BMW MS42 & MS43 Boot Mode and Full 512k Flash Read

Рет қаралды 32,472

Chesapeake Motorwerks

Күн бұрын

Пікірлер: 55

@Mattispottiger 2 жыл бұрын

Thanks for clearly explaining the wire harness 👍🏼

@ailo4x4 2 жыл бұрын

Hi, related question that I just can't seem to find an answer to. I have an M52TU28 with the MS42 swapped into a Land Rover Defender. BUT...I have no OBD2 port. I have one now cut out from a similar year BMW and want to wire it into the ecu so I can connect a scanner to it. How do you connect the port to the ECU plugs?? Any help greatly appreciated. Many thanks!!

@chesapeakemotorwerks Жыл бұрын

Hopefully this makes sense... At least on an E46 equipped with the MS42, the wiring diagram indicates pin 16 on the OBD-2 connect (.5mm^2 red/yellow/white) is battery voltage through a 5A fuse, pin 5 is chassis ground (.5mm^2 brown/black), pin 4 is chassis ground (.5mm brown). Both grounds appear to have originally been grounded to the chassis under the driver's seat. The brown/black ground looks like it's used for sensors and low current devices, the brown one is shared with higher current devices although I think any solid ground will likely work fine. Pin 7 is diagnosis bus 2 (.35mm^2 white/violet/yellow) and originally was wired into pin 2 of the BMW diagnostic port under the hood and I believe connected by a bridge in the cap to the rest of the diagnosis bus.This wiring was changed on later models to directly connect pin 7 of the OBD-II port to the DME. If I'm reading this correctly, you are looking for a white/violet wire on pin 32 in connector x60004 for the DME.

@ailo4x4 Жыл бұрын

@@chesapeakemotorwerks Many, many thanks! Just curious, would it be the same for the MS43? I ask because I may be upgrading to the M54b30 intake manifold, throttle body, pedal, and ecu. But I would still have the same 'no obd2' port problem. I really appreciate it!

@chesapeakemotorwerks Жыл бұрын

@@ailo4x4 The wiring for the ms43 looks the same plus there are additional wires added for switched +12v on pin 1, diagnosis bus 1 on pin 8 (white/violet), and "F_TD" (black) on pin 9. They're each wired into internal bus connectors in the car. I suspect the OBD-2 functions will work if you leave it wired like an MS42.

@cvnic Жыл бұрын

How do you even figure all this stuff out? I doubt Siemens has made documentation available so is it just trial and error? Please enlighten me

@chesapeakemotorwerks Жыл бұрын

I can't take credit for this one as I'm just following in others' footsteps, but I'll try to do a video on reverse engineering in the future. Obviously the more documentation you have, the easier it is. You're right that Siemens does not make documentation publicly available for this ECU however documentation can sometimes be found. Because this is a German product, that documentation is usually referred to as a the "funktionsrahmen" or FR. For boot mode, that documentation will go with the processor that powers the ECU; this can be found by opening the ECU, looking at the markings on the chips, and then finding the original documentation which will detail the pinouts for the processor and the internal workings. This is almost always publicly available. For the MS42 and MS43, the Infineon C167CR-LM is used. I'll post a link in a follow up post because youtube might delete it. From there the next step would be to dump the memory contents and start disassembling it which is a very tedious and lengthy process. Another note is that due to the existence of public documentation on the internal components, some manufacturers will actually conceal the part numbers by covering them in epoxy or sanding the markings off in an attempt to make reverse engineering more difficult.

@chesapeakemotorwerks Жыл бұрын

This site has a lot of documentation on the C167CR https [COLON] //www [DOT] keil [DOT] com/dd/chip/2914.htm

@KlucharSofia-f1j 2 ай бұрын

Hi friend,I wanted to ask what windows this program works with, is there anything specific about the installation? Thanks👍🙏👍🙏

@AK-pm6nu Жыл бұрын

Hey man, it is a great video! But 1 have 1 question. I have installed romraider and read/adjust/ write. Is no problem But i want to see the knock tables on romraider logger. I can t see. Can you tell me please if it possible to see the knock adaptation tables on romraider logger. Ms42 323i Tank you

@chesapeakemotorwerks Жыл бұрын

I'd have to look at your specific romraider definitions. The partial flash definitions are generally more defined than for full flash, however I think most people are using TunerPro right now where a comprehensive set of definitions are available.

@shakcs6529 11 ай бұрын

@chesapeakemotorwerks what should I use need engine to go in a e34 ews off is a must 😢

@wikiliks1187 Ай бұрын

Im getting "echo error" while reading.....

@SniperNuggetz79 6 ай бұрын

Hello! Loved the video!! I have some questions hopefully you might be able to answer lol. Okay I’m going to sound like a novice but that’s because I am haha. Okay so I have a ‘05 3.0 MS43 E53 X5 and I’m pretty sure the dme has been soft failing for reasons too long to get into. Anyways, so I have a windows laptop and INPA and have done simple processes before like adaptations and reading live data so I’m not necessarily afraid to do any of this work but I also don’t want to fry anything. So, I am planning on going to one of my parts MS43 E46’s and cutting out the obd2 pigtail, dme pigtail, and possibly ews and antenna key ring pigtails as well just to possibly create an entire bench setup (but ignore the ews and antenna key ring pigtails for now, not necessarily relevant to my question). So, let’s say I get a spare MS43 3.0 X5 dme from a wrecking yard, would I be able to clone the original X5 dme to the new junkyard dme using this setup you made? I wouldn’t have the 2 x 2 volkswagen pin adapter but if I had the obd2 port pigtail cut straight from the E46 i mentioned earlier, that would practically be the same right? I’ve never done any kind of dme flashing or tuning of any sort so I’m just trying to pick your brain so I don’t mess anything up LOL. Also, would a 2.5 and 3.0 dme be the same after boot mode? Like is boot mode kind of like factory reseting and removing the engine tune/flash or does that stay? Just so I know that way I don’t grab a MS43 2.5 dme when I’m out there

@SniperNuggetz79 6 ай бұрын

Also, how would I go about the vin numbers being different too? (or is that something erased after in boot mode too)

@chesapeakemotorwerks 6 ай бұрын

Boot mode really isn't necessary for too much these days so you can just use ms4x flasher over the obd-2 port although the same setup I used in the video also works - you just don't need to open the DME. You can "clone" the original DME just by saving the original flash image (bin file) and writing it back to the junkyard DME. IIRC, EWS is the one thing you'd need boot mode for to properly clone, but you can just disable EWS using the community patch and avoid it altogether. Do be careful writing in boot mode as it's possible to overwrite the factory calibration, particularly the type of internal MAP sensor the DME uses, which can cause problems. Always back up the DME first even if it's a donor so that you can revert back. As for the cable, yes, you can use a pigtail and it will work great.

@chesapeakemotorwerks 6 ай бұрын

It's baked into the flash bin and can be updated outside of boot mode from what I recall.

@Tom-xj5yb 2 жыл бұрын

what is the cheapest way to supply 12V? Is there a minimum/maximum current?

@chesapeakemotorwerks 2 жыл бұрын

PC power supplies can be modified to work and provide fairly clean power. Batteries are perfectly clean and should work fine as well.

@northernmaten7676 Жыл бұрын

@@chesapeakemotorwerks can i use a spare car battery which is 12v 70amp?

@chesapeakemotorwerks Жыл бұрын

@@northernmaten7676 It should work for the ms42/43. In general, programming voltage should be a little higher than battery voltage and some ECUs like the M5.2 in the early E39 540i will brick when programmed with low voltage. Be VERY careful when using a car battery, they can deliver a lot of current and easily cause a fire if not fused.

@v0lts 9 ай бұрын

I'm so confused when researching about writing MS42, the CPU seems to be a Siemens C167 which is the same as in the ME7.5 ECUs which can be read/written completely via OBD except if they are bricked. Why is it necessary to put these ECUs into boot mode? And why do I have confimation that a tuner tuned my friends car (328i, MS42) just by sitting in it and flashing via OBD? The info is so scarce it is driving me crazy.

@chesapeakemotorwerks 9 ай бұрын

These can be EWS deleted over OBD now. If you want to mess with the EWS tables and some other calibration data no one should touch, I believe this is the only way.

@v0lts 9 ай бұрын

@@chesapeakemotorwerks Ok, so for just flashing a tuned file OBD is enough? This is then just needed for EWS etc.?

@chesapeakemotorwerks 9 ай бұрын

Yes, that is correct.

@chuyontop-gp2te 6 ай бұрын

another question when i ground the negative on the black plug, where do i ground it to, the 2 brown wires or do i ground it from the power source

@chesapeakemotorwerks 6 ай бұрын

ground to the power source (power supply) on the bench. On my bench supply, I have black, green, and red terminals. Black on the power supply goes to the brown wires for the black plug and red on the power supply goes to the red, red/yellow, and green wires on the plug.

@skiller12100 12 күн бұрын

Hey, is it possible to do it with oem bmw obd2 port ( replace volkswagen adapter) if i put +wires to 12v and ground to ground on pc power supply and pin nr7 to x60004 pin32

@skiller12100 12 күн бұрын

I have all plugs to connect ecu to bench but im missing vw adapter

@skiller12100 12 күн бұрын

Could it work?

@TunerCar-y6g Жыл бұрын

Hello bro I have bimmer ews delete software do I need bootmode ms43 to delete ews from ms43

@chesapeakemotorwerks 11 ай бұрын

Bootmode is not required to delete EWS, it can be done via an OBD flash with MS4x flasher. Checkout ms4x.net

@nicolasojeda4998 2 жыл бұрын

Maps are into de uC or 29F400BB memory? Thanks

@chesapeakemotorwerks 2 жыл бұрын

They're in the 29F400BB memory. CobraRTP has a flash emulator to trace & change them live.

@قاسممحمد-ر9ظ9ب Ай бұрын

Nice explain please can you send the original file to me and thanks

@hannya29 3 жыл бұрын

Why not use the same k dcan cable via obd and do a full read?

@chesapeakemotorwerks 3 жыл бұрын

You can in most cases do a read via OBD. However, this method is the only one that can (afaik) capture the ISN and VIN needed to clone or fully backup an ECU.

@alexmasango2400 2 жыл бұрын

Can flashing in a wrong file corrupt my ecu?

@chesapeakemotorwerks 2 жыл бұрын

I think it's pretty hard to brick the ECU completely as it is generally recoverable with JMGarage Flasher. However, if the file is wrong/corrupt/not checksum corrected/etc, the ECU will not work until a good file is flashed back to it. I've also heard of ECUs going bad.

@waldemarfechtel1644 3 жыл бұрын

big thx.works mega for me.

@bradmillsaps6413 3 жыл бұрын

@Chesapeake Motorwerks What latency setting are you using?

@chesapeakemotorwerks 3 жыл бұрын

Should be 1 ms. In the video it was actually set to 16 ms (the default) and it worked. To elaborate a bit more, I was having issues with it connecting inside my VM while recording with OBS (it works fine when not recording) so I switched to the base OS for the demo. It is common for virtual machines to have timing issues so if you are having problems inside a VM, try switching to actual bare metal hardware.

@chuyontop-gp2te 7 ай бұрын

how do you know what com my dme is???

@chesapeakemotorwerks 6 ай бұрын

The com port is set by your computer and will vary. If you check device manager, you should see a new device show up under "ports" when you plug your cable in and that will show the com port.