Kenwood DDX4017BT for unlock ?

[Seby_TM]

Hi,

Have some one information how to unlock this unit "Kenwood DDX4017BT"

I found inside 24C16, I add also the dump.

Thanks

[Raimax]

No code. Try to read Nand flash

[Seby_TM]

OK, thanks for info !

[Seby_TM]

No code. Try to read Nand flash

I read flash, and I think is ok, can you check if is ok, and you know the code for this dump ?

Thanks.

[Raimax]

The dump is good. Sorry I can't find the code. Is your serial number 102X1586 ??

[Seby_TM]

The dump is good. Sorry I can't find the code. Is your serial number 102X1586 ??

Yes this is.

[Raimax]

For me, this is a new algorithm

The radio does not block. To start, try easy codes like 0000, 1111, .... 9999, 1234

If not then codes sequentially from 1960 to 2010 ( guess the year of birth)

8014

[Seby_TM]

Thanks, I try it some simple varianats and not worked.
Will take some time in this way for test all posibilty of codes :-)

Can be stored code in MCU M16C R5F3651 ?

Need to solder back the flash and to test codes from 0000 to 9999 :-)

Did you have some dump form flash from unit DDX4018 with know code ?

Thanks

[Raimax]

Can be stored code in MCU M16C R5F3651 ?

I can't confirm this. The location of Kenwwod codes has always been Eeprom or Nand flash



Need to solder back the flash and to test codes from 0000 to 9999 :-)

Why so much at once? :)



Did you have some dump form flash from unit DDX4018 with know code ?

I have this dump but without code

.............................

[audiopoint]

I read flash, and I think is ok, can you check if is ok, and you know the code for this dump ?

Thanks.

Me used this dump for unit broken on update by customer ,unit not ask code with your nand file:numbness: