Pages: [1]
Author Topic: Getting started with ME7.5 and IDA Pro  (Read 840 times)
MotorBoost
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 8


« on: February 01, 2026, 10:46:17 AM »

Dear sirs,

I really want to make a 5120 Hack on my ME7.5 ECU. The WinOLS part I think I have a hold of quite well, but the ASM part that’s needed I do unfortunately not understand at all. Therefore, I have been trying to get started with IDA Pro, but I keep hitting walls. The ECU I really would like to work on is a ME7.5 (06A906032HJ 963322).
I understand that I must make a boot read of the ECU to get hold of the CPU's ROM (32K) which I have done. However, the 1024 kb boot read and the 1024 kb OBD read do not differ at all in the lower part of the file when comparing in WinOLS? Am I misunderstanding something? I have read OBD with MPPS (Original) and made a boot read with MMS Flex (Which gives me only 3 files: ext_eeprom, ext_flash and the usual fullbackup.mmf)

When comparing with 32k CPU files found in this fine forum (See gremlin's Reply #7 here:http://nefariousmotorsports.com/forum/index.php?topic=744.0), I find that the lower part of both my OBD and boot read matches up quite well with gremlin's 32k CPU file (Not perfect, but okay).

Am I right in assuming then, that my flash file in fact contains the CPU rom? If yes, how do I then proceed with setting up IDA Pro? Should I then instead go with Tony@NefMoto's suggestion of importing the flash file as a whole at address 0x800000 and use the DPP's he suggests in post #7 here: http://nefariousmotorsports.com/forum/index.php?topic=35.0 ? To me it seems like Tony really knows what he is doing, but his post is in relation to a ME7.1 ecu, not a ME7.5 - Is there a difference here that I need to be aware of?

Basically, I am very much struggling with conflicting info, and I don’t at all have the knowledge to proceed from here, because I don’t know how it’s supposed to look like in IDA Pro.
For info, the IDA Pro version I have is a Version 6.8.150423 (64-bit). I have attached my defined .OLS file here as an original file for anyone who wants to have a look.
I would really appreciate your help in getting started with this in IDA Pro.
Thank you very much for the awesome info in here. My deepest respect to you gentlemen.
Logged
fknbrkn
Hero Member
*****

Karma: +219/-24
Offline Offline

Posts: 1559


mk4 1.8T AUM


« Reply #1 on: February 02, 2026, 08:17:31 AM »

just check the 5120 thread
im sure there will be 032HS file or any similar
you can find the asm offsets easily as the hack didnt use any variable

for the me7 + ida
personally im using cpu as the base + additional load bin file with flash at 0x80000
and then run andy whittaker  script for ida (github)
Logged
MotorBoost
Newbie
*

Karma: +1/-0
Offline Offline

Posts: 8


« Reply #2 on: February 08, 2026, 03:53:40 AM »

Hello fknbrkn, and thank you very much for your reply.

I have searched, found , read and checked a lot, and this is what ive come up with. From all the literature i could gather, this should be a working 5120 Hack with 3 bar MAP enabled and VCDS boost fixed.

Now unfortunately, this is "only" a WinOLS copy-and-paste from other files and guides posted in the 5120 Thread.

Could you kindly please take a look and see if you agree? Any other person that wants to chime in is obviously welcome as well.

I read, that it is recommended to set CWPLGU=1 - What do you recommend here? Or what is your experience regarding this?
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.023 seconds with 14 queries. (Pretty URLs adds 0s, 0q)