Title: can't pop me7.5
Post by: sp6men10 on January 08, 2023, 10:50:30 AM
Hey hi everyone,
First of all happy new year and good health to you
I am posting here because I feel like you are my last chance.
I've been tinkering with my me7.5 on my leon 20vt4 for a while, I started with a little light pop then I tried the anti-lag on the clutch pedal then I started to touch on the right at left without really knowing where I was going.
Then once my preparation was finished I said to myself "well you don't really know where you're going to get help", so I have a colleague who helped me a lot for my flex + pop internship starting from the origin of course, only here...
Pop alone no worries, mod flex alone no worries.
But the two impossible together, once flash my throttle body slams continuously and my computer crashes, it becomes untraceable and I have to recover it in tricore.
Any idea of ​​something that could crash me?
Thank you in advance for your help, have a nice Sunday.
ps: we tried several different solutions and each time the same problem.
Title: Re: can't pop me7.5
Post by: nyet on January 08, 2023, 12:38:43 PM
just posting a binary is worthless, nobody is going to try to disassemble it.
you're going to have to post annotated, decompiled ASM with all symbol information.
probably along with some sort of high level pseudo code or description of what you are trying to do with each variable.
Title: Re: can't pop me7.5
Post by: pinokio1979 on January 17, 2023, 03:59:15 PM
1
Title: Re: can't pop me7.5
Post by: pinokio1979 on January 17, 2023, 04:03:16 PM
2
Title: Re: can't pop me7.5
Post by: pinokio1979 on January 17, 2023, 04:07:56 PM
try with checked checksums, remove the negative clamp for 30 minutes, connect, turn on the ignition and upload, do only what I wrote.
Title: Re: can't pop me7.5
Post by: pinokio1979 on January 17, 2023, 04:09:00 PM
try with checked checksums, remove the negative clamp for 30 minutes, connect, turn on the ignition and upload, do only what I wrote.
Title: Re: can't pop me7.5
Post by: nyet on January 17, 2023, 06:09:37 PM
You know you can screen capture a single window, right?
Not only that, there are *command line programs* to do checksum corrections, and you don't need to screen shot at all. Just run them and copy/paste the text.
Title: Re: can't pop me7.5
Post by: nyet on January 17, 2023, 06:12:36 PM
blind leading the blind Did neither of you read any of the stickies? ME7Sum (v1.1.2-4-ge503) [Management tool for Bosch ME7.x firmwares]
Inspiration from Andy Whittaker's tools and information.
Written by 360trev and nyet [BSD License Open Source].
Attempting to open firmware file 'LEON_20VT4_ME7.5_MOD_FLEX_LAMBDAOFF_POP&BANG_v1.bin'
Step #1: Reading ROM info ..
Searching for EPK signature...OK
Searching for ECUID table...OK
EPK : '41/1/ME7.5/51/4019.02//24b/Dst01o/260700/'
Part Number : '06A906032DE '
Engine ID : '1.8L R4/5VT '
SW Version : '0001'
HW Number : '0261206866'
SW Number : '1037360165'
Step #2: Reading ROMSYS ..
Startup section: word[0x008000]+word[0x00FFFE]
@08038 Add=0x00006221 CalcAdd=0x00006221 ADD OK
All param page: word[0x010000]+word[0x01FFFE]
@01bde4 Add=0x00971D CalcAdd=0x00971D ADD OK
Step #3: Finding CRC table(s) ..
Searching for CRC table(s)...OK
CRC table(s) OK
Step #4: Reading RSA signatures ..
Searching for RSA offset #0...missing
Searching for RSA offset #1...missing
Step #5: Reading Main Data CRC/Checksums ..
Searching for main data CRC pre block...OK
Searching for main data CRC/csum blocks...OK
Searching for main data CRC offsets...OK
Searching for main data checksum offsets...missing
Main CRCs:
0) 0x0183C8-0x0183D1 CalcCRC: 8AAE9495
1) 0x010002-0x013FFE @8b954 CRC: 0B14C35B CalcCRC: 9834364E(r) ** NOT OK **
2) 0x014252-0x017F4E @8b95a CRC: D165C192 CalcCRC: D681EBD8(r) ** NOT OK **
3) 0x018192-0x01FBDC CalcCRC: 3ECE8CD9(r)
4) 0x026A00-0x02FFFC @8b960 CRC: C3F83A40 CalcCRC: A925AD0E(r) ** NOT OK **
Step #6: ROMSYS Program Pages
Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0xFFFFF
@00803c Add=0xA43556 CalcAdd=0xA43556 ADD OK
Step #7: Reading Main Program Checksums ..
Searching for main program checksum..OK
ROM Checksum Block Offset Table @1f700 [16 bytes]:
1) 0x000000-0x00FBFF CalcChk: 48D18133
0x00FC00-0x01FFFF CalcChk: 222654EA CalcCRC: B3C712C6 SKIPPED
2) 0x020000-0x0FFFFF CalcChk: 5EB8357F
@fffe0 Chk: 5EB8357F CalcChk: 5EB8357F OK (i)
Step #8: Reading Multipoint Checksum Blocks ..
Searching for multipoint block descriptor #1...missing
Searching for multipoint block descriptor #2...OK
1) <1fbde> 0x000000-0x003FFF Chk: 0FA0F5CF Boot: (whitelisted) OK
2) <1fbee> 0x004000-0x007FFF Chk: 0F4716B3 Boot: (whitelisted) OK
3) <1fbfe> 0x000000-0x003FFF Chk: 0FA0F5CF CalcChk: 0FA0F5CF OK
..........
7) <1fc3e> 0x010000-0x013FFF Chk: 0809ABAB CalcChk: 08490E3B ** NOT OK **
8) <1fc4e> 0x014000-0x017F4F Chk: 0A1AF818 CalcChk: 0A33E1C6 ** NOT OK **
9) <1fc5e> 0x018190-0x01BFFF Chk: 06202B83 CalcChk: 061DE6F3 ** NOT OK **
10) <1fc6e> 0x01C000-0x01FFFF Chk: 06CB1F6D CalcChk: 06CDD469 ** NOT OK **
..........
64) <1ffce> 0x0F4000-0x0F7FFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
65) <1ffde> 0x0F8000-0x0FBFFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
66) <1ffee> 0x0FC000-0x0FFFFF Chk: 1FFDE002 CalcChk: 1FFDE002 OK
Multipoint #2: [66 blocks x <16> = 1056 bytes]
Step #9: Looking for rechecks ..
*** Found 71 checksums in LEON_20VT4_ME7.5_MOD_FLEX_LAMBDAOFF_POP&BANG_v1.bin
*** WARNING! 7/7 uncorrected error(s) in LEON_20VT4_ME7.5_MOD_FLEX_LAMBDAOFF_POP&BANG_v1.bin! ***
|