MSS6x Flasher - Now released!

[terra]

The obd read protection has nothing to do with the UC3FMCR register. The read code is simply set to return 0xFF when reading certain addresses.

[dmlf]

[*]If successful, the key is displayed in the application and a file with the SK is saved (file will include the appropriate header to be pasted in directly at 0x7948 of the injection dump)

I don't understand why the SK would be at this position, I saw that you where able to dump the UC3FMCR which was 43 FF 00 FF, which means PROTECT = FF so the only protection would be through SBPROTECT + SBEN .
But in the datasheet the first two blocks layout is 16K (SB[0] + 48K ; 48K +16K SB[1] ), so 0x7948 would be inside the remainer of BLOCK[0] right ?
which should not protected

I am lost

[dmlf]

Thx, it works, my on/off switch was dead !

[MSSAddict]

Just tried this without success on an ebay dme.

MSS Flasher -> INPA Cable ( Pin 6 to -> DME X02-14, Pin 14 -> DME X02-1, both 12v connected, GND connected )

Maybe I am missing something to wakeup the dme ( some kind of ignition signal )?

MSS60/65 is identic

[dmlf]

I have used this pinout for bench-connection with good success: see attached picture.
You will need to set your cable to D-CAN.

Just tried this without success on an ebay dme.

MSS Flasher -> INPA Cable ( Pin 6 to -> DME X02-14, Pin 14 -> DME X02-1, both 12v connected, GND connected )

Maybe I am missing something to wakeup the dme ( some kind of ignition signal )?

[MSSAddict]

I am having issues doing a read on my M6 (MSS65)
I have a custom tune on it that was flashed from an encrypted binary via a Freiling IFlash cable. I figure that the flashing software for that decrypts the binary before flashing it otherwise the DME wouldn't function. Problem is I cannot read it back to do some changes with the ECUWorx app because the read always fails. Is this common? I am using the MSS6x Flasher to read via a Ediabas flashed cable, also tried with a regular K+DCan cable.

With a BDM, I think You can read Your file

[Martyn]

Yes it's very common, you'll either need to flash your stock file back with the Frieling cable, or write back to stock with WinKFP before you'll be able to read with MSS6x Flasher.

[mbwilding]

I am having issues doing a read on my M6 (MSS65)
I have a custom tune on it that was flashed from an encrypted binary via a Freiling IFlash cable. I figure that the flashing software for that decrypts the binary before flashing it otherwise the DME wouldn't function. Problem is I cannot read it back to do some changes with the ECUWorx app because the read always fails. Is this common? I am using the MSS6x Flasher to read via a Ediabas flashed cable, also tried with a regular K+DCan cable.

[MSSAddict]

terra
hi
Is it possible to add a pop pup when the RSA bypass is finished, and also when the RSA bypass is finished and we want to close the tool, it tells us that we can return the dme unusable if the tool is closed, while the bypass is finished ...

[MSSAddict]

The ISN number on MSS6X Flasher tool matches well in winOls,

[MSSAddict]

The RSA BYPASS went well for my MSS65 on the bench,
Now i can read the RAM and lSN Number

[sjsuM5]

You could make a full backup, flash to stock with WinKFP, and then flash your backup back.

l’m a little nervous about using WinKFP, I still have a back-up of my stock tune, can I just re-flash that?

[terra]

I have tune on my E60 M5 that failed CA smog inspection.

With this software can I...

1. Backup my DME with tune
2. Flash DME back to stock (so I can pass smog inspection)
3. Re-flash DME with tune

You could make a full backup, flash to stock with WinKFP, and then flash your backup back.

[sjsuM5]

I have tune on my E60 M5 that failed CA smog inspection.

With this software can I...

1. Backup my DME with tune
2. Flash DME back to stock (so I can pass smog inspection)
3. Re-flash DME with tune

[Lambda1]

You got PN .
Mates I hope you understand I dont share this file with all... is taken from mine ecu ... so also VIN, SCK... inside and I dont want share to all.
Thanks for understanding.