NefMoto

hi to all . my first post here
i have a vw passat 1.8 me 7.5 with checksum error . bought second hand its tuned and i dont have the ori bin. i had the error lamb (engine ) on the dash on with the checksum errorr.
i tried me7check and me 7 sum . me7sum finds 2 errors fixes but one checksum correction  still remains .when i flash the corrected file with me7sum the error lamb on dash  is off . me7check shows ok  but  vcds shows p0601 -35 -00 internal checksum error . i checked also the eeprom seems ok .
can somebody help me please ?

C:\a>me7sum.exe passat1.8cheksumpproblem.bin
ME7Sum (v1.0.5) [Management tool for Bosch ME7.x firmwares]
Inspiration from Andy Whittaker's tools and information.
Written by 360trev and nyet [BSD License Open Source].

Attempting to open firmware file 'passat1.8cheksumpproblem.bin'

Step #1: Reading ROM info ..
 Searching for EPK signature...OK
 Searching for ECUID table...OK
 EPK         : '40/1/ME7.5/3/4016.31//24G/Dst04o/080802//'
 Part Number : '4B0906018DH '
 Engine ID   : '1.8L R4/5VT    '
 SW Version  : '0004'
 HW Number   : '0261207928'
 SW Number   : '1037366497'

Step #2: Reading ROMSYS ..
 Startup section: word[0x008000]+word[0x00FFFE]
 @08038 Add=0x00013AD3 CalcAdd=0x00013AD3  ADD OK
 All param page: word[0x010000]+word[0x01FFFE]
 @01d0d4 Add=0x00971D CalcAdd=0x00971D  ADD OK

Step #3: Reading RSA signatures ..
 Searching for RSA offset #0...OK
 Searching for RSA offset #1...OK
         Signature: @9f51e-9f59e
           Modulus: @17360-173e0
          Exponent: @173e0 = 3
 Searching for MD5 ranges...OK
 MD5 Block Offset Table @1733c [32 bytes]:
 1) 0x00008000-0x00013FFE
 2) 0x00014252-0x00017F4E
 3) 0x00018192-0x0001FBDC
 4) 0x00026A00-0x0002FFFC
 EncrMD5: 54 7e be 37 89 27 1f ae 87 b9 aa fa 09 83 2f e0
 CalcMD5: 54 7e be 37 89 27 1f ae 87 b9 aa fa 09 83 2f e0
  OK

Step #4: Finding CRC table(s) ..
 Searching for CRC table(s)...OK
 CRC table(s) OK

Step #5: Reading Main Data Checksums ..
 Searching for main data CRC pre block...missing
 Searching for main data CRC/csum blocks...OK
 Searching for main data CRC offsets...missing
 Searching for main data checksum offsets...OK
 Main Checksums:
 1) 0x010002-0x013FFE CalcCSM: 00141E66
 2) 0x014252-0x017F4E CalcCSM: 0026A31F
 3) 0x018192-0x01FBDC CalcCSM: 0044FF06
 4) 0x026A00-0x02FFFC CalcCSM: 00A073CB
 @9fd64 CSM: 00F85F79 CalcCSM: 00A073CB ** NOT OK **

Step #6: ROMSYS Program Pages
 Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0xFFFFF
 @00803c Add=0x9FC34C CalcAdd=0x9FC34C  ADD OK

Step #7: Reading Main Program Checksums ..
 Searching for main program checksum..OK
 ROM Checksum Block Offset Table @29794 [16 bytes]:
 1) 0x000000-0x00FBFF CalcChk: 470671C1
    0x00FC00-0x01FFFF CalcChk: 211664FE CalcCRC: 8ED42538 SKIPPED
 2) 0x020000-0x0FFFFF CalcChk: DAE7980C
 @fffe0 Chk: DAE7980C CalcChk: DAE7980C OK (i)

Step #8: Reading Multipoint Checksum Blocks ..
 Searching for multipoint block descriptor #1...missing
 Searching for multipoint block descriptor #2...OK
 1) <1fbde>  0x000000-0x003FFF Chk: 0E59D5C8 Boot: (whitelisted) OK
 2) <1fbee>  0x004000-0x007FFF Chk: 1077FB35 Boot: (whitelisted) OK
 3) <1fbfe>  0x000000-0x003FFF Chk: 0E59D5C8 CalcChk: 0E59D5C8 OK
 ..........
64) <1ffce>  0x0F4000-0x0F7FFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
65) <1ffde>  0x0F8000-0x0FBFFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
66) <1ffee>  0x0FC000-0x0FFFFF Chk: 1FFDE002 CalcChk: 1FFDE002 OK
 Multipoint #2: [66 blocks x <16> = 1056 bytes]

Step #9: Looking for rechecks ..
RSA: no callback for recheck
ROMSYS ProgramPages checksum 0x0000803c-0x0000803f is in my data
    <1fc6e>  0x01C000-0x01FFFF Chk: 06232F4D CalcChk: 06232F4D OK (recheck)

*** WARNING! Unsatisfied rechecks. You may have to rerun ME7Sum on this file!

*** Found 70 checksums in passat1.8cheksumpproblem.bin

*** WARNING! 2/2 uncorrected error(s) in passat1.8cheksumpproblem.bin! ***

C:\a>me7sum.exe passat1.8cheksumpproblem.bin cheksumok.bin
ME7Sum (v1.0.5) [Management tool for Bosch ME7.x firmwares]
Inspiration from Andy Whittaker's tools and information.
Written by 360trev and nyet [BSD License Open Source].

Attempting to open firmware file 'passat1.8cheksumpproblem.bin'

Step #1: Reading ROM info ..
 Searching for EPK signature...OK
 Searching for ECUID table...OK
 EPK         : '40/1/ME7.5/3/4016.31//24G/Dst04o/080802//'
 Part Number : '4B0906018DH '
 Engine ID   : '1.8L R4/5VT    '
 SW Version  : '0004'
 HW Number   : '0261207928'
 SW Number   : '1037366497'

Step #2: Reading ROMSYS ..
 Startup section: word[0x008000]+word[0x00FFFE]
 @08038 Add=0x00013AD3 CalcAdd=0x00013AD3  ADD OK
 All param page: word[0x010000]+word[0x01FFFE]
 @01d0d4 Add=0x00971D CalcAdd=0x00971D  ADD OK

Step #3: Reading RSA signatures ..
 Searching for RSA offset #0...OK
 Searching for RSA offset #1...OK
         Signature: @9f51e-9f59e
           Modulus: @17360-173e0
          Exponent: @173e0 = 3
 Searching for MD5 ranges...OK
 MD5 Block Offset Table @1733c [32 bytes]:
 1) 0x00008000-0x00013FFE
 2) 0x00014252-0x00017F4E
 3) 0x00018192-0x0001FBDC
 4) 0x00026A00-0x0002FFFC
 EncrMD5: 54 7e be 37 89 27 1f ae 87 b9 aa fa 09 83 2f e0
 CalcMD5: 54 7e be 37 89 27 1f ae 87 b9 aa fa 09 83 2f e0
  OK

Step #4: Finding CRC table(s) ..
 Searching for CRC table(s)...OK
 CRC table(s) OK

Step #5: Reading Main Data Checksums ..
 Searching for main data CRC pre block...missing
 Searching for main data CRC/csum blocks...OK
 Searching for main data CRC offsets...missing
 Searching for main data checksum offsets...OK
 Main Checksums:
 1) 0x010002-0x013FFE CalcCSM: 00141E66
 2) 0x014252-0x017F4E CalcCSM: 0026A31F
 3) 0x018192-0x01FBDC CalcCSM: 0044FF06
 4) 0x026A00-0x02FFFC CalcCSM: 00A073CB
 @9fd64 CSM: 00F85F79 CalcCSM: 00A073CB ** FIXED **

Step #6: ROMSYS Program Pages
 Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0xFFFFF
 @00803c Add=0x9FC34C CalcAdd=0x9FC34C  ADD OK

Step #7: Reading Main Program Checksums ..
 Searching for main program checksum..OK
 ROM Checksum Block Offset Table @29794 [16 bytes]:
 1) 0x000000-0x00FBFF CalcChk: 470671C1
    0x00FC00-0x01FFFF CalcChk: 211664FE CalcCRC: 8ED42538 SKIPPED
 2) 0x020000-0x0FFFFF CalcChk: DAE7980C
 @fffe0 Chk: DAE7980C CalcChk: DAE7980C OK (i)

Step #8: Reading Multipoint Checksum Blocks ..
 Searching for multipoint block descriptor #1...missing
 Searching for multipoint block descriptor #2...OK
 1) <1fbde>  0x000000-0x003FFF Chk: 0E59D5C8 Boot: (whitelisted) OK
 2) <1fbee>  0x004000-0x007FFF Chk: 1077FB35 Boot: (whitelisted) OK
 3) <1fbfe>  0x000000-0x003FFF Chk: 0E59D5C8 CalcChk: 0E59D5C8 OK
 ..........
64) <1ffce>  0x0F4000-0x0F7FFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
65) <1ffde>  0x0F8000-0x0FBFFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
66) <1ffee>  0x0FC000-0x0FFFFF Chk: 1FFDE002 CalcChk: 1FFDE002 OK
 Multipoint #2: [66 blocks x <16> = 1056 bytes]

Step #9: Looking for rechecks ..
RSA: no callback for recheck
ROMSYS ProgramPages checksum 0x0000803c-0x0000803f is in my data
    <1fc6e>  0x01C000-0x01FFFF Chk: 06232F4D CalcChk: 06232F4D OK (recheck)

*** WARNING! Unsatisfied rechecks. You may have to rerun ME7Sum on this file!

*** Found 70 checksums in passat1.8cheksumpproblem.bin

Attempting to output corrected firmware file 'cheksumok.bin'
├╛ Opening 'cheksumok.bin' file for writing
├╛ Writing to file
├╛ Validating size correct 1048576=1048576
├╛ All OK, closing file

*** WARNING! 1/2 uncorrected error(s) in passat1.8cheksumpproblem.bin! ***

Looks like you either found a bug in ME7Sum or there is something really crazy with that file.

Might want to try to find the ORI...

In the mean time, I will try to take a peek at ME7Sum.

Sorry, moving this again, since it isn't a noob topic, it's a real issue with ME7Sum

i added it here because it was my first post on the forum . and thanks for the quick reply .. and thanks for the program.
it is tuned  . i bought it second hand . unfortunatellly i cant find the ori

Added log from me7sum . finds 2 checksum errors . fixes only  one . the another one remains .

This is an extremely curious file.

They have extended the RSA range to cover more than it usually does, which makes it so normal checksum programs can't checksum it unless they re-order the checks so the RSA check comes at the right time.

Anyway, this might be ORI...

thanks nyet for the help. if i write 4B0906018DH.bin  will the car start ?
after writing the 4B0906018DH.bin  do i have to do adaptatipn procedures with vcds or anythong else ?
is there a procedure to do after writing this file to ecu ? will the ecu be virgin and need adoptation with vcds ?

i am adding the ecu picture . it has a sticker . i think it was tuned by this oettinger company .. part number of ecu  4B0906018DH  sw 0004  .

Me7sum had a problem with 032TL too. it said it made checksum ok, car starts but after some runnings (aleator numbers) , eeprom crash with p0601 code.

yes, also Kess have a problem with 32TL, engine not start

So that 032TL is a problem with checksums. I must use it because i have on it a cruise control and water pump after car stop, and i tried to activate tham in other file but , they don't activate!

Can someone provide ori + modded bin (NOT COMMERCIAL) + winols corrected bin I could use as a reference?

I think I have a fix.

i don't have a comercial winols so mine not correct it well.
me7sum corrected but deathcode appears

found this program . me7.5 eeprom crc . when i check my eeprom from the first post  it finds a lot of checksums to fix . but when i try the same eeprom with me7 95040 for eeprom it says the checksums are ok .
which one is the wrong one ?

just checked manually the cheksums of 95040 eeprom .  me7.5 eeprom crc  doesnt calculate anything. it messes the eeprom . just ignore it

Don't bother, he have run AL NLS script in his file

Indeed, ME7Sum handles that file just fine. It infuriates me that noobs still use this fucking thing then demand help when their ecu throws checksum errors.

These are not the same files. One version is coded as software version 0040 the other is 0025.

If oyu have the ORI for 0025 i can use Winols and checksum this for you.

If you find *any* bin that breaks ME7Sum please pass it along, TIA