ALLservice Service Forum
support board, PC repair, unlocking solutions
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

600e EEPROM dumped but can't find password

 
Post new topic   Reply to topic    Service Forum Forum Index -> IBM/Lenovo ThinkPad Password Help Center (EN)
View previous topic :: View next topic  
Author Message
Mister_Og
Nou Venit


Joined: 06 Oct 2009
Posts: 5

PostPosted: Tue Oct 06, 2009 11:54 pm    Post subject: 600e EEPROM dumped but can't find password Reply with quote

Hi, I've built the simple circuit and for zeners I used 1N5231B and not C5V1.
I read the EEPROM and everything was OK, I got a 1KB file.

but when I look at 0x330 I see only 0xFF, here's an image:



Please help me Crying or Very sad
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2581
Location: Staff

PostPosted: Wed Oct 07, 2009 1:37 am    Post subject: Reply with quote

Hi,

Run patcher.exe prior reading, seems like the block is read protected.
>patcher
>r24rf08 dump.bin
_________________
Victor Voinea
ALLservice HQ, Romania.
Back to top
View user's profile Send private message
Mister_Og
Nou Venit


Joined: 06 Oct 2009
Posts: 5

PostPosted: Wed Oct 07, 2009 7:13 am    Post subject: Reply with quote

victor wrote:
Hi,

Run patcher.exe prior reading, seems like the block is read protected.
>patcher
>r24rf08 dump.bin


Hi Victor, thank you for the quick reply.

I forgot to say that I already tried to run the patcher prior to the reader, the patcher said that patching was successful but I get exactly the same dump file (same CRC32).

By the way, my Atmel chip has 14 pins. If you need any more information, please ask.
Back to top
View user's profile Send private message
Mister_Og
Nou Venit


Joined: 06 Oct 2009
Posts: 5

PostPosted: Wed Oct 07, 2009 9:53 am    Post subject: Reply with quote

Here is a picture of my wiring, red is SDA, yellow is SCL (ground is connected elsewhere) :



I tried to read the EEPROM with another computer - a Pentium 166, got the same file (same CRC32). Again, with or without patcher
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2581
Location: Staff

PostPosted: Wed Oct 07, 2009 10:41 am    Post subject: Reply with quote

Then I can only assume that this is the real content and somebody tried a wrong program to FF the eeprom. I've seen this a few times.
The laptop has CRC errors of course.

We can fix that but W24RF08 license is required.
_________________
Victor Voinea
ALLservice HQ, Romania.
Back to top
View user's profile Send private message
Mister_Og
Nou Venit


Joined: 06 Oct 2009
Posts: 5

PostPosted: Wed Oct 07, 2009 11:27 am    Post subject: Reply with quote

Success!!

I found the problem, I will explain soon.
Back to top
View user's profile Send private message
Mister_Og
Nou Venit


Joined: 06 Oct 2009
Posts: 5

PostPosted: Wed Oct 07, 2009 12:28 pm    Post subject: Reply with quote

OK, up untill now I only read the AT24RF08BT when I got to this screen:



Because I wanted to wait until all activity stops.

But now I tried again but this time I read the EEPROM while in the password screen, I.E:



And I saw I got a different CRC32 so I looked at that file and presto! Got the password.

But I was curious so I tried to read the chip twice more to be sure, now I have no doubt - you must do the reading ONLY when you are being asked for a password ( at least on an IBM ThinkPad 600E ).

By the way, the chip is located under the CPU heatsink in 600E, here is a picture:



To read it I had to transfer wires through the battery connector, it's very easy and I'd recommend it for everyone. It looks like this:






Thanks again Victor!
Back to top
View user's profile Send private message
victor
S.F. Boss


Joined: 07 Mar 2004
Posts: 2581
Location: Staff

PostPosted: Wed Oct 07, 2009 4:01 pm    Post subject: Reply with quote

But of course, you have to do that when the laptop is idle, if you do it too soon, the SMBus is busy. Just wait a bit until HDD led is off and the pass prompt is on screen.

Well done and thanks for the nice pics.
_________________
Victor Voinea
ALLservice HQ, Romania.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    Service Forum Forum Index -> IBM/Lenovo ThinkPad Password Help Center (EN) All times are GMT + 2 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



Powered by phpBB © 2001, 2005 phpBB Group