dubnuts
Newbie
Karma: +1/-0
 Offline
Posts: 1
|
 |
« Reply #15 on: January 20, 2011, 01:11:29 PM »
|
|
|
Instead of trying to steal this stuff, why dont you spend the effort to tune your own file? You never know, it might even be better!
|
|
|
|
|
Logged
|
|
|
|
Tony@NefMoto
Administrator
Hero Member
Karma: +132/-4
Offline
Posts: 1389
2001.5 Audi S4 Stage 3
|
|
« Reply #16 on: January 20, 2011, 01:18:25 PM »
|
|
|
Instead of trying to steal this stuff, why dont you spend the effort to tune your own file? You never know, it might even be better!
Steal is a strong word. No one has said anything about copying and selling pirated copies, or anything like that. This is just a discussion of how to bypass security protections. There may be many reasons an owner of the ECU software may want to do this. |
|
|
|
|
Logged
|
|
|
|
dan
Newbie
Karma: +2/-1
Offline
Posts: 12
|
|
« Reply #17 on: January 20, 2011, 01:40:01 PM »
|
|
|
Instead of trying to steal this stuff, why dont you spend the effort to tune your own file? You never know, it might even be better!
What if you are pretty happy with a tune and want to change your maf or injectors? Are you stealing? And what exactly am I stealing to begin with? I guess you could argue that APR's EMCS is actual code that you would steal if that was your intent. Everything else is Audi and/or Bosch's code that the tune vendor stole out of the ECU in the first place. Last time I checked, when I bought a tune, I was paying for a service, not IP. So I don't feel in the least bit guilty of reading my tune out or even sharing it. |
|
|
|
|
Logged
|
|
|
|
carlossus
Sr. Member
Karma: +38/-0
Offline
Posts: 394
Leon Curpa Stg1+
|
|
« Reply #18 on: January 20, 2011, 02:01:06 PM »
|
|
|
Instead of trying to steal this stuff, why dont you spend the effort to tune your own file? You never know, it might even be better!
Nice first post. *hugs* |
|
|
|
|
Logged
|
|
|
|
Jason
Hero Member
Karma: +38/-0
Offline
Posts: 500
Breaks everything!
|
|
« Reply #19 on: January 20, 2011, 04:41:38 PM »
|
|
|
Instead of trying to steal this stuff, why dont you spend the effort to tune your own file? You never know, it might even be better!
I don't think a single person here is advocating stealing tunes. Many of us paid for tunes that needed refinement, and I believe it is just as unethical to sell buggy software and attempt to prevent customers from taking corrective actions as it is to steal software. Starting over was the best thing I ever did. I just wish this wealth of ME7 knowledge was as accessible 5 years ago as it is now. |
|
|
|
|
Logged
|
|
|
|
|
pvl
|
|
« Reply #20 on: January 20, 2011, 06:17:50 PM »
|
|
|
@ dubnuts -> stealing... HAAH!  No man, this will never be the sole purpose of +90% of the forum-members over here. Try to first browse around, and see that this is a proper forum. Have fun while hanging around this 'knowledge-centre' ! It gets better and better by the day. Really ! On-topic again : there is a way to read-out these things i guess. A german guy on another forum was successfull with the known 101key (DIL 28) from EVC and the solution from grautech (DIL 28). He used a atmega processor-board : http://www.seeedstudio.com/blog/2010/09/22/clearance-get-your-seeeduino-mega-for-only-39/Perhaps with slight adaption in the software programmed into the atmega, we can use this to descramble the flashrom-based anti-copy-boards ? And ofcourse extra datawire-hooking up. If interesed, i can proive a weblink to the specific forum-thread, if Tony permits. Cheers, PvL |
|
|
|
|
Logged
|
|
|
|
kls
Full Member
Karma: +12/-0
Offline
Posts: 97
|
|
« Reply #21 on: January 20, 2011, 06:48:56 PM »
|
|
|
The one board I have dealt with had a PIC processor to detect pulling DQ4 low to enable boot mode, and it would disable the flash when it thought boot mode was detected.
I suspect this board is not as complex as some others but its something to look for with encryption boards.
|
|
|
|
|
Logged
|
|
|
|
Tony@NefMoto
Administrator
Hero Member
Karma: +132/-4
Offline
Posts: 1389
2001.5 Audi S4 Stage 3
|
|
« Reply #22 on: January 20, 2011, 07:54:42 PM »
|
|
|
If interesed, i can provide a weblink to the specific forum-thread, if Tony permits.
Provide away. Another thing a lot of people don't seem to know about, is all of the tools that support boot strapping the C166/C167 processor. I used MiniMon to do all of my boot mode reading before Galletto existed. MiniMon even has a scripting and macro environment with support for loading user code into RAM and calling into it from the script on the PC. Infineon: Home > Microcontrollers > Development Tools, Software and Kits> C166/XC166 Development Tools and Software> Software Downloads http://www.infineon.com/cms/en/product/channel.html?channel=ff80808112ab681d0112ab6b50fe07c9Keil Third Party Flash Utilities: http://www.keil.com/flash/utilities.asp |
|
|
|
« Last Edit: January 20, 2011, 07:56:18 PM by Tony@NefMoto »
|
Logged
|
|
|
|
blundar
Newbie
Karma: +11/-1
Offline
Posts: 22
|
|
« Reply #23 on: January 30, 2011, 10:33:44 PM »
|
|
|
This is very similar to what Colby+others @ OpenECU did with the Subaru and Evo ECUs. The reflash procedure on these is done by a custom boot-mode "operating system" that is loaded into RAM and then executed to complete the flash procedure. Thanks a lot for posting those links Tony. Very useful.
|
|
|
|
|
Logged
|
|
|
|
tonyM
Newbie
Karma: +2/-0
Offline
Posts: 10
|
|
« Reply #24 on: January 31, 2011, 03:27:10 PM »
|
|
|
Tony, could you provide a Minimon ready-to-use driver for reading/writing external flash AM29F200BB in SAK-C167CR-LM processor system (i.e. C167CR_AM29F200BB.ini)? I have a thread concerning this: http://www.nefariousmotorsports.com/forum/index.php?topic=365.0Your help is much appreciated! |
|
|
|
|
Logged
|
|
|
|
|
|
Tony@NefMoto
Administrator
Hero Member
Karma: +132/-4
Offline
Posts: 1389
2001.5 Audi S4 Stage 3
|
|
« Reply #26 on: February 04, 2011, 08:09:04 PM »
|
|
|
I attached the version of MiniMon I used along with my config file for flashing my 2001 Audi S4 ECU. I still need to find the memory driver I wrote for the 29F800 flash chip though, because MiniMon only came with drivers for the 29F400 flash chip.
Keep in mind I haven't looked at this stuff in a couple years.
|
|
|
|
« Last Edit: February 04, 2011, 08:10:55 PM by Tony@NefMoto »
|
Logged
|
|
|
|
|
gremlin
|
|
« Reply #27 on: April 23, 2011, 03:40:42 PM »
|
|
|
I still need to find the memory driver I wrote for the 29F800 flash chip though, because MiniMon only came with drivers for the 29F400 flash chip.
Keep in mind I haven't looked at this stuff in a couple years.
Here is universal 400/800 minimon driver witch i used a long time ago. It's not optimal and slow, but it works... Кеер in mind I wrote it 10 years ago in 30 minutes.  |
|
|
|
|
Logged
|
|
|
|
tonyM
Newbie
Karma: +2/-0
Offline
Posts: 10
|
|
« Reply #28 on: April 25, 2011, 09:40:52 AM »
|
|
|
Thank you, but .ini/.hex don't work in my case.
|
|
|
|
|
Logged
|
|
|
|
|
gremlin
|
|
« Reply #29 on: April 25, 2011, 11:25:56 AM »
|
|
|
Thank you, but .ini/.hex don't work in my case.
Of course you must properly edit your [Memory] section in ini-file to use this driver. Something like that (this was for minimon version 19). NAME=FLASH TYPE=FLASH BLANK=0xFF BURSTSIZE=0x0040 SECTION(0).STARTADDRESS(0)=0x100000 SECTION(0).LENGTH(0)=0x100000 SECTION(1).STARTADDRESS(0)=0x800000 SECTION(1).LENGTH(0)=0x100000 DRIVER.PATH=!\MYPGM.HEX DRIVER.BUFFERADDRESS=00FC80 DRIVER.FEATURES=PROGRAM,ERASE Set your path to driver directory. HTH. |
|
|
|
« Last Edit: April 25, 2011, 11:44:42 AM by Tony@NefMoto »
|
Logged
|
|
|
|
|
