NefMoto

I'm trying to flash my 2000 S4 A-box with an M-box tune for the Bosch MAF and delete rear O2/EGTs. I had the checksums corrected, and it checks out fine in ME7Check. When I go to Check If Flash Matches, it says it doesn't. Here is the log I get when try to flash it to the ECU.

Requesting flash memory erase for address range 0x00800000 to 0x00803FFF.
Successfully erased flash memory.
Requesting download to ECU for address range 0x00800000 to 0x00803FFF.
Request download to ECU succeeded.
Starting data transfer.
Data transfer failed.
Requesting data transfer exit.
Failed to exit data transfer.
Failed to properly exit flash transfer. Transfering invalid data to force flashing to fail.
Starting data transfer.
Data transfer failed.
Requesting data transfer exit.
Failed to exit data transfer.
100% complete.
Writing ECU flash memory failed.
Restoring Windows sleep mode.
Requesting data transfer exit.
Failed to exit data transfer.


I had loaded a few other BIN's as well, and tried Check If Flash Matches, and it fails on every single file except for the stock file that I read from the ECU. Any ideas? Thanks

"Check if flash matches" tells you if the file you want to flash matches what is on your ECU. Unless they files are the same, it will say it doesn't match.

I'm not sure why the data transfer is failing when writing though. It is possible that your car battery is low or you have a bad connection between your cable and OBD port.

Can you post the log file for me to look at? Under the File menu in NefMoto you can get access to the log file. The log file contains more info about what was happening.

Now that you mention it, it had a low voltage code after it failed. The gauge read well over 12v so I assumed it was good to go...I'll stick a charger on it and try again. Thanks

Still no beans with the charger. Log file attached.

This is really odd. I can guarantee the NefMoto software works with flashing the A-Box and M-Box, cause I have tested those extensively. The strange part though is the flashing process always seems to fail when sending the second DataTransfer message.

Can you try flashing using a the slower baud rate of 10400?
Are you sure the ECU does not have an encryption socket or some other tuner protection inside it?

It's possible, I was told the car was stock aside fr om being lowered but it could be chipped. Is the easiest way to find out to put a boost gauge on it?

To check if the ECU is chipped, you can open the ECU to look for a custom chip, or you can use a boost gauge to look for boost above 8 psi. If the ECU was flashed, you won't see a custom chip on the ECU circuit board.

Did you try connecting with fast init and slow init?
Did you try connecting with 10400 baud instead of maximum baud?

I'll bet you it's chipped, or a tuned ECU in stock mode.

If the ECU ever had a trial flash on it from APR or REVO that can also screw things up.

Tried fast/slow and 10400 baud. Same result.

Is there any way to forcefully overwrite whatever is on the chip? Or am I at a point where I need a new chip to write to?

If there is a physical encryption socket in the ECU, the only way to get around that is to remove it. You would need to open up the ECU to see if it is there.

From the error log you posted previously, it appears as though programming the flash chip is failing. It doesn't appear as though programming is prevented, just that it fails, which leads me to guess you may have an encryption socket.

Alright, I'll pop it open the next time I get a chance and report back. Thanks

Haven't had time to look at this yet, but a quick question - if it does have an encryption socket install, can I remove it and put the chip into the board, then flash it? Or will I need a new chip before doing that? Thanks

You would need a non-encrypting socket to put the 29F800 chip into, or you would need to solder the 29F800 chip back onto your ECU.

Ok - but it doesn't matter what is currently on the chip, I'll still be able to flash over it? Thanks again

Yes.

Ok, finally pulled the ECU. The ECU has been socketed, and the chip that it is there has a paper tag on the top with some handwriting on it. I still can't flash over the tune that's in there, but I can read the file perfectly fine. What's the easiest way to get around this at this point?

Obviously the ECU got chipped with aftermaket rom. It is probably not writable but I might be wrong. Any chance you can get socket version of whatever eprom chip you are supposed to be in there and just plug it in and then flash it?

AFAIK you can remove and plug new eprom in after the ECU boots itself up and the flash the new virgin chip via obd.

Yeah I was wondering if I could just source a stock/blank chip to pop in and flash.

http://www.ebay.com/itm/AM29F800BB-29F800-29F800BB-Flash-PSOP44-SOP44-/260937494878?pt=LH_DefaultDomain_0&hash=item3cc116315e

If I buy this, then pop it in the socket, I should be good to go to flash it, correct?

Hello! I have the same problem. It fails at the same stage pf writing. I opened the ecu up, but didnt find any aftermarket chips. I have a 2001 S4 with m box. What could this be?