EWS delete testing

[Adrianglasgow]

Hi guys I beg you please. Can someone help me find location of the bytes for ews delete? Ive been looking for it and searching internet for the last 6hours with no luck. I uploaded a full kess read. I also have kess partial and a full bdm backup of both cpus if its needed.

[terra]

MSS70 is pretty easy, I could probably whip up a flasher without too much difficulty. I'm just not at my test bench and stuff right now.

[MSSAddict]

I’ve done a couple. The last one with a dry dump with 350whp but had a big dip at ~7k that I could never figure out.

The problem is the scarcity of these ECUs, I haven't really had time to study it well

[hobbit382]

Very interesting your tool
The dump looks like the MSS6X

I have Remap rarely, it will be my second this car is quite rare

I’ve done a couple. The last one with a dry dump with 350whp but had a big dip at ~7k that I could never figure out.

[hobbit382]

I've written a tool to dump the MSS70 from the Z4M already. It's the writing part I'm yet to crack

BDM read from my MSS70 attached: https://www.ecuworx.co.uk/uploads/BDM_Read_MSS70.zip

kess does a rsa bypass. I should have a read with before and after somewhere. Bimmerlabs has a tool that will flash the partials after rsa is bypassed. Much much quicker than kess.

[MSSAddict]

Very interesting your tool
The dump looks like the MSS6X

I have Remap rarely, it will be my second this car is quite rare

[Martyn]

I've written a tool to dump the MSS70 from the Z4M already. It's the writing part I'm yet to crack

BDM read from my MSS70 attached: https://www.ecuworx.co.uk/uploads/BDM_Read_MSS70.zip

[MSSAddict]

In 2 weeks I have a Z4M to do, I will post the full * Fullbinary and partial * MSS70 dump if anyone is interested,terra do you think your software can read these ECUs?
I will read it with my KESS, if you are interested to watch the full dump
hobbit382

[MSSAddict]

terrahobbit382
Congratulations to terra for her great tool and congratulations to hobbit382 for sharing..
there was a huge bizeness around that with absurd prices and it had to stop, everyone must be able to swap an S85 or an S65 without spending thousands of euros/dollars

Sportingly

[MpowerE36]

I’ve been working on ews delete for everyone, but don’t always have a car available to test on. If anyone has a spare dme and would like to do some testing change byte 0x65387 from 03 to 01 and report back.

update: tested and confirmed

Mss60 241E
change byte 0x65387 from 03 to 01
(Confirmed)

Mss65 160E
change address 0x60FBC from 40 82 to 48 00 (confirmed)

MSS65 520E
change address 0x62DA8 from 40 82 to 48 00 (confirmed)

special thanks to Terra, for all the hard work he has put into this flasher and everything else!

Congratulations hobbit382 and thanks for sharing. You find it very quickly. Very impressive !

[hobbit382]

hobbit382


https://www.instagram.com/tv/CTVDyiq...dium=copy_link


I tested both the 160E version and the 520E version

And Software Version 520E works perfectly

thank you

[MSSAddict]

I’ve been working on ews delete for everyone, but don’t always have a car available to test on. If anyone has a spare dme and would like to do some testing change byte 0x65387 from 03 to 01 and report back.

update: tested and confirmed

Mss60 241E
change byte 0x65387 from 03 to 01
(Confirmed)

Mss65 160E
change address 0x60FBC from 40 82 to 48 00 (confirmed)

MSS65 520E
change address 0x62DA8 from 40 82 to 48 00 (this software version is still untested but should be the same, if anyone test and confirms let me know so I can remove it)


special thanks to Terra, for all the hard work he has put into this flasher and everything else!

hobbit382


https://www.instagram.com/tv/CTVDyiq...dium=copy_link


I tested both the 160E version and the 520E version

And Software Version 520E works perfectly

[hobbit382]

It works!! Flashed a spare ECU with the 1 byte change and she fired up right away.

Only DME code I see is 2792 DME: Power management, vehicle electrical system but I think that was previously logged in the ECU as the mileage reported is much much greater than the car mileage.

Seems you got it - great work.

sweet! Thanks for testing.
I’ll update the original post for everyone.

[pshoey]

It works!! Flashed a spare ECU with the 1 byte change and she fired up right away.

Only DME code I see is 2792 DME: Power management, vehicle electrical system but I think that was previously logged in the ECU as the mileage reported is much much greater than the car mileage.

Seems you got it - great work.

[hobbit382]

I do have several spare MSS60 ECUs - so just to be clear (sorry for appearing dumb here!!) you want me to patch one of my spare MSS60s units, then install in vehicle and see if she starts and what codes might be logged?

correct. Having the stock dme, would probably start no matter. Use one of your spares and see if it will start.