Eng-Tips is the largest engineering community on the Internet

Intelligent Work Forums for Engineering Professionals

  • Congratulations waross on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

ECU Map locations

Status
Not open for further replies.
Replies continue below

Recommended for you

Hi Gadgerooni,
If you already have the code, you can get close to the maps in this way. First read the code file (could be a .bin or whatever) with a hex editor. you can download winhex software from Now you have your code in hex,... nicer huh? scroll down to a point that the hex numbers in several locations are more or less the same. This COULD BE the ignition map or fuel injection map. Write down the address at which you think this table seems to start. It should be a 256 locations with the same smooth behaviour. Now disassemble the .bin or .hex file. you may find your proper disassembler regarding to the micropeocessor you have in your ecu. Go and check the address you've already written. If you know assembler then you can realise that if you are right or not. You should also check all indirect-addressing that refer to an address in your assumed range and check their function. with a bit(days or weeks!!) investigation you will find all required maps.

I hope it would help.

Cheers
Zimbali
 
Hello gadgeroonie, :)

All above is fine but at the end there must be a checksum correction to the .bin file before it is programmed back in the ECU. If this is not done the car will most probably not even start or if it starts will have all kinds of problems like bad idling, stalling, check engine light on etc.
The bad news is that this correction can not be done with standard Hex editors. It can be done only with the special professional editors for chip tuning that contain the very complex algorithms for this job or with special stand alone automotive checksum correction software. Both are very expensive (average 3.000.00 Euros). So I suggest not to try anything unless You have the right software and hardware to do it.

Sorry for the bad news...

Regards
Speedy100


You think knowledge is expensive?
Try ignorance... :)
 
you CAN do checksum with HEX-Editor, because checksum is checksum! it doesn't matter if the microcontroller is used in a submarine or a car. Basically checksum is the last 4 (or 8) bytes of summation of all bytes in a code.
but about finding, changind and reprogramming the codes speedy100 is absolutly right.

Thanks evotech. I'll mail you very soon.


Cheers


You can live in your car, but you can't drive your House!
 
Hi Zimbali,

Sorry but here I do not agree. You can do the simple checksum correction that You mention only on older type ECUs. The new car ECUs use multiple checksum corrections in many different memory areas within the same code. The algorithms used are highly encrypted and is not possible for a simple hex or even older chip tunning editor to do.
This is why the new Automotive Editors are so expensive if they have checksum correction included. Also the stand alone applications for the same purpose cost more than what an old type editor costs... As You understand this is all hacking work as no car maker will publish this info...

Best Regards


You think knowledge is expensive?
Try ignorance... :)
 
I haven't heared of it BUT sounds logical.
And What do you mean by NEW and do you know any particular ECU designed in such a way? The reason I'm a bit suspicious is:
As I checked the codes available for different cars (standard and modified codes, both) I found a website selling the codes with ECU part number, car manufacturer and model of that car. There was ONLY ONE checksum associated with each available code that makes me think there should be only one checksum in a code. But again I have to say it is fair enough that manufacturers apply different algorithms to prevent hackers from stealing and modifing the codes.


Cheers


You can live in your car, but you can't drive your House!
 
Thanks for the replys guys

I've been trying to unravel the locations and sizes of maps in my ecu for some time now and have not got very far

i've tried a couple of editors - winbin is a favorite !!

I've also played with some cosworth weber marelli ecu's and found out about the checksum figure - get it wrong and it wont run at all

My ecu is a ford eeciv ofab - so i guess its considered an older type of ecu.

can somebody give me the link to the site selling the codes ?


I am considering getting an aftermarket ecu to make the mapping process a lot more simple
 
Zimbali Hi!

New type ECUs are most flash after year 2000 (about), that use complex and highly encrypted checksum algorithms.
Some examples, all VAG cars, all Peugeot-Citroen.

What You sow in the WEB site with the ECU lists is the total checksum and is used for recognition purposes because there are many ECUs with the same serial number but with different chip codes that have different checksum...

Regards
Speedy100



You think knowledge is expensive?
Try ignorance... :)
 
Hi Guys - yes the ecu is from an RS Turbo - but its not an escort, its the type fitted to the fiesta RS Turbo

speedy - cheers for the links

i think i'm gonna have to use a racelogic emulator to find out where the maps are - anyone used one ?
 
Status
Not open for further replies.
Back
Top