J-Link Dacia Sandero readout - how to save flash?? (URGENT)

[WinWoj]

Hi guys!

I have a big problem, I succesfully connect J-Link, start communication with SPC560P50, chose 'read back' - all options give me the same resault - such readout, every looks the same. But - when I saving, i.e bin format, I receive 8,5MB dump! Why?? I don't know is necessery to put another range, and how is good.. Another mates have attached 3 or 4 files, divided on 512kB flash, 64kB something and such shadow file, but how to make it?

Please help,

Regards
W.

[morfej]

You need to read data flash.

[WinWoj]

Yes, I know that. I saw carefully entire dump and dicover that between adresses:
0x000000 - 0x07FFFF exist 1st bank of data,
0x080000 - 0x7FFFFF no exist any data (JFlash shows only '--' values)
0x800000 - 0x80FFFF exist 2nd bank of data.

I'll try to save both data sectors and attach to clear

[WinWoj]

OK, I attach flash 512KB and 64Kb cfg (i think) please help me with clear... I don't know posted few mounths ago 'dacia lodgy' clear helps wtith this Sandero car..

Regards
W.

[credoline]

It would be very nice if you attach airbag data like:
985102122R Continental A2C85839702

[WinWoj]

It would be very nice if you attach airbag data like:
985102122R Continental A2C85839702

Hi Everyone! Please rename my files in srs-case printout data:


285580347R Continental A2C80612911


Could somebody make me clear for my flash dump?

Regards,
W.

[kolocar]

Introduce yourself please...:)

[WinWoj]

I had to make new thread to get some helpfull solution..? I understand, You haven't solution for this airbag and You don't know how to solve... Thanks anyway..

BR
W.

[kolocar]

R U sure?:rofl:

[WinWoj]

No, I'm not. :stung:

[auto80]

Try n report m8

[WinWoj]

thanks a lot. I report after trying in car

[WinWoj]

What about DTC's? I cannot clear dtc's. Was 5 dtc:
B107E
B107F
B0028
B0020
U3003
Phisically done, airbag replaced and tensiometers, but my KTS550 can't delete dtc's.
You wrote clear before put sesnor clear data to car, but It's imopssible in my case.

The car not running. Is possible, that srs sensor blocking ecu to start? I don't remember is start/stop system, but after crash car not running. Any sugestions?

[WinWoj]

Could somone confirm that this airbag sensor can block ECU to norun?

[WinWoj]

Hi auto80. Not working.. still 5 dtc's i connect as RCxx and cannot delete errors. How to solve this problem? Car not run

[credoline]

Yes, in many new cars, especially in Renault, but in most situation just disconnect airbag module and car start. I can not guarantee to you that will work in your car.

[FxShaw]

Cant help with this one but I know who has a solution for it. http://www.codecard.lt/MAC/index.php?code=renault

[WinWoj]

Cant help with this one but I know who has a solution for it. http://www.codecard.lt/MAC/index.php?code=renault

grrr.. 30 eu isn't cheap.. but twho know is working...

[FxShaw]

its $120? really..wow pricey well they listed yr exact module # so its been tested

[WinWoj]

its $120? really..wow pricey well they listed yr exact module # so its been tested

no no, i'm wrong. 30eu.. mean it is cheap, but why to pay if is such solution to discover.. maybe somene paid and can share its solution to compare or something.. anyway i'd like to solve problem, but many dumps for comparing needed and time... regards

[FxShaw]

Well that's why there are service like that online..when cant find someone or u need a solution right away.

[WinWoj]

OK Guys, I paid 30Eu in codecard.it 1st I was supprised, when cleared dump in their site is still 'found crash'!!! They make me clear, which is detected as crashed!!! WTF! Nevermind, I not tested in car yet, so I'm not so angry. 2nd thing is architecture of this dumps... writting alghoritm in this continental airbag sensor is very hard to understand... I compared my crashed sensor with another, and VIN location is in another place in even the same number of sensor! As I saw, continental editing data by adding new data in front ofold data (by shifting old). So dumps are always alive... Paulis'es clearing alghoritm from codecard first differences are from 0x008000 adres and looks very difficult (clear deletes 1-2 16bit lines or change some values), but for me - isn't easy way.. See first twoo screanes of this comparison - orange frame means the same data blocks:

http://www.digital-kaos.co.uk/forums/attachment.php?attachmentid=303141&stc=1

http://www.digital-kaos.co.uk/forums/attachment.php?attachmentid=303142&stc=1

[FxShaw]

I thought you said this was urgent...so you telling me you still didn't write it to the module and test to car yet? 2 days gone already

[WinWoj]

I thought you said this was urgent...so you telling me you still didn't write it to the module and test to car yet? 2 days gone already

Yes mate. But shop where car stays is few km from me, so I tried to find some solution. unfortunately only one guy send me dump, but wrong - 4dtc remain. Today I tested car with commersial dump - without succes - still 4dtc's. I succesfully make some OBDII foults in EDC, and after clearing - car run - without srs module and with srs module also... SRS check lamp lights of cource..

I note, that I use paid solution from codecard.it and they generate faulty dump - not working even in their website!!! Without any support and answer for my mail to them...

Anyway I found one xxxx2911 working clear, detected in codecard as 'no crash', so I going to change VIN and put dump to module and test. Even now - any support from You mates, will be helpfull... So please do not be surprised that I delayed with codecard.it solution.. Expirience shows that 'automatic solution' not allways working.

Regards,
W.

[FxShaw]

You cant use their website to verify crash on all the cars, cause its not accurate at all! If you got a clear file from them just write it and see what happens..

[WinWoj]

You cant use their website to verify crash on all the cars, cause its not accurate at all! If you got a clear file from them just write it and see what happens..

Maybe You are right... See, I upload many xxx911 and xxx912 continental crashes and all was detected as crash. I upload 2 cleares from DK and only one was detected as clear. 3rd clear was from codecard.lt and was detected as crash... Yes, I saw what happens.. Crash data wasn't deleted. So it looks like lost money... I don't believe they will give it back...

[credoline]

I t will be very usefull to upload clear dump to compare and clear yours original

[WinWoj]

I t will be very usefull to upload clear dump to compare and clear yours original

Yes, but who has such clear.. I believe someone can upload this and then we could work on it...

By the way, as You wrote to me in pm.. How to start with chineese j-link..

So 1st step is choose proper mcu. Open J-Flash aplication, Option -> Project setting -> CPU -> Device -> ...
and from Manufacture 'ST' find the same, as You see in scratched paint on your CPU in airbag module.
In mine was SPC560P50. I think is no matter you select with or w/o (allow shadow) one.

http://www.digital-kaos.co.uk/forums/attachment.php?attachmentid=303388&stc=1

Next thing is proper connect JLINK cable to PCB on your module.. I use smok solution from his aplication, in docs you find connection:

http://www.digital-kaos.co.uk/forums/attachment.php?attachmentid=303389&stc=1

But - how discover which signal is in j-link cable?? Answer has uncle Google:

http://www.digital-kaos.co.uk/forums/attachment.php?attachmentid=303390&stc=1

I didn't take twoo diodes under 5V, but exacly 5V take to capasitor and the rest of signal as discribed before.

After soldering cables and supply 5V you select in J-Flash 'Target' -> Connect. If everything you do good, any error wouldn't exist.

So next thing is select 'Targer' -> Read back -> Entire chip.

If everything OK, You see data table in right site. You can save as bin or another extension whole dump (8,5MB) or only
necesery, so type range from 0x800000 to 0x80FFFF.

After editing and modyfing, you should open file, select your 64kb dump and type start adress 0x800000.

Programing is easy - you select 'Target' -> Program & Verify, you can read back and double check...


Try and give me smoe cleares, my sandero still light airbag, grrr...

WBR
W.


(Feel free to click THANKS if this helps)

[credoline]

For RST on target board you use TRST pin from JTAG connector?

[WinWoj]

For RST on target board you use TRST pin from JTAG connector?

yes mate.........

[FxShaw]

How is RST diff from Reset?

[credoline]

Electronicaly probably not different, but different in using from software.

[auto80]

try again n report

[auto80]

Try this one too n report

[WinWoj]

Try this one too n report

this is 3rd (more precisely) so I'll report tomorrow couse today I cannot finish this job...

[WinWoj]

OK guys, I'm back. Sorry for long delay, but now I have feedback for You.

1st try : clear2 (third dump) from auto80.


11 dtc: (I don't describe all - without sense I think)
- B00DF (passanger airbag switch)
- B00DF (passanger airbag switch)
- B00D5 (Airbag warning lamp)
- U0151 (CAN)
- U0121 (CAN)
- U0140 (CAN)
- U0155 (CAN)
- B0092 (crashsensor)
- B0097 (crashsensor)
- U3003 (Supply voltage)
- B1080 (Crash)

Cannot delete errors.

Dump: 304787



2nd try: clear from servicetecnocar.

5 dtc: (the same as at beginning)

- B107E (crash)
- B107F (crash)
- B0092 (crashsensor)
- B0097 (crashsensor)
- B1080 (crash)

Cannot delete errors.

Dump: 304788

3rd try: second clear from Paulius (codecard.lt)

3 dtc:

- B107E (crash)
- B0028 (side airbag)
- B0020 (side airbag)

Can delete erreors. 1 dtc came back (remain):

- B107E (crash)

Dump1 (with 3 dtc's): 304789
Dump2 (with 1 dtc): 304790


I talking about only higher 64kb bank of flash memory.
Sorry authors 1st and 2rd try to give here your dumps, are with pass as ori or not.

Pass for 3rd try on email: winwoj@wp.pl

Let's make better solution. We are nearer and nearer with further try.

WBR.
W.

[kolocar]

Wow...very nice:congrats:,thx WinWoj post resutls,here is other options check please.But just clear by hexeditor + brain,,,so you know....Good Luck with you
Kolo

[WinWoj]

Wow...very nice:congrats:,thx WinWoj post resutls,here is other options check please.But just clear by hexeditor + brain,,,so you know....Good Luck with you
Kolo

thx, will try soon
BR

[milzal]

Hi, do you solve your problem with crash on this ecu ? I have ECU with crash from Dacia A2C80612912 985103207R. I have car and diag for testing here, if anybody send dump for test.
Thank you.

[rlnservice]

your file clear pass in pm


teste ind raport

[milzal]

Hi, thank you. Tested on car and DTC "inpact detected" is still there.

[milzal]

Car is not here now,
thank?s to all
http://www.digital-kaos.co.uk/forums/showthread.php/466927-DACIA-LOGAN-A2C80612810-SPC560?p=2502686&viewfull=1#post2502686

[javiercj]

[Quote = WinWoj; 2488826] s? compa?ero ......... [/ quote]
Email hola winwoj tengo unidad de airbag renault clio 4 con micro st560p para el archivo limpio con accidente. Es NECESARIO "rojo-back toda chip", o s?lo se trata del sector de lectura NECESARIO 0x800000 un 0x80FFFF. Espero su respuesta gracias

[ismai]

985101389R, crasch clair pliz

[ismai]

hello aide pliz

[visio]

Please send pass for file clear by kolo.rar. Thanks!!