|
aef
|
 |
« Reply #390 on: March 28, 2020, 07:34:15 AM »
|
|
|
what did you change on the connections to make it work?
|
|
|
|
|
Logged
|
|
|
|
threepot
Newbie
Karma: +4/-0
 Offline
Posts: 15
|
|
« Reply #391 on: March 28, 2020, 03:00:40 PM »
|
|
|
Tonight I have successfully wrote the flash from one unit onto another, by selectively erasing just the c10000 to c4FFFF section which is the actual flash data, while the JTAG bootloader lives at C00000 to C0FFFF which must not be erase. I have had some problems with Intel .Hex files, and its memory address line tags. Infineon Memtool really is not a user friendly program at all!!
Attached is the flash from a Golf GTi controller for the VAQ front E-diff, this time without the JTAG bootloader at the start. It is just the C10000 to C4FFFF.
If someone could get into this stuff, there is a serious market for a Gen 5 Haldex remap.
What would be ideal, is if someone could figure out how to do the CAN reflashing over OBD2, because doing them on the board is quite involve, and the infineon memtool will only write a flash of a .hex file, which must have all the memory address line values correct. It is not as simple as converting a .bin to a .hex file.
|
|
|
|
« Last Edit: February 11, 2021, 01:53:38 PM by threepot »
|
Logged
|
|
|
|
Praga
Full Member
Karma: +4/-3
Offline
Posts: 62
|
|
« Reply #392 on: March 29, 2020, 08:26:32 AM »
|
|
|
I looked at the E-VAQ file. Anyone can tell me more about Tasking VX-166 ?
|
|
|
|
|
Logged
|
|
|
|
|
k0mpresd
|
|
« Reply #393 on: March 29, 2020, 08:52:38 AM »
|
|
|
What would be ideal, is if someone could figure out how to do the CAN reflashing over OBD2, because doing them on the board is quite involve, and the infineon memtool will only write a flash of a .hex file, which must have all the memory address line values correct. It is not as simple as converting a .bin to a .hex file.
someone already has. gen5 obd flashing has been available for about 1 year now. |
|
|
|
|
Logged
|
|
|
|
threepot
Newbie
Karma: +4/-0
Offline
Posts: 15
|
|
« Reply #394 on: March 30, 2020, 05:26:14 AM »
|
|
|
Hi k0mpresd, hope you are good, thanks again for the support a while back.
I've found 1 company that do it, but it is £600, and they need the car to do it. And there is only 1 distributor in the UK right down south.
It is priced too strong to be popular. People expect a dyno engine remap for less than that, which has a significant impact.
If it was 1/2 the price, and available mail order, it would sell 30 times as much. It's a no brainier really.
I noticed your post earlier about trying to tweak the pump PMW, and your label file shows its a Gen 5.
This must mean you are dumping and writing them? How? By OBD or via bootmode?
I have access to a 4wd rolling road, so I could do some actual testing if required.
|
|
|
|
|
Logged
|
|
|
|
|
k0mpresd
|
|
« Reply #395 on: March 30, 2020, 06:02:52 AM »
|
|
|
This must mean you are dumping and writing them? How? By OBD or via bootmode?
flashed via obd.  |
|
|
|
|
Logged
|
|
|
|
threepot
Newbie
Karma: +4/-0
Offline
Posts: 15
|
|
« Reply #396 on: March 30, 2020, 06:34:51 AM »
|
|
|
Are you using an off the shelf tool or something you've made yourself?
|
|
|
|
|
Logged
|
|
|
|
Praga
Full Member
Karma: +4/-3
Offline
Posts: 62
|
|
« Reply #397 on: March 31, 2020, 05:11:59 AM »
|
|
|
Are you using an off the shelf tool or something you've made yourself?
I know someone working on a Gen 5 tool. But its not ready for release yet. I agree that the OBD solution for Gen 5 Haldex tune is too expensive... |
|
|
|
|
Logged
|
|
|
|
|
k0mpresd
|
|
« Reply #398 on: March 31, 2020, 07:51:37 AM »
|
|
|
Are you using an off the shelf tool or something you've made yourself?
not sure i would consider it off the shelf but it is a tool that can be purchased. |
|
|
|
|
Logged
|
|
|
|
Praga
Full Member
Karma: +4/-3
Offline
Posts: 62
|
|
« Reply #399 on: March 31, 2020, 10:08:28 AM »
|
|
|
not sure i would consider it off the shelf but it is a tool that can be purchased.
Do tell... |
|
|
|
|
Logged
|
|
|
|
threepot
Newbie
Karma: +4/-0
Offline
Posts: 15
|
|
« Reply #400 on: March 31, 2020, 10:10:05 AM »
|
|
|
|
|
|
|
|
Logged
|
|
|
|
lefedor
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #401 on: April 09, 2021, 05:59:12 AM »
|
|
|
Hello, can't open link, can You please re-share? |
|
|
|
|
Logged
|
IOT hardware/software developer, ECU repair engineer, (En/Ru/De).
|
|
|
LogitechFX
Newbie
Karma: +0/-1
Offline
Posts: 1
|
|
« Reply #402 on: November 05, 2021, 11:13:03 AM »
|
|
|
Hey!
Did you manage to read 4Gen via CAN bus?
Can anyone have a firmware from Skoda Yeti 0br907554a?
|
|
|
|
|
Logged
|
|
|
|
lefedor
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #403 on: December 02, 2021, 03:22:59 AM »
|
|
|
Hello. I want be part of the Gen4/Gen5 readers club ).
Gen5 readout: 0AY907554-F upgraded to -M.
|
|
|
|
|
Logged
|
IOT hardware/software developer, ECU repair engineer, (En/Ru/De).
|
|
|
d3irb
Full Member
Karma: +134/-1
Offline
Posts: 195
|
|
« Reply #404 on: December 22, 2021, 02:49:08 PM »
|
|
|
On the Gen5 controller the checksum is just an Add16. In order to read/write the newer controllers you need to write a loader or vr_read. I can help if someone wants to upload a G5 full read so I can solve the seed/key.
Just saw this post and wanted to comment, in this case by doing things blind you are making things hard for yourself because all of this is already in FRF/ODX Flashing these Gen5 modules over OBD is trivial, there is no protection whatsoever (no signatures, no encryption, nothing), and it's bog standard UDS flashing. Convert the FRF to ODX and it's all right there - seed/key is just SA2 which is in the ODX, and the OEM flash driver / loader is in the ODX as well (DRIVER). There is also a CRC32 sent over UDS but it's bog standard. If you want to do full read over OBD you could write your own custom Driver to do so as well as is done for DSG OBD read. The hard part is blindly finding maps, which I am working through but am interested in if anyone else has made progress. I am working forwards from the UDS handlers -> named RAM variables -> methods -> maps, but I know other folks are better at things like blind eyeballing calibrations instead of trying to reverse them. |
|
|
|
|
Logged
|
|
|
|
|
