Members Login
Username 
 
Password 
    Remember Me  
Post Info TOPIC: K1-K3 Ecu opened


Senior Member

Status: Offline
Posts: 116
Date:
K1-K3 Ecu opened


Well MCU has this number on it:

 

D112150-0330 SC551803MFC 185 QQAE0244C

 

I might have read something wrong but after cleaning it up i wiill look again:)

 

it seems (from number on mcu and debug port) that it is TL like ecu so reprogramable with port at the back of the ecu.



__________________


Guru

Status: Offline
Posts: 963
Date:

Any chance you could post a picture of the opened ecu showing the BDM plug location? A ruler in the pic to give it scale and distance from the edge would be a bonus.

Also did you expose the harness connector solder pads with pin ID labels so that you know where the VPP pin is?



__________________


Senior Member

Status: Offline
Posts: 116
Date:

I have 3 of them, 2 750 and 1 600 albo k1 1000.

 

So far i have 2 750 fully opened, it seems it can be flashed thru harness likte TL, i am working with psyche on it... I jsut started checking the labels on 750 as i remember i found VPP, If you want i can send you a pic thru email...

 

Ridge i tried contacting you few times already but with no response, you changed your email?

 

Also i have a problem with BDM readout... I connected 1000 k1 with BDM LPT cable and used BDM flasher but no chance, i receive only zeros, each map is 00 all the way, i opened LPT port and changed settings to NORMAL under BIOS. Any chance somebody know wnything about it?



__________________


Member

Status: Offline
Posts: 21
Date:

have a look at my earlier post here:

http://ecuhacking.activeboard.com/t42634345/anyone-done-gsxr-6007501000-00-02-16-bit-having-problems/

 

Did you have the same problem as me?? I spent quite a bit of time with psyche as well but we got nowhere.



__________________


Veteran Member

Status: Offline
Posts: 76
Date:

Hi Carry,

I have a K3 750. Don't mean to bombard you with questions, but I'm trying to figure out just how far we've gotten with the K1-K3 ECUs. From what Luke was saying, it won't be as easy as tapping into BDM from the main harness, but worst-case scenario, we could always tap into specific MCU pins and bring them out on a connector. Question is, do we have any hard info (datasheets) on the MCU and it's architecture? I'm assuming the 600 and 750 use the same ECU hardware with different ROM masks. Has anyone been able to get the MCU to spill it's memory? Thanks!!!



__________________


Senior Member

Status: Offline
Posts: 144
Date:

Hi there,

from personal experience with older k1-k3 ECUs there are some problems with the BDM connector.
The pcb has the place to solder the header but there are no traces to go to the CPU BDM port. It is only a connector with GND and +5v. Nothing else. The owners wouldn't let me remove the potting from the ECU and solder wires on the BDM pins of the ECU so that i could read the contents. Also if i would remove the potting from the complete ECU i would know if there would be any chance to reflash those ECUs through the wiring harness. The TL1000R ecu can be reflashed from the main harness. I have already done that and if the k1-k3 gixxer ecus support that i could do the same to them!

If you want more info please contact with me at psychegr(at)gmail.com

Regards

__________________

For your DIY or Professional tuning needs be sure to check out
PVTech ECU Research & Development



Newbie

Status: Offline
Posts: 3
Date:

you managed to flash?


__________________


Member

Status: Offline
Posts: 21
Date:

I would still be interested to hear if anyone figured out how to flash the early 16 bit 600/750/1000 ecu.
I ended up fitting a PC5 and autotune and it seems to be working well.


__________________


Veteran Member

Status: Offline
Posts: 76
Date:

Hey guys,

Looks like Christian Piasini answered Luke's other thread, and has in fact hacked these ECUs (from the harness)...

http://ecuhacking.activeboard.com/t42634345/anyone-done-gsxr-6007501000-00-02-16-bit-having-problems/

-- Edited by mr_hollywood on Sunday 8th of December 2013 06:33:52 AM

__________________


Veteran Member

Status: Offline
Posts: 76
Date:

Hi Luke, looks like someone replied to your other thread, and did manage to flash these ECUs (from the harness)...

__________________


Senior Member

Status: Offline
Posts: 144
Date:

Yes you can read and flash from the main harness. You need +12v and gnd to power the ECU, a kline, a GND to enter bootloader and +12v for the flash enable pin.

__________________

For your DIY or Professional tuning needs be sure to check out
PVTech ECU Research & Development



Newbie

Status: Offline
Posts: 3
Date:

what tools are needed for this?


__________________


Newbie

Status: Offline
Posts: 3
Date:

explain me plz /(sorry for my English)

__________________


Member

Status: Offline
Posts: 21
Date:

Hey psyche, can you give us some more specific details or basic instructions on how to read the ECU?
Which pin is the Kline on 16 bit gsxr?
Should I use your software to read it??
Ive searched through some older posts and can't find any good info. Its been quite a long time since I've played with this stuff, i've forgotten most of it!
I would like to figure this out. Im heading to the dyno soon to tune my turbo 750 and I would like to add some more timing now I've switched to e85.


__________________


Senior Member

Status: Offline
Posts: 144
Date:

luke send me an email! ;)

__________________

For your DIY or Professional tuning needs be sure to check out
PVTech ECU Research & Development



Veteran Member

Status: Offline
Posts: 76
Date:

Hey guys, I don't think anyone has successfully hacked into the K1-K3 600/750 ECU yet. There's talk about it, but I think it really references the 1000 or later 32bit ECUs. Damned if I can find any actual results for the K1-K3 600/750 ECU anywhere...

__________________


Senior Member

Status: Offline
Posts: 144
Date:

Of course you wont find any info on the 16 bit ECUs.

People moved to the 32bit ECUs because they are easier to hack.
But the 16Bit ECUs are almost the same as the 32 bit ones.

So for the 16 bit ECUs you need :

1. Toggle FCCP pin to ground,
2. Turn ECU power on,
3. Transmit the slave bootloader using Kline
4. Read the maps
5. Supply +12v to VFP pin
6. Flash the new maps.
7. Remove supply from VFP pin
8. Cycle the power to the ECU.

Now you have 2 problems. One is the bootloader password and the other is the slave bootloader code.

You still think that no one has hacked the K1-K3 ECUs?

__________________

For your DIY or Professional tuning needs be sure to check out
PVTech ECU Research & Development



Veteran Member

Status: Offline
Posts: 76
Date:

Hi Psyche, please understand that I don't mean to offend anybody. If you have a working software/interface solution for reading and flashing a K3 GSX-R 750 ecu I'm definitely interested.  If it can be done from the harness, even better!!! Are the FI maps the only editable feature? Does this require resetting the mixture offsets in the external flash memory?  Thanks!



__________________


Senior Member

Status: Offline
Posts: 144
Date:

No offends but if you read the forum more thoroughly, you would see that i even had the bootloader uploaded! ;)

99460.activeboard.com/t37752866/denso-bootloader-for-16bit-ecus-finally-we-foud-it/

__________________

For your DIY or Professional tuning needs be sure to check out
PVTech ECU Research & Development



Veteran Member

Status: Offline
Posts: 76
Date:

Hi folks,

We've finally managed to hack into a K3 GSX-R 750 ECU (32920-35FD0). I've started a new thread that specifically covers the (32920-35Fxxx) ECUs found in 2000-2003 GSX-R 750s.

http://ecuhacking.activeboard.com/t56202335/32920-35fxx-16bit-gsxr-750-ecu-finally-hacked/

 

 

 

 



__________________


Member

Status: Offline
Posts: 21
Date:

psyche wrote:

No offends but if you read the forum more thoroughly, you would see that i even had the bootloader uploaded! ;)

99460.activeboard.com/t37752866/denso-bootloader-for-16bit-ecus-finally-we-foud-it/


 the bootloader is not there!!



__________________
Page 1 of 1  sorted by
 
Quick Reply

Please log in to post quick replies.

Tweet this page Post to Digg Post to Del.icio.us


Create your own FREE Forum
Report Abuse
Powered by ActiveBoard