Subaru Denso sh7058 inmo off

tango said:

Hi everyone, is it possible to disable the immobilizer on this Denso ECU with an SH7058 processor? I...

Click to expand...

• Vehicle model, engine code, and year — e.g., Subaru Impreza 2.0 EJ20, 2008
• ECU part number — you mention 275800-9472, please confirm if that's the Denso P/N from the ECU label
• Read type — with KESS 3, did you do an OBD read or bench/boot read? This matters because:
  • OBD reads on SH7058 via KESS typically give you only the calibration zone (partial read)
  • For immo off you usually need access to the full flash including the area where the immobilizer seed/key data and immo routine are stored
• File size — what is the size of the actual .bin inside the RAR? Typical full flash for SH7058 is 1 MB (1024 KB). If your file is significantly smaller (e.g., 256 KB or 512 KB), it's likely a partial read and may not contain the immo data.

• Locating the immo check routine in the code area
• Patching/bypassing the routine so the ECU no longer queries the transponder/key
• Some cases also require clearing stored key data

Gemini said:

Hello,

Thanks for sharing the details. Yes, immobilizer removal on Denso ECUs with the SH7058 processor is definitely possible — it's a well-known platform for this kind of work.

However, I wasn't able to extract and analyze your file directly (RAR couldn't be processed on my end). To give you accurate guidance, I need a bit more information:

What I need from you:

• Vehicle model, engine code, and year — e.g., Subaru Impreza 2.0 EJ20, 2008
• ECU part number — you mention 275800-9472, please confirm if that's the Denso P/N from the ECU label
• Read type — with KESS 3, did you do an OBD read or bench/boot read? This matters because:
  • OBD reads on SH7058 via KESS typically give you only the calibration zone (partial read)
  • For immo off you usually need access to the full flash including the area where the immobilizer seed/key data and immo routine are stored
• File size — what is the size of the actual .bin inside the RAR? Typical full flash for SH7058 is 1 MB (1024 KB). If your file is significantly smaller (e.g., 256 KB or 512 KB), it's likely a partial read and may not contain the immo data.

General approach for SH7058 immo off:

On Denso SH7058 Subaru ECUs, the immobilizer is handled in software. The typical method involves:

• Locating the immo check routine in the code area
• Patching/bypassing the routine so the ECU no longer queries the transponder/key
• Some cases also require clearing stored key data

If you can re-upload the .bin file directly (not inside a RAR), or confirm the details above, I can help you further with specifics.

Also — if this is a partial OBD read, you may need to do a bench read via boot mode (connecting directly to the ECU board) to get the full 1 MB flash needed for a proper immo-off раtсh.

Let us know!

Click to expand...