Page 1 of 1

JDM 2003 Forester AG572-1355 ROM upload method

PostPosted: Thu Jan 07, 2010 1:21 am
by Sasha_A80
This ecu ROM ( AG572-1355 2A0444605 ) is quite different from others.

It looks like this is the first CAN Denso ecu with SH7055. Ecu pinout does not look like anything USDM, EDM with the same plugs. Pins traced and verified thru k-line SSM.

- extended parameter readings is not possible. Nothing but standard SSM parameters can be read. Any other locations returns 0xFF.
- MemoryWrite (byte) command permits to write 0x60 (Ecu Reset), 0x6F (Ignition Correction), 0x70 (Idle RPM Correction), 0x71 (Idle RPM Correction AirConditioner) and nothing else.
- MemoryWrite (block) is not working.

CANbus exists but is not connected to OBD plug.
Appropriated connection is made. Is not helpful. Tactrix can't init this ecu and get responce thru CANbus.

TestMode and ReadMemory connectors found, SSM2 thru k-line sees them working. FlashConnector found and traced to ecu.

Any combinations of connectors closed\open and ecuFlash methods were tested. Ecu still does not agree to read or write directly to RAM.

That mean that kernel could not be downloaded and kernel download could not be verified. Thus known procedures are not able upload the ROM.

It looks like there is another init sequence (k-line or wire based) to make this particular ecu to except RAM reading\writing\flashing.

Any ideas?

Or I finally have to try ROM upload thru AUD SH7055 diagnostic connector?

Re: JDM 2003 Forester AG572-1355 ROM upload method

PostPosted: Thu Jan 07, 2010 2:48 am
by Sasha_A80
It is my fault - AG572-1355 (2A 04 44 63 05)

A8AK210A DENSO2002 DBW JDM Forrester Cross Sport method

PostPosted: Sun Jan 10, 2010 12:53 am
by Sasha_A80
Upper memory with calibrations has been extracted from this ECU

ECU program code is still not available.