ford lock 13 reset tool

[ubistvo]

Hello
I will open this thread for those who know how to made ford lock 13 reset tool.
I found this schematics on net but I need the hex for PIC.
Some of this schematics is made a murat and DrAudio.
If someone have a HEX or have a another schematic lets put it here.
Thanks

[stefaudio]

Nice post but hex will be problem i seek this from 5 years and no result:(:(:(

[murat332]

reset tool .....

[blacklisted]

you been looking for this i have too

it was posted once buy murat332 some time ago on mobiles forums

and know he post above

save the above as hex

[ubistvo]

OK
I will try
Thank you

[zvasile]

and tell us if it worked

[jcgabbi]

Buy one from RadioChiP (http://www.radiochip.webnode.com/)

It is not expensive and works fine.

[Dacha]

Has anyone tested this reset tool works on which model?

[exer]

Copy line :103800002bc044c043c042c041c040c03fc03ec0c6 to google, you'll see an interesting discussion about this hex.

[RadioChiP]

Yes very intersting.But.....this Avr bootloader Test HEX file. :rolleyes:

[serg2000]

Hi, ford reset tool hex file

[sandocan75]

only FF FF

[zvasile]

only FF FF
open with a hex editor (example Hex Cmp)

[ubistvo]

I will try all posibile combination and no one work.
I program the PIC 16F84A
oscilator type HS
wtd disable
pwr disable
Here is dumps to see but no one work.
I try and from serg2000 but no work, the serg2000 dump have a problem with checksum
but I finaly write to pic.
Maybe it not work with my cass.
It is FORD 5000 RDS 98AP-18K876-BC FORD TI 16bit ? (N760105BFKC106) LOCKED 13.
I conected like pdf say http://etlweb.net.ua/prod_decodtool_fordunlock/files/E_13_REV2.pdf

If somebody know what to do let help...

[exer]

Google says: The dump has a problem. Checksum problem. Pic can not be read,just writing.

[ubistvo]

Google says: The dump has a problem. Checksum problem. Pic can not be read,just writing.

:dontknow::dontknow::dontknow::dontknow:
??????????????

[Danielses]

If somebody know what to do let help...M027999

[juisro]

If somebody know what to do let help...M027999


Hi, your code is 4752

[regmicro]

Bom dia a tudos! Gostaria de montar um lock 13 reset alguem poderia me ajudar? Meu email * Removed Email Address... obrigado.

Enviado de meu GT-I9300 usando Tapatalk

[Johnner]

Hi Reg...Welcome to Kaos...Could you introduce yourself here please,in English : Introduce Yourself (http://www.digital-kaos.co.uk/forums/forumdisplay.php/2-Introduce-Yourself)

[euvasile]

help my download please!
contact **********

[euvasile]

I will try all posibile combination and no one work.
I program the PIC 16F84A
oscilator type HS
wtd disable
pwr disable
Here is dumps to see but no one work.
I try and from serg2000 but no work, the serg2000 dump have a problem with checksum
but I finaly write to pic.
Maybe it not work with my cass.
It is FORD 5000 RDS 98AP-18K876-BC FORD TI 16bit ? (N760105BFKC106) LOCKED 13.
I conected like pdf say http://etlweb.net.ua/prod_decodtool_fordunlock/files/E_13_REV2.pdf

If somebody know what to do let help...

help my download please!
contact *Removed email address...again !!

[Johnner]

Mate,please don't post that address up again...Go and read the rules please.. Forum Rules (http://www.digital-kaos.co.uk/forums/showthread.php/2-Forum-Rules)

[euvasile]

Sorry! What can I do for download
attachments do not speak English

[Car235]

Sorry! What can I do for download
attachments do not speak English

Try logoff and then login again ... clear cookies etc

[euvasile]

Sorry! What can I do for download
attachments do not speak English

4500 rds e.o.n B3 LOW CD serial No M033467
Please code. Thank you!

[shooting]

4500 rds e.o.n B3 LOW CD serial No M033467
Please code. Thank you!

Your code is 0522

wbr

[euvasile]

Thank you!:)

[euvasile]

4500 eon B3 LOW nr M033467
to unlock 13 can use this assembly
works?368314368314

[regmicro]

Obrigado a todos pela ajuda. Eu n?o sei ingl?s por isso estou sem responder as mensagem qu? est? chegando aqui. Estou no trabalho quando eu chegar em casa vou usar um tradutor e responder a tudos, eu quero contribuir com voc?s todos aqui tamb?m no qu? eu poder se DEUS quizer! Obrigado.

Enviado de meu GT-I9300 usando Tapatalk

[PremierD]

You mean .?...........Thank you all for your help. I do not know English so I'm not answering the message what is coming here. I'm at work when I get home I'll use a translator and answer studies, I want to contribute to all of you here too on what I can if God willing! Thank you...

:)

[ficho]

HI,
Reset tool can be figured out in less then 15 min, needed components:


1. Reset Tool (Lock13 ETL or some other)
2. Radio that is Locked and Reset is done via I2C (Ford 3000 ...)
3. Radio that is Lockedand Reset is done via RS485 (or serial direct on mcu, Ford5000...)
4. Logic analyzer
5. sniff unlocking sequence on first & second radio
6. Draw some schematic (pic,avr,arm...) or copy the board you are using.
7. Write your code.


This is much faster then analyzing some hex that you have found or what ever...
I have attached some pcb doc if someone wants to make he's own reset tool hardware (I suggest you to use a microcontroller that has hardware i2c and usart).

Happy Lock 13 unlocking ...


regards ficho

[regmicro]

Boa tarde eu gravei o pic16f84 com esse arquivo .hex mais n?o deu reset no radio ford CDR4600.

Enviado de meu GT-I9300 usando Tapatalk

[Johnner]

Reg mate...c'mon..I've already asked you previously to introduce yourself in English...you've done neither

Come back next month,when you've brushed up on some English..

[XJTAG]

HI,
Reset tool can be figured out in less then 15 min, needed components:


1. Reset Tool (Lock13 ETL or some other)
2. Radio that is Locked and Reset is done via I2C (Ford 3000 ...)
3. Radio that is Lockedand Reset is done via RS485 (or serial direct on mcu, Ford5000...)
4. Logic analyzer
5. sniff unlocking sequence on first & second radio
6. Draw some schematic (pic,avr,arm...) or copy the board you are using.
7. Write your code.


This is much faster then analyzing some hex that you have found or what ever...
I have attached some pcb doc if someone wants to make he's own reset tool hardware (I suggest you to use a microcontroller that has hardware i2c and usart).

Happy Lock 13 unlocking ...


regards ficho

helo ficho

i program pic hardware i2c and usart or software, by C and Assembler language this is no problem for me and more i have two logic analiser "hp agilen 16601a" and "E9340a" but i no have rest-tool for sniff unlocking sequence, i find the ID of st92xxx and i communic with it but i no have the CMD and ADDRESS for reset counter in internal eeprom if you have the trames for i2c or (rs485/sr232) of this sequence ??

[ficho]

HI,
I have analyzed the unlocking sequence long ago, I have to find my asm code I have written for at90s2313, but you can check this link (not sure if it will work):
http://www.digital-kaos.co.uk/forums/attachment.php?attachmentid=368620&d=1460144748
unlocking sequence for I2C was something like $D0 $xx $xx, $D0 $xx $xx
rs485, I don't remember the data at all but usart baud was 9600 I think so but not 100% sure, this has to be checked (1 start bit 9 data bits 2 stop bits no parity)
regards ficho

[XJTAG]

thank you ficho and yes the 0xD0 is the good ID for I2C device (hc05xx/st92xx) i have tested of 0x00 to 0x0F for the 4 high bits (11010000) to find this ID
1101 = id of devace (0xD)
000 = no used or only for high address
0 = used for write or 1 to read (send/receive)

for the code10-13.hex i have d?sassemble file and try to find all frame, but i no find the registre 0x36 in the datasheet of pic16f876! ,
check in this picter please 369086

[XJTAG]

helo ficho

i find the registre 0x36 in other d?sassembler ,the 0x36 is "Ram variable registre "
369093

but Why uses the analog to digital converter in this rset-tool code ?????
369094
because this tool its no need analog to digital converter

thanks in advance for all reply

[ficho]

HI,
If the soft was written in C i suppose, sometime compilers set up things at start to somedefault value,never mind that pay attention to i2c pins and usart send data...
you are on the right track ...

regards ficho

[miga]

please hex for tool13 thenx....................................

[gabiz_ro]

Any news about I2C sequence?

[marcoane]

Hi,

radiochip you purchase from? is it reliable?Because I have to put money in advance ...

Thanks
Alin
radiochip you purchase from? is it reliable?Because I have to put money in advance ...

[johnlag]

Very usefull information. Thx!!

[Sanpavl]

Hi, can I unlock the radio from ford (lock 13) without the programmer?

[shooting]

Hi, can I unlock the radio from ford (lock 13) without the programmer?

No, either post dumps or use tool, both need a tool of some sort

wbr

[gu3ss]

No, either post dumps or use tool, both need a tool of some sort

wbr


What do you mean by dumps... Anyone out here , willing to tell a newbie how to make a reset tool for his own? What microcomponents to buy and so on, i have some minimal knowledge about them but not so big, futher more even i know radiochip tool would work, i don't have 55euros to buy it and cuz is sent from polan i don't trust with the shipping

[shooting]

What do you mean by dumps... Anyone out here , willing to tell a newbie how to make a reset tool for his own? What microcomponents to buy and so on, i have some minimal knowledge about them but not so big, futher more even i know radiochip tool would work, i don't have 55euros to buy it and cuz is sent from polan i don't trust with the shipping

If you don't have the tools then to buy them will cost more than 55euros,
maybe best take it to your local decoder to solve

wbr

[gu3ss]

If you don't have the tools then to buy them will cost more than 55euros,
maybe best take it to your local decoder to solve

wbr


Bad part, in romania i didn't find one in my city, and i don't trust to send them in another city... and i would like to make one for myself.. microprocessor are easy to find... but the knowledge to build the whole set is not for everyone and i would like to learn

[monir99]

:2in1:yyyyyy

[marcosjdm]

Hi. I also want to build the unlocking tool.
I have a lock13 with micro: 760138BFKC002, which looks like TEXAS I. No tools is able to read this MCU CRYPTO.
Any progress?
Thank you

[xdjey]

What new with device for unlock caraudio ford 3000,4000,5000 series???

[opaladoeverton]

HI,
Reset tool can be figured out in less then 15 min, needed components:


1. Reset Tool (Lock13 ETL or some other)
2. Radio that is Locked and Reset is done via I2C (Ford 3000 ...)
3. Radio that is Lockedand Reset is done via RS485 (or serial direct on mcu, Ford5000...)
4. Logic analyzer
5. sniff unlocking sequence on first & second radio
6. Draw some schematic (pic,avr,arm...) or copy the board you are using.
7. Write your code.


This is much faster then analyzing some hex that you have found or what ever...
I have attached some pcb doc if someone wants to make he's own reset tool hardware (I suggest you to use a microcontroller that has hardware i2c and usart).

Happy Lock 13 unlocking ...


regards ficho

hello plug.
You attach a photo of the reset lock 13 pcb but the top part of the pcb is missing and which electronic components we should use, do you have information about the rest of the missing parts?

[serik2]

Hello. I’m also following this topic, I want to put together a diagram for myself