Thread: Zexel ECU chip ID

That is basically the process. There are few sites that have reasonably good overviews of the process like this:

ECU Hacking 101: So you want to hack your ECU. Where do you start?

You have more options if the ECU has good OBDII support as the OBDII routines should be relatively easy to find and the request codes for PID's will pinpoint specific parameters. From there you can work back into the ECU code.

I've found the most important thing is the documentation for the CPU and supporting chips. In fact any relevant documentation is going to help

cheers
Paul

I'm battling for processor ID right now. It's the same as these: 5 Pcs NSC SCL4410 V4 PLCC | eBay

Can't find a data sheet.

Originally Posted by Dougal

I'm battling for processor ID right now. It's the same as these: 5 Pcs NSC SCL4410 V4 PLCC | eBay

Can't find a data sheet.

I can't find anything on it either...

I saw your pics posted to Ih8mud. What is the chip to the left of the SCL4410 that has a much higher pin count and finer pitch? The reason I ask is the SLC4410 appears in the Galetto listing of supported eeproms, and the other chip looks more like a CPU so you might be hunting for the wrong device.

Add: The Ih8mud thread has a hint - someone mentions connecting HC(S)12 >> SCL4410. The HC(S)12 will be the Freescale 68HC12 which is what I bet is lurking off to the side. Very commonly used in ECU's.

cheers
Paul

Originally Posted by OffTrack

I can't find anything on it either...

I saw your pics posted to Ih8mud. What is the chip to the left of the SCL4410 that has a much higher pin count and finer pitch? The reason I ask is the SLC4410 appears in the Galetto listing of supported eeproms, and the other chip looks more like a CPU so you might be hunting for the wrong device.

SIEMENS
ZEXEL
479731-9000

Might be either proprietory or a relabelled version of something common.

Originally Posted by OffTrack

Add: The Ih8mud thread has a hint - someone mentions connecting HC(S)12 >> SCL4410. The HC(S)12 will be the Freescale 68HC12 which is what I bet is lurking off to the side. Very commonly used in ECU's.

cheers
Paul

That has been bugging me. Before I even identified the ROM chips on this ECU two mates into electronics and myself were talking about a 68 pin motorola micro-controller M68HC12. But this was ~2 years ago and I can't find any of the information that led me to that conclusion.

Zexel became Infineon. Infineon make automotive micro controllers, so I think that might be an avenue to pursue. I found a datasheet site that suggested the Infineon xc161 series was a later version of that Zexel chip.

Originally Posted by OffTrack

Zexel became Infineon. Infineon make automotive micro controllers, so I think that might be an avenue to pursue. I found a datasheet site that suggested the Infineon xc161 series was a later version of that Zexel chip.

Zexel is basically Japanese Bosch. They don't make chips, but they do make ECU's for injection control. I have two of these Zexel ECU's here, one from the YD22 which has Siemens on the chip, the other ZD30 which has Infineon at the top but still has Siemens.

I downloaded the free version of IDA, but it appears to only cater to Intel 8X86 series processors. For now I'm assuming it's a Motorola M68HC12 compatible device.
Any thoughts on this one? Free Simulator for Freescale Semiconductor 68HC12

Originally Posted by Dougal

Zexel is basically Japanese Bosch.

Sorry I should have said Siemens -> Infineon, not Zexel.

In 1999, Siemens' semiconductor operations were spun off into a new company known as Infineon Technologies.

Which chip does the TD5 use and can you share which decompiler you are using?