How to disassemble MSS52 DME dump? help needed please

**Katvis** · 29th March, 2010, 03:50 PM

Hi guys
Here is a screen shot of my DME for the E39 M5, does anybody know which processor I need to choose in IDA to get a good disassembly? Any advise on how to disassemble this code will be greatly appreciated.

Cheers
C

**pepi** · 29th March, 2010, 06:59 PM

Data on 2 flash memories 29F

**Katvis** · 29th March, 2010, 07:05 PM

I have the complete dump of the code, my problem is that if I use IDA to disassemble I need to chose the Processor type.

For the Bosch motronics it is easy as Andy Whitaker made nice tutorial videos that explain exactly how to disassemble the code.

I am looking for similar help to disassemble the MSS52 code.

Cheers
C

**oldford** · 29th March, 2010, 07:13 PM

Can you post (attach) the dump?

**Katvis** · 29th March, 2010, 07:21 PM

Here is the complete program dump from the MSS52 E39 M5

Cheers
C

**Katvis** · 24th April, 2010, 06:28 AM

anyone? any help would be appreciated..

Cheers

**alexics** · 24th April, 2010, 01:32 PM

You will need the datasheet and also a reference for the assembly language opcodes. I used to write disassemblers for hc05, hc11 and tms370. Not very complicated, about two screenfuls of code.

**easytech** · 24th April, 2010, 02:24 PM

as far as I knows they are 68332 or 68336 processors

**alexics** · 24th April, 2010, 02:40 PM

Originally Posted by easytech

as far as I knows they are 68332 or 68336 processors

Pinouts would be useful and data on peripherals attached to the processor. Without knowing the exact aims of the exercise that is as much as I can say.

**Katvis** · 18th May, 2010, 04:47 PM

Hi Guys
A quick update, I was away for work and was waiting for more information before I reply here. I have bought a spare DME and am awaiting delivery. I do not want to mess up my car's own DME for obvious reasons but as soon as I have the spare DME I can trace a few tracks and confirm 100% that the CPU is a 68376 Motorola chip. I will post the tracks that I trace for your information.

Can somebody please give me some more advise on how to disassemble the CPU32 code with IDA. I do have IDA pro but apart from the 68k Processor type I can not see the CPU32 instruction set. Somebody advised me to use the 68330 processor type but I find that in both instances there is some instructions that does not get disassembled. Is there a version of IDA that list CPU32 as a processor type?

Originally Posted by easytech

as far as I knows they are 68332 or 68336 processors

Thank you very much for this info, I had a look earlier at the 68332 but the pin count did not match. The 68336/68376 CPU's pin count does match.

Originally Posted by alexics

Pinouts would be useful and data on peripherals attached to the processor. Without knowing the exact aims of the exercise that is as much as I can say.

Thank you very much for your help, I really appreciate it. Will post the tracks and pin outs of the CPU as soon as I receive the DME.

Thanks again for all the input
Regards
C

**alexics** · 18th May, 2010, 05:35 PM

I can't remember from the docs you sent but does the MCU have background debug mode? It may be better to source an emulator. Check out the Freescale site. They may be giving the old stuff away now.

**alexics** · 18th May, 2010, 05:39 PM

Try here to start with

MC68336 Product Summary Page

**Katvis** · 18th May, 2010, 05:46 PM

Hi there
Yes the 683xx series CPU does have a BDM mode. I have ordered a wiggler interface cable for the BDM port from macraigor. This only works with a free debugger and I am sure it wont be as powerful as a full blown emulator. I am going to give this BDM with debugger a go and hopefully I can make sense of the code I read. If this does not work I will look further to try and source a emulator, you will be surprised to find that even though this CPU chip is very old that each and every emulator I could find was very expensive. A normal USB BDM cable plus custom debugger was offered at $1500..! So I did not even ask for the price for the full blown emulator with trace functions.

The DME I have does not have the BDM port soldered on the pc board so I have to solder the wires on the chip pins, but it should not be a problem as this is my test DME, I will post pics of my setup as soon as I receive my DME.

Cheers
C

**Katvis** · 7th July, 2010, 12:51 PM

Hi guys
I need some help to identify some chips please. I have searched the internet and can find the model numbers but I can not find any data sheets for the chips.

Interesting as well is the BDM connector tracks that is on the board, below is the detail picture, I have ordered two plugs that will fit on this tracks and are still waiting for the hardware, will post pictures once I receive the plugs, on the picture below the tracks can be seen next to the memory chips:

Here are pics of the Ignition drivers as well as the driver chip for the driver ic's, one driver chip is on the front of the pc board and the other on the back:

Below are three pictures of driver IC's that I would like to have data sheets for please if any of you can help I will appreciate it very much.

Cheers

**alexics** · 7th July, 2010, 10:56 PM

Do you have another module the same? If so try desoldering the chips. Sometimes the manufacturer mumbers are on the underside. I would assume that these are driver chips for whatever transmission protocol the unit uses. K-line, can bus etc.