D.I.Y toyota stock ecu mapping?

petbeemer

Member +
im sure if jam cracked it they didnt give a how-to to mines zep etc... so i guess they all did there homework! and found a way...

No they have done it with daughtboards which is a step in the wrong direction, although it does mean it goes back to an eprom chip and 'look up table' but if you were going to produce something then do it for the masses not the individuals
 

Sheldon

Malta Area Rep.
No they have done it with daughtboards which is a step in the wrong direction, although it does mean it goes back to an eprom chip and 'look up table' but if you were going to produce something then do it for the masses not the individuals

yes ok daouther boards. but if they did it.. why we cant?

WE = someone with good knowledge lol
 

petbeemer

Member +
yes ok daouther boards. but if they did it.. why we cant?

WE = someone with good knowledge lol

because as stated using daughter boards is now deemed primitive and not cost effective, better to look into how to flash write the stock chip with a new program aka ecutek, openport etc etc
 

petbeemer

Member +
i was searching the web and i found this a few weeks ago i didnt read it as it puzzles me but maybe of some use

http://www.wheelsjamaicahost.com/wheels_forum/index.php?topic=78078.0

Doesn't really mean that much tbh although it does sort of go for what ive already said, if you cant flash the stock chip then its pointless, reverse engineering the processor to find id's isn't impossible just time consuming, as for describing the population thing in the ecu this is simple because they have not got the id's to the processor!
Hacking the ecu is very similar to reading a map, if you have no key your lost! if you know what all the symbols mean then you can get directions.

For the starlets my option would be......get 5 or so people together to group buy some megasquirts and fit them until there working its the only cost effective way of doing it

Peter
 

Ben89

Lifer
so because a jam ecu has an EPROM chip does thet mean that the chip would be remappable??
do the old cossie boys use the eprom chips?
 

petbeemer

Member +
so because a jam ecu has an EPROM chip does thet mean that the chip would be remappable??
do the old cossie boys use the eprom chips?

eprom are uv eraseable although eeprom the replacement is electronicly erased
yes cossies, scoobs, evo's ,lancia's, lots use eprom as a look up table
 

Ben89

Lifer
cool, but in the long run i suppose it would be alot easier to just buy a megasquirt and develope that.
 

petbeemer

Member +
cool, but in the long run i suppose it would be alot easier to just buy a megasquirt and develope that.

basically yes as once you had done the mapping of the original ecu you would need to log it otherwise mapping would be impossible, then your going to have to not only develop logging on the starlet but also the program in which to do it, megasquirt comes stock with all this already added!
 

ikzgtt

Member +
to create an ecu or even understand how they work on the ep82, you will need to have an understanding of 'hex' programming language. it is all possible but no one can be bothered as there is not enough money in it.

pete from autofixed could have done this but he packed this in ages ago when he left autofixed.

it is just not worth the hastle, its worth buying a piggyback or stand alone management for now but if someone did do it, it would be profitable if you charge a minimum of about £300 per ecu. this makes it pointless to a designer unless he has guaranteed sales for the product.

the standard unit will not work with a remap even with the best programmers on the job because of the initial design spec of the standard ecu. it needs specific hardware to flash and remap which it doesnt have in our stock units therefore the need for a piggyback or stand alone.
 

azerty

Supermoderator
this topic will endup with a list of standalone ecu that has already been installed on EPs and direct comparasion :p

would be great isn't it ?

Other than Power FC, I don't see any other straight plug and play standalone ECU, am I right ?

unfortunalty, PFC doens't have launch control, nor als, has only one maping (you cannot switch to other map for special purpose, you need to map it again or use datalogit to upload a new one from a laptop). other than that, it is pretty descent ECU (some do not like it won't retard if knocks occurs)
 
Last edited:

petbeemer

Member +
this topic will endup with a list of standalone ecu that has already been installed on EPs and direct comparasion :p

would be great isn't it ?

Other than Power FC, I don't see any other straight plug and play standalone ECU, am I right ?

unfortunalty, PFC doens't have launch control, nor als, has only one maping (you cannot switch to other map for special purpose, you need to map it again or use datalogit to upload a new one from a laptop). other than that, it is pretty descent ECU (some do not like it won't retard if knocks occurs)

and its finished production which i think is the main downside to it
 

hardcoreep

Member +
http://www.wheelsjamaicahost.com/wheels_forum/index.php?topic=78078.0 Thanks for posting my link. The person who started this topic should read it. I hate to repeat myself because thats why the post over there was created but here goes...

It is impossible to modify the stock programming on a Toyota ECU:
1) Because the Toyota doesn't use the traditional Multiple fuel tables. According to the operational manuals the Toyota has 1 table and then uses a formula to populate the cells of the other tables. Therefore even if you could read the ECU you'd only get one table and have to figure out the rest.

2)Toyota owns the chip maker and there is no commercially available 'disassembler' for it.

3)The aftermarket ECUs take the stock ECU out of the loop completely, according to Techtoms, and run their own motherboard. Most of these chips have some sort of protection. Many are hard glued to the board with resin, but some are light sensitive, others will rip themselves off the main board if you lift the case, some have a secondary chip on the back that decodes the data from the main chip, and others remove the name of the chip so you cant buy a reader. The problem is you dont know what method of protection each ECU uses. As stated in the article the JAM ECU for the 4AGE we tested erased itself upon exposure to sun as the owner removed the sticker over the photocell.
 

petbeemer

Member +
http://www.wheelsjamaicahost.com/wheels_forum/index.php?topic=78078.0 Thanks for posting my link. The person who started this topic should read it. I hate to repeat myself because thats why the post over there was created but here goes...

It is impossible to modify the stock programming on a Toyota ECU:
1) Because the Toyota doesn't use the traditional Multiple fuel tables. According to the operational manuals the Toyota has 1 table and then uses a formula to populate the cells of the other tables. Therefore even if you could read the ECU you'd only get one table and have to figure out the rest.

2)Toyota owns the chip maker and there is no commercially available 'disassembler' for it.

3)The aftermarket ECUs take the stock ECU out of the loop completely, according to Techtoms, and run their own motherboard. Most of these chips have some sort of protection. Many are hard glued to the board with resin, but some are light sensitive, others will rip themselves off the main board if you lift the case, some have a secondary chip on the back that decodes the data from the main chip, and others remove the name of the chip so you cant buy a reader. The problem is you dont know what method of protection each ECU uses. As stated in the article the JAM ECU for the 4AGE we tested erased itself upon exposure to sun as the owner removed the sticker over the photocell.

So the Jam ecu you had was a complete board with eprom fitted?
 

GP82

Member +
The aftermarket ecu tuners like Jam, Mine's, must have been able to read the Toyota ecu, or how would they be able to intercept and alter data? They must have had a way to read the rom chip? How and what method was used to get the coding out of the roms is the question, then we can move forward.
 

drew-turbo

Member +
The aftermarket ecu tuners like Jam, Mine's, must have been able to read the Toyota ecu, or how would they be able to intercept and alter data? They must have had a way to read the rom chip? How and what method was used to get the coding out of the roms is the question, then we can move forward.

The aftermarket ECUs take the stock ECU out of the loop completely
 

GP82

Member +
I have done honda remaps ons tock ecus etc using ostrich and crome and thought the features were amazing in the stock ecu compared to piggybacks.


My friend is using the ostrich emulator on his evo, he say's he can download files made by HKS, Mine's, Blitz and upload them onto the ecu with the ostrich :eek: I told him to fugger off, you cannot get a tuners information out of their roms and what will the integrity of these files be?
 
Top