Toyota : virginize immo box eeprom (93LC66) to enter key learning mode

**yeffog** · 5th June, 2020, 09:43 AM

Hello everyone,

I'm in a all keys lost situation with my toyota hiace 2008 being stuck in very small mountain village.

After lot of research on internet here is what I would like to do:

Get new cutted keys from a Toyota dealer with my VIN. (done)
Get the immobox from my vehicle 89780-26141. (done)
Dump the information stored into 93LC66 eeprom. (done see attachement)

Now the idea from the information a gathered from internet is to virginize this eeprom and put it back into the vehicle to enter learn mode and reister the new keys from the ignition lock.
I don't have the transponder code from new keys.

Do any of you my friend have the knowledge to virginize my eeprom dump ?

In advance thank you.

**yeffog** · 8th June, 2020, 09:58 PM

The dump of the eeprom with ORG pin set to ground. Hope its better.

**ray-ray** · 8th June, 2020, 11:32 PM

Immo. Read from ecu or separate immo.? 93LC66 read in 8bitmode ? If put to auto learn mode your going to Sinx the immo. To the ecu 4 & 13 for 35min.

**morgano** · 8th June, 2020, 11:35 PM

Originally Posted by yeffog

Hello everyone,

I'm in a all keys lost situation with my toyota hiace 2008 being stuck in very small mountain village.

After lot of research on internet here is what I would like to do:

Get new cutted keys from a Toyota dealer with my VIN. (done)
Get the immobox from my vehicle 89780-26141. (done)
Dump the information stored into 93LC66 eeprom. (done see attachement)

Now the idea from the information a gathered from internet is to virginize this eeprom and put it back into the vehicle to enter learn mode and reister the new keys from the ignition lock.
I don't have the transponder code from new keys.

Do any of you my friend have the knowledge to virginize my eeprom dump ?

In advance thank you.

Don't know if it will work for your needs but i tried to delete your keys, so may be relearnt just by putting in ignition.

**yeffog** · 9th June, 2020, 11:36 AM

Hi Ray-Ray

Sorry if don't use the correct terms or if I miss some information that you have but I'll try to aswer:

Immo is read from the separate immobilizer box (89780-26141) of my vehicule not the main ECU.
93LC66 microship is in 8bits page organisation and has been read by desoldering the ship and using CH341 USBtoMicrowire dongle and AsProgrammer.
Apparently if the synch identifier in my dump is kept as it is, the synchronisation won't be necessary. But of course I will try this if it doesn't work at the first attempt.

Happy to learn any information that you would have on this topic.

**yeffog** · 9th June, 2020, 11:39 AM

Hi morgano,

Thank you, can I have the password to open the archive ?

As engineer I would be very interrested to know how you did that

Cheers

**morgano** · 9th June, 2020, 04:30 PM

Originally Posted by yeffog

Hi morgano,

Thank you, can I have the password to open the archive ?

As engineer I would be very interrested to know how you did that

Cheers

Mate, you have it on your PM since the moment i uploaded file to thread.

**ray-ray** · 9th June, 2020, 04:34 PM

4D 67/68 have the same auto learn file, do a search “Gwee” broke it down.

**yeffog** · 9th June, 2020, 11:13 PM

Someone told me it is 4C so how can I know ?

I have searched this forum for hours, compared tenth of dump trying to understand how do the same for mine but no results.

The closest I have been is this thread : https://www.digital-kaos.co.uk/forum...ht=89780-26140

The dump is very close to mine but not exactly probably beacause mine is 89780-2614(1) and not 2614(0).

If I'm not wrong Gwee is not on this forum anymore...

I have techstream but I'm in europe so immo reset won't work I guess.

I will try the dump from morgano and the one from the previous thread but if it doesn't work and if nobody can give the proper virgin dump, does someone could enter the new keys IDs into the dump for me ? Perhaps I will buy the necessary hardware to read the keys.

Anyway thank you for all you help it is very appreciated

**ray-ray** · 10th June, 2020, 07:22 AM

Maybe these will give you the information 4D 67 or 68 work the same way.

https://www.digital-kaos.co.uk/forum...Toyota+Sequoia

**morgano** · 10th June, 2020, 08:44 AM

Originally Posted by ray-ray

Maybe these will give you the information 4D 67 or 68 work the same way.

https://www.digital-kaos.co.uk/forum...Toyota+Sequoia

So friend's correct virging should be like this one?

**yeffog** · 10th June, 2020, 11:26 PM

Thank you ray-ray this is gold !

But now I have questions haha

In my dump, correct me if I'm wrong:

I think we all got the key regions (first 2 master and then 1 valet repeated 3 times eachone) .
03030303 sequence is fixed probably to mark end of one memory region and start of another (really not sure about that but anyway fixed).
89 DA 89 DA 89 DA sequence is fixed probably related to the immobox type since it not the same as in sequoia dump

A binary representation of the key learning and synch steps FF->FE->FC->6C->2C at the very end.

My question is about the synch sequence, I would say that in my dump it is "DE E8 DE E8 DE E8" corresponding to ""4B 1B 4B 1B 4B 1B for sequoia.
There is also a "00" byte which is at one place before mariage and then at another place after

morgano in your virginized version of my dump you kept the mariage sequence "DE E8 DE E8 DE E8" but moved the "00" to the "no mariage/synch performed" location, I'm not sure about that...

I don't understand the other sequence "23 35 23 35 23 35" fixed and the counter appearing just before which follows the step of key learning and sync... redondant with the FF->FE->FC->6C->2C sequence at the end.
I don't understand why the "00" byte is not at the same place in the original file and the final maried file of sequioa...

Hope I'm not too long... and that we see the same number when opening dump file otherwise all this text will probably be just an occasion for my brain to sort its thoughts (which already nice haha)