cem volvo

This talks about BDM used on card Engine computer
Post Reply
romassii
Junior Member
Posts: 3
Joined: Fri Feb 19, 2016 1:02 pm

cem volvo

Post by romassii »

-Freescale 160-Pin MC68376 memory
TB28F400B5B80
read flash okk,but not be erased end programed
usbbdm
Junior Member
Posts: 8869
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

http://pdf1.alldatasheet.com/datasheet- ... B5B80.html
Read the flash datasheet, you might need to use some pull up resistors.

VPP PROGRAM/ERASE POWER SUPPLY: For erasing memory array blocks or
programming data in each block, a voltage either of 5 V ± 10% or 12 V ± 5% must
be applied to this pin. When VPP < VPPLK all blocks are locked and protected
against Program and Erase commands.

WRITE PROTECT: Provides a method for unlocking the boot block with a logic
level signal in a system without a 12 V supply.
When WP# is at logic low, the boot block is locked, preventing program and
erase operations to the boot block. If a program or erase operation is attempted
on the boot block when WP# is low, the corresponding status bit (bit 4 for
program, bit 5 for erase) will be set in the status register to indicate the operation
failed.
When WP# is at logic high, the boot block is unlocked and can be
programmed or erased.
NOTE: This feature is overridden and the boot block unlocked when RP# is at
VHH. This pin can not be left floating. Because the 8-Mbit 44-PSOP package does
not have enough pins, it does not include this pin and thus 12 V on RP# is
required to unlock the boot block. See Section 3.3 for details on write protection
usbbdm
Junior Member
Posts: 8869
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

Is there any EEPROM on the board needs to be accessed?
romassii
Junior Member
Posts: 3
Joined: Fri Feb 19, 2016 1:02 pm

Post by romassii »

eeprom here are no
romassii
Junior Member
Posts: 3
Joined: Fri Feb 19, 2016 1:02 pm

Post by romassii »

vpp-12v
WP 5v
RP 5V
WE 5V
ZRimaZ
Junior Member
Posts: 15
Joined: Fri Oct 07, 2016 1:11 am

Post by ZRimaZ »

Hi folks!

I recently purchaced USBBDM NT and would like to do some experiments on above mentioned volvo CEM to read flash. As I understood, there is possibility to read it in bdm mode. What exactly connection should I make? Only USBJBDM->Motorola, or some connections to 28F400 as well, because last post from romassii confused me little bit - as I understood, you mentioned pins of 28F400, right?

Sorry for my questions, I'm newbe with USBBDM :D

Regards,

ZRimaZ
usbbdm
Junior Member
Posts: 8869
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

You board should have some kind of BDM connector, it is a 10 pin connector. BDM is a way that PC talks to MC6833X CPU. You donot need to connect BDM NT to any pin on flash.
ZRimaZ
Junior Member
Posts: 15
Joined: Fri Oct 07, 2016 1:11 am

Post by ZRimaZ »

usbbdm wrote:You board should have some kind of BDM connector, it is a 10 pin connector. BDM is a way that PC talks to MC6833X CPU. You donot need to connect BDM NT to any pin on flash.
Thanks for reply!

OK, I found the BDM pins on the board, but what means your post #2 and romassii's post #5 on this thread? I understood, that to write the flash It is necessary to connect some 28F400 pins. Or I'm wrong?

And what about power supply? I do not see any Vpp pins on the BDM connector...
usbbdm
Junior Member
Posts: 8869
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

ZRimaZ wrote:Thanks for reply!

OK, I found the BDM pins on the board, but what means your post #2 and romassii's post #5 on this thread? I understood, that to write the flash It is necessary to connect some 28F400 pins. Or I'm wrong?

And what about power supply? I do not see any Vpp pins on the BDM connector...
Power supply to your device as normal. There is no power supply on the BDM connector.
You need to detect the flash first then you can read the flash. After that we can work on how to program it.
ZRimaZ
Junior Member
Posts: 15
Joined: Fri Oct 07, 2016 1:11 am

Post by ZRimaZ »

Hello again

I had no time to experiment before, today I tried to connect volvo cem to usbbdm via bdm pins on the cem (BERR, DCK, FRZ, DSI, DSO, DS, GND, RST), powered cem with external power, but no result - I have the "BDM OFF"all the time. What I'm doing wrong?

Regards,

ZRimaZ

Added after few moments:

Sorry, made mistake with bdm wiring. Everything is OK - at least I was able to read flash, will try to erase/write.
usbbdm
Junior Member
Posts: 8869
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

Issue a command "reset 1", you should see BDM ON. If not check your connections and power supply. You should also see some good value for registers. (Use latest software).
ZRimaZ
Junior Member
Posts: 15
Joined: Fri Oct 07, 2016 1:11 am

Post by ZRimaZ »

Thanks for quick response. I found the mistake in wiring :(

I'm using now VOLVOCEM.XML, but I have the message

"Unknown flash type!
Report these values http://www.usbjtag.com/vbforum 00ff,d200", unless flash has been red correctly.
"

I can't erase the flash:
"Unknown flash type!
Report these values http://www.usbjtag.com/vbforum 00ff,d200
-erase Code
Detect the flash type first!
"

VPP of 28F400 is connected to +12V via 100 Ohm resistor.
usbbdm
Junior Member
Posts: 8869
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

ZRimaZ wrote:Thanks for quick response. I found the mistake in wiring :(

I'm using now VOLVOCEM.XML, but I have the message

"Unknown flash type!
Report these values http://www.usbjtag.com/vbforum 00ff,d200", unless flash has been red correctly.
"

I can't erase the flash:
"Unknown flash type!
Report these values http://www.usbjtag.com/vbforum 00ff,d200
-erase Code
Detect the flash type first!
"

VPP of 28F400 is connected to +12V via 100 Ohm resistor.
Normally this indicate the wrong XML is used. If the ECU is not known one, I need to disassemble the firmware and create the XML for this one.
You might also try to disassemble it and see if you can figure out yourself. It is the initial sequence that matters the most.
ZRimaZ
Junior Member
Posts: 15
Joined: Fri Oct 07, 2016 1:11 am

Post by ZRimaZ »

usbbdm wrote:Normally this indicate the wrong XML is used. If the ECU is not known one, I need to disassemble the firmware and create the XML for this one.
You might also try to disassemble it and see if you can figure out yourself. It is the initial sequence that matters the most.
Ok. What do you need for this? Flash binary? I have a lot of them red, I can send it. Just tell me.
BTW, the binary I red with usbbdm yesterday has odd and even bytes swapped. But it's the minor problem.
One more thing- link to disassembler on your page is not valid-it's link to different file, not to disassembler.

Added later:

I attached 2 files with flash binaries: "28f400 by usbndm.rar"is the one I red yesterday with usbbdm, the second one is red directly with programmer from de-soldered flash.


Regards,

ZRimaZ
You do not have the required permissions to view the files attached to this post.
usbbdm
Junior Member
Posts: 8869
Joined: Mon Jul 18, 2005 9:33 pm

Post by usbbdm »

Just fix the link.
Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests