nightfire37

More research and I believe I have found the model of the transmission. Its a jatco RE5R05A which has been used on much more then just Subaru. Apparently its been used on Nissan v6 and v8 cars and trucks. So if we look at some of the research the Nissan guys have done then we might get somewhere close.

Think I got my M32176F4V into bootmode correctly now.

 

Thought it would be uart tx/rx to sio1 as in the renesas manual but I dont get any response.

Tried with the sync bytes and commands like ufla32 program.

Also tried sio3 and sio0/k-line without any luck.

 

Good work dude. Probably its own propitiatory code designed around the M32R chip

Roadie, just curious as to what you found on the rom raider forums. What is it?

I think the ecuid is at 802A to 802E

 

0000802A .byte 0x91

0000802B .byte 0xFE

0000802C .byte 0x20

0000802D .byte 0x71

0000802E .byte 0

 

I dont think that worked but probably doing it wrong. see if you can use other tuners and get some data off it. Hopefully shooting for a some graph or editable fields

One thing is that if we can identify where the unique address is for the rom we could use ecuflash and view some stuff in there

I used onlinedissassembler and got it "i think". I have them zipped in txt for anyone to download and read. Maybe I am missing something but I know nothing about programming unfortunately. Just trying to help where I can.

 

https://drive.google.com/open?id=0B9qp4YbNuuXzUzZJODR4dE9iNW8

roadie, you have ubuntu on any of your computers? for the life of me i cannot try to disassemble the .bins into plain text so we can read them.

 

ive looked at this website which is an evo forum and they have already disassembled the code.

 

take a look for yourself and see

 

https://www.evolutionm.net/forums/ecuflash/564101-rom-disassembly-raw-text-file.html

Not untill you fire up IDA or a hex editor and see if you can find anything. There are also online disassembaly programs that support this CPU if you don't want to deal with the cost or hassle of setting up IDA.

 

which cpu is it so I know what im looking for. Im going toi see if I can find some hex editor that supports our cpu. so far I am able to open the files but from there i dont know since I know nothing when it comes to programing

Sick. Now im assuming we can edit anything we want on it now?

Found more info on our transmission. Not sure if its relevant but has tons of juicy info

 

https://www.google.com/url?sa=t&source=web&rct=j&url=https://subarufanclub.cz/wiki/_media/techdata/5at_auto_trans.pdf&ved=0ahUKEwjNlcTgy6TUAhVMMyYKHa-dCzA4HhAWCC4wAg&usg=AFQjCNFfVWHbAFEQN8OTXHARCiFyW7J3dw&sig2=T7Czvzm1v30DO20muaCoRg

roadie, i think i had a little ah ha moment. For the ID, it might be 410 because the hex values match to the link i shared

After some digging on the diseal stuff 0x410 is related to some transmission stuff

 

https://subdiesel.wordpress.com/ecu-analysis/can-messages/#x410

No, havent had any time for canbus logging lately. I will probably log all shiftmessages this weekend.

 

Only thing I have done is changing the "Calculated torque" table. I feel difference at part throttle but hard to say if it is a difference at WOT.

 

 

Anyone getting anywhere with the dissassembly?

 

Try what hadvw and pyro suggested. Im curious what we can pull from that

Any updates roadie? Just curious since how it has been quiet for the last few days

This is really great info. Keep this up and we might have everything we need.

Cool - looks like a CAN-bus sniffer. But it also seems to have an "active" mode? Does that mean you could SEND CAN-bus commands?

 

If so, rig up a button to send a shift command, see how fast the TCU responds..

 

I have a bluetooth obd reader with capability of sniffing the can system. Will try with one of my family's newer vehicles first to see then i will try on mine. Do you think the car needs to run to see any data or no? its right now out of commission where I cannot turn or drive the vehicle cause i need to rebuild the engine:spin:

 

Edit: I tried with what I have and nothing is working. I have this exact OBD Reader I have with a Raspberry Pi 3 and my Windows 10 laptop. Anyone know of any free software to read any CAN bus codes?

Not sure if you were understanding what I mean but opened the BIU and taken any pictures related to the board and looked up the chips. I might want to open mine and look at the board to see what chips it is if it helps

Just a curiosity, has anyone opened up a BIU to see how the circuity is? Since now you guys have mentioned that the delay might be in either the TCU or the BIU or both, im curious if the delay is in the BIU

 

Edit: Is the BIU part of the alarm or is it the alarm system?

You want the calculated torque to roughly match what the motor is actually putting out, so they'd need to model that. The units are suspiciously close to Newton-Meters. The three tuners I listed above (especially the one posting in this thread) have already developed "maps" for this, but your tuner could also make one.

 

If you use a Accessport, you're SOL.

 

 

 

Yes. Especially if you've changed the injectors, and if you're stage 3 I presume you have.

 

 

 

No, that has to do with other issues that haven't been identified yet. A guy over on Romraider was already looking for that in the JDM TCU code, and couldn't find any sort of delay counter. The shift buttons are wired up to BIU so the delay may actually be in there.

 

man that sucks that a popular tuning company doesnt support that. Well I hope Rev Works support open source tuning then. The tuner there is known for opening a very good tuna with no crust

I looked around on the web and found that a company called Xtreme Racing Tuning (XRT) does tune the 5eat. I wonder what his method is but ive read that the outback guys like his tunes and he does a lot of years going from 05+ and 3.6r 5eats

 

http://xtremeracingtuning.com/forum/viewtopic.php?f=122&t=509

Picked up an 05 auto wagon in Feb. If anyone here is from florida should know about Rev Works. To bring back some spark in the lines of getting the TCU reflashed, I can have them look into it when I get my car send there. Should be able to get it sent there within the end of the year based on how my $$$$ is

Im gonna chime in with my winged leggyhttp://uploads.tapatalk-cdn.com/20160428/a38f685261d5515def9a0af58cd43890.jpghttp://uploads.tapatalk-cdn.com/20160428/413da19b3b2c238b467eb95efc8ff06f.jpg

I want to but I just can't commit. I have tinted taillightsoon previous cars and regretted it down the road. Lol

 

Sent from my VS987 using Tapatalk

Well with mine i havent tinted any lights. I only painted over the useless parts and left the lights how it is

Man it seems like i am the only one that did something with my rear lightshttp://uploads.tapatalk-cdn.com/20160418/5c775fe9db87a1471968cba50092370d.jpg

What headlights are these!?

I want that grill