MSS6x Flasher - Now released!

[MpowerE36]

I did it 2 years ago and I confirm that it is not easy. Here my topic about it :

https://nam3forum.com/forums/forum/e9x-2008-2013/e9x-coding-tuning/114162-mss60-obd-locked

[terra]

I’m working on MSS60 that might be OBD locked..

I Bench read with HEXTAG left and right side..

is there a known way to unlock these without losing the current tune…or will I have to re-flash with winkfp to get OBD read and write enabled again.

I don’t want to say it’s impossible, but it’s not trivial. The read function is programmed to return all FFs if you force the DME into a non-running state, and the program can’t be overwritten without erasing the tune.

[MARQAW]

I’m working on MSS60 that might be OBD locked..

I Bench read with HEXTAG left and right side..

is there a known way to unlock these without losing the current tune…or will I have to re-flash with winkfp to get OBD read and write enabled again.

[desmo01]

ALRIGHT. As I am not a TOTAL idiot, I did originally read the ECU program/tune out when I started. This will come up later.

So I did a full read after reflashing with WinKFP (errors present). Went to load this read into the flasher and no dice.

SO, I then loaded up the original full program file (1st read if you will), and it loaded fine into the flasher. It loaded in no problem, so went ahead and flashed the RSA bypass, and flashed the original program file/tune into the ECU.
Success! No errors, normal redline, car started fine.

So then I loaded up the program file I originally modified with Martyn's tool (on 1st read file) and flashed that.
Again, success (god it's nice the cold start is gone).

Much happier.

Terra and Martyn thank you all so much for coming out with these tools, I have 2 85s and now an S65 and I would not do so without your tools being out there. Again thank you.
If you all find yourselves in Ohio please advise so I can buy the beer!

When executing the RSA bypass (and all the other work) this time I did it with a different computer (same cable). I think the root cause to my original issue was something fucghky with my software setup in my other computer.

Turns out garbage in, garbage out.....is a thing....

Regards to all.

[desmo01]

This is the original full read I used to start the RSA bypass. I will do another tonight and upload as well. Just change attachment back to bin.

[MpowerE36]

Try to do a full read of your ecu with mss6xflasher and upload it here. We will check it.

[desmo01]

Ugh I screwed this up.

I use this software flasher and Martyn's tool on my M5's no issue. I have screwed up my M3 bigly though I think. I tried to do the RSA bypass, but it ran for like 50 minutes and would not complete. So I stopped it. Uhoh.

Car would not start would just crank. Was able to get basic info out of it in INPA, and eventually flashed it with WinKFP.

It's a manual E92, so I flashed 7854376 ZUSB. Car now will start, but gives 4500 redline and 27A0, 2B54 fault codes (control unit internal fault). I'd really like to get the car going with Martyn's tool ECU changes in it and could really use some help.

Any of you guys ( terra , Martyn ) have any ideas? Did I brick the damn thing??
Oh, and I'm using a bimmergeeks cable I got a few years back.

[GottaEvilM5]

If you've disabled the EWS with my software then the car should start and CAS sync isnt required.

Thanks for replying to my post Martyn. After posting that, I decided to start over. So I flashed the entire tune again and the car is now running. I am getting a few error codes but I have not yet had time to work through them. Just want to say - a thousand thanks to everyone who contributed and spent time on this software. It is absolutely invaluable and I greatly appreciate you all...
-Dane

[Martyn]

If you've disabled the EWS with my software then the car should start and CAS sync isnt required.

[GottaEvilM5]

I am pretty inexperienced with all this but have spent the last 30 straight hours doing research. Here is my dilemma: My DME incurred water damage so a friend sent me a virginized one matching mine. Somewhere along the way, the CAS never got synced to the "new" DME. Now, when I try to sync them, whether in ISTA, INPA or whatever, I am hiut with a message saying starting value is incorrect. I happened to stumble onto a checkbox in the binary modification tool reading "EWS delete-swapping DME's" (I'm paraphrasing lol) so I ticked the box and flashed the tune onto the DME. I again atrtempted to sync the modules using INPA, ISTA, and even BimmerGeeks ProTool with my THOR dongle, all to no avail. I am on an MSS65 running 160E in a 2007 M5 SMG. Has anyone else tried to erase the EWS with any success? Am I missing a step somewhere? Finally, would it just be easier if I went another route to 'wipe' the virgin DME with WinKFP, Tool32, or something like that? Please bear in mind that the bulk of my experience lies in ISTA and ProTool. I am a coding guy, not a programming guy... I appreciate AL of this irreplaceable and amazing software, expertise and feedback! You guys RULE!

ALSO - I read earlier in this thread that with an older (non-LCI) MSS65 that I would not need an RSA bypaa in order to obtain my ISN. However, when I click the option in the program, it requires me to use an RSA bypass. I am trying to avoid that for fear of bricking a SECOND DME in this car...

UPDATE: I just did the full read from the advanced menu, after that I tried to read my ISN butit still says I need an RSA. I tried to flash an RSA bypass but the button was greyed out. So I clicked on read tune and again tried for an RSA bypass but the button was still greyed out. Can somebody PLEASE tell me what I am missing/doing wrong?? Many thanks...

-Dane

[MPowerZ32]

You get this issue when the DME has been updated but the AIF hasnt. Easy fix is just to reflash with WinKFP again ensuring AIF updates are ticked in the options.

Thanks for the quick response. This is clearly a learning opportunity as I have not used WinKFP before. A tuner had updated my DME to 241E years ago. I will try to reflash soon.

[Martyn]

You get this issue when the DME has been updated but the AIF hasnt. Easy fix is just to reflash with WinKFP again ensuring AIF updates are ticked in the options.

[MPowerZ32]

Hi,

I'm running into a weird issue where the full read by MSS6XFlasher is considered outdated/unsupported by the Binary Modification Tool. My DME is already on 241E. Please see the attached images. This full image was read as one of the steps detailed here: https://www.ecuworx.co.uk/how-to/tak...mss6x-flasher/ . There were no errors/issues while executing all the steps in that article. Any insight?





Thanks!

[nymike]

Hello everyone,
First of amazing work. Great program. I have a question regarding flashing back to stock. I did my tune 2 years ago and saved full backup file 5mb size. Flashed my m3 with tune and drove it for 2 years. Now selling the car and putting it back stock. So I load up my saved full backup and click flash tune or flash programm ? I did rsa bypass when I flashed it first time .

[George Hill]

Thanks to terra and Martyn as well as everyone else who had a hand in this project. I just successfully deleted EWS on an MSS65 and the process was so painless. I'm really looking forward to the avenues this opens up in the future.