Autoradio "BLAUPUNKT GAMMA II (M327) VWZ1Z3V3125200"
Processor - 259A (ceramics)
On it - 3 parts hiden under compound
(See picture (only lower part is shown))
Upper part - probably DAC
Middle - ALU
Lower - some logic part + EEPROM
Pins:
1 - +9v (ADC?)       
10 - GND            34,35 - X osc
11 - GND            33 - +5v 
18 - CS/DATA        31 - reset (inv)
19 - CLOCK          27...30 - keyboard
20 - +5v (standby)  23...25 - keyboard
 Ŀ
                                    DATA line is hiden on the ceramic plate
                                    under the paint.
                                    At start processor read the data from
             Ŀ          EEPROM at addreses:
            Ĵ1         40        3Eh - AA55h
                                  24h - A500h
                                  AA55h - ID byte ?
                                  A500h - error counter,
                                  (increase by 1 for every wrong attempt)
                                  Code is reading from EEPROM only when
             data              you enter the code from keypad 
                             addres 00h - 0001 0000 0000 0000
      cs    Ĵ18                              1    0    0    0
      clock Ĵ19              (code is "1000")
            Ĵ20        21        
                     
                                   
                                   
                                   
                                   
                                   
                                   
 

Bus type - MICROWIRE with extended addres (like 93c56b)
and one more CLOCK before OPCODE (like 7002MN10).
 
So, when you enter the (wrong) code from keypad,
on the bus you will see:
 0110 00000000 0001000000000000
                 
                     Data (1000h) 
         Addres  (00h)
    OPCODE 06h (READ) 
(at addres 00h reading 1000h - code)

Then:
 0110 00100100 1010010100000100
    
                     Data (A504h)
         Addres (24h)
    OPCODE 06h (READ)
(at addres 24h reading A504h - error counter) 
 A504h - 4 wrong attempts

Then:
 0100 11000000
   
         Addres
    OPCODE 04h (EWEN)

Then:
 0101 00100100 1010010100000101
    
                     Data (A505h)
         Addres (24h)
    OPCODE 05h (WRITE)
(at addres 24h writing A505h - error counter increment by 1)
(after 6 wrong attempt - radio is blocked, on the LCD appear "6 SAFE"
Programmer for this type of MCU is not ready yet.
