Pages: [1] 2
Author Topic: ME 7.1 4B0907551K-0005 checksums  (Read 13136 times)
kingkhalilz
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 123


« on: October 11, 2014, 11:08:48 AM »

When i run it on my .bin it leaves checksums uncorrected

« Last Edit: October 15, 2014, 10:13:23 AM by nyet » Logged
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« Reply #1 on: October 11, 2014, 11:21:04 AM »

You're checking the wrong bin..

C:\Documents and Settings\ABC\Desktop>me7sum.exe testout.bin trytestout.bin

which writes the corrected file to trytestout.bin, but then you do:

C:\Documents and Settings\ABC\Desktop>me7check.exe testout.bin

The last message printed by me7sum is misleading, I'll fix it in the next release.
« Last Edit: October 11, 2014, 11:23:38 AM by nyet » Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
kingkhalilz
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 123


« Reply #2 on: October 11, 2014, 11:29:05 AM »

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\ABC>cd desktop

C:\Documents and Settings\ABC\Desktop>me7check.exe test.bin
==============================================================================
me7check v1.08 (c) mki, 06/2004-04/2011
Checking file test.bin (size=1048576)
Reading Version Strings...
-> Bootrom Version = embedded in CPU, asume 05.12/05.32
-> EPK = 42/1/ME7.1/5/6005.01//X22ka/Dste5g/300899/
-> Contents of ECUID data table:
   - '0261206561'         (SSECUHN)
   - '1037352740'         (SSECUSN)
   - '4B0907551K  '       (VAG part number)
   - '0005'               (VAG sw number)
   - '2.7l V6/5VT     '   (engine id)

-> Found 7 errors!!!   *******************************


C:\Documents and Settings\ABC\Desktop>me7sum.exe test.bin tes1.bin
ME7Tool (v1.0.1) [Management tool for Bosch ME7.x firmwares]
Inspiration from Andy Whittaker's tools and information.
Written by 360trev and nyet [BSD License Open Source].

Attempting to open firmware file 'test.bin'

Step #1: Reading ROM info ..
 Searching for EPK signature...OK
 Searching for P/N...OK
 EPK         : '42/1/ME7.1/5/6005.01//X22ka/Dste5g/300899/'
 Part Number : '4B0907551K'
 Engine ID   : '2.7l V6/5VT'
 SW Version  : '0005'
 HW Number   : '0261206561'
 SW Number   : '1037352740'

Step #2: Reading ROMSYS ..
 Startup section: word[0x008000]+word[0x00FFFE]
 @008038 Add=0x00C483 CalcAdd=0x00C483  ADD OK
 Program pages: 8k page first+last in 0x0000-0xFFFF and 0x20000-0xFFFFF
 @00803c Add=0xB5ECA5 CalcAdd=0xB5EF33 ** FIXED **
 All param page: word[0x010000]+word[0x01FFFE]
 @01b710 Add=0x00971D CalcAdd=0x00971D  ADD OK

Step #3: Reading RSA signatures ..
 Searching for RSA offset #0...missing
 Searching for RSA offset #1...missing

Step #4: Reading Main Data Checksums ..
 Searching for main data CRC pre block...missing
 Searching for main data CRC/csum blocks...OK
 Searching for main data CRC offsets...OK
 Searching for main data checksum offsets...missing
 Main CRCs:
 1) Adr: 0x010002-0x013FFE @73ae6 CRC: 2B8ED58A CalcCRC: 2B8ED58A    CRC OK
 2) Adr: 0x014252-0x017F4E @73aec CRC: 2F2FFE10 CalcCRC: 2F2FFE10    CRC OK
 3) Adr: 0x018192-0x01FBB0 @73af2 CRC: FE22259B CalcCRC: 2DD6BF85    ** FIXED **


Step #5: Reading Main Program Checksums ..
 Searching for main program checksum..OK
 ROM Checksum Block Offset Table @1e3d4 [16 bytes]:
 1) Adr: 0x000000-0x00FBFF
         0x00FC00-0x01FFFF SKIPPED CalcChk: 0x2C00C469 CalcCRC: 0x95A5C340
 2) Adr: 0x020000-0x0FFFFF
 @fffe0 Chk: 0xC01349EE CalcChk: 0xC0130E70 ** FIXED **

Step #6: Reading Multipoint Checksum Blocks ..
 Searching for multipoint block descriptor #1...OK
 1) <14224>  Adr: 0x024000-0x02658D Chk: 0x0B05583C CalcChk: 0x0B05583C OK
 2) <14234>  Adr: 0x014000-0x014243 Chk: 0x00586E68 CalcChk: 0x00586E68 OK
 3) <14244>  Adr: 0xFFFFFFFF-0xFFFFFFFF  END
 Multipoint #1: [2 blocks x <16> = 32 bytes]
 Searching for multipoint block descriptor #2...OK
 1) <1fbb2>  Adr: 0x000000-0x003FFF Chk: 0x0FA0F5CF Boot: (whitelisted) OK
 2) <1fbc2>  Adr: 0x004000-0x007FFF Chk: 0x0F4716B3 Boot: (whitelisted) OK
 3) <1fbd2>  Adr: 0x000000-0x003FFF Chk: 0x0FE3972C CalcChk: 0x0FE3949E ** FIXED
 **
 4) <1fbe2>  Adr: 0x004000-0x007FFF Chk: 0x107D0E26 CalcChk: 0x107D0E26 OK
 Multipoint #2: [66 blocks x <16> = 1056 bytes]

*** Found 73 checksums in test.bin

Attempting to output corrected firmware file 'tes1.bin'
├╛ Opening 'tes1.bin' file for writing
├╛ Writing to file
├╛ Validating size correct 1048576=1048576
├╛ All OK, closing file

*** DONE! 7/7 error(s) corrected in test.bin! ***

C:\Documents and Settings\ABC\Desktop>me7check.exe test1.bin
me7check: can't open binary file test1.bin

C:\Documents and Settings\ABC\Desktop>me7check.exe tes1.bin
==============================================================================
me7check v1.08 (c) mki, 06/2004-04/2011
Checking file tes1.bin (size=1048576)
Reading Version Strings...
-> Bootrom Version = embedded in CPU, asume 05.12/05.32
-> EPK = 42/1/ME7.1/5/6005.01//X22ka/Dste5g/300899/
-> Contents of ECUID data table:
   - '0261206561'         (SSECUHN)
   - '1037352740'         (SSECUSN)
   - '4B0907551K  '       (VAG part number)
   - '0005'               (VAG sw number)
   - '2.7l V6/5VT     '   (engine id)

-> Found 3 errors!!!   *******************************


C:\Documents and Settings\ABC\Desktop>

Are these 3 errors a mistake?? Sorry this time i did it correctly and showed before and after. Its weird cause me7sum said it corrected 7 errors.
Logged
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« Reply #3 on: October 11, 2014, 01:49:40 PM »

Post the bins, could be a bug
Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
kingkhalilz
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 123


« Reply #4 on: October 11, 2014, 02:14:24 PM »

Test.bin is the file I am trying to correct checksums on. Tes1.bin is what i commanded the correction to be called.
Logged
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« Reply #5 on: October 12, 2014, 02:12:31 AM »

Definitely a bug Sad

No clue how to fix it yet, sorry .. will work on it this week time permitting.
Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« Reply #6 on: October 12, 2014, 02:15:21 AM »

Looks like ME7Check fails on a win-ols corrected bin (which is identical to the me7sum corrected bin)... possibly a bug in ME7Check? That is bad news :/

I will email sezti... No guarantees he will respond though.

In the meantime, the corrected file is most likely safe to run... but i'd hate to ask a noob to play guinea pig w/o understanding the risks... your call, but if you want to roll the dice, carry a spare stock ecu with you Smiley
« Last Edit: October 12, 2014, 02:44:25 AM by nyet » Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
kingkhalilz
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 123


« Reply #7 on: October 12, 2014, 02:45:39 PM »

Is this bug specific to my ecu? My ecu is still bricked. I will play guinie pig if i can. Weird
Logged
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« Reply #8 on: October 12, 2014, 05:50:06 PM »

Not sure yet, I received a response from setzi and it appears that neither winols nor me7sum can correct that file properly.

No idea why yet.
Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« Reply #9 on: October 13, 2014, 09:38:12 AM »

The file you posted has modified checksum routines. I doubt it is your file.

If it is, I'm sure you can figure out how to properly calculate checksums for it Smiley

I have no intention of fixing ME7Sum to work around tuner modification protections. Please don't waste my time posting files you didn't write yourself :/

Code:
1c1
< 0000000: 8e02 0e01 7e02 6e01 0e02 1e02 f68e 988d  ....~.n.........
---
> 0000000: 0000 0e01 7e02 6e01 0e02 1e02 f68e 988d  ....~.n.........
7757c7757
< 001e4c0: 0fa5 bdb8 9eb8 0228 0888 055f b2d9 0cc6  .......(..._....
---
> 001e4c0: d590 bdb8 9eb8 0228 0888 055f b2d9 0cc6  .......(..._....
« Last Edit: October 13, 2014, 11:01:48 AM by nyet » Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
kingkhalilz
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 123


« Reply #10 on: October 13, 2014, 08:55:39 PM »

Hey im not trying to waste your time! Im not trying to do anything sketchy here. This is my original bin when i bought the car. Is it not stock?? All i did was change rev limit and some stupid things like that to get my test.bin. If i want to be able to tune this car should i simply get a stock mbox file??

I have to edit this to be clear: I attached my bin that i read using nefmoto. I didnt mean to come off as a dick. I just want you to know im not here to waste your time unless helping a noob is then im sorry for that. I am just trying to learn how to tune my car. If this file is not stock please let me know because i am unaware. I will start fresh with a mbox file. Once again i really appreciate your help, I am not trying to use someone elses stuff or anything like that. If this bin is not stock, really i dont suggest anyone using it cause i have no idea where it came from. Thanks nyet for your help, I will just start with fresh file when i can get my ecu boot mode bench flashed.
« Last Edit: October 13, 2014, 09:04:49 PM by kingkhalilz » Logged
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« Reply #11 on: October 14, 2014, 09:34:24 AM »

You must have accidentally modified a few locations you were unaware of. It looked like a tuner hack, because one of them (coincidentally) happened to be in the CRC table.

The other odd change was the first two bytes of the file were zero.

Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
kingkhalilz
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 123


« Reply #12 on: October 14, 2014, 12:15:14 PM »

So i made wrong or bad changes lol i suck? Could i restart with the stage 1 community and play with that xdf until i learn more?
Logged
nyet
Administrator
Hero Member
*****

Karma: +607/-168
Offline Offline

Posts: 12268


WWW
« Reply #13 on: October 14, 2014, 12:39:33 PM »

So i made wrong or bad changes lol i suck? Could i restart with the stage 1 community and play with that xdf until i learn more?

You tell me. Why did you modify the first two bytes of the file?
Logged

ME7.1 tuning guide
ECUx Plot
ME7Sum checksum
Trim heatmap tool

Please do not ask me for tunes. I'm here to help people make their own.

Do not PM me technical questions! Please, ask all questions on the forums! Doing so will ensure the next person with the same issue gets the opportunity to learn from your ex
kingkhalilz
Full Member
***

Karma: +0/-0
Offline Offline

Posts: 123


« Reply #14 on: October 14, 2014, 07:05:40 PM »

Honestly i dont know how to do that. nor what that really means. I tried your program on a .bin online made similar changes and it works. So i think my ecu had something weird on it or done to it.
Logged
Pages: [1] 2
  Print  
 
Jump to:  

Powered by SMF 1.1.21 | SMF © 2015, Simple Machines Page created in 0.042 seconds with 17 queries. (Pretty URLs adds 0.001s, 0q)