Thanks. That was most helpful.
I have an 05 Legacy GT. I'd like to dump the ECU's code blocks and disassemble it. Any tips on getting a dump out of it? I feel like I'm in a chicken & egg situation here.
Going through your code, you use the kernel to dump the CPU area (0x0 -> 0x1FFFF, 0x28000 -> 0x2FFFF) and TPU area (0x60000 -> 0x60FFF) using the kernel you uploaded. Is there no other way to get this code without using the kernel hack? My problem is that the models you have (wrx2002 and wrx2004) don't include my LGT2005, so I'm feeling antsy to try.
I'll give the other ROM files here a look. I've never done 68HC16 before, so at least it won't go to waste. You wouldn't happen to have a partially-commented disassembly of one of the ROMs, would you?
--
Richi