Does anyone of you happen to have a tuned 'bin' file available? I use to tune honda's and for honda there are a LOT of diy chiptuning programs / rom-editors... Is there something like that available for Fiat ('95 coupe turbo 16v)? maybe someone has read-out a squadra chip or something and saved the bin so i can burn the chip myself?

I hope you guys can help a little diy-tuner like me <img src="/forum/images/graemlins/smile.gif" alt="" />

Erik
(from the Netherlands)

What is the chip number in the 16V Turbo?

you mean the number that's written on the chip in the car? I didn't open up the ecu yet, but know it's a 27c256 chip... link to Squadra

OK so the Squadra bios is on a 27C256 eeprom. My programmer can read and write these chips. So if you send me the chip i can make you a copy.

i've also got a programmer (honda uses the same chips), so i'm just looking for the bin's... doesn't anyone have a (squadra-) chip AND a programmer? if so: please read the chip and post the bin <img src="/forum/images/graemlins/smile.gif" alt="" />

I would also like the bin file but i'm pretty sure that not many people are capble of doing this.

chipburner are available for 46 dollar, including shipping, on Ebay ... isn't there anybody who wants to make a backup of their chip? i'm sure a lot of people would appreciate it <img src="/forum/images/graemlins/smile.gif" alt="" />

If you want it that badly why don't you buy the Squadra chip and read it yourself?

I generally wonder if somebody runs the squadra chip on a 16VT. Because most run the Evo Chip. I'm interested if the torque gain is realy that huge. Would be a good improvement for the 16VT to have more low down torque.
Squadra 16VT

Daniel

who need a file?? please make a list with all email adresses i going to send everybody a tuning file..have fun

You could also have a look for "HFAlex2 in google, can see some of the work he has done for the integrale's

Squadra (and superchips) use a protection/encryption board on their tuned chips so you won't be able to dump them out on a normal eprom programmer like the Willem. <img src="/forum/images/graemlins/wink.gif" alt="" />

Well you can dump the eeprom as it’s a standard 512 eeprom but that only depends on how good you are. Yes they may be smart enough to encrypt the bios then use a processor chip to decrypt it as it runs the bios. But before I got into cars I used to write PIC chips and do electronics so busting their protection shouldn't be a problem for me. Just wondering what chip they use as a protection? I'm not interested in ripping off their hard work. I just like a challenge?

They use encryption boards from here:

http://www.evc.de/en/product/keys/keys.asp

which sit on the lower side of the board, between the encrypted ROM and the ECU's microcontroller. Basically they have a PIC16c54 (plus external clock) to monitor the bus traffic and a programmable logic chip (GAL) to handle the decryption in real time.

It's fairly sophisticated, but like you say not *that* hard to get around if you know what you're doing. <img src="/forum/images/graemlins/wink.gif" alt="" />

Ok, so it uses a coded key system. The eeprom data is encrypted just as I though so even if you read the data out and had the correct software to change it it wouldn't work as the data is encrypted. I would need to find out the decrypt key. Could hook it up to a logic analyser to get the key out but then I wonder how many bytes the key is?
This method may be better as busting a 16C54 is not that simple. I’m going to look into this further as I’m bored and fancy a challenge. Do you have any info on any of this e.g data sheets etc?

Correct.


The keys are different for every company they supply the encryption boards to. But even knowing the keys wouldn't help without also knowing the decryption algorithm which of course will be unique and non-standard.

And they don't just decrypt data lines, they're encoding some address lines too, so the encrypted byte at address $1234 in the ROM won't necessarily end up at address $1234 when read by the ECU.


You can get datasheets for the PIC and GAL easily enough (though they sand the ID off the top of the GAL and encase the PIC in resin/glue on later boards) but anything beyond that would have to be worked out.

God this all reminds me of the good old days <img src="/forum/images/graemlins/laugh.gif" alt="" />. Nasty black resin. Chip numbers being sanded off. Data sheets needed. Trying to find out the encrypt/decrypt method and keys. I think I'll order a few chips just in case i mees one up <img src="/forum/images/graemlins/laugh.gif" alt="" />

I'm using the Tunerpro freeware (do a google search to find it) and I did a customer definition file for the 16VT ecu. I started to remap fueling to cope with the 3 bar fpr and 440cc injectors and it works fine. I'm also using an utility to calculate the eprom checksum after modifications. It's pretty simple.

Next step is fitting the wide band lambda sensor to have an accurate mapping. Please send me a PM and I will send you the definition file and some instructions. The HF Alex site talks about the 128kb eproms not the 256 one.

I recommand using 27SF256 or 27SF512 eproms. You can clear them in less than one second and reuse them a lot of time.

My DIY tuning parts :
-tiny USB eprom burner (bought on ebay)
-2x27SF512 eproms
-1 ZIF socket for ecu
-Tunerpro software + IAW def file
-checksum program (Java written program)
-Innovate LC-1 wideband kit

Hope this helps.