Ashcon Mohseninia (RAND_ASH)

Hey @MercedesBenz , thought I'd ask, but is it possible to speak to someone who worked on the 722.6's EGS52/53 ECUs back in the early 2000s? - Almost completed reverse engineering the entire ECU, and I'd like to ask a couple questions about its very interesting design choices!

Started reverse engineering Bosch's dual C166 CPU ME2.8....found a nice Easter egg in flash!

@B_Ruthen @MercedesBenz EGS52 uses C167CS, EGS53 uses ST10 (still C166 architecture)...and yes, I'm using ghidra

@rndashm @MercedesBenz What processor is used in those tcus? C167? Also, which disassembler did you use? Ghidra?

Hey @MercedesBenz ... Can you release a software update for your EGS52 and EGS53 ECUs (722.6 controllers), that fix a bug with harsh shifts when doing 2-1 with low accelerator? I've identified the problem and propose a simple assembly patch! (See my explanation below: 1/7...)

I've spent a full year decompiling both various EGS52 and EGS53 ECUs (dating from 2002-2008), and all have this bug present in the firmware. I've pretty much figured out how all these TCUs work, so I'm creating my own TCU based on the latest EGS53 firmware, so I can backport the fixes you did over the years, and provide it to people running the very old 90s era EGS51 ECU 🙂 7/7

To fix this, simply change this byte to 0x32 rather than 0x34!... 6/7

Fun times! I'm now decompiling #mercedes' EGS53 #ECU, and checking for differences in the software compared to EGS52 (There are LOADS of improvements), and then backporting them to my TCU, which makes these available for everyone, whos cars even came with the original EGS51!

youtu.be/8vf_0HNlVDg Another update on my #custom #mercedes #ecu ! Finally able to interact with all the IO on the PCB, and control the Infineon co-processor on the TCU for super accurate solenoid control, far more accurate than the original Siemens design!

Is this too many Generics for a #rustlang function? - Noticed a lot of embedded crates utilize generics, but that can cause a situation like this when combining multiple structures that all use Generics

Gotta love documenting PCB layout in code! With this ATMEL processor, I don't have the luxury like with the ESP32, where each pin can be MUXed to any peripheral or system. Means I have to think a lot harder about layout ahead of time.

@1SFSM By OTA so you mean wireless update? If so, no, since the board has no ability to communicate wirelessly

@rndashm excellent as always so does the bootloader support ota updates now or is that still under development?

youtu.be/43IkJqjCc6U new video! Showing off my new #mercedes 722.6 TCU's unbreakable bootloader! Using an #automotive grade CPU, written in #rust !

@bucket_david I'll never say never to that, maybe one day if my channel gets big enough 🤣

@rndashm I know the mod that everybody is wishing for. Mating a 7 speed to an old OM diesel. Please do it!!!

#rustlang working on @MicrochipTech SAME51, controlling an Infineon TLE8242 solenoid driver. For the next version of my #MercedesBenz 722.6 gearbox controller. Nice to put modern tech in an old mechanical box to see what it can do! (The 'slave' mode is a protocol I reverse engineered that the original EGS (ECU) had on it if you set a bit on EEPROM, probably used for end of line testing of the control unit on the production line)

I'm writing my first bootloader for my custom Transmission ECU. Automotive devs, is this a valid way to make the bootloader itself updatable? (Have a dumb pre-bootloader that just copies some flash if the bootloader is marked as updated?)

This has to be an #easteregg .... Opening up 3 #Mercedes Distronic ECUs, and all of them have epoxy at this exact same spot so it reads "ART ANAL"🤣

@MicrochipTech can you actually annotate your curiosity boards correctly? Just spent hours trying to figure out why DAC1 on SAME51 curiosity wasn't working, turns out you mislabeled PB05 as PA05, so I was connected to the wrong pin the whole time!