NefMoto > Technical > Reverse Engineering > Reading Internal C167 ROM?
Pages: 1 [2] 3
« previous next »
Author Topic: Reading Internal C167 ROM?  (Read 33445 times)
Zac
Jr. Member
**

Karma: +14/-0
Offline Offline

Posts: 47
« Reply #15 on: December 19, 2011, 10:25:40 PM »
Quote from: janne on December 19, 2011, 10:06:39 AM
What tool you use to read prosessor data?

First post of the thread. Freeware program by the company that makes these CPUs.
If you aren't trying to disassemble the software then you likely won't have any use for it.
Logged
gremlin
Hero Member
*****

Karma: +196/-9
Offline Offline

Posts: 653
« Reply #16 on: December 19, 2011, 10:42:14 PM »
Quote from: Zac on December 18, 2011, 09:55:58 PM
BUSCON address(es)?

Yes.
For ME7.xx is it enough to set BUSCON = $4AD
Logged
janne
Full Member
***

Karma: +2/-0
Offline Offline

Posts: 50
« Reply #17 on: December 20, 2011, 12:08:23 AM »
Quote from: Zac on December 19, 2011, 10:25:40 PM
Quote from: janne on December 19, 2011, 10:06:39 AM
What tool you use to read prosessor data?

First post of the thread. Freeware program by the company that makes these CPUs.
If you aren't trying to disassemble the software then you likely won't have any use for it.



If I want to make 100% clone i need prosessor data also.?
Logged
gremlin
Hero Member
*****

Karma: +196/-9
Offline Offline

Posts: 653
« Reply #18 on: December 20, 2011, 12:15:01 AM »
Quote from: janne on December 20, 2011, 12:08:23 AM
If I want to make 100% clone i need prosessor data also.?

Not need. You can't rewrite CPU content.
If you want to make clone, you must take new ECU hardware based on the same CPU as your.
Logged
ArgDub
Full Member
***

Karma: +60/-1
Offline Offline

Posts: 202
« Reply #19 on: December 20, 2011, 12:03:13 PM »
Quote from: gremlin on December 20, 2011, 12:15:01 AM
Not need. You can't rewrite CPU content.
If you want to make clone, you must take new ECU hardware based on the same CPU as your.

Why you can't write the IROM, isn't it flash type memory?

Quote from: Zac on December 18, 2011, 09:55:58 PM
BUSCON address(es)?

this what I use:

   {"SYSCON", 0xFF12, 0xE604},
   {"BUSCON0", 0xFF0C, 0x04AE},
   {"ADDRSEL1", 0xFE18, 0x3803},
   {"ADDRSEL2", 0xFE1A, 0x1007},
   {"ADDRSEL3", 0xFE1C, 0x0000},
   {"ADDRSEL4", 0xFE1E, 0x0000},
   {"BUSCON1", 0xFF14, 0x040D},
   {"BUSCON2", 0xFF16, 0x04AD},
   {"BUSCON3", 0xFF18, 0x0000},
   {"BUSCON4", 0xFF1A, 0x0000},
Logged
Zac
Jr. Member
**

Karma: +14/-0
Offline Offline

Posts: 47
« Reply #20 on: December 20, 2011, 01:01:34 PM »
Thanks! For anyone else curious those addressees are in the datasheet as well. I found I could not enter any of it and it'd work for me still. When I tried defining addresses that's when it read wrong.
Logged
Tony@NefMoto
Administrator
Hero Member
*****

Karma: +132/-4
Offline Offline

Posts: 1389


2001.5 Audi S4 Stage 3
« Reply #21 on: December 22, 2011, 05:24:34 PM »
Quote from: ArgDub on December 20, 2011, 12:03:13 PM
Why you can't write the IROM, isn't it flash type memory?

The C167 IROM is flash, but it is read only. According to the Infineon docs it is programmed on the CPU is manufactured.

Attached are my MiniMon settings.
Logged
Remember you have to log in if you want to see the file attachments!
Info or questions, please add to the wiki: http://www.nefariousmotorsports.com/wiki
Follow NefMoto developments on Twitter: http://twitter.com/nefmoto
ported2flow
Full Member
***

Karma: +2/-0
Offline Offline

Posts: 78
« Reply #22 on: January 08, 2012, 08:54:54 AM »
how can i exactly copy the cpu ?? what setting do i need for minimon? i downloaded the .ini file from tony but i connect and after the einit the connection is lost.

i dont want to copy the eeprom of the me7.1.1 only the cpu data... please help
Logged
Tony@NefMoto
Administrator
Hero Member
*****

Karma: +132/-4
Offline Offline

Posts: 1389


2001.5 Audi S4 Stage 3
« Reply #23 on: January 08, 2012, 11:49:32 AM »
To exactly copy the ECU, you need the contents of the 95040 serial eeprom and the AM29F800 flash memory chip. The two C167 processors also have internal ROM programmed when the ECU was manufactured, but it is read only.

The INI file I posted will allow you to read the flash memory chip. You need a separate Minimon driver to read the 95040 serial eeprom. User Argdub made a tool for reading the serial eeprom in boot mode that should work for you though.
Logged
Remember you have to log in if you want to see the file attachments!
Info or questions, please add to the wiki: http://www.nefariousmotorsports.com/wiki
Follow NefMoto developments on Twitter: http://twitter.com/nefmoto
ported2flow
Full Member
***

Karma: +2/-0
Offline Offline

Posts: 78
« Reply #24 on: January 08, 2012, 01:09:03 PM »
Great reply Tony Where can i get this driver from
Logged
Tony@NefMoto
Administrator
Hero Member
*****

Karma: +132/-4
Offline Offline

Posts: 1389


2001.5 Audi S4 Stage 3
« Reply #25 on: January 09, 2012, 11:21:05 AM »
Quote from: ported2flow on January 08, 2012, 01:09:03 PM
Great reply Tony Where can i get this driver from

I don't know anywhere that has the Minimon driver for reading the serial eeprom. If you use the tool that Argdub wrote though, then you don't need it.
Logged
Remember you have to log in if you want to see the file attachments!
Info or questions, please add to the wiki: http://www.nefariousmotorsports.com/wiki
Follow NefMoto developments on Twitter: http://twitter.com/nefmoto
ported2flow
Full Member
***

Karma: +2/-0
Offline Offline

Posts: 78
« Reply #26 on: January 10, 2012, 01:03:48 AM »
ok 1 more important thing is how can i read teh IROM or the ecu ROM ? which adress is it i cant find it
Logged
ported2flow
Full Member
***

Karma: +2/-0
Offline Offline

Posts: 78
« Reply #27 on: January 10, 2012, 08:04:13 AM »
btw.. what is exactly in the serial eeprom?
Logged
Tony@NefMoto
Administrator
Hero Member
*****

Karma: +132/-4
Offline Offline

Posts: 1389


2001.5 Audi S4 Stage 3
« Reply #28 on: January 10, 2012, 11:01:50 AM »
Quote from: ported2flow on January 10, 2012, 01:03:48 AM
ok 1 more important thing is how can i read teh IROM or the ecu ROM ? which adress is it i cant find it

The IROM on the C167 chip is at 0x0000-0x7FFF if I recall. You can always read the C167 data sheet.

Quote from: ported2flow on January 10, 2012, 08:04:13 AM
btw.. what is exactly in the serial eeprom?

94050 SPI memory chip containing DTCs, Immo, adapatation, VIN, etc.
Logged
Remember you have to log in if you want to see the file attachments!
Info or questions, please add to the wiki: http://www.nefariousmotorsports.com/wiki
Follow NefMoto developments on Twitter: http://twitter.com/nefmoto
ported2flow
Full Member
***

Karma: +2/-0
Offline Offline

Posts: 78
« Reply #29 on: January 10, 2012, 01:11:04 PM »
Hm damn Tony i tried this Adress so far
just Managed to read the Flash file 1024kbyte
That worked.
The datasheet says you have to enable the internal Rom
At initialisation but how in Minimon??
Logged
Pages: 1 [2] 3
  Print  
« previous next »
 
Jump to:  

Navigation
Personal Tools
  • November 23, 2024, 10:37:35 PM
  • Welcome, Guest. Please login or register.
    Did you miss your activation email?

    Login with username, password and session length
Search
 
Advanced Search
About Disclaimer
All Rights Reserved 2010 Nefarious Motosports
Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.041 seconds with 17 queries. (Pretty URLs adds 0s, 0q)