FastECU

.
In your case I think it is possible checksum issue as I just noticed that there is a bug on that model if it doesn't know ECU ID... But checksum issue shouldn't make ECU completely bricked as far as I know/remember.


Well, I can't seem to be able to flash it on my old "bricked" ECU no matter ...

Well, I went over this again coz I didn't have a good feeling and I think my previous findings were wrong. It would not disable all codes, it would stop checking if the valves are closed hence only disabling P2441 technically...

<table type="Switch" name="Secondary Air System (SAI ...

Hey MiikaS , thank you for the tip about the single bit flag for toggling SAI again.
I used Claude to go through the process of understanding the M32R assembly in Ghidra. I only understand a fraction to be frank :D But in the end I concluded that I'd have to change address 0x04E1A4 from 7C to 7F to ...

For the future, these ECUs uses bits for DTC groups, not actual DTC code from memory. If you need to remove air pump codes, it can be done for whole system with one change.

That recovery protocol is basicly sending many requests to connect to ECU, maybe working if ECU software starts normal. When ...

as mentioned in the edit, I had to clean the board with isopropyl alcohol and try to put the clip on multiple times as it wasn't seating on the solter joints well. It eventually worked fine and the car runs great now

Edit:
I got it working nevermind. I tried reading multiple times and it was always different data so I think conneciton was unreliable. The ECU I got was pretty dusty so I had to clean it with isopropyl. I also had to try attaching the clip multiple times. Eventually I was able to read the correct ...

I got my programmer to work and read that 93C66 EEPROM successfully, it looks correct

Maybe this one close to the MCU?
https://drive.google.com/open?id=10FvHR ... AAB63S_TP0

@SergArb I am receiving my new ECU today. Can you tell me which EEPROM contains the immobilizer code? I wanna read it with my CH341A programmer and flash it to the new ECU

That sucks. Very unfortunate.
I will be ordering a new ECU then...
Thank you for your efforts tho

This is a 500€ beater car that I bought to have fun with. My Forester XT is my main car. I have no problem letting the car sit for a little bit whilst I try to unbrick this ECU. Is there anything I could help you guys figure out how to bench flash this thing?
On ecutools.eu I found the information ...

Oh no :/
I had done some research today and read something about iProg Pro recovery using a special script that I found for 300-400$. Is that what I would need then? And a iProg Pro (which I saw clones of for 60-90€)?

I guess a used ECU will be easiest yeah... Sad
And then I move the little EEPROM ...

The MCU on the board has WWW written at the end? What is the difference between WWW and non-WWW?

I have ordered a PCMFlash Dongle with Module 16 which supposedly should be able to bench flash it, we'll see. It's a cheap dongle I found online. I just don't know how I'd wire things up tho. I figured ...

I have taken the ECU apart to get some pictures of the PCB as that might be useful? I uploaded it on Google Drive for maximum resolution.

Hello, I have used FastECU to successfully read my ROM and flash it back. I wanted to play around with it and thought I could just zero out something that looked to me like a DTC table (I have no experience with reverse engineering, learning by doing haha). Well, after flashing the ROM and letting ...