So here goes my stab at EDC15C2, for real. During my short stay at ecuedit forum and literally first time in touch with ECUs I've put a lot of effort into understanding what chip tuning is all about. I'm not saying that I understand it, but a lot of people on this forum helped me get to where I am today - THANX, you know who you are ;). Also I've been looking at nefmoto forum and a lot of my work was derived from their fabulous job done on ME7.x disassembly.

Disclaimer: All information here was gathered using the internet, more or less, and a lot from this forum!!! I do not have any connections with any ECU manufacturer or manufacturer of whatever part of ECU I've touched.. I find this activity an interesting and amusing waste of time.


Why EDC15C2? I drive Peugeot 406 2.2 HDI, enough said. Also as I reckon from others comments and experience, I'm pretty lucky since this ECU should be "easy" to understand and learn from.. whatever that means :)

For those that do not know what franken-ecu is refer to this thread ecu-software-versions-t223.

I'm gonna try to cover as much as possible, touching topics like hardware, wiring, chips, software, booting, disassembly, etc..

First things is first, let see what chips we have in the ECU. Note that most of the chips has its markings in the form: Bxxxxx (abcde..), like B30421, B58173, ... This kind of chips are made for robert and he is allowed to mark them as he see fits. The chip "content" itself is IMHO the same as for stock chips with standard industrial markings. It took quite an extensive search first find the correct industrial name for the chip and then to find the datasheet for the obscurely marked chips. Others were pretty easy to identify, markings used were standard industrial ones (TLE 4226 G, ST 5P08C3,..)

CPU B59388 aka Infineon SAK-C167CR-4RM (GA) 16-bit CPU, this assumption has proven correct or at least correct enough as you will see later on ;). Lots of IO pins, 16-bit address and data bus, SPI controller, running at 16Mhz (verified with oscilloscope). Datasheet can be found on the internet.

FLASH AMD AM29F400BT, 512kByte, the same as in (all) other similar ECUs I've seen. 16-bit address and data access is used. CPU CS0 pin is connected to E pin of FLASH chip. This means that FLASH is mapped at 0x00000. Datasheet can be found on the internet.

NEC UPD790008GF(A1)-3BA, is this "safety chip"? It connects to CPU A0-A12 address lines and all 16 data lines. This chip also has multiple connections to B30421. It runs at 10Mhz (verified with oscilloscope). I do not have a datasheet for this one. But I've traced at least half of 100 pins the chip has :shock: .. still work to be done.


EEPROM ST 5P08C3, 8 Kbit, Connected directly to CPU SPI controller with some pullup resistors on data pins. I'm not sure where the chip select is connected to - I can confirm it is not directly to the CPU. It is placed on the bottom of the PCB. Datasheet can be found on the internet. Is this IMMO EEPROM?



These are some of the most interesting ones found in the franken-ecu. I have more to share. There are some that I have either not looked at or did not find any data on. This is where I need your support - if you have access to open EDC15C2 ECU please take a picture and maybe we can identify the chips that are missing in mine ECU by looking at yours - if you look at your ECU you might see different markings for the chip in the same place - this is what I want to see! The missing and fishy chips follow ...

So here some other chips that know of, though their real function is not yet clear.

Infineon TLE 4226 G, FLEX - MultiChannel LowSide Switches (Powertrain & Safety). Have not traced this on fully yet, but its pins go every where (ECU connector , other Bxxxx chips and CPU).


Bosch B30421, this is injector driver. Other name for this chip is Bosch CY220. I have the datasheet for this one. Identified pretty much all the CPU/controlling side, still need to look at the injector side.


Bosch B30344, I'm not sure what this one does. Other name for this chip is Bosch CJ920. I have the datasheet for this one.


Bosch B58251, I'm not sure what it does. I did not find a datasheet either :(


Stay tuned for more ..

Bosch B58173 and B57554, I have not yet looked at their traces, nor do I have datasheets for these two. While putting this post together I've spotted that on both chips, markings contain familiar last 3 (4) digits. I have to take a look at standard 74hc173 and 74hc554 :idea:

More ..

Bosch B57498, this is LM2904N, low power op amplifier, not traced it yet. Datasheet is available online.
76633S Y136, 3-pin FET(?), there are 4 of those. Not traced yet, no datasheet.


AD 22057, not sure what is used for, datasheet is available online.


Bosch 3029044, (small 8-pin TSOP chip in the middle) this is CAN driver also named Bosch CF-150. I found some old datasheet and traced the CAN pins to CPU pins. Other side was not traced, yet.


191A58696030, the white weird looking thingy. It is supposed to be barometric pressure sensor. ECU datasheet specifies that sensor for atmosphere pressure is located inside the ECU.


More or less these are our main actors found in the ECU. As you can see are some chip that need more identifying to be sure what they do and how are they interconnected with others.

hinkxx wrote:Bosch B58173 and B57554, I have not yet looked at their traces, nor do I have datasheets for these two. While putting this post together I've spotted that on both chips, markings contain familiar last 3 (4) digits. I have to take a look at standard 74hc173 and 74hc554 :idea:

B57554 as 74hc554 was a dead end. Nevertheless I've overlooked the fact that I already have the datasheet on this one - it is LM2903DR. Have not traced it yet..
B58173 as 74hc173 could work, but it is a long shot - I will need to do some tracing to be sure :geek: .

hinkxx wrote:76633S Y136, 3-pin FET(?), there are 4 of those. Not traced yet, no datasheet.

Yes. It is a FET - HUF76633S3S, found it online .. 100V, xxA(?) - not sure which variant fits most (there are several ranges (10 - 75 A). Need to trace these FETs to see what are they driving - injectors possibly - since there we need ~80V and 12A at peak to open one, and there are four of them ;).

thaks

very good work .. I am working with a ecu of these .. and my problem is that I have no injector pulse intensity .. or whatever .. as if the voltage reached 80 volts 100 volts ..
fet is that the handle and the trigger capacitor is charged with voltage .. But which one would be the chips that raising the voltage ...??

It is no chip for voltage raising. BOSCH use for charge capacitor voltage pulse from injectors inductors. If you switch on ECU on the table without injectors capacitor not charged.

or is that the capacitor will not charge if it has the enyector placed ..
I did a test with the injectors placed in the car and I start and I have a pulse of lower voltage.