motorola chip, what programmer to use? - Page 1
Forum section: electronics / general

author: PiotrMisiuna
author_rank: Contributor
timestamp: July 29, 2023, 02:04:16 pm
content: This chip is on board of bosch ME2.0 ECU. I found several tutorials on how to read and write them, but all are talking about motorola hc11The one I have is ZC432644cfn and I can barely find any mention of it online.Anyone know what can I program it with ? I mean at reasonable price.

author: bingo600
author_rank: Super Contributor
timestamp: July 29, 2023, 04:55:55 pm
content: Looks like a "Custom made (marked) unit"Motorola did that for large customers.Some of them weremaskprogrammed from the factory ... aka. non upgradeable.But it could also "just be a HC11" with custom markings.Have a look herehttps://www.codecard.eu/index.php?act=viewCat&catId=40https://codecard.eu/index.php?act=viewProd&productId=85&ccUser=https://codecard.eu/index.php?act=priceList/Bingo

author: Benta
author_rank: Super Contributor
timestamp: July 29, 2023, 05:06:39 pm
content: It's an MC68HC11E9 with mask program ROM. No way to change it.

author: PiotrMisiuna
author_rank: Contributor
timestamp: July 29, 2023, 05:29:20 pm
content: Thanks a lot, exactly what I suspected. I lost days looking for any info on it.This comes from my old mercedes, there are some unrelated problems with the ECU but I don't want to dig in it without first saving the hash file.one more questionThis is a one shot for me and buying an original carprog reams unjustified. There are some clones under 50€ on ali,Do you think this would be able to handle this?

author: Benta
author_rank: Super Contributor
timestamp: July 29, 2023, 06:53:15 pm
content: There are a few dangers here.Can you read out the contents of the 68HC11E9 ROM?Yes, you can, but only after the RAM and worse, the EEPROM has been erased. Nasty about that is, that the EEPROM is likely where your engine parameters are stored.So think twice before proceeding with this.

author: PiotrMisiuna
author_rank: Contributor
timestamp: July 29, 2023, 09:14:08 pm
content: I understand and agree, I would really prefer to give this job to a specialist, but here in Cyprus I don't know anyone able to do it at a price that wouldn't exceed the value of this car.This is tricky since I would get only one shot, and I don't even have another one to experiment with.That would be awesome to acquire a new skill, but maybe it's really not worth the risk.

author: Benta
author_rank: Super Contributor
timestamp: July 29, 2023, 09:40:15 pm
content: Quote from: PiotrMisiuna on July 29, 2023, 09:14:08 pmWrong.You won't even get one shot. The EEPROM (512 bytes) where the engine parameters are stored will be gone on the first try. After that, you can read out the program ROM (12 Kbytes) as often as you like.You can also reprogram the EEPROM as often as you like after that. But the original contents are gone forever.If you know someone with the parameters for the EEPROM as a hex-file, go ahead.But I see little point in this. ECUs don't break, especially not the MCU.

author: tru
author_rank: Regular Contributor
timestamp: July 29, 2023, 11:02:51 pm
content: Are you referring to the standard security? I.e. CONFIG register where NOSEC bit is set to 0?If you're lucky enough that this custom version still has the standard Motorola bootloader program at $B600 (most vanilla 68HC11 comes with it) then both the EEPROM and program ROM can be read out in special bootstrap mode, using the serial COM interface, and a suitable user duplicator utility. This process is non destructive, the EEPROM will not be erased.

author: Benta
author_rank: Super Contributor
timestamp: July 29, 2023, 11:28:23 pm
content: It's an 'E9, so you need to deal with both BPROT and CONFIG.Not much hope here, I think.

author: amyk
author_rank: Super Contributor
timestamp: July 30, 2023, 02:22:20 am
content: Depending on where the mode pins are, it might be possible to force it into test mode.

author: darkspr1te
author_rank: Frequent Contributor
timestamp: July 30, 2023, 06:30:11 am
content: While this answer is sorta on subject but also sorta not on subject, The ME2.0 ecu's can be swapped for ME2.8 ecu's which are easier to hack/clone and mod tuning params, there are a whole host of sites with guides on the swap and if you intention is to tune/mod later in this might be a route for you.Also years back when i use to modify OPEL engines like the C20XE we were able to buy a adapter that went over the original chip and would act as it's replacement , I personally sent off the ecu for the fitting but many DIY'ed it too, also a alternative option as you can also upgrade the cpu's options too, in our case the upgrade added boost control and wideband input to a stock bosch ecu from 1990. I dont know if people still sell these items or the fact that cheap DIY ecu's can be had that superseded the need.it might be a option to turn too if hacking the original device runs into issues.darkspr1te

author: PiotrMisiuna
author_rank: Contributor
timestamp: July 31, 2023, 07:57:22 pm
content: A small correction, I wroteME2.0, but as I dug into it it seams is ME 2.1probably not much differencein any case I just want to make it work and doing it without saving the programmed data seams a bit silly.yet another option is to find a donor ECU together with key and ignition key hole sensor. in older models immobilizer data is the only thing that is specific to those 3 parts.