Help to a cousin.. :)

Announcements, dicussion about any topic that would have broad interest to the forum members

Moderator: Freon

Help to a cousin.. :)

Postby npole » Mon May 10, 2010 1:51 am

Well, not a near cousing... but we're there.
I own a Mazda RX8. Actually it's very hard to find information on this car ECU... mainly because it's not very popular, and due to the fact that who worked on it made it commercial and so it's keeping the "secrets".
Actually this car ECU is refleshable via OBDII, it uses a Renesas CPU, and the ECU should be very similar to a Mazda6 MPS unit.

My willing is to start to work on it, and i would like to procede by steps... the first one would be to identify the correct procedure to download the firmware, prior to start to think about the addresses and a way to hack into it.

I've found that probably the procedure would be very similar to the one applied to the Subaru's. I would be very glad to anyone that may point me out on where to start to look to (at least), so i may have a starting point.

This is how the stock ECU looks like:

Image

And these are the identifiable chipsets:

D151815-8550 / SC 515611MFC185

64F7055F40

D151821-1280 (RAM?)

SPF00001 / SK3206 (Surface-mount Power Transistor Array?)

SE585

3E19 SE555 (timer?)

MC 331 (CPU?)

Any help? Thanks!
npole
 
Posts: 3
Joined: Mon May 10, 2010 1:39 am

Re: Help to a cousin.. :)

Postby npole » Tue May 11, 2010 11:02 am

This is the best i've got so far. :\

[00:08:49.661] 140 ROM metadata models read.
[00:08:49.661] checksum module "subarudbw" loaded.
[00:08:49.661] flashing tool "wrx02" loaded.
[00:08:49.661] flashing tool "wrx04" loaded.
[00:08:49.661] flashing tool "sti04" loaded.
[00:08:49.661] flashing tool "sti05" loaded.
[00:08:49.661] flashing tool "mitsukernel" loaded.
[00:08:49.661] flashing tool "mitsukernelocp" loaded.
[00:08:49.661] flashing tool "mitsubootloader" loaded.
[00:10:52.658] ssm2_init
[00:10:52.898] ssm2_init
[00:10:52.908] ssm2_init
[00:10:52.928] ssm2_init
[00:10:52.948] ssm2_init
[00:10:52.958] ssm2_init
[00:10:52.978] ssm2_init
[00:10:52.998] ssm2_init
[00:10:53.008] ssm2_init
[00:10:53.029] ssm2_init
[00:10:53.219] kernel get version
[00:10:53.539] validating denso kernel ram area addr: 020000 len: 0008

(^^^^ the above has been copied from another post.. but it's identical to mine)

Now i'm unsure if it's reading anything but unable to verify it because of the def file, or if it's not working at all.
I'm using a std obdII-CANbus cable (OBDLinkII to be exact) and Ecuflash 1.28 (the only one that let me, apparently, using that cable... the most recent versions, starting from 1.29a won't open the interface, giving to me another error).
Any idea?
npole
 
Posts: 3
Joined: Mon May 10, 2010 1:39 am

Re: Help to a cousin.. :)

Postby radsdau » Tue May 11, 2010 3:41 pm

I would doubt a Mazda ECU understands anything intended for a Subaru ECU.
'SSM' = 'Subaru Select Monitor'
I don't think you're going to get anywhere using ECUFlash.
radsdau
 
Posts: 674
Joined: Wed Feb 08, 2006 6:56 pm

Re: Help to a cousin.. :)

Postby npole » Wed May 12, 2010 12:08 am

The OS is indeed different, so the firmware, but the ECU should be pretty similar (a Denso with a Renesas SHxxxx chipset), so possibly (that's what i'm trying to figure out) the communication protocol to download the whole firmware would be the same. Naturally i will end (if possible) with a bin file, and from there i need to figure out wich address is what (what you call "definition files" within ECUflash), so from that point ECUflash or any tool intended to work with Subaru/Mitsubishi won't help me. But what i need is just a "starting point", so i can start to work on WinOLS and find those addresses step by step (it may requires time... but i need to start somewhere) and eventually create my own definition file.
npole
 
Posts: 3
Joined: Mon May 10, 2010 1:39 am


Return to General Discussion

Who is online

Users browsing this forum: No registered users and 6 guests