motorola chip, what programmer to use?

[PiotrMisiuna]

This chip is on board of bosch ME2.0 ECU. I found several tutorials on how to read and write them, but all are talking about motorola hc11
The one I have is ZC432644cfn and I can barely find any mention of it online.
Anyone know what can I program it with ? I mean at reasonable price.

[bingo600]

Looks like a "Custom made (marked) unit"
Motorola did that for large customers.
Some of them were mask programmed from the factory ... aka. non upgradeable.

But it could also "just be a HC11" with custom markings.

Have a look here
https://www.codecard.eu/index.php?act=viewCat&catId=40
https://codecard.eu/index.php?act=viewProd&productId=85&ccUser=
https://codecard.eu/index.php?act=priceList


/Bingo

[Benta]

It's an MC68HC11E9 with mask program ROM. No way to change it.

[PiotrMisiuna]

Thanks a lot, exactly what I suspected. I lost days looking for any info on it.

 This comes from my old mercedes, there are some unrelated problems with the ECU but I don't want to dig in it without first saving the hash file.

one more question

This is a one shot for me and buying an original  carprog reams unjustified. There are some clones under 50€ on ali,
Do you think this would be able to handle this?

[Benta]

There are a few dangers here.
Can you read out the contents of the 68HC11E9 ROM?
Yes, you can, but only after the RAM and worse, the EEPROM has been erased. Nasty about that is, that the EEPROM is likely where your engine parameters are stored.
So think twice before proceeding with this.

[PiotrMisiuna]

I understand and agree, I would really prefer to give this job to a specialist, but here in Cyprus I don't know anyone able to do it at a price that wouldn't exceed the value of this car.

This is tricky since I would get only one shot, and I don't even have another one to experiment with.
That would be awesome to acquire a new skill, but maybe it's really not worth the risk.

[Benta]

This is tricky since I would get only one shot, and I don't even have another one to experiment with.

Wrong.
You won't even get one shot. The EEPROM (512 bytes) where the engine parameters are stored will be gone on the first try. After that, you can read out the program ROM (12 Kbytes) as often as you like.
You can also reprogram the EEPROM as often as you like after that. But the original contents are gone forever.
If you know someone with the parameters for the EEPROM as a hex-file, go ahead.
But I see little point in this. ECUs don't break, especially not the MCU.

[tru]

Are you referring to the standard security?  I.e. CONFIG register where NOSEC bit is set to 0?
If you're lucky enough that this custom version still has the standard Motorola bootloader program at $B600 (most vanilla 68HC11 comes with it) then both the EEPROM and program ROM can be read out in special bootstrap mode, using the serial COM interface, and a suitable user duplicator utility.  This process is non destructive, the EEPROM will not be erased.

[Benta]

It's an 'E9, so you need to deal with both BPROT and CONFIG.
Not much hope here, I think.

[amyk]

Depending on where the mode pins are, it might be possible to force it into test mode.

[darkspr1te]

While this answer is sorta on subject but also sorta not on subject, The ME2.0 ecu's can be swapped for ME2.8 ecu's which are easier to hack/clone and mod tuning params, there are a whole host of sites with guides on the swap and if you intention is to tune/mod later in this might be a route for you.
Also years back when i use to modify OPEL engines like the C20XE we were able to buy a adapter that went over the original chip and would act as it's replacement , I personally sent off the ecu for the fitting but many DIY'ed it too, also a alternative option as you can also upgrade the cpu's options too, in our case the upgrade added boost control and wideband input to a stock bosch ecu from 1990. I dont know if people still sell these items or the fact that cheap DIY ecu's can be had that superseded the need. 
it might be a option to turn too if hacking the original device runs into issues.


darkspr1te

[PiotrMisiuna]

A small correction, I wrote ME2.0, but as I dug into it it seams is ME 2.1 probably not much difference
in any case I just want to make it work and doing it without saving the programmed data seams a bit silly.

yet another option is to find a donor ECU together with key and ignition key hole sensor. in older models immobilizer data is the only thing that is specific to those 3 parts.