MSS6x Flasher - Now released!

[tdott]

I have successfully gotten a full read from the dme, including the isn using terras software, but a couple things I’m unsure of:
1- mss6x flasher software spits out ISN from dme and cas, but is the cas ISN from the donor dme car (as in, does the dme record the isn from the cas module it’s originally fitted with, in this case the donor car), or is it in fact the ISN from the cas module in my car (the original cas that’s currently connected and has been connected, to my car)?

I am no expert and probably best to wait for one to chime in. But I know sometimes it might take a while for one to reply. So I will chime in until then.

Can you confirm if you were able to get a full read/isn/etc from the original dme to the car? That didn't seem clear to me in your post if you were able to. If that is possible it would be the best solution, you can just clone everything to the donor dme and it would be like it was the original afaik keeping mileage and vin in tack.

If you can't do that, then I think your best approach is to use the donor dme, and get the immobilizer/ews deleted and that should get you to atleast start the car using your original cas and key. I am unsure of if you'd need to change the vin or mileage/etc in the dme. Nor do I know how to do that, but I think it might be an option.

The other option would be to swap in the donor dme with matching cas/key, and use that to start the car, but then I think you'd somehow still need to change the vin/mileage to match the original car and like above I'm not sure how/if that can be done or how.

[e82s65]

Hello,

first off, thank you terra and all others involved with this project and for each of you who are taking the time to help us users make more sense of this side of our cars - I don’t think any of us (myself included) truly grasp the amount of time and effort you guys put into all this, and the fact that some of you are doctors or not professionally involved/vested in this industry yet have been able to reverse-engineer these dmes and create applications to work with them, on top of being full-time productive members of society in your own fields, it’s very very impressive and respectable. I myself am just a mechanic trying to get some projects finished which is why I’m posting…

long story short, one of my projects is an e60 m5, ebox went swimming from a clogged drain which took out the dme. I have since installed a used dme (verified to be working), and I’m trying to match the isn to get the car on the road. Now I can easily swap over the cas/key from the donor car to get it running but I don’t want a mileage discrepancy or have other issues with mismatched vins in various control units when it comes time to code the car for the active seats I installed (car is an 06, I completed a full lci retrofit - complete interior including active seats, dash with lci switch cluster, infotainment, door panels with lighting package, soft close, everything).

I have successfully gotten a full read from the dme, including the isn using terras software, but a couple things I’m unsure of:
1- mss6x flasher software spits out ISN from dme and cas, but is the cas ISN from the donor dme car (as in, does the dme record the isn from the cas module it’s originally fitted with, in this case the donor car), or is it in fact the ISN from the cas module in my car (the original cas that’s currently connected and has been connected, to my car)?
2 - what now? Lol

Jokes aside, I unfortunately have not been able to make sense of the next step. My understanding is standard tools will be of no use here, winkfp/tool32 are not going to allow me to change isn, nor will other free tools out there (from what I’ve been able to gather on my own) like the binary mod tool from ecuworkx just to name one. So do I need to get my hands on a hexeditor software of some sort in order to complete this process and with that software will I require any specific set of tools or interface devices for it? I’m assuming I download a software that will allow me to edit the data, extract my read into the software, pull my hair out trying to find the data I need to edit within that software, change the necessary data, load the updated file into mss6x flasher, program ecu and off I go… easier said than done I’m sure but I’m hoping I’m at least correct up to this point. I’m not looking to monetize or take advantage of the help I’m hoping to receive here, just simply trying to be a little more self reliant as I have a handful of other projects in the works that will require me to be more competent with this side of things in order to speed up the process.

So if I do need a particular software or set of tools on top of what I already have (ICOM, kdcan cable, all factory software tools, mss6x flasher of course), can anyone tell me specifically what I need to complete the puzzle, or have any recommendations to point me in the right direction (aside from the obvious need to set aside a lot more time for learning and research)? Any help is greatly appreciated.

Thank you in advance.

[daavin34]

I am going to install 241 e on my car but I will modify with ECUWorx to remove the lambda control but I am also considering increasing Max Rpm. What do you think ? is it risking to increase Max Rpm to 8600 out of 241e ?

[Martyn]

It's not a DIY process, you'd need someone to do the DCT change for you.

[daavin34]

Thank you for your answer. How can I make this change

[Martyn]

Both modifications (DCT and engine DME) need to be changed.

[daavin34]

Hello everyone, I am considering installing a 3.62 ratio for my m3 with dkg. I want to know if the modification by the ECUWorx binary modification software is enough to recover the engine restart and the shift light as originally? or should I also modify the dct calculator?
thanks you

[Tatsumaki]

someone could tell me if with any of the 2 cables that I attach. Could I flash my mss60(mss6x soft) without brick problems ??? white yesterday reprogram with an external programmer the atmel162 with ediabaslib and it works fine(cable white). and the blue is as it comes. Thank you!!

[bryce007]

Hi All,

Having a weird issue flashing a 08 M3 MSS65. Unable to load either modified or read bin to the tool - get the error "External Flash Not Valid"

1. Was using a ediabas flashed cable, however untested but mid way programming RSA bypass flash failed.
2. Recovered ECU flashing 241E via ICOM with WINKFP. Car starts and runs fine.
3. Sourced my old bimmergeeks pro cable which I have used 4x before with MSS6x flasher without issue.
4. Did a full read again with working recovered 241E from WinKFP in MSS65 flasher.
5. Edited Full read in ECUWorx without issue.

However, when loading either the modified BIN or even the Full unmodified read in MSS6x flasher I get the instant error "External Flash Not Valid"

Any ideas why this is happenning and what I can do to resolve? As stated above car is running fine and has no faults in ISTA+ after recovering ECU with WinKFP.

[MpowerE36]

You would have to unlock the cpu or replace the cpu and then program it with a backup

If I buy a new cpu, replace it and then program it with a backup (via bdm I suppose), what will be the censor bit values ?

[hobbit382]

I got the ram read I needed, but don’t have a car to test on. If someone has a spare dme they would like to try ews delete on
change 0x65387 from 03 to 01 and report back. I will create a new thread so this doesn’t get cluttered.

[andriym6]

Hi, your pictures arent very well.
I've attached what you want

Write files and dme back to life. Write isn in cas program dme and start the car.
Many thanks for sharing files.

Sent from my SM-N960U using Tapatalk

[MpowerE36]

You would have to unlock the cpu or replace the cpu and then program it with a backup

That's what I was afraid of. As hobbit382 said, it would be great if you could take some time to do a tutorial to explain how to unlock the cpu. I think it could bring back to life some ecu.

[terra]

Yes I am talking about BDM lock. So if a writing via OBD stops during the flash of the internal flash of a locked left processor there is today no solution to recover the ecu ?

You would have to unlock the cpu or replace the cpu and then program it with a backup

[MpowerE36]

If you're talking about the BDM lock it's locked down unless you clear and set the the registers (which will erase the contents of the internal flash). For OBD read lock - I guess it depends on how you do it. The way I know how to do it would not break writes.

Yes I am talking about BDM lock. So if a writing via OBD stops during the flash of the internal flash of a locked left processor there is today no solution to recover the ecu ?