Announcement

Collapse
No announcement yet.

MSS6x Flasher - Now released!

Collapse
This is a sticky topic.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • dpaul
    replied
    Originally posted by terra View Post

    No idea. I don't have an MSS60 to compare the board to, though a friend said he'll try to get me good pictures tonight.

    I know MSS60 uses EWS4 and MSS65 uses EWS3, and there are some component changes due to that (EWS3 uses unidirectional communication while EWS4 uses bidirectional). EWS4 is supposed to be able to fall back to the CAN-bus though so that in itself might not be a big issue

    What I don't know is if there are hardware differences for things like the ionic module or if it's just purely software.

    Really wish we could do something about the BDM access short of replacing the whole CPU.

    .
    I wonder if there is something that can be done about BDM access. The Freescale data sheet for the MPC56x clearly defines a mechanism for hardware censorship of the internal flash (UC3F) by setting censorship bits in the UC3F EEPROM Configuration Register. Censorship explicitly applies to debug modes (BDM or NEXUS), when booting from external memory or while under control of an external master. It seems like a simple mechanism that BMW might have employed to frustrate their customers. Perhaps you've already thought about this and could explain why it might or might not be a viable approach.

    One technical problem is that in-circuit debugging tools are necessary to access and set bits, something like CodeWarrior and a PEmicro USB FX hardware interface. It's not clear to me from casual inspection of the data sheet but the shadow register censorship bits might not ever be accessible. In any case, I don't have such tools and their cost is not trivial. Second problem is that censorship cannot be cleared without loss of flash memory contents. So if you don't know your SK/ISN, and don't know how to retrieve it from the CAS3+ where it is encrypted (which I do not), you will never be able to start your car (unless you know how to defeat EWS, which I do not).
    Last edited by dpaul; 04-14-2020, 03:33 AM.

    Leave a comment:


  • Martyn
    replied
    I've successfully read read out partial and fulls from my bench MSS65 with this with no issues. I have flashed back modified partials with no issues over CAN so far (using a Bimmergeeks cable).

    Leave a comment:


  • Dash1
    replied
    Originally posted by terra View Post

    Cool - is he willing to sign up and get in touch with me?
    Yes, I'll pm you when he's signed up

    Leave a comment:


  • terra
    replied
    Originally posted by snowcarver View Post
    Interested in testing too! I've got a MSS60 in the garage and have a good bit of experience with BDM flashing/recovery if necessary. I have a bench setup as well. Please PM me details!
    Sent you a PM.

    And for everyone who has the app, please give me some feedback as soon as possible.

    Leave a comment:


  • snowcarver
    replied
    Interested in testing too! I've got a MSS60 in the garage and have a good bit of experience with BDM flashing/recovery if necessary. I have a bench setup as well. Please PM me details!

    Leave a comment:


  • terra
    replied
    Originally posted by Dash1 View Post
    I have a friend with an e60 m5 who’s interested!
    Cool - is he willing to sign up and get in touch with me?

    Leave a comment:


  • Dash1
    replied
    I have a friend with an e60 m5 who’s interested!

    Leave a comment:


  • dpaul
    replied
    Bravo! Much faster than KessV2! Love to try it but my MSS60 (from MY 2011) is not BDM accessible so I'll have to restrain myself..

    I wanted to ask whether the MSS65 flashed with MSS60 code will run the S65 engine? I know this has been discussed before but I do not recall if anyone actually went the distance and tried it.

    Leave a comment:


  • terra
    replied
    Sent out PMs to those who expressed interest

    Originally posted by SYT_Shadow View Post
    This looks awesome. Unfortunately my E9X M3s are 2011 and 2013!

    Good to hear from you terra !!! Long time no see
    Yeah so the application will work on even later MSS60s, it's just there's no recovery options should something drastically go wrong. I don't *think* there are any permabrick bugs left in the application, but I'll feel more comfortable about that when I have a few people with recoverable DMEs confirming that they did not have to recover anything.

    Leave a comment:


  • terra
    replied
    Cool, I'll send out PMs shortly. Just converting my DME back into an MSS65 to make sure I didn't break anything while fixing things up for the MSS60.

    Leave a comment:


  • hansbrix
    replied
    Interested, I have a few M5s. PM sent.

    Leave a comment:


  • Obioban
    replied
    Awesome

    Leave a comment:


  • Da Jemster
    replied
    🙋‍♂️ I'm all stock (well...just AFE intake)

    Leave a comment:


  • SYT_Shadow
    replied
    This looks awesome. Unfortunately my E9X M3s are 2011 and 2013!

    Good to hear from you terra !!! Long time no see

    Leave a comment:


  • Martyn
    replied
    I'm happy to try this Mirza, I have a bench MSS65, and one in my vehicle I have a bench MSS60 here too.
    Last edited by Martyn; 04-13-2020, 10:39 AM.

    Leave a comment:

Working...
X