MSS6x Flasher - Now released!

[MpowerE36]

Yes you can buy a KTag or FGTech v54 to try flashing your backup but if your injection processor is bdm locked, you won't be able to recover it. You need a special debugger tool to unlock the bdm access of this processor. If you want more information about it you can read the "MSS60 Research" topic from Terra.

[binary420]

So based on what I've found online, it seems my only options are to either buy some device to possibly be able to bdm flash the backup to the ecu,
or otherwise to buy a replacement mss60 ecu.

And if I want it to work with my car, I'd either need to immo off flash the new dme,
or buy a matching dme/cas/key set

Is there no other solution to recover the dme with say nfs emergency flash or something?

[binary420]

One thing that wasn't made clear to me in the directions is:

Once rsa bypass is added, is it permanently bypassed?
Or can it be relocked again?
the instructions say add the bypass first time, then flashes can be performed at will,
But wasn't clear what exactly that meant

My non-coder self was left scratching my head on what that means.
But now I'd very much love to just get it fixed

Especially now after it got bricked

[binary420]

So yes your dme is bricked. The only way to recover it is to write a full binary via bdm. Do you know if your injection processor is bdm locked ?

I tried reading it with tool32 ident, and winkfp, and scan tool but nothing could read it.

Then I tried for shits and giggles with an older program in bmwkiller software package, and it showed something in German saying "~~german~~blocked" so that might be what yr referring to.

I have a x431 scanner and an xprog3 programmer can this be performed with that or I gotta order a different programmer

And then is there any guide / walk through for performing this unlock

In other words no I don't know if its locked.
I had flashed the rsa bypass previously though so unless winkfp added it back then should b unlocked

[MpowerE36]

Sadly no

So yes your dme is bricked. The only way to recover it is to write a full binary via bdm. Do you know if your injection processor is bdm locked ?

[binary420]

Does MSS6XFlasher succeed to identify your dme ?

Is there any way to auto recover with Battery reset or similar? Or can it be recovered on bench? Luckily I have the full backup but I'd prefer to fix this one if at all possible

[binary420]

Does MSS6XFlasher succeed to identify your dme ?

Sadly no

[MpowerE36]

I had flashed my 2008 e92 m3 s65 with mss6x flasher
took the full backup, injected the bypass, all went smooth.

I then Flashed it again with 1 byte changed for immo off.
it also was successful..

However my whole initial reason for doing all this was because i was having issues syncing my dme/cas, and engine was cranking but not starting.

I read about the immo off solution to bypass the syncing requirement, so i thought id give it a go.

The modified flash was also successfully, but engine still was not starting.

So I then eventually attempted an update with winkfp to bring it back to stock, and it got to 100% and errorer out.

Now it's not responding in winkfp

Please tell me my ecu isn't permanently fucked

Does MSS6XFlasher succeed to identify your dme ?

[binary420]

I had flashed my 2008 e92 m3 s65 with mss6x flasher
took the full backup, injected the bypass, all went smooth.

I then Flashed it again with 1 byte changed for immo off.
it also was successful..

However my whole initial reason for doing all this was because i was having issues syncing my dme/cas, and engine was cranking but not starting.

I read about the immo off solution to bypass the syncing requirement, so i thought id give it a go.

The modified flash was also successfully, but engine still was not starting.

So I then eventually attempted an update with winkfp to bring it back to stock, and it got to 100% and errorer out.

Now it's not responding in winkfp

Please tell me my ecu isn't permanently fucked

[Ghost]

Hey guys, maybe somebody know if there will be more features coming soon for the mss6x flasher? And is it possible to read/write a 2011 DME which is tuned before with a custom flash?

I want to buy everthing i need for this tools, but before it starts i have to know this.

thanks!

[Cubieman]

Use the bimmergeeks cable to flash back to stock with Winkfp.

Thanks, will try that tomorrow, I hope the bimmergeeks cable works with winKFP.

I don't understand why the cable works fine with INPA/ISTA etc. on an E46 M3/ two different 2007 M5's but not a 2010 M6.


Edit: Got the cable to work by changing an ini file in edbias

[Martyn]

Use the bimmergeeks cable to flash back to stock with Winkfp.

[Cubieman]

My buddy and I just flashed a tune onto a 04/2010 M6 using a non bimmergeeks kdcan cable, the flash said it was successful but we now have DME related codes/ multiple module codes/ limp mode:

2B54 Control module internal fault
27A0 Control unit internal

We used the same cable to flash the stock full read my buddy pulled and it says that it flashed successfully but we have the same DME issues/limp mode. The "full" read is only 128kb so I'm not sure if that's correct or not.

He and I both have the bimmergeeks cable and both cables will NOT communicate with MSS6X Flasher or even INPA, both cables will communicate with my buddies 2 M5's, both MY 2007.

We are getting nowhere currently and in need of some help.

Thanks.

[Ghost]

Do you think its useful to add a feature for the M models that blocks the ignition and fuel for a time of maybe some seconds before the engine really starts based on oil temp or water temp? I mean if the oil temp or water temp higher then X degree then the engine should start like normal.

If u are not driving a week or longer the oil pump needs some seconds to oil coated every part in a cold engine. Maybe it could help to keep alive the rod bearings and other parts inside much longer.

[Martyn]

I've seen this before, I manually had to change the software reference in the tune so both sides matched, it then flashed in fine.