RCD 310 Blaupunkt – How I found the pin code

You need a 95128 memory programmer, a power supply, soldering tools, a windows computer, a hex editor and time.

  • Original dump from 95128 eeprom

  • Modify the original dump with FF from AE0 to CD0 and write it back to 95128 eeprom

  • Start the unit and wait a few seconds. Turn it off. Read again 95128 eeprom and see what value you have at address: B50 and B54

  • Make XOR operations: 1 XOR 1 = 0 (red highlight) and 2 XOR 1 = 3 (blue highlight). The code first 2 digits are 03XX

  • I made a mistake in the video but I think you got the point

  • Now you must write back the original dump to 95128 eeprom and use brute force method to find the last 2 digits. Every 2 attempts you must reset the counter by writeing again the original dump to 95128 eeprom or reset it with carprog.

Liked it? Take a second to support rohdvest on Patreon!
Become a patron at Patreon!
Spread the love