Pages: 1 ... 25 26 [27] 28 29
Author Topic: Haldex Controllers Thinking.....  (Read 251834 times)
aef
Hero Member
*****

Karma: +69/-46
Offline Offline

Posts: 1566


« Reply #390 on: March 28, 2020, 07:34:15 AM »

what did you change on the connections to make it work?
Logged
threepot
Newbie
*

Karma: +3/-0
Offline Offline

Posts: 13


« Reply #391 on: March 28, 2020, 03:00:40 PM »

Tonight I have successfully wrote the flash from one unit onto another, by selectively erasing just the c10000 to c4FFFF section which is the actual flash data, while the JTAG bootloader lives at C00000 to C0FFFF which must not be erase. I have had some problems with Intel .Hex files, and its memory address line tags. Infineon Memtool really is not a user friendly program at all!!

Attached is the flash from a Golf GTi controller for the VAQ front E-diff, this time without the JTAG bootloader at the start. It is just the C10000 to C4FFFF.

If someone could get into this stuff, there is a serious market for a Gen 5 Haldex remap.

What would be ideal, is if someone could figure out how to do the CAN reflashing over OBD2, because doing them on the board is quite involve, and the infineon memtool will only write a flash of a .hex file, which must have all the memory address line values correct. It is not as simple as converting a .bin to a .hex file.
« Last Edit: February 11, 2021, 01:53:38 PM by threepot » Logged
Praga
Full Member
***

Karma: +4/-3
Offline Offline

Posts: 62


« Reply #392 on: March 29, 2020, 08:26:32 AM »

I looked at the E-VAQ  file. Anyone can tell me more about Tasking VX-166 ?
Logged
k0mpresd
Hero Member
*****

Karma: +146/-54
Offline Offline

Posts: 1655


« Reply #393 on: March 29, 2020, 08:52:38 AM »

What would be ideal, is if someone could figure out how to do the CAN reflashing over OBD2, because doing them on the board is quite involve, and the infineon memtool will only write a flash of a .hex file, which must have all the memory address line values correct. It is not as simple as converting a .bin to a .hex file.

someone already has. gen5 obd flashing has been available for about 1 year now.
Logged
threepot
Newbie
*

Karma: +3/-0
Offline Offline

Posts: 13


« Reply #394 on: March 30, 2020, 05:26:14 AM »

Hi k0mpresd, hope you are good, thanks again for the support a while back.

I've found 1 company that do it, but it is £600, and they need the car to do it. And there is only 1 distributor in the UK right down south.

It is priced too strong to be popular. People expect a dyno engine remap for less than that, which has a significant impact.

If it was 1/2 the price, and available mail order, it would sell 30 times as much. It's a no brainier really.

I noticed your post earlier about trying to tweak the pump PMW, and your label file shows its a Gen 5.

This must mean you are dumping and writing them? How? By OBD or via bootmode?

I have access to a 4wd rolling road, so I could do some actual testing if required.
Logged
k0mpresd
Hero Member
*****

Karma: +146/-54
Offline Offline

Posts: 1655


« Reply #395 on: March 30, 2020, 06:02:52 AM »

This must mean you are dumping and writing them? How? By OBD or via bootmode?

flashed via obd.  Smiley
Logged
threepot
Newbie
*

Karma: +3/-0
Offline Offline

Posts: 13


« Reply #396 on: March 30, 2020, 06:34:51 AM »

Are you using an off the shelf tool or something you've made yourself?
Logged
Praga
Full Member
***

Karma: +4/-3
Offline Offline

Posts: 62


« Reply #397 on: March 31, 2020, 05:11:59 AM »

Are you using an off the shelf tool or something you've made yourself?

I know someone working on a Gen 5 tool. But its not ready for release yet.

I agree that the OBD solution for Gen 5 Haldex tune is too expensive...
Logged
k0mpresd
Hero Member
*****

Karma: +146/-54
Offline Offline

Posts: 1655


« Reply #398 on: March 31, 2020, 07:51:37 AM »

Are you using an off the shelf tool or something you've made yourself?

not sure i would consider it off the shelf but it is a tool that can be purchased.
Logged
Praga
Full Member
***

Karma: +4/-3
Offline Offline

Posts: 62


« Reply #399 on: March 31, 2020, 10:08:28 AM »

not sure i would consider it off the shelf but it is a tool that can be purchased.

Do tell...
Logged
threepot
Newbie
*

Karma: +3/-0
Offline Offline

Posts: 13


« Reply #400 on: March 31, 2020, 10:10:05 AM »

Do these guys sell it?

http://reflecttuning.com/
Logged
lefedor
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 7


WWW
« Reply #401 on: April 09, 2021, 05:59:12 AM »

it seems to be a much more repeatable bootmode with only ground connected.

gen4 diagram. tx/rx are on backside.

http://www.filedropper.com/bootgen4

Hello, can't open link, can You please re-share?
Logged

IOT hardware/software developer, ECU repair engineer, (En/Ru/De).
LogitechFX
Newbie
*

Karma: +0/-1
Offline Offline

Posts: 1


« Reply #402 on: November 05, 2021, 11:13:03 AM »

Hey!
Did you manage to read 4Gen via CAN bus?
Can anyone have a firmware from Skoda Yeti 0br907554a?
Logged
lefedor
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 7


WWW
« Reply #403 on: December 02, 2021, 03:22:59 AM »

Hello. I want be part of the Gen4/Gen5 readers club ).
Gen5 readout: 0AY907554-F upgraded to -M.
Logged

IOT hardware/software developer, ECU repair engineer, (En/Ru/De).
d3irb
Full Member
***

Karma: +131/-1
Offline Offline

Posts: 185


« Reply #404 on: December 22, 2021, 02:49:08 PM »

On the Gen5 controller the checksum is just an Add16. In order to read/write the newer controllers you need to write a loader or vr_read. I can help if someone wants to upload a G5 full read so I can solve the seed/key.

Just saw this post and wanted to comment, in this case by doing things blind you are making things hard for yourself because all of this is already in FRF/ODX Smiley

Flashing these Gen5 modules over OBD is trivial, there is no protection whatsoever (no signatures, no encryption, nothing), and it's bog standard UDS flashing. Convert the FRF to ODX and it's all right there - seed/key is just SA2 which is in the ODX, and the OEM flash driver / loader is in the ODX as well (DRIVER). There is also a CRC32 sent over UDS but it's bog standard. If you want to do full read over OBD you could write your own custom Driver to do so as well as is done for DSG OBD read.

The hard part is blindly finding maps, which I am working through but am interested in if anyone else has made progress. I am working forwards from the UDS handlers -> named RAM variables -> methods -> maps, but I know other folks are better at things like blind eyeballing calibrations instead of trying to reverse them.
Logged
Pages: 1 ... 25 26 [27] 28 29
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.023 seconds with 17 queries. (Pretty URLs adds 0s, 0q)