Announcement

Collapse
No announcement yet.

MSS60 OBD locked

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    MSS60 OBD locked

    Hi,

    I tried to read via OBD the MSS60 of friend which has an ESS tuning compressor on his engine but it seems to be OBD locked. MSS6x flasher succeeds to identify the ECU but when I click on “Read Tune”, I have “Something went wrong, please try again” (see picture attached). terra do you know what can cause this message ?

    Unfortunately this DME (2008) is injection BDM locked, so I was only able to read the ignition external and processor memories.

    Does someone have a solution to read the injection memories ? I know it is quite a challenge via BDM.

    Strangely, INPA says that I have a 240E program (AIF area) but in the ignition binary it is a 231E program as MSS6x says. Is 231E program a custom program "created" by ESS tuning ? Can it causes my OBD read problems ?
    Attached Files
    Last edited by MpowerE36; 07-09-2021, 01:50 PM.
    https://www.youtube.com/channel/UCwN...zf45mXp6PDOCzA

    #2
    A lot of tuners downgrade DMEs to 231E for some reason. Dinan did so as well.

    I don't think there's a feasible way to extract the data from your DME. Just to be sure, are you able to read other DMEs with the application?

    Comment


      #3
      Originally posted by terra View Post
      A lot of tuners downgrade DMEs to 231E for some reason. Dinan did so as well.

      I don't think there's a feasible way to extract the data from your DME. Just to be sure, are you able to read other DMEs with the application?
      Yes I did a full backup of my MSS60 (240E program) with your soft without any problems.

      Is it possible to overwrite the program and the tune with an OEM 240E to unlock the reading by OBD ?
      https://www.youtube.com/channel/UCwN...zf45mXp6PDOCzA

      Comment


        #4
        No. On these DMEs, erasing the program section automatically erases the tune. If I knew what they did to lock the reads, then I might be able to figure out a work around, but without having a dump from a BDM unlocked DME, that's difficult to solve.

        *probably* wouldn't be impossible to dump using some sort of glitching attack, but developing such an attack is beyond my capabilities.

        Comment


          #5
          I don't understand why it would be a problem to erase the 231E program and tune via OBD (if it is possible, I haven't tried yet) and then flash back an OEM 240E program and tune. Maybe It would unlock the DME because I guess the trick is in the program or in the tune. Before I opened it, the DME never seems to have been opened, so the bootloader must be stock.

          If someone has an OEM 231E program and tune maybe it will be possible to find the trick because I have the full ignition part extract via BDM (if the trick is in the ignition section too).
          https://www.youtube.com/channel/UCwN...zf45mXp6PDOCzA

          Comment


            #6
            I got this E231 (I think I should got all versions) but Iam awarded a bit to offer it because in few times I would offer EWS / CAS Delete by martyn tool and we also will insert obd lock (also bdm lock will comes but need some more testing).

            Comment


              #7
              I have an unlocked 231E program saved somewhere. Maybe I can figure out the lock looking at your ignition dump. Though I don't have nearly as much free time as I used to back when I built the app in the first place.

              Comment


                #8
                Originally posted by terra View Post
                I have an unlocked 231E program saved somewhere. Maybe I can figure out the lock looking at your ignition dump. Though I don't have nearly as much free time as I used to back when I built the app in the first place.
                terra so could you share your 231E program ?
                https://www.youtube.com/channel/UCwN...zf45mXp6PDOCzA

                Comment

                Working...
                X