RomRaider

Can't wait to see what you have found.

Moving forward gradually. I've now looked through some 1200 subroutines and have a reasonable understanding of how the ROM works. Shift curves were located some time ago. The Line Pressure calcs have now been located, including the conversion from Engine Torque to Line Pressure. This uses factors for each brake / clutch which account for the number of plates in each brake/clutch. So, modification of line pressure should be possible.

Currently looking into shift durations...

@zero knowledge - somehow I missed your post, the TCU dump worked. Not sure why it became unresponsive, maybe the kernel didn't terminate properly. I had a quick look in your ROM. The shift table headers start at 0xe9080 and the shift table data starts at 0xb6354.

@ajayel is helping out via logging, which is great. Let me know who else is willing to help, including trials of TCU mods / flashing. Ideally you have a backup TCU handy in case something goes wrong...

Just had success with dumping a '14 USDM Tribeca 5EAT w/ FastECU_TCU020 and Tactrix 2.0

FastECU_TCU020 Settings:
Vehicle: Unknown-> unk5eat, Denso SH7058
iso15765, K-Line, TCU, Port J2534

There was an issue after dumping with a 'Er HC' error on the dash (high-speed CAN error)
I opened up EcuFlash and did a grab of the ECU ROM and the error went away

looks like the kernel for SH7058 may need a tweak to put the bus back in a happy state after the dump

@rimwall thank you for all the effort, this is incredible

I am going to look into the bin file and see if I can figure out the SSMiii command for AT relearn, but figured it would be worth asking if anyone else has already sorted this out?

Hi @jimihimisimi, great to hear it worked! The TCU kernel is the same as ECU kernels, so it’s unlikely to be the kernel. I suspect what happens is that once the kernel is running on the TCU, the TCU naturally stops responding to the ECU. So the ECU then decides the CAN network is bad and raises a DTC. This remains until the ECU DTC is cleared.

I have found the relearn procedure so it should be quick to figure out the commands, provided you are willing to test it out…?

@rimwall that would be great. Can you point to the location in the bin where these are at?

Per the FSM the process is to:
-Clear Memory 2
-Select AT Relearn
-Follow prompts on SSM screen

Not sure what the specific prompts are, which makes completing the relearn unachievable without further exploring (unless some already sorted all this out)

I have MY2008 Tribeca with 5eat (TG5D) - I am willing to test relearn too!
in one of telegram chats - there was rumour that TG5D transmissions can relearn do just accelerating up to 140kmh. switch to neutral and coast to the stop, no brakes, no gas, on even surface... don't know if that is true...

p.s. how can we check if learning has been finished succesfully or not?

do NOT forget lifting car in the air!!!

05 outback 5eat, I'd used relearn procedure several times by using free ssm. Connect to teansmission, clear memory 2. The things I'd done was be sure that the fuel trims are settled (stft bank 1 and bank 2 are on +or- 0.78 and settled on there. Ltft's can be far between on idle like bank 1= -2 bank 2= -12 or something like that)
After stft are settled and the engine is in normal operation temperature, clear memory2(not memory1).
After turning the ignition on, wait for 5secs, the dash lights will be stabilise and start the car.
Turn off all the electrical components like headlights, radio, a/c and fans, seat heaters etc, everything you can turn of.
Wait a little like 20-30 secs for engine to stabilise. (This is up to you)
Now pull the gear knob to D by stopping a littlw on each gear. Don't hurry.
Know wait a little like 10secs(10sec-20sec is not must, just gibe some time gor the car to settle.)

First give light throttle steadily and go until the gears up 1st to 5th gear. Then slowly stop. Do it again. Then do it again with a little more throttle not much but a little more. You will feel that gear changes becomes smoother. Then do it again but don't stop, while cruising on 5th gear, give throttle to
Make downshift to 4th gear several times, downshifts to 4th then upshifts to fifth.

I'm just explaining the transmission relearn procedure, similar to the service manual says.
On service manual, it says that, this procedure goes up to 5 times for the teansmission to learn the gear shift. Normally if you are happy with the result, feel the smoothnes, 2 times accelarating from zero to fifth geart then while cruising downshift to 4th and upshift to five is ok.

I hope this will help

that is for TG5C. for me and jimihimisimi - it is TG5D (which doesn't have this learning procedure available without SSM).

5EATs do a lot of self shift learning. The learn procedure in the earlier 5EATs in legacys (all BP/BL) were just a drive procedure till shift shock was reduced after clearing memory 2.
The later 5EATs including all tribecas had a shift learning procedure activated but SSM diag tool. Ive attached pics of the different procedures out of the service manual.
Ill have to refresh my memory on the SSM learning procedure but can go into detail on it if need be.

I've been figuring out the relearn procedure from @ajayel's ROM. There appears to be two methods to initiate the relearn. One method uses an SSM command to jump straight to the start. This is the method described in the FSM. Interestingly, it looks like there is another method that uses a sequence of shift positions to get to the start.

Does someone want to try the sequence of shift positions to see whether anything noticeable happens? The sequence is:
1. Start with car stationary, engine off, ignition on (but don't start car), ATF Temp at operating temp (so try this after the car has reached normal temps)
2. Do some K-line logging (anything will do, just so the car thinks it has talked to an SSM device). Has to be K-line from the ROM I'm looking at. Not sure if there is a CAN equivalent in CAN only ROMs.
3. Put stick in R (might need to press the shift lock release button for these stick movements)
2. Move stick to P
3. Move stick to R
4. Move stick to N
5. Move stick to D
6. Move stick to N
7. Press accelerator to past halfway (eg) full throttle (nothing will happen because engine is not on), release accelerator
8. Start the car
9. Move stick to D

No steps appear to have a timer attached, so no hurry. This *might* get you to the start of the relearn sequence. It might be hard to tell. Perhaps the ATF Lamp will blink? If nothing noticeable happens, we can do some logging to figure out what didn't work.

If you turn the car off at this stage, it should revert back to normal without doing a relearn.

Meanwhile, I'll keep chipping away at the SSM commands.

for 2) - k-line logging... will reading tpms data work? (in Tribecas tpms is on k-line somehow)...

In the TCU ROM I am looking at (2008 Outback with both CAN and K-Line comms) the sequence I listed checks only the K-Line TX message buffer for activity. So, my guess it that this sequence is for older K-Line cars. Therefore, likely it won't work on a CAN TCU.

TPMS is a different module to the TCU, so quite possible for TPMS to use K-Line and the TCU to use CAN.

As another approach, I am planning on posting up a CAN TCU relearn trial soon...

Ok, to try a TCU relearn, use FastECU_TCU021 from the repo. Do everything the same as for a TCU read and you will now be asked to proceed with the TCU read, or do a TCU relearn.

This is definitely a trial, it most likely won't be the right sequence of commands, but it will report various values that we can use to figure out the right sequence.

After a couple of initial steps, it will enter a loop (terminates after 200 cycles). This loop is logging the status of the relearn. Hopefully you will see some numbers change. If they don't change after a while, try the next step in the SSMIII sequence and see if the numbers change. Wait until they stop changing and then try the next step etc. The SSMIII sequence is:
8. Car must be off the ground! At this step Engine is warm, running, stick in D
9-10. Release brake pedal (4WD Solenoid Learning occurs)
11-12. Fully press brake pedal
13-14. Select R
15. Select N
16-17. Turn off engine (keep ignition on)
18-19. Turn on engine

Then post up the log so we can figure out what needs to be changed...

Great, hopefully I can give this a shot this weekend