ejg3855
Full Member
Karma: +6/-0
 Offline
Posts: 123
|
 |
« on: September 19, 2011, 10:43:42 AM »
|
|
|
Its my understanding that the Haldex Controllers on 04 R32's and Mk1 TT's are controlled by a magic box.
Many tuners sell a "Blue" or "Orange" box that applies torque at different rates.
Its also my understanding that the only changes from stock to blue to orange is the code that is written to the controller. This was conjured up from a thread we had on vortex.
I was wondering if anyone has toyed with this idea or the box to do any learning?
Thanks!
|
|
|
|
|
Logged
|
|
|
|
|
Gonzo
|
|
« Reply #1 on: September 19, 2011, 06:18:25 PM »
|
|
|
A good start would be tearing apart the Haldex controllers and posting some pics if you want any development to happen.
|
|
|
|
|
Logged
|
|
|
|
ejg3855
Full Member
Karma: +6/-0
Offline
Posts: 123
|
|
« Reply #2 on: September 19, 2011, 06:33:36 PM »
|
|
|
A good start would be tearing apart the Haldex controllers and posting some pics if you want any development to happen.
yea I need to get a spare, I was more curious if anyone has done anything. |
|
|
|
|
Logged
|
|
|
|
|
Gonzo
|
|
« Reply #3 on: September 19, 2011, 07:19:06 PM »
|
|
|
Well I'm very interested so pics would be a good idea. From there we can see if there is any flash chips that we can identify and then proceed to read said chip and figure out what's in there  |
|
|
|
|
Logged
|
|
|
|
|
vwaudiguy
|
|
« Reply #4 on: September 19, 2011, 08:55:56 PM »
|
|
|
I have a few stock controllers, and an orange one that is on my car. I'll dig them out and post some pictures/chip numbers soon.
|
|
|
|
|
Logged
|
"If you have a chinese turbo, that you are worried is going to blow up when you floor it, then LOL."
|
|
|
|
vwaudiguy
|
|
« Reply #5 on: September 19, 2011, 09:10:39 PM »
|
|
|
|
|
|
|
|
Logged
|
"If you have a chinese turbo, that you are worried is going to blow up when you floor it, then LOL."
|
|
|
ejg3855
Full Member
Karma: +6/-0
Offline
Posts: 123
|
|
« Reply #6 on: October 13, 2011, 09:31:36 AM »
|
|
|
Still haven't acquired a spare controller, but just read on another forum that it is infact a flash the only difference from the Stock->Blue->Orange.
|
|
|
|
|
Logged
|
|
|
|
|
vwaudiguy
|
|
« Reply #7 on: October 13, 2011, 11:16:35 AM »
|
|
|
I remember looking at one recently and the board with the ic's was buried in this clear gel. Like a VW/Audi abs unit if you've ever seen those on the inside.
|
|
|
|
|
Logged
|
"If you have a chinese turbo, that you are worried is going to blow up when you floor it, then LOL."
|
|
|
|
Gonzo
|
|
« Reply #8 on: October 14, 2011, 07:18:21 PM »
|
|
|
Clear gel? You mean epoxy?
|
|
|
|
|
Logged
|
|
|
|
|
vwaudiguy
|
|
« Reply #9 on: October 14, 2011, 10:08:46 PM »
|
|
|
No more like silicon boogers  |
|
|
|
|
Logged
|
"If you have a chinese turbo, that you are worried is going to blow up when you floor it, then LOL."
|
|
|
|
vwaudiguy
|
|
« Reply #10 on: October 17, 2011, 04:17:58 PM »
|
|
|
Ok...here are some pictures...This is a stock controller. The one I remember seeing the gooey stuff on was a blue one (protection?). It has a can high and low along with a k-line going to it through the large plug on the left of the picture. It's address 22 to access it with VCDS though the OBD port.
|
|
|
|
« Last Edit: October 17, 2011, 04:21:19 PM by vwaudiguy »
|
Logged
|
"If you have a chinese turbo, that you are worried is going to blow up when you floor it, then LOL."
|
|
|
ejg3855
Full Member
Karma: +6/-0
Offline
Posts: 123
|
|
« Reply #11 on: October 20, 2011, 05:46:32 AM »
|
|
|
Haldex Pinouts:
T8 - Socket between car and control unit
T8/1, Red = Ign.
T8/2, Black = Gnd.
T8/3, White = BLS (brake light switch)
T8/4, Blue = HBLS (hand brake light switch)
T8/5, Brown = K-line (diagnostics)
T8/7, Blue/Grey = CAN low
T8/8, Blue/Orange = CAN high
T2 - Socket between control unit and feeder pump(pwm switched voltage)
T2/1, Yellow = Pump 1
T2/2, Yellow/Black = Pump 2
|
|
|
|
|
Logged
|
|
|
|
ejg3855
Full Member
Karma: +6/-0
Offline
Posts: 123
|
|
« Reply #12 on: October 20, 2011, 05:58:29 AM »
|
|
|
So if it can be accessed through the CAN port would that mean its flashable from OBD ? or is that still unknown.
I am trying to find the chip on that board and seem to be failing.
|
|
|
|
|
Logged
|
|
|
|
ejg3855
Full Member
Karma: +6/-0
Offline
Posts: 123
|
|
« Reply #13 on: October 20, 2011, 06:33:20 AM »
|
|
|
They are physically the exact same only the software is different. The haldex sits on the cars electronic management bus (CAN BUS? Or is that the latest one, I'm too lazy to look it up.) The software on the haldex monitors certain things on the bus broadcasted by the ecu/sensors such as brake on/of, parking brake on/off, and some other things. My friend and I who are "in the know" were talking about it and some one took the software and either decompiled it (my friends theory) or simply edited the binary file with a hex editor (my theory.) Either way they modified the software by doing stuff like taking out the part where it stops engaging the pump during braking, made it take lower TPS values (or TPS values period) into consideration, steering angle sensors and other things..) How did they get the "software" you asked? Well as I pointed out in that post I linked to above I found documentation on haldex's site (which is no longer there) which says the haldex is "powered" by a Infineon C167CS microcontroller. With the info here: http://www.phytec.com/pdf/datasheets/C167CS_DS.pdfOne can make a jtag cable for these microcontrollers and then use the jtag to download the binary image stored on NVRAM. You could also use the same jtag device to upload the modified version. Also it might be possible to just dump/write contents of memory over the CAN bus, so you might not even need a jtag device to do this. 2nd page is mine! Edit: The datasheet I listed even has the microcontroller as accepting CAN bus lines, that is sweet! http://www.infineon.com/dgdl/P1604811_flash_on_the_fly.pdf?location=Products.Mi%20%20crocontrollers.16-Bit.DOCUMENTS.P1604811_flash_on_the_fly.pdf&folderId=db3a304412b407950112b409d4b00386&fileId=db3a304412b407950112b409fa9503ffVortex Data Mining. |
|
|
|
« Last Edit: October 20, 2011, 06:45:38 AM by ejg3855 »
|
Logged
|
|
|
|
|
vwaudiguy
|
|
« Reply #14 on: October 20, 2011, 07:40:23 AM »
|
|
|
Nice find...My thoughts are why would companies like HPA (are there any other that offer this upgrade?) send a whole new controller without asking for a core if they could flash an existing one? I think this would bring their profits up a bit?
|
|
|
|
« Last Edit: October 20, 2011, 07:44:34 AM by vwaudiguy »
|
Logged
|
"If you have a chinese turbo, that you are worried is going to blow up when you floor it, then LOL."
|
|
|
|
