NefMoto

Technical => Flashing and Chipping => Topic started by: saneesh8 on August 29, 2012, 10:06:36 AM



Title: Fresh AM29F400 chip
Post by: saneesh8 on August 29, 2012, 10:06:36 AM
How do i copy the contents from the old AM29F400 chip to the new one? Just use it in boot mode? I know Galletto cant copy the whole data.

I guess the architecture is

boot
firmware
mapping data
Immo code

Except Immo code, everything else can be copied?



Title: Re: Fresh AM29F400 chip
Post by: icezero on August 29, 2012, 10:30:30 AM
immo is on the 95040


Title: Re: Fresh AM29F400 chip
Post by: saneesh8 on August 29, 2012, 11:07:13 AM
Forgot to tell. The ECU is MS42 for a BMW using AM29F400BB flash. Forums suggest that to use a ECU from another car, this chip needs to be swapped. It uses 200 rolling code which is based on VIN.



Title: Re: Fresh AM29F400 chip
Post by: prj on August 30, 2012, 12:28:12 AM
The rolling code will be inside the EEPROM.
To copy chip, desolder and write/read in programmer.


Title: Re: Fresh AM29F400 chip
Post by: saneesh8 on August 30, 2012, 07:28:01 AM
Thanks..AM29F400BB is the EPROM right? Or any other chip?


Title: Re: Fresh AM29F400 chip
Post by: prj on August 30, 2012, 07:34:17 AM
29F400BB is the flash chip with parallel memory access.
The EEPROM can be for example a 95040, 24C02, 93C146, etc with serial memory access.


Title: Re: Fresh AM29F400 chip
Post by: saneesh8 on August 30, 2012, 08:16:54 AM
Thanks. Let me look for a chip like that. The PCB contains mainly power drivers and voltage chips. Let me look further.
http://s1095.photobucket.com/albums/i461/saneesh8/?action=view&current=IMG_2529.jpg
http://s1095.photobucket.com/albums/i461/saneesh8/?action=view&current=IMG_2530.jpg

I guess the BMW and VW/Audi uses similar methods for Immo codes.


Title: Re: Fresh AM29F400 chip
Post by: prj on August 30, 2012, 09:13:03 AM
There's a couple SOIC-8's on that board. One of them should be it.


Title: Re: Fresh AM29F400 chip
Post by: saneesh8 on August 30, 2012, 09:21:12 AM
They are like EPROM? I mean can not change?  Can you please tell me the number of one of them in the picture?  6 of them on the right side is kind of driver for the injectors. On left and top, 7 of them are some voltage controllers. The three chips on the center left to the main chip might be the one?

 >:( I thought all the data is in the flash. So i guess only boot + firmaware + mapping is in the flash.


Title: Re: Fresh AM29F400 chip
Post by: saneesh8 on August 30, 2012, 09:43:57 AM
They are like EPROM? I mean can not change?  Can you please tell me the number of one of them in the picture?  6 of them on the right side is kind of driver for the injectors. On left and top, 7 of them are some voltage controllers. The three chips on the center left to the main chip might be the one?

 >:( I thought all the data is in the flash. So i guess only boot + firmaware + mapping is in the flash.

TY93C65D this might be the one? Hope only the rolling code is stored here. If so just replace it and reprogram it should make it work. If this is the chip, where can i see its spec? googled it, no use :(



Title: Re: Fresh AM29F400 chip
Post by: prj on August 30, 2012, 05:48:31 PM
93C65 is a serial EEPROM indeed.

I have a tip though - if you are unsure about simple things like this, better take it to a pro.
You will probably just mess up the ECU.


Title: Re: Fresh AM29F400 chip
Post by: saneesh8 on August 31, 2012, 09:39:29 AM
It is a spare ECU. Thought of playing with it.

93C65 is a serial EEPROM indeed.

I have a tip though - if you are unsure about simple things like this, better take it to a pro.
You will probably just mess up the ECU.


Title: Re: Fresh AM29F400 chip
Post by: icezero on September 12, 2012, 04:55:11 AM
You can do immo off if you read the 29f400 ;)


Title: Re: Fresh AM29F400 chip
Post by: NMS on September 16, 2012, 05:22:54 PM
You can do immo off if you read the 29f400 ;)

VAG cars have the immo in the EEprom, bimmers have it in the flash. Generally MS43 modules also have an eeprom, but it does not  contain any immo information whatsoever. Whenever I clone modules, I generally don't touch the eeprom.


Title: Re: Fresh AM29F400 chip
Post by: Quadrant5 on May 10, 2013, 12:16:16 PM
So, has anyone figured out for sure which chip houses the rolling codes in a BMW ms42?  I am in need of this information as well.  Thank you.

Quadrant5


Title: Re: Fresh AM29F400 chip
Post by: prj on May 10, 2013, 02:32:29 PM
On any car you can defeat the immo in the flash - because that is where the logic resides that deals with activating the immo.
On some cars you can defeat it in the EEPROM (VAG stuff).

So if you read the EPROM and understand how the ECU works and can disassemble it, you can kill immo on any car, unless the immo logic is in CPU ROM.