|
RomRaider
Documentation
Community
Developers
|
| Author |
Message |
|
Sasha_A80
|
Post subject: Re: 5EAT TCM JECS ROM Image  Posted: Sun Jun 11, 2017 2:27 am |
|
 |
| Senior Member |
Joined: Mon Jan 19, 2009 2:31 pm
Posts: 1615
Location: Moscow, Russia
|
|
Commands 81 83 27 10 are for TCM software updates.
There are too many checks of the engine\tranny states to impliment those commands for TCM reflash on the bench.
The code above checks for commands being applicable.
The executive code is located at another place of the code.
Last edited by Sasha_A80 on Sun Jun 11, 2017 5:09 am, edited 1 time in total.
|
|
| Top |
|
 |
|
roadie
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Sun Jun 11, 2017 3:00 am |
|
|
| Newbie |
Joined: Sun Mar 05, 2017 3:35 pm
Posts: 22
Location: Sweden
|
Sasha_A80 wrote: Commands 81 83 27 10 are for TCM software updates.
There are too many checks of the engine\tranny states to implent those commands for TCM reflash on the bench.
The code above checks for commands being applicable.
The executive code is located at another place of the code. Ok. Do you flash them via SIO1?
|
|
| Top |
|
|
|
Sasha_A80
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Sun Jun 11, 2017 5:07 am |
|
|
| Senior Member |
Joined: Mon Jan 19, 2009 2:31 pm
Posts: 1615
Location: Moscow, Russia
|
|
I do flash them in-circuitry on the bench.
It may be useful to develop a secondary bootloader to reflash those TCMs via OBD k-line with the aim to overcome factory software update algo and it's checks.
|
|
| Top |
|
|
|
roadie
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Sun Jun 11, 2017 7:04 am |
|
|
| Newbie |
Joined: Sun Mar 05, 2017 3:35 pm
Posts: 22
Location: Sweden
|
|
Need to know what to change first. Im having a hard time trying to find out.
|
|
| Top |
|
|
|
nightfire37
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Sun Jun 11, 2017 4:35 pm |
|
|
| Newbie |
Joined: Thu Jun 08, 2017 7:33 pm
Posts: 3
|
|
Do we happen to know where the unique identifier is?
|
|
| Top |
|
|
|
roadie
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Tue Jun 13, 2017 7:02 am |
|
|
| Newbie |
Joined: Sun Mar 05, 2017 3:35 pm
Posts: 22
Location: Sweden
|
Sasha_A80 wrote: The executive code is located at another place of the code. Yes found another place 25A7C where the response message is being built. But havent found the response data yet. Anyone can explain the adressing? fp seth fp, #0x81 ;set add3 fp, fp, #-0x8000 ;add ldub R0, @(-0x2EF4, fp) ;load, but from what resulting adress?
|
|
| Top |
|
|
|
Sasha_A80
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Tue Jun 13, 2017 10:41 am |
|
|
| Senior Member |
Joined: Mon Jan 19, 2009 2:31 pm
Posts: 1615
Location: Moscow, Russia
|
|
seth fp, #0x81 ;set
add3 fp, fp, #-0x8000 ;add
The result is FP = #0x808000
(-0x2EF4, fp) points to 0x80510C
|
|
| Top |
|
|
|
roadie
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Tue Jun 13, 2017 12:20 pm |
|
|
| Newbie |
Joined: Sun Mar 05, 2017 3:35 pm
Posts: 22
Location: Sweden
|
|
| Top |
|
|
|
roadie
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Fri Jun 16, 2017 11:33 am |
|
|
| Newbie |
Joined: Sun Mar 05, 2017 3:35 pm
Posts: 22
Location: Sweden
|
|
Sasha do you have a dump of the bootloader?
|
|
| Top |
|
|
|
roadie
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Thu Jun 29, 2017 1:54 am |
|
|
| Newbie |
Joined: Sun Mar 05, 2017 3:35 pm
Posts: 22
Location: Sweden
|
|
Tried to connect to sio1 in bootmode but I dont get any response from it.
|
|
| Top |
|
|
|
roadie
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Tue Jul 11, 2017 1:20 pm |
|
|
| Newbie |
Joined: Sun Mar 05, 2017 3:35 pm
Posts: 22
Location: Sweden
|
|
Dont know if I get it into bootmode correctly.
Power on -> pull mod0 high -> pull reset low
Then reset should go high as in normal mode but it does not. I can pull it high but not sure if thats correct.
Any ideas?
|
|
| Top |
|
|
|
roadie
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Thu Aug 17, 2017 2:03 pm |
|
|
| Newbie |
Joined: Sun Mar 05, 2017 3:35 pm
Posts: 22
Location: Sweden
|
Just got a 2007 JDM LGT TCU. Doesnt say UJ on this one. Will look at it more as soon as I have time. M32R/ECU M32176F4 31711AK570 on the cover. 2006/02-2007/04 
|
|
| Top |
|
|
|
Sasha_A80
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Thu Aug 17, 2017 11:28 pm |
|
|
| Senior Member |
Joined: Mon Jan 19, 2009 2:31 pm
Posts: 1615
Location: Moscow, Russia
|
|
M32176 has completely another bootmode loader.
Anyway you are able to read the flash by means of ecumem2 software.
Last edited by Sasha_A80 on Fri Aug 18, 2017 2:10 am, edited 1 time in total.
|
|
| Top |
|
|
|
roadie
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Fri Aug 18, 2017 1:40 am |
|
|
| Newbie |
Joined: Sun Mar 05, 2017 3:35 pm
Posts: 22
Location: Sweden
|
Sasha_A80 wrote: M32176 has completely another bootmode loader.
Anyway you are able to read the flash bu ecumem2 software. Thats what I thought. Is this a Mitsubishi with protocol d autobaud bootmode like renesas but with diffrent commands?
|
|
| Top |
|
|
|
Sasha_A80
|
Post subject: Re: 5EAT TCM JECS ROM Image Posted: Fri Aug 18, 2017 2:12 am |
|
|
| Senior Member |
Joined: Mon Jan 19, 2009 2:31 pm
Posts: 1615
Location: Moscow, Russia
|
|
This is Renesas M32R bootmode protocol.
Nothing near to Mitsubishi M32R bootmode.
Last edited by Sasha_A80 on Fri Aug 18, 2017 4:12 am, edited 1 time in total.
|
|
| Top |
|
|
Who is online |
Users browsing this forum: No registered users and 0 guests |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum
|
|
