Image of Cards the S7 1200 and S7 1500 in WinHex or in .S7img or simply in .img

[VATEK]

Hello ,

Someone will have teh Image of Cards the S7 1200 and S7 1500 cards

S7-1200 cards in WinHex or in .S7img or simply in .img


To update the S7 1200 firmware
6ES7 954-8LF01-0AA0 24 MB
6ES7 954-8LF01-0AA0 24 MB

6ES7 954-8LE01-0AA0 12 MB
6ES7 954-8LB01-0AA0 2 MB

Although the cards are standard MMC or SD with special SIEMENS format, I don't know if they can be cloned ....
In the S7 device presumably, the normal MMC cannot be used as S7 needs a card with special register in the CID and CSD registers
But for backup done by WinHex (not for use in S7) you can use any MMC or RS-MMC.

However, third-party MMC can be used if the CID and CSD records in the MMC match SIEMENS CID, CSD records.

For example, SIEMENS 64K to 4MB MMC cards run on the same hardware (16MB MMC), 8MB SIEMENS MMC, and 32MB MMC.

It is not possible to format a 4MB to 64KB card as the 4MB and 64KB cards run on the same hardware because they have different CID registers.

S7 recognizes the MMC size of CID, CSD and the card format. All these three records must match.

The CID and CSD registers are OTP (programmable once by the manufacturer) In the CSD register, the last 8 bits and CRC are partially programmable by the user.

I made my own bakery CID and CSD card reader / writer and programmed a simple C ++ program as I couldn't find any standard MMC reader with the ability to read and write CSD registers.

Right now I am looking for any supplier who can provide me with programmed MMC such as SIEMENS MMC.
If I'm successful, the price of these cards will drop a lot ...

The MMC image file of S7imgRD.exe or WINHEX

I also used OllyDbg, OllyDbg is a 32-bit and 64-bit assembly-level parser debugger for Microsoft® Windows®. The emphasis on parsing binary code makes it especially useful in cases where the source is not available.

With Ollydbg you will set the breakpoint to the address, for example the address 0x0052334E (raw offset: 0x0012334E)

http://www.ollydbg.de/


These cards cost too much, almost as much as the CPU

The fact is that a 6ES7 954-8LF01-0AA0 card or the 6ES7954-8LF02-0AA0 24 MB successor card is required to update the firmware of an S7 1200

6ES7954-8LF01-0AA0
SIMATIC S7 MEMORY CARD, 24 MB
*** Replacement *** SIMATIC S7, Memory Card for CPU S7-1x 00 / SINAMICS, 3, 3 V Flash, 24 MByte
6ES7954-8LF02-0AA0
SIMATIC S7 MEMORY CARD, 24 MB



I will put the steps to follow to update the firmware versions 6ES7 2xxzzz30 0XB0 in case anyone requests it.

For example, in the S7-1200 of the CPU with order number 6ES7 2141BE30 0XB0.

To update the S7-1200 firmware we must use a previously empty 24 MB SIMATIC SD card, without formatting ATTENTION !!!!

To EMPTY this type of cards it is very important to know that they cannot be formatted using the Windows format utility, as Microsoft ATTENTION !!!!
Windows renders the card unusable and can no longer be used in an S7-1200 CPU.

The CPU firmware is updated by performing the following steps
Step 1: Use the PC to erase the contents of the memory card using the card reader. Tip: Don't format the memory card!
Step 2: Download the firmware update file from Siemens official website. After downloading and unzipping it, the user will receive the "S7_JOB.SYS" and "FWUOPDATE" file Step 3: Copy the "S7_JOB.SYS" file and the "FWUOPDATE.S7S" folder to the memory card.
Step 4: Insert the memory card into the S7-1200 CPU card slot. The CPU will stop at this point and the "MINIT" LED will flash.
Step 5: Plug in the CPU (power on) after a power failure. If the "RUN / STOP" LED on the CPU flashes red and green alternately, the firmware is being updated. If the "MAINT" LED flashes, the update is complete.
Step 6: Remove the memory card.
Step 7: Disconnect and reconnect the CPU (power off / on).