utc_pyro

I wish I'd seen this a week ago before I put my new mirriors in . The stock adjustment range worked for me, but the look a bit "off". Mainly the passenger side is too recessed and the angle is odd on the driver side. I presume I can swap over the adjuster motors from my stock mirrors? Or is it some sort of spacer bracket I can swap without changing the wiring again?

Kind of, the quad bracket is still in progress (thanks again for the help there!). I needed to verify the mini h1 mounting profile and bracket hole fit so making this was a simple way of solving both of those. Next is transferring these to the profile you sent me and playing with projector offsets.

http://i.imgur.com/barf8XH.jpg Updated the projector bracket, this version is good enough to actually use. Thingverse Link

Looking at that guide, it looks like the manifold seals may be causing some of the gunk around the throttle body and turbo inlet. Going to have it smoke tested once I find a shop with a machine. Walked over the the one next door and theirs was out for repair. May change the turbo inlet while I'm in there if they find any of the seals leaking.

I actually built one a few years back, but at the time couldn't figure out how to cap the PCV system lines to keep from presurizing the block. I tried it at low pressure and it never held anything, but didn't hear a leak ether. Pulled the service manual and you're right, that dosnt look too bad at all! I'll order one and replace it when I put in the new TB hose. No I haven't replaced those gaskets, are they a common failure point even if you've never taken the manifold off? Maybe I just need to find a shop with a smoke tester at this point

Car is ideling at +8% fueling and not hitting target boost so I was trying to trace leaks and ran into some odd issues. First I couldn’t get the carb cleaner trick to work. Even spraying carb cleaner straight into the intake the car didn’t seem to respond. But I was able to use oil blowby residue to find some boost leaks. Throttle body to intercooler hose has an obvious leak, lots of oil spray in that area. There was also a lot of oil spray on the BACK of the throttle body though. How common is it for that throttle to manifold gasket to fail? Looks like a pain to get it so don’t want to remove it unnecessary. There was also a lot of oil spray residue around the turbo side of the turbo inlet tube. That shouldn’t ever be pressurized and I couldn’t find any visible holes in the pipe. What would cause oil spray in that area?

Looks like they still only offer the 6.0 bracket.

It's not a pdf , you hace to change the extension to .stl Just made thinkverse account so I have to wait 24hr before the file is public there apparently

I cad'ed up a bracket for retrofitting our cars with the new Mini H1 7.0 projectors. TRS doesn't sell one yet, and a lot of people are having success with 3D printed ones over on HID Planet. Use 4mm/#8 screws to mount the projectors using this bracket. You might want to also print with a 100% infill for added strength. Change the attached file from a PDF to .stl http://www.thingiverse.com/thing:1471991/zip Legacy_MiniH1_7_V0_change_to_stl.pdf

http://www.ebay.com/itm/JDM-Authentic-03-09-Legacy-GT-BP5-Wagon-Mclntosh-Rear-Speaker-Sub-Woofer-Covers-/391417357999?hash=item5b224ae6af:g:rRQAAOSwG-1WzpsF&vxp=mtr Last week there were a few US ones on there as well Look at this guys FS thread and buy his Wicked CAS box. I have one, they are a LOT better than the OEM setup.

There are a few on ebay right now. I'd get a wicked CAS box if you can, there is a guy selling one in the classifieds right now.

franks_ster, that's good to hear! I haven't taken the valve body out of the bag to see what shape it's in, but it sounds like they just didn't want to mess with it. Did you replace the tranny filter? They didn't charge me for one, so I presume they didn't. Apparently one of the speed sensors got destroyed in mine as well, they had to replace one of them when they put the new tranny in.

So, next question on a center diff failure: How does one clean shredded diff bits out the valve body? Dealership found a fairly cheap used transmission, but refused to swap the valve body due to the amount of metal shavings in the pan. I foolishly though it was a CV joint (just had the boots replaced a few weeks before) and drove the thing over there. Planning on having the VB swapped while the bushings are put in next month, so need to prep the thing.

So the center diff in my 5EAT took a dump, and one have suggestion on the most economic way to replace this?

Any update on if they are checking the CVN yet? Want to keep my car legal (ish) incase I decide to move out to Cali, and this injector swap plan would not do well on a stock tune.

Any one try this with our TCU's yet? It supports the same sort of controller we have: http://www.romraider.com/forum/viewtopic.php?f=32&t=8513

Gave that a shot a few months ago with the program you provided, and it didn't turn up anything useful. That said my laptop/cable interface was also picking up gibberish so who knows. If I'm not mistaken, there was talk on the old M32R ECU's about the entire flash memory space being accessible, but at some offset. They were able to dump entire roms that way, but no progress past that. On the data in the block, the first 96 bytes are a 12 byte long pattern that keeps repeating (only differences being the last three bits of the second byte). Edit: See here about memory offset and M32R Subaru ECU's: http://www.subiesmart.com/forum/index.php/topic,28.0.html

Looking at the speck sheet, that address maps to "CS2 Area". My sleep depribed mind cant figure out what it's used for, but something having to do with a external data bus (CS= Chip/Channel Select maybe?). The ECU's likes to remap things (what you request via SSMIII isn't the REAL memory address), so it's hard to tell what this might actually be. But they did pull the rom out of some old M32R ECU's using this method. edit: Can you provide the formatted hex (as in just the date, no ssmIII commands)? I tried to decompile it by hand just to realize there was a tone of SSMIII garbage in there as well.

Personally I didn't speak with anyone directly about having them take over from the preliminary work. Those negotiations might be more up your professional ally ClimberD . If we can get Coby on the project, we can get the raw ROM file. We get that, then the community can figure out the definitions. Cobb or another tuning house, eh, might be more of an issue.

Just to add a few things based on the last few pages: The 05-06 TCU is based on the M32R, the same old-ass ECU used in the late 90's-early 02's Impreza RS, along with many other Subaru’s. It's rather old, so getting test equipment and documentation for it is somewhere between extremely difficult/expensive to impossible. Coby has the tools sitting around to do it, but no motivation. A few of the early Evo hackers also have the equipment, but also no motivation to work on our transmissions. The 07-09 TCU is based on a modern processor, with lots of documentation and devkits, and is flashable in the EXACT SAME method as the ECU, but with a different address. The Germans working on the diesel legacy/outback actually managed to get into it. Both are based on a Hatachi platform from what I can tell. Logic is probably similar as well, might be even off the same code base, but the CPU core and flashing method are different. As stated before, the '05 Test ECU plus seed cash can be sent off to Cobb, Coby, or another known tuning house if you guys get them interested. Without a devkit or affordable flashing tools I'm over my head on this. Also I have the files for doing the flash with SSMIII, but they are encripted/padded. the SSMIII software also willnot run without the hardware attached, so I cant intercept it. If you think you can hack the file, I can send it to you.

Good news: The test TCU is back on my desk. Bad news: I'm so busy that it'll be awhile before I make much progress . I don't have any experience with this architecture or the buses used to talk to the CPU, so I'm having to figure that out as I go. So again, if you guys can find someone with previous experience with this CPU (it's used on some old evo's), I'll pass the test TCU and some cash to them. There are some rumors that EcuTECK (sp?) has stopped flashing the old ECU's based on this platform because of common failures. An intercept module (Think piggyback ECU) to boost the shift pressure might be the way to go. You wont be able to change the shift points for say, but you can modify how much "pressure" is commanded and the ramp. With ClimberD's valve body work, it'd probably work really well. To the 07+ guys: You're is easy, it flashes just like the ECU. Coby could probably modify ECU flash to read the rom (and start the hacking) with a little bribe.

As long as they are transmsions are mechanically the same (so the TCU tuning works) with the pinout for the plugs are the same, the other computers SHOULDN'T give a crap about what TCU you have plugged in. CAN bus (what links the ABS-ECU-TCU-Airbag-BIU) does not ave specific addresses to devices for the data it sends across. Just data types (I'd have to go look for the exact terminology). So as long as something on the bus is responding to those data types, and reporting back the correct types, you're shouldn't get a CEL. I think subarutech77 swapped out the TCU on one of his cars to one with sport-shift inputs.

It's all CAN bus based (no specific addresses/ID's for the TCU), so it should just be a drop in and go deal. It probably has a sportier and higher line pressure than ours. Any one have a lead on one? Also anyone have the pinout of the WRX STI 5EAT TCU? It might be even better.

Eh, we got a problem.... No AUD bus on the M32R (2005-2006), it's an NDB bus that may be disabled unless the program starts it up. http://www.activeboard.com/forum.spark?aBID=99460&p=3&topicID=22307899 That said, it might be possible to use the RTD bus to turn on the NDB bus. I;;m looking right now if the pins to do this are wired out..... subarutech77, That CPU is the one I think the newer cars use, and if we can hack it we might be able to get the "info" needed to get into the older ones via k-line. What year is it off? The 2007-2009 guys: Go hit up the Germans, they found a way in via CAN . Coby should be able to implement this in ECU flash no problem, it's almost identical to how you get into the ECU. I don't have a way to test it so I cant support . Update: The four pins on the right of the JTAG header are the RTD/NDB/serial flashing pins. Apparently the same block can be used for ether function. Update2: RTD cannon write to the control register for NDB directly. One could inject code via the RTD that goes something like this: <injected code start> Set <output pin> = 1 ; lets us know code has run, switch to NDB mode Set intruptcontroller = off Set H'E000004 = B'00000010 Set H'E000004 = B'00000000 Set H'E000004 = B'00000001 NOP for 20 cycles Set H'E000000 = B'00000010 Set H'E000000 = B'00000000 NOP for 20 cycles Set H'E000000 = B'00000001 End ; kills CPU execution, no need for it to run while we dump the flash <end injected code> Then just issue the commands via the NBD interface (what the RTD just became) to read out the flash. To inject the code, one would need to get the TCU into a "stable" state where it's not changing the ram out quickly (might freak out and do this on a bench), and then dump the contents of RAM. You'll need to decompile this and try to find where the CPU will execute code on a regular interval. Then just write in what you want and it's party time. You'd probably want to write in a "jump" command though, as if it hit this code before you got the entire thing it it would crash. Though, this is all MUCH easier said than done.....

EPIC POST! I have some PBASIC experience if you need help. If I can find the time this week I'll see if I can get at that bus with the bench/test tcu. I have a TI dev board I've been itching to use.... You may have done it That might be a good idea. Subaru is small, so they tend to modify off the shelf stuff. The ECU is a good example.