Using AUD interface to read the memory contents

Twice · Senior Member

Using AUD interface to read the memory contents

JNYCOMM · Newbie

Thanks guys! I ran RR's code to BS2 with ECU wired (that shouldn't wipe 7052). Couldn't get but two lines out of it. Tried FDT read and got errors. Reversed the wiring to ECU pads and ran Tera. It starting dumping. Looked empty though so I tried to read again with FDT in user mode and it stalls on sending request. At least it didn't error. Is there a way to connect through Parallax USB (to 232) to AUD with the BS2 installed and reflash map or will I have to straight TTL-232R to front door? With ECU plugs to left and AUD to right, am I right assuming 1 is top 12 is bottom?

Brix · Senior Member

Work-but your stuff by connecting with FDT you have cleared the ECU.
Flashe the ECU with FDT by pin-out.
Then they read again from about AUD.

psyche · Senior Member

I have code for Arduino if anyone is interested to use it in order to read the AUD port!

Brix · Senior Member

Yes, please.
I am concerned about the so-AUD-port read.

RidgeRacer · Guru

As Brix said connecting with the FDT erases the ECU. Even if the FDT could read a 7052 ECU which it can't it would always be blank after the connect. It looks like your AUD was working it was just returning all FF because the ECU is blank.

Jochen_145 · Member

psyche wrote:
I have code for Arduino if anyone is interested to use it in order to read the AUD port!

Yes, me two..

I still looking for easy solultions to build a AUD-interface for reading the Renesas controler

BR

psyche · Senior Member

Let me build a User Interface for the arduino and post the file! It has to support ROM read for 7052 and 7054, RAM read and Registers read for convinience in disassembling the ROM correctly!

Jochen_145 · Member

psyche wrote:
It has to support ROM read for 7052 and 7054, RAM read and Registers read for convinience in disassembling the ROM correctly!

It is possible to read the RAM also via AUD ?

Sounds very good to me, because if it works, you are able to cone a ECU..

Looking forwart to you devellopment and need to convert the code to be able to read an SH7058S.

I hope it is not that difficult if I got an example witch works allready

BR

psyche · Senior Member

Hi there,

For those who where waiting the arduino code, finally i have finished it! The pin numbers are stated in the code, so it is fairly easy to connect to the AUD port! You dont need any resistors or anything else, just flat cable and connectors! The link to download it is below. If you make some money from this or you feel nice and would like to donate please do as you wish! My email is psychegr (a) gmail.com! You can use it to contact me or donate! Thank you!

http://www.mediafire.com/?fut98dhwpg3u393

Maybe there are some bugs, which i would like to know in order to correct them and provide better code. If you think that there are some improvements to be made then please let me know! I will do my best!

sami1 · Member

What microcontroller do I need to buy if I want read the ecu with Arduino and your code? Does it work for example with Arduino Uno R3?

psyche · Senior Member

All the Arduinos work! The code is the same, the compiler does the rest!

Manzo · Veteran Member

Psyche,
Something not clear to me:

During AUD read with Arduino, do i have to power the ECU thru the Ecu connector +12v,
or do i have to power it thru the AUD +12v line ?
Or arduino power up just the 7052 Cpu with +5v thru the Aud connector ?

psyche · Senior Member

You need to power it up from the main connector, NOT though the AUD connector!

Manzo · Veteran Member

Roger that :)
Thank you.

Manzo · Veteran Member

Psyche,
When i try to compile with 1.0 IDE
i receive the error:

class HardwareSerial' has no member named 'flushRX'.

I suppose you are using some custom serial library, any help ?

psyche · Senior Member

Yeap sorry about that!

Then newer Arduino IDE doesnt support flush for the serial receiver buffer! I needed to clear the receiver buffer so i added some lines at the HardwareSerial code!

This is the link with the lines to add! http://code.google.com/p/arduino/issues/detail?id=593
I think that you can add the lines in the code that i posted above and it will work, but i am not sure!

Cheers

Manzo · Veteran Member

Thank you Psyche :)
after solving the problem i am also haveing a strange problem,
once i start your software and selecting 7052 ( As test i am using a well known 41G00 to compare
the output to the known bin floating around ) i only receive a single line:

S23000000000 and the software stop there.

The Ecu is powered on thru the pin 17 and 34 ( +12v and GND ) , but probing the
AUD vcc line (pin 1 on aud if i am not wrong ) with a tester i am not reading any voltage, so i suppose i have to apply +12
to some other pins as well, or maybe my test Ecu is dead.

any suggestion ?

-- Edited by Manzo on Wednesday 28th of March 2012 07:12:36 PM

Manzo · Veteran Member

Ok folks, i am still stuck with this problem.

Changed Ecu, suspected a damaged Ecu but same issue with the new one.

After i launch the Arduino sketch ( fixed the serial library ) i keep
receiving only the string:

S214000000

and nothing else happens.

To have a common ground i am feeding Arduino with the 5v from the Vcc Aud pin, and using the Aud gnd.

I am powering the Ecu thru the 17pin and ground on 34 pin.
Am i missing something ? Should i ground the sensors ground as well ?

Please Psyche, little help, i am ready to dump the Ecu and cant wait to start tinkering with the bin :)
Its a 600 K5 thou.

-- Edited by Manzo on Wednesday 28th of March 2012 07:13:51 PM

-- Edited by Manzo on Wednesday 28th of March 2012 07:14:22 PM

Manzo · Veteran Member

Ok, after spending a week tinkering in every possible way,
i can say this Arduino software DOESNT work.
I am no coder so i cant troubleshoot the if its a logic problem in the software,
but the way it is provided it fails to do the expected work.

If no wires are connected to the Ecu the software only output endless FF,
as soon aswires are connected it only output a single string:

S214000000

then it stops there.

psyche · Senior Member

I am really sorry for the really late reply but i had some problems with my job and the army!!! Happily i am back and done with it!

2 days before i post the code here i had a problem with the Arduino IDE! It crashed and i lost all the work that i did! So i rewrote everything back without testing it!
Anyway i rememder that i added 2 lines of code in the sketch but i dont remember why i did that!

The lines are :

PORTB = 0x0; // ????dummy byte
StrbSyncLow();

Search in the sketch for those exact 2 lines and erase them. Compile and test again! There is nothing wrong with the ECU! It is all matter of the code!

Please do as I say and post back or send me an email! I will respond this time! I hope that the problem will be solved and it will be solved! We create the problems and we find the solution to them!

Cheers

Manzo · Veteran Member

Psyche i hope you fixed your problems and that was nothing too bad,
I am sorry if i sounded harsh, i just wanted to give some feedback to avoid other people
getting crazy trying to have the arduino code to work, maybe the language barrier
made my post sound more harsh than it was intended to be (English isnt
my main language;) )

I will test the workaround this evening and keep you updated !

Oh, i did the hardwareSerial library fix also, i suppose that must remain in place right ?

psyche · Senior Member

Yes the hardware serial shall remain as you have it fixed!

Manzo · Veteran Member

Psyche,
Removed the 2 lines, same story.

Make some coffee and relax...
S214000000

If i disconnect all the cables:

Make some coffee and relax...
S214000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFB
S214000010FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEB
S214000020FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFDB
S214000030FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFCB
S214000040FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFBB
S214000050FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFAB
S214000060FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF9B

psyche · Senior Member

Ok let me set up my configuration and check the sketch! This is a bit strange! Are you sure that the cables are at the correct lines? Please follow the guide below.

ECU PIN# Arduino Digital Pin
1. Vcc ---------
2. Gnd GND Pin
3. AUDCK 4
4. AUDSYNC 5
5. AUDATA3 11
6. AUDATA2 10
7. AUDATA1 9
8. AUDATA0 8
9. ----------- ----
10. AUDMD 6
11. -------- ----
12. AUDRST 7

The number 12 is noted on the PCB of the ECU. Also note the AUDATA0-3 pins connection!

In the mean time i will find some time to check the sketch with an ECU!

Cheers

Manzo · Veteran Member

Psysche i followed the pinout described before in this thread.

psyche · Senior Member

The correct pinout is described below:

ECU PIN# Arduino Digital Pin
1. Vcc -> ---------
2. Gnd -> GND Pin
3. AUDCK -> 4
4. AUDSYNC -> 5
5. AUDATA3 -> 11
6. AUDATA2 -> 10
7. AUDATA1 -> 9
8. AUDATA0 -> 8
9. ----------- -> ----
10. AUDMD -> 6
11. ------- -> ----
12. AUDRST -> 7

Manzo · Veteran Member

The connections are correct, but still no luck.

Still:

Make some coffee and relax...
S214000000

The ecu is correctly powered up, with a multimeter i read 5V
from AUD Pin 1 and pin2 ( Vcc and GND ).

Manzo · Veteran Member

Psyche,
I SUCK :)

I removed the wrong lines from the code,
there are 2 very similar pieces, une is "dummy bit" and the other "dummy byte",
i removed the BIT, not the Byte......after removing the correct one the software
is now working, thank you for your patience :)

I owe you a beer ;)

Make some coffee and relax...
S21400000000000400FFFFAFA000000400FFFFAFA049
S21400001000002C4400002C4400002C4400002C441B
S21400002000002C4400002C4400002C440000134424
S2140000300000137200002C4400002C4400002C44E6
S21400004000002C4400002C4400002C4400002C44EB
S21400005000002C4400002C4400002C4400002C44DB
S21400006000002C4400002C4400002C4400002C44CB
S21400007000002C4400002C4400002C4400002C44BB
S21400008000002C4400002C4400002C4400002C44AB
S21400009000002C4400002C4400002C4400002C449B
S2140000A000002C4400002C4400002C4400002C448B
S2140000B000002C4400002C4400002C4400002C447B
S2140000C000002C4400002C4400002C4400002C446B
S2140000D000002C4400002C4400002C4400002C445B
S2140000E000002C4400002C4400002C4400002C444B
S2140000F000002C4400002C4400002C4400002C443B
S214000100000013A0000013D4000014080000143CE4
S21400011000002C4400002C4400002C4400002C441A
S2140001200000147000002C44000014A800002C44AA
S214000130000014F000002C440000152800002C4499
S2140001400000156000002C4400002C4400002C44E5
S2140001500000159200002C44000015C600002C4438
S2140001600000160600002C440000163A00002C443E
S2140001700000169400002C4400002C4400002C4480
S214000180000016C8000017060000173C0000177293
S214000190000017A8000017DC0000182C00001860EC
S2140001A00000189400002C4400002C4400002C444E
S2140001B0000018D00000190A000019440000197E3B
S2140001C0000019D000001A0A00001A4400001A7E27

-- Edited by Manzo on Saturday 7th of April 2012 09:12:53 AM

psyche · Senior Member

I am glad that you finally made it work! I dont remember why i added those 2 lines but it seems that they arent needed!
If you can send the arduino sketch back to check it and post a correct one! I would be glad also if you could send me the bin of that ECU for disassembly!

Manzo · Veteran Member

Sure Psyche,
I will post the correct code as soon as possible,
the BIN of this Ecu is a 41G00, i am using a KNOWN
Bin to compare my output to a known source.

But as soon as this "experiment" is over,
i am gonna read a 29G00 (600 K4-K5) and i will send it to you, count on it :)

Manzo · Veteran Member

The correct Arduino code can be found HERE:

http://www.filefactory.com/file/1fyqcwms25ld/n/Aud_Interface.zip

Thanks again Psyche.

The 29G00 incoming to your Email buddy. ;)

-- Edited by Manzo on Saturday 7th of April 2012 12:39:59 PM

Jochen_145 · Member

Glade that you guys found the problem

Link will need a payment user accound, so can you pls send my this zip via E-mail ?
ivoryheart[ät]freenet.de
or does psyche allready update his file in his link ?
This I can download without any problems..

Thank you very mutch..
Jochen

Manzo wrote:
The correct Arduino code can be found HERE:

http://www.filefactory.com/file/1fyqcwms25ld/n/Aud_Interface.zip

Thanks again Psyche.

Glade that you guys found the problem

Links will need a payment user accound, so can you pls send my this zip via E-mail or PN ?

Thank you very mutch..
Jochen

-- Edited by Jochen_145 on Saturday 14th of April 2012 06:34:09 PM

Jochen_145 · Member

Just for me to understand:
the output of the Arduino AUD Interface will be in shape, like Manzo post:

Adress is S214 + Adress in dump and at the then data and at the end a checksum ?
I am a bit confused about the output, because I expact the data like in a "normal" hexdump way.
e.g. like the attached screen shot.
This is the dump I need to wirte to flash.

Where do I stuck?
How to convert the output data of AUD-Inter to get a hexdump, witch I can reflash again.. ?
Manzo wrote:
Make some coffee and relax...
S21400000000000400FFFFAFA000000400FFFFAFA049
S21400001000002C4400002C4400002C4400002C441B
S21400002000002C4400002C4400002C440000134424
S2140000300000137200002C4400002C4400002C44E6
S21400004000002C4400002C4400002C4400002C44EB
S21400005000002C4400002C4400002C4400002C44DB
S21400006000002C4400002C4400002C4400002C44CB
S21400007000002C4400002C4400002C4400002C44BB
S21400008000002C4400002C4400002C4400002C44AB
S21400009000002C4400002C4400002C4400002C449B
S2140000A000002C4400002C4400002C4400002C448B
S2140000B000002C4400002C4400002C4400002C447B
S2140000C000002C4400002C4400002C4400002C446B
S2140000D000002C4400002C4400002C4400002C445B
S2140000E000002C4400002C4400002C4400002C444B
S2140000F000002C4400002C4400002C4400002C443B
S214000100000013A0000013D4000014080000143CE4
S21400011000002C4400002C4400002C4400002C441A
S2140001200000147000002C44000014A800002C44AA
S214000130000014F000002C440000152800002C4499

-- Edited by Manzo on Saturday 7th of April 2012 09:12:53 AM

Brix · Senior Member

Hi

you can flash the S-record-file back with FDT-Software.

Jochen_145 · Member

ARAIR I need a binary hex-dump to flash back ?

So how convert the S-record file to a biniary hex-dump ?

I even need this hexdump to open in RomRaider as editor.

BR

Brix · Senior Member

http://www.keil.com/download/docs/10.asp

Manzo · Veteran Member

Its a standard Motorola record, you can vonverto to a BIN file
using the utility MOT2BIN , in the link Brix posted.

Also you can load it directly into Renesas FTD and from there flash it to the Ecu
without conversion.

k25lol · Newbie

Sorry, this file is no longer available. It may have been deleted by the uploader, or has expired.

This error is usually caused by requesting a file that does not exist.
Manzo wrote:
The correct Arduino code can be found HERE:

http://www.filefactory.com/file/1fyqcwms25ld/n/Aud_Interface.zip

Thanks again Psyche.

The 29G00 incoming to your Email buddy. ;)

-- Edited by Manzo on Saturday 7th of April 2012 12:39:59 PM

Jochen_145 · Member

Manzo wrote:
Its a standard Motorola record, you can vonverto to a BIN file
using the utility MOT2BIN , in the link Brix posted.

Also you can load it directly into Renesas FTD and from there flash it to the Ecu
without conversion.

Ah..

Thanks for the link..

I need the hex-dump to load an remap via RomRaider

But now it seems to work the way I am used to

Thanks for all your work and help

smile

sami1 · Member

Hello Gentlemen,

One dumb question.

Is it wrong to power up ECU by using main connector (~all pins connected when reading AUD) or do I have to power up it by using ONLY those two pins?

sami1 · Member

Okay - I powered ecu with only those two pins. I measured also voltage between AUD 1 (vss) & 2 (gnd) and it was 5V.

-- Edited by sami1 on Tuesday 1st of May 2012 11:14:31 AM

sami1 · Member

Make some coffee and relax...

S21400000000000400FFFFABA000000400FFFFABA051

----------------------------------------------------------------

------------some lines between--------------------------

----------------------------------------------------------------

S21403FFE0FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF19

S21403FFF0433333344B4549329D35FFFFFFFFFFFF45

Done

Command not supported. Please retype!

I got something out - maybe. How many lines I should get from the memory?

-- Edited by sami1 on Tuesday 1st of May 2012 09:48:57 PM

Twice · Senior Member

SH 7054 = 384kb (0x00000000 -> 0x0005FFFF)
SH 7052 = 256kb (0x00000000 -> 0x0003FFFF)

So by looking at your last line i think you are pretty close if you are reading a 7052 :)
Digits in last line shall be the ECU Identification number if i remember correctly.
Dont got any HEX editor installed for the moment but it´s MANY lines, can check later if you need...

psyche · Senior Member

The "Command not supported. Please retype."
This is from the arduino code! I need to check it! Probably it is a bug!

sami1 · Member

I got 16 thousandsomethig. 3FFF - 0 = about 16383

If I'm calculating 3FFFF - 0 = 262143 lines. But is it the right way to calculate? Last codeline says only 3FFF, so the one 'F' is missing. Did I miss something? My background is mechanical, so that's why I'm asking dump questions :)

And yes its 7052 from ZX12 '05.

psyche · Senior Member

The last line says 3FFF0 so it is correct! ;)

sami1 · Member

Okay good :) So the last letter in these addresses is marked with 0.. or something.

I will upload the file somewhere later!

Twice · Senior Member

Psyche you are fast as usual

Must say that i am not entirely sure "off hand" how to calculate row count :)
Can look into it and give you exact row counts later tonight...

Here is a picture from the ending of 41G00 .bin, 3FFFF is end at line 3FFF0.
So as long as nothing is missing in the middle i think you are good.

Dont forget to thank RidgeRacer or Psyche depending on wich code you used

psyche · Senior Member

The 3FFF0 is the first byte in that line! So if you count byte 0x43 as 3FFF0 then 0x33 is 3FFF1 and so on!
The last byte on that line is the checksum of that line. The byte before the checksum is the last byte so the address is 3FFFF!
It is not that hard to understand it!
I wonder how can people tune bikes and disassemble binaries if they cant understand something that simple!
No offends, just wondering! ;)