RomRaider

Hidden away in the RomRaider Logger is a module that will read and write (program) a CAN enable ECU ROM memory image in binary format.
This only works with a J2534 interface cable (such as the Tactrix openport 2.0).

These commands are best issued from a command prompt window.

To check comms with the ECU:
- Open a command prompt window
- Change to the directory where RomRaider is installed (by default: C:\Program Files (x86)\RomRaider\)
- Issue this command (assumes Java is on the path):
where:
<J2534_library> is the library name for your J2534 cable, for example: op20pt32 or MONGI432 or /usr/local/lib/j2534.so
It will report back some ECU info and try a few different UDS modes to see what replies and what does not.

To Read the ECU:
- Open a command prompt window
- Change to the directory where RomRaider is installed (by default: C:\Program Files (x86)\RomRaider\)
- Issue this command (assumes Java is on the path):
where:
<J2534_library> is the library name for your J2534 cable, for example: op20pt32 or MONGI432 or /usr/local/lib/j2534.so
<start_address> is the memory address (in hex or decimal) to start reading from, use 0 to start at the beginning
<length> is the length (in hex or decimal) of memory to read 524288 for a 512kB ROM, 1048576 for a 1024kB ROM, etc.
If you use hex values they must start with 0x
When the read is complete a file with the name of the <ecuid>_read.bin will be saved to your Windows %HOME% directory

To Write to the ECU:
Make sure the car's battery is fully charged or you have a battery charger connected and running, you've been warned!
There is a Test mode that tries all the commands except the erase and write portions, I suggest you use it.
To Test:where:
<path/filename> is the full path to the binary file to test write, use quotes around it if it has spaces in the path or name.

To write, after a successful test:
where:
<path/filename> is the full path to the binary file to test write, use quotes around it if it has spaces in the path or name.

A sample batch file is below, which you can save into your RomRaider installation directory and then edit as you desire. The default is set to read a 1MB ROM from the ECU.

Wow this is huge! If I come across a CAN only vehicle in the future, I'll be very eager to give this a try. Thanks!

Do you know if it works on the really new SH72533 ECUs?

I've only tested on my bench ECU, SH7058. It does support memory sizes up to 2MB.

This is amazing to see! Great job! I've been bummed about the fact that we couldn't touch any major Nissan/Infiniti after ~2006, so it's awesome to see that the barrier has been lifted! One thing I'd like to add, could a future release support customizable CAN ID's? So instead of only being able to dump/flash the ECU through CAN ID 0x7E0, we'd be able to at least ATTEMPT to dump/flash any of the available modules. While not all will support it, it would be nice to have the ability to test each one out.

Just in case you don't have a full list already, the screenshot provided is from Nissan Datascan 3, showing the CAN ID's and tester ID's for just about all possible control modules.

Tested it with 22611AG572 on a bench, from JDM Forester Cross Sport, SH7055. Can be read and written with other tool via CAN, using Denso CAN bootloader.
Can't get any answer with RomRaider, read and write commands ((

Care to share the log?

No problem, will do it tomorrow. Almost night here.
Any verbose options for log?

No, just what is displayed on the command line output.

Logger connects only via K-Line, but this ecu my be flashed only via CAN. Early Denso modification.
May be that's a problem, no id's via CAN.

With same connections:

If you get no or limited output then CAN read and write won't work. This "feature" is for CAN only ECUs, ones that do not respond to k-line.
I see your output, it failed to read even the basic SID09 routine.

Ok, thank you for your time.

Is it possible to read the whole RAM using CAN?

Yes, if the ECU supports SID 23.

Please help me what to enter to read ram completely as a rom file.

Enter the RAM start address and size.