Pages: [1]
Author Topic: Bosch ME7.7.1 ECU - Is this a mountain I can climb?  (Read 807 times)
Jez
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 4


« on: December 05, 2024, 11:25:14 PM »

Hi all,
I've spent a few days reading around and I'm not sure how feasible my project is. If I could get some advice, I'd much apricate it.

I have a Bosch ME7.7.1 ECU from a Mitsubishi 380 running a 6G75 engine, and I need to turn off most of the factory ancillary CAN modules because we are doing an engine swap into another car. I need set it up to run the engine basically as standalone ECU. I'm not interested in tuning it right now, maybe down the track, but just need to make it run with our errors or going into limp mode for now.

The Mitsubishi 380 was an Australian built car from 2005-2008, was based off the Mitsubishi "PS platform" and kind of similar to a Galant. But only the Australian 380 used the Bosch ME7.7.1 ECU. This makes the 380 a very niche car unfortunately and I'm struggling to find much info on programming it.
 
I've looked through the circuit diagrams for the 380 and the ECU links via CAN to other computers we don't want, like ABS/TC, SRS, A/T trans and immobilizer. I have a read once we remove these computers the ECU will go into limp mode, especially when it doesn't see the ABS/TC computer (A.K.A ASR or MSR?).
There are also some O2 sensors we would also like to turn off, and possibly the max speed limit as well. After reading the "ME7.1 tuning guide" on the s4wiki.com this seems possible.
Our Mirage is fully stripped, fully roll caged race car, will absolutely not be used on the street, track only, if you’re worried about the safety aspect of removing all this.
     
What I know about the ECU so far:
Bosch ME7.7.1
PT# on ECU: 0 261 208 914 (810) 1860A706
MCU inside is a: ST10F275-CAA
Has external EEPROM that I think has the VIN and immobilizer info? and external Flash that seems to only have calibration data, I think? 


My questions.
1. Will it be possible to flash a Bosch ME7.7.1 to run almost stand alone?

2. Because the ECU isn't from the VAG car, does that mean most of what I have read about the ME7.x ECU's on this site is no good?

3. What is the difference between a ME7.7.1 VS a ME7.1 or M7.4? There seems to be lots of info the ME7.1 and all others, but almost nothing on the ME7.7? Are all the ME7.X basically the same ECU?

4. What types of files or settings do they typically put in the 3 different memory locations (EEPROM, external flash, MCU flash)? 

5. What would be the best programming cable to get? Will a VAG KKL FTDI FT232rl cable be enough? Even though it’s not a VAG car? or will I need a K-TAG ECU Programming tool that can read all the different memory? I did find a document that shows where the K-line, BOOT and CNF1 pins are on and in the ECU.   

6. Being a niche ECU, I'm guessing I'm on my own. What would be the best way to make definition file (.xdf?) for this the ME7.7.1?

7. Is it possible to use parts of other definition file to make a definition file for this ECU?

8. A lot of the information I have been reading is solid 10 years old now. What are the best programs to use to make definition file now? Are there any new ones? or is it a matter of using whatever you can get and/or work out how to use?   

9. If I can sense of the .bin file and it's settings, would you then use documents like the "Bosch ME7 Documentation - Funktionsrahmen (aka the FR)" to better identify the settings and change them?

10. I've had a bit of a read of the "Bosch ME7 Documentation - Funktionsrahmen (aka the FR)". On Page 1680-1683 there were some CAN settings that sounded like what I might be after? Am I on the right track? 
B_ABSFGR    CAN       OFF       Condition ABS braking (as switch-off condition for FGR)
B_AIRCAN          ON       Condition crash from airbag control unit
B_ASRESP    CAN       OFF       Condition ASR/ESP installed
B_AUTGET    PROKONAL ON       Condition automatic transmission
B_ESGCAN          ON       condition for SG-CAN error with 2 ME control units
E_WFS             ON       Error flag: immobilizer

Page 1705
SY_WFS       PROKONAL AUS    System constant Immobilizer (0: none, 1: via CAN, 2: K-line)

page 1425
B_ECULOCK          ON       Immobilizer locking request

page 1471
B_NLWFS                  ON       SG condition SG run-on by immobilizer control unit 

Thanks for reading, I know it's lot of noob questions, I’m just trying to understand the best direction to go in and better understand the information I’ve been reading, any help would be much appreciated! 
Logged
fknbrkn
Hero Member
*****

Karma: +186/-24
Offline Offline

Posts: 1470


mk4 1.8T AUM


« Reply #1 on: December 05, 2024, 11:46:04 PM »

Can you please attach the file?
It's irrelevant at me7.x from vag about can modules dtcs but the second o2 may gets fuel trims disabled
Logged
Jez
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 4


« Reply #2 on: December 06, 2024, 12:45:52 AM »

I didn't pull this file. I got it from another forum.
Its from a stock 380VRX. The flash was unsoldered and dumped in hex format.

I have a ECU on order that I'll get next week. I'll also try to pull the files once I get it. 
Logged
IamwhoIam
Hero Member
*****

Karma: +52/-117
Offline Offline

Posts: 1072


« Reply #3 on: December 06, 2024, 03:57:11 AM »

I didn't pull this file. I got it from another forum.
Its from a stock 380VRX. The flash was unsoldered and dumped in hex format.

I have a ECU on order that I'll get next week. I'll also try to pull the files once I get it. 

This file looks totally useless to me as it doesn't appear to contain any code whatsoever.
Logged

I have no logs because I have a boost gauge (makes things easier)
Jez
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 4


« Reply #4 on: December 06, 2024, 04:17:09 AM »

Ahhhhh! I was looking over this file with a friend and he thought the same thing! Thank you for confirming that.
I'll try get a better one soon.
Logged
prj
Hero Member
*****

Karma: +1077/-503
Offline Offline

Posts: 6086


« Reply #5 on: December 06, 2024, 07:10:57 AM »

You need to boot read the ECU.
If it has a ST10F275, then there's internal flash that needs to be dumped as well.

Until you have accomplished that there is absolutely nothing to do.

Also, with these questions there's zero chances you're getting anywhere with this.
So either you find someone who is willing to do what you want for money or the best course of action in this case is to just fit a standalone ECU and tune it.

There's probably not going to be any defs floating around for it, and making them from scratch is going to need RE experience for the more specific stuff.
« Last Edit: December 06, 2024, 07:13:32 AM by prj » Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
skyline_stu
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 1


« Reply #6 on: January 03, 2025, 07:37:48 AM »

Funny you should mention this - I'm currently working my way through the ST10's firmware.... Wink
I extracted this and have run a very basic pass through IDApro.
I've a boosted 380 and need to change a lot of stuff in the original code to get the most out of the existing hardware.

I'm sure there's some folks here who'll be able to assist with getting the DPP's, offsets and 2nd binary area (0x80000) correct.
If someone could assistist in working out a checksum calculator, that'd be a great help.
Biggest hurdle is time, I'm probably several hundred hours into drafting a realtime tuning solution.
I do have some 1 off specific hardware tools that I use, emulators, programmers and such.
I've managed to find a lot of the maps in the binary file, but yet to get into DTC's and O2's.

It's really a complex RTOS with many checksums (initial and realtime).
One area of interest is around 0x15EFA and it many function calls.
First thing is to understand how the RTOS functions and how the realtime calls are done.
I'm sure there a supervisor type arrangement, yet to be fully understood.
I'm not new to chiptuning by any means, having designed several rom daughter boards for 'untunable' variants. Grin
But this is a lot more technical.

I've attached the ST10F275 extracted binary if you or anyone on here wants a challenge of a brand new ROM to pull apart,
but you've gotta tell us what you're finding.

I kinda have the feeling things are about to get a lot more fun with these..!
« Last Edit: January 03, 2025, 08:20:20 AM by skyline_stu » Logged
prj
Hero Member
*****

Karma: +1077/-503
Offline Offline

Posts: 6086


« Reply #7 on: January 03, 2025, 01:34:23 PM »

For realtime buy Cobra RTP, done. Nothing to do there for hundreds of hours.
Since Moates shut down that's

DPP's and Offsets are a 5 min job for anyone familiar with RE.
They are set at the beginning of the ASW.

For checksums the easiest is to just turn them off by forcing CW_NOROMCHKRESET on and by setting ECU into test mode.
Waste of time writing a checksum calculator for it.

Anyway, usually these threads go absolutely nowhere.
Logged

PM's will not be answered, so don't even try.
Log your car properly - WinOLS database - Tools/patches
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.702 seconds with 17 queries. (Pretty URLs adds 0s, 0q)