Toyota Sequoia 03-07 step by step

[ray-ray]

i had some time with these suv,now i share it secrets here. look at all the dumps listed by there read. first immo. box get read as a 93c66a (8bit mode)

key1 info. (pg1. B2) (pg2. 2A) (pg3. 3C 67 5A 17)
key2 info. (pg1. B2) (pg2. 2F) (pg3. 41 6C 45 17)
key3 VALET info. (pg1. 92) (pg2. 47) (pg3. 34 C6 BC 13)

so all the info. is there (just need brain power)
here is what i did for all member to learn.

1.flash it virgin ,put immo. back in car and register first master key. (remove immo. read and record bin file)
2.put immo. box back in the car and register key 2 master. (remove immo. read and record bin file)
3.put immo. box back in the car and register Valet Key 3 . (remove immo. read and record bin file)
4. immo.light is back to normal after immo. box is back in car. (key 1&2 turn off the immo. light very fast "MASTER" and the valet takes a little longer to turn off immo.) so everthing is back to normal. just need to sync the immo. to the ecu.
5. pin 4&13 grounded on the obd2 for 35min. (Car starts with key 1,2,& Valet just like the factory setting.)
6. remove immo. read and record bin file. (now you see the sync in the dump)

there you go DK member that how you share your knowledge. Hope it helps you all.

[bram380]

Little correction from the dump:
"..key1 info. (pg1. B1) ..."
i think key1 is pg1. B2

[ray-ray]

You see brains (Bram 380) corrected my type error! He look at the dump to match the first key to the key data pg.1,2,3, and saw a error.I will fix it on the post. Thanks!

[fadhle]

Thanks to you bram and ray-ray for your useful post.

[ahl]

A job well done Ray-Ray. Thankyou.
Perhaps others will follow your initiative and start to experiment and understand for themselves like the early days. I often read the same people asking for a solution for the same issue over and over again. Never bothering to learn.

[ray-ray]

DK forum is made up of Members from around the world willing to share there knowledge. Some time it might lead in a other direction but foundation will alway be solid with there loyal members.

[ray-ray]

I will post the virgin dump here so all is complete. True virgin with nothing added to the ascii ,Saying things like Rar. 93c66 as that screws the virgin dumps.
the dump is not all FFFF there is a few line with script.

[super jumbe]

I will post the virgin dump here so all is complete.

Looking forward thanks...

[ray-ray]

As you can see from the dump and register key is visible ( pg.1,2,3) if page 4 is also need which is the encryption serial where is it in the dump. So let's take these dump apart and figure it all out. Things to look for pg.4 and key counter checksum? Or sync location. The main thing is to save time after flash virgin or adding key to dump and not have to wait the 30min. Sync time

[Po lock]

You guys are bad ass! Not a lot of time to get on the forum and troll around. But when I do I learn. And for that I say mucho thanks. Jen q ya

[ray-ray]

Why is the zip file not working? I share my info. So other can learn off it.

[alslock]

How would you write key data for ready to start situation? To me it seems if you know where key info is then why not make a master and be done with the job, not waste 30 min to re-sync. ( this would be a first for me on a 4d chip)

[ray-ray]

These solution give you a guide on the Keylogic in the dump one key at a time. You can eather read out a new or use key and directly put into the dump to start. Or you may choose to write off the dump, in both you need to have a good cloner and writable 4D chips. Where you able to see the Keylogic order in the dump? Best thing is the no waiting period. Hope it helps!

[ucokseparoh]

tried to say thanks for this informative post since few days ago..but just couldn't make post with this cheap phone of mine. (tried to log on with tapatalk..but didn't make it too..my phone is too cheap perhaps hence unrecognized by neither DK or tapatalk :confused:)

Thanks ray-ray.. this is it that what i need as a newbie.. a step by step procedure. :biggrin: I'll take times to comprehend it..

[ray-ray]

If you have any question or need guide DK members are here to help. Your not a Newby anymore your mind is now open and you see how things work. Hope it save you 30min. So you can spend it with your family.

[ucokseparoh]

348876348877348878348879348880


to be cont...

[ucokseparoh]

348881348882348883

ray-ray.. i've taken sometimes to comprehend this explanation of yours and still there are something which i miss. Hence,here i post some picts where i fail to understand how this thing works. Picts is in order as the way i understand your explanation.. Anyway ray-ray i don't have any tools yet. I view the dumps you posted online at hex-works#com (it's a work of a DK..too bad just couldn't remember that fellow' name).

1. Flashed the original file virgin.

How? Does it done manually (mean you do the input by your self) or some spesific tool or soft do the job (write the virgin file to the immobox hence..) generating that new virgin file? I've compared the original bin and the one that has been flashed virgin,and i notice some slightly change in the data after. The change is starting from line 000190 till the end.

2. Register the first and the 2n master key plus the valet.

How? :biggrin: does the registration of each key simply done by inserting those keys (one by one) to the ignition AFTER the flashed virgin immobox re-installed again to the car or the regstration was done by manually replacing the old key data with those 3 new keys one by one like this "flashed it virgin,replace the old 1st key data with the new one,put immobox back to the car,turn the key ON then OFF,then take immobox with the 1st key registered off of the car again then replace the old 2nd key data with the new one then re-install the immobox to the car again,turn the 2nd key ON then OFF then install it back to the car..the same process apply for the valet key. So,it needs atleast 3 times back and forth taking off and reinstalling the immobox to the car. And pin 4&13 grounded is the last thing must be done. Does it like that?

3. What does 'married' mean?

I notice slightly change also appears in the *married file" (married and married 2) starting from line 000190 coloumn 1,2,3 and 4. Only in married2 and married3 the data remain the sama.


I know it's time consuming explaining this basic things and many of you infact are busy guys out there.. but i'm keen to learn and i found no where anyone who is gladly sharing their knowledge openly as ray-ray and the other DK do here. This is my first time 'dealing' with such a deep technical trick about immo after years of reading here and there.. hence i apologize for being so ignorance and would highly appreciate anyone who wish to sort out this confusion of mine.

Thank you very much in advance.. and may this thread become useful to the other member like me who might just feel hesitant to ask.


Best regard.

[ray-ray]

If you see the Keylogic that was read off a cn900 it show you the pages of the transponder. Those pages are written into the dump and is visable. Now you have to choose if you flash virgin and register key by just inserting them in the barrel or ignition. You still would have to wait 35min. For it to marry each other immo. And Ecu ( done by jumping the obd2 4/13 together). The faster way would be to write in the Keylogic into the dump by hand and just start the car. What was learn off these is that there is ( no Keylogic in the Ecu only in the immo. Also there is no checksum that need to be figure out.

[ucokseparoh]

Thanks ray-ray. I really appreciate your kindness sir.

[Freebsd]

Ray Rey gm ,,, I seen you're post on adding the keys to a sequoia ... I tried the virgin dump ,,, and well first 2 times battery went dead on us ,,, and I was trying to use 4c keys finally I realized and tried the 4d keys basicslly spent the entire day there and part night no luck truck never started . I was hoping to get some help and try and understand how to add the key master key like you're post . I made a post yesterday hoping you'd see it I also put the data from the key in there I read it on my nd900
imcan add the key but I don't want to make a mistake and be there all day again and not start the vehicle ...
Can you please review my last post and help me thank you . I also put the bin the original bin or dump from that sequoia .

[ray-ray]

Take the original dump and written in your Keylogic that you read off your cloner. Look at my Keylogic that my cn900 read then look at the dump. It's like a little puzzle all the pcs. are there just look for the pg.1 then the next and so on. If you write over the original Keylogic there is no sync need suv will just start.

[Freebsd]

I don't know were I messed up ,,, it just like tries to start but no start shut off ... I tried to reysync .... Can I just put a verging dump and add fictitious 2nd and third key ... So that just one key the master is real and for it to start thanks well of course after the sync that is ???

[ray-ray]

if you still have the orginal dump use it. Just rewrite the first key with the Keylogic off your key. No sync needed , because the Ecu handshake is in your dump. WAITE ! You did try to sync the virgin with Ecu maybe something gets changes. Best thing is to do what I said above and then sync immo. to Ecu. Once the car start can you please read the dump and post it. My though are if the sync change or does it alway stay the same. I'm going to compare dump1 to running dump. In it I should see your new Keylogic on key1 , key2&3 should stay the same. The prize will be below. Does the Ecu produce a new sync number every time you sync?

[autokeypro]

I there 16 bits file format file virgin available?

[ray-ray]

Why would you virginize the immo. ? Do you have time to waste? Syncing the immo. To Ecu at best it's going to take you 30min wait if you get it right the first time. Wouldn't it be better to add your key or write the key in the immo. ? But if you need a virgin
file look in the search by the part number immo. (34010)

[alex_r_2001]

Now if only someone can post a known good engine ECU dump or virgin would really help me out right now.. Im pretty sure my eeprom is corrupted on engine controller part 89611-0C560

[narkeleptk]

Now if only someone can post a known good engine ECU dump or virgin would really help me out right now.. Im pretty sure my eeprom is corrupted on engine controller part 89611-0C560
the ecu file is really simple. You can just do:

Address::: 00 01 02 03 04 05
00000000: 11 22 11 22 11 22 (or similar)
Fill rest of buffer with 00

then sync with immobox

[Sleepyrz6969]

https://youtu.be/xQr_7Hm-Qsg?si=FK3XShE5H9mugT9y

[Sleepyrz6969]

In my case there is no original dump I got car after someone else and the chip is empty fffffffff
So I put virgin file
I was thinking to add keys first on bench
Then sync after
But not having original I don't know if this is an option
Can I write keys into a virgin file like that?
Or should I add keys at the car using ignition? For virgin dump

[Sleepyrz6969]

Well I've tried this car 3 different ways
And I can get immo light turned off
But it never syncs........
Tried to sync it 6 times now after virgin write manual teaching keys and after virgin write with 1 key and 3 keys added to dump
Fml

[ray-ray]

Last 2 rows at the bottom is your sync. Read over see if your keys are there, then look at the bottom row. At these point it seem that the ecu is dead and will not marry. You’re going to need an ecu and just pair it with your immo.

[Sleepyrz6969]

Keys are there in dump

The damn thing just doesn't wanna sync

Is there another way to sync it?

Like with laptop and TIS?

Or is this stupid paperclip shit the only way?