Pages: [1]
Author Topic: ME7 EEPROM Structure, KWP2000 protocol ME7.1.1 C167 vs ST10  (Read 5495 times)
Artemisia
Full Member
***

Karma: +22/-0
Offline Offline

Posts: 85



« on: March 26, 2024, 12:18:28 PM »

I'm sharing some documents that might be useful. It describes the ME7 EEPROM structure, every KWP2000 Bosch services and the differences between C167 and ST10 (like getting the ECU into a 0x85 session)

I know this is old stuff, but I have used it recently to write an OBD2 flasher for ME7.1.1, both C167CS and ST10F275

Writing byte to eeprom page :





EEPROM layout document which page can be written :



Set ST10 in 0x85 :




Programming is done through CAN-bus. Most other services (DDLI for example) are only availaible through K-Line. If you get a 0x90 negative response code, try the service on K-Line instead
« Last Edit: March 26, 2024, 12:36:09 PM by Artemisia » Logged
R32Dude
Sr. Member
****

Karma: +49/-10
Offline Offline

Posts: 254



« Reply #1 on: March 29, 2024, 02:40:43 AM »

Very nice, thanks for sharing
Logged
hhauki
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 2


« Reply #2 on: April 17, 2025, 02:19:03 AM »

I'm sharing some documents that might be useful. It describes the ME7 EEPROM structure, every KWP2000 Bosch services and the differences between C167 and ST10 (like getting the ECU into a 0x85 session)

I know this is old stuff, but I have used it recently to write an OBD2 flasher for ME7.1.1, both C167CS and ST10F275

Writing byte to eeprom page :





EEPROM layout document which page can be written :



Set ST10 in 0x85 :




Programming is done through CAN-bus. Most other services (DDLI for example) are only availaible through K-Line. If you get a 0x90 negative response code, try the service on K-Line instead


Can you share the .bin in the idapro picture? I work with temic, maybe I can compare Roll Eyes
Logged
hhauki
Newbie
*

Karma: +0/-0
Offline Offline

Posts: 2


« Reply #3 on: April 17, 2025, 02:19:34 AM »

I'm sharing some documents that might be useful. It describes the ME7 EEPROM structure, every KWP2000 Bosch services and the differences between C167 and ST10 (like getting the ECU into a 0x85 session)

I know this is old stuff, but I have used it recently to write an OBD2 flasher for ME7.1.1, both C167CS and ST10F275

Writing byte to eeprom page :





EEPROM layout document which page can be written :



Set ST10 in 0x85 :




Programming is done through CAN-bus. Most other services (DDLI for example) are only availaible through K-Line. If you get a 0x90 negative response code, try the service on K-Line instead


Can you share the .bin in the idapro picture? I work with temic, maybe I can compare Roll Eyes
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.059 seconds with 17 queries. (Pretty URLs adds 0.007s, 0q)