How to read coded (copy protection) chips?

**tl22bq** · 12th April, 2013, 07:52 PM

Great work maxtdi just got an volvobrik with key101 and bump not so easy to move rpm limit in that bin so i will test your evc decoder some day and see

**tasosko** · 12th April, 2013, 08:10 PM

I got the program to work, but dont know any code

**mattsson** · 13th April, 2013, 12:55 AM

For old Key101 you can read right trho it if you hawe a labtool 48 for exampel just use Low wolt "chip driver"
old Superchip has diffret type that i dont know

**tl22bq** · 13th April, 2013, 11:49 AM

cant get the winkey to work it only shutsdown ? what do i do wrong?

**tl22bq** · 20th April, 2013, 09:43 PM

oki got it to work but it dosent scramble the bin back to normal

**AlexG40** · 26th August, 2014, 06:46 PM

I got in my hands a marelli 1av ecu that has a plcc32 27c512 eprom. Basically it has a EVC 512 key. Its a converted unit from autotest that has a internal map sensor for boost applications.
I am reading the eprom and the file is a mess...
Do you have any ideas how i will sort this problem?

**kennfeld** · 27th August, 2014, 10:23 PM

the board are the boards
then each tuner has his own coding
otherwise his competitor ca see the files uncrypted it should have no sence ....

all this board have anyway no sense since the processor from the ecu read the map ....

and so you can also read the map ;-D just by loging

**bobolin4o** · 28th August, 2014, 06:44 AM

Why the hell you want to read someone else job? There is not any big secret in tuning maps.
Just remove this crypto board, program chip with appropriate software and go ahead... Or if you have some doubts about your skills, take a spare ECU and play with it.

**redtop** · 28th August, 2014, 11:35 AM

Originally Posted by bobolin4o

Why the hell you want to read someone else job? There is not any big secret in tuning maps.
Just remove this crypto board, program chip with appropriate software and go ahead... Or if you have some doubts about your skills, take a spare ECU and play with it.

Could be a thousand reasons you would like to decrypt a chip. I helped an Alfista who had a scrambled chip in his track day car. It was a M2.10.3 ECU with a PLCC32 socket. In that socket was an adapter to DIL28. In the adapter was the protection board, and in the protection board the EEPROM. He had huge problems with the car cutting out randomly. I replaced the awful stack with a plain unscrambled EEPROM and the car never failed since. (see picture).
Alfa 155 chip2.jpg

Right now I have in my hands another copy protected EPROM for a 155 Q4 with absolutely no marking on it. The owner would very much like to know what chip this is, who made it etc. Descrambling it is the only way to get any closer to knowing what it is.

**AlexG40** · 28th August, 2014, 10:51 PM

These ''made'' ecus are sold 15 years back from autotest. They convert the n/a afh 1.4 16V engine to turbo.
I want to edit the file, to run with bigger injectors and more boost...
Back in the day it was probably a secret setup but nowadays its a cheap way to boost this engine...

I read the file and its a mess....
I i read the file with a programmer and if i desolder the key and stick it to the programmer complete with the eeprom, am i going to read the file properly?

**2200** · 19th October, 2016, 11:43 AM

Originally Posted by AlexG40

These ''made'' ecus are sold 15 years back from autotest. They convert the n/a afh 1.4 16V engine to turbo.
I want to edit the file, to run with bigger injectors and more boost...
Back in the day it was probably a secret setup but nowadays its a cheap way to boost this engine...

I read the file and its a mess....
I i read the file with a programmer and if i desolder the key and stick it to the programmer complete with the eeprom, am i going to read the file properly?

Have you finally managed to read the file ?

**tango** · 19th October, 2016, 04:32 PM

take out the adapter board with everything on it (maybe also remove the flash chip and just read this) (forgot which needs to be done, its been a few years since i looked at these encrypted files)
put into a programmer and read
then post the dump here with has much info about it you can
ie key101 etc
also ecu type and what the flash chip was you read ie 27c1024 etc
also when posting dump make sure you name it encrytped

**gussone** · 28th March, 2017, 11:13 AM

Hi, got a problem with this Volvo FH12-420 27C512 DIL 28 Encrypted file ... can someone help me understand?
Encrypted with EVC 101

TI-27C256DIL-SOLOEPROM-MARCON.zip

Many Thanks in Adavance

**poxxxy** · 6th April, 2017, 10:16 PM

Anyone help with 610 algo?

**Mykk** · 19th July, 2017, 02:40 PM

I just wanted to chime in with my results.

I was able to read a 28 pin 27C512 that was encrypted and using a Key101 to run a bosch motronic M3.3 in a BMW.

Using a Universal TL866CS chip reader/programmer and it's supplied software MiniPro v6.5 I got a clean read of the .BIN from the encrypted chip with the Key101 attached. I verified by loading the .BIN read to a chip emulator and the vehicle ran beautifully.

In the MiniPro software select the 27SF512 chip ID, uncheck the "Erase Before" and "Check ID" options then read...

Side note; the TL866CS was also able to erase/blank a series of fake SST 27SF512's acquired off Ebay, something my Moates Burn2 couldn't do.