Tlemcen Car electronics

Tlemcen Car electronics (https://www.tlemcen-electronic.com/forum/index.php)
-   MBStar, Xentry, DAS (https://www.tlemcen-electronic.com/forum/forumdisplay.php?f=97)
-   -   SDConnect unlock dump!!! 100% working solution. (https://www.tlemcen-electronic.com/forum/showthread.php?t=38877)

badik 22/03/2015 08h32

SDConnect unlock dump!!! 100% working solution.
 
3 pièce(s) jointe(s)
This is a dump read out from PIC16LF88 chip of my own SDConnect C4 device (4-5 years old). It's 100% working.
I know it exactly because I've succesfully unlocked 3 units for last 2 days using it. Each one works fine.
You don't need to buy a new one PIC16FL88. You just have to program chip from your own device.
After that when you run your SDconnect you will probably see that serial number, OS version of your device are changed into zeroes "0000".
Don't worry. Just change your C4 to factory state using buttons near by LCD (no need to explain "How to..." because it's quite clear). After rebooting you'll see ****** SN, OS version and so on.
Also you can change serial number of your device. 24c02 contains it. After changing number just run "factory settings" function...other way it will not change. After reboot you'll probably see (on lcd of your device) your SN looks like "the number you've programmed into chip +1"... I mean 10001 inspite of 10000 for example and so on, but in SDNC tool kit you'll see the real SN (10000), and after succesfull reconfiguring your device you'll see the right number on LCD of your C4.
I was using cheap ssop28 (0.65mm step) adapter and Pickit3 programmer to read/write PIC16lf88. This scheme made for Pickit3 OEM socket(ICSP).
Also I've got dumps of both flashes 29f016 and PIC18lf8680 if somebody need it.
Archive is protected. Password by PM.

badik 22/03/2015 08h47

3 pièce(s) jointe(s)
Here are dumps of both flash memories 29f016. Finally I've found them. In the picture below you can see marks A & B made with pencil and dumps in archive are also named according to signs in the picture.
One of archives (probably - device1) contains dumps from device which didn't support command CE_flash_loeschen and the other one ( it seems device2) contains dums from working SDConnect.
I read them both using Triton 5.7 programmer with hand-made adapter for 8-bit flash memories (29XXXX).
If you try to read-write them using TL866/wizardprog/willem...then don't waste your time. These programmers won't dothis job. But it was few years ago, so probably something changed.

badik 22/03/2015 08h50

1 pièce(s) jointe(s)
24c02 dump of cloned device.

bibo3002 29/07/2015 13h24

Merci pour cette info .... c vraiment utile ... je vais testé

Aleksey_cm 24/11/2018 09h30

does this lf88 dump allow changing s/n via eeprom?

chongzii 20/12/2018 12h43

Comment télécharger des fichiers

---------- Post added at 13h43 ---------- Previous post was at 13h36 ----------

Как скачивать файлы

Doux 21/06/2022 06h22

Grand merci pour votre aide


Fuseau horaire GMT +1. Il est actuellement 14h41.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Version française #23 par l'association vBulletin francophone
Tlemcen-electronic © All right reserved