Toyota ECU code cracked.

I'm not sure if this has been noticed though on the MK3 Supra side some very talented and dedicated people have manage to open the doors for ECU tuning and logging.
I hate to toss a link to another forum though it is beyond me to sum up the 67 pages from this Supra Forum.
http://www.supramania.com/forums/showthread.php?73379-3P-s-TCCS-Disassembly-Analysis

 

The guy that headed up the project has already gone through multiple platform ecus to include the 3S. When he first started to crack the code he was having ecu's sent to him left and right from various Toyota owners.. It got so bad with request that the forum administrators were shielding him from questions. They even created a Toyota ECU wiki page that outlines all the different components used in the ecus. He is currently expanding on the original capabilities of the ECU through utilizing different air flow meters for greater load ranges. Someone was stating at some point that they had discovered more than 30 different fueling maps that would be utilized based on different engine conditions. They were stating that not all of the fuel maps are necessary. However to put this in perspective you would typically only need to tune for 2 different fuel maps.

 

http://toyota.kgbconsulting.ca/wiki/Main_Page

 

That's pretty cool I believe I was able to see all the pictures. It has been confirmed that the proms with the st162 and st165 were produced by two different companies. The proms are all on the same the circuits boards. There are component differences on the circuit boards though.. Example the usdm ecu in the images has a massive resistor where as the other model don't that most likely is associated with EGR.. The guy who cracked the code for the Toyota ecus is actually creating a new ecu that will have all the code from the original ecu. He already posted images of the board he had made.. So figure modern day microcontroller handling a modifiable Toyota code that has expanded capabilities... Like being able to connect via Bluetooth to your ecu and view or modify any number of available areas.

 

Hardware wise we can physically trace the ecu with the prom pinout on the wiki page and tell exactly which output and inputs are associated with certain processing.

 

Honestly we could completely dump the prom and replace it with code of our own however at that stage we lose the factory beauty in dumping the code and might as well just get a diy plug and play box.

 

I agree all we would need is the actual unencrypted data.. However I do believe that they have discovered more than tuners of the past such as techtom, blitz, and others.. If you look at the mapping that techtom has versus the mapping these guys are using its night and day. For example one thing that I mention earlier with the fuel maps.. What they discovered was that one limitation that tuners were encountering was timing based and not fuel table based. So its one thing that they are trying to work with.. But as far as burning the chip it is not possible with the data that is on our chip to add to that unless replace the chip with a EPROM.. Now as far as the 162 with EGR I think that's an excellent example to study since it has the addition code. The egr system is only operational during cruise anyways . so any WOT pulls it would be closes and any low idle and low speed conditions it would be closed as well.. So areas in which fuel and timing is critical exhaust gasses are not re introduced. Egr does have a tuning benifit as an equipped ecu can monitor EGTs as well and incorporate maps for ideal fuel and timing.

 

Bad capacitors just happen over time with heat.. Well its fairly common with early 90s imports .. The St162 ecu have the MOSFET heat shields mounted to the case.. So one of two scenarios can happen to remove the circuit board..
1. You have the appropriate sized JIS screwdriver that does not interfere with other components and can get them free ..
2. You cut their legs off the circuit board.. (You could also de-solder first if you have the time and want to save the cost) Though its good practice to drop new ones in anyway.

 

Well I know the st165s are mounted to the case anyway.. Should be the same on the 162.. And by that picture they ran the screw from the outside originally they are ran from the inside.

 

here is some quoted text from that thread...

Will this daughterboard modification be limited to specific 7mgte ECUs?



No, besides the 7M ECUs, we already have it running on a dual processor ECU for the 3S in an MR2, and a 4AGE. It will work with any Toyota ECU up to about 1999 (2JZ, 1Jz, 3S 4AGE, 3VZ, etc).

The real bottleneck is understanding the software loaded into all these ECUs, because if you don't know what the code is doing, you can't modify it. While they share a lot of code between them, they still get more complicated with each generation. The 3S ECU has over 130 different maps! Now you know why a "standalone" cannot deliver the refinement and efficiency of the factory ECUs.

 

Some really good stuff they put out for the 3SGTE

There are also ROMS from the 3S-GTE ECU here
https://www.assembla.com/spaces/3SGTE_ECU/wiki
( Turns out no decoded ECU for the ST165 or ST162 Under the SVN tab there is a techtom folder that contains descramblers of some sort.. I believe there is a rom on the Wiki page for the ST165)

Here some other good stuff as well

A lot of information and tools can be found on assembla.com
http://www.assembla.com/spaces/7M_TCCS/documents

Reader board, 7M ROMS and IDA files are here (suggest installing a Subversion client, but it is not required.
http://subversion.assembla.com/svn/7M_TCCS/

 

As it turns out the guy that was heading the project was actually recreating the ECU.
This was for the MK3 Supra as well..
Similar in capabilities though the old Denso ECU was simply not reasonable to modify based on required work.
It would be like wanting to use an old 386sx desktop computer for modern gaming.

After much research of my own I discovered all these ECU's were actually BOSCH made.
Further research I realized I was wasting my time..
If you want to reprogram the ECU just get a purpose built ECU.