Search results

Maybe I've found the ignition maps. There's a selection between two maps at 0xeb55. Each of these maps are 136 bytes long. According to Jeremy Ross in this post, the MR2 AW11 ECU has two main ignition maps (one for Idle, the other for normal running) with 17 timing points across the rpm...

Many thanks for the Pictures, 3P. It's now quite clear that this ECU is quite far from the ST165 ECU I have (Knock sensor CPU package, ICs locations). I've missed two 7MGE ECUs on ebay. Please somebody on SM having this kind of ECU (7MGE M/T pre 88) and being ready to send it to f$*#_&g...

Thank you for offer for the 7MGTE ECU pics, but we will try to understand the 7MGE ECU first (the 7MGTE will certainly be next :x:). 20 years is quite a long time for sure but if you have some remarks to make when we will start to interpret the code, this will be helpful too. :icon_bigg

Thanks for the help again. :drink1: I need to re-read some Motorola litterature. :) I've started working on putting absolute adresses on the relative branch instructions since yesterday to make the code clearer. When branch offset is less than 128 this is a forward branch, and when it's...

Thank you for your time Jon, I'm trying to find the same ECU as yours on ebay. In fact, the most difficult is to find somebody accepting to send something to Europe (These ECUs are hardly ever found here). I will let you know as soon as I can put a hand on one. Here's the little I have...

OK, found this picture of a ST165 ECU. Please let me know if it's close to the 7MGE ECU or not, because I will work on it until I get a 7MGE ECU. I believe the 7MGE must have only 4 transistors (at the bottom of picture, attached to the frame of the ECU) instead of five because injectors...

Hello everybody, I'm working on the code at the moment (Identifying interrupt vectors, locate the main part of the program...). Of course, as 3P said this is going to be far easier to decrypt the code after having located the sensors and actuators pins. I will bring back a 7MGTE ECU...

Thanks for correcting about this opcode (I think you meant #0x33), the code looks muuuuuuuuuuch more logic now! :icon_bigg I've never used IDA before. I will try to use it if understanding the program gets too tough. I've done a lot of work on 42pins D151801 ECUs regarding circuit...

Hello, First of all 3p141592654, thanks a lot for releasing this binary file. This is a great job you've done extracting it! :bigthumb: The file is 12Ko and doesn't cover the whole 64Ko address space. If I read the address map on the Toyota wiki (thanks to Greg Kunyavsky for this), it...

The black one has been sitting for two years in the previous owner's garage, and I bought it one year ago. This one is my favourite. It's a targa roof, 92 model with all the goodies like oil level sensor except the Toyota electronic electronic display (I cannot remember the name) which can be...

I didn't expected such a success! :biglaugh: I have no picture of the first one (white targa), but here are the last two, along with a Celica ST162. Just for fun, the cars in front of them, a SW20 MR2, ST182 and ST185 Celicas. I will try to make some more photos next time I'll go...

Hello everybody, I own three 7MGTE MKIIIs I bought separately for a low price. All of them have been abused by their previous owners regardless the laws of mechanic. First one I bought has a blown head gasket and conrod seals are gone. The previous owner didn't even know where to check...