ECU and TCU Programming, Cloning and Adaptation – OBD, BENCH, BOOT, BDM and JTAG

ECU and TCU Programming, Cloning and Adaptation

At Szulc Motorsport, we provide professional reading, writing, programming, cloning and recovery of engine control units ECU and transmission control units TCU. Depending on the control unit type, processor and security level, we use communication methods such as OBD, BENCH, BOOT, BDM and JTAG.

The communication method is selected individually for each control unit. Not every ECU has to be opened – in many cases, a full memory read can be performed through the diagnostic connector or directly through the control unit pins in BENCH mode.

ECU and TCU Reading and Writing via OBD

We support control units used in many different types of vehicles and machines, including:

• passenger cars and light commercial vehicles,
• trucks,
• motorcycles,
• tractors and agricultural machinery,
• construction machinery,
• boats and other combustion-powered marine applications,
• jet skis and snowmobiles.

If the control unit supports safe communication through OBD, reading or writing can be carried out without removing the module from the vehicle.

ECU Programming in BENCH Mode

The BENCH method allows direct communication with the control unit through its connector without soldering directly to the circuit board. Depending on the ECU, it may be possible to read and write FLASH, EEPROM and processor memory.

Examples of control unit families supported in BENCH mode include:

• Bosch EDC7,
• Bosch EDC16,
• Bosch EDC17,
• Bosch ME9 / MED9,
• Bosch MED17 / ME17,
• Bosch MD1,
• Bosch MG1,
• Siemens / Continental PCR2.1.

For selected PCR2.1 control units, the required unlocking procedure can also be performed through the pinout without opening the ECU.

Modern MD1 and MG1 Processors

We also support newer-generation control units based on modern processor platforms, including:

• Freescale SPC5777,
• Infineon AURIX TC29x,
• STMicroelectronics SPC58.

Depending on the exact control unit and software version, a full memory read, writing, data backup or recovery procedure may be available.

Full ECU Reading – FLASH, EEPROM and Processor Data

We work with control units from many manufacturers, including:

• Bosch,
• Continental / Siemens,
• Delco,
• Denso,
• Magneti Marelli,
• Temic,
• and many other systems used in passenger vehicles, commercial vehicles and machinery.

BOOT, BDM and JTAG – Direct Access to Control Unit Memory

For control units where OBD or BENCH communication does not provide the required access, we use service modes such as BOOT, BDM and JTAG. These methods allow direct communication with the processor and memory of the control unit.

These methods are used, among other things, for:

• creating a full ECU backup,
• reading FLASH and EEPROM memory,
• cloning control units,
• recovering an ECU after an unsuccessful programming operation,
• transferring data to a replacement control unit,
• diagnosing damaged control units.

BDM and JTAG

• BDM MPC55x,
• BDM MPC56x,
• BDM MC32 / ZC32,
• BDM HC12 / S12x,
• JTAG Nexus MPC / SPC56xx,
• JTAG Nexus MPC55xx,
• JTAG Renesas SH7055, SH7058, SH7059, SH7251, SH72543, SH72544,
• JTAG NEC 76F00xx.

BOOT Mode – Tricore

• TC1724, TC1728, TC1738,
• TC1762, TC1766, TC1767,
• TC1782,
• TC1791, TC1792, TC1793, TC1796, TC1797.

BOOT Mode – Renesas

• SH7052, SH7054, SH7055,
• SH7058, SH7059,
• SH7251, SH72543, SH72544.

BOOT Mode – Mitsubishi

• MH7202, MH7203,
• MH8102F, MH8105F, MH8106F,
• MH8202, MH8206F,
• MH8301F, MH8304F, MH8405F.

BOOT BAM – Motorola / SPC

• SPC5674,
• SPC5777.

Selected control units based on Fujitsu, Hitachi, ST10 and C167 processors are also supported. The available operation depends on the specific control unit, hardware version and security level.

TCU Programming and Cloning

In addition to engine control units, we also perform reading, writing, programming and cloning of automatic transmission control units TCU.

Depending on the transmission and control unit type, available operations may include a full MICRO + EEPROM read, data writing, control unit backup and transfer of data to another compatible module.

We support, among others:

• DSG DQ200, DQ250, DQ500,
• S tronic VL501 and DL382,
• selected ZF 6HP, 8HP and 9HP transmission control units,
• Mercedes 5G-Tronic and 7G-Tronic,
• selected GM, PSA and other transmission systems.

Cloning and Recovery of Damaged Control Units

If an ECU or TCU is damaged, it may be possible – depending on the condition of the module – to create a data backup and transfer the relevant information to a compatible replacement control unit. In many cases, this allows important configuration data to be preserved and can reduce the amount of additional work required after replacement.

Before carrying out any operation, we verify the hardware and software numbers of the control unit, processor type, memory contents and whether the required read or write can be performed safely.

Cannot Find Your Control Unit on the List?

The list of supported control units and protocols is continuously expanding, so not every available solution is shown on the website. If your ECU or TCU is not listed, contact us and provide the full control unit number, manufacturer and vehicle or machine details.

Based on this information, we can check the available options for reading, writing, cloning or recovering the module.

Szulc Motorsport – Diagnostics Instead of Guesswork.