Members Login
    Remember Me  
Post Info TOPIC: enter diag on moric ecu


Status: Offline
Posts: 4
enter diag on moric ecu

hello im trying to read some sensor data from a moric ecu 9s12t

as far i understand this chip got 2 sci interfaces that run on different baudrates

SCI0 - > 9615 baud

SCI1 -> 15625 baud

the sci0 is part of the bootloader i guess and that can get access to the ecu by passing a key i can do that allready and flash my ecu or change registers and read data 

the booloader use opcodes from 1 to F so buy connecting to it with 9600baud and sending for example 0x1 plus the key and the checksum of this you get access to the ecu

the sci1 got its own interrupt handler and i found some opcodes(0x00,0x01,0x02,0xFD,0xFE,0xCD,0xCC,0xCA,0xCB,0xC0,0xC1) for it but when i use the 15625 baud to send them i get no replies from the ecu

i think im missing something here so if any one can drop a hint i will apreciate it



Status: Offline
Posts: 4

i think i found it you have to send 0xFD or 0xFE the moment you turn the key on if dont do that fast enough you wont enter in diag

i tested that with op codes 0x00 it returns 00 00 00 00 00, 0x01 and 0x02 retuns their own data and a checksum byte at the end

if any one knows anything more feel free to post it. I will try to keep this post updated

Page 1 of 1  sorted by
Quick Reply

Please log in to post quick replies.

Tweet this page Post to Digg Post to

Create your own FREE Forum
Report Abuse
Powered by ActiveBoard