![]() ![]() ![]() First off, I wrote a small perl script to filter out everything except for the messages from IDs 0x7e0 and 0x7e8. What I ended up doing was writing a small piece of software (two, actually) to parse out the ROM data. After seeing how simple and structured these requests are, I wasn’t worried about being able to recover my ROM. After the request the ECU sends this data. So this message is the UpRev tool asking for 63 bytes of data (0x3f) from memory address 0x279f. The tool’s ID is 0x7e0, and the ECU responds on 0x7e8. Support for this service is fading for good reasons revolving around security concerns. For those unfamiliar, this is a CAN message used to request data stored at an arbitrary address. I left the rest of the OBD lines undisturbed, in case the tool uses those for some reason during the transfer.Īfter I pulled the entire log I was encouraged that this was going to work the entire ECU ROM is read through CAN service 0x23 requests. In order to accomplish this, I had to make a “Man in the middle” cable that will allow me to watch the CAN bus during the transfer. I logged the entire 15 minute bus transfer in Vector’s CANAlyzer software. I re-read my ECU with their tool, but this time I was watching in the background on my other laptop. I brought my work laptop and my Vector CAN card home, and fired up my personal laptop with UpRev installed. I figured that maybe if I take a bus log of the entire ECU read, then I could possibly recover my ROM from the data in the CAN transfer… I figured that even if UpRev decides to store my stock ROM encrypted on my laptop, the reading of my ROM by the tool will still be cleartext. Because of this, I have access to some high-quality CAN tools. It just so happens that I work in the automotive industry, as a software engineer for company that makes braking ECUs. After some reading, I think that I learned that this is mainly used for sending ROMs from new, unsupported vehicles to UpRev, so that you can pay them to add a new model to their lineup. The tool instructed me to send the encrypted ROM file to UpRev. Why? Surely there’s no harm in giving me my own data. Unfortunately, the tool stores even the stock ROMs encrypted on your PC. After the tool finished, I was excited to be able to open up my ROM in a hex editor and stare at beautiful tables. It seemed to me like this would dump my ROM. There is an option in their software to “Copy ECU Data”. There is no reason for their tool not to support reading and saving a STOCK ROM… but they don’t. For example, I would like the ability to read my stock ROM from the vehicle. I understand the need for companies to protect their IP, but I was hoping for a little more access, in general, than they provide. I’ve only casually played around with their software, but I was hoping for it to be more open than it is. I waited around until I found a good deal on a used UpRev tuner cable/license on the 370z forums and I got it at a little less than half price. From what I hear, ECUTek is more advanced software, but UpRev allows individuals to tune on their own. ![]() There is some limited community support for these older K-line-equipped ECUs.įor our newer vehicles, we for the most part have to turn to one of two tuning systems ECUTek or UpRev. It seems that before around 2008/2009 most of the ECUs were not exclusively controlled/queried over the CAN bus. I would like to change that.Īs I’m doing my research I’ve also learned that there are several “classes” of ECUs for most Nissan vehicles. I’m aware that the Subaru community has a lot of support in the form of Open Source tools for ECU tuning, and we simply don’t have that for our newer Nissans. Now that I have a fun car, I’m going to finally get the chance to do it. I’ve always been interested in tuning my vehicles even when I had cars that weren’t worth the effort. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |