thx， ecu code disassembly is a bin file or hex file（ZA1JA01N.hex）？or something else?

The romraider guys look at the instruction set for the processor in this case a Renasis SH72531 micro-controller.

Then using that instruction set and lots of software and scripts they have developed reverse engineer the ecu instructions, highly complex and time consuming task

Feeling good complex, TD-D directly seek help, first with up ~ Thank you！

Added ZA1JF20P 2015 Manual mystery rom found in Australia ?? and Taiwan supposed to be Japan low final drive. Appears identical to ZA1JF10G rom (note I incorrectly named the ZA1GF10G as F01G now corrected.)

The F10G and F20P definitions are same.

@Td-d I think their is some errors in the Cranking IPW tables for the F10G rom

I am not sure if this has been asked before. Sorry if it is a repeat. Can one use OFT def files along with OFT rom files and still flash it in using Tactrix?

I think I got my answer here: http://www.ft86club.com/forums/showthread.php?t=78529
Thanks

Hey guys. Does anyone have the "ChecksumFix" scaling available? I've searched through all my ROM's with no luck. I'm trying to convert all the SD tables from RomRaider over to ECUFlash. Thanks.

Im not 100% on what your actually asking for but here is a utility to convert RR defs to ecuflash defs.

you will generally need to correct a couple of things

flash method
mem model
and other initial header values
as per below in the ecuflash def after running the conversion utility

<rom> <romid> <xmlid>ZA1JF00C</xmlid>
<internalidaddress>8000</internalidaddress>
<internalidstring>ZA1JF00C</internalidstring>
<ecuid>A929703007</ecuid>
<year>2016</year>
<market>USDM</market>
<make>Subaru</make>
<model>BRZ</model>
<submodel>FA20</submodel>
<transmission>MT</transmission>
<memmodel>SH72531</memmodel>
<flashmethod>subarubrz</flashmethod>
<checksummodule>subarudbw</checksummodule>



9. How to Convert any RomRaider Editor def to a EcuFlash def

1. Use the RR2EcuFlash.exe to convert any RR def to an EcuFlash def.
2. Conversion of 16 bit ECU defs may require some manual updates to make them 100% usable.
3. Copy the file created by the converter to your EcuFlash rommetadata directory and startup EcuFlash, then open the ROM for editing.

Application: RR2EcuFlash.exe

its a command line utility so you will need to run it from a DOS or command window


The full page on romraider here

http://www.romraider.com/forum/viewtopic.php?t=8449

I've been doing conversions manually this whole time. Thanks.

Remember the checksum fix we had when ECUFlash was first supporting the FRS/BRZ platform? Everything in RR was defined so I would load my ROM into RR to make the changes, then load it back into ECUFlash to do my reflash, but we had to manually change the checksum value for it to all work properly. That scaling is what I need to make an on/off switch to turn SD on and off for testing.

Anyway, let me see if I can figure this program out. Thanks!

I read about that, but by the time i was flashing it was all sorted and you did not have to do it anymore. i think ztan was accross that, maybe PM him ?

Chinese version seems a distant dream ~:brokenheart:

A buddy of mine bought the Tactrix clone and it failed in the middle of a write and bricked his ECU. I had warned him not to do so and he did it despite that so I guess it serves him well... Tried to save 100 bucks on cable and now spent another 300 on ECU

The actual Tactrix is cheap for what you get. The OFT too.

Would it be possible to flash using a ELM 327 cable or a obd2 cable that can read data? Or do you have to have the tactrix cable?