NefMoto

i am checking the original file and it passes, then when i alter even only  the rev limiter it fails to correct the sums, this is my second car (i have one s3 - and i had no problems for tunning almost everything on her) now i am trying to do it to my brothers car, and i fail checksumming.

Please read the stickies.

http://nefariousmotorsports.com/forum/index.php?topic=3346.0title=

I've read it, and tryed to checksum in cmd, and with ME7Correction (V160306) it just crashes even if i alter only Nmax table or any table alone it says :

because file bad
size not good

Is it bad because of my tune? Or because it didnt download correctly. I tuned my other car  with no problem at all. I really cant figure it out why it is bigger, how to correct file size

In the future please put the PN in the topic. I have changed it for you.

Also post output in plain text not a screen shot so I can copy/paste data from it.

It could be this file is not supported by me7sum. Do you have an ORI i can test with?

yep i tried ori file - it passes checksums i am sory for the screenshot. I dont know what PN stands for...sory for that :)
here is the ori file.
and here is the text
I am really gratefull for your answers


Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.

C:\Users\Aleksander>me7sum ivchos3stage1.bin ivchos3stage1.bin
ME7Sum (v1.0.5) [Management tool for Bosch ME7.x firmwares]
Inspiration from Andy Whittaker's tools and information.
Written by 360trev and nyet [BSD License Open Source].

Attempting to open firmware file 'ivchos3stage1.bin'

Step #1: Reading ROM info ..
 Searching for EPK signature...OK
 Searching for ECUID table...OK
 EPK         : '42/1/ME7.5/5/4018.20//F19x6/Dst02o/101299/'
 Part Number : '8L0906018N  '
 Engine ID   : '1.8L R4/5VT         '
 SW Version  : '0002'
 HW Number   : '0261206796'
 SW Number   : '1037354092'

Step #2: Reading ROMSYS ..
 Startup section: word[0x008000]+word[0x00FFFE]
 @08038 Add=0x0000FC75 CalcAdd=0x0000FC75  ADD OK
 All param page: word[0x010000]+word[0x01FFFE]
 @01ab0c Add=0x00971D CalcAdd=0x00971D  ADD OK

Step #3: Reading RSA signatures ..
 Searching for RSA offset #0...missing
 Searching for RSA offset #1...missing

Step #4: Finding CRC table(s) ..
 Searching for CRC table(s)...OK
 CRC table(s) OK

Step #5: Reading Main Data Checksums ..
 Searching for main data CRC pre block...missing
 Searching for main data CRC/csum blocks...FAIL
 Searching for main data CRC offsets...missing
 Searching for main data checksum offsets...missing
Step #5: ERROR! Skipping Main Data checksums ... UNDEFINED

Step #6: ROMSYS Program Pages
 Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0xFFFFF
 @00803c Add=0x7D4EC6 CalcAdd=0x3A8D4D ** FIXED **

Step #7: Reading Main Program Checksums ..
 Searching for main program checksum..FAIL
Step #7: ERROR! Skipping Main Program Checksums.. UNDEFINED

Step #8: Reading Multipoint Checksum Blocks ..
 Searching for multipoint block descriptor #1...missing
 Searching for multipoint block descriptor #2...FAIL
Step #8: ERROR! Skipping Multipoint Checksum Block... UNDEFINED

Step #9: Looking for rechecks ..

*** Found 3 checksums in ivchos3stage1.bin

*** ABORTING! 3 uncorrectable error(s) in ivchos3stage1.bin! ***

C:\Users\Aleksander>^

Whatever modifications you did were bad. You have a bad map pack or you really screwed something up. Start from stock again, fix each map one by one.

first wrote file bad size not good but searching the error :D :D
not use china mpps 13 and search original file and you are see the probelm, i hope  ....

I ran your file through SAK tool and it seems ok..

Ferrari 360 ME7.3 Rom Tool. *BETA TEST Last Built: Nov  6 2019 07:49:40 v1.71
by 360trev.  Needle lookup function borrowed from nyet (Thanks man!) from
the ME7sum tool development (see github).

..Now fixed and working on 64-bit hosts, Linux, Apple and Android devices ;)

þ Opening 'c:\Users\hp\Downloads\ivchos3.bin' file
Succeded loading file.

Loaded ROM: Tool in 1Mb Mode

-[ DPPx Setup Analysis ]-----------------------------------------------------------------

>>> Scanning for Main ROM DPPx setup #1 [to extract dpp0, dpp1, dpp2, dpp3 from rom]

main rom dppX byte sequence #1 found at offset=0x64a6.

dpp0: (seg: 0x0000 phy:0x00000000)
dpp1: (seg: 0x0205 phy:0x00814000)
dpp2: (seg: 0x00e0 phy:0x00380000) ram start address
dpp3: (seg: 0x0003 phy:0x0000c000) cpu registers

Note: dpp3 is always 3, otherwise accessing CPU register area not possible

-[ Basic Firmware information ]-----------------------------------------------------------------

>>> Scanning for ROM String Table Byte Sequence #1 [info]

found needle at offset=0x21672
found table at offset=00019EAE.

Idx=2   { 0261206796              } 0x144d6 : SSECUHN [Bosch Hardware Number]
Idx=4   { 1037354092              } 0x144e0 : SSECUSN [Bosch Serial Number]
Idx=10  { 8L0906018N              } 0x15344 : DIF
Idx=11  { 0002                    } 0x15364 : BRIF
Idx=19  { 1.8L R4/5VT             } 0x15350 : OTHERID

>>> Scanning for EPK information [info]

found needle at offset=0x27030.
EPK: @ 0x1432b { /1/ME7.5/5/4018.20//F19x6/Dst02o/101299/ }
-[ CRC32_ChecksumCalc ]---------------------------------------------------------------------

>>> Scanning for Main ROM : [Stored Shadow Checksums]
Shadow not found
>>> Scanning for CRC32_ChecksumCalc() Variant #1 [calculates crc32 polynomial table]
Found at offset=0x68072. CRC32 Polynomial Table located at: 0x0081c6b4 file offset: 0001c6b4

static uint32_t crc32_table_addr[256] = {
 0x00000000, 0x77073096, 0xee0e612c, 0x990951ba, 0x076dc419, 0x706af48f, 0xe963a535, 0x9e6495a3,
 0x0edb8832, 0x79dcb8a4, 0xe0d5e91e, 0x97d2d988, 0x09b64c2b, 0x7eb17cbd, 0xe7b82d07, 0x90bf1d91,
 0x1db71064, 0x6ab020f2, 0xf3b97148, 0x84be41de, 0x1adad47d, 0x6ddde4eb, 0xf4d4b551, 0x83d385c7,
 0x136c9856, 0x646ba8c0, 0xfd62f97a, 0x8a65c9ec, 0x14015c4f, 0x63066cd9, 0xfa0f3d63, 0x8d080df5,
 0x3b6e20c8, 0x4c69105e, 0xd56041e4, 0xa2677172, 0x3c03e4d1, 0x4b04d447, 0xd20d85fd, 0xa50ab56b,
 0x35b5a8fa, 0x42b2986c, 0xdbbbc9d6, 0xacbcf940, 0x32d86ce3, 0x45df5c75, 0xdcd60dcf, 0xabd13d59,
 0x26d930ac, 0x51de003a, 0xc8d75180, 0xbfd06116, 0x21b4f4b5, 0x56b3c423, 0xcfba9599, 0xb8bda50f,
 0x2802b89e, 0x5f058808, 0xc60cd9b2, 0xb10be924, 0x2f6f7c87, 0x58684c11, 0xc1611dab, 0xb6662d3d,
 0x76dc4190, 0x01db7106, 0x98d220bc, 0xefd5102a, 0x71b18589, 0x06b6b51f, 0x9fbfe4a5, 0xe8b8d433,
 0x7807c9a2, 0x0f00f934, 0x9609a88e, 0xe10e9818, 0x7f6a0dbb, 0x086d3d2d, 0x91646c97, 0xe6635c01,
 0x6b6b51f4, 0x1c6c6162, 0x856530d8, 0xf262004e, 0x6c0695ed, 0x1b01a57b, 0x8208f4c1, 0xf50fc457,
 0x65b0d9c6, 0x12b7e950, 0x8bbeb8ea, 0xfcb9887c, 0x62dd1ddf, 0x15da2d49, 0x8cd37cf3, 0xfbd44c65,
 0x4db26158, 0x3ab551ce, 0xa3bc0074, 0xd4bb30e2, 0x4adfa541, 0x3dd895d7, 0xa4d1c46d, 0xd3d6f4fb,
 0x4369e96a, 0x346ed9fc, 0xad678846, 0xda60b8d0, 0x44042d73, 0x33031de5, 0xaa0a4c5f, 0xdd0d7cc9,
 0x5005713c, 0x270241aa, 0xbe0b1010, 0xc90c2086, 0x5768b525, 0x206f85b3, 0xb966d409, 0xce61e49f,
 0x5edef90e, 0x29d9c998, 0xb0d09822, 0xc7d7a8b4, 0x59b33d17, 0x2eb40d81, 0xb7bd5c3b, 0xc0ba6cad,
 0xedb88320, 0x9abfb3b6, 0x03b6e20c, 0x74b1d29a, 0xead54739, 0x9dd277af, 0x04db2615, 0x73dc1683,
 0xe3630b12, 0x94643b84, 0x0d6d6a3e, 0x7a6a5aa8, 0xe40ecf0b, 0x9309ff9d, 0x0a00ae27, 0x7d079eb1,
 0xf00f9344, 0x8708a3d2, 0x1e01f268, 0x6906c2fe, 0xf762575d, 0x806567cb, 0x196c3671, 0x6e6b06e7,
 0xfed41b76, 0x89d32be0, 0x10da7a5a, 0x67dd4acc, 0xf9b9df6f, 0x8ebeeff9, 0x17b7be43, 0x60b08ed5,
 0xd6d6a3e8, 0xa1d1937e, 0x38d8c2c4, 0x4fdff252, 0xd1bb67f1, 0xa6bc5767, 0x3fb506dd, 0x48b2364b,
 0xd80d2bda, 0xaf0a1b4c, 0x36034af6, 0x41047a60, 0xdf60efc3, 0xa867df55, 0x316e8eef, 0x4669be79,
 0xcb61b38c, 0xbc66831a, 0x256fd2a0, 0x5268e236, 0xcc0c7795, 0xbb0b4703, 0x220216b9, 0x5505262f,
 0xc5ba3bbe, 0xb2bd0b28, 0x2bb45a92, 0x5cb36a04, 0xc2d7ffa7, 0xb5d0cf31, 0x2cd99e8b, 0x5bdeae1d,
 0x9b64c2b0, 0xec63f226, 0x756aa39c, 0x026d930a, 0x9c0906a9, 0xeb0e363f, 0x72076785, 0x05005713,
 0x95bf4a82, 0xe2b87a14, 0x7bb12bae, 0x0cb61b38, 0x92d28e9b, 0xe5d5be0d, 0x7cdcefb7, 0x0bdbdf21,
 0x86d3d2d4, 0xf1d4e242, 0x68ddb3f8, 0x1fda836e, 0x81be16cd, 0xf6b9265b, 0x6fb077e1, 0x18b74777,
 0x88085ae6, 0xff0f6a70, 0x66063bca, 0x11010b5c, 0x8f659eff, 0xf862ae69, 0x616bffd3, 0x166ccf45,
 0xa00ae278, 0xd70dd2ee, 0x4e048354, 0x3903b3c2, 0xa7672661, 0xd06016f7, 0x4969474d, 0x3e6e77db,
 0xaed16a4a, 0xd9d65adc, 0x40df0b66, 0x37d83bf0, 0xa9bcae53, 0xdebb9ec5, 0x47b2cf7f, 0x30b5ffe9,
 0xbdbdf21c, 0xcabac28a, 0x53b39330, 0x24b4a3a6, 0xbad03605, 0xcdd70693, 0x54de5729, 0x23d967bf,
 0xb3667a2e, 0xc4614ab8, 0x5d681b02, 0x2a6f2b94, 0xb40bbe37, 0xc30c8ea1, 0x5a05df1b, 0x2d02ef8d
 };



-[ Main-Rom Checksum Analysis ]----------------------------------------------------------

>>> Scanning for Main ROM Checksum sub-routine #1 [to extract number of entries in table]
main checksum byte sequence #1 found at offset=0x67b9c.
Found #2 Regional Block Entries in table

>>> Scanning for Main ROM Checksum sub-routine #2 [to extract Start/End regions]
main checksum byte sequence #2 found at offset=0x67b60.

>>> Main Region Block #1:
   lo:0x1bfd8.W hi:0x1bfda.W (seg: 0x206 phy:0x81bfd8) :
    Start Addr : 0x00000000
   lo:0x1bfdc.W hi:0x1bfde.W (seg: 0x206 phy:0x81bfdc) :  End Addr   : 0x0000fbff
    sum=47ecee0d ~sum=b81311f2 : acc_sum=0
>>> Main Region Block #2:
   lo:0x1bfe0.W hi:0x1bfe2.W (seg: 0x206 phy:0x81bfe0) :
    Start Addr : 0x00020000
   lo:0x1bfe4.W hi:0x1bfe6.W (seg: 0x206 phy:0x81bfe4) :  End Addr   : 0x0007ffff
    sum=aa273ff1 ~sum=55d8c00e : acc_sum=47ecee0d

Final Main ROM Checksum calculation:  0xf2142dfe (after 2 rounds)
Final Main ROM Checksum calculation: ~0x0debd201


>>> Scanning for Main ROM Checksum sub-routine #3 variant #A [to extract stored checksums and locations in ROM]
main checksum byte sequence #3 block found at > offset=00067C08.
MAIN STORED ROM  CHECKSUM: 0xf2142dfe (calc) ? 0xf2142dfe (stored) : OK!    ~CHECKSUM: 0x0debd201 ? 0x0debd201 : OK!


-[ Multipoint Checksum Analysis ]--------------------------------------------------------

>>> Scanning for Multipoint Checksum sub-routine #1 Variant A [to extract number entries in stored checksum list in ROM]

>>> Scanning for Multipoint Checksum sub-routine #1 Variant B [to extract number entries in stored checksum list in ROM]
Found at offset=0x69d6a.
Found #34 Multipoint Entries in table

>>> Scanning for Multipoint Checksum sub-routine #2 Variant A [to extract address of stored checksum list location in ROM]

>>> Scanning for Multipoint Checksum sub-routine #2 Variant B [to extract address of stored checksum list location in ROM]
Found at offset=0x69fa0.
***Experimental***: Note Variant #B has 2 crc32's in the table before the multipoints. Skipping the CRC's and just doing the multipoints..

Multipoint Block #01 of #32:
   lo:0x1fc20.W hi:0x1fc22.W (seg: 0x207 phy:0x81fc20) :
    Start:   seg:0x200 phy:0x00800000 (offset: 0x00000000)
   lo:0x1fc24.W hi:0x1fc26.W (seg: 0x207 phy:0x81fc24) :
    End:     seg:0x200 phy:0x00803fff (offset: 0x00003fff)
    Block Checksum: 0x0fa0f5cf :  Calculated: 0x0fa0f5cf OK
   ~Block Checksum: 0xf05f0a30 : ~Calculated: 0xf05f0a30 OK
Multipoint Block #02 of #32:
   lo:0x1fc30.W hi:0x1fc32.W (seg: 0x207 phy:0x81fc30) :
    Start:   seg:0x201 phy:0x00804000 (offset: 0x00004000)
   lo:0x1fc34.W hi:0x1fc36.W (seg: 0x207 phy:0x81fc34) :
    End:     seg:0x201 phy:0x00807fff (offset: 0x00007fff)
    Block Checksum: 0x0f4716b3 :  Calculated: 0x0f4716b3 OK
   ~Block Checksum: 0xf0b8e94c : ~Calculated: 0xf0b8e94c OK
Multipoint Block #03 of #32:
   lo:0x1fc40.W hi:0x1fc42.W (seg: 0x207 phy:0x81fc40) :
    Start:   seg:0x202 phy:0x00808000 (offset: 0x00008000)
   lo:0x1fc44.W hi:0x1fc46.W (seg: 0x207 phy:0x81fc44) :
    End:     seg:0x202 phy:0x0080bfff (offset: 0x0000bfff)
    Block Checksum: 0x10b3d1d5 :  Calculated: 0x10b3d1d5 OK
   ~Block Checksum: 0xef4c2e2a : ~Calculated: 0xef4c2e2a OK
Multipoint Block #04 of #32:
   lo:0x1fc50.W hi:0x1fc52.W (seg: 0x207 phy:0x81fc50) :
    Start:   seg:0x203 phy:0x0080c000 (offset: 0x0000c000)
   lo:0x1fc54.W hi:0x1fc56.W (seg: 0x207 phy:0x81fc54) :
    End:     seg:0x203 phy:0x0080fbff (offset: 0x0000fbff)
    Block Checksum: 0x18510fb6 :  Calculated: 0x18510fb6 OK
   ~Block Checksum: 0xe7aef049 : ~Calculated: 0xe7aef049 OK
Multipoint Block #05 of #32:
   lo:0x1fc60.W hi:0x1fc62.W (seg: 0x207 phy:0x81fc60) :
    Start:   seg:0x204 phy:0x00810000 (offset: 0x00010000)
   lo:0x1fc64.W hi:0x1fc66.W (seg: 0x207 phy:0x81fc64) :
    End:     seg:0x204 phy:0x00813fff (offset: 0x00013fff)
    Block Checksum: 0x088e8a59 :  Calculated: 0x088e8a59 OK
   ~Block Checksum: 0xf77175a6 : ~Calculated: 0xf77175a6 OK
... cut .. cut ... (message length exceeded to so cutdown... )

Multipoint Block #32 of #32:
   lo:0x1fe10.W hi:0x1fe12.W (seg: 0x207 phy:0x81fe10) :
    Start:   seg:0x21f phy:0x0087c000 (offset: 0x0007c000)
   lo:0x1fe14.W hi:0x1fe16.W (seg: 0x207 phy:0x81fe14) :
    End:     seg:0x21f phy:0x0087ffff (offset: 0x0007ffff)
    Block Checksum: 0x1ffde002 :  Calculated: 0x1ffde002 OK
   ~Block Checksum: 0xe0021ffd : ~Calculated: 0xe0021ffd OK

All Multipoint checksums are correct.

And here's the corrected stage 1...


Ferrari 360 ME7.3 Rom Tool. *BETA TEST Last Built: Nov  6 2019 07:49:40 v1.71
by 360trev.  Needle lookup function borrowed from nyet (Thanks man!) from
the ME7sum tool development (see github).

..Now fixed and working on 64-bit hosts, Linux, Apple and Android devices ;)

þ Opening 'c:\Users\hp\Downloads\ivchos3stage1.bin' file
Succeded loading file.

Loaded ROM: Tool in 1Mb Mode

-[ DPPx Setup Analysis ]-----------------------------------------------------------------

>>> Scanning for Main ROM DPPx setup #1 [to extract dpp0, dpp1, dpp2, dpp3 from rom]

main rom dppX byte sequence #1 found at offset=0x64a6.

dpp0: (seg: 0x0000 phy:0x00000000)
dpp1: (seg: 0x0205 phy:0x00814000)
dpp2: (seg: 0x00e0 phy:0x00380000) ram start address
dpp3: (seg: 0x0003 phy:0x0000c000) cpu registers

Note: dpp3 is always 3, otherwise accessing CPU register area not possible

-[ Basic Firmware information ]-----------------------------------------------------------------

>>> Scanning for ROM String Table Byte Sequence #1 [info]

found needle at offset=0x21672
found table at offset=00019EAE.

Idx=2   { 0261206796              } 0x144d6 : SSECUHN [Bosch Hardware Number]
Idx=4   { 1037354092              } 0x144e0 : SSECUSN [Bosch Serial Number]
Idx=10  { 8L0906018N              } 0x15344 : DIF
Idx=11  { 0002                    } 0x15364 : BRIF
Idx=19  { 1.8L R4/5VT             } 0x15350 : OTHERID

>>> Scanning for EPK information [info]

found needle at offset=0x27030.
EPK: @ 0x1432b { /1/ME7.5/5/4018.20//F19x6/Dst02o/101299/ }
-[ CRC32_ChecksumCalc ]---------------------------------------------------------------------

>>> Scanning for Main ROM : [Stored Shadow Checksums]
Shadow not found
>>> Scanning for CRC32_ChecksumCalc() Variant #1 [calculates crc32 polynomial table]
Found at offset=0x68072. CRC32 Polynomial Table located at: 0x0081c6b4 file offset: 0001c6b4

-[ Main-Rom Checksum Analysis ]----------------------------------------------------------

>>> Scanning for Main ROM Checksum sub-routine #1 [to extract number of entries in table]
main checksum byte sequence #1 found at offset=0x67b9c.
Found #2 Regional Block Entries in table

>>> Scanning for Main ROM Checksum sub-routine #2 [to extract Start/End regions]
main checksum byte sequence #2 found at offset=0x67b60.

>>> Main Region Block #1:
   lo:0x1bfd8.W hi:0x1bfda.W (seg: 0x206 phy:0x81bfd8) :
    Start Addr : 0x00000000
   lo:0x1bfdc.W hi:0x1bfde.W (seg: 0x206 phy:0x81bfdc) :  End Addr   : 0x0000fbff
    sum=47ecee0d ~sum=b81311f2 : acc_sum=0
>>> Main Region Block #2:
   lo:0x1bfe0.W hi:0x1bfe2.W (seg: 0x206 phy:0x81bfe0) :
    Start Addr : 0x00020000
   lo:0x1bfe4.W hi:0x1bfe6.W (seg: 0x206 phy:0x81bfe4) :  End Addr   : 0x0007ffff
    sum=aa273ff1 ~sum=55d8c00e : acc_sum=47ecee0d

Final Main ROM Checksum calculation:  0xf2142dfe (after 2 rounds)
Final Main ROM Checksum calculation: ~0x0debd201


>>> Scanning for Main ROM Checksum sub-routine #3 variant #A [to extract stored checksums and locations in ROM]
main checksum byte sequence #3 block found at > offset=00067C08.
MAIN STORED ROM  CHECKSUM: 0xf2142dfe (calc) ? 0xf2142dfe (stored) : OK!    ~CHECKSUM: 0x0debd201 ? 0x0debd201 : OK!


-[ Multipoint Checksum Analysis ]--------------------------------------------------------

>>> Scanning for Multipoint Checksum sub-routine #1 Variant A [to extract number entries in stored checksum list in ROM]

>>> Scanning for Multipoint Checksum sub-routine #1 Variant B [to extract number entries in stored checksum list in ROM]
Found at offset=0x69d6a.
Found #34 Multipoint Entries in table

>>> Scanning for Multipoint Checksum sub-routine #2 Variant A [to extract address of stored checksum list location in ROM]

>>> Scanning for Multipoint Checksum sub-routine #2 Variant B [to extract address of stored checksum list location in ROM]
Found at offset=0x69fa0.
***Experimental***: Note Variant #B has 2 crc32's in the table before the multipoints. Skipping the CRC's and just doing the multipoints..

Multipoint Block #01 of #32:
   lo:0x1fc20.W hi:0x1fc22.W (seg: 0x207 phy:0x81fc20) :
    Start:   seg:0x200 phy:0x00800000 (offset: 0x00000000)
   lo:0x1fc24.W hi:0x1fc26.W (seg: 0x207 phy:0x81fc24) :
    End:     seg:0x200 phy:0x00803fff (offset: 0x00003fff)
    Block Checksum: 0x0fa0f5cf :  Calculated: 0x0fa0f5cf OK
   ~Block Checksum: 0xf05f0a30 : ~Calculated: 0xf05f0a30 OK
Multipoint Block #02 of #32:
   lo:0x1fc30.W hi:0x1fc32.W (seg: 0x207 phy:0x81fc30) :
    Start:   seg:0x201 phy:0x00804000 (offset: 0x00004000)
   lo:0x1fc34.W hi:0x1fc36.W (seg: 0x207 phy:0x81fc34) :
    End:     seg:0x201 phy:0x00807fff (offset: 0x00007fff)
    Block Checksum: 0x0f4716b3 :  Calculated: 0x0f4716b3 OK
   ~Block Checksum: 0xf0b8e94c : ~Calculated: 0xf0b8e94c OK
Multipoint Block #03 of #32:
   lo:0x1fc40.W hi:0x1fc42.W (seg: 0x207 phy:0x81fc40) :
    Start:   seg:0x202 phy:0x00808000 (offset: 0x00008000)
   lo:0x1fc44.W hi:0x1fc46.W (seg: 0x207 phy:0x81fc44) :
    End:     seg:0x202 phy:0x0080bfff (offset: 0x0000bfff)
    Block Checksum: 0x10b3d1d5 :  Calculated: 0x10b3d1d5 OK
   ~Block Checksum: 0xef4c2e2a : ~Calculated: 0xef4c2e2a OK
Multipoint Block #04 of #32:
   lo:0x1fc50.W hi:0x1fc52.W (seg: 0x207 phy:0x81fc50) :
    Start:   seg:0x203 phy:0x0080c000 (offset: 0x0000c000)
   lo:0x1fc54.W hi:0x1fc56.W (seg: 0x207 phy:0x81fc54) :
    End:     seg:0x203 phy:0x0080fbff (offset: 0x0000fbff)
    Block Checksum: 0x18510fb6 :  Calculated: 0x18510fb6 OK
   ~Block Checksum: 0xe7aef049 : ~Calculated: 0xe7aef049 OK
Multipoint Block #05 of #32:
   lo:0x1fc60.W hi:0x1fc62.W (seg: 0x207 phy:0x81fc60) :
    Start:   seg:0x204 phy:0x00810000 (offset: 0x00010000)
   lo:0x1fc64.W hi:0x1fc66.W (seg: 0x207 phy:0x81fc64) :
    End:     seg:0x204 phy:0x00813fff (offset: 0x00013fff)
    Block Checksum: 0x088e8a59 :  Calculated: 0x08a8d092 FIXED!
   ~Block Checksum: 0xf77175a6 : ~Calculated: 0xf7572f6d FIXED!
Multipoint Block #06 of #32:
   lo:0x1fc70.W hi:0x1fc72.W (seg: 0x207 phy:0x81fc70) :
    Start:   seg:0x205 phy:0x00814000 (offset: 0x00014000)
   lo:0x1fc74.W hi:0x1fc76.W (seg: 0x207 phy:0x81fc74) :
    End:     seg:0x205 phy:0x00817f67 (offset: 0x00017f67)
    Block Checksum: 0x0fdb8db6 :  Calculated: 0x0fdb8db6 OK
   ~Block Checksum: 0xf0247249 : ~Calculated: 0xf0247249 OK
Multipoint Block #07 of #32:
   lo:0x1fc80.W hi:0x1fc82.W (seg: 0x207 phy:0x81fc80) :
    Start:   seg:0x206 phy:0x00818190 (offset: 0x00018190)
   lo:0x1fc84.W hi:0x1fc86.W (seg: 0x207 phy:0x81fc84) :
    End:     seg:0x206 phy:0x0081bfff (offset: 0x0001bfff)
    Block Checksum: 0x05f7bc7b :  Calculated: 0x05f6f89a FIXED!
   ~Block Checksum: 0xfa084384 : ~Calculated: 0xfa090765 FIXED!
Multipoint Block #08 of #32:
   lo:0x1fc90.W hi:0x1fc92.W (seg: 0x207 phy:0x81fc90) :
    Start:   seg:0x207 phy:0x0081c000 (offset: 0x0001c000)
   lo:0x1fc94.W hi:0x1fc96.W (seg: 0x207 phy:0x81fc94) :
    End:     seg:0x207 phy:0x0081ffff (offset: 0x0001ffff)
    Block Checksum: 0x1b0e2590 :  Calculated: 0x1b0e63e6 FIXED!
   ~Block Checksum: 0xe4f1da6f : ~Calculated: 0xe4f19c19 FIXED!
Multipoint Block #09 of #32:
   lo:0x1fca0.W hi:0x1fca2.W (seg: 0x207 phy:0x81fca0) :
    Start:   seg:0x208 phy:0x00820000 (offset: 0x00020000)
   lo:0x1fca4.W hi:0x1fca6.W (seg: 0x207 phy:0x81fca4) :
    End:     seg:0x208 phy:0x00823fff (offset: 0x00023fff)
    Block Checksum: 0x13edc935 :  Calculated: 0x13edc935 OK
   ~Block Checksum: 0xec1236ca : ~Calculated: 0xec1236ca OK

... cut cut ... (to shorten message length)..

Multipoint Block #32 of #32:
   lo:0x1fe10.W hi:0x1fe12.W (seg: 0x207 phy:0x81fe10) :
    Start:   seg:0x21f phy:0x0087c000 (offset: 0x0007c000)
   lo:0x1fe14.W hi:0x1fe16.W (seg: 0x207 phy:0x81fe14) :
    End:     seg:0x21f phy:0x0087ffff (offset: 0x0007ffff)
    Block Checksum: 0x1ffde002 :  Calculated: 0x1ffde002 OK
   ~Block Checksum: 0xe0021ffd : ~Calculated: 0xe0021ffd OK

Total Multipoint Checksums Passed :  58 (~90%)
Total Multipoint Checksums Failed :   6 (~9%)
Total Multipoint Checksums Fixed  :   6 (~9%)


Attempting to save corrected rom to 'c:\Users\hp\Downloads\ivchos3stage1.bin_corrected.bin'...

Semi-thread jack: have you run into circular or varying csum location dependencies? for ME7Sum I could not find a fixed checksum fixing order which works in all binaries.

Seems to find everything no problems and never any circular references. Check out the code its all on github.

I've got the same problem once with the same file with nls routine
Changed routine offset and counter memory adress with no luck.
Me7 dies after driving cycle on a next day randomly

Not finding, correcting. I haven't found circular references either, but i haven't found one order that always works.