With that out of the way...
First thing to do is to take the unit off of the car. It is on the right side of the car in the cabin, behind a piece of trim next to the passengers (LHD) or drivers (RHD) right foot. It is held by two M10 nuts, you will need a deep socket to get them off.
Disassembly of the unit is fairly straightforward. There are four tabs on the plastic housing. Carefully bend them away one by one (just a bit, easy to break) and slide the two halves open.
A picture of the tabs:
After you got the board out, the chip will be located on the lower right side, by the big round component that is on a 90 degree board next to it.
It's a SOIC-8 93LC46B, this needs to be removed from the board. The entire board is dipped in lacquer. My original board had a light dip, the one TheBoy sent me, had a real heavy dip, which makes it annoying as hell to get it off. Before removing, note the orientation.
Here is a picture of the board with the chip removed:
Then you just stick it into a programmer. If you have a SOIC-8 adapter, well, congratulations.
I did not, so that meant soldering on 6 wires (2 pins are NC on it).
Here is what it looked like in my programmer:
And finally, read the chip.
Here is the original dump from my unit:
And here is the dump from the unit that TheBoy sent me:
Now, TheBoy told me that the security code for that unit is 0296.
As you can see the last two bytes in the dump in hexadecimal are 02 96:
And that actually is the security code right there. Ripe for the picking.
I went to my car, entered the last two bytes out of my unit (0858), and it logged me right in. Mystery solved and key coded.
Thank you TheBoy for sending me the unit. I must add that he did not take any payment for it, not even for the shipping cost.
Walking up to the car and being able to pop the trunk with the button and lock/unlock remotely after all this time feels so damn good...
Author
Topic: Remote key coding (Read 14971 times)