Service Forum

sirius110usa · Interesat Joined: 04 Apr 2007 Posts: 18

As I know, We cant unlock tecra m1,m2.m2v as the normal way (e.g.: Over write by the data from the other ROM without password).

Because some Toshiba model use 2 ROM 24x02 independently to compare between each other, or one ROM 24x02 and 01 flash or chipset integrated flash to unlock

I always use the second way, and it’s very efficient, I’m successful at nearly 100% with the model uses 2 ROM like m1, m2, m2v. Of course with a condition that you have to own many of code ROM Toshiba 24x02 else in your hand, not must at the same model with m1, m2, m2v.

Firstly, you read the database from both and write it into the other ROM that enough capacity to store.
Get one of them which have much more database than
open this file by a hexa viewer
hexcomparion is the one I using
open one other file ROM Toshiba in your database.
copy 2 first line in ROM without password and past to same position of the ROM with password
– 2 first line of the ROM with password does not store the comparison data, so it isn’t effect to anything, after that, try until successful. As the normal way it would take you about 6h to unlock this model.

tito2002 · Nou Venit Joined: 17 Jun 2007 Posts: 8

can you share your database?

i have problem with one toshiba

marinescu · Nou Venit Joined: 25 Apr 2008 Posts: 3

hello can anyone help me ???
i got a toshiba tecra a8 whit bios and start up pass
I got the 2 bins but i don't know what to do whit them
I don t know how to decrypt this bins
can anyone help me?
EEPROMs are : 24c08 , 24c02
http://rapidshare.com/files/110234615/tecra_a8_24c02.bin.html
http://rapidshare.com/files/110234664/tecra_lock_24c08.bin.html

Shef · Nou Venit Joined: 04 Jun 2007 Posts: 8

Unfortunately I have here two notebooks which sucks.
1) Toshiba Tecra M2
2)Toshiba satellite pro U200

As far I get onother M2 motherboard (dead by water intrusion) which was supposed to be password cleared.
So I read the flash and programmed it to the locked one. But with no luck.
I had a hard time thinking where could be the password stored as neighter chipset and LPC chip doesen't seems to have a userspace for it.

Your explanation with 2 flashes woud fit. But I don't understand where is the second one.

I hope we can exchange some tricks and we can exchange a lot of .BIN files.

SO here is the bin file for both locked and supposed unlocked Tecra M2.

www.rareshop.org/pass/M2/bios_locked.bin
www.rareshop.org/pass/M2/bios_unlocked.bin

I hope you would have some advice for me.
I was trying to find the security zone myself in hex of these bioses, but as far as it's quite different I couldn't compare them easily.

Thank you,

Shef @ Petr

oarecare · Nou Venit Joined: 16 Mar 2007 Posts: 8

You are looking at the wrong chips. Look for eeproms, not flash chips (usually 8-pin). PM me if needed

sergioems · Interesat Joined: 30 Sep 2007 Posts: 27

i got here 2 toshiba tecra m9. does anyone know if in this laptop is also stored in 24cxx? or in flash chip? also i can read anything needed to help us start making this new tecra

oarecare · Nou Venit Joined: 16 Mar 2007 Posts: 8

should be in eeproms, but it might depend on the bios version. You should compare all dumps.

If you can upload them here, we'll try to suggest some locations...

regards

sergioems · Interesat Joined: 30 Sep 2007 Posts: 27

you want me to upload pictures to help get eprom location?

oarecare · Nou Venit Joined: 16 Mar 2007 Posts: 8

there should be two 8-pin ic's next to the flash memory, having C02 and C08 written on them. The flash could be 40-pin 40fw or 8-pin 25Cxx

If you have probems finding them, attach some pictures

sergioems · Interesat Joined: 30 Sep 2007 Posts: 27

flash is a 25xx. i already read it and will post here.
acording to the 8-pin eprom could not found nothing near memory slot with c02 and co4. i will take a picture and post here

oarecare · Nou Venit Joined: 16 Mar 2007 Posts: 8

Look for msop not soic packages. Also try under (around) the pcmcia slot.

sergioems · Interesat Joined: 30 Sep 2007 Posts: 27

Ok. Now i have found some time and i have taking the pictures i told about.
Like i said i have 2 laptops tecra m9 and i can read all needded in both of them.
Fisrt thing i made is a picture board top and bottom that is on the folowing links:

Top : http://img360.imageshack.us/my.php?image=boardpicturegg4.jpg

bottom: http://img360.imageshack.us/my.php?image=bottomvy1.jpg

After i have taking photo of flash location that is 25xxx but i marked 2 red squares since in one laptop only one 25xxxx but on the other there are tw0 25xxxx

location : http://img206.imageshack.us/my.php?image=flashlocationiq6.jpg

i have also taked a photo under pcmcia slot but could not find any
photo: http://img360.imageshack.us/my.php?image=underpcmciasloteg3.jpg

After i upload the only chip i could find with 2408(from ST) on it but i don t know if is the correct one.

photo: http://img154.imageshack.us/my.php?image=08locationai8.jpg

Now if anyone now what is necessary to read or exact location i can start reading for us to check if we can unlock this new tecra.

tks in advance

victor · S.F. Boss Joined: 07 Mar 2004 Posts: 2581 Location: Staff

That is clearly a 2408 eeprom, usually there are two 24XX eeproms, the larger one has the pass.
_________________
Victor Voinea
ALLservice HQ, Romania.

sergioems · Interesat Joined: 30 Sep 2007 Posts: 27

i could found only one 2408 could not find any else. do you know usualy where is located the other?

tks

sergioems · Interesat Joined: 30 Sep 2007 Posts: 27

found another ST chip marked 402wp. could be this one?