Vehicle Forensics UP-828 Chip-Off Kit

A matched set for examiners who need to read flash taken off a car stereo, head unit or telematics board. The UP-828P programmer sits at the centre. The sockets around it cover the TSOP, SOIC and BGA packages that show up again and again on vehicle boards. Buy the programmer, then add only the adapters your casework actually uses.

This page is written for people who have trained on Berla iVe, and for other vehicle examiners who import a raw chip image into their own analysis software. FoneFunShop is not part of Berla, and Berla has not endorsed, approved or supplied this set. iVe is Berla's product. We sell the reader and the sockets.

What you are buying

  • UP-828P universal programmer. Reads the chip once it is off the board and saves a plain binary image. Adapters are not in the box.
  • UP-828P sockets only. The UP-828P replaced the older UP-828, and the old adapters do not fit. Look for the "P" at the end of the adapter name.
  • Each adapter is a separate product, so a lab can start with the two or three packages it sees most and add the rest later.

Vehicle sockets we list

These are the UP-828P adapters we stock for the packages used in vehicle chip-off. Stock moves. If a socket shows as unavailable, it is normally a short lead time rather than a different part.

  • TSOP48P for 48-pin NAND of the kind fitted in older head units, including parts seen in Ford SYNC generation 1 and Chrysler Uconnect boards.
  • TSOP56 for 56-pin parallel NOR, including the Spansion NOR used in some GM OnStar telematics modules.
  • SOIC16WP for wide-body 16-pin serial flash, including boot flash of the kind used in the Mazda Connect head unit.
  • SOIC8P for 8-pin serial flash on telematics and controller boards.
  • EBGA64P for 64-ball BGA flash.
  • FBGA137P for 137-ball BGA.
  • VBGA162NP for 162-ball BGA memory.
  • VBGA169P for 169-ball eMMC and iNAND in a 12 x 16 mm body, including parts found in Uconnect head units. Phone and tablet eMMC in the same body also fits.
  • VBGA153P for 153-ball eMMC in an 11.5 x 13 mm body, including parts documented in Hyundai, Kia and Tesla head units. A 153-ball chip in a smaller body needs a different socket.
  • VBGA221P for 221-ball eMCP.

Sockets we are adding

Two vehicle packages are not on the site yet, and we are adding them: BGA63 NAND, often used in navigation memory, and BGA100 eMMC in the 14 x 18 mm body used in several head units. Email us if a job needs one of those before the listing is up. Further sockets under review are BGA48, BGA149, TSOP48A and TSOP56B.

How this fits a chip-off job

  • Read the marking on the memory, not the brand of the car, and pick the socket that matches that package and body size.
  • Confirm the part is supported by the UP-828P software before the chip comes off the board.
  • After removal, clean or reball the chip so every ball or pin meets the socket. The programmer flags poor contact before the read.
  • Save the full image, including eMMC boot partitions where the part has them, and record a hash.
  • Import that raw file into the vehicle forensic software you are licensed to use. Berla iVe is one program that can take a binary image from a chip reader. We do not supply iVe.

The same programmer also reads eMMC, eMCP and NAND from phones and tablets. Those sockets are listed with the UP-828P, not all of them belong in a vehicle kit.

For a longer explanation of when chip-off is the right route on a car stereo, read Chip-off for car stereos and IVI: where the UP-828P fits.

Before you order

  • Intended for lawful forensic, recovery and engineering work by people who are allowed to examine the unit.
  • Match the chip. A correct car and the wrong body size will not read.
  • Programmer and adapter software details are included with the order. We do not publish a download link here.
  • UP-828P adapters are sold separately. Typical lead time on adapters is 7 days when they are not on the shelf.