Ecu hw

= ECU hardware information = Attempting to collect knowledge about different hardware revisions of these ECUs. It would be interesting to correlate the actual hardware (PCB layout, mcu type) with the outside markings and ECUID. I've grouped these by arbiratry type letters which have nothing to do (yet) with markings. [TODO - make a table out of this ]

= Single microcontroller types =

type A

 * SH7058 (probably never SH7058S)
 * ECUIDs : CF43D (MY06 350Z USDM), 6Z68A (MY03 QG18DE Sentra CAN)
 * Outside markings :
 * CF43D: "LP" and "MEC60-122 A1 6331"
 * 6Z68A: "0 N" and MEC63-161 A1"

ICs

 * 93C66 : EEPROM (256*16bit SPI)
 * L9762 : all-in-one mess, with voltage regulators, CAN + K transceivers, unknown other stuff
 * 789101 : mask-ROM mcu, seems to be mainly a supervisor / reset controller. See ext watchdog signal
 * misc : some "sub-versions" may have unpopulated IC footprints.

wiring, pinouts, schem
CS=193CPU (PJ15) SK=192CPU (PJ14) DI=191CPU (PJ13) DO=190 (PJ12) ORG=VCC ( => EEPROM is wired as 256 * 16bit ) MD2 VCC MD1 3.3k to MD0/FWE MD0 : direct connect to FWE FWE : VCC
 * Connections to 93C66:
 * mcu mode pin connections:
 * Clocking : xtal = 10MHz, peripheral clock most probably 20MHz
 * K line transceiver is connected to SCI1_TX and _RX pins (165, 166 CPU)
 * WDT signal : 250Hz (2ms high, 2ms low) is output from cpu pin PL5
 * Testpoints (TP) on the back of the PCB : 2 groups of 6 TPs;
 * TP group A:
 * 1,2 VBat
 * 3,4 GND
 * 5 +5V
 * 6 N/C ?
 * TP group B:
 * 162CPU (PB14) = ?
 * 165CPU (PC0/SCI1_TX) => K
 * 55CPU (MD1)
 * 166CPU (PC1/SCI1_RX) => K
 * 221CPU (PL5) via 1kR => WDT
 * 58CPU (nRES), 3k pullup to PVCC2 ? (mesured)

type B
Seems to be a more compact PCB ? And the mcu is mounted 180deg when compared with type A ECUs.
 * SH7055
 * ECUIDs : EQ910 (MY05 Xtrail AUS)
 * Outside markings :
 * EQ910: ?

ICs
Probably the same population as type A ?

wiring, pinouts, schem

 * EEPROM : unknown type, but firmware spi_* functions are mostly identical to type A. Connected to the same PORTJ pins as type A.

type C
Probably same size PCB as type A. "upside down" mcu, like type B.
 * SH7058
 * ECUIDs : ZD89A (MY06 Altima USDM)
 * Outside markings :
 * ZD89A: "63" and "MEC85-521 A1 5913"

ICs
Probably the same population as type A ?

type D

 * SH7055 0.18μ
 * ECUIDs : EC80A, EC82A, EC87A, EM63A : all HR16DE ECUs

pix
Open images at full size to see IC definitions and connection pad names

ICs
EEPROM is M95320 SPI IC

CAN transiever is TLE 6250 G

wiring, pinouts, schem
ECU dissasembling confirmed findings in disassembly of the ROMs indicating that the EEPROM is on PORTC, unlike the types A,B,C: CK - SCK2 (pin 164) DI - TXD2 (pin 167) DO - RXD2 (pin 168) CS - PC4 (pin 169) as observed by Shuher @ RR based on EC87A disasm. Note that the code uses the SCI2 peripheral instead of bitbanging the SPI proto.

Some useful ECU's main connector pins

+12V BAT - 105 +12V IGN - 93 GND - 108 CANL - 83 CANH - 84 K-Line - 88

ECU pins to CPU ports connections

Inputs:

Outputs:

type F

 * SH7055 0.35μ
 * ECUIDs : AU40B (MY2002 QR20DE); 8U023 (MY02 Sentra QR25DE)

ICs
EEPROM is 93C66 SPI IC

wiring, pinouts, schem
EEPROM: CS - PJ15 (pin 193) CK - PJ14 (pin 192) DI - PJ13 (pin 191) DO - PJ12 (pin 190)

Some useful ECU's main connector pins

+12V BAT - 109, 111 +12V IGN - 42 GND - 106, 108 CANL - 34 CANH - 33 K-Line - 50

misc types
Some other PCB examples that are not similar enough to other types to fit in their categories. Some of these probably deserve their own "type" section when someone documents them enough.

= Dual-microcontroller types =

type E

 * Two SH7051 mcus
 * Outside markings :
 * AG920 (Y34 Gloria) : Q2, A56-M43 N01   9716,  UNISIA JECS
 * 2Y967 (A33 Maxima MY00): AB, A56-P35 Z46 9X22, UNISIA JECS

ICs

 * One or two 93C56 EEPROMs