PDA

View Full Version : Read the ROM of a 0D60J



MrSporty
18th February, 2013, 01:02 AM
Can anyone tell me for certain wether it is possible to read the ROM area from a protected mc68hc05b16 (0D60J Mask) using any available tool.

I know most applications using this MCU only need to have their EEPROM read (airbag modules , Immos) but im actually after the program ROM.

This is from a Ford Transit Alarm receiver module if it makes any difference.

Zmann
18th February, 2013, 02:13 AM
If protected, it's needed to unprotect first, I know only Xprog and ETL maybe some others do too.

To read ROM, UPA can do by select all memory. After read and if need only ROM it needs to know ROM area and use cut and paste. Xprog may do also, by setting proper start address and size in options

To program ROM (on a new device), It will need ONLY a new-empty HC705B16 and the programmer which support, Not all universal programmers will easily support this and never seen one with in circuit programmable, I use Beeprog with a dicicated adapter.

ROM in HC05 is ROM (programmed since Moto factory)
ROM in HC705 is is One Tine Programmable ROM

MrSporty
18th February, 2013, 07:21 PM
Super reply Zmann. Thanks for your time dude !

UPDATE ! Grabbed an XPROG-M. Modified the start address and length and it happily dumped the entire ROM :) Happy days.

...Now where did i leave that HC05 disassembler :P

d5alilij
15th November, 2014, 09:04 PM
Hello,

can you be a little more detailed about setting the start address and lenght for the xprog?

I have trouble reading an HC05 0D60J from Piaggio Beverly-Magnetti AC1604.02.

The programmer 5.50 says "Bypass security" and hangs there without a change.

Can you specify the start address and lenght for the above case.

Thanks in advance

Ales

d5alilij
15th November, 2014, 10:31 PM
Hello,

can you be a little more detailed about setting the start address and lenght for the xprog?

I have trouble reading an HC05 0D60J from Piaggio Beverly-Magnetti AC1604.02.

The programmer 5.50 says "Bypass security" and hangs there without a change.

Can you specify the start address and lenght for the above case.

Thanks in advance

Ales

d5alilij
15th November, 2014, 10:32 PM
is it 100 256 or 120 224 and the oscilator 4194304? config 0xFE?

d5alilij
18th November, 2014, 12:09 AM
ok it is 705 :( inside ACI604.02