NefMoto

Technical => Reverse Engineering => Topic started by: LHN86 on January 08, 2013, 01:46:31 PM



Title: Key 101
Post by: LHN86 on January 08, 2013, 01:46:31 PM
Hi

Is someone familiar with the key 101 kode chip used for coded eproms? I got a eprom that is coded, is there any way to revers the code or read the chip throe the key 101 chip?

Thanks


Title: Re: Key 101
Post by: prj on January 08, 2013, 04:20:44 PM
Yes, read it through board with a development board of some kind.

The problem is the programmer does not toggle CE/OE during the reads, while a uC does.
If you can toggle CE/OE you can read through the board.


Title: Re: Key 101
Post by: LHN86 on January 09, 2013, 02:06:45 AM
Aha, so you can read the eprom connected to the key 101 throe a programmer board, if I understand you right? I use a elnec standard MemProg2 without any add-ons.


Title: Re: Key 101
Post by: prj on January 09, 2013, 03:13:54 AM
Well, look. The uC can read it in your ECU.
Your programmer probably can't read it.

So what is the difference?
Only difference is that the uC constantly toggles CE and OE between every byte, while the majority of programmers do not.

So try reading with your programmer.
If you get garbage, then get a development board that has the possibility to add a DIP28 chip, write some code and dump it over serial.
You can use atmega, 8051, avr etc etc.


Title: Re: Key 101
Post by: IamwhoIam on January 09, 2013, 05:28:26 AM
read the scrambled chip alone and post it here, maybe I can do something about it


Title: Re: Key 101
Post by: LHN86 on January 09, 2013, 02:00:13 PM
I see prj, thanks. I can then use an ATmega 16/32 microcontroller to read and convert the code? I have used this controllers with avr test board for c-programming.

I have also tought about to use the key 101 chips to protect som of my maps. Do it allow to whrite directly on the eprom mounted in the key 101??

Alltough, here is the coded file. It is for Audi 2.2. You can give it a try IamwhoIam :)


Title: Re: Key 101
Post by: prj on January 09, 2013, 02:45:21 PM
I see prj, thanks. I can then use an ATmega 16/32 microcontroller to read and convert the code? I have used this controllers with avr test board for c-programming.
You can use any uC that can access a parallel EPROM and that you can make a small program for to read the contents of the EPROM and dump to serial.
Quote
I have also tought about to use the key 101 chips to protect som of my maps.
Waste of time.
Quote
Do it allow to whrite directly on the eprom mounted in the key 101??
No.


Title: Re: Key 101
Post by: LHN86 on January 09, 2013, 02:55:40 PM
Thanks! You are experienced with uCs i see :) You have programmed with the key 101 before?


Title: Re: Key 101
Post by: prj on January 09, 2013, 03:00:37 PM
Thanks! You are experienced with uCs i see :) You have programmed with the key 101 before?

No, I don't use such useless things.
It is possible to get the binary off of the ECU without opening it. Key or no key.


Title: Re: Key 101
Post by: LHN86 on January 09, 2013, 03:06:35 PM
No, I don't use such useless things.
It is possible to get the binary off of the ECU without opening it. Key or no key.
You think its out of date for a long time ago ;)


Title: Re: Key 101
Post by: prj on January 09, 2013, 04:20:02 PM
You think its out of date for a long time ago ;)

It never stopped anyone who really wanted your file.
It's the same for any other tool that sits between the chip and the MCU.
The MCU must be able to read through the board, and the board is nowhere near quick enough to analyze the reads in real time.

So all they can do is some simple tricks. It's enough to have a logic analyzer hooked up to important pins and you can see exact difference between programmer reading it and ECU reading it...


Title: Re: Key 101
Post by: IamwhoIam on January 10, 2013, 10:13:58 AM
I see prj, thanks. I can then use an ATmega 16/32 microcontroller to read and convert the code? I have used this controllers with avr test board for c-programming.

I have also tought about to use the key 101 chips to protect som of my maps. Do it allow to whrite directly on the eprom mounted in the key 101??

Alltough, here is the coded file. It is for Audi 2.2. You can give it a try IamwhoIam :)

Sorry but the program I have says "no can do sir"... I tried but nope. If I had the chip on the socket, I could read it in a burner....


Title: Re: Key 101
Post by: LHN86 on January 10, 2013, 10:15:45 AM
I understand. Thanks for help guys! I think I got the information I am needing.