Pages: 1 ... 3 4 [5] 6
Author Topic: Anybody reverse engineer VW's "test mode" yet?  (Read 49464 times)
reset
Newbie
*

Karma: +2/-0
Offline Offline

Posts: 17


« Reply #60 on: November 12, 2015, 12:48:22 PM »

tell me the ecu part number and SW version and I will see if I have it

from VCDS please not the cover of the ecu  Grin
Logged
tmbinc
Newbie
*

Karma: +4/-0
Offline Offline

Posts: 7


« Reply #61 on: November 12, 2015, 12:57:58 PM »


Address 01: Engine (J623-CFFB)       Labels: None
   Part No SW: 03L 906 018 HK    HW: 03L 907 309 Q
   Component: R4 2,0L EDC   H28 3533
   Revision: 44H28---    Serial number:
   Coding: 0019003A043601080000
   Shop #: WSC 00020 999 00000
   ASAM Dataset: EV_ECM20TDI01103L906018HK 003009
   ROD: EV_ECM20TDI01103L906018HK.rod
   VCID: 7AF1834CFDC446E
Logged
A4Rich
Full Member
***

Karma: +10/-0
Offline Offline

Posts: 116


« Reply #62 on: November 12, 2015, 01:29:27 PM »

Address 01: Engine (J623-CKRA) Labels: 03L-906-012-CKR.clb
Part No SW: 03L 906 012 DE HW: 03L 907 309 S
Component and/or Version: R4 2,0L EDC H24 8401
Software Coding: 001D0012042400000000
Work Shop Code: WSC 63484 001 1048576
ASAM Dataset: EV_ECM20TDI01103L906012DE 004008 (VW41)
VCID: 6AD1C9128D2B216EE8-803E
Logged
seishuku
Full Member
***

Karma: +13/-0
Offline Offline

Posts: 131


« Reply #63 on: November 12, 2015, 04:02:06 PM »

Address 01: Engine (CJA)       Labels: 03L-906-022-CBE.clb
   Part No SW: 03L 906 019 HE    HW: 03L 907 309 AA
   Component: R4 2,0L EDC G000SG  4606 
   Revision: 12H14---    Serial number:               
   Coding: 0050072
   Shop #: WSC 00066 000 00000
   VCID: 75EAF8541C686D894D9-8020
Logged
tmbinc
Newbie
*

Karma: +4/-0
Offline Offline

Posts: 7


« Reply #64 on: November 14, 2015, 06:00:16 AM »

Ok, with FRF -> ODX and ODX -> BIN (using the two algorithms posted in the other thread), I was able to obtain FL_03L906018HK_3533. Now does anyone have an A2L for it?

There's some "changed" stuff in the DStgy calculation (the mask with required flags to enable AdBlue dosing), but it could just be some other functionality (I don't have a matching FR).
Logged
reset
Newbie
*

Karma: +2/-0
Offline Offline

Posts: 17


« Reply #65 on: November 18, 2015, 06:15:34 PM »

Address 01: Engine (J623-CKRA) Labels: 03L-906-012-CKR.clb
Part No SW: 03L 906 012 DE HW: 03L 907 309 S
Component and/or Version: R4 2,0L EDC H24 8401
Software Coding: 001D0012042400000000
Work Shop Code: WSC 63484 001 1048576
ASAM Dataset: EV_ECM20TDI01103L906012DE 004008 (VW41)
VCID: 6AD1C9128D2B216EE8-803E

Here's the CKRA
might not be complete though as it is an OBD (virtual) read
Logged
reset
Newbie
*

Karma: +2/-0
Offline Offline

Posts: 17


« Reply #66 on: November 18, 2015, 06:21:43 PM »

Address 01: Engine (CJA)       Labels: 03L-906-022-CBE.clb
   Part No SW: 03L 906 019 HE    HW: 03L 907 309 AA
   Component: R4 2,0L EDC G000SG  4606 
   Revision: 12H14---    Serial number:               
   Coding: 0050072
   Shop #: WSC 00066 000 00000
   VCID: 75EAF8541C686D894D9-8020


here's the CJAA (looks like 2013 golf or beetle)
Logged
reset
Newbie
*

Karma: +2/-0
Offline Offline

Posts: 17


« Reply #67 on: November 18, 2015, 06:22:18 PM »

Ok, with FRF -> ODX and ODX -> BIN (using the two algorithms posted in the other thread), I was able to obtain FL_03L906018HK_3533. Now does anyone have an A2L for it?

There's some "changed" stuff in the DStgy calculation (the mask with required flags to enable AdBlue dosing), but it could just be some other functionality (I don't have a matching FR).


Which other thread?
Logged
wannabee900
Jr. Member
**

Karma: +0/-0
Offline Offline

Posts: 42


« Reply #68 on: November 19, 2015, 02:16:51 AM »

Which other thread?
@ end of this
http://nefariousmotorsports.com/forum/index.php?topic=6583.0
Logged
seishuku
Full Member
***

Karma: +13/-0
Offline Offline

Posts: 131


« Reply #69 on: November 21, 2015, 09:05:47 AM »

here's the CJAA (looks like 2013 golf or beetle)
Awesome, thanks!

Dumb question though, mpc file = raw binary dump?
In WinOLS it looks just like a plain ROM dump, but I'm new to these modern ECUs.
Logged
aef
Hero Member
*****

Karma: +69/-46
Offline Offline

Posts: 1576


« Reply #70 on: December 27, 2015, 07:15:43 AM »

There was a stream at 32c3 which just ended where one showed and reversed it. I think the Video will ne available in some Hours.
Logged
aef
Hero Member
*****

Karma: +69/-46
Offline Offline

Posts: 1576


« Reply #71 on: December 28, 2015, 05:40:53 AM »

http://nefariousmotorsports.com/forum/index.php?topic=4401.0title=

here is the video from the talk
Logged
Cloudforce
Full Member
***

Karma: +5/-13
Offline Offline

Posts: 106


« Reply #72 on: December 28, 2015, 08:09:07 AM »

Do we have access to the slides which Daniel mentioned? Theres one interesting part which he skipped out of time boundary and i´m super interested in this Smiley
Logged
aef
Hero Member
*****

Karma: +69/-46
Offline Offline

Posts: 1576


« Reply #73 on: December 28, 2015, 08:39:56 AM »

https://events.ccc.de/congress/2015/Fahrplan/system/event_attachments/attachments/000/002/812/original/32C3_-_Dieselgate_FINAL_slides.pdf
Logged
Cloudforce
Full Member
***

Karma: +5/-13
Offline Offline

Posts: 106


« Reply #74 on: December 28, 2015, 10:51:59 AM »

Awesome, thanks alot
Logged
Pages: 1 ... 3 4 [5] 6
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.023 seconds with 16 queries. (Pretty URLs adds 0.001s, 0q)