NefMoto

So I can connect and read my ECU info but i can not do the full read. I'm unsure if my car has ever been flashed, so it might be locked, but how can i tell? Is it true i can flash with a stock ecu/map file even though i cant read the ecu? If i can write to the ECU, can i or should i go to a higher revision?

Validated FTDI device is in dumb mode.
Disconnected
Connecting...
Starting slow init connection.
Connecting to address 0x01.
Slow init succeeded.
Switching to KWP2000 session.
Connected
Disabling Windows sleep mode.
Reading all ECU info.
Starting diagnostic session.
Unable to properly start diagnostic session, attempting to continue with current undefined session.
Negotiating communication timings.
Successfully changed to new communication timings.
0% complete.
20% complete.
40% complete.
60% complete.
80% complete.
100% complete.
Read 5 ECU info entries:
   0x92, System Supplier ECU Hardware Number: 0261207991
   0x94, System Supplier ECU Software Number: 1037368378
   0x91, Vehicle Manufacturer ECU Hardware Number: 0x0D, 8E0907560   , 0xFF
   0x9B, Calibration Date: 8E0910560A  , 0020, 0x03001E1F, 0x07121B78, 0x17F5, 4.2L V8/5V     ,  G   
   0x9C, Calibration Equiment Software Number: 0x00000000
Restoring Windows sleep mode.


Reading ECU flash memory.
ECU reports programming session preconditions have been met.
Negotiating communication timings.
Successfully changed to new communication timings.
Requesting security access.
Security access granted.
Starting diagnostic session.
Successfully started diagnostic session.
Negotiating communication timings.
Successfully changed to new communication timings.
Requesting security access.
Security access granted.
Validating flash memory starts at 0x00800000 and ends at 0x00900000.
Validation failed, ECU reports RequestUpload service is not supported. RequestUpload may have been disabled by aftermarket engine software.
Memory layout validation failed.
Starting to read data block.
Requesting upload from ECU for address range 0x00800000 to 0x00803FFF.
Request upload from ECU failed, ECU reports service is not supported. Request upload may have been disabled by aftermarket engine software.
Reading ECU flash memory failed. Trying to force ECU to recognize read operation is complete.
Finished forcing ECU to recognize that failed read operation is complete.
Reading ECU flash memory failed.
100% complete.
Restoring Windows sleep mode.

If you can't read, it is likely not stock.

Not if the ECU has a riser card where the flash is


In general, no.

There are other reasons to use a different revision though, not worth going into until you are ready.

How can i tell if i have a riser card in it?

If i do have a riser card, even a "pro tune" wont work either correct?

My ultimate goal is to raise the threshold for O2 sensor so i dont have p0431, p0421 codes.

Inspect the PCB :P


Find a stock ecu or somebody who can desolder and replace the riser with a blank (or stock) flash.

Thinking about it now, i doubt someone physical modified my ecu. I pulled my engine this summer, and the ecu did not look like it was removed. the Chasity belt was still there as far as i can tell. wish i took more pictures to confirm it

You'll have to open the ECU to bootmode it anyway, even if there isn't a riser...

Can you explain more please? I thought boodload mode was for bricked ecu only? At the moment I'm not set up for bench tuning, and don't have a spare harness or cable.

If I can't tune it without bootmode, will buying a pro tune and cable from jhm work?

These ecus aren't always readable with nefmoto. Try selecting 38400 baud after you connect. If that doesn't work, get an MPPS cable. That WILL work.

Yup, nef didn't work for my 8E0909559E either but MPPS works great.

I was not able to dump the Eeprom though; I believe that still requires Boot mode?

ERRR ignore everything I said. It only applies to B5 S4s.

Didn't read the topic carefully.

Daz knows what he's talking about, listen to him instead.