Advertising:

Automatic Transmission

From MS4X Wiki

This is an internal document only. Nothing is designed to work.

Siemens GS20 - GM5L40E

CPU: SIEMENS 80C167CR

FLASH: AM29F400BB

64kByte Sections

Bootloader: 0x00000 - 0x0FFFF (64 kByte) (0x80000 in memory layout)

Calibration: 0x10000 - 0x1FFFF (64 kByte) (0x90000 in memory layout)

Program: 0x20000 - 0x5FFFF (256 kByte) (0x100000 in memory layout)

UIF: 0xF000 (VIN...)

File:ORI EGS BMW 29F400BB GS20.BIN

File:GM5L40E 755700 partial FFed.BIN

7521759A.0PA

Assembly Number Program Calibration Internal Name Vehicle Usage
7521820 A7521759.0PA A7519300.0DA G2210_0076C0CK31 E39 M57D25 MY02
7521821 A7521759.0PA A7519302.0DA G2210_0076C0CL51 E39 M57D30 MY02
7527278 A7521759.0PA A7527279.0DA G2210_0076D0EC31 E46 M54B25 US MY02
7521812 A7521759.0PA A7518146.0DA G2210_0076C0DP10 E46/16 M54B30 ECE MY02
7527290 A7521759.0PA A7527291.0DA G2210_0076D0DP11 E46/16 M54B30 US MY02
7521808 A7521759.0PA A7518148.0DA G2210_0076C0DR10 E46/16 M54B25 ECE MY02
7521809 A7521759.0PA A7518136.0DA G2210_0076C0DS10 E46/16 M54B25 USA MY02
7527102 A7521759.0PA A7527103.0DA G2210_0076D0DS11 E46/16 M54B25 USA MY02
7521806 A7521759.0PA A7518150.0DA G2210_0076C0DO10 E46/16 M54B30 USA MY02
7521813 A7521759.0PA A7518162.0DA G2210_0076C0DZ80 E46 N42B18 MY02
7553162 A7521759.0PA A7553163.0DA G2210_0076D0DM26 E53 M54B30 USA MY02
7521804 A7521759.0PA A7518156.0DA G2210_0076C0DD10 Z3 M54B22 ECE MY02
7521805 A7521759.0PA A7518158.0DA G2210_0076C0DY10 Z3 M54B22 JAP MY02
7521800 A7521759.0PA A7518138.0DA G2210_0076C0DC10 Z3 M54B25 USA MY02
7521801 A7521759.0PA A7518160.0DA G2210_0076C0DF10 Z3 M54B30 ECE MY02
7521802 A7521759.0PA A7518142.0DA G2210_0076C0DW10 Z3 M54B30 JAP MY02
7521803 A7521759.0PA A7518140.0DA G2210_0076C0DB10 Z3 M54B30 USA MY02
7532310 A7521759.0PA A7532311.0DA G2210_0076D0CK40 E39 M57D25 MY02
7532316 A7521759.0PA A7532317.0DA G2210_0076D0CC60 E46 M47OL MY02
7523284 A7521759.0PA A7523285.0DA G2210_0076D0EC30 E46 M54B25 USA MY02
7521807 A7521759.0PA A7518152.0DA G2210_0076C0DQ10 E46/16 M54B30 JAP MY02
7552724 A7521759.0PA A7552725.0DA G2210_0076D0EA71 E46 N42B20 ECE MY02
7552726 A7521759.0PA A7552727.0DA G2210_0076D0ED71 E46 N42B20 HL MY02
7553158 A7521759.0PA A7553159.0DA G2210_0076D0DN25 E46 M54B30 ECE MY02
7553160 A7521759.0PA A7553161.0DA G2210_0076D0DM25 E53 M54B30 USA MY02

7552700A.0PA

Assembly Program Calibration Vehicle Useage
7557978 7552700A.0PA A7557979.0DA E53 M54B30 ECE MY06
7557980 7552700A.0PA A7557981.0DA E53 M54B30 USA MY06
7557982 7552700A.0PA A7557983.0DA E46/16 M54B30 ECE MY06
7557984 7552700A.0PA A7557985.0DA E46/16 M54B30 USA MY06
7557986 7552700A.0PA A7557987.0DA E46/16 M54B30 HOT MY06
7557988 7552700A.0PA A7557989.0DA E83 M54B30 ECE MY06
7557990 7552700A.0PA A7557991.0DA E83 M54B30 USA MY06
7557992 7552700A.0PA A7557993.0DA E46 M54B30 USA MY06
7557994 7552700A.0PA A7557995.0DA E46 M54B30 USA SPORT MY06
7557996 7552700A.0PA A7557997.0DA E46 M54B30 MS43 E46 ECE 4x2/2/C
7557998 7552700A.0PA A7557999.0DA E46 M54B30 MS43 Heissland 4x2/2/C
7558000 7552700A.0PA A7558001.0DA E46/16 M54B25 ECE MY06
7558002 7552700A.0PA A7558003.0DA E46/16 M54B25 USA MY06
7558004 7552700A.0PA A7558005.0DA E83 M54B25 ECE MY06
7558006 7552700A.0PA A7558007.0DA E83 M54B25 USA MY06
7558008 7552700A.0PA A7558009.0DA E46 M54B25 USA MY06
7558010 7552700A.0PA A7558011.0DA E46 M54B25 MS43 ECE 4x2/2
7558012 7552700A.0PA A7558013.0DA E46 M54B25 MS43 E46 ECE 4x2/C
7558014 7552700A.0PA A7558015.0DA E46 M54B25 MS43 Heissland 4x2/2/C
7558016 7552700A.0PA A7558017.0DA E46 M54B22 ECE MY06
7558018 7552700A.0PA A7558019.0DA E46 M54B22 MS43 Heissland 4x2/2/C
7563638 7552700A.0PA A7563639.0DA E46 M47OL MY06
7563640 7552700A.0PA A7563641.0DA E46 M47UL MY06
7563642 7552700A.0PA A7563643.0DA E46 M57TUE MY06
7563644 7552700A.0PA A7563645.0DA E46/16 M57TUE MY06
7563646 7552700A.0PA A7563647.0DA E83 M57D30 ECE MY06
7563648 7552700A.0PA A7563649.0DA E46 M57TUE MY06
7563650 7552700A.0PA A7563651.0DA E46/16 M57TUE MY06
7563652 7552700A.0PA A7563653.0DA E83 M57D30 ECE MY06
7570734 7552700A.0PA A7570735.0DA E83 M54B25 ECE MY06
7570736 7552700A.0PA A7570737.0DA E83 M54B25 USA MY06
7570738 7552700A.0PA A7570739.0DA E83 M54B30 ECE MY06
7570740 7552700A.0PA A7570741.0DA E83 M54B30 USA MY06

Bosch GS 8.60[.2/.4] - ZF 5HP19

CPU: Motorola Toucan TM Series ZC439616CFT16 (M68HC16 / Freescale/Motorola 68376 (extension of 68020))

FLASH: AM29F400BB (512kByte)


Links:

http://rab.ict.pwr.wroc.pl/dydaktyka/supwa/mcu/overview/ov16.htm

http://nefariousmotorsports.com/forum/index.php?topic=453.35

Siemens GK30 - SMG SSG Magneti Marelli

5 Speed:

CPU: Motorola TouCAN TM Series ZC439619VFT20 (MC68336?)

FLASH: AM29F200AB (256kByte)


6 Speed:

CPU: Motorola TouCAN TM Series ZC439619VFT25 (MC68376?)

FLASH: AM29F400BC (512kByte)

Bootloader: 0x00000 - 0x0FFFF (64 kByte)

Calibration: 0x60000 - 0x7FFFF (128 kByte)

Program: 0x10000 - 0x5FFFF (320 kByte)

A2L: C1G_4.02x_S_BMW_20030722_183800.a2l Offset 0xFF100000

Rear axle @ Cal: 0x18E0

Links:

https://www.ferrarichat.com/forum/threads/faq-how-to-upgrade-a-360-f1-tcu-to-a-360-cs-tcu.239882/

https://www.ferrarichat.com/forum/threads/challenge-stradale-tcu-upgrade.313830/

http://rab.ict.pwr.wroc.pl/dydaktyka/supwa/mcu/overview/ov3xx.htm

https://www.lotustalk.com/forums/f25/deciphering-ecu-24495/


For all those (mainly programmer types) who are interested in the 256kbyte firmware and its composition. I did a little research and was startled to find what CPU core it actually has inside it, its an old friend :)

You may be surprised to learn that the CPU inside your transmission control unit dates its ancestory right back to 1976 and was first produced in 1979 as the Motorola MC68000 series. The core itself has gone through several refinements but its essentially the same technology and family line.

The Magneti Marelli TCU's Main CPU is a Motorola ZC439615MFT20, this cpu has M68000 Opcode Compatibility and runs at a mere 20Mhz clock speed. What all this means is that it can pretty much run assembly code written in 1970's :) This is also the same cpu used in the old Atari ST and Commodore Amiga (the Amiga ran at a mere 7.14Mhz though in those days compared to 20MHz in this configuration), computers from the 1980's. Strange fact of the day but true!!!

The TouCANTM series of microcontroller used in the TCU essentially adds an integrated Controller Area Network CAN capability and uses the 68376 32-bit microcontroller (described above).

Armed with this information you can use IDAPro Interactive dissassembler on your PC and reverse engineer this firmware right back into Motorola Assembly language programme in just a few days if your handy. This could yield some rather interesting side projects such as completely allowing you to re-program or enhance the original shifting software [if your really bored] :)

In Motorola Speak the "TouCAN module" is an integrated high-speed communication controller that implements the Controller Area Network (CAN) protocol version 2.0B, an asynchronous communications protocol. Integrating CAN on chip, rather than offering the functionality on a stand-alone chip, offers lower system cost, reduced burden on the central processor unit, increased system reliability and reduced power consumption.