Ford Scorpio Forum (https://www.fordscorpio.co.uk/cgi-bin/yabb/YaBB.pl)
General >> Give/Need advice to/from others >> Flash (on lock) and CCModule
(Message started by: harry.m1byt on Nov 20th, 2006, 10:33pm)

Title: Flash (on lock) and CCModule
Post by harry.m1byt on Nov 20th, 2006, 10:33pm
On Sunday I picked up a CCM from a scrapped P reg Scorp. The CCM is dated month(?) 1996 and I have just tried it in my Aug 1995 Ultima 2.9 12v auto, which annoying didn't flash the indicator to confirm it was locked when using the remote.

After plugging it in, the remote would not work so I had to reprogram it (but I had the battery out yesterday to install a caravan supply).

Pressing lock once caused it to lock, pressing it a second time caused it to double lock and then there was a bit of delay before THE LIGHTS FLASHED briefly twice. No flash on unlock and no flash on single locking, but it flashes. The delay to flash seems much less, if I simply press the lock button twice initially, where upon it double locks - before, due to the lack of feedback I was struggling to know just what it was doing.  

I checked the foot well, puddle lights and global open/close and they do still work with the '96 CCM anything else which might need to be checked?

Note: I have copied the above both in the original (Problems) thread as well as starting a new thread - as the above probably has wider interest.

Title: Re: Flash (on lock) and CCModule
Post by mr._floppy on Nov 21st, 2006, 1:12am
The  process  you  describe  is  the  only  time  that  the Scorp  normally gives a  flashing indicator  acknowledgement  of a  locking or unlocking  manoeuvre, it only does it on  double locking   ( although I've been unable to replicate it on my Scorpio ).

Title: Re: Flash (on lock) and CCModule
Post by wickedteen on Nov 21st, 2006, 6:44pm
does anyone know what the CCM does exactly ??? ??? ???

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Nov 21st, 2006, 7:30pm

on 11/21/06 at 18:44:18, wickedteen wrote:
does anyone know what the CCM does exactly ??? ??? ???


As near as I have been able to work out:-

It is the alarm system, getting input from the doors, boot and bonnet. It is the receiver for the remote control. It also controls the door locks, mirrors, windows, electrically operated seat positioning and tells the timer module to switch the interior lights on.

It does these functions via a multiplex system - instead of individual wires to each item, data is transmitted back and forth down a single pair of wires strung around the entire car to enable it 'talk' to or address remote units located around the car - in the doors under the electric seat, in the boot lock etc..  

The multi-plexing simply allows some very complex control functions to take place, without need for a massive bundle of wires and increasing the complexity of the car/reducing its reliability.

You push the close O/S/R window button on the drivers door, the button is connected to the multiplex unit in the door, which requests it of the CCM and the CCM then signals the multiplex unit in the O/S/R door to close the window.

Which all means the CCM can be reprogramed to flash the lights on lock quite easily, or just as easily open then close a window to acknowledge it has received a lock command from the remote.

I have had to do a lot of guessing to write the above and no doubt if any of it is wrong, then someone with more knowledge will correct me.    

Title: Re: Flash (on lock) and CCModule
Post by twinturbo on Nov 21st, 2006, 7:52pm
Mine flashes on lock, double lock and I think on unlock..

TT

Title: Re: Flash (on lock) and CCModule
Post by wickedteen on Nov 21st, 2006, 8:32pm
i thought they only flash on double lock

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Nov 21st, 2006, 9:55pm
Mine, with the replacement CCM, does only do a double flash when double locked. The original CCM didn't flash the indicators when the alarm was sounding, but I have just checked it and this one does flash them - makes it much easier to work out who's alarm has been triggered, when parked in a row of several cars.

I have also compared the two CCM's:-

The old one has only two licence free approval country stamps, where as the one which flashes has almost a full set of these stamps. These are printed in the square boxes on the white label stuck on the CCM. As stated earlier the one which flashes came out of a scrap '96 P reg and the CCM had a date stamped on it of '96, but I could not make out the month part.  Getting one identical in looks might not necessarily guarantee that it will flash - the original owner of mine might well have taken it back to Ford, to have the CCM reprogramed to flash.

Title: Re: Flash (on lock) and CCModule
Post by jonnycab on Nov 22nd, 2006, 3:43am
Just to verify......my 98 facelift flashes on double lock only.

My old 95 didnt flash at all  :)

Title: Re: Flash (on lock) and CCModule
Post by Dave2302 on Nov 22nd, 2006, 11:43am
Hi,

Mine flashes same as TT's, on each press of the button, it all depends what is enabled or disabled.  !!

Title: Re: Flash (on lock) and CCModule
Post by Highlander on Nov 22nd, 2006, 12:39pm
Maybe a wee business  for you Baz?  ;D

Programming all the extras

Maybe even on a mail order basis :)

Title: Re: Flash (on lock) and CCModule
Post by big_neil on Nov 22nd, 2006, 3:12pm
my nov 98 one only flashes on double lock,

Title: Re: Flash (on lock) and CCModule
Post by wickedteen on Nov 22nd, 2006, 4:22pm
oh my god were are FLASHERS  ::) ::)

Title: Re: Flash (on lock) and CCModule
Post by Dave on Nov 22nd, 2006, 10:53pm
96 24v never used to flash on anything. Re-programmed by Ford, now 1 flash on unlock, 1 on lock, 2 on double lock and 1 on boot open  8)

Title: Re: Flash (on lock) and CCModule
Post by Baz on Nov 22nd, 2006, 11:43pm
Mine flashes.....beeps and opens all the windows with a few fancy fob button pushes.... amazing thing the flash on lock mod!!

I also got the one that leaves the lights on for 30 secs after you turn off the engine so you don't trip over the cat in the dark!! ;D

Title: Re: Flash (on lock) and CCModule
Post by Dave2302 on Nov 23rd, 2006, 8:57am

on 11/22/06 at 22:53:41, Dave wrote:
96 24v never used to flash on anything. Re-programmed by Ford, now 1 flash on unlock, 1 on lock, 2 on double lock and 1 on boot open  8)


Yup, thats exactly what i did to mine  ;D

I did notice other options, like Baz said, which I wasn't sure of.......

I think by some fancy button work on the remote, you can get the Global open / close to work as well, but I wasn't sure exactly what to enable and disable with the FDS as I'd only borrowed it ! ..........

Had a vision of pressing the unlock button twice and boom, sunroof flies out followed by two front ejector seats   ;D ;D ;D ;D ;D ;D ;D ;D ;D

Mind you could be useful if you look up your drive to see scum bag sitting in your car removing the stereo and satellite etc  }{ }{ }{ }{ }{ }{ }{ }{ }{

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Nov 23rd, 2006, 5:45pm

on 11/23/06 at 08:57:21, Dave2302 wrote:
I think by some fancy button work on the remote, you can get the Global open / close to work as well, but I wasn't sure exactly what to enable and disable with the FDS as I'd only borrowed it ! ..........


Anyone have access to an FDS in exhange for beer tokens in the W. Yorks area? Or could someone do this via the post, perhaps?

So where does the FDS plug in to make adjustments to the CCM's software?

Title: Re: Flash (on lock) and CCModule
Post by Simmo on Nov 23rd, 2006, 9:25pm
Surely it would use the OBD socket behind the 'flap' at the top of the coin compartment wouldn't it?.HERE (http://www.fordscorpio.co.uk/obd2a.htm)

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Nov 23rd, 2006, 10:04pm

on 11/23/06 at 21:25:59, Simmo wrote:
Surely it would use the OBD socket behind the 'flap' at the top of the coin compartment wouldn't it?.HERE (http://www.fordscorpio.co.uk/obd2a.htm)


Perhaps, I just don't know and the details given of the pins of the socket are rather cryptic.

Title: Re: Flash (on lock) and CCModule
Post by Simmo on Nov 23rd, 2006, 10:34pm
Baz has an FDS so lets hope he'll answer your question shortly. ;)

Title: Re: Flash (on lock) and CCModule
Post by Baz on Nov 25th, 2006, 11:24pm
3 days later....... apologies for the delay been drinking a lot of beer lately!!

The FDS does indeed plug into the socket behind the flap in the coin box and can do all sorts of adjustments and tests. I have never really done too much with mine except allow the boot to be opened with the engine running. It is fixed to my garage wall with a load of stuff on it at the moment cos we are selling the house and all the spare stuff is in the garage!

What makes it worse is the garage is also full of rack mounted servers from an internet service providers that went a few weeks ago!

Title: Re: Flash (on lock) and CCModule
Post by purple-rocket on Jan 9th, 2007, 9:04pm
so does this mean that my 96 scorp can be set up to do all the flashing and dancing or do I need a new type CCM?

thanks Paul

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Jan 9th, 2007, 9:16pm
I believe it is just a matter of plugging the CCM in and reprogramming it. Same basic CCM in all years of cars, but Ford changed the way it responded as the model progressed and different programs for different markets.

Title: Re: Flash (on lock) and CCModule
Post by Fidget on Jan 10th, 2007, 9:14pm
My 95 2.0 16V doesn't flash at all  :( . I'm wondering now if the alarm works, how does one test it (pls: exluding the method that involves the use of a crow bar)?


Title: Re: Flash (on lock) and CCModule
Post by scorpio_man on Jan 10th, 2007, 9:19pm
hi there

get someone to hold the bonnet switch in as you double lock the car. wait a couple of minutes (still holding the switch in), then let it go.

hth

Title: Re: Flash (on lock) and CCModule
Post by Fidget on Jan 10th, 2007, 9:35pm
Thanks, I'll try it  :)


Title: Re: Flash (on lock) and CCModule
Post by sector-9 on Jan 19th, 2007, 12:33am
I took my CCM to bits (well, lid off at least) because I was bored and I'd read a Ford TSB that some of the early ones had intermittent problems where the remote would stop working until reprogrammed (which is what happens on mine) - Ford's answer is to replace the CCM but I thought I'd look for dry joints.

Anyhow, the CCM is a computer system which controls (as a minimum) the alarm.  Because my car is one of the very early Scorpios, the CCM *only* does the alarm - the central locking and everything else works fine with it disconnected!  On later models the CCM would co-ordinate the central locking, global closing, seat memories, etc. by sending signals to the relevant local control modules.  If you look at the wiring diagrams then you'll see that the central locking and e/window ones vary depending on the year and fitment of door modules or not.

The CCM itself has a standard flash ROM chip similar to most computer BIOS chips, so obviously it can be programmed with different firmware (presumably this is the cause of the problem with my remote - buggy firmware - as unplugging and reconnecting the CCM makes the remote work again without being reprogrammed).  

However, the CCM connects to the OBD diags port (and therefore the FDS2000 computer), and all the other modules such as the PCM and the door modules using only a couple of wires so is obviously using some sort of serial communication between them all and I doubt very much that the FDS2000 updates the firmware using serial comms.

It's highly likely that the various 'options' are held in non-volatile memory (remember the S registers on traditional modems?).  This would make it much easier and quicker to set configurations like flashing indicators, etc. using a serial link, with no danger of breaking the CCM should things go wrong.

Now that's all very good as far as theory goes, question is, can anybody here make use of it?

Darren

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Jan 19th, 2007, 1:05am
Someone talking my language  ;D

By earlier CCM, I'm guessing you must mean much earlier than '95, but I would guess at them all being the same apart from lacking certain exteranl bits depending upon model. My '95 certainly controls all the gubbins. So my guess is the software is all the same basically, apart from certain bits being set or unset for certain functions. I'll bet if you tried that old CCM in a later model it would operate the central locking, windows and etc..

The problem we face in hacking in to adjust the bits (S registors) even if we work out the baud rate and etc.. is knowing how to talk to the bits and which bits do what. You don't suppose it might just respond in plain English do you (a serious question)?

Perhaps it might and the FDS only has the basics in it to commicate with the CCM and the CCM has the English settings menu inside the ROM. I wonder how the FDS tells the car which system in the car it is trying to talk to?




Title: Re: Flash (on lock) and CCModule
Post by cossieguy on Jan 19th, 2007, 7:45am
Some early CCM's can't be programmed to flash on lock, believe me i've tried, the menu paths aren't there when you plug in FDS to activate the flash. My answer was to get a CCM from a later car and plug that in.
Guy.

Title: Re: Flash (on lock) and CCModule
Post by sector-9 on Jan 19th, 2007, 9:26am
I don't think it'll be as easy as that because the serial link used isn't a 'standard' one that you'd be able to hook a PC direct to. OTOH, if you can get or make an interface to attach your serial port to the OBD port then it should definately be possible (and yes, I know you can buy those interfaces from lots of places, but I don't have the money to buy one just for experimenting).  Because it's a 'network' based system the actual messages on the serial link will include information on which module they are intended for, as well as the data itself.  Ideally we need to monitor the signals going between FDS and the car when we change each available option so that we can work out how to replicate it using an interface and a program written in BASIC (or possibly even just using hyper terminal!)

As for older CCMs not being able to do the c/locking, I think that's purely down to the firmware.  The best way to tell would be to fit the flash ROM from a newer CCM into one of the older ones and see if it then works everything - unfortunately they're soldered in place so it's rather difficult to try on a whim!

It would be great if Ford would give us the information we need, but being as those CCMs - or descendants of - are in use in present-day models I don't think they'll want to release that info to us...  :(

Darren

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Jan 19th, 2007, 10:46am

on 01/19/07 at 09:26:47, sector-9 wrote:
 Ideally we need to monitor the signals going between FDS and the car when we change each available option so that we can work out how to replicate it using an interface and a program written in BASIC (or possibly even just using hyper terminal!)

As for older CCMs not being able to do the c/locking, I think that's purely down to the firmware.  The best way to tell would be to fit the flash ROM from a newer CCM into one of the older ones and see if it then works everything - unfortunately they're soldered in place so it's rather difficult to try on a whim!Darren


I agree with it just being firmware variants preventing the earlier CCM's on the Scorp doing what the later ones can do. This is rather confirmed by the lack of the menu items when using the FDS - this does though half confirm that the actual menu is inside the CCM in plain English, rather than being something in the FDS.

I would not expect Ford to go to the trouble of designing their own serial interface from scratch. My guess would be that they have used a standard serial protocol, but at RS432 levels - 0 to +7v, instead of the usual -7v to +7v standard. The fact that you can buy after market diagnostic systems which plug into a PC would also confirm the standard nature of the interface.

I'll bet it runs at 9600baud  ;D

I have come across 'networked' serial systems before. You just transmit a preset string of characters, followed by the number of the device you want to talk to and given the right string of characters it responds.

The usual way to hack these systems is to add a PC with a couple of serial ports in the line to the system. You plug the FDS's plug intended to plug into the Scorp into one port of the PC, the second port then plugs into the Scorp. Software on the PC watches the transaction between the two, whilst allowing the data to pass straight through the PC in both directions.

Another way would be to simply watch the data exchange timing on a scope, but that would not provide details of the actual data exchanged.    

Title: Re: Flash (on lock) and CCModule
Post by Highlander on Jan 19th, 2007, 11:02am
Watching this thread with interest, its completely over my head though  ;D

Are you possibly thinking of designing something that can be used on a pc and will emulate the FORD FDS?

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Jan 19th, 2007, 11:41am
Emulating the FDS with access to the needed information would not be too difficult a job, but lacking this it becomes an horrendous reverse engineering task.

Tackling accessing just the CCM would be more of a possibility, but we are just simply theorising at the moment.

Watch this space!

Title: Re: Flash (on lock) and CCModule
Post by Highlander on Jan 19th, 2007, 11:57am
So we need to break into a garage in Warrington then?? ;)

I have a few spare parts kicking about if anyone wants to take anything to bits or try anything with them, wiring looms, OBD sockets, modules etc

Title: Re: Flash (on lock) and CCModule
Post by Baz on Jan 19th, 2007, 6:51pm
I got a spare FDS unit as well (well someone has to!) The only thing is, is that the software disk has to be run to choose the model, engine size etc. Then the required action needs to be programmed in. In other words, you can't just take the FDS hand unit, download every bit of stuff for the Scorpio and then go off and do 20 different tasks. Each task has to be done individually with a return to the base station after each one. I guess I could lend my spare FDS and a lead if someone is trying to emulate it. I have the software disks numbers 1-32 as well as the manuals etc. Which reminds me, someone wanted a scanned copy if I remember.... who was it?

Baz

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Jan 19th, 2007, 6:59pm
I would certainly welcome a loan of that Baz.

How big/heavy is it?

Title: Re: Flash (on lock) and CCModule
Post by armatec on Jan 20th, 2007, 1:41pm
silly question? but can anyone tell me what the







can someone please tell or show me what a C C module looks like ?? and where it is ?? ???




Title: Re: Flash (on lock) and CCModule
Post by Simmo on Jan 20th, 2007, 2:00pm
Kev, I think there is some confusion here. The CC is the climate control module situated behind the dials on the dash. The thread here is about the central control module otherwise known, I think, as the PCM. In other words the 'brain' of the car. THIS (http://www.fordscorpio.co.uk/eecv.htm) may throw some light on the subject. If I'm right it is located up behind the glove box which needs to be removed  for access.

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Jan 20th, 2007, 2:08pm
That is correct. It runs the alarm, windows, roof, door locking, the drivers seat positioning, recieves commands from the door locks and remote. If you drop down and unclip the glove box, the CCM is the black plastic cased unit with three multiplugs directly facing you, with perhaps only the right pair of sockets occupied - left one vacant.

Title: Re: Flash (on lock) and CCModule
Post by armatec on Jan 20th, 2007, 10:19pm
thanks guys... if you dont ask .... you dont find out ... you live and learn.. whatever happended to the simple days of the good old mk 1 cortina..???  ;D

Title: Re: Flash (on lock) and CCModule
Post by sector-9 on Jan 20th, 2007, 11:57pm
Just read through wiring diagram 29-01-xxx and that gives the pin-outs for the OBD socket; unfortunately I can't work out if our Scorpios use the ISO 9141 or the SAEJ1850 (PWM) protocols as it has connections for both, however most (American) websites seem to list Ford as using PWM.  Also it appears I was wrong - the EEC-V module can be programmed using the OBD socket, though a separate signal is required on pin 13 (presumably to switch the ECU from read to write mode).

Hopefully our cars will use the ISO protocol as it is relatively simple to build a simple interface to a standard RS232 serial port - there are plans available on the web for this and the parts are cheap.  There's also free open-source software called freediag, though I've no idea how good it is or what it's capable of.

Of course, none of the above applies to the EEC-IV which has a socketed EPROM which must be removed, erased with UV light and then programmed in a dedicated EPROM programmer.  Furthermore the EEC-IV is incapable of OBD-II communications, though a STAR tester can be connected to pins 3 & 11 to get basic fault codes.

Darren

Title: Re: Flash (on lock) and CCModule
Post by Highlander on Jan 21st, 2007, 12:02am
the OBD2 uses the PWM interface for the diagnostics and the ISO for the ABS if that's any help.
I dunno how I even understand all that  ;D

Title: Re: Flash (on lock) and CCModule
Post by sector-9 on Jan 21st, 2007, 12:33pm
Bizzare!  I'd read that PWM was used on Fords, and ISO on european cars so not suprised it has both - but can either be used for communicating with the modules?  As said, building an interface between ISO and RS232 isn't that difficult, and with free open-source software around too it should be relatively easy to read off fault codes on a computer.  Unfortunately programming CCM options is likely to be Ford specific so I don't know if there's already free software around to do it, but once we can communicate with it (even just reading settings), it should be relatively easy to figure out how as long as we can monitor the comms between it and the FDS...

Darren

Title: Re: Flash (on lock) and CCModule
Post by macroy on Jan 21st, 2007, 5:00pm
Harry,what have you started here, it seems that I need to get on some  sort of I.T.course now and then I will possibly be able to interface with these protocols.Roy

Title: Re: Flash (on lock) and CCModule
Post by sector-9 on Jan 29th, 2007, 8:53pm
Well I got another CCM from an N-reg car in the scrapyard today (no idea what model it was as the back was against the wall, but it didn't have leather and it was an auto estate with DOHC engine).  The main reason I bought it is because it was infuriating that the old one would frequently stop responding to the remote until it was reprogrammed or reconnected - it was a bonus to discover it also had the flash on double-lock enabled!

Anyway, me being me, I took both of them apart (in the yard, before I had paid for it of course!), and both of them are pretty much identical; same part number, etc. with the only difference being the label on the plastic case.  I'm now convinced that it's only a firmware change needed to add the extra capabilities to the old CCM, and I'm looking forward to taking the old CCM apart enough so that I can see what chips it's got (these are all covered by the RF module)...  :D

Although it won't be easy to remove or refit, I reckon we could copy the contents of the flash ROM from a newer CCM to an older one.  Once done, FDS should be able to then change the options.  Unfortunately I doubt that the settings for the options will be held in this ROM so just changing firmware probably won't do anything special, however it should fix the forgetfull remote problem!

One other problem is that I'm pretty sure Ford wouldn't like the idea of us copying the CCM firmware and updating each other's chips (it is copyright after all), even though the cars are discontinued and well out of warranty...  :-/

Darren

Title: Re: Flash (on lock) and CCModule
Post by Highlander on Jan 29th, 2007, 9:02pm
Darren i've got a couple of these if you want to take some more to bits  ;D

Title: Re: Flash (on lock) and CCModule
Post by taliban on Jan 29th, 2007, 9:20pm
right, after reading all of that its got very complicated, how much do ford charge to re programme for a bit of flashing?

Title: Re: Flash (on lock) and CCModule
Post by sector-9 on Jan 30th, 2007, 10:26pm
No idea how much Ford charge but it would almost certainly work out cheaper getting a CCM from a scrap yard (though of course you'll want to test that it has that function enabled before buying!)

Ford should be able to set your existing CCM to flash on lock, however as we've been discussing, some of the very early ones could not be programmed to do so - the option simply isn't there for Ford to change!  Think BIOS updates on your computer and you'll not be far off...

What I've posted recently is a possible method of getting these features added to an old CCM.  Note I say "added", not "enabled"; that part we're still guessing at!

Darren

Title: Re: Flash (on lock) and CCModule
Post by Scorpius on Jan 31st, 2007, 10:10pm
I have just sold the CCM from my 97 2.3 and it definately had flsh on double lock, at least. The buyer (Daz_38 on this site) has now informed me that upon fitting it to his car, that it does not flash??????

Any ideas

Ian

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Jan 31st, 2007, 10:53pm
My best guesses would be that - Daz_38's car maybe lacks wiring between CCM and indicators to do the flash. Alternatively - that the CCM talks via its multiplex system to another unit, and that the 'other unit' which links into the indicator circuit is absent.  

Title: Re: Flash (on lock) and CCModule
Post by sector-9 on Feb 1st, 2007, 8:19pm
I would suggest he checks that it really is double-locking (LED lit steadily for a few seconds, not flashing) as the indicators physically wire to the CCM so unless his loom is damaged or it's had an aftermarket alarm fitted, it should just work.  If it's a diesel then check the inertia cut-off switch in the boot as this disables/opens the double-locking in the event of a collision, but the engine will still run and you'll never notice it except for the LED being on all the time.  On petrol engines it also cuts the fuel pump so you'll know in short order if it's that!

The CCM is the 'main' controller for the Scorpios multiplex systems - it is this which issues commands to the other modules - however the other modules only control e/windows (inc. sunroof), c/locking and seat/mirror memories.

Darren

Title: Re: Flash (on lock) and CCModule
Post by daz_38 on Feb 3rd, 2007, 4:54pm
flash on lock now working  the problem was my door ajar switch  i had to bypass this to remove warning light from dash this also cured my alarm system everthing working fine now  thanx  everyone for your help . and i hope this information becomes handy to a member in the future  .....darren.......

Title: Re: Flash (on lock) and CCModule
Post by sector-9 on Feb 4th, 2007, 12:41pm
Well I've now unsoldered the radio module from my old CCM and looked up the numbers of the main chips.  From what I can gather it's not going to be as easy as flashing a new ROM image as the ROM (and EEPROM for that matter) is within the CPU itself (A Motorola 68HC11E20).

The main components are:
Motorola 68HC11 CPU with 8KB ROM, 512B RAM, 512B EEPROM, A-D and 2x serial comms
Motorola 256Kbx4 SRAM
ST 7 channel Darlington array
2x ST solid state relays (9A max current)
3x ST solid state relays (4A max current)
Siemens TLE42626 5V regulator
Philips 74002MC (unknown function)
3x miniature relays (approx. 10A max current)

If anyone's interested then I'll photo the PCB.

Darren

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Feb 4th, 2007, 6:36pm

on 02/04/07 at 12:41:32, sector-9 wrote:
Well I've now unsoldered the radio module from my old CCM and looked up the numbers of the main chips.  From what I can gather it's not going to be as easy as flashing a new ROM image as the ROM (and EEPROM for that matter) is within the CPU itself (A Motorola 68HC11E20).

The main components are:
Motorola 68HC11 CPU with 8KB ROM, 512B RAM, 512B EEPROM, A-D and 2x serial commsDarren


I agree, ROM or PROM is a once only, so no possibility of modifying what is there. The only way would be to read into a programmer a ROM with the functions you need and write the data to a new CPU.  

The only sensible way is to get a CCM which supports what you need already in there, then get the functions turned on - which was why I originally started this thread. My thoughts were that we could build up a data base of the CCM's fitted and hopefully be able to work out which ones supported the fuctions being turned on and which might already have certain functions already turned on.

So just to remind....

The CCM in my Ultima late '95 had Global close via the key; no flash at all.

The CCM I lifted out of a scrap '96 added to the above -flash on double lock + a second flash after the alarm arms + continuous flash on alarm system triggered.

I would guess at the two electromechanical type relays actually doing the flashing, one for each side. So taking that a stage further... If the relays are fitted and the wiring, they had it in mind to add the software too at some stage.

Title: Re: Flash (on lock) and CCModule
Post by sector-9 on Feb 5th, 2007, 5:40pm
I've noticed something irritating about my new CCM - I can't open the boot with the engine running!

As per your post, it's unlikely we can alter the software itself if it's held in ROM (we can't even burn our own chip because it's on the CPU die); though I suspect the adjustable options are held in EEPROM and can theoretically be modified if we can a) interface a computer to the CCM, and b) know the location and value to change.  Either way, it's not going to be as simple as I'd hoped.

I am intrigued about the function of the external SRAM chip, especially as the CPU has a small amount of RAM embedded...

Darren

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Feb 5th, 2007, 6:56pm

on 02/05/07 at 17:40:19, sector-9 wrote:
I've noticed something irritating about my new CCM - I can't open the boot with the engine running!


I'm not sure how my original '95 CCM reacted, but my '96 is locked. Probably the idea is to stop anyone pilfering from your boot when stood at the lights.


Quote:
 Either way, it's not going to be as simple as I'd hoped.


So its back to plan B - robbing a certain garage in Warrington (?) of its FDS  ;D

Seriously, it would be nice little earner for someone to get all these CCM's together and do them in a batch to enable the options we all need.

I'll bet that all we need is to bung the right 'wake up' data down the serial port into the CPU, to get it to divulge all its programming option secrets. Bet the 'wake up' data is no more than two bytes in the correct sequence.  


Quote:
I am intrigued about the function of the external SRAM chip, especially as the CPU has a small amount of RAM embedded...


It sounds as if the RAM in the processor was not enough for their needs so they had to add even more. Probably the latter is unused/ unpowered when the car is parked up. I can't think of a suitable use on the car for the A to D's though.

Title: Re: Flash (on lock) and CCModule
Post by scorpio_man on Feb 5th, 2007, 7:00pm
I'm not sure how my original '95 CCM reacted, but my '96 is locked. Probably the idea is to stop anyone pilfering from your boot when stood at the lights.  


again, one of the options. think it's called 'taxi' option.

hth

Title: Re: Flash (on lock) and CCModule
Post by Scorpius on Feb 5th, 2007, 8:10pm
We had a guy remove BIOS passwords from IBM laptops just be connecting 2 wires to 2 of the legs of the chip and then reading the data off on a program on a computer via the serial port.
Cant the same be applied to an on die eeprom?

Ian

Title: Re: Flash (on lock) and CCModule
Post by Fidget on Feb 15th, 2007, 12:10am

on 01/10/07 at 21:19:23, scorpio_man wrote:
hi there

get someone to hold the bonnet switch in as you double lock the car. wait a couple of minutes (still holding the switch in), then let it go.

hth


It works, made the Mrs. go pale while she helped with the test though (she wont forget that one  :( ).

I also found that if I sat in the car, dbl locked it with the remote and then tried starting the car, it also triggered the alarm (probably more 'relationship friendly' than the first option).

Onwards with the OP ... does the part number of the CCM (the first two digits thereof) indicate the year of production for the unit? I recently bought a replacement (part no. 95GP..........) and that does not flash either. The seller told me it was from a 98 model though - I doubt this now :(

Matt.

Title: Re: Flash (on lock) and CCModule
Post by harry.m1byt on Feb 15th, 2007, 5:37pm

on 02/05/07 at 20:10:24, Scorpius wrote:
We had a guy remove BIOS passwords from IBM laptops just be connecting 2 wires to 2 of the legs of the chip


That part is correct, it resets the BIOS password on laptops and desktops - its a jumper which you link, which removes the backup battery supply to the BIOS.  


Quote:
and then reading the data off on a program on a computer via the serial port.
Cant the same be applied to an on die eeprom?

Ian


You don't need to do anything special to read the BIOS information, there is software around to do that.

If the EPROM were in a computer then yes it could be read, but it is in a stand alone controller - which lacks a keyboard and display to access the data. The data in the EPROM is in EPROM which is actually a part of the microprocessor, so accessing it becomes even more difficult.  



Ford Scorpio Forum » Powered by YaBB 1 Gold - SP 1.3.1!
YaBB © 2000-2003. All Rights Reserved.