theking1111
Newbie
Karma: +0/-0
 Offline
Posts: 7
|
 |
« on: February 16, 2021, 06:23:43 PM »
|
|
|
hi to all . my first post here
i have a vw passat 1.8 me 7.5 with checksum error . bought second hand its tuned and i dont have the ori bin. i had the error lamb (engine ) on the dash on with the checksum errorr.
i tried me7check and me 7 sum . me7sum finds 2 errors fixes but one checksum correction still remains .when i flash the corrected file with me7sum the error lamb on dash is off . me7check shows ok but vcds shows p0601 -35 -00 internal checksum error . i checked also the eeprom seems ok .
can somebody help me please ?
C:\a>me7sum.exe passat1.8cheksumpproblem.bin
ME7Sum (v1.0.5) [Management tool for Bosch ME7.x firmwares]
Inspiration from Andy Whittaker's tools and information.
Written by 360trev and nyet [BSD License Open Source].
Attempting to open firmware file 'passat1.8cheksumpproblem.bin'
Step #1: Reading ROM info ..
Searching for EPK signature...OK
Searching for ECUID table...OK
EPK : '40/1/ME7.5/3/4016.31//24G/Dst04o/080802//'
Part Number : '4B0906018DH '
Engine ID : '1.8L R4/5VT '
SW Version : '0004'
HW Number : '0261207928'
SW Number : '1037366497'
Step #2: Reading ROMSYS ..
Startup section: word[0x008000]+word[0x00FFFE]
@08038 Add=0x00013AD3 CalcAdd=0x00013AD3 ADD OK
All param page: word[0x010000]+word[0x01FFFE]
@01d0d4 Add=0x00971D CalcAdd=0x00971D ADD OK
Step #3: Reading RSA signatures ..
Searching for RSA offset #0...OK
Searching for RSA offset #1...OK
Signature: @9f51e-9f59e
Modulus: @17360-173e0
Exponent: @173e0 = 3
Searching for MD5 ranges...OK
MD5 Block Offset Table @1733c [32 bytes]:
1) 0x00008000-0x00013FFE
2) 0x00014252-0x00017F4E
3) 0x00018192-0x0001FBDC
4) 0x00026A00-0x0002FFFC
EncrMD5: 54 7e be 37 89 27 1f ae 87 b9 aa fa 09 83 2f e0
CalcMD5: 54 7e be 37 89 27 1f ae 87 b9 aa fa 09 83 2f e0
OK
Step #4: Finding CRC table(s) ..
Searching for CRC table(s)...OK
CRC table(s) OK
Step #5: Reading Main Data Checksums ..
Searching for main data CRC pre block...missing
Searching for main data CRC/csum blocks...OK
Searching for main data CRC offsets...missing
Searching for main data checksum offsets...OK
Main Checksums:
1) 0x010002-0x013FFE CalcCSM: 00141E66
2) 0x014252-0x017F4E CalcCSM: 0026A31F
3) 0x018192-0x01FBDC CalcCSM: 0044FF06
4) 0x026A00-0x02FFFC CalcCSM: 00A073CB
@9fd64 CSM: 00F85F79 CalcCSM: 00A073CB ** NOT OK **
Step #6: ROMSYS Program Pages
Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0xFFFFF
@00803c Add=0x9FC34C CalcAdd=0x9FC34C ADD OK
Step #7: Reading Main Program Checksums ..
Searching for main program checksum..OK
ROM Checksum Block Offset Table @29794 [16 bytes]:
1) 0x000000-0x00FBFF CalcChk: 470671C1
0x00FC00-0x01FFFF CalcChk: 211664FE CalcCRC: 8ED42538 SKIPPED
2) 0x020000-0x0FFFFF CalcChk: DAE7980C
@fffe0 Chk: DAE7980C CalcChk: DAE7980C OK (i)
Step #8: Reading Multipoint Checksum Blocks ..
Searching for multipoint block descriptor #1...missing
Searching for multipoint block descriptor #2...OK
1) <1fbde> 0x000000-0x003FFF Chk: 0E59D5C8 Boot: (whitelisted) OK
2) <1fbee> 0x004000-0x007FFF Chk: 1077FB35 Boot: (whitelisted) OK
3) <1fbfe> 0x000000-0x003FFF Chk: 0E59D5C8 CalcChk: 0E59D5C8 OK
..........
64) <1ffce> 0x0F4000-0x0F7FFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
65) <1ffde> 0x0F8000-0x0FBFFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
66) <1ffee> 0x0FC000-0x0FFFFF Chk: 1FFDE002 CalcChk: 1FFDE002 OK
Multipoint #2: [66 blocks x <16> = 1056 bytes]
Step #9: Looking for rechecks ..
RSA: no callback for recheck
ROMSYS ProgramPages checksum 0x0000803c-0x0000803f is in my data
<1fc6e> 0x01C000-0x01FFFF Chk: 06232F4D CalcChk: 06232F4D OK (recheck)
*** WARNING! Unsatisfied rechecks. You may have to rerun ME7Sum on this file!
*** Found 70 checksums in passat1.8cheksumpproblem.bin
*** WARNING! 2/2 uncorrected error(s) in passat1.8cheksumpproblem.bin! ***
C:\a>me7sum.exe passat1.8cheksumpproblem.bin cheksumok.bin
ME7Sum (v1.0.5) [Management tool for Bosch ME7.x firmwares]
Inspiration from Andy Whittaker's tools and information.
Written by 360trev and nyet [BSD License Open Source].
Attempting to open firmware file 'passat1.8cheksumpproblem.bin'
Step #1: Reading ROM info ..
Searching for EPK signature...OK
Searching for ECUID table...OK
EPK : '40/1/ME7.5/3/4016.31//24G/Dst04o/080802//'
Part Number : '4B0906018DH '
Engine ID : '1.8L R4/5VT '
SW Version : '0004'
HW Number : '0261207928'
SW Number : '1037366497'
Step #2: Reading ROMSYS ..
Startup section: word[0x008000]+word[0x00FFFE]
@08038 Add=0x00013AD3 CalcAdd=0x00013AD3 ADD OK
All param page: word[0x010000]+word[0x01FFFE]
@01d0d4 Add=0x00971D CalcAdd=0x00971D ADD OK
Step #3: Reading RSA signatures ..
Searching for RSA offset #0...OK
Searching for RSA offset #1...OK
Signature: @9f51e-9f59e
Modulus: @17360-173e0
Exponent: @173e0 = 3
Searching for MD5 ranges...OK
MD5 Block Offset Table @1733c [32 bytes]:
1) 0x00008000-0x00013FFE
2) 0x00014252-0x00017F4E
3) 0x00018192-0x0001FBDC
4) 0x00026A00-0x0002FFFC
EncrMD5: 54 7e be 37 89 27 1f ae 87 b9 aa fa 09 83 2f e0
CalcMD5: 54 7e be 37 89 27 1f ae 87 b9 aa fa 09 83 2f e0
OK
Step #4: Finding CRC table(s) ..
Searching for CRC table(s)...OK
CRC table(s) OK
Step #5: Reading Main Data Checksums ..
Searching for main data CRC pre block...missing
Searching for main data CRC/csum blocks...OK
Searching for main data CRC offsets...missing
Searching for main data checksum offsets...OK
Main Checksums:
1) 0x010002-0x013FFE CalcCSM: 00141E66
2) 0x014252-0x017F4E CalcCSM: 0026A31F
3) 0x018192-0x01FBDC CalcCSM: 0044FF06
4) 0x026A00-0x02FFFC CalcCSM: 00A073CB
@9fd64 CSM: 00F85F79 CalcCSM: 00A073CB ** FIXED **
Step #6: ROMSYS Program Pages
Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0xFFFFF
@00803c Add=0x9FC34C CalcAdd=0x9FC34C ADD OK
Step #7: Reading Main Program Checksums ..
Searching for main program checksum..OK
ROM Checksum Block Offset Table @29794 [16 bytes]:
1) 0x000000-0x00FBFF CalcChk: 470671C1
0x00FC00-0x01FFFF CalcChk: 211664FE CalcCRC: 8ED42538 SKIPPED
2) 0x020000-0x0FFFFF CalcChk: DAE7980C
@fffe0 Chk: DAE7980C CalcChk: DAE7980C OK (i)
Step #8: Reading Multipoint Checksum Blocks ..
Searching for multipoint block descriptor #1...missing
Searching for multipoint block descriptor #2...OK
1) <1fbde> 0x000000-0x003FFF Chk: 0E59D5C8 Boot: (whitelisted) OK
2) <1fbee> 0x004000-0x007FFF Chk: 1077FB35 Boot: (whitelisted) OK
3) <1fbfe> 0x000000-0x003FFF Chk: 0E59D5C8 CalcChk: 0E59D5C8 OK
..........
64) <1ffce> 0x0F4000-0x0F7FFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
65) <1ffde> 0x0F8000-0x0FBFFF Chk: 1FFFE000 CalcChk: 1FFFE000 OK
66) <1ffee> 0x0FC000-0x0FFFFF Chk: 1FFDE002 CalcChk: 1FFDE002 OK
Multipoint #2: [66 blocks x <16> = 1056 bytes]
Step #9: Looking for rechecks ..
RSA: no callback for recheck
ROMSYS ProgramPages checksum 0x0000803c-0x0000803f is in my data
<1fc6e> 0x01C000-0x01FFFF Chk: 06232F4D CalcChk: 06232F4D OK (recheck)
*** WARNING! Unsatisfied rechecks. You may have to rerun ME7Sum on this file!
*** Found 70 checksums in passat1.8cheksumpproblem.bin
Attempting to output corrected firmware file 'cheksumok.bin'
├╛ Opening 'cheksumok.bin' file for writing
├╛ Writing to file
├╛ Validating size correct 1048576=1048576
├╛ All OK, closing file
*** WARNING! 1/2 uncorrected error(s) in passat1.8cheksumpproblem.bin! ***
|
|
|
|
« Last Edit: February 16, 2021, 06:42:09 PM by theking1111 »
|
Logged
|
|
|
|
|
nyet
|
|
« Reply #1 on: February 16, 2021, 06:33:22 PM »
|
|
|
Looks like you either found a bug in ME7Sum or there is something really crazy with that file.
Might want to try to find the ORI...
In the mean time, I will try to take a peek at ME7Sum.
Sorry, moving this again, since it isn't a noob topic, it's a real issue with ME7Sum
|
|
|
|
|
Logged
|
|
|
|
theking1111
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #2 on: February 16, 2021, 06:45:08 PM »
|
|
|
i added it here because it was my first post on the forum . and thanks for the quick reply .. and thanks for the program.
it is tuned . i bought it second hand . unfortunatellly i cant find the ori
|
|
|
|
« Last Edit: February 16, 2021, 06:54:40 PM by theking1111 »
|
Logged
|
|
|
|
theking1111
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #3 on: February 16, 2021, 06:56:03 PM »
|
|
|
Added log from me7sum . finds 2 checksum errors . fixes only one . the another one remains .
|
|
|
|
|
Logged
|
|
|
|
|
nyet
|
|
« Reply #4 on: February 17, 2021, 03:39:55 AM »
|
|
|
This is an extremely curious file.
They have extended the RSA range to cover more than it usually does, which makes it so normal checksum programs can't checksum it unless they re-order the checks so the RSA check comes at the right time.
Anyway, this might be ORI...
|
|
|
|
|
Logged
|
|
|
|
theking1111
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #5 on: February 17, 2021, 05:18:55 AM »
|
|
|
thanks nyet for the help. if i write 4B0906018DH.bin will the car start ?
after writing the 4B0906018DH.bin do i have to do adaptatipn procedures with vcds or anythong else ?
is there a procedure to do after writing this file to ecu ? will the ecu be virgin and need adoptation with vcds ?
|
|
|
|
|
Logged
|
|
|
|
theking1111
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #6 on: February 17, 2021, 08:26:00 AM »
|
|
|
i am adding the ecu picture . it has a sticker . i think it was tuned by this oettinger company .. part number of ecu 4B0906018DH sw 0004 .
|
|
|
|
|
Logged
|
|
|
|
vladvlad
Full Member
Karma: +1/-73
Offline
Posts: 138
|
|
« Reply #7 on: February 18, 2021, 06:52:05 AM »
|
|
|
Me7sum had a problem with 032TL too. it said it made checksum ok, car starts but after some runnings (aleator numbers) , eeprom crash with p0601 code.
|
|
|
|
|
Logged
|
|
|
|
GianniNOS
Jr. Member
Karma: +2/-0
Offline
Posts: 37
|
|
« Reply #8 on: February 18, 2021, 07:21:06 AM »
|
|
|
yes, also Kess have a problem with 32TL, engine not start
|
|
|
|
|
Logged
|
|
|
|
vladvlad
Full Member
Karma: +1/-73
Offline
Posts: 138
|
|
« Reply #9 on: February 18, 2021, 07:32:18 AM »
|
|
|
yes, also Kess have a problem with 32TL, engine not start
So that 032TL is a problem with checksums. I must use it because i have on it a cruise control and water pump after car stop, and i tried to activate tham in other file but , they don't activate! |
|
|
|
|
Logged
|
|
|
|
|
nyet
|
|
« Reply #10 on: February 18, 2021, 12:57:40 PM »
|
|
|
So that 032TL is a problem with checksums. I must use it because i have on it a cruise control and water pump after car stop, and i tried to activate tham in other file but , they don't activate!
Can someone provide ori + modded bin (NOT COMMERCIAL) + winols corrected bin I could use as a reference? I think I have a fix. |
|
|
|
|
Logged
|
|
|
|
vladvlad
Full Member
Karma: +1/-73
Offline
Posts: 138
|
|
« Reply #11 on: February 18, 2021, 01:42:48 PM »
|
|
|
i don't have a comercial winols so mine not correct it well.
me7sum corrected but deathcode appears
|
|
|
|
|
Logged
|
|
|
|
theking1111
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #12 on: February 18, 2021, 03:47:14 PM »
|
|
|
found this program . me7.5 eeprom crc . when i check my eeprom from the first post it finds a lot of checksums to fix . but when i try the same eeprom with me7 95040 for eeprom it says the checksums are ok .
which one is the wrong one ?
|
|
|
|
« Last Edit: February 18, 2021, 03:53:23 PM by theking1111 »
|
Logged
|
|
|
|
theking1111
Newbie
Karma: +0/-0
Offline
Posts: 7
|
|
« Reply #13 on: February 18, 2021, 08:19:47 PM »
|
|
|
found this program . me7.5 eeprom crc . when i check my eeprom from the first post it finds a lot of checksums to fix . but when i try the same eeprom with me7 95040 for eeprom it says the checksums are ok .
which one is the wrong one ?
just checked manually the cheksums of 95040 eeprom . me7.5 eeprom crc doesnt calculate anything. it messes the eeprom . just ignore it |
|
|
|
|
Logged
|
|
|
|
|
BlackT
|
|
« Reply #14 on: February 18, 2021, 10:01:40 PM »
|
|
|
Can someone provide ori + modded bin (NOT COMMERCIAL) + winols corrected bin I could use as a reference?
I think I have a fix.
Don't bother, he have run AL NLS script in his file |
|
|
|
|
Logged
|
|
|
|
|
