Audi MMI 2G RX/TX terminal connection please help

[WinWoj]

Can you maybe send me the two dumps

Wich sw does it have?

yes, you can easily find it when you search 29lv651 string

Mate who upload it didn't take ftom which S/W was read. soon i upload files from my own unit. but i want to read all memories, when find how.

[WinWoj]

in my head unit module, from Audi A8 D3 there is SH-3 mcu marked 6417709A, FPGA xilinx Spartan xc2s200, two flashes described before and Fujitsu MB86291AS. the question is what IC's had memory and how to read them.. few pads like BDM or JTAG but how to connect serial port interface or another tools? there is possible to read flashes without desolder them? Best regards

[WinWoj]

Mates, i dont know what i doing wrong... I tried to connect SH-3 mcu to serial port and seeing what happens in putty, but only one of three TX's - Tx1 transmitted some data (seen on scope) but arduino stopped sniffing and damaged serial port, AK50 usb to serial not working when I connect Rx from DB9 connector to Tx1 pin into mcu (with common ground of course) but nothing happens... im very tired and confused, maybe someone could tell the proper way of read that head unit memories...

[WinWoj]

I used proper serial port USB interface to see what happens in Tx1 pin on SH-3 mcu using scope and pytty, and only trash is seen, durig power on Head Unit + gateway. No such 'welcome, Wind River and Becker' text as I waiting for... How to talking with this?

[WinWoj]

Ok. i think i lost time checking transmision in TX1 serial port. When I sniffed this transmission line in hex view, it shows me transmitting data like in KW 1281 protocol, with asking and requesting such parameters like board voltage, Display temperature or another. this serial communication starting few seconds after power on MMI, first there is flooded much frames of dara, then frames are transmitted about 1 time per second. So this Tx1 line is still active after booting process. On Tx0 and Tx2 lines nothing happens. I thought, that this system could be more available to play with... I thought that it will say 'Wind River System and Becker Automotive version xxxx' without any commend sent... I was wrong and looking for better solution to read all memories again. I can read eeprom and flash psychically using programmer, but how to read FPGA and SuperH MCU build-in memory...

I attach effect of my Tx1 sniffing after power on Head Unit +Gateway, disp and panel.

[gapco]

Hi Folks. I have Audi A6 C6 with MMI 2G system. I would like to make recovery images from memory Head Control ecu, before I will make update. I read some tutorials for MMI 3G how to get data from memory using PuTTY or another I/O terminal. I havent pcb terminal in 2G the same as 3G, so have to find. could somebody help me to initiate loading IPL, ifs root OS, and other flash data to PC using RS232 protocol? Please help.

My Control head label is 4E0 035 739.

The number 4E0 035 739 means nothing, it's Audi's part number. What is the BE6xxx model number of this unit? Post a picture of the ID label showing the model number, serial number and ECXXX software version.

[WinWoj]

Hi Friend, i started topic with Audi A6 head unit, but now i working with Audi A8. here is label of this unit:

[gapco]

Confirm if uP= ST10F269 and SH3=7709A.

[WinWoj]

Friend, i didn't find any ST10F269 ic, but SH3 7709A is present in Head Unit ecu.

[simaservis1108]

I think you didn't hear me first time.
FPGA doesn't contain anything inside.It is programmed everytime the MCU boots.
SH-3 is programming FPGA in serial slave mode on every boot.

[WinWoj]

I think you didn't hear me first time.
FPGA doesn't contain anything inside.It is programmed everytime the MCU boots.
SH-3 is programming FPGA in serial slave mode on every boot.

yes, i understand. but flashes data configure FPGA, so where is user interface program, languages and boot files? SH3 internal flash or external eeprom?

edit: JTAG is enough to read internal and external flashes?

[WinWoj]

Mates, how you solve problem when MMI 2GHigh update process will failed, because CD-drive broken or wrong cd data?

[gapco]

Friend, i didn't find any ST10F269 ic, but SH3 7709A is present in Head Unit ecu.

ST10 should be in the multimedia unit and not in the MMI interface.

[gapco]

Mates, how you solve problem when MMI 2GHigh update process will failed, because CD-drive broken or wrong cd data?

With original Harman Becker tools and software.

[WinWoj]

very interesting... somebody work with that Harman-Becker tooll?

btw, that serial transmition I scope before in TX1/RX1 lines is for Control panel with buttons, i didn't find full pcb path jet, from TX1 SH3 pin to control panel connector, but digital signal and 5V amplitude are the same.

anyway, mates think about... if Harman/Becker placed on PCB comunication interface with AUD/JTAG pins connected to SH3 mcu, it is no true, that only Harman/Becker tool could working with this ecu... Hitachi used this two communication standard and one of them - JTAG is good described and i found many tools, home made and very basic also, which should talk with, but SH3 software implementation is problem.. J-link haven't but open source projects, like Jtagtool or urJtag have implemented this mcu. I tried urJtag with Jlink tool, but windows version not see cable on windows vista, where I tried.. So have to check it in another OS and maybe with another JTAG tools/software...

Best Regards