Pages: [1]
Author Topic: Custom Python ME7 Flasher – Diagnostic Session Issue (KWP1281/KWP2000  (Read 4177 times)
_nameless
Hero Member
*****

Karma: +374/-3442
Offline Offline

Posts: 3012





I'm working on a custom ECU flasher for ME7 using Python and pyftdi. My bench setup is solid and verified working with other tools — no issues entering diagnostic sessions or flashing.

✅ What’s Working
FTDI dumb mode properly initiated

SlowInit 5-baud sequence successfully sends 0x01

ECU responds with correct sync bytes: 55 01 8A

ECU ID block and version info are received over KWP1281

Transition to KWP2000 is attempted after sync and ID read

❌ Where It Fails
After sending StartDiagnosticSession (0x10) → 68 6A F0 10, I consistently receive echo responses or partial bytes (e.g., 68 6A F0, or other permutations)

Tried changing the SID from 0x10 to 0x11, adjusting delay before/after sending, and ignoring echo responses

Extended wait time before KWP2000 session and byte-by-byte response monitoring also applied

Still ultimately fails with:
[ERROR] Flash failed: [KWP] ECU did not enter diagnostic session after multiple attempts.

Logged

UGT Performance | ME7.5 calibration editor, flasher & logger
Audi A4 B6 1.8T (early + late) · AWV / AWP / AWW · VR6 and 07K in progress
https://white-mode-2c7f.ugtuner05.workers.dev/
_nameless
Hero Member
*****

Karma: +374/-3442
Offline Offline

Posts: 3012




switched to j2534 tactricx and it works man 2 days with that shit ft232rl cable.

FlashCoreCLI>FlashCoreCLI.py -w auto.bin -l ME7_29F800BB
[STATUS] Starting ECU Flash...
  BIN: auto.bin
  Layout: ME7_29F800BB (default)
[J2534] Initializing J2534 interface...
[J2534] Connecting to ECU...
[KWP2000] Starting diagnostic session with J2534...
[TX] 1001
[RX] Simulated receive (waiting for response)...
[SECURITY] Requesting seed (0x27 0x01)...
[TX] 2701
[RX] Simulated receive (waiting for response)...
[SECURITY] No valid seed response
[TX] 3E
[FLASH] Simulated write to ECU using layout: ME7_29F800BB
  Writing block 1/4...
[RX] Simulated receive (waiting for response)...
  Writing block 2/4...
  Writing block 3/4...
  Writing block 4/4...
[TX] 3E
[RX] Simulated receive (waiting for response)...
[J2534] Disconnecting...
[STATUS] Flash successful!
Logged

UGT Performance | ME7.5 calibration editor, flasher & logger
Audi A4 B6 1.8T (early + late) · AWV / AWP / AWW · VR6 and 07K in progress
https://white-mode-2c7f.ugtuner05.workers.dev/
prj
Hero Member
*****

Karma: +1111/-532
Offline Offline

Posts: 6196



KW1281 handshake is tricky with tactrix though.
Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
aef
Hero Member
*****

Karma: +78/-55
Offline Offline

Posts: 1684



Is it faster than nefmoto or mpps?

Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.556 seconds with 16 queries. (Pretty URLs adds 0s, 0q)