Page 2 of 2

Re: TCM Support

PostPosted: Wed Apr 04, 2012 5:39 am
by g00fy
Sasha_A80 wrote:What is there inside ?
Renesas SH7052/SH7055 processor?


SH7055

Re: TCM Support

PostPosted: Wed Apr 04, 2012 7:19 am
by Sasha_A80
SH7055 is readable thru AUD interface.

Re: TCM Support

PostPosted: Fri Jun 08, 2012 10:40 am
by Jochen_145
Sasha_A80 wrote:SH7055 is readable thru AUD interface.


And wirtable via SHbootmode, so "only" need to finde the importend maps and values..

Now we have a TCM rom file there, with what i can only assume is the Keyword to Decrypt the file, now what?


Subaru Diesel Crew guy extracted most know diesel dumps for PAK files, maybe you can reactive him ?!

The only problem:
PAK-Files are without bootloader (first 16kB missing) so for a refresh via SHBootMode you will need a readout via AUD, I think

Re: TCM Support

PostPosted: Fri Jun 08, 2012 8:48 pm
by Sasha_A80
Still waiting the 4EAT TCM ecu in order to be cracked on my bench.
It appears there is no much interest in the community.

Re: TCM Support

PostPosted: Thu Jul 12, 2012 10:01 pm
by west_minist
People give up to easy.

I would love to program my own, but dont know how to access it.

Re: TCM Support

PostPosted: Thu Jul 12, 2012 10:20 pm
by Sasha_A80
west_minist wrote:but dont know how to access it.

SH7055\SH7058 maybe read thru AUD interface.
Just donate a spare unit to be cracked.
Uploaded ROM image will be provided to the community.
SHbootmode is available for reflash and probably someone will disclose OBD reflash solution based on primary\secondary booloader analysis.

Re: TCM Support

PostPosted: Thu Jul 12, 2012 10:23 pm
by west_minist
aud interf?

Here in Barbados, everything cost a penny and a leg.