MPPS

**deffc0n** · 27th April, 2011, 09:56 PM

What is better for flashing ecu galleto or mpps ?

BR

**mark.sch** · 28th April, 2011, 10:57 AM

Started to work with the Silabs C2 developer kit for the C8051F340, well, due to MCU protection, reading any existing MPPS like 3.0.2.27 (or any other MPPS Flash) is disabled. Rewriting the whole Flash works fine.

In my eyes, one approach is to optain a valid bin from existing clones to patch and rewrite with changed serial; the other is to concentrate on the ecucrypt protected MPPS EXEs and patch several device/serial checkings.

Will continue to have a closer look on both path, any existing bin for the MPPS will be helpfull to test flashing and modifications. The bootloader parts are running fine so far ...

**bazare** · 28th April, 2011, 11:25 AM

All clones are built by flashing into the MCU an old flash of mpps v1.0.0.x, and then upgraded to v3.0.2.37. When you upgrade to v3 you need the unique ID KEY for that serial number. After you upgrade to v3 the dump inside the MCU is changed and you can't read anymore. serial ending in 36 is blocked after 3.0.2.37 and serial ending 34 is blocked after 3.0.3.38. The only way to do it is to be able to read dump after upgrade and study it.

**mark.sch** · 28th April, 2011, 12:58 PM

According to C8051F340 docu (page 114), the flash reading can be disabled by setting some bits at address 0x8F - a protection mechanism included in the 8051 architecture.
When reading with FLASHit 9.0.2.1, only empty bins are returned due to this protection; so any existing bin might help to find a path for a working 5.01.10, maybe someone dumped the 8051 ram already to figure out the flash content (bin)

**rsibiza** · 28th April, 2011, 09:02 PM

Originally Posted by mark.sch

According to C8051F340 docu (page 114), the flash reading can be disabled by setting some bits at address 0x8F - a protection mechanism included in the 8051 architecture.
When reading with FLASHit 9.0.2.1, only empty bins are returned due to this protection; so any existing bin might help to find a path for a working 5.01.10, maybe someone dumped the 8051 ram already to figure out the flash content (bin)

You might disable this protection,but by updating fw,this will reset the security bits,and u cant read again..

**korek515** · 28th April, 2011, 09:25 PM

I did the 4019 versions of the file from this forum you need only enter the serial in the right place

**yellowstilo** · 29th April, 2011, 09:54 AM

Originally Posted by korek515

I did the 4019 versions of the file from this forum you need only enter the serial in the right place

Please tell us how to do this - a lot of DK members will appreciate it !

**rsibiza** · 29th April, 2011, 01:11 PM

Originally Posted by yellowstilo

Please tell us how to do this - a lot of DK members will appreciate it !

I think he wot tell for free,is advertising his version of mpps dump.

Poeple up here,dont write 5 times i have a way to! They just post how to,thats the way for an forum,but allso right is,that since some time it s in fact no more allowed to post dumps,and this can result in banned user.

**stevan** · 30th April, 2011, 08:12 AM

UPDATE ON 5.0...VER

No Links to selling sites ....

**tanasio** · 30th April, 2011, 08:27 AM

Originally Posted by stevan

UPDATE ON 5.0...VER

Hi you think is true?

**Daniulis** · 30th April, 2011, 08:32 AM

And how does MPPS (china or original) works on Siemens PPD1 VAG ? Is it realy possible to read and write content of flash memory. I have removed a PDF, but only with BDM100, so MPPS would more handy to do it by OBD2