How to win shchitok device BMWIn our heavy Russian conditions, when there is no access to firm details and the diagnostic equipment, it is necessary to be content "kolenkoj" and spare parts from disassembly. One of the big problems arises at replacement and repair shitkov devices. I shall describe some nuances below.
1. BMW525i Simens ROM X2402PI This machine has very whimsical character, for the first time we have collided(faced) such problem when to us there has arrived the machine with dead shitkom, with inscription CODE pleasing an eye. Running forward, I shall tell, the reason in long ignoring inscription INSPECTION, and chasikov before the person of the driver. Example of an insertion of the chip: The name of machine BmW 520 VIN code WBAHB51040GG33360 The indication of a speedmeter of 38874 miles The note: neisp. The gauge tempeatury and tahomet, rings a buzzer
It is revealed: In cells 0028 47 47 33 36 00 vin GG33360 0018 00 00 08 35 93 61 number shchitka 8 359 361 003C 24 version of a key 001F FF an attribute of mile / km FF of mile of 06 kms 002F 5A a code protsesora; When not 5A parpriz vysvechivaet CodE 0098 5F 42 2E 15 0B parameters of the thermometer 00A3 00 00 00B3 00 00 the Data inspekshion and oil service 00C3 00 00 00D3 00 00 0008 A divider of a tachometer (1C - 3000 ABOUT, BC - 500 Oü, 5C - 900 Oü at revolutions of the engine 800) 0060 63 F4 00 to 0070 64 F4 00 ¦ younger 2 kms of a speedmeter 0080 65 F4 00- 0090 66 F4 00 00A0 5D F4 00 00B0 5E F4 00 00C0 5F F4 00 0x00F45F = 62559 km - actual kilometrazh, without taking into account a younger part 00D0 60 F4 00 00E0 61 F4 00 00F0 62 F4 00 ¦ L - the senior categories of a speedmeter L -----------younger categories of a speedmeter
For comparison was taken damp the read-only STORAGE: The name of machine BmW 524 TD WIN code WBAHA51020BA80166 The indication of a speedmeter 180 177 km
From this dampa the line was rearranged: 0088 00 2B 73 8C FF After rearrangement the thermometer has earned correctly
It is necessary to remember, that all changes in the data result in occurrence of a mistake 05 - false programming remove which you can not.
The second trouble which gets out approximately on 6 - 7 year of service of the automobile, excess of quantity(amount) of cycles of record EEPROM, here the automatic device rest against purchase of the new chip as chips of other manufacturers categorically or vtihorja to work refuse.
2. BOSCH BMW 730 ROM 9346 Example of an insertion
0xDF, 0xE1,0xE3,0xE5,0xE7,0xE9,0xEB, 0xED ¦ 0xEF, 0xF1,0xF3,0xF5,0xF7,0xF9,0xFB, 0xFD - còàðøèå categories of the long counter. The increase bajta on 1 increases run approximately by 8000 Kms. 003Ñ, 003B, 003A - 58592 number of a body 1-ÿ the letter to the address 3D younger half-byte 5-B, 7-C, 9-D... f-G 2-ÿ the letter to the address 3C the senior half-byte 1-A, 2-B, 3-C... 7-G Surprises it is not revealed, but who knows.
3. BMW 316-318 1994 ã EEPROM 93Læ56 The counter of run 215 740 Kms Number of the engine 387413 1 Number of a body 37204 4 0000 02C8 FD37 006E 788D A2CC 83E8 8721 0B5C 0010 0050 1400 3714 5325 8B4B BC70 EF9D 210D 0020 4F30 9671 0202 0202 2350 01C0 2850 FF50 0030 3111 9227 B054 D854 E77F DBFF A000 0000 0040 1310 3874 0022 7204 55C3 04FF 143C 111A 0050 0000 0000 0000 0402 FFFF FFFF 4077 2991 0060 C72B 1115 0000 0044 0000 0000 0000 3200 0070 0000 0000 3610 FFFF FFFF 47FF A739 FF00 0080 F6E3 F6E4 F6E4 F6E4 F6E4 F6E4 F6E4 F6E4 0090 F6E4 F6E4 F6E4 F6E4 F6E4 F6E4 F6E4 F6E4 00A0 FFB0 FFB0 FFB0 FFB0 FFB0 FFB0 FFB0 FFB0 00B0 FE1F FE1A FFA2 FFFF FFFF FFFF FFFF FFFF 00C0 FFFF 7806 591A 5B6A 00F0 0000 0000 0000 00D0 0000 0000 FDEE 0F0F FF0F FFFF FFFF FFFF 00E0 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 00F0 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 0042, 0043, 0040 - number of the engine 0049, 0046, 0047 - number of a body 0081, 0083, 0085, 0087. 008F, 0091, 0093, 0095, 0097. 009F - còàðøèå categories of the long counter. The increase bajta on 1 reduces run approximately by 8 000 Kms 0080, 0082, 0084, 0086. 008F - average categories of the long counter the read-only STORAGE, from 0000 address up to 0060 address it is protected by the control sum. Any change in this area results in inscription RRRRRR on the indicator. Adr 0060:C72B - 2õ a byte word of correction of the control sum The control sum is calculated as XOR 2õ byte values with adr 0000 up to 005F address and in a place with 0060 address are given with value 7F7F Example 02C8 ^ FD37 ^ 006E ^.... ^ 2991 ^ C72B = 7F7F Example of the program of updating of a binary file "xor.cpp" The given program corrects damp under control number 0x7F7F, but it is necessary to take into account, that there may be other control numbers. Count this number before modification, that not poimet' the big problems.
4. The most mysterious shitok with the chip in a socket by name HML 075 F Ì/C HML075F represents on seen PLM with built - in FLASH. M/C It is read as area of memory 256x16, and st and ml bajty are read equally. It(she) also contains copied area inspection, and the hardware counter of run with autopreservation of the data in EEPROM Example of an insertion for a speedmeter of 292985 kms it is given below. All data are submitted one bajtom since there is no sense to repeat the second identical byte which however is obligatory to reading, differently there will be a miss(passing) of the data. Table 1
The area 0040 - 0050h inspection, is read and written as 8 bytes of the information multiplied on 4 (0040 - 0047; 0047 - 004F; 0050 - 0057; 0058 - 005F) interconnected areas, record of anyone bajta in any area will result in change sootv bajta in other areas. It is unique area accessible on record.
Area 0080 - 00BF: service, change of the information results in refusal of the panel to work with the chip.
Area 00C0 - 00DF directly a speedmeter. Escalating of indications on steps on input(entrance) CLK (455 pulses on 100 ì).
Example of decoding of a speedmeter
There was an attempt smotki a speedmeter his(its) method perebroski through 0, submission on input(entrance) CLK of pulses KMOP of a level with frequency 100 kGts (it is equivalent to speed of 60 000 kms / ch). The first attempt has passed successfully, but all posledujushie resulted in a stop of the counter of run on value of 299 960 kms (300 000 internal value). For work with this type of panels two emulators, one on PIC16C84 (it is shaken up to 12 mGts), the second on ATMEL AVR90S2313 were made.
Examples of programs in sootvetstvujushih .asm files. The emulator on ATMEL AVR 90S2313 2313EM.ASM The emulator on PIC16C84 16C84. ASM The note: the emulator on PIC is convenient at repair of the panel on a table to not pull out the chip from a socket, but kilometrazh it(he) does not wind, eeprom does not write. And for the present professionals we recommend the complete set represented in figure is lower:
Well everything, on it I finish, for on this theme it is possible to write long and persistently. Good luck. If at you remarks and additions under clause(article) will appear, I wait your letters on support@diakom.com.ru address. {support@diakom.com.ru}
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
