RomRaider Logo

RomRaider

Open Source ECU Tools
 FAQ •  Register •  Login 

RomRaider

Documentation

Community

Developers

It is currently Thu Dec 25, 2025 3:14 pm

All times are UTC - 5 hours [ DST ]





Post new topic Reply to topic  [ 11 posts ] 
Author Message
 Post subject: ScoobySpy!
PostPosted: Thu Jul 06, 2006 8:52 am 
Offline
Newbie

Joined: Sun Feb 12, 2006 3:10 am
Posts: 90
i am putting together an app that will allow you to read the memory from any subaru ecu compliant with SSP.
A virtual ecu was created in order to test the protocol communication, you can see that in the screenshot. Basically you send SSP commands to it and responds as a subaru ecu would do :wink:
I am going to test this on the car and if all goes well i will put it out. Next step is to add the write process, all the routines are complete and tested in the virtual ecu.


You do not have the required permissions to view the files attached to this post.


Top
 Profile  
 
 Post subject:
PostPosted: Thu Jul 06, 2006 11:47 am 
Offline
Administrator
User avatar

Joined: Fri Jan 13, 2006 12:33 pm
Posts: 2079
Location: Palo, IA
Cool! Any way you could write something that would emulate the ECU actually operating, with real values for things like RPM and such? Or does this already do that?

_________________
- Jared


Top
 Profile  
 
 Post subject:
PostPosted: Thu Jul 06, 2006 2:06 pm 
Offline
Experienced

Joined: Fri Mar 24, 2006 3:14 pm
Posts: 768
Excellent! What language and version are you writing this in?


Top
 Profile  
 
 Post subject:
PostPosted: Fri Jul 07, 2006 2:04 am 
Offline
Newbie

Joined: Sun Feb 12, 2006 3:10 am
Posts: 90
It is emulating the protocol, that is you query a memory address via read or blockread, it responds with random bytes. If you interpret these with the appropriate conversion expressions you get "realistic" values.

I did the test on my car, first i tried to read the WHOLE ecu. Unfortunately for any address below RAM, it returns 0xFF. I expected that anyway :)
Reading the whole RAM (0x20000-0x27FFF), it only took something like 2 mins.
Then tried to read the flash (0x28000-0x30000) and guess what? It reads that as well! Use your imagination what that would mean :wink:

it is coded in object pascal/delphi7


Top
 Profile  
 
 Post subject:
PostPosted: Fri Jul 07, 2006 2:10 am 
Offline
Experienced

Joined: Fri Mar 24, 2006 3:14 pm
Posts: 768
tinywrex wrote:
It is emulating the protocol, that is you query a memory address via read or blockread, it responds with random bytes. If you interpret these with the appropriate conversion expressions you get "realistic" values.

I did the test on my car, first i tried to read the WHOLE ecu. Unfortunately for any address below RAM, it returns 0xFF. I expected that anyway :)
Reading the whole RAM (0x20000-0x27FFF), it only took something like 2 mins.
Then tried to read the flash (0x28000-0x30000) and guess what? It reads that as well! Use your imagination what that would mean :wink:

it is coded in object pascal/delphi7


Excellent, let me know when you want to do some testing and I'll give it a go! So currently you are emulating with a "full" dump?


Top
 Profile  
 
 Post subject:
PostPosted: Fri Jul 07, 2006 5:16 am 
Offline
Newbie

Joined: Sun Feb 12, 2006 3:10 am
Posts: 90
exactly


Top
 Profile  
 
 Post subject:
PostPosted: Sun Nov 26, 2006 4:26 am 
Offline
Newbie
User avatar

Joined: Wed Aug 23, 2006 7:22 am
Posts: 71
Location: Sydney, Australia
How development going for this champ?

Looks damn interesting and very useful!

I'd love to try it out, seems I can't talk to parts of my ECU :wink: ..Feel free to PM if you release a beta version

_________________
Post added by using recycled electrons


Top
 Profile  
 
 Post subject:
PostPosted: Fri Jul 06, 2007 9:55 am 
Offline
Experienced

Joined: Wed Jul 26, 2006 3:19 pm
Posts: 650
Location: Connecticut, USA
One year anniversary bump. Is ScoobySpy able to read the ROM from a 32-bit ECU?


Top
 Profile  
 
 Post subject:
PostPosted: Fri Jul 06, 2007 4:55 pm 
Offline
RomRaider Developer
User avatar

Joined: Sun Jul 16, 2006 12:09 am
Posts: 644
Location: Brisbane, Australia
looks very similar to the ramtune test app which is in the test releases.

_________________
Paul.
------------------------------------
MY04 Forester XT (Aus. spec)


Top
 Profile  
 
 Post subject:
PostPosted: Fri Jul 06, 2007 5:25 pm 
Offline
RomRaider Donator
User avatar

Joined: Wed Mar 29, 2006 10:38 pm
Posts: 5336
I've tested out Kascade's test app and it works perfectly - allows you to read or write to ram.


Top
 Profile  
 
 Post subject:
PostPosted: Sat Jul 07, 2007 1:26 pm 
Offline
RomRaider Developer

Joined: Tue Jul 11, 2006 9:25 pm
Posts: 1025
kascade wrote:
looks very similar to the ramtune test app which is in the test releases.


^^

Check this out :)


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 11 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
Style based on FI Subsilver by phpBBservice.nl