NefMoto

Technical => Flashing and Chipping => Topic started by: 666tdi on February 12, 2022, 02:22:16 PM



Title: EDC16U1 eeprom reading CAN.
Post by: 666tdi on February 12, 2022, 02:22:16 PM
Hi,

I've got 03G906016JK ECU for testing purposes, I'm able to log CAN traffic during flash read, in that log I'm able see seed key response and then reading data from flash.
Reading eeprom can be done with the same TP2.0 commands and in the same security mode or it is completely different?
Its SK algo for this (old) ECU known?

I know that there are factory made tools for that purpose but this is more like an educational project.

Thanks.


Title: Re: EDC16U1 eeprom reading CAN.
Post by: H2Deetoo on February 13, 2022, 03:43:51 PM
Hi,


From my experience the whole address range can be read using the same seed/key algo and same commands.
However I haven't a complete eeprom dumped mapped in the address range, only parts scattered in different areas.

So I'm interested in this as well, to find out if there is an easy way to read the whole eeprom by OBD.
Feel free to contact me by PM.


Rgs H2Deetoo