Search found 258 matches

Go to advanced search

by Stevebe
16 Nov 2021, 16:44
Forum: Disassemble Convers+ Firmware
Topic: Hidden serial service-port
Replies: 4
Views: 6949

Re: Hidden serial service-port

While browsing through the disassembly of the preFL firmware (AG) i found something which may be a hidden service port for the device. I traced down the port this routines accessing and found out that they connect an RXD/TXD to the IPC connector at pins, not utilized by the car. i did try looking a...
by Stevebe
04 Nov 2021, 19:32
Forum: Disassemble Convers+ Firmware
Topic: Setup IDA Pro to disassemble preFL Convers+ Firmware 7M2T-14C026-AG
Replies: 7
Views: 8533

Re: Setup IDA Pro to disassemble preFL Convers+ Firmware 7M2T-14C026-AG

first time i have under stood how to use ida thanks
by Stevebe
02 Nov 2021, 23:37
Forum: Disassemble Convers+ Firmware
Topic: Hidden menu: Pointer placement mode
Replies: 14
Views: 15604

Re: TODO: Pointer placement mode

Ursadon wrote: ↑09 Mar 2020, 09:57
Go4IT wrote: ↑23 Dec 2019, 21:08
1.png

To enter to debug mode you need to:
1. Reset via reset pin
2. short-circuit right button ladder contacts
2.png
3, pull PE12 up
3.png
3.png
it remains only to find out what this contact is connected with
pull point PE12 can be found on this via
pe12 via.jpg
by Stevebe
02 Nov 2021, 23:01
Forum: Clocks/Speedos
Topic: How to recover bricked Convers+ (SOLVED)
Replies: 44
Views: 41349

Re: How to recover bricked Convers+ (SOLVED)

now we need to read the flash
by Stevebe
02 Nov 2021, 22:55
Forum: Clocks/Speedos
Topic: IPC test and data mode
Replies: 4
Views: 6532

Re: IPC test and data mode

i used UCDS to show when a menu button was pressed this was before i have a propper menu switch all i used was buttons in a chain and diods as volt drop, only sent ign on wile hold ok button then just pressed ok to cancel any error displayed this was a long time ago like you and GW have decided to l...
by Stevebe
26 Sep 2021, 21:40
Forum: IDA Pro
Topic: Disassemble HCS12 firmware with paged ROM (Flash)
Replies: 1
Views: 5084

Re: Disassemble HCS12 firmware with paged ROM (Flash)

Njce work im just dumping the same chip
by Stevebe
17 Jun 2021, 22:17
Forum: Clocks/Speedos
Topic: S-max 2019 cluster dead
Replies: 7
Views: 8508

Re: S-max 2019 cluster dead

I can't upload anything it says "SBL LOAD FAIL" ;) HAVE YOU GOT A IGNITION CAN on hs3 you must send ignition on all time other wize UCDS wont work here are to try both send from UCDS although i think there is a bug in thr latest version in the can bus player on hs3 id 3b3 data 40800012FF0...
by Stevebe
22 May 2021, 13:20
Forum: Clocks/Speedos
Topic: S-max 2019 cluster dead
Replies: 7
Views: 8508

Re: S-max 2019 cluster dead

What can message are you sending to ipc for ignition on Also just check the can connections allso add a 120 ohm resistor across can buss,, The other thing inside on right near sound there is 3 test points rx tx g connect uart then use putty terminal see im the MB86R03 350C4129-5D21-4964-A2CD-36A10C2...
by Stevebe
02 Apr 2021, 18:11
Forum: Protocols
Topic: Ford Mondeo MK4 CAN-DB
Replies: 64
Views: 60011

Re: Ford Mondeo MK4 CAN-DB

sanndo wrote: ↑02 Apr 2021, 16:27
Stevebe wrote: ↑02 Apr 2021, 12:54 Yeah on mk4 its on mm can
Did you know ID?
Id 048 FF 07 6C 09 27 02 E0 A0
by Stevebe
02 Apr 2021, 12:54
Forum: Protocols
Topic: Ford Mondeo MK4 CAN-DB
Replies: 64
Views: 60011

Re: Ford Mondeo MK4 CAN-DB

sanndo wrote: ↑21 Mar 2021, 19:03 Wondering, is there a ignition over MM-CAN?
Yeah on mk4 its on mm can

Go to advanced search