Close

Phase 2 : set language

A project log for Reverse engineering a Renault Safrane Speech Synth

Talk to me Like Renaults do

bauminventionsBaumInventions 07/29/2023 at 13:540 Comments

It is possible to change the language of the Phase 2 synthesizer by original Renault dealer tools... But where is the fun to use expensive tools when you can do the same thing on your desk at home with a little bit of hacking.

Control units often have some settings that can be changed to make the functions compatible to the car they will work in. Older control units like this one use an external storage to hold these settings. Because some bytes of settings dont use a lot of storage a really tiny Rom is enough to hold everything.

While looking up the chips around the speech synthesizer ICs i noticed a tiny 128 Byte (in 8 Bit Mode)/ 64 Byte (in 16 Bit Mode) 93c46 >DATASHEET< serial EEPROM right next to the main microcontroller.

I connected my chip reader to the Eprom and tried to read the chip. After 15 minutes i figured out that the chip wont read when the power is still connected to the control unit.... So dont forget to turn off the power to your unit...

You have to do this at least on the third layer of stuff laying around at your desk... 

The data i got was really super tiny. Only 3 (16Bit) / 6 (8Bit) of the 64 words / 128 Bytes are actually used to hold data.

Because my box is speaking french... and this is a french product, my guess is that french is the base setting. This led me to experiments on the first "0000". 

I figured out if i put "0000 / 0101 / 0202 / 0303 / 0404 / 0505" here i can set all available languages.

0000 French / 0101 English / 0202 German / 0303 Italian / 0404 Spanish / 0505 Dutch

It works only if the numbers are duplicated (like 0A0A or 2626).

Other settings above and including 0606 result in funny behaviour. The system will just play random chunks of the samples, mixes all languages and sometimes makes crackling sounds or repeats short bits of samples over and over again. 

Here is an example of "0909" ... pretty nice glitches :D

Discussions