I'm sharing some documents that might be useful. It describes the ME7 EEPROM structure, every KWP2000 Bosch services and the differences between C167 and ST10 (like getting the ECU into a 0x85 session)

I know this is old stuff, but I have used it recently to write an OBD2 flasher for ME7.1.1, both C167CS and ST10F275

Writing byte to eeprom page :





EEPROM layout document which page can be written :



Set ST10 in 0x85 :




Programming is done through CAN-bus. Most other services (DDLI for example) are only availaible through K-Line. If you get a 0x90 negative response code, try the service on K-Line instead