Pages: 1 2 3 [4] 5 6 7
Author Topic: How to run the 551K/Q RS4 software on a 551M S4 ECU  (Read 63968 times)
s5fourdoor
Hero Member
*****

Karma: +33/-3
Offline Offline

Posts: 617


« Reply #45 on: August 20, 2012, 12:53:26 PM »

Shouldn't "10711" and "05711" be stored in the VARDEF tables of both the K-box and Q-box respectively?  Can we search the assembly code for this value?  It should be a 5-digit integer, or?
« Last Edit: August 20, 2012, 12:57:41 PM by nehalem » Logged
RS4boost
Full Member
***

Karma: +46/-0
Offline Offline

Posts: 125


« Reply #46 on: August 20, 2012, 02:19:24 PM »

Shouldn't "10711" and "05711" be stored in the VARDEF tables of both the K-box and Q-box respectively?  Can we search the assembly code for this value?  It should be a 5-digit integer, or?

VARDEF is located in a 16bit LoHi value at hex 155D6.
D7 29 for dec 10711 in the 551K
4F 16 for dec 5711 in the 551Q


Logged

s5fourdoor
Hero Member
*****

Karma: +33/-3
Offline Offline

Posts: 617


« Reply #47 on: August 20, 2012, 02:40:01 PM »

So just change this to 06611 and retry?  What will occur because ASR has been disabled by VARDEF?

For the Tuner-Pro users out there:
Logged
RS4boost
Full Member
***

Karma: +46/-0
Offline Offline

Posts: 125


« Reply #48 on: August 20, 2012, 02:59:18 PM »

So just change this to 06611 and retry?  What will occur because ASR has been disabled by VARDEF?

For the Tuner-Pro users out there:


Yes, you are right.
Please change VARDEF in your file to 6611 and flash it back to the ECU.
With this doing I believe that we can switch off the expected ESP signal.
Nothing happens with your car, because you have no ASR, but I hope the DTC will disappear.
We know now that we do not break anything by flashing a 551K/Q into a 551M or similar.

The second possibility is to change only the ASR/ESP digit in the VARDEF value of the original RS4 file.

That means 10611 for the 551K or 5611 for the 551Q.

btw
the_crazy_test.bin is the right name...  Grin Grin Grin
« Last Edit: August 20, 2012, 03:34:07 PM by RS4boost » Logged

s5fourdoor
Hero Member
*****

Karma: +33/-3
Offline Offline

Posts: 617


« Reply #49 on: August 20, 2012, 09:23:30 PM »

Coded VARDEF to 06611.  Checksummed, flashed.  Cleared codes.  Started three times, same-story.
Read the codes.  Here are the DTC's:
      <DTC>1536  <Status>100     P1536:   Intake Camshaft Contr.Circ.,Bank2 Open
      <DTC>4200  <Status>100     P4200:   Can't find anything.  (?)
      <DTC>16     <Status>100     P0016:   Can't find anything. (?)
      <DTC>1048  <Status>100     P1048:   Can't find anything. (?)
      <DTC>1042  <Status>100     P1042:   P1042 Injector 2, supply voltage - circuit malfunction
      <DTC>1299  <Status>104     P1299:   Fuel metering solenoid - circuit malfunction

Douglas Adams would be proud of me!  Now to lookup what this is and how to fix this.

Should I perhaps try recoding the VARDEF to 05611 for the q-box?
I would try this but isn't there a specialty procedure to login and set this?
<looking stuff up>   yes found it:   http://s4wiki.com/wiki/Engine_recode

I'll go test 05611 and use what's above.  Let me first check the DTC error overlap probabilities above.
« Last Edit: August 20, 2012, 09:30:44 PM by nehalem » Logged
s5fourdoor
Hero Member
*****

Karma: +33/-3
Offline Offline

Posts: 617


« Reply #50 on: August 20, 2012, 10:31:52 PM »

Recoded VARDEF to be 05611.  Flashed ROM.  Cleared codes.  Logged in and changed coding to 05611.
Started 3 times, same story.  BEWARE:  Must use VAGCOM to clear codes after this.  Car can't be recoded to 06611 after it's been set to 05611 and failed.  If you don't use VAGCOM to clear codes, when you return to Nefmoto you will get a security write access error.  If you clear the codes using VAGCOM, then you can reflash to old binary, then after you clear the codes again, you can recode to 06611 like original.  BE CAREFUL OF THIS.

Anyways, I made the mistake of not taking VAGCOM output for my 06611 VARDEF previous post earlier, but the codes were right.  Here's my 05611 VARDEF attempt, and of course the warning from the previous paragraph!

Control Module Part Number: 8D0 907 551 Q
  Component and/or Version: 2.7l V6/5VT     G   0001
           Software Coding: 05611
            Work Shop Code: WSC 87119 
           Additional Info: XXXXXXXXXXXXXXXXX     XXXXXXXXXXXXXX
                      VCID: 3871D1E91848AA3
6 Faults Found:

18058 - Powertrain Data Bus
            P1650 - 35-00 - Missing Message from Instrument Cluster
17476 - Intake Air Switch-Over Valve (N335)
            P1068 - 35-00 - Open Circuit
17933 - Camshaft Timing Adj. Bank1 (N205)
            P1525 - 35-00 - Electrical Malfunction
17841 - Secondary Air Pump Relay (J299)
            P1433 - 35-00 - Open Circuit
17840 - Secondary Air Injection Solenoid Valve (N112)
            P1432 - 35-00 - Open Circuit
17978 - Engine Start Blocked by Immobilizer
            P1570 - 35-00 -

Readiness: 0110 0000
Logged
prj
Hero Member
*****

Karma: +1059/-465
Offline Offline

Posts: 5957


« Reply #51 on: August 20, 2012, 11:17:31 PM »

The reason your car dies is immo!

De-immo your EEPROM.

N205 worries me. Everything else can be safely coded out.
Logged

PM's will not be answered, so don't even try.
Log your car properly.
s5fourdoor
Hero Member
*****

Karma: +33/-3
Offline Offline

Posts: 617


« Reply #52 on: August 20, 2012, 11:24:13 PM »

How could my car be IMMO-ed?  I have a running M-box on my A-box car - which had no IMMO to begin with...
Logged
matchew
Hero Member
*****

Karma: +47/-22
Offline Offline

Posts: 503


« Reply #53 on: August 20, 2012, 11:57:42 PM »

Because neither the M or A box has an immo routine in flash, but RS4 files do.

The eeprom of both boxes will be set the same as far as immo control is concerned.
Logged
s5fourdoor
Hero Member
*****

Karma: +33/-3
Offline Offline

Posts: 617


« Reply #54 on: August 21, 2012, 12:19:03 AM »

Ok.   That's the end of the line for me then, i don't have a bench flasher yet...
Logged
matchew
Hero Member
*****

Karma: +47/-22
Offline Offline

Posts: 503


« Reply #55 on: August 21, 2012, 12:32:17 AM »

What tool are you using to flash the ECU?
Logged
s5fourdoor
Hero Member
*****

Karma: +33/-3
Offline Offline

Posts: 617


« Reply #56 on: August 21, 2012, 08:01:45 AM »

Nefmoto standard with China blue.  Also have a vagcom and also galletto, but haven't yet built a bench harness.  That's fine, I'll work on building one so i can 95040 me7 write, this is what i need to bypass immo right?
Logged
s5fourdoor
Hero Member
*****

Karma: +33/-3
Offline Offline

Posts: 617


« Reply #57 on: August 21, 2012, 08:04:14 AM »

The reason your car dies is immo!

De-immo your EEPROM.

N205 worries me. Everything else can be safely coded out.

Does this mean my car has a cam sensor problem?   Def dont get this on my regular setup ever....
Logged
prj
Hero Member
*****

Karma: +1059/-465
Offline Offline

Posts: 5957


« Reply #58 on: August 21, 2012, 08:07:39 AM »

I don't know. Log it and find out.
Seems more like it can't access the bank 1 tensioner for some reason.

Maybe a good idea to study the pinouts and part numbers very carefully.
Logged

PM's will not be answered, so don't even try.
Log your car properly.
s5fourdoor
Hero Member
*****

Karma: +33/-3
Offline Offline

Posts: 617


« Reply #59 on: August 21, 2012, 10:04:41 AM »

I don't know. Log it and find out.
Seems more like it can't access the bank 1 tensioner for some reason.

Maybe a good idea to study the pinouts and part numbers very carefully.

You had a good comment about this on your "beginner's guide" response.  I found it humorous. OK, point taken.  There's noticeably more work to be done here.
[tags @JibberJive]

However, where can i find the actual RS4 DTC codes?  I don't think I have any cam-tensioner issues at all.  The car runs fine, and from what I've read, all VAG V6 30V motors use the exact same 4-tensioners for each motor, albeit a passat upto a rs4.

Also, P1650, this is a code I also get on my A-box car, pre-01.5+ S4 with aluminum uprights.  It has something to do with my instrument cluster not recognizing something.  This was the first thing I learned how to do when I was new on this forum:  code out this particular DTC.  No suprise to me that it's back, but it's effectively harmless.  It doesn't even show a CEL, just sits in the DTC-memory-banks.
« Last Edit: August 21, 2012, 11:40:32 AM by nehalem » Logged
Pages: 1 2 3 [4] 5 6 7
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.024 seconds with 18 queries. (Pretty URLs adds 0.001s, 0q)