Introduction

Select Monitor Adapter
Subaru Diagnostic Ports
How to build a PC adapter
Protocol
Software
Troubleshooting
Eavesdropping

Engine Control Unit (ECU)
Description
Reading Error Codes
Reverse Engineering
Modifying
ROM images

Transmission Control Unit (TCU)
Description
Reading Error Codes
Reverse Engineering
Power Mode
Modifying
ROM images

Other Control Units
Air Conditioning Unit
4WS Control Unit

OBD2 Information
Select Monitor Cartridge

Downloads
Links to other sites



ECU Rom Images

This is my collection of ECU ROMs. If you would like to contribute your ROM, please download it to a file and email it to me. The easiest way to download the ECU ROM from your car is to use a select monitor adapter and the snowmobile select monitor utility (See links page). I am particularly interested in SVX ROMS and also any modified ROMS that you have produced and are willing to share with the community.


Stock ECU ROMS
RomIDMakerLabelYearOriginVehicleTypeDownloadsContributor
703315JECS??1990JDMLegacyEJ20BinaryHex DumpDisassemblyMore InformationBrett
703942Hitachi601990EuroLegacyEJ18BinaryHex DumpDisassemblyAnalysisAndrey
703943HitachiE61990EuroLegacyEJ18BinaryHex DumpDisassemblyMore InformationAndrey
722515JECSD21992JDMSVXEG33BinaryHex DumpDisassemblyAnalysisB3lha
722525JECSM71992USDMSVXEG33BinaryHex DumpDisassemblyAnalysisNomake Wan
722527JECSM71993USDMSVXEG33BinaryHex DumpDisassemblyAnalysisTom
722531JECSJ61996UKSVXEG33BinaryHex DumpDisassemblyAnalysisBucks Subaru
733F17HitachiZ11996JDMImprezaEJ15BinaryHex DumpDisassemblyMore InformationAlexander
742512JECS9A1994JDMSVXEG33BinaryHex DumpDisassemblyAnalysisB3lha
742521JECS??1994USDMSVXEG33BinaryHex DumpDisassemblyAnalysisUPnorth362
742FA1JECST81996UKLegacyEJ20BinaryHex DumpDisassemblyMore InformationDaniel
7432A1JECSU11996UKLegacyEJ22BinaryHex DumpDisassemblyAnalysisB3lha
744014JECSZ41995JDMWRXEJ20 turboBinaryHex DumpDisassemblyAnalysisRob Files
74401AJECSZ51995JDMWRX RAEJ20 turboBinaryHex DumpDisassemblyAnalysisPaul

Modified ECU ROMS

The ROM images below have been modified and are provided with absolutely no warranty of any kind.

Base Rom (see above)Description of ModificationDifferenceDownloadCoder
742512-1994-JDM-SVX-EG33Removed 180km/h Speed LimiterdiffBinaryB3lha

The binary and hex dumps above have been padded to 64K for convenience so that the file offset corresponds to the memory address. The actual ROM data is 32768 bytes long and starts at address 0x8000 in the files.

ROM ID Numbers

The ROM ID is a 6 digit hexadecimal number. You can find the ROM ID by sending the "Get RomID" 00 46 48 49 when the ECU is transmitting. 46 48 49 is "FHI" (Fuji Heavy Industries) in ASCII representation. The Select Monitor seems to read the ROM ID directly from the ROM at address 8C3D rather than using the "Get RomID" command.

There seems to be a pattern to the ROM ID number, with each digit having a specific meaning. But we don't have enough data to fully decode it. If you have a JECS ROM from 1990-1996, please send me the ROM ID and details of your car so that I can investigate this further.

DigitMeaningNotes
1UnknownAlways 7. Does this mean "Subaru"?
2Model Year of Car0=1990, 2=1992, 4=1994 etc. Sometimes this is older than the year the car was actually sold and registered.
3,4Type of car/engine25=SVX/EG33, 31=Legacy/EJ20, 32=Legacy/EJ22, 36=Legacy/EJ20T, 3F=Impreza/EJ15, 40=Impreza/EJ20T
5Domestic Market1=Japan,2=USA,3=Europe,A=UK
6ECU Firmware RevisionRelative to the rest of the ROM ID