RomRaider

Hello, few years I was happily editing and reading/writing ROMs in my 2010 Forester Euro5 diesel.
Now I changed to 2016 Outback Euro6 diesel and I was about to read rom, but could not...
E5 diesel uses SH7059 with 1536k memory
E6 diesel uses SH72543R with 2048k memory
Of corse there isnt option for Euro6 diesel in EcuFlash, but I think E5 and E4 also were created by some members here (Jochen and/or dshultz if I remember)
I thought - ill just change SH7059 to SH72543R and try, and EcuFlash did show that my newly created object has 2048k memory. I thought - thats it, but no it wasn't.
I tried subaruhitachi flash method that already had SH72543R, but that didnt work..
I get CALID, CVN and VIN
starting programming session
unlocking ECU
Requesting Seed
interface close
and thats it.

BUT when I tried subarubrz flash method, i got:
starting programming session...
turning off DTCs...
turning off unnecessary communications...
unlocking ECU...
Requesting Seed...
Sending Key...
entering bootloader...
reading area 00008000-000080FF...
reading area 00008000-0013FEFF...
interface close

Since BRZ uses SH72531 memmodel it only reads 1280k, not needed 2048k.

Cant find any info how to read ROM from this ECU apart from using different software.
Can someone get me on the right track? ECU has Denso written on it, thats why subaruhitachi didn't work?

Have you tried FastECU? It seems to have a EURO 6 Diesel module ("Select Protocol" on right hand upper menu)

In released betas don't yet have working protocol for EURO6 diesels altought it's in the list. We need to look for test ECUs for it so we can start to work it out.

Looks like it have OBK, same as SH72531. Need to correct flash size only.

You have an idea where to do that? Because I have looked everywhere in the EcuFlash folders and I can't find where the memmodels are defined..

You can't do that with EcuFlash. Only custom code changes/module creation. For example on FastECU's base.

I can do a quick test version for you to test reading. I'll post download link here little later.

Here's the link:
https://drive.google.com/file/d/1ublgG9 ... drive_link

Download, extract and run. On main window click Select protocol and select sub_ecu_denso_sh72543_can_diesel. Then on main window, make sure OpenPort 2.0 is selected from upper right corner, start reading session by clicking green down arrow, switch ignition on and click ok.

HI. I got so excited, I could not wait to try. Today before work I tried to read the ECU, and it was successful l, but the file size was still 1.2mb. I didn't check it closer because I was in a hurry, but I think it was 1.2mb.
This evening I will be able to test again.

Ok, let me check code and fix it to get correct size.

Ok, I've updated the file, same link as before.

It is possible that it won't read last 0x100 bytes or so, so if it fails, you can send me the log file from folder C:\Users\<user>\AppData\Local\FastECU\<version>\syslogs

note: I'm not OP

I've been able to run the new version on my 2016 Outback Diesel. The ROM size comes out at 1280 kb.

I have checked the syslog and the lines below appear


Referring to /AppData/Local/FastECU/0.1.0-beta.5/kernels/ there is no .bin with that name.
Further down, we get

Final kernel read is

I've been reading the code to try and understand what is happening and line #814 in flash_ecu_subaru_denso_sh72531_can.cpp is this aligns with the reading being aligned to SH72531 and the final kernel address of 13FE00 (+ 0x100).

Note that I wouldn't know the first thing about how to compile this so I haven't mucked around with different lengths. Other 2016 diesel .bins posted here have final hex value at 1fffff (2064 kb)

Thanks for quick response. I tried new version, but it still was 1.2mb. I will e-mail you .bin and log files ASAP.

Update on this

With a lot of back and forth with MiikaS, reading and writing Subaru Euro6 ROM is now possible with FastECU software.
MiikaS will probably tell more, if he wants.

YES PLEASE! ,
I have also a Euro 6 Diesel thats got a bad tune from a "tuner" so now we cant use it due to all the safty is just straight turnd off...
he have already killd one engine....