Register
Results 1 to 6 of 6
  1. #1
    DK Veteran
    Dunker's Avatar
    Join Date
    Oct 2009
    Location
    Yorkshire
    Posts
    876
    Thanks
    114
    Thanked 455 Times in 211 Posts
    Downloads
    4
    Uploads
    0

    Default Corsa D BCM Help reading NEC with UPA

    As the title. Has anyon got any tips for reading the NEC. The board type is as in the picture.

    On UPA-S I have FLMD0 on pin 8. Is this PDX as in the picture.

    Do I read it with 3 wire or UART (and forget OSC).

    Also on mine I have a 8 pin smd chip just under where it says RXD on the pic.

    The reason I ask is it wont read, RXD is low. Soldering looks ok.

    Is this one the uPD70F3632.

    Sorry to be a dick.
    Attached Images Attached Images
    V Series TMS470 / EEPROM data - encryption / decryption, totally pwned.

    IEC 62056-21 - new discussion: sonsivri.to/forum/index.php?topic=60412.0


  2. #2
    DK Veteran
    Bllinda's Avatar
    Join Date
    May 2010
    Location
    Baltic
    Posts
    4,449
    Thanks
    191
    Thanked 1,340 Times in 1,157 Posts
    Downloads
    89
    Uploads
    5

    Default uart.3-vire

    Try .... ....
    I have a topic in the forum
    Mercedes IR F82B-05E6-G72G
    Mercedes IRCL or IFZ (7)05B16-F62J


    I can not find a damp virgin CIM (
    delphi MCU1 (TOP) 908AZ60 1J35D, 4J74Y)
    Can YOU help me after I helped you?

    I can not find the description .... Lucas EPIC I. II and III

  3. The Following User Says Thank You to Bllinda For This Useful Post:

    Dunker (7th August, 2018)

  4. #3
    DK Veteran
    Dunker's Avatar
    Join Date
    Oct 2009
    Location
    Yorkshire
    Posts
    876
    Thanks
    114
    Thanked 455 Times in 211 Posts
    Downloads
    4
    Uploads
    0

    Default

    Thanks for that. As I assumed with the pinout.

    Still no change with it as it was.

    I removed the SMD 8pin IC just under the RXD connection and it gets the device ID so the SMD must have been pulling RXD low.

    This is what I get now:

    Device ID: 10 7F 04 61 7F 7F 7F 97 80 80 80 80 02 7F 7F 01 02 C4 37 B0 46 B3 B3 37 B9 20 20 7F FF 00 00 00
    Firmware Version: 03 01 00 02 00 01
    Device not Respond
    Parameter error
    Reading: 2 Errors Found Device: uPD70F3632 Range: 0 - FFFF

    This is in UART mode. Cant get anything in 3 wire mode.

    I get same result with uPD70F3379 and uPD70F3632

    Any ideas?
    Last edited by Dunker; 7th August, 2018 at 12:31 PM.
    V Series TMS470 / EEPROM data - encryption / decryption, totally pwned.

    IEC 62056-21 - new discussion: sonsivri.to/forum/index.php?topic=60412.0


  5. #4
    DK Veteran
    Dunker's Avatar
    Join Date
    Oct 2009
    Location
    Yorkshire
    Posts
    876
    Thanks
    114
    Thanked 455 Times in 211 Posts
    Downloads
    4
    Uploads
    0

    Default

    I can see now the device is uPD70F3379. The 'B' prefixs threw me for a second but I can see that the highest bit is for odd parity nearly all way thru the ID. Doh. Has to be summat simple.

    Ill go out for a curry and sink a gallon tonight and think about it tomorrow.
    V Series TMS470 / EEPROM data - encryption / decryption, totally pwned.

    IEC 62056-21 - new discussion: sonsivri.to/forum/index.php?topic=60412.0


  6. #5
    DK Veteran
    Dunker's Avatar
    Join Date
    Oct 2009
    Location
    Yorkshire
    Posts
    876
    Thanks
    114
    Thanked 455 Times in 211 Posts
    Downloads
    4
    Uploads
    0

    Default

    Thought it would be a simple mistake. Put my NOVA 2400 on it and frequency from BCM was 5MHz. Built a 4MHz clock generator and fed that in to the BCM and bingo. Read like a charm. Looks like either NEC key is corrupt or crypted pin in 93c86 is corrupt. My guess is the eeprom. Ill compare a few dumps from here over weekend and see whats what.
    V Series TMS470 / EEPROM data - encryption / decryption, totally pwned.

    IEC 62056-21 - new discussion: sonsivri.to/forum/index.php?topic=60412.0


  7. #6
    DK Veteran
    Bllinda's Avatar
    Join Date
    May 2010
    Location
    Baltic
    Posts
    4,449
    Thanks
    191
    Thanked 1,340 Times in 1,157 Posts
    Downloads
    89
    Uploads
    5

    Default

    Now, as you read NEC MCU can do as you want.
    I have a topic in the forum
    Mercedes IR F82B-05E6-G72G
    Mercedes IRCL or IFZ (7)05B16-F62J


    I can not find a damp virgin CIM (
    delphi MCU1 (TOP) 908AZ60 1J35D, 4J74Y)
    Can YOU help me after I helped you?

    I can not find the description .... Lucas EPIC I. II and III

 

 

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •