NefMoto

Technical => Cluster and Immobilizer => Topic started by: voltprinter on August 02, 2022, 08:00:17 PM



Title: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 02, 2022, 08:00:17 PM
Hey guys, I've been reading and messing with my 07 Jetta trying to get the SKC. After unsuccessfully getting a dump on the bench using Kess or MPPS. Since this is all new to me, I bought a spare ECU off ebay with the same P/N to test on before cracking the one in my car open, I suspect I may have damaged it at this point but I'm not positive. I ended up grabbing a CH431 and a chip clip off ebay (can't seem to find my flashcat anywhere). I Used "AsProgrammer" to create the dump.

Just by the looks of it in hex, doesn't seem like there was much data pulled. I'm not finding any tools that look like they are meant fo a 95160, only 95040. Attached is the dump I took, could someone verify if this is a good dump? I did run it though Eepromtool_04 with the force option, and also another program (do not recall what it was now, I want to say maybe it was iProg+) and both claimed the login was 4357. Since I can't get the board to fully power, I have no idea if that's right or not.

Any help would be great. I was also thinking about trying to dump the cluster, it's a 1K0920954R which I believe would have a 24C32 correct?

Edit: ECU is P/N 07K906032S FWIW.


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: R32Dude on August 03, 2022, 05:47:19 AM
Bad read mate. The clip reader I got from ebay needed mods to read the 95160, but worked.  I don't use it any more as I don't like powering the chip independently.

Here are some tips I learned for my ..032CE and ..032KG ecus

1. Use resistor to ground for bootmode. Its much safer and can be left grounded - No need to guess how long to keep it grounded for. Some  ST10s require two resistors or the removal of a  resistor with a soldering iron.

2. Use a blue kkl ft232 cable with the modded for ST10 me7eeprom.exe to read/write the eeprom. I managed to turn the kg into ce using the above method for the eeprom with mpps 13 for the mpc and flash rom.



Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 03, 2022, 06:11:08 AM
I have another ECU I picked up off ebay to test onm yet again... should be here in a day or two. I'll look for my flashcat, I know I have adapters for clipping 8pin tsop.

I did try at one point to use the old KKL cable, I actually bought a new one since I losy mine years ago and never really needed it. Had an issue with my first one, was a ch430 with hacked drivers to make it look like it was FTDI, 2nd one I got is legit FTDI. I wasn't able to communicate at all.

Do you mean, the ST10 moddded with a resistor instead of just shorting to ground? Or there's some mod for the KKL or software?


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: R32Dude on August 03, 2022, 06:45:52 AM
When you get it, send a focussed photo of the pcb both sides.There are different ways to bootmode.
The mod is to the me7eeprom.exe , I posted it here some time ago. Otherwise the original program wont recognise the processor and exits.


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 03, 2022, 07:19:48 AM
It's the same P/N, would that mean it would have to be a family 3 again? Not sure how that all works out. I'll see if I can find your post, was it just modified to handle the 95160?


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: bamofo on August 03, 2022, 12:14:06 PM
If you have a way to put it in boot mode MPPS v21+ has ability to read the EEPROM i beileve and the MPC and ROM.

Someone shared a version of me7eeprom tool that did 95160 a while back on here as well. that works fine too. those ECU's are SOOO much fun. especially when someone tags the MPC file.


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: R32Dude on August 03, 2022, 04:41:53 PM
It's the same P/N, would that mean it would have to be a family 3 again? Not sure how that all works out. I'll see if I can find your post, was it just modified to handle the 95160?

It ill be the same, just watch out if you decide to ground directly

No, the mod was that when it doesnt recognise the processor it will still read/write.
http://nefariousmotorsports.com/forum/index.php?topic=1168.msg140818#msg140818



Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 03, 2022, 09:07:31 PM
If you have a way to put it in boot mode MPPS v21+ has ability to read the EEPROM i beileve and the MPC and ROM.

Someone shared a version of me7eeprom tool that did 95160 a while back on here as well. that works fine too. those ECU's are SOOO much fun. especially when someone tags the MPC file.

That was my very first attempt actually. I started with v18 which wasn't able to detect my ECU correctly, I tried several ways but nothing seemed to work. I then got a copy of v21, which did recognize my ECU, so I benched it and dumped several ways. As I said this is pretty new to me, so I'm not sure what exactly I'm looking for to verify a clean dump. The forums I would post to everyone just said the dump was no good.

I guess I could rar up the various attempts if anyone wanted to look. It's kinda messy, I just tried various ways to dump it. I must have done something right, because the "07K906032S_V21.bin" I loaded up into DTC2 ( https://sw.dunt.at ) which I just paid for today. Seems to have good VAG support, and it correctly loaded up everything.

https://mega.nz/file/uoJTkTjY#LHImFHH2KjWse2GLOe0vHRqM9lLo_XQ5iD4QtdNi6rY

pass: nefmoto2022


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 03, 2022, 09:10:05 PM
It ill be the same, just watch out if you decide to ground directly

No, the mod was that when it doesnt recognise the processor it will still read/write.
http://nefariousmotorsports.com/forum/index.php?topic=1168.msg140818#msg140818



Awesome thank you, What size resistor are you tagging on? Assuming just a 1kohm or so? I may try that tomorrow AM, could be my MPPS cable is bricked from running v21 SW on v18 HW, never got me7eeprom to recognize my ecu.


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: R32Dude on August 03, 2022, 09:53:31 PM
Mine is the 40MHz board, it is most likely different. I had to remove a 6.8k  resistor first, and I use a 8.2k to ground.
If yours worked by grounding only, it is different to mine. In that case start from 10k and work down to 1k. Even 1k is safer than direct grounding.


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 04, 2022, 11:18:55 AM
IIRC Mine is 80mhz


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: bamofo on August 04, 2022, 01:39:29 PM
Awesome thank you, What size resistor are you tagging on? Assuming just a 1kohm or so? I may try that tomorrow AM, could be my MPPS cable is bricked from running v21 SW on v18 HW, never got me7eeprom to recognize my ecu.

So i forgot to mention regardless of what version cable you have if you run V21 or V22 for more then 5-6 flashes it bricks the chip in the flashing clone. 18 is the last rev that doesnt do that... you can use a 22 with v18 software though..


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 04, 2022, 02:16:27 PM
So i forgot to mention regardless of what version cable you have if you run V21 or V22 for more then 5-6 flashes it bricks the chip in the flashing clone. 18 is the last rev that doesnt do that... you can use a 22 with v18 software though..

Do you know if it has to be reads, writes, or both? My first cable quit working, would just say no ecu, which seems to be the error you get when you use it too many times. I never did any writes, only was reading. At least they are cheap enough, I don't mind if I burn through a few of them working on stuff if it's the only option. Maybe next order from Ali I will just grab half a dozen haha.


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 04, 2022, 04:29:30 PM
When you get it, send a focussed photo of the pcb both sides.There are different ways to bootmode.
The mod is to the me7eeprom.exe , I posted it here some time ago. Otherwise the original program wont recognise the processor and exits.

Just got the new ECU in. Same family as the last one

https://imgur.com/a/OnySbHM


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: R32Dude on August 05, 2022, 06:07:58 AM
Remove the resistor  6.8k from memory and solder a  normal 1/4 W 8.2k (10k might also work) to the circled pad. Leave the other lead of the 8.2k dangling near the ground. All you do is touch that lead to the ground or even clip it to ground for bootmode at start.


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 05, 2022, 12:02:50 PM
Remove the resistor  6.8k from memory and solder a  normal 1/4 W 8.2k (10k might also work) to the circled pad. Leave the other lead of the 8.2k dangling near the ground. All you do is touch that lead to the ground or even clip it to ground for bootmode at start.

Excellent, thank you. I should have a 8.2k on hand, will solder that up in a few hours when I'm able to work on it. I'm assuming this is the method where you would remove that resistor, then short to ground on startup, but safer than without a resistor in place. In place of shorting pin 24 to ground, with or without a resistor?


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: voltprinter on August 05, 2022, 05:16:44 PM
fwiw I was curious why my ch431a dump didn't work, and found out that there is a power supply issue with the ch431a board. It tries to run everything at 3.3v, so especially ISP programming, 3.3v isn't going to cut it. This link seems to summarize the issue and shows a fix https://wej.k.vu/electronics/ch341a-mini-programmer-fix/ should anyone come across this post in the future. I will attempt to do the fix, and try dumping the 95160 with the ISP chip clip and ch431a after I can get a good dump over CAN.


Title: Re: ME71.1.1 95160 Type 3 with Micronas Cluster
Post by: R32Dude on August 05, 2022, 06:23:00 PM
I'm assuming this is the method where you would remove that resistor, then short to ground on startup, but safer than without a resistor in place. In place of shorting pin 24 to ground, with or without a resistor?

Yes, that pad goes to pin 24 of the flas