Fiat 500, year 2012 BC Delphi, MCU 70f3632, all lost keys.

[ThiagoArgentino]

Hey friends!
Fiat 500, year 2012 BC Delphi, MCU 70f3632, all lost keys. Someone managed to check reading of NEC processor?
He lost car keys, and asked Dealership 2 new keys, PINCODE exists, but it does not record.
I have the FN016 license ABRITES AVDI to present by OBD, however says that the key is not recorded.
My doubt is: someone already managed to read this MCU 70f3632?


Thank you in advance for all. :grande sorriso:


380683380684380685

[kiszka]

..........

[philipcros1]

zad full oki

[waldigsi]

there is still eeprom spi eg. 95080 or similar? I did recently take the body of the Fiat Fiorino and there was porcesor nec and eeporm 95080 where crows were key figures

[ecumix]

I think you should find 95320 memory?

[ThiagoArgentino]

there is still eeprom spi eg. 95080 or similar? I did recently take the body of the Fiat Fiorino and there was porcesor nec and eeporm 95080 where crows were key figures



Hello Friend!! The car you did, the NEC was just like my photo?

[ThiagoArgentino]

I think you should find 95320 memory?


Hi friend! At least I have not found any memory 95320 in the body. I have also doubt about the reading of NEC. It is different from others. Someone managed to read one of these to give me some tips?

[ecumix]

Orange 5 can do this job.

[GameTheoryOptimal]

I have same vehicle that I'll need to replace BCM. we will install a used one so we would need to copy NEC.
I have tried with SMOK jtag and with UPA USB, but I have read error with smok and device do not respond with elrasoft.
MCU is a NEC 70F3632. no eeprom on this board.

here is the pinout I find from the back of the board. (the reset which is crossed was a mistake... and the pin number were for upa-usb, as smok have different pin number)
I'm not 100% sure I have the right pins for this MCU as I can't find a reliable datasheet for this one. I used help from upa-usb software content about QFP144 package. might be my problem.

I have a test board so I can make the testing on a board which is already split in half.
genuine programmer available: SMOK jtag, Elrasoft upa-usb, VVDI prog, carprog

any help is more than welcome!! :)

[ThiagoArgentino]

I have same vehicle that I'll need to replace BCM. we will install a used one so we would need to copy NEC.
I have tried with SMOK jtag and with UPA USB, but I have read error with smok and device do not respond with elrasoft.
MCU is a NEC 70F3632. no eeprom on this board.

here is the pinout I find from the back of the board. (the reset which is crossed was a mistake... and the pin number were for upa-usb, as smok have different pin number)
I'm not 100% sure I have the right pins for this MCU as I can't find a reliable datasheet for this one. I used help from upa-usb software content about QFP144 package. might be my problem.

I have a test board so I can make the testing on a board which is already split in half.
genuine programmer available: SMOK jtag, Elrasoft upa-usb, VVDI prog, carprog

any help is more than welcome!! :)







This work is easy with Avdi, mate

[GameTheoryOptimal]

yes, I have AVDI, but no fiat special function... and we don't have much fiat in my region, so not really worth it to buy a 2000$ license.
any other idea?

edit: also, when I checked on AVDI website, it doesn't cover those type of bcm...

Key programming. Transponders/Keys preparation. BCM - Configuration data read and update,PIN, component protection data
BCM Read/Update ConfData by OBDII. Supported units:
- BCM Delphi (93C66) - NOTE: PIN Code is required!
- BCM Marelli (912DG128, 3K91D)
- BCM Marelli (9S12DG256, 1K79X)
- BCM Marelli (NEC 70F3237/70F3378,95160)
- BCM Marelli (NEC 70F3633,95320)
- BCM Siemens (9S12DG128)

[ecumix]

I think you must find eeprom maybe by decrypt on bottom memory

because smok uhds have your body and small eeprom



Body Fiat 70F3237+93c86 Read/Write EEprom, Read Flash
Body Fiat 70F3379+93c86 Read/Write EEprom, Read Flash http://smok.com.pl/img/cms/ikony/movie1.jpg (https://youtu.be/upZV1xl9ctQ)
Body Fiat 70F3632+93c86 Read/Write EEprom, Read Flash
Body Fiat 70F3633 (without externa eeprom) Read EEprom
Ford KA Body 70F3379+93c86 Read/Write EEprom, Read Flash

[GameTheoryOptimal]

99% sure there is no eeprom on this board.
as I said, I have a test board that I completely open to see processor type and find those weld point in the back... didn't saw any eeprom there also.
I'll take close picture of board in a few hour and post them here. just if you guys want to confirm that there is no eeprom.

maybe I have wrong MCU datasheet though... that would make a lot of sense.
as I heard, orange5 have those datasheet include in help file.
can anyone post a print screen of this?

regards

[GameTheoryOptimal]

ok guys, sorry for the delay.

so, thanks to guys from SMOK, I found that my RXDD0 pin was at the wrong place. I joined a new picture of connection (with pin number for UPA-USB, but color for SMOK jtag).
also I add picture of board (in rar folder) so you guys can confirm there is no external eeprom.

so now, I have achieved to make connection to MCU, but it says it is secure/protect.

with SMOK, you can read protection setting, and write new one, but when I try to change the ''disable read'' setting, I have this message: wrong security setting.
I read in UART mode... maybe trying to read in SPI-3 wire mode would change something??

any other idea?

[Faraday]

it is not possible to read secured NEC

[GameTheoryOptimal]

:crushed:
so only way would be to pry open board of both original and second hand, and transfer MCU from original to donor?
sucks to be me! all that work for nothing!

[euroscan1]

I can read the MC through the OBD plug but only NEC 70F3633.
do you have the content of this eeprom?

[TRISIEN]

Hi DK friends i have UUPROG-š and i need shema NEC 70f3632 bcm big punto help me silvous please soory my englaish

[TRISIEN]

shema NEC 70f3632 bcm big punto
no answer

[kiszka]

..........

[TRISIEN]

I replace eeprom 93c86 another bcm but the car does not start
sorry for my english

[metallo]

Hello, i've read the micro on this body with upa in uart mode v850 qfp144 you must set the voltage to 3.3 or 3.6 if you want to read it since it works on those voltages, there are some test points on back so you can also read it without opening it. only problem upa only reads it, when it comes to programming the program button is deactivated. The files are almost completely different except the initial part, So if you want to clone the body you must copy the eeprom 93lc86 and the micro, is there any plugin for upa to write it? or another hw?

[yellowstilo]

io terminal with Fiat BSI license can read and write both eeprom and mcu....

[edilmer]

io terminal with Fiat BSI license can read and write both eeprom and mcu....
you can't read it if the bcm has been blocked by the alarm

[dardzi]

I have the same problem I can't read eeprom from BSI 70f3632 (no external eeprom). I have smok UHDS and smok jtag programmers. vvdi, autel. I think the alarm blocked it. All key lost. What to do to add a key? Buy a second BSI?

[rob h]

Only UK market cars, have alarm function.


With io, i did clone a few bsi. All non alarm.

If you buy a bsi, without alarm, you should be able to read it with prog.
And then test the same pinout and settings, on your locked bsi.

[dardzi]

this is abart usa 2015 year. Autel shows that bsi is blocked. Smok UHDS can't enter sevice mode can't go to boot. Is there any way to unlock it? If I buy a second BSI used, is it possible to add them?

[dardzi]

I already know how to do it. Only online can you add a key. Can someone help remotely?

[kiszka]

I already know how to do it. Only online can you add a key. Can someone help remotely?
start using the edit post button

[Stelaras26]

Hey,maybe someone can identify this burned chip in the corner of the pcb>?

[kiszka]

Hey,maybe someone can identify this burned chip in the corner of the pcb>?

should be the same as the other three if I see correctly

[niang0105]

Hello,
I have exactly the same issue with a 2013 Fiat FF-500. The keys are lost, and the BCM is locked. It's impossible to read the PIN code. The MCU is indeed of the DELPHI 70F3632 type without EEPROM. I will explore the posts on this forum and attempt to work with Autel MaxiIM IM608S II for FLASH reading.

[niang0105]

Hi,
What's wrong about files fiat500.zip ? Thank you for help