Notices
IS F (2008-2014) Discussion topics related to the IS F model

ECU cracker

Thread Tools
 
Search this Thread
 
Old Sep 1, 2013 | 05:24 PM
  #16  
Chaos64's Avatar
Chaos64
Thread Starter
Driver School Candidate
 
Joined: Aug 2013
Posts: 6
Likes: 0
From: Georgia
Default

Also so far the biggest problems I'm seeing is the harness and how to comm to ecu without killing it
Reply
Old Sep 1, 2013 | 07:59 PM
  #17  
jleonard71's Avatar
jleonard71
Intermediate
 
Joined: May 2011
Posts: 483
Likes: 4
From: AZ
Default

Oh good lord, here we go again...
Reply
Old Sep 2, 2013 | 12:53 AM
  #18  
bondango's Avatar
bondango
Driver School Candidate
 
Joined: May 2006
Posts: 37
Likes: 0
From: N.I
Default

Originally Posted by Chaos64
To bigcloud, is there anything to support this, or anything as far as the language it uses.
To bondango, on the forums they were talking of a bosch encrytion or maybe it was bosch design similar i'm assuming to the charger ecus. and 3 companies in japan supposedly have interfaces to the ecu to flash it and tune it to an extent. yes its denso and ecu says it but again bosch involvement.
To tgui, Jtag access has been neutered along with locking down the ecu if bad comands are sent, by who and neutered as in not implemented anymore, and I would buy a test ecu on the side not working on my own duh. Any knowledge on usb interfaces or what those lexus authorized to tune ecu (trd, sard, and i don't remember) usb hopefully.
Its DENSO period, Bosch have NO involvement with the ECU / design / software whatsover, All hardare including MPU's are propritory Denso corp own Design, D4S is a denso child along with much of the electronic technology througout the ISF.

The 3 companys mentioned have a long standing business link with Denso japan and have always been given access to the Denso's own hardware / software regarding ECU calibtation.

Please kill this thread its embarrassing like the many before

the only 2 possible ways forward :-

1. JAPANESE MARKET ECU will it pair to an ISF, all electronics aren the same regarding engine control etc etc, its not like the good old days of map vs MAF and jap vs USDM differences. So if it pairs then the option is there for novel/Sard etc etc

2. Dealer level flash calibration file. This is basically the Data required which we need to manipulate. A dealer recalibration file contains any changes in maps/settings/ etc etc and is a Complete Refalsh file. We we would need someway finding a data scematic to make sense of the information in this file, and a way of changing it. I.e. we dont need to access the ECU as full calibration files are available via lexus download.

Last edited by bondango; Sep 2, 2013 at 01:53 AM.
Reply
Old Sep 2, 2013 | 01:42 AM
  #19  
jadu's Avatar
jadu
live.love.laugh.lexus
15 Year Member
Liked
Loved
Community Favorite
iTrader: (42)
 
Joined: Oct 2008
Posts: 11,581
Likes: 90
From: CALI
Default

Why am I picturing bricks upon bricks upon bricks of bricked IS-F ECU's? Not saying that it can't be done but GL on your endeavor OP
Reply
Old Oct 29, 2013 | 08:27 PM
  #20  
dejacky's Avatar
dejacky
Lexus Test Driver
iTrader: (2)
 
Joined: Feb 2004
Posts: 1,509
Likes: 0
From: Behind you
Default

any update on this?
Reply
Old Oct 29, 2013 | 10:40 PM
  #21  
aWorkOfArt's Avatar
aWorkOfArt
Lexus Test Driver
 
Joined: Feb 2012
Posts: 1,332
Likes: 6
From: Guam
Default

I wouldnt hold you breath over it... I've tried and eventually ran out of air. LOL

With all jokes aside though, we have some really smart people on CL and brave ones who are willing to undergo this ECU cracking project. However I dont think any have been successful. Even big shops like D3PE have tried with little to no luck. There was also another company who kept stating they were waiting on cases for the thier "units" but that subject/thread died real quick and took everyone's hopes and dreams down with it. JDM ECUs have been cracked by SARD but nothing for the USDM market.
Reply
Old Oct 30, 2013 | 04:56 AM
  #22  
lobuxracer's Avatar
lobuxracer
Tech Resource
15 Year Member
Liked
Loved
Community Favorite
iTrader: (2)
 
Joined: Jul 2006
Posts: 23,081
Likes: 4,751
From: Georgia
Default

So a very good friend of mine spent his time at APR cracking ECUs while attending Auburn University and getting a degree in embedded systems. He spent 3 years trying to crack the Scion tC ECM. Here's what we know:

1. The processor and its instruction set are unique to Denso. No x86, RISC, or other well known machine code.
2. The only compilers for this ECM are controlled by Toyota.
3. The physical construction of the processor puts the code onboard the processor so there is no separate memory to attack.
4. There are no hardware interfaces on the processor to get it to cough up anything.
5. The processor memory is burned and the links used to program it are fusible links, so they are destroyed after it is programmed.
6. The flash memory holds ONLY calibration data in a proprietary format and the encryption does not have to follow any well known standards.
6. The tuning software is controlled by Toyota, and the only company known to possess this software outside Toyota is Lotus - this presents the only even slightly likely possibility one could obtain the necessary tools to recalibrate a Denso ECM, as it might be possible to pay someone at Lotus enough money to get the necessary tools (unlikely, but potentially possible).

If you can afford to etch down the processor to determine its architecture and instruction set you have a small hope of success. This is what I know from someone who made a living cracking Bosch ECMs like popcorn.
Reply
Old Nov 2, 2013 | 02:05 AM
  #23  
viprtwo's Avatar
viprtwo
Driver
iTrader: (15)
 
Joined: Mar 2011
Posts: 137
Likes: 0
From: CA
Default

And to think that technology in the IS ECU is over 6 years old already...
Reply
Old Nov 2, 2013 | 04:46 AM
  #24  
WillRockwe's Avatar
WillRockwe
Pole Position
 
Joined: Oct 2012
Posts: 367
Likes: 1
From: NJ
Default

You can make some money if you succeed with this-good luck.
As for me, I'm happy with the F-works tuning.
Reply
Old Nov 2, 2013 | 06:47 PM
  #25  
silverlexg's Avatar
silverlexg
Driver
 
Joined: Aug 2011
Posts: 141
Likes: 0
From: KS
Default

Not to bump up a touchy topic but I did see that bullydog just released tuning abilities for Toyota Tundras (and those with TRD superchargers). Perhaps there is hope...
Reply
Old Nov 2, 2013 | 09:26 PM
  #26  
lobuxracer's Avatar
lobuxracer
Tech Resource
15 Year Member
Liked
Loved
Community Favorite
iTrader: (2)
 
Joined: Jul 2006
Posts: 23,081
Likes: 4,751
From: Georgia
Default

Looks like the same CAN bus approach some other guys were saying they would release for the IS-F last June. They still haven't said anything public about that.
Reply
Old Aug 20, 2014 | 05:29 AM
  #27  
error7889's Avatar
error7889
Driver School Candidate
 
Joined: Aug 2014
Posts: 3
Likes: 0
From: Slovakia
Default

Sorry for opening old thread. I discovered the way how to reprogramm the toyota denso ecu with changed software. I used it to remove the DPF from D4D engine. I have not experience with remapping and Im not able to recognize the map tables in the code. Also I dont know if is possible to recognize them but maybe somebody experienced with tuning of subaru ecus can check the toyota BIN and look for some similliarity.
Reply
Old Aug 20, 2014 | 06:54 AM
  #28  
ISFalex's Avatar
ISFalex
Driver
 
Joined: Jan 2014
Posts: 168
Likes: 0
From: Virginia
Default

If you can crack the ECU for a cheaper price than Novel, and add in adjustments for mods, there is quite a bit of money to be made. Even the Novel ECU can't adjust for mods. If that is done, that would be amazing. Good Luck
Reply
Old Aug 20, 2014 | 11:15 AM
  #29  
error7889's Avatar
error7889
Driver School Candidate
 
Joined: Aug 2014
Posts: 3
Likes: 0
From: Slovakia
Default

I didnt found the way how to change the maps in ROM but I found the way how to burn in modified or different ROM into the ECU which is generally not possible. Im able to move up or down between firmware versions or burn the ROM from different car.
Im looking for some info or cooperation on discovering the toyota rom.

Last edited by error7889; Aug 20, 2014 at 11:19 AM.
Reply
Old Aug 23, 2014 | 11:11 AM
  #30  
lobuxracer's Avatar
lobuxracer
Tech Resource
15 Year Member
Liked
Loved
Community Favorite
iTrader: (2)
 
Joined: Jul 2006
Posts: 23,081
Likes: 4,751
From: Georgia
Default

Originally Posted by error7889
I didnt found the way how to change the maps in ROM but I found the way how to burn in modified or different ROM into the ECU which is generally not possible. Im able to move up or down between firmware versions or burn the ROM from different car.
Im looking for some info or cooperation on discovering the toyota rom.
With what processor model have you had success adding maps? The D4D is a very different platform from what I can tell.
Reply



All times are GMT -7. The time now is 09:03 AM.