Advertising:
Automatic Transmission: Difference between revisions
Line 213: | Line 213: | ||
Program: 0x10000 - 0x5FFFF (320 kByte) | Program: 0x10000 - 0x5FFFF (320 kByte) | ||
A2L: C1G_4.02x_S_BMW_20030722_183800.a2l | A2L: C1G_4.02x_S_BMW_20030722_183800.a2l Offset 0xFF100000 | ||
Revision as of 00:40, 26 January 2020
This is an internal document only. Nothing is designed to work.
Siemens GS20 - GM5L40E
CPU: SIEMENS 80C167CR
FLASH: AM29F400BB
64kByte Sections
Bootloader: 0x00000 - 0x0FFFF (64 kByte) (0x80000 in memory layout)
Calibration: 0x10000 - 0x1FFFF (64 kByte) (0x90000 in memory layout)
Program: 0x20000 - 0x5FFFF (256 kByte) (0x100000 in memory layout)
UIF: 0xF000 (VIN...)
File:ORI EGS BMW 29F400BB GS20.BIN
File:GM5L40E 755700 partial FFed.BIN
HW | Prog. DATEN | Cal. DATEN | Internal Name | Vehicle Usage |
---|---|---|---|---|
7521820 | A7521759.0PA | A7519300.0DA | G2210_0076C0CK31 | E39 M57D25 MY02 |
7521821 | A7521759.0PA | A7519302.0DA | G2210_0076C0CL51 | E39 M57D30 MY02 |
7527278 | A7521759.0PA | A7527279.0DA | G2210_0076D0EC31 | E46 M54B25 US MY02 |
7521812 | A7521759.0PA | A7518146.0DA | G2210_0076C0DP10 | E46/16 M54B30 ECE MY02 |
7527290 | A7521759.0PA | A7527291.0DA | G2210_0076D0DP11 | E46/16 M54B30 US MY02 |
7521808 | A7521759.0PA | A7518148.0DA | G2210_0076C0DR10 | E46/16 M54B25 ECE MY02 |
7521809 | A7521759.0PA | A7518136.0DA | G2210_0076C0DS10 | E46/16 M54B25 USA MY02 |
7527102 | A7521759.0PA | A7527103.0DA | G2210_0076D0DS11 | E46/16 M54B25 USA MY02 |
7521806 | A7521759.0PA | A7518150.0DA | G2210_0076C0DO10 | E46/16 M54B30 USA MY02 |
7521813 | A7521759.0PA | A7518162.0DA | G2210_0076C0DZ80 | E46 N42B18 MY02 |
7553162 | A7521759.0PA | A7553163.0DA | G2210_0076D0DM26 | E53 M54B30 USA MY02 |
7521804 | A7521759.0PA | A7518156.0DA | G2210_0076C0DD10 | Z3 M54B22 ECE MY02 |
7521805 | A7521759.0PA | A7518158.0DA | G2210_0076C0DY10 | Z3 M54B22 JAP MY02 |
7521800 | A7521759.0PA | A7518138.0DA | G2210_0076C0DC10 | Z3 M54B25 USA MY02 |
7521801 | A7521759.0PA | A7518160.0DA | G2210_0076C0DF10 | Z3 M54B30 ECE MY02 |
7521802 | A7521759.0PA | A7518142.0DA | G2210_0076C0DW10 | Z3 M54B30 JAP MY02 |
7521803 | A7521759.0PA | A7518140.0DA | G2210_0076C0DB10 | Z3 M54B30 USA MY02 |
7532310 | A7521759.0PA | A7532311.0DA | G2210_0076D0CK40 | E39 M57D25 MY02 |
7532316 | A7521759.0PA | A7532317.0DA | G2210_0076D0CC60 | E46 M47OL MY02 |
7523284 | A7521759.0PA | A7523285.0DA | G2210_0076D0EC30 | E46 M54B25 USA MY02 |
7521807 | A7521759.0PA | A7518152.0DA | G2210_0076C0DQ10 | E46/16 M54B30 JAP MY02 |
7552724 | A7521759.0PA | A7552725.0DA | G2210_0076D0EA71 | E46 N42B20 ECE MY02 |
7552726 | A7521759.0PA | A7552727.0DA | G2210_0076D0ED71 | E46 N42B20 HL MY02 |
7553158 | A7521759.0PA | A7553159.0DA | G2210_0076D0DN25 | E46 M54B30 ECE MY02 |
7553160 | A7521759.0PA | A7553161.0DA | G2210_0076D0DM25 | E53 M54B30 USA MY02 |
Bosch GS 8.60[.2/.4] - ZF 5HP19
CPU: Motorola Toucan TM Series ZC439616CFT16 (M68HC16 / Freescale/Motorola 68376 (extension of 68020))
FLASH: AM29F400BB (512kByte)
Links:
http://rab.ict.pwr.wroc.pl/dydaktyka/supwa/mcu/overview/ov16.htm
http://nefariousmotorsports.com/forum/index.php?topic=453.35
Siemens GK30 - SMG SSG Magneti Marelli
5 Speed:
CPU: Motorola TouCAN TM Series ZC439619VFT20 (MC68336?)
FLASH: AM29F200AB (256kByte)
6 Speed:
CPU: Motorola TouCAN TM Series ZC439619VFT25 (MC68376?)
FLASH: AM29F400BC (512kByte)
Bootloader: 0x00000 - 0x0FFFF (64 kByte)
Calibration: 0x60000 - 0x7FFFF (128 kByte)
Program: 0x10000 - 0x5FFFF (320 kByte)
A2L: C1G_4.02x_S_BMW_20030722_183800.a2l Offset 0xFF100000
Links:
https://www.ferrarichat.com/forum/threads/faq-how-to-upgrade-a-360-f1-tcu-to-a-360-cs-tcu.239882/
https://www.ferrarichat.com/forum/threads/challenge-stradale-tcu-upgrade.313830/
http://rab.ict.pwr.wroc.pl/dydaktyka/supwa/mcu/overview/ov3xx.htm
https://www.lotustalk.com/forums/f25/deciphering-ecu-24495/
For all those (mainly programmer types) who are interested in the 256kbyte firmware and its composition. I did a little research and was startled to find what CPU core it actually has inside it, its an old friend :)
You may be surprised to learn that the CPU inside your transmission control unit dates its ancestory right back to 1976 and was first produced in 1979 as the Motorola MC68000 series. The core itself has gone through several refinements but its essentially the same technology and family line.
The Magneti Marelli TCU's Main CPU is a Motorola ZC439615MFT20, this cpu has M68000 Opcode Compatibility and runs at a mere 20Mhz clock speed. What all this means is that it can pretty much run assembly code written in 1970's :) This is also the same cpu used in the old Atari ST and Commodore Amiga (the Amiga ran at a mere 7.14Mhz though in those days compared to 20MHz in this configuration), computers from the 1980's. Strange fact of the day but true!!!
The TouCANTM series of microcontroller used in the TCU essentially adds an integrated Controller Area Network CAN capability and uses the 68376 32-bit microcontroller (described above).
Armed with this information you can use IDAPro Interactive dissassembler on your PC and reverse engineer this firmware right back into Motorola Assembly language programme in just a few days if your handy. This could yield some rather interesting side projects such as completely allowing you to re-program or enhance the original shifting software [if your really bored] :)
In Motorola Speak the "TouCAN module" is an integrated high-speed communication controller that implements the Controller Area Network (CAN) protocol version 2.0B, an asynchronous communications protocol. Integrating CAN on chip, rather than offering the functionality on a stand-alone chip, offers lower system cost, reduced burden on the central processor unit, increased system reliability and reduced power consumption.