RomRaider Logo

RomRaider

Open Source ECU Tools
 FAQ •  Register •  Login 

RomRaider

Documentation

Community

Developers

It is currently Wed Dec 24, 2025 12:41 am

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 376 posts ]  Go to page Previous  1 ... 11, 12, 13, 14, 15, 16, 17 ... 26  Next
Author Message
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sat Aug 26, 2023 12:46 am 
Offline
Newbie

Joined: Mon Jul 06, 2020 6:22 pm
Posts: 25
rimwall wrote:
It doesn’t like the 5EAT kernel load address in RAM. Must be different for a 4EAT. Are you sure it’s a SH7058? And not something like a SH7055?

We might find load address by trial and error (try FastECU v0.15 - it tests different load addresses), but ideally we need to know the chip type for the kernel.


I will try 0.15. I know the ECU is 7058, you would think it is the same for TCU. But maybe not.


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sat Aug 26, 2023 12:50 am 
Offline
Newbie

Joined: Mon Jul 06, 2020 6:22 pm
Posts: 25
Here is log from 0.15.

[2023-08-25 21:49:00.692] Read memory with flashmethod 'sub_tcu_denso_can' and kernel 'kernels/ssmk_tcu_CAN_SH7058.bin'
[2023-08-25 21:49:03.314] Connecting to Subaru Denso CAN bootloader, please wait...
[2023-08-25 21:49:03.320] Checking if kernel is already running...
[2023-08-25 21:49:03.563] Trying TCU Init...
[2023-08-25 21:49:03.600] Sent: 00 00 07 e1 aa
[2023-08-25 21:49:03.613] 0: 0xAA response: 00 00 07 e9 ea a2 10 21 97 fe 60 60 00 01 00 80 04 00 00 00 00 bd c3 c0 00 00 00 00 00 00 00 00 00 fd 06 00 0a 21 c0 00 00 01 1f 00 80 00 00 00 00 00 00 00 06 e0 40 00 00 00 01 20 00
[2023-08-25 21:49:03.632] Init Success: CAL ID = 97FE606000
[2023-08-25 21:49:03.642] Trying 0x09 0x04...
[2023-08-25 21:49:03.647] Sent: 00 00 07 e1 09 04
[2023-08-25 21:49:03.654] 0: 0x09 0x04 response: 00 00 07 e9 49 04 01 50 46 46 45 36 57 41 30 00 00 00 00 00 00 00 00
[2023-08-25 21:49:03.656] Init Success: TCU ID = PFFE6WA0
[2023-08-25 21:49:03.660] Initializing bootloader...
[2023-08-25 21:49:03.665] Sent: 00 00 07 e1 10 03
[2023-08-25 21:49:03.667] 0: 0x10 0x03 response: 00 00 07 e9 50 03
[2023-08-25 21:49:03.671] Sent: 00 00 07 e1 27 01
[2023-08-25 21:49:03.672] 0: 0x27 0x01 response: 00 00 07 e9 67 01 0d e9 0d c1
[2023-08-25 21:49:03.674] Seed request ok
[2023-08-25 21:49:03.677] Calculated seed key: 32 5a 33 ea
[2023-08-25 21:49:03.679] Sending seed key
[2023-08-25 21:49:03.682] Sent: 00 00 07 e1 27 02 32 5a 33 ea
[2023-08-25 21:49:03.686] 0: 0x27 0x02 response: 00 00 07 e9 67 02
[2023-08-25 21:49:03.690] Seed key ok
[2023-08-25 21:49:03.694] Sent: 00 00 07 e1 10 02
[2023-08-25 21:49:03.722] Sent: 00 00 07 e1 10 02
[2023-08-25 21:49:03.726] 1: 0x10 0x02 response: 00 00 07 e9 50 02
[2023-08-25 21:49:03.727] Initializing Subaru Denso CAN kernel upload, please wait...
[2023-08-25 21:49:03.738] Sent: 00 00 07 e1 34 04 33 ff 10 00 00 0b 80
[2023-08-25 21:49:03.738] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.750] Sent: 00 00 07 e1 34 04 33 ff 20 00 00 0b 80
[2023-08-25 21:49:03.754] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.758] Sent: 00 00 07 e1 34 04 33 ff 30 00 00 0b 80
[2023-08-25 21:49:03.760] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.765] Sent: 00 00 07 e1 34 04 33 ff 40 00 00 0b 80
[2023-08-25 21:49:03.766] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.770] Sent: 00 00 07 e1 34 04 33 ff 50 00 00 0b 80
[2023-08-25 21:49:03.772] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.777] Sent: 00 00 07 e1 34 04 33 ff 60 00 00 0b 80
[2023-08-25 21:49:03.778] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.781] Sent: 00 00 07 e1 34 04 33 ff 70 00 00 0b 80
[2023-08-25 21:49:03.783] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.786] Sent: 00 00 07 e1 34 04 33 ff 80 00 00 0b 80
[2023-08-25 21:49:03.787] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.791] Sent: 00 00 07 e1 34 04 33 ff 90 00 00 0b 80
[2023-08-25 21:49:03.792] 0: 0x34 0x04 response: 00 00 07 e9 74 20 00 84
[2023-08-25 21:49:03.805] Sent: 00 00 07 e1 34 04 33 ff a0 00 00 0b 80
[2023-08-25 21:49:03.808] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.812] Sent: 00 00 07 e1 34 04 33 ff b0 00 00 0b 80
[2023-08-25 21:49:03.814] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.819] Sent: 00 00 07 e1 34 04 33 ff c0 00 00 0b 80
[2023-08-25 21:49:03.821] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.826] Sent: 00 00 07 e1 34 04 33 ff d0 00 00 0b 80
[2023-08-25 21:49:03.827] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22
[2023-08-25 21:49:03.831] Sent: 00 00 07 e1 34 04 33 ff e0 00 00 0b 80
[2023-08-25 21:49:03.834] 0: 0x34 0x04 response: 00 00 07 e9 7f 34 22


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sat Aug 26, 2023 1:29 am 
Offline
Experienced

Joined: Fri Aug 21, 2020 6:05 am
Posts: 315
Expected kernel load address is 0xffff9000.

That will require a new kernel and FastECU coding updates. I’ll post when ready to try.


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sat Aug 26, 2023 1:42 am 
Offline
Experienced

Joined: Tue Jun 06, 2017 2:11 pm
Posts: 206
rimwall wrote:
Expected kernel load address is 0xffff9000.

That will require a new kernel and FastECU coding updates. I’ll post when ready to try.
Btw, protocols.cfg contains kernel load address, so if you use it in code, new kernel should not need for code changes if all else remains the same.


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sat Aug 26, 2023 4:35 am 
Offline
Experienced

Joined: Fri Aug 21, 2020 6:05 am
Posts: 315
Yes, good point, thanks @MiikaS

I'm 95% certain that a TCU expecting the kernel to be loaded at 0xffff9000 is an SH7055. So, there is now a kernel for this.

The repo now has a v0.20 protocols.cfg and a v0.20 kernel called ssmk_tcu_CAN_7055_35.bin. If I've got it right, these should work with FastECU v0.19

See how you go @curt4576. Btw, the kernel's ability to write is disabled, so little chance of any accidental flashing.


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sat Aug 26, 2023 12:55 pm 
Offline
Newbie

Joined: Mon Jul 06, 2020 6:22 pm
Posts: 25
rimwall wrote:
Yes, good point, thanks @MiikaS

I'm 95% certain that a TCU expecting the kernel to be loaded at 0xffff9000 is an SH7055. So, there is now a kernel for this.

The repo now has a v0.20 protocols.cfg and a v0.20 kernel called ssmk_tcu_CAN_7055_35.bin. If I've got it right, these should work with FastECU v0.19

See how you go @curt4576. Btw, the kernel's ability to write is disabled, so little chance of any accidental flashing.


It looks like it pulled this time. Here is the bin.
Here is part of log as well.

[2023-08-26 09:49:09.730] Read memory with flashmethod 'sub_tcu_denso_can_SH7055' and kernel 'kernels/ssmk_tcu_CAN_SH7055_35.bin'
[2023-08-26 09:49:13.663] Connecting to Subaru Denso CAN bootloader, please wait...
[2023-08-26 09:49:13.668] Checking if kernel is already running...
[2023-08-26 09:49:13.900] Trying TCU Init...
[2023-08-26 09:49:13.908] Sent: 00 00 07 e1 aa
[2023-08-26 09:49:13.918] 0: 0xAA response: 00 00 07 e9 ea a2 10 21 97 fe 60 60 00 01 00 80 04 00 00 00 00 bd c3 c0 00 00 00 00 00 00 00 00 00 fd 06 00 0a 21 c0 00 00 01 1f 00 80 00 00 00 00 00 00 00 06 e0 40 00 00 00 01 20 00
[2023-08-26 09:49:13.933] Init Success: CAL ID = 97FE606000
[2023-08-26 09:49:13.939] Trying 0x09 0x04...
[2023-08-26 09:49:13.943] Sent: 00 00 07 e1 09 04
[2023-08-26 09:49:13.947] 0: 0x09 0x04 response: 00 00 07 e9 49 04 01 50 46 46 45 36 57 41 30 00 00 00 00 00 00 00 00
[2023-08-26 09:49:13.953] Init Success: TCU ID = PFFE6WA0
[2023-08-26 09:49:13.958] Initializing bootloader...
[2023-08-26 09:49:13.964] Sent: 00 00 07 e1 10 03
[2023-08-26 09:49:13.968] 0: 0x10 0x03 response: 00 00 07 e9 50 03
[2023-08-26 09:49:13.972] Sent: 00 00 07 e1 27 01
[2023-08-26 09:49:13.975] 0: 0x27 0x01 response: 00 00 07 e9 67 01 5e 08 3d 78
[2023-08-26 09:49:13.978] Seed request ok
[2023-08-26 09:49:13.982] Calculated seed key: 5a 57 b7 43
[2023-08-26 09:49:13.984] Sending seed key
[2023-08-26 09:49:13.988] Sent: 00 00 07 e1 27 02 5a 57 b7 43
[2023-08-26 09:49:13.990] 0: 0x27 0x02 response: 00 00 07 e9 67 02
[2023-08-26 09:49:13.991] Seed key ok
[2023-08-26 09:49:13.995] Sent: 00 00 07 e1 10 02
[2023-08-26 09:49:14.019] Sent: 00 00 07 e1 10 02
[2023-08-26 09:49:14.021] 1: 0x10 0x02 response: 00 00 07 e9 50 02
[2023-08-26 09:49:14.022] Initializing Subaru Denso CAN kernel upload, please wait...
[2023-08-26 09:49:14.029] Sent: 00 00 07 e1 34 04 33 ff 90 00 00 0e 00
[2023-08-26 09:49:14.031] 0: 0x34 0x04 response: 00 00 07 e9 74 20 00 84
[2023-08-26 09:49:14.043] Sent: 00 00 07 e1 b6 ff 90 00 39 52 cc 9d 9c 03 0e 17 0e fb 16 00 6e d5 37 a4 e2 98 c7 99 5b 9b 71 24 fa d8 1f 99 2b cd 8b d4 81 d4 3c e9 c0 37 7d 42 d4 f7 17 b5 db 14 eb aa b3 23 42 52 b5 c9 e4 2f 10 1f cf e4 01 06 a6 93 0a 23 c8 9f 48 2f 80 a4 ad aa 55 df 82 b6 35 60 31 2b 36 cb 4d 42 1a 74 23 b3 a2 fc ed a8 40 d4 96 57 b0 41 8b d8 fa 6c 70 4b 86 a1 b5 91 55 d3 0d 32 25 b6 0e 4b f5 df 70 34 2a 90 b2 9e 3d 71
[2023-08-26 09:49:14.055] Sent: 00 00 07 e1 b6 ff 90 80 03 02 c9 58 d5 5d 0f 54 a1 90 0d 99 4f b2 f4 d9 0e 09 3d f4 db 52 09 5e da f7 c1 cd 0a 71 6a 49 a0 43 3e bb 6c c5 49 7c 27 cb e3 dd f0 b7 8c be 88 15 83 91 d8 f5 e1 ab fa 8a 2c 81 dd 3e 3c 06 f4 ea e1 86 7f c6 d2 31 fa a5 18 bb 89 aa ae a4 8e e6 c2 25 a1 a3 d2 c9 d1 25 c4 1b 3a 23 70 e6 20 a6 e3 5a a2 2c fb da 67 ea 1d c7 10 95 e5 dc 89 91 eb 76 82 f3 13 34 02 17 eb 59 0d ad be 68
[2023-08-26 09:49:14.067] Sent: 00 00 07 e1 b6 ff 91 00 78 c8 aa fe 4c 57 db a2 c0 37 7d 42 f7 fd 1d 60 97 32 42 76 3f 90 3e f8 f1 d9 62 40 32 ed 58 5e 84 8e 01 90 5c 34 a1 93 71 59 20 71 61 54 1d 59 79 5d 1a 27 7c 15 41 0d f2 4b 8f cb 84 b3 8e e8 c8 6c 11 03 9d 30 9d fd 13 30 14 f4 e2 ac b4 fe 92 4d 56 de df 46 aa 18 fa 1b 60 1d fa 28 db 7c 10 ef a2 05 e6 a5 46 e2 b2 91 00 02 d9 d1 62 92 04 c5 03 bc 02 ec b8 50 5d fd cb 3e a4 41 13 d8
[2023-08-26 09:49:14.080] Sent: 00 00 07 e1 b6 ff 91 80 06 e9 47 3b e1 5f 57 13 15 f2 46 41 da 21 a2 8d 4a 93 55 b5 d8 c3 ac ce d8 2a c6 3d c6 5b 7c f5 62 cf 7f 02 e0 76 a1 38 89 cd 05 69 0f 27 3f 90 f1 48 6f 74 b5 c2 2b 46 d7 e5 b8 f9 31 bb 73 db ac 30 33 45 dd fa 17 56 96 53 83 b2 52 56 3c af 1a 4c 0d 62 d0 f2 f8 1b f6 8e 36 a1 b8 50 7c 23 02 df 87 73 bd 48 77 de 3a aa 65 ca f7 c7 95 a1 16 da a1 81 ec 48 9c 09 4f 85 fd 36 5e fe 2d 9c
[2023-08-26 09:49:14.095] Sent: 00 00 07 e1 b6 ff 92 00 fc 2d 7f 9a c0 e9 09 3f bb 9e 48 26 ef 04 f3 eb 1c 60 bf 24 70 14 ed f6 9e a2 09 6b 3e 21 75 c5 0e 0e 01 ad 39 89 d7 8a c5 ac b2 1c 69 70 58 e4 12 50 93 c0 60 ee 42 37 81 14 9f 41 45 2a 24 9a 78 d7 9e 68 e8 5c a0 3e 08 7f aa 0d 3e b3 cc f1 6a 0f 0e 0b fc 14 5f d5 a4 df bc 0f a1 9b db 1a fc 14 5f d5 d2 7d b1 a5 bc 75 26 fd 4b bf 08 26 aa 5f 17 9e d1 01 7f 5c a6 4b 63 8b fd 52 94 f8
[2023-08-26 09:49:14.108] Sent: 00 00 07 e1 b6 ff 92 80 71 54 f3 f3 1b ce b0 73 0f e8 f1 08 69 dd 8e bc d5 18 c2 67 8b 4d a4 b7 08 a7 c4 2a b7 dc 1c 14 e2 2b 1c 85 c7 3f bf fd 9c c8 d4 69 1e 44 b9 8c 5c 9f 74 a5 26 af 15 9d 67 74 fd 84 62 ad f3 6c cd 2f bb 45 0d ad be 68 e0 68 6c a1 99 fd 67 c1 02 17 eb 59 8d 0c 72 a1 a4 1d 37 27 f3 bf fe 89 10 13 d4 67 1d fd 29 3a 1d 45 8b eb 2e cb 28 47 a4 40 d8 5d 25 94 d6 d1 a3 a4 99 ed a1 9b db 1a
[2023-08-26 09:49:14.149] Sent: 00 00 07 e1 b6 ff 93 00 25 94 d6 d1 68 ac 19 2a 2d 6c 13 67 5a 8f c3 df 86 76 89 af 6c 9f 92 df ad 32 5c 14 73 0b e0 ab 26 8e 52 55 1a 86 e7 c8 71 39 96 93 50 60 46 4d e4 fb fc 37 9f 77 9f 9d fd df 3a 08 78 9d 2a 0c 22 c9 08 ea cc 99 1f 9d 50 99 d4 60 a5 3e ec 55 b8 aa 32 8c c8 b0 4a 28 ea 98 e8 d3 79 a0 d5 c5 4b 64 37 9f 3e 3a 2b 88 fe cb 58 19 72 4e 0e b5 f4 a9 df 0b 5f 8c c4 3d ff b3 7c 61 1c c9 0e 2c
[2023-08-26 09:49:14.163] Sent: 00 00 07 e1 b6 ff 93 80 79 ab 9c ae 9e cb 01 b8 d1 d9 dd dc af 4d 0b 50 66 08 a5 53 94 ca af 2f 87 f0 16 74 c9 21 3f 3d ee a3 56 5c 1d ec 9f d2 da 9e 74 8a b5 30 6e 45 ea 50 85 3a 43 40 ae fc 94 ca af 2f 87 f0 16 74 c9 21 3f 3d 37 5c 52 4b 76 14 be 31 ad 61 de 15 58 d1 00 0c d7 e9 66 7c e1 5e c6 ba eb 66 f5 65 91 e8 9e bf 68 e3 f1 ab 0d e5 ff be fc c9 5a aa f8 16 28 41 9e 4e df a8 e4 cd 81 b7 15 46 92 29
[2023-08-26 09:49:14.180] Sent: 00 00 07 e1 b6 ff 94 00 10 3a 2c ca aa 8e 51 15 4e ea 60 f3 11 08 98 15 8b 2e 8d e5 d4 0b 0b 2e 55 9a a4 e5 85 69 67 98 3b d5 7b f8 f8 10 99 d4 0f 51 20 c7 65 a3 8e 01 0d d6 50 c0 d0 70 93 c6 83 36 d5 8c 78 d7 9e 68 71 77 5a 74 2f 22 30 03 a0 54 62 d4 ec f0 6f e4 38 02 1a cb c8 25 7f db c8 21 ff 1b 7d 03 e8 88 b0 b8 7f 6f e8 1e f9 84 42 d2 00 11 ec 5d b4 7b e6 d3 4c 87 8f b4 ea 96 a8 71 b3 c6 28 70 f3 c4
[2023-08-26 09:49:14.196] Sent: 00 00 07 e1 b6 ff 94 80 9a 6d d8 17 d7 cd c6 a1 88 9f 68 8b 2e 94 02 90 16 c5 2e 13 2f 2b bc a2 73 47 a9 e8 8b 2e 8d e5 87 f0 16 74 c9 21 3f 3d ee a3 56 5c a8 c7 dc f4 c3 b2 d3 60 2e 31 4f 4c e9 2d 40 6a 3c cc 04 59 02 17 eb 59 0d ad be 68 d1 e9 82 60 11 87 97 14 8d 0c 72 a1 c8 5f 92 b1 de 36 05 21 d3 10 24 42 77 d9 87 26 e0 68 6c a1 02 05 97 c6 f3 bf fe 89 8b 2e 8d e5 16 22 2e 4f 7e ba 32 a2 19 e1 4f a3
[2023-08-26 09:49:14.211] Sent: 00 00 07 e1 b6 ff 95 00 53 03 54 1c ff 5a 7e 33 17 0a 6f 82 09 98 da d6 a4 66 3f 39 aa 47 b4 2d ee 7a 77 d2 c0 70 cf ec ff e2 62 37 d9 7a 08 5f a7 e9 8b 42 54 78 d0 8b 7d dd 7d 08 1a e7 30 74 41 a7 f5 c1 b0 ed 9a 23 4f 71 a0 2c d3 b6 2a 86 76 d8 ee 66 f4 84 0a bc 27 67 95 de d3 d1 81 a7 a8 fb 35 3b da 75 ca 18 b9 57 44 84 ad 4a ab 52 04 bd b5 47 d2 d3 25 f1 e7 a0 8b 18 a2 c9 3a be 38 6c 22 39 3c 9f dc 4a
[2023-08-26 09:49:14.225] Sent: 00 00 07 e1 b6 ff 95 80 89 60 c9 a4 45 1d b6 31 1c 73 f6 1c fe 79 05 ca c5 fb d2 31 62 a4 b3 11 36 31 18 7d e9 1a eb a1 f6 49 f5 22 8b 53 4d 9e 40 77 0e 04 27 36 13 16 68 4c 1f e9 c0 4d 83 d5 47 2b c1 8d 64 4b a7 b4 da 75 ca 18 e4 49 ac d0 1c d8 77 63 9d dc 15 4e 66 80 b9 f5 36 25 27 d4 58 c2 0e fe c9 6d ec 23 ea 6a 3b 5f b1 5f f9 f0 eb 72 ec 82 4a 49 50 13 4d 68 de e0 91 70 ef 6d c8 c9 1a a4 3a c8 64 d7
[2023-08-26 09:49:14.240] Sent: 00 00 07 e1 b6 ff 96 00 b2 92 5d 23 51 8c 56 f7 d3 d1 81 a7 ce 58 1d 49 a6 46 11 4b 5d a1 20 aa 3c 58 30 90 ef a8 1e 3f da 9d 02 81 46 5d 11 cd 6f 2b 14 01 89 cd 05 69 0f 27 3f 90 f2 cb ee 67 6f a7 5f d1 da 9d 02 81 00 34 df a2 06 1d 6e 25 a4 1d 37 27 de 36 05 21 0f f1 1d 26 f3 bf fe 89 02 05 97 c6 77 d9 87 26 de 36 05 21 d8 ce e5 62 02 17 eb 59 0d ad be 68 c8 5f 92 b1 3c cc 04 59 08 ae e9 05 8d 0c 72 a1
[2023-08-26 09:49:14.255] Sent: 00 00 07 e1 b6 ff 96 80 63 b2 c1 31 98 f1 b1 99 31 38 4a f4 d3 1d 95 b0 da 9d 02 81 b5 5f be 8d 5d 66 cd 85 98 f1 b1 99 31 38 4a f4 01 ff 7e 51 27 91 26 32 b4 bf bc 81 b8 22 ee c5 17 e9 ab 73 8b 1d ef 6f f8 f2 ba 64 a2 8d 47 a0 77 36 62 b2 48 92 5f 8c 08 ae e9 05 86 14 0d f9 b9 39 9b 85 0b b7 3d 35 e2 30 eb 12 18 f2 ce 9f 53 c4 a0 b4 84 be 8f d4 82 6e 20 22 14 7b 89 f2 b0 48 9a c2 f4 40 a4 68 45 34 5b f4
[2023-08-26 09:49:14.269] Sent: 00 00 07 e1 b6 ff 97 00 53 c4 a0 b4 84 be 8f d4 42 66 f8 68 9a e5 b1 51 f9 85 17 1c bd 3e d7 94 77 d9 4c 34 1d 1f 57 0c c3 12 af 2f 41 7a af 42 a9 48 1b 65 65 5a 69 8e 89 aa 97 ac 74 8e 97 06 84 76 cc a6 41 7a af 42 8b a1 09 d7 e3 42 f5 70 33 b2 6d be 23 3e c3 98 bc b9 65 b4 03 b7 c7 ca 82 ac 98 b8 c1 ab 25 8e da 9d 02 81 ce fc 86 a8 65 03 48 48 3b b8 cd 00 17 ff 72 f3 31 e9 67 ab 05 55 cf b5 df bf de 6a
[2023-08-26 09:49:14.282] Sent: 00 00 07 e1 b6 ff 97 80 6b a8 7c 34 88 bb 7a 2e 9b a0 76 c5 4d a6 f9 af bf 9f 4d cf 2d da 58 a2 d0 fd 65 35 e6 00 b6 8b c5 a3 ef a8 09 5c 70 32 22 8d 63 3b 0a 3f 91 e7 d7 86 36 5a f2 54 4a 06 67 15 71 aa fb 1a 31 82 55 9d 76 1f 76 8f 08 14 67 15 71 aa 67 15 71 aa 67 15 71 aa 67 15 71 aa 67 15 71 aa 67 15 71 aa 67 15 71 aa 26 b6 94 42 db c3 3d 45 d1 12 13 c5 42 52 1e 42 e6 0d 54 52 0f c6 9e 63 69 17 e3 e5
[2023-08-26 09:49:14.300] Sent: 00 00 07 e1 b6 ff 98 00 79 b3 85 e6 d8 23 36 e1 35 6c b3 7b 28 12 af 17 dc c5 d4 55 28 cd 94 a0 28 cd 94 a0 55 93 50 8b b3 2c 16 0e e4 49 ac d0 bf 03 a3 aa 62 b5 e2 d0 b2 b9 28 ee 3e 36 71 10 2b ea e8 49 33 8c 81 36 00 5a 49 8b f7 24 c0 8f 00 5a 49 8b 94 16 7b 38 3a b3 26 48 38 62 e5 3e 99 28 ac 1f 5f cb 94 8e 08 01 cb 4f 3c 7d 52 c8 0e 56 6a 3b 3c d9 39 58 b2 36 ea bd 1b e7 57 e1 d6 31 d3 f0 20 a3 a5 79
[2023-08-26 09:49:14.315] Sent: 00 00 07 e1 b6 ff 98 80 18 f2 ce 9f f4 a2 53 dd de bf 79 20 d9 62 95 14 16 38 6f f9 3f 33 1f 3e 38 9a df b0 af 86 42 56 3d 89 61 55 d8 e3 37 35 ef 1e 5a 24 4f ff 5e 22 2b cd 8b d4 0e 0d 36 27 50 cf e7 fe 96 63 de 54 0f 3a 1c d0 7c ce f2 74 8b a1 09 d7 0b 21 c2 c0 ea 19 c4 36 2b f3 c2 22 7a 0f 08 41 15 d9 ae f8 1b d3 3d 04 39 52 cc 9d 59 04 81 94 ea 19 c4 36 bb 84 7f 54 7d 59 41 be 04 7d 89 51 18 f2 ce 9f
[2023-08-26 09:49:14.330] Sent: 00 00 07 e1 b6 ff 99 00 d1 bf 8f 6a 59 04 81 94 bd 27 76 9b 54 12 81 2a 4b a4 fe 88 19 1c a7 88 d7 e3 4e f0 9e d8 06 22 b4 c2 2f 75 ea 1c 9c af 2c df 4e 99 e6 5e c7 c7 97 e1 19 24 16 98 71 d5 2b f3 c2 22 59 54 42 03 25 46 8f 29 2b f3 c2 22 1d af 0b 13 aa 21 6e 3a fc ef d4 f0 d7 43 1e f8 65 93 a7 65 04 39 bc eb d0 ab 21 e9 34 1f 94 0d 7f 20 83 2a 98 f1 b1 99 92 9a 1a e5 09 be 56 ba ba 4a 1f 93 15 e0 6b 27
[2023-08-26 09:49:14.344] Sent: 00 00 07 e1 b6 ff 99 80 bd 19 9b 9d 59 04 81 94 39 91 56 31 a5 cd 49 0e 14 a3 41 bd a0 d5 67 93 74 7c 99 89 48 44 a0 14 d0 25 4a 1d dc 7c b4 bd a3 a6 03 03 8c 1e 95 31 77 ac b3 5d ca 97 94 54 a3 b5 ba 0c fc 69 0e 97 23 14 99 75 ec 4a 50 04 df 28 af 35 4a 2f 56 4d 31 78 93 fa ce eb c7 49 0a da a3 be cf 60 35 e9 80 e4 89 96 0a 14 63 e1 98 75 05 e9 57 3f 0b a3 f7 2e 86 9f 96 be bc cc 37 fc 4a 2a 03 3f 40 76
[2023-08-26 09:49:14.360] Sent: 00 00 07 e1 b6 ff 9a 00 6f 26 3c 8e 77 ce ad 7d 50 6f 1f 59 9d 07 22 85 5f 8e 76 0e df 28 af 35 4d fc 2e 40 fa e6 e0 c4 ff 46 39 16 08 2e 0a 14 78 82 cd 74 04 7d 89 51 dd f2 7c ff 47 7b e4 31 23 00 d8 37 c7 de 01 8a e3 1c 5b b7 15 77 3b 86 aa 21 6e 3a a9 2e 6f 9d 3a 6b 02 c4 d6 53 8b 2c 14 d7 f0 10 46 d0 ad a5 2e b7 fe 65 0b ea d2 78 7d ea 32 43 16 76 b1 54 84 fc e0 8a 71 f9 27 98 f2 d4 a3 19 5a f8 a7 bc
[2023-08-26 09:49:14.377] Sent: 00 00 07 e1 b6 ff 9a 80 e2 40 3a 3a 04 7d 89 51 d4 8b 5d 2e 92 2a db 0c d3 de 9b 69 80 17 d6 3e 14 57 37 16 84 60 0e 49 af 6c 2c 1b 66 d6 c1 e1 56 f2 d2 b8 ba fc a4 f5 22 39 18 49 c3 05 0b 54 a5 14 9d e7 3c 58 30 90 4e 9d 16 51 c0 ee 0c 64 fe b4 df 90 b8 3d 2a 65 81 d9 36 ce 3e 2c 74 1d fb 66 f2 10 67 ea 1d c7 f0 8d e9 77 16 45 c4 2a 7d fb b6 b4 15 e0 6b 27 53 a8 0f b8 88 fe 96 b0 34 b8 d1 8c 8e f6 ee 19
[2023-08-26 09:49:14.392] Sent: 00 00 07 e1 b6 ff 9b 00 28 eb f7 bc 59 04 81 94 b7 a9 4b 00 02 17 eb 59 b8 e2 39 9c 65 09 fb 18 64 04 7b c9 6b 14 40 3d b4 18 23 09 69 29 90 b5 92 4d 56 de 9b e7 92 a5 e7 0e 4b fa 5f 2c 84 ba 6c e4 c9 ce 31 e8 e7 15 54 b3 52 af 3e e0 5c e7 09 a1 32 69 f9 bb ad c4 6b ef ea 56 1e 9a 9b 43 1b 3e 7c 80 b4 74 5d 20 cd 53 53 4b 61 bb 0d 86 53 42 78 69 cb 89 4b d5 ce 66 4f ea 45 c1 46 30 c2 8c a8 ee e9 fb b9 05
[2023-08-26 09:49:14.405] Sent: 00 00 07 e1 b6 ff 9b 80 0d 12 e8 4b a1 61 aa fd 0e 02 4e 43 42 b2 64 b1 e7 90 eb 89 b9 e1 16 0a 1b 99 67 25 c7 05 ee 55 8d bb 18 a3 2b f3 c2 22 ba 09 08 33 47 63 c0 9c 04 39 bc eb ee 37 3c 2d 20 a4 77 98 cb 7a 68 48 2b f3 c2 22 aa f7 cb 8c 6c c9 e6 e9 cb ae 64 28 62 e6 4d d2 ab e6 c1 fa cb 7a 68 48 ae 31 28 cf f6 be 06 c4 a6 70 f1 b1 97 bc 2f 75 01 8d 04 0d 29 9c d0 0b cb 7a 68 48 24 b4 8f eb cb 7a 68 48
[2023-08-26 09:49:14.421] Sent: 00 00 07 e1 b6 ff 9c 00 08 c9 43 f9 b5 cf 3d 7d fd ab b7 b2 87 99 f0 49 cc 2b de d5 86 c0 0b c8 1f e5 94 19 cb 7a 68 48 a2 e9 4c 18 29 38 34 c5 da 9d 02 81 a5 51 58 c2 ca 66 96 0a 38 18 15 51 f2 52 1c 7b 19 8d 36 11 67 88 68 96 15 6a 66 30 30 da 1a d7 7e ee 09 b6 54 ba 77 e1 7a e1 5d 7e 78 1f fb de ca 08 19 6f 18 f2 ce 9f f3 0a 72 38 3c e9 73 88 15 60 6d 25 94 53 fe 6b 3b 44 e5 31 45 fc e6 22 39 7a 14 bd
[2023-08-26 09:49:14.436] Sent: 00 00 07 e1 b6 ff 9c 80 99 18 bc f4 18 9d 63 d6 28 eb f7 bc 59 04 81 94 b7 a9 4b 00 b8 e2 39 9c 2b 6f 42 dd 64 04 7b c9 5d 31 30 8f e2 ac b4 fe 6a 1a 31 3b 2e 7b a3 bb df 05 35 cb 56 3e f9 ef 38 3d 60 35 bb c5 1e 85 6b ac e2 f5 35 7d 77 3a 00 09 f5 24 13 6b 96 65 d8 12 5f 6a c9 7e 4e 76 0f fe 50 27 1b 7a 72 71 bb a4 1a e7 ed 2c 1e a9 fc 3b 14 ec 56 c2 99 9b f9 ee b7 b2 29 ac aa 27 00 28 9b 1f 78 89 73 19
[2023-08-26 09:49:14.451] Sent: 00 00 07 e1 b6 ff 9d 00 df 28 af 35 be 70 f0 b5 7a e1 5d 7e 78 1f fb de ca 08 19 6f 18 f2 ce 9f c3 e5 a5 71 7d 74 44 78 7f 6a 81 b8 99 18 bc f4 d1 9e b7 1a 13 30 14 f4 34 65 b6 2c 39 41 20 f9 23 91 76 11 7a 0f 08 41 ea d3 2f 0d 40 fe d0 3e 5b f7 22 95 14 98 8c fd 02 b7 d5 5c 28 9c 05 0a 45 a1 a1 2c e6 cd b9 22 6e 16 f2 95 f0 d4 81 c1 5b a8 d7 e2 69 fa 86 48 e5 c3 b9 c2 da 9d 02 81 24 2c b6 29 be e9 cc c5
[2023-08-26 09:49:14.464] Sent: 00 00 07 e1 b6 ff 9d 80 89 c1 cf 57 cf ae da 69 4d 33 36 e6 09 06 9b 71 67 ea 1d c7 55 d6 24 57 8f 88 3c f4 99 18 bc f4 bf 04 49 d3 b7 a9 4b 00 20 20 ca f5 ae 86 2c 23 99 18 bc f4 e7 e2 14 30 b1 53 41 03 6f 1c 19 fe 11 4e 4f e9 a8 0a 0b d0 4d 55 55 f1 08 22 0a 34 71 24 43 19 e1 3c 0f f4 d0 d9 7f 90 86 e3 12 32 f7 f8 6f 92 49 22 02 34 90 39 7d 94 a7 62 16 36 e8 18 07 97 0f 63 76 39 e7 e2 14 30 53 d2 74 d2
[2023-08-26 09:49:14.474] Sent: 00 00 07 e1 b6 ff 9e 00
[2023-08-26 09:49:14.482] Sent: 00 00 07 e1 37
[2023-08-26 09:49:14.484] 0: 0x37 response: 00 00 07 e9 77
[2023-08-26 09:49:14.491] Sent: 00 00 07 e1 31 01 02 02 02
[2023-08-26 09:49:14.492] 0: 0x31 response: 00 00 07 e9 71 01 02 02
[2023-08-26 09:49:14.500] Kernel started, initializing...
[2023-08-26 09:49:15.306] Requesting kernel ID
[2023-08-26 09:49:15.308] Kernel ID request: 00 00 07 e1 7a a0 00 00 00 00 00 00
[2023-08-26 09:49:15.416] Kernel ID response: 7f a1 34 00 00 00 00 00
[2023-08-26 09:49:15.634] Kernel ID request: 00 00 07 e1 7a a0 00 00 00 00 00 00
[2023-08-26 09:49:15.770] Kernel ID response: 7f a1 34 00 00 00 00 00
[2023-08-26 09:49:15.985] Kernel ID request: 00 00 07 e1 7a a0 00 00 00 00 00 00
[2023-08-26 09:49:16.104] Kernel ID response: 7f a1 34 00 00 00 00 00
[2023-08-26 09:49:16.330] Kernel ID request: 00 00 07 e1 7a a0 00 00 00 00 00 00
[2023-08-26 09:49:16.438] Kernel ID response: 7f a1 34 00 00 00 00 00
[2023-08-26 09:49:16.642] Kernel ID request: 00 00 07 e1 7a a0 00 00 00 00 00 00
[2023-08-26 09:49:16.757] Kernel ID response: 7f a1 34 00 00 00 00 00
[2023-08-26 09:49:16.966] Kernel ID: 4
[2023-08-26 09:49:16.984] Reading ROM from Subaru Denso using CAN
[2023-08-26 09:49:17.002] Start reading ROM, please wait...
[2023-08-26 09:49:17.124] Kernel read addr: 0x00000000 length: 0x00000400, 1 B/s 4341 s remaining
[2023-08-26 09:49:17.237] Kernel read addr: 0x00000400 length: 0x00000400, 9061 B/s 58 s remaining
[2023-08-26 09:49:17.354] Kernel read addr: 0x00000800 length: 0x00000400, 8752 B/s 60 s remaining
[2023-08-26 09:49:17.468] Kernel read addr: 0x00000C00 length: 0x00000400, 9061 B/s 58 s remaining
[2023-08-26 09:49:17.587] Kernel read addr: 0x00001000 length: 0x00000400, 8677 B/s 60 s remaining
[2023-08-26 09:49:17.702] Kernel read addr: 0x00001400 length: 0x00000400, 8904 B/s 59 s remaining
[2023-08-26 09:49:17.821] Kernel read addr: 0x00001800 length: 0x00000400, 8677 B/s 60 s remaining
[2023-08-26 09:49:17.938] Kernel read addr: 0x00001C00 length: 0x00000400, 8752 B/s 60 s remaining
[2023-08-26 09:49:18.056] Kernel read addr: 0x00002000 length: 0x00000400, 8677 B/s 60 s remaining
[2023-08-26 09:49:18.171] Kernel read addr: 0x00002400 length: 0x00000400, 8982 B/s 58 s remaining
[2023-08-26 09:49:18.291] Kernel read addr: 0x00002800 length: 0x00000400, 8533 B/s 61 s remaining
[2023-08-26 09:49:18.417] Kernel read addr: 0x00002C00 length: 0x00000400, 8192 B/s 63 s remaining
[2023-08-26 09:49:18.536] Kernel read addr: 0x00003000 length: 0x00000400, 8677 B/s 60 s remaining
[2023-08-26 09:49:18.649] Kernel read addr: 0x00003400 length: 0x00000400, 8982 B/s 57 s remaining
[2023-08-26 09:49:18.771] Kernel read addr: 0x00003800 length: 0x00000400, 8462 B/s 61 s remaining
[2023-08-26 09:49:18.890] Kernel read addr: 0x00003C00 length: 0x00000400, 8605 B/s 60 s remaining
[2023-08-26 09:49:19.011] Kernel read addr: 0x00004000 length: 0x00000400, 8462 B/s 61 s remaining
[2023-08-26 09:49:19.128] Kernel read addr: 0x00004400 length: 0x00000400, 8827 B/s 58 s remaining
[2023-08-26 09:49:19.249] Kernel read addr: 0x00004800 length: 0x00000400, 8533 B/s 60 s remaining
[2023-08-26 09:49:19.369] Kernel read addr: 0x00004C00 length: 0x00000400, 8533 B/s 60 s remaining
[2023-08-26 09:49:19.490] Kernel read addr: 0x00005000 length: 0x00000400, 8533 B/s 60 s remaining
[2023-08-26 09:49:19.604] Kernel read addr: 0x00005400 length: 0x00000400, 8982 B/s 56 s remaining
[2023-08-26 09:49:19.723] Kernel read addr: 0x00005800 length: 0x00000400, 8677 B/s 58 s remaining
[2023-08-26 09:49:19.841] Kernel read addr: 0x00005C00 length: 0x00000400, 8677 B/s 58 s remaining
[2023-08-26 09:49:19.961] Kernel read addr: 0x00006000 length: 0x00000400, 8605 B/s 59 s remaining
[2023-08-26 09:49:20.080] Kernel read addr: 0x00006400 length: 0x00000400, 8605 B/s 58 s remaining
[2023-08-26 09:49:20.200] Kernel read addr: 0x00006800 length: 0x00000400, 8605 B/s 58 s remaining
[2023-08-26 09:49:20.327] Kernel read addr: 0x00006C00 length: 0x00000400, 8126 B/s 62 s remaining
[2023-08-26 09:49:20.454] Kernel read addr: 0x00007000 length: 0x00000400, 8062 B/s 62 s remaining


You do not have the required permissions to view the files attached to this post.


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sat Aug 26, 2023 7:33 pm 
Offline
Experienced

Joined: Fri Aug 21, 2020 6:05 am
Posts: 315
Yep, magic, looks like a successful dump. Seems like it is a SH7055.

So, we can add Denso 4AT to the dumping / flashing list...


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sat Aug 26, 2023 7:37 pm 
Offline
Newbie

Joined: Mon Jul 06, 2020 6:22 pm
Posts: 25
rimwall wrote:
Yep, magic, looks like a successful dump. Seems like it is a SH7055.

So, we can add Denso 4AT to the dumping / flashing list...


Awesome!
Are you using Ghidra to find the tables on the ROM?


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sat Aug 26, 2023 10:19 pm 
Offline
Experienced

Joined: Fri Aug 21, 2020 6:05 am
Posts: 315
Yep, Ghidra is my preferred RE platform.


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sun Aug 27, 2023 1:47 am 
Offline
RomRaider Donator

Joined: Mon Oct 30, 2017 8:19 pm
Posts: 79
rimwall wrote:
Been doing some digging in the Hitachi M32R 5EAT TCU to figure out how the TCU uses Calculated Engine Torque (CET). The following should also apply to Denso SH705x ROMs.

CET is sent from the ECU via bytes 3 & 4 of CAN ID 0x412. The TCU calculates slip via the ratio between Turbine Speed and Engine Speed. A factor is looked up from a table based on the slip. For high slip (~0.5) the factor is ~1.4. For low slip, the factor is ~1.0. The CET is multiplied by this factor. Factored CET is then smoothed and further factored by a lookup based on ATF Temp. The twice factored and smoothed CET is then used to lookup a Line Pressure target. The Line Pressure solenoid is then controlled to achieve this target Line Pressure.

So, it seems that artificially increasing CET will increase the line pressure target and cause faster movement of the various clutches. Is that consistent with what is observed?

Attachment:
LinePressure.JPG

This is .... awesome ... so CET is used over CAN! I've only changed CET a couple of times. On my car with higher CET at higher gears and higher speeds the drivetrain felt twitchy and saw more engine knock. I should now experiment with different ranges on where to maintain or increase this value.


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Sun Aug 27, 2023 10:43 pm 
Offline
Experienced

Joined: Sun Jun 28, 2020 2:25 am
Posts: 237
rimwall wrote:
Yep, magic, looks like a successful dump. Seems like it is a SH7055.

So, we can add Denso 4AT to the dumping / flashing list...


Just to add an info;

There is also SH7058 on newer 4EATs, possible in 2011 and 2012 (two last years before CVT)

_________________
2011 Forester S Edition 5EAT~ Flex Fuel
2011 WRX 6MT ~ Flex Fuel


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Mon Aug 28, 2023 1:00 pm 
Offline
Newbie

Joined: Sun Dec 22, 2013 2:02 pm
Posts: 47
Location: France !!
Hi,
It's seems not working for me.

If someone can have a look


You do not have the required permissions to view the files attached to this post.


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Mon Aug 28, 2023 1:12 pm 
Offline
Newbie

Joined: Mon Jul 06, 2020 6:22 pm
Posts: 25
kiki86 wrote:
Hi,
It's seems not working for me.

If someone can have a look

You need to download latest files from repo.
V0.19 of FastECU
V0.20 of protocols.cfg
V0.20 of the kernel


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Mon Aug 28, 2023 2:32 pm 
Offline
Newbie

Joined: Sun Dec 22, 2013 2:02 pm
Posts: 47
Location: France !!
I do it but not working

copy FastECU_TCU019 in base folder
copy protocols.cfg in config folder
copy kernels folder

but seems not working
maybe I do something wrong?
do I need to "tick" ECU or TCU in top toolbar?


You do not have the required permissions to view the files attached to this post.


Top
 Profile  
 
 Post subject: Re: 5EAT TCM JECS ROM Image
PostPosted: Mon Aug 28, 2023 2:46 pm 
Offline
Newbie

Joined: Mon Jul 06, 2020 6:22 pm
Posts: 25
kiki86 wrote:
I do it but not working

copy FastECU_TCU019 in base folder
copy protocols.cfg in config folder
copy kernels folder

but seems not working
maybe I do something wrong?
do I need to "tick" ECU or TCU in top toolbar?


You should have more options in unknown. I have 3 different options. Seems like it is still using old config file.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 376 posts ]  Go to page Previous  1 ... 11, 12, 13, 14, 15, 16, 17 ... 26  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style based on FI Subsilver by phpBBservice.nl