Skip to content

EWS Delete: How you do it

Bryan Smith edited this page Jan 28, 2020 · 1 revision

Make a 512kb read of your DME

Instructions are in the wiki

have figured out the EWS delete for the me7.2 if you care at all for the information

Search a 512kb dump for the following hex string: Code: E6 F5 00 FF F6 F5 32 80 DB 00

Following this is a string of hex 1A long

in my binary the hex string looked as such Code: C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01

Replace this hex with an string also 1A in length containing the following characters

Code: CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00

So my string went from Code: E6F500FFF6F53280DB00C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01

changed over to Code: E6F500FFF6F53280DB00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00

Essentially what this does is replace the EWS check portion of the code with a Null Operation

I am sure there could be a more elegant way of doing this with a unconditional jump but I dont really care to figure that out since I dont own an me7 car anymore

should be noted that you should bridge the 2 ignition wires on the EWS box