junior Member Join Date: Apr 2010 Location: Slovak republic Age: 42 Posts: 7 Member: 1275281 Status: Offline Thanks Meter: 0	I uploaded dump from memory onto my ftp server. dump I tried code 1029, but code is wrong :-( . After 2 attemps, radio switched to SAFE 2 mode and I have to wait for 1 hour. Can anyone help me ? :-( :-( :-(

05-31-2010, 21:55	#15 (permalink)
zlix No Life Poster Join Date: Apr 2007 Location: Reading UK Posts: 1,949 Member: 493754 Status: Offline Thanks Meter: 629	ok ok ,wait that 1 hour and try my code in pm