Moderators: cgrey8, EDS50, Jon 94GT, 2Shaker
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
This kind of thing goes on all the time.....We all think some issue/functionality/.../etc has been settled, until a new discovery is made or someone asks a detail question, and then we find out more facts. Despite the docs, there is still quite a lot of little detail unknowns in the software and hardware of the EEC boxes.
Makes things more fun...............
Vehicles - I chose the Toyota 2GR-FE engine. 3.5L V6 DOHC with VVT. Found in V6 Camry, some of the SUVs, small vans etc, and the Lotus Evora. Try engine out if you get the chance - powerful, very smooth, and very good on gas mileage. The 1UZ V8 engine is also very good...it's actually approved for aircraft use !!
(Apologies to die hard Ford fans...)
Makes things more fun...............
Vehicles - I chose the Toyota 2GR-FE engine. 3.5L V6 DOHC with VVT. Found in V6 Camry, some of the SUVs, small vans etc, and the Lotus Evora. Try engine out if you get the chance - powerful, very smooth, and very good on gas mileage. The 1UZ V8 engine is also very good...it's actually approved for aircraft use !!
(Apologies to die hard Ford fans...)
TVR, kit cars, classic cars. Ex IT geek, development and databases.
https://github.com/tvrfan/EEC-IV-disassembler
https://github.com/tvrfan/EEC-IV-disassembler
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
That’s good to know that we’re always learning, gotta chase that satisfaction of completing something first before learning more!
Talking about learning. Made a newbie mistake of not doing some tune ups before heading back on a long trip, engine blew n leaked. Now I’m stuck in a small town in NorCal, probably have to pay someone to replace the engine as I don’t have a garage to tow to.
Happy holidays guys
Talking about learning. Made a newbie mistake of not doing some tune ups before heading back on a long trip, engine blew n leaked. Now I’m stuck in a small town in NorCal, probably have to pay someone to replace the engine as I don’t have a garage to tow to.
Happy holidays guys
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Happy new year guys.
So I didn't know what's gotten into my head: maybe it's being trapped without a car for 6 months or just a crowded living situation. I went on a impulse to get a '95 pathfinder whose engine I blew on my way back at NorCal. I didn't know what I was thinking.. i checked rust, body, interior, engine bay, drove it. Feels smooth at the time but I didn't check oil or coolant or most importantly just use a damn obd scanner or get oil/coolant change before I left. I guess it's amazing that it got me from seattle to oregon (where I made a slight detour to a small town) before breaking down on i5- south.
At this point I'm thinking of just junking it or negotiate with the shop to use its space and tools for engine swap (but I don't think I have the time for that. we'll see..)
Do any of you know what values on a OBD scanner I should be seeing for a Ford Excursion '04 6.0l diesel? By doing some quick read, I can see the pairing of elm327 forscan device + torque pro app make a good combination. The O'reilly closes to me only sells Innova 1000, so i'm not sure if I can get as good of a reading as elm327.
Thought I would post on forum first before I do some googling. . i'm in a tight spot in terms of time so I'm only asking for heuristics right now. (although this surfaced with another question of whether I could RE ELM327 first. but it's just an idea off the top of my head)
Any advice/links appreciated.
cheers to 2021
BB
So I didn't know what's gotten into my head: maybe it's being trapped without a car for 6 months or just a crowded living situation. I went on a impulse to get a '95 pathfinder whose engine I blew on my way back at NorCal. I didn't know what I was thinking.. i checked rust, body, interior, engine bay, drove it. Feels smooth at the time but I didn't check oil or coolant or most importantly just use a damn obd scanner or get oil/coolant change before I left. I guess it's amazing that it got me from seattle to oregon (where I made a slight detour to a small town) before breaking down on i5- south.
At this point I'm thinking of just junking it or negotiate with the shop to use its space and tools for engine swap (but I don't think I have the time for that. we'll see..)
Do any of you know what values on a OBD scanner I should be seeing for a Ford Excursion '04 6.0l diesel? By doing some quick read, I can see the pairing of elm327 forscan device + torque pro app make a good combination. The O'reilly closes to me only sells Innova 1000, so i'm not sure if I can get as good of a reading as elm327.
Thought I would post on forum first before I do some googling. . i'm in a tight spot in terms of time so I'm only asking for heuristics right now. (although this surfaced with another question of whether I could RE ELM327 first. but it's just an idea off the top of my head)
Any advice/links appreciated.
cheers to 2021
BB
-
- Regular
- Posts: 238
- Joined: Tue Nov 21, 2017 2:32 am
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Man, if I could bolt across Oregon to help you, I would 
1990 Ford Ranger FLH2 conversion. Ford forged/dished pistons, Total Seal file-fit rings, Clevite rod and main bearings, Clevite cam bearings, IHI turbo, Siemens Deka 60lb/hr injectors, Ford slot MAF in custom 3" housing. Moates Quarterhorse with Binary Editor, using the PAAD6 database.
OpenEEC Telegram Chat:
Telegram
OpenEEC Telegram Chat:
Telegram
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Oh dang you’re in Oregon? I made a detour to a Chiloquin on the way back . The highway views were pretty awesome.motorhead1991 wrote: ↑Fri Jan 01, 2021 7:58 pm Man, if I could bolt across Oregon to help you, I would![]()
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Where in NorCal are you stuck? I'm in Santa Rosa if it's anywhere near where you are. I had one of the very early ELM chips with a UART interface and never got very far with it. The HF scantools, on the other hand, are fairly cheap and I haven't had any complaints with them over the years.
1994 Mustang GT, 351w (377 stroker), TFS heads, hydraulic roller lifters, 1.7 roller rockers, explorer intake, T4M0, Quarterhorse, SLC-DIY wideband AFR meter
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
I’m in los banos, but I would be driving up anyways.. the dealers are up north.. I’ll be hooking it up to my laptop anyways cuz I have no android (would like to have a cheap used one for work though).
Don’t they all use UART? Well as Long as it works..
Don’t they all use UART? Well as Long as it works..
-
- Regular
- Posts: 238
- Joined: Tue Nov 21, 2017 2:32 am
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Nah, I'm in Idaho and that's a long drivebaba_banana wrote: ↑Fri Jan 01, 2021 8:32 pmOh dang you’re in Oregon? I made a detour to a Chiloquin on the way back . The highway views were pretty awesome.motorhead1991 wrote: ↑Fri Jan 01, 2021 7:58 pm Man, if I could bolt across Oregon to help you, I would![]()
1990 Ford Ranger FLH2 conversion. Ford forged/dished pistons, Total Seal file-fit rings, Clevite rod and main bearings, Clevite cam bearings, IHI turbo, Siemens Deka 60lb/hr injectors, Ford slot MAF in custom 3" housing. Moates Quarterhorse with Binary Editor, using the PAAD6 database.
OpenEEC Telegram Chat:
Telegram
OpenEEC Telegram Chat:
Telegram
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Oh lol.
The diesel’s at Montana. I would prolly stop by.
I read some elm327 adapters might not be compatible w diesel at 24V
The diesel’s at Montana. I would prolly stop by.
I read some elm327 adapters might not be compatible w diesel at 24V
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
ELM327's are a bit of hit and miss affair to get a real one.
Yes a good one works well with Torque. I got a Bluetooth version from the UK some time ago. Company doe snot appear to exist anymore.
12V would be typical of most low cost interfaces.
You may need a module that supports commercial vehicles like buses and trucks to get 24V support.
Yes a good one works well with Torque. I got a Bluetooth version from the UK some time ago. Company doe snot appear to exist anymore.
12V would be typical of most low cost interfaces.
You may need a module that supports commercial vehicles like buses and trucks to get 24V support.
Cheers
John
95 Escort RS Cosworth - CARD QUIK COSY ANTI / GHAJ0
Moates QH & BE
ForDiag
John
95 Escort RS Cosworth - CARD QUIK COSY ANTI / GHAJ0
Moates QH & BE
ForDiag
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Yea I saw one on amazon that’s a hit w/ diesel owners, titled “OHP ELMconfig” at $31.46.
Hell maybe I’ll just make one myself if ELM electronic (assuming that’s the legit company) sells proper kits..
If that’s the case, Imma stop my relentless vagabonding/car camping and go home n start hacking.
Hell maybe I’ll just make one myself if ELM electronic (assuming that’s the legit company) sells proper kits..
If that’s the case, Imma stop my relentless vagabonding/car camping and go home n start hacking.
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
This is legit as far as I know
https://www.elmelectronics.com/products/prices/
Agents
https://www.elmelectronics.com/help/obd/links/
https://www.elmelectronics.com/products/prices/
Agents
https://www.elmelectronics.com/help/obd/links/
Cheers
John
95 Escort RS Cosworth - CARD QUIK COSY ANTI / GHAJ0
Moates QH & BE
ForDiag
John
95 Escort RS Cosworth - CARD QUIK COSY ANTI / GHAJ0
Moates QH & BE
ForDiag
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Cool will check it out later..
I’ve seen a post on ForScan where the person modified the tool to use MS-CAN. I don’t know how it’s related to 24V but I see in another post that 2004 onwards use that as auxiliary protocol to CAN.
So perhaps some modules might be excluded.. as I’ve seen on a post where the OP is trying to DIY for his diesel.
I’ve seen a post on ForScan where the person modified the tool to use MS-CAN. I don’t know how it’s related to 24V but I see in another post that 2004 onwards use that as auxiliary protocol to CAN.
So perhaps some modules might be excluded.. as I’ve seen on a post where the OP is trying to DIY for his diesel.
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
How would one do dat actually? Step down the 24V? Is it a complex task?jsa wrote: ↑Fri Jan 01, 2021 11:21 pm ELM327's are a bit of hit and miss affair to get a real one.
Yes a good one works well with Torque. I got a Bluetooth version from the UK some time ago. Company doe snot appear to exist anymore.
12V would be typical of most low cost interfaces.
You may need a module that supports commercial vehicles like buses and trucks to get 24V support.
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
12V or 24V for power supply, the chips are 5V I believe.
The data streams are a mix of voltages depending on which protocol standard.
Check out the documents on the Elm site.
The data streams are a mix of voltages depending on which protocol standard.
Check out the documents on the Elm site.
Cheers
John
95 Escort RS Cosworth - CARD QUIK COSY ANTI / GHAJ0
Moates QH & BE
ForDiag
John
95 Escort RS Cosworth - CARD QUIK COSY ANTI / GHAJ0
Moates QH & BE
ForDiag
-
- Regular
- Posts: 238
- Joined: Tue Nov 21, 2017 2:32 am
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Yeah man, there's some neat stuff here around Boise. Just let me knowbaba_banana wrote: ↑Fri Jan 01, 2021 10:55 pm Oh lol.
The diesel’s at Montana. I would prolly stop by.
I read some elm327 adapters might not be compatible w diesel at 24V
1990 Ford Ranger FLH2 conversion. Ford forged/dished pistons, Total Seal file-fit rings, Clevite rod and main bearings, Clevite cam bearings, IHI turbo, Siemens Deka 60lb/hr injectors, Ford slot MAF in custom 3" housing. Moates Quarterhorse with Binary Editor, using the PAAD6 database.
OpenEEC Telegram Chat:
Telegram
OpenEEC Telegram Chat:
Telegram
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Ok yea. I actually have no clue how Bluetooth adapters get their power from. It probably makes sense that it taps the power from the port and on the modded Chinese adapter there’s a switch to go MS-CAN..
I figure I’ll order the obdlink Mx+ and also the cheap Chinese elm327 to open it up and take a look
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Thanks. I’ve weighed my options and realized I’m severely lacking in options (both in a scan tool and also knowledge) of the vehicles I should consider. . I Guess imma head back down to San Diego and get everything figured out before I make waves in the market!motorhead1991 wrote: ↑Sat Jan 02, 2021 1:39 ambaba_banana wrote: ↑Fri Jan 01, 2021 10:55 pm Oh lol.
The diesel’s at Montana. I would prolly stop by.
I read some elm327 adapters might not be compatible w diesel at 24V
Yeah man, there's some neat stuff here around Boise. Just let me know![]()
Was a great experience riding alone for 19hrs thou! Lots to think about and also shop at truck stops! Didn’t realize how much I miss having a ride!!
Anyways if u know of any deals on those big ass mofos, gimme a shoutout! I might consider a 4Runner for reliability too but I’m sure I’ll be more well prepared when I enter the market again!
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Going back a few steps M0M2 should have OBD-I which would be an output datastream from the EEC.
steve
steve
'95 GT - T4M0 x3
'93 notch - A9P
'87 TC - 8UA or LB2 or LA3 x2
'85.5 & '86 SVO - PE x2
'83 & '84 GT turbo - TA x2
'93 notch - A9P
'87 TC - 8UA or LB2 or LA3 x2
'85.5 & '86 SVO - PE x2
'83 & '84 GT turbo - TA x2
-
- Gear Head
- Posts: 39
- Joined: Thu Sep 24, 2020 10:26 pm
Re: Project on Reverse Engineering binaries, assembly, coding and learning more about the ECU
Thanks for the help guys.
This is a pretty cool project but I’ve been busy searching for a job and it doesn’t seem like I’m gonna get into automobiles engineering anytime soon.. even thou programming dashboard user interface apps might be a dope job.
Anyways my math degree don’t provide me with any solid skills other than data analytics so I’m heading up to Seattle for an assoc in web dev to see if I can make shit happen.
Thanks for being kind n awesome guys. Hope everything’s going swell.
This is a pretty cool project but I’ve been busy searching for a job and it doesn’t seem like I’m gonna get into automobiles engineering anytime soon.. even thou programming dashboard user interface apps might be a dope job.
Anyways my math degree don’t provide me with any solid skills other than data analytics so I’m heading up to Seattle for an assoc in web dev to see if I can make shit happen.
Thanks for being kind n awesome guys. Hope everything’s going swell.
Who is online
Users browsing this forum: No registered users and 18 guests