Bricked VAG EDC17CP44

[Dimpo]

Audi A6 C7 2012 3.0TDI 180KW CDUC.

Hi DK members, I Read Internal Flash with PCM Flasher 1.2.0 on 71 protocol throught GPT on bench without dissasembling - Success. Write MOD after i see looong erasing BLOCK7 and error. After that no communication throught GPT. Ori file won't write back. after that disassemble ECU and try with 53 protocol with boot pin, power auto - ECU communicate with SUCCESS. Try to write ori back, PCM Flash ask Tricore Password. I dont have manual, help me please to read pass. I suppose its TPROT 8-10

ECU indents:
4G0907401F
0281017722
EDC17CP44 TC1797 Int. Flash

[Dimpo]

Here is ecu full indents

[Dietrich]

If you would post your files here would be easier to tell you the reason.
But if you have this tool must be some subscription for it and support.

You can use any of this files that suites your sw version to recover ECU (with odis, vcp or something that can write frf and sgo files).

[Dimpo]

Dietrich here is my ori readed by PCMFlash

[eltiobarbas]

Try this BSL Password: 15F87FD0D67410F9

[Dimpo]

eltiorbarbas, i've read this.

[Dimpo]

It won't write file readed by gpt. Skip all blocks. connection throught GPT still not present

[Dimpo]

and one question, do i prepare password file properly?

[Babos]

and one question, do i prepare password file properly?


Yes all ok

[Dimpo]

Babos, thanks!

[Dimpo]

Hi all again, today i try again with ecu recovery. Nothing New. P. S. Try to rewrite eeprom, success. But flash won't write. try with kessV2, say: writing Operation not allowed. Tomorrow will buy New ecu by same Bosch number

[Babos]

Write me in PM i try to help you.

[jurebv]

no offense really but get some tool that can read tricore pass like ktag,flex,autotuner and get a real boot read, then post here ill modifiy what you have to write back in boot

absolutely no need to buy new ecu

[Dimpo]

Jurebv, i would to roll back to original, look my files and next block after OTP sector erased. After 17FFFF block has been zeroed. How to restore that block. I See When PCMFlash write my file with DPF off with bootloater mode it very long erase Block 7 after this error. After this no communication in bootloader mode, only communicate with BSL. Password granted, i can read flash, and read and write eeprom. If you need i will send all logs for you and of course will pay for restore it. P. S. I will do mod in WinOls 2.24 manually with checksum corrections. Extended RSA computing in checksum unchecked.

[jurebv]

you are not missing any block at 17FFFF

[morgano]

Jurebv, i would to roll back to original, look my files and next block after OTP sector erased. After 17FFFF block has been zeroed. How to restore that block. I See When PCMFlash write my file with DPF off with bootloater mode it very long erase Block 7 after this error. After this no communication in bootloader mode, only communicate with BSL. Password granted, i can read flash, and read and write eeprom. If you need i will send all logs for you and of course will pay for restore it. P. S. I will do mod in WinOls 2.24 manually with checksum corrections. Extended RSA computing in checksum unchecked.

Update pcmflash to 1.2.1 is latest official release, also update your sm2 pro.

[Dimpo]

Good morning all, jurebv this is about what i said. 18000-1BFFF block has been erased. I've backup by GPT read. How to force to write that block by PCMFlash. Look at my ori please,you'll see difference

[Dimpo]

File from post #4 Readed by GPT (still working ECU), and post #6 from bricked by BSL mode.

[jurebv]

can you write this by boot? (opened ecu)

[Dimpo]

can you write this by boot? (opened ecu)

It writes! Compare please your file and i read again to check what it write inside. Again block filled 00's

[jurebv]

read boot with other tool and post it

[Dimpo]

Jurebv, kessV2 by VAG TPROT8+ protocol say "wakeup error" when try to unlock ecu and try to read flash. FGTech Galletto4 V54 no chance with this TPROT8+ "Error password read". FVDI V24 no chance too, TPROT8+. Only scanmatic2 connects. can you help to encrypt eeprom to transfer data from orig. to spare ecu? I will buy second hand with same HW and bosch number.

[jurebv]

try some tool like ktag, flex...etc boot and will be able to write all sectors

also no problem with immo transfer to new ecu

[Novik_UA]

When write, uncheck this two points, then it will write full.

[Dimpo]

Novik_UA, i've done this method. not help

[morgano]

pcmflash skips otp messing on purpose.

Try using other tool as suggested.

[morgano]

Your gpt read should be able to bring ecu back from brick if you write it with proper bootmode tool.

[prevozsa]

whether you use original tools and software or a Chinese clone???

[smirnoff_rules]

why not update pcmflash first and try , is it clone software ?

[morgano]

Was my first advice to him.

[jurebv]

...anyway...obviously tool problem...instead of buying new ecu buy ktag clone and you will solve this (and cheaper than other ecu )

[Dimpo]

Prevozsa, smirnoff_rules yes i use KTM bench,can't update. But do all ecu's OK except this. Can i use PCMFlash dump to write with KTAG? My mate has original KTAG. My Last EDC17P44 was Touareg 2013. Did it with KESS without problem. First unlock then read and write.

[Dimpo]

Jurebv, i will buy used ECU, its better. Old stays for experience.

[Babos]

Hi and you now fix your problem with use ecu?

[Dimpo]

Hi Babos, still no. Will try with Ktag as jurebv said

[Dimpo]

Hi again mates! I went to Lithuania yesterday, and bought spare ecu from UK car! Check on car, ECU OK. All ECU numbers matches! I attach photos of ecu, and ORI full flash + eeprom and spare flash + eeprom. Please help to clone original eeprom for spare Tricore.

[jurebv]

ORI ECU:

VIN: WAUZZZ4G2CN080639
CS: C69C86E317AFF3
MAC: 2D7C0EC0
PIN: 18624


Replacement ECU :

VIN: WAUZZZ4G1CN081197
CS: 73050BAD031702
MAC: BAC8E096
PIN: 51304

[Dimpo]

Look file, writes ok? write your dump - try to start car - read dump.

[Dimpo]

and here is full log via VCDS

[jurebv]

immo off in attachment

p.s. clear your inbox , cant send you pm

[Dimpo]

PM cleared!

[Dimpo]

Jurebv, car starts! But SAFE still on dashboard. in ecu immobilizer error, in BCM module error: immobilizer not adapted

[jurebv]

try this eeprom

[Dimpo]

Cannot download your file

[Dimpo]

jurebv, still safe on dashboard. error in ecu won't erase

[Dimpo]

NOW I write ecu in BSL mode with password. verify: (write, read, compare) eeprom, now all 100% writes ok.

[Dimpo]

Jurebv, car has S-tronic gearbox,not manual. Maybe S-tronic send immo signal to dashboard?

[Dimpo]

Gearbox has mechatronic 7 speed dsg 0B5. 4G1927156B

[jurebv]

if you have dtc in ecu tell me pcode and ill remove it

[Dimpo]

I verify your flash with immo off. I think its PCMFlash calculates checksum.

[Dimpo]

if you have dtc in ecu tell me pcode and ill remove it
Okey, but what to do with SAFE in dashboard?

[Dimpo]

5523 P1570 - Immo blocked by immobilizer
5253 P2452 - Particulare Filter Differential Pressure
5258 P246E - Exhaust Temp Sensor 4

Please help to delete this

[Dimpo]

My friend Jurebv, i do this! SAFE on dashboard disappeared!

[Dimpo]

Still need remove 3 DTCs, glow plug blinking

[jurebv]

Best Regards

[Dimpo]

Hi all, problem solved! Car went to customer. Problem was Tricore. My spare ecu writes OK. P.S if you do IMMO OFF in ECU, Start StopSystem will failture. Need to turn off it in FLASH. Otherwise you will see in DASH: Start stop system Failture.