preferably a one that doesn't require to lift MCU legs and can connect to mcu by connect points on PCB ?
There are lots of Eeprom programmer can read Motorola
her are few:
UPA USB
VVDI Prog
Xprog
SMOK
CPT
and many more.
Car list + Reviews:
- UPA USB read & write 9S12, 908 etc Motorola MCU.
Motorola HC08*: MC68HC08AS20, MC68HC08AS32, MC68HC08AS60, MC68HC08AZ32, MC68HC(9)08AZ32A, MC68HC908AZ60, MC68HC908AZ60A
MC9S12HY64/HA32
Motorola HCS12*: MC9S12D64, MC9S12A128, MC9S12DG128, MC9S12DG256, MC9S12H128, MC9S12H256, MC9S12HZ64, MC9S12HZ128, MC9S12HZ256
Freescale (Motorola) HCS12X*: MC9S12XD64, MC9S12XD128, MC9S12XDG128, MC9S12XDP384, MC9S12XDP512, MC9S12XHZ256, MC9S12XHZ512
2) Reviews:
- MC9S12DG128 - 3L40K reading with Xprog
- How to read 68HC05b16 with UPA.
- VVDI Prog reads & writes 9S12, 908 etc. Motorola MCU:
reading MC9S12 series Chips, VVDI Pro is more stable than XP Prog.
attacking MC9S12 series Chips, VVDIProg is faster.
MCU
| Manufactures | Types | Support | Remark |
| MOTOROLA | MC9S12XEP | R | Can automatically determine D-FLASH/EEE space |
| MC9S12XA | R | ||
| MC9S12XB | R | ||
| MC9S12XD | R | ||
| MC9S12XDT | R | ||
| MC9S12XDP | R | ||
| MC9S12XDQ | R | ||
| MC9S12DG | R | ||
| MC9S12DT | R | ||
| MC9S12P | R | ||
| MC9S12H | R | ||
| MC9S12HY | ￡ | ||
| MC9S12HA | ￡ | ||
| MC9S12HZ | ￡ | ||
| MC9S12XHZ | ￡ | ||
| MC9S12B | ￡ | ||
| MC9S12GC | ￡ | ||
| MC9S12XS | ￡ | ||
| MC9S12K | ￡ | ||
| MC9S12Q | ￡ | ||
| MC9S12C | ￡ | ||
| MC9S12P | ￡ | ||
| MC9HC(9)08 | ￡ | ||
| ATMEL | ATTINY | ￡ | |
| ATMEGEA | ￡ | ||
| NEC | uPD70F | ￡ | |
| ST | TMS370 | ￡ |
2) Review...
Question: Read car BMW 3 with Xhorse VVDI eeprom came up once read in Tango CAS 3 + encrypted can this be done if I have Isn of car let me know please asp
Anser: VVDI prog yes with wires…Eeprom
- SMOK reads & writes 9S12,908 Motorola MCU:
- XProg reads & writes 9S12, 908 etc. Motorola MCU:
AUTH-0004 Motorola HC12, 9S12 family authorization (allows to read/write EEPROM and flash memory)
AUTH-0018 Motorola HC12, HC912, MC9S12, MC9S12X bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0024-1 MC9S12Cxx
AUTH-0024-2 MC9S12XE
AUTH-0024-3 9S12XE SECURITY
AUTH-0024-4 MC9S12HA/HY/P
AUTH-0027-1 HC(S)908 update Authorized 2016/3/13
AUTH-0027-2 HC(S)908 sercurity Authorized 2016/3/13
2)Reviews on Xprog V5.8 Reads MCU 9S12 XEQ 384 on Rang Rover 2015-2016
Read MCU 9S12 XEQ 384 on Rang Rover 2015-2016
Save P-FLASH and D-FLASH unlock KVM secured
Now, I'll show you the location of a KVM module
And dismantle the module with secured MCU 9S12 XEQ
Read on bench using Xprog HQ clone or original
Then save P-FLASH and D-FLASH unlock KVM secured
Here we go.
Module location inside Rang Rover 2015-2016
Xprog box HQ clone.
The KVM board
Secured MCU 9S12 XEQ
Pin 42 and 46
Lift 1 pins shown in the image.
Maximum wires length 12cm
Secured MCU 9S12 XEQ 384
Run Xprog software v5.8
MCU/MPU, Freescale NXP 9S12XE, MC9S12XEQ384 D-FLASH-Secured
Tip & Guide: How to get Xprog to work with secured MCU:
Reset MCU security
Run->change security state->reset MCU security
Wait 10...15 seconds if not success, cancel process
Check connection
Start from a
Remember MCU security byte value
Read, write...commands can be executed many times
Set MCU security
Run->change security sate->set MCU security
Read
Reset MCU security
It will take 10 to 12 seconds to unlock MCU
IP NOT STOP and repeat
Read
Save data
MCU/MPU, Freescale NXP 9S12XE, MC9S12XEQ384 P-FLASH-Secured
Read
Save data
Job is done.
That's all.
Thanks.
www.obdexpress.co.uk
http://blog.obdexpress.co.uk/2019/05/27/good-programmers-for-9s12-908-etc-motorola-mcu/
