Help about read Nec RCD310 0KN035186AN BOSCH

[efefrkan]

Hello dears

I am new here

I have a rcd310 it has nec 3358GJ. I tried to read it with a ft232 and pl2303 usb uart converter. I tried couple of wiring diagram.

Rx To tx
Tx to Rx
PDX to mode pin (5volt for read mode)
reset pin to gnd with a push button.

I give 12v to +bat and code pin
I give GND for 12v and For usb uart converter


I wired nec directly or wired from bottom side. I give exact 5 volt to mode pin or I connect 12k resistor +12v to mode pin.

I tried to swap rx tx wires. But No succes I cant read

Software gives INIT failed error 1

How could I solve this problem ? I cant read nec


Thank you

[dvb_gsm]

send a picture of the label

0KN035186AN this model no longer exists

[RadioChiP]

Try to read win XP

[efefrkan]

...........

[efefrkan]

Thank you for answers.

Here my configuretion

Black cable goes to TTL 5v
Right side blue cable goes(RX) Usb-TTL Tx pin
Orange cable goes to (TX) USb-TTL Rx pin
Green cable Goes to usb-ttl gnd
Pink cable switch gnd
Left blue goes to switch

+12v goes to b+ and code
GND connected to chassis

I dont know its windows version issue. I will try xp

Edit: I tried xp No succes

Thank you

952395952396952397952400952401

[benyunes]

its work with me +reset sw

[efefrkan]

So Whats wrong in my configuratoin?

[dvb_gsm]

- the next time you have to check the model data ( 1K0 035 186AN no 0K0 035 186AN)
- you have to solder a 12K resistor------ like the picture
- you must have a push button and solder the wires (reset) ------like the picture
- solder the rx-tx wires ------like the picture
-run the software to read the NEC
- supply your car radio with 12v
- press button once for 1 sec
- read the NEC

[efefrkan]

Thank you for your answer I am so sorry Thats my bad. I will check double time everythins after that :)

But. I did your schematic but I cant read nec I dont understand. I will try today and I will share my configuration again.

By the way I have other eeprom dump if it enough to find pasword.

[shooting]

Thank you for your answer I am so sorry Thats my bad. I will check double time everythins after that :)

But. I did your schematic but I cant read nec I dont understand. I will try today and I will share my configuration again.

By the way I have other eeprom dump if it enough to find pasword.

This is not enough for code, you also need NEC processor dump



wbr

[dvb_gsm]

Merci pour votre réponse, je suis vraiment désolé, c'est ma faute. Je vérifierai tout le temps double après ça :)

Mais. J'ai fait votre schéma mais je ne peux pas lire nec je ne comprends pas. Je vais essayer aujourd'hui et je partagerai à nouveau ma configuration.

Au fait, j'ai d'autres vidages eeprom si cela suffit pour trouver le mot de passe.

​change the RX-TX wires

Sory Wrong GND

[efefrkan]

Hello again me

I tried everythnig.

I swap rx-tx hundred of times
I tried a few usb-serial converter.
Reset is ok working If I dont connect to flmd0 to high and if I give a gnd to reset yes radio is resetting so its working.
I tried to connect FLMD0 to external 4-5 volts or connected to 12v with a 12k resistor I check the v850 datasheet yes its true. For programming I should pull the flmd0 to high OK I did.
Gnd is okay
NO NO NO I cant read I will go crazy.
I read other eeprom in a few seconds but this nec I cant.

I am an engineer not a noob or newbe.

But I dont understand Why not.

Datasheet says if read prohibition is enabled then yes I cant read But are they doing this prohibition randomly. Lots of people can read this damn chip. Why I am not

Really I will give 220ac to this radio and I take my tea and watch how it is burning..

If it is possible to find first 2 digit of pasword maybe I can do bruthforce but this time I have to wait safe code 2.

Is there a way to bypass code 2 waiting? I saw some tutorials to find first 2 digit from eeprom dump. For second 2 digit I have only 100 posibility.

Another posibility is SPI I saw in datasheet SPI can be used for programming.

[RadioChiP]

Yes you can try first two digit operation...You need icsp programming with soic8 clip + if your programmer have only counter programming option easy decode you radio (example Upausb)
Do not give up

[efefrkan]

Yes you can try first two digit operation...You need icsp programming with soic8 clip + if your programmer have only counter programming option easy decode you radio (example Upausb)
Do not give up
If it is possible Could you explain it? I have tl866ii :) I have already read radio eeprom (95128w) with this tl866ii. What should I do after that.
Also we have code 2 problem.

952981

[RadioChiP]

First connect radio power supply power on wait 1 or 2 hour wait display "SAFE"
Second power supply off read eeprom upload
dump here

[efefrkan]

Okay thank you. I will leave radio opened now. Now its safe code 2. I will dump here after a few hour.

[dvb_gsm]

Hi..

Does the software give you the USB port number?

[efefrkan]

Hello

Here my dumps

Original one
Mod one
And read after mod

Thank you.

[efefrkan]

Hi..

Does the software give you the USB port number?

Helllo

If you mean usb serial com port yes I set it up for correct com port

[efefrkan]

I tried 0800-0899 not worked

When I flash modded bin file. Radio not openin only one time flashes the screen backlite. But its changing b50 adress.

orginal bin
AE0 ----- AE1
B1 ------ D1


After mod read

B50 ------ B54
B1 ------ 59


After Some maths. First 2 digit come 08XX but not working.

[Decode Ghost]

I tried 0800-0899 not worked

When I flash modded bin file. Radio not openin only one time flashes the screen backlite. But its changing b50 adress.

orginal bin
AE0 ----- AE1
B1 ------ D1


After mod read

B50 ------ B54
B1 ------ 59


After Some maths. First 2 digit come 08XX but not working.

while my friend is calculating If 8 comes out, calculate as 9,08XX not , 0900....99 try code range

[efefrkan]

HELLO DEAR FRIENDS

SUCCESSSS!!!! 0934 works.:dancing:


Thank you all for spending time