-
Notifications
You must be signed in to change notification settings - Fork 44
EWS Delete: How you do it
Make a 512kb read of your DME
Instructions are in the wiki
have figured out the EWS delete for the me7.2 if you care at all for the information
Search a 512kb dump for the following hex string:
Code:
E6 F5 00 FF F6 F5 32 80 DB 00
Following this is a string of hex 1A long
in my binary the hex string looked as such
Code:
C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01
Replace this hex with an string also 1A in length containing the following characters
Code:
CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00
So my string went from
Code:
E6F500FFF6F53280DB00C2F430B168412D07C2F450B168412D038A6C01C00D026F880D01
changed over to
Code:
E6F500FFF6F53280DB00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00CC00
Essentially what this does is replace the EWS check portion of the code with a Null Operation
I am sure there could be a more elegant way of doing this with a unconditional jump but I dont really care to figure that out since I dont own an me7 car anymore
should be noted that you should bridge the 2 ignition wires on the EWS box