Open Source CanBUS J2534 Honda/Acura Reflash Tool (Work in Progress)
You can download the Tool and use at Your Own Risk!
YOU CAN PURCHASE THE SOFTWARE FOR THE MOST LASTEST UPDATES AND FEATURES HERE
Or download the lastest release HERE
You can download some Honda/Acura firmwares updates files (.rwd/.bin) to give you a good head start HERE
This is a Work In Progress Honda/Acura Reflash Tool under CanBUS Interface.
The Honda communauty is far behind than the other manufacturers when come to Reflash and Tuning capabilities for vehicules working under CanBUS. Reflash tools that are guenine and works are getting very costly and the vehicules to work with the tools in questions are getting older everydays which is not resonable.
I hope this tool will help others developers to pick up on the developement just like me and make reflash capability for Honda/Acura a lot easier for all of us.
You can perform all the works to the ecu if using the Unlock mode (0x27,0x41), which includes reading the rom & writing/flashing a complete .bin to the ecu however this unlock method is only compatible for the listed ecus bellow.
You cannot perform all the works to the ecu if using the Unlock mode (0x27,0x01). When using this mode you cannot read the ECU rom and cannot write a full binary file (.bin) to the ECU HOWEVER this unlock mode can be used to write a firmware file update (.rwd|.gz) to the ECU.
Firmware files update (.rwd|.gz) can be obtained when downloading HDS (Honda Diagnostic System) software from others websites and look inside the installation folder of 'J2534 Rewrite software' which is generally installed while installing HDS on the pc. Or you can obtain somes HERE
Firmware files update (.rwd|.gz) are only partial and encrypted ROM file. This is not the complete ROM file and the data is encrypted too, those file are missing the bootloader section of the original ROM (.bin). However you can convert the firmware file (.rwd|.gz) to a decrypted ROM file (.bin) with the missing bootloader section, then modifiy the .bin on your own, and then remake a new encrypted firmware (.rwd|.gz) from the previously modified .bin. Then you can flash the modified firmware file to the ECU using Unlock (0x27,0x01).
| Done? | Feature Description |
|---|---|
| ✅ | Read ECU rom |
| ✅ | Write/Flash ECU binary (.bin) rom file |
| ✅ | Write/Flash ECU firmware (.rwd) file |
| ⬜ | Checksum Verification for 512Kb (.bin) file (KEIHIN SH7055) |
| ✅ | Checksum Verification for 1Mb (.bin) file (MATSUSHITA & KEIHIN SH7058) |
| ⬜ | Checksum Verification for 1.5Mb (.bin) file (KEIHIN SH7059) |
| ✅ | Checksum Verification for 2Mb (.bin) file (PANASONIC & KEIHIN & HITACHI SH72531/TEMIC MPC5554) |
| ⬜ | Checksum Verification for 3Mb (.bin) file (KEIHIN MPC5556) |
| ✅ | Checksum Verification for 4Mb (.bin) file (BOSCH MED17.9.3/TC179X) |
| ✅ | Seed/Key ECU Unlock Algorithms(0x27,0x01) -> All ECUS?? |
| ⬜ | Seed/Key ECU Unlock Algorithms(0x27,0x03) (->NOT YET IMPLEMENTED) |
| ⬜ | Seed/Key ECU Unlock Algorithms(0x27,0x05) (->NOT YET IMPLEMENTED) |
| ❗ | Seed/Key ECU Unlock Algorithms(0x27,0x41) -> ONLY Specified ECUS (see compatible list below) |
| ✅ | RWD firmware file X-RAY/Decryptor to binary file (.bin) for 0x5A files |
| ⬜ | RWD firmware file X-RAY/Decryptor to binary file (.bin) for 0x31 files (->IN PROGRESS) |
| ✅ | Binary file (.bin) to RWD firmware file builder for 0x5A files |
| ⬜ | Binary file (.bin) to RWD firmware file builder for 0x31 files (->IN PROGRESS) |
| ✅ | Extract Definitions files from 'FPM' |
| ✅ | Extract Binary files (.bin) from 'FPM' |
| ✅ | OBD2 Scan Tools |
| ✅ | Binary ROM Tables Editor (with Definitions) |
| ⬜ | Immobilizer Tool (->NOT YET IMPLEMENTED) |
You can freely 'Fork' this repository to your github account, this will create a duplicated copy of the project inside your github account repositories!
To apply any changes and updates to the project, uploads the changes you have done to the duplicated project inside your reposities and then provide a 'Pull Requests' to this github repo to make the request to apply your changes done to the tool but inside my repository.
I beleive ALL J2534 adapters are compatible with the Reflash tool if you have the appropriate drivers installed in your pc (this is generally done automaticly nowadays with usb protocols).
Common's J2534 adapters such as the GNA600, Mongoose, Tactrix Openport 2.0 (also the fakes ones!) should works with no issues.
| Car Manufacturer | Year(s) | Models |
|---|---|---|
| Honda & Acura | 2007+ | All Models?? |
| Car Model | Year(s) | Algorithm Byte | Key1 Bytes | Key2 Bytes |
|---|---|---|---|---|
| Honda Civic's (All?) | 2006-2010 | 0x01 | 0xAE, 0x0D, 0x23, 0xFF | 0x40, 0x65, 0x58, 0xB3 |
| Honda Ridgeline | 2006-2013 | 0x04 | 0x16, 0xA4, 0xAB, 0xB0 | 0xBF, 0xE8, 0x5A, 0x6D |
| Honda CR-V | 2007-2010 | 0x08 | 0x6D, 0x75, 0x32, 0xAC | 0x9D, 0x62, 0x3B, 0x64 |
| Acura RDX (In Progress) | 2007-2012 | 0x1A | 0x67, 0xE9, 0x76, 0xC1 | 0x78, 0x3E, 0x17, 0x39 |
| Honda Freed (In Progress) | 2011-2013 | 0x20 | 0x95, 0x58, 0x3E, 0x2C | 0xF3, 0x96, 0xB5, 0x6F |
**Notes: Keys Bytes can be found directly in the ecu ROM.bin by searching for them!