Sunday 26 May 2019

Which tool good for 9S12, 908 etc motorola MCU?

Which are good programmers for 9S12, 908 etc motorola MCU?
preferably a one that doesn't require to lift MCU legs and can connect to mcu by connect points on PCB ?

There are lots of Eeprom programmer can read Motorola
her are few:
UPA USB
VVDI Prog
Xprog
SMOK
CPT
and many more.

Car list + Reviews:
  1. UPA USB read & write 9S12, 908 etc Motorola MCU.
1) Car list:
Motorola HC08*: MC68HC08AS20, MC68HC08AS32, MC68HC08AS60, MC68HC08AZ32, MC68HC(9)08AZ32A, MC68HC908AZ60, MC68HC908AZ60A

MC9S12HY64/HA32

Motorola HCS12*: MC9S12D64, MC9S12A128, MC9S12DG128, MC9S12DG256, MC9S12H128, MC9S12H256, MC9S12HZ64, MC9S12HZ128, MC9S12HZ256

Freescale (Motorola) HCS12X*: MC9S12XD64, MC9S12XD128, MC9S12XDG128, MC9S12XDP384, MC9S12XDP512, MC9S12XHZ256, MC9S12XHZ512

2) Reviews:
  1. MC9S12DG128 - 3L40K reading with Xprog
https://www.digital-kaos.co.uk/forums/showthread.php/542947-MC9S12DG128-3L40K-problem-with-reading-UPA-Carprog-and-Xprog

  1. How to read 68HC05b16 with UPA.
read-68hc05b16-with-upa-01 read-68hc05b16-with-upa-02 read-68hc05b16-with-upa-03 read-68hc05b16-with-upa-04

  1. VVDI Prog reads & writes 9S12, 908 etc. Motorola MCU:
1). Support list:
reading MC9S12 series Chips, VVDI Pro is more stable than XP Prog.
attacking MC9S12 series Chips, VVDIProg is faster.

MCU
ManufacturesTypesSupportRemark
MOTOROLAMC9S12XEPRCan automatically determine D-FLASH/EEE space
MC9S12XAR 
MC9S12XBR 
MC9S12XDR 
MC9S12XDTR 
MC9S12XDPR 
MC9S12XDQR 
MC9S12DGR 
MC9S12DTR 
MC9S12PR 
MC9S12HR 
MC9S12HY 
MC9S12HA 
MC9S12HZ 
MC9S12XHZ 
MC9S12B 
MC9S12GC 
MC9S12XS 
MC9S12K 
MC9S12Q 
MC9S12C 
MC9S12P 
MC9HC(9)08 
ATMELATTINY 
ATMEGEA 
NECuPD70F 
STTMS370 
Note: R means the type is supported, £ means the type will be supported soon in the future.

2) Review...
Question: Read car BMW 3 with Xhorse VVDI eeprom came up once read in Tango CAS 3 + encrypted can this be done if I have Isn of car let me know please asp

Anser: VVDI prog yes with wires…Eeprom

  1. SMOK reads & writes 9S12,908 Motorola MCU:
google and search http://smok.com.pl for official info.

  1. XProg reads & writes 9S12, 908 etc. Motorola MCU:
1) XPROG-M V5.84 Authorizations:
AUTH-0004 Motorola HC12, 9S12 family authorization (allows to read/write EEPROM and flash memory)
AUTH-0018 Motorola HC12, HC912, MC9S12, MC9S12X bypass security authorization (allows to read/write secured EEPROM and flash memory)
AUTH-0024-1 MC9S12Cxx
AUTH-0024-2 MC9S12XE
AUTH-0024-3 9S12XE SECURITY
AUTH-0024-4 MC9S12HA/HY/P
AUTH-0027-1 HC(S)908 update Authorized 2016/3/13
AUTH-0027-2 HC(S)908 sercurity Authorized 2016/3/13
xprog-908jpg-05

2)Reviews on Xprog V5.8 Reads MCU 9S12 XEQ 384 on Rang Rover 2015-2016
Read MCU 9S12 XEQ 384 on Rang Rover 2015-2016
Save P-FLASH and D-FLASH unlock KVM secured

Now, I'll show you the location of a KVM module
And dismantle the module with secured MCU 9S12 XEQ
Read on bench using Xprog HQ clone or original
Then save P-FLASH and D-FLASH unlock KVM secured

Here we go.

Module location inside Rang Rover 2015-2016
xprog-land-rover-kvm-unlock-2

Xprog box HQ clone.
xprog-land-rover-kvm-unlock-3

The KVM board
xprog-land-rover-kvm-unlock-4
Secured MCU 9S12 XEQ
xprog-land-rover-kvm-unlock-5 xprog-land-rover-kvm-unlock-6 xprog-land-rover-kvm-unlock-7 xprog-land-rover-kvm-unlock-8

Pin 42 and 46
Lift 1 pins shown in the image.
xprog-land-rover-kvm-unlock-9 xprog-land-rover-kvm-unlock-10 xprog-land-rover-kvm-unlock-11 xprog-land-rover-kvm-unlock-12

Maximum wires length 12cm
xprog-land-rover-kvm-unlock-13

Secured MCU 9S12 XEQ 384
xprog-land-rover-kvm-unlock-14

Run Xprog software v5.8
xprog-land-rover-kvm-unlock-15

MCU/MPU, Freescale NXP 9S12XE, MC9S12XEQ384 D-FLASH-Secured
xprog-land-rover-kvm-unlock-16
Tip & Guide: How to get Xprog to work with secured MCU:
Reset MCU security
Run->change security state->reset MCU security
Wait 10...15 seconds if not success, cancel process
Check connection
Start from a
Remember MCU security byte value
Read, write...commands can be executed many times
Set MCU security
Run->change security sate->set MCU security
Read
xprog-land-rover-kvm-unlock-17 xprog-land-rover-kvm-unlock-18

Reset MCU security
xprog-land-rover-kvm-unlock-19

It will take 10 to 12 seconds to unlock MCU
IP NOT STOP and repeat
xprog-land-rover-kvm-unlock-20 xprog-land-rover-kvm-unlock-21

Read
xprog-land-rover-kvm-unlock-22 xprog-land-rover-kvm-unlock-23 xprog-land-rover-kvm-unlock-24 xprog-land-rover-kvm-unlock-25 xprog-land-rover-kvm-unlock-26

Save data
xprog-land-rover-kvm-unlock-27

MCU/MPU, Freescale NXP 9S12XE, MC9S12XEQ384 P-FLASH-Secured
xprog-land-rover-kvm-unlock-28

Read
xprog-land-rover-kvm-unlock-29 xprog-land-rover-kvm-unlock-30 xprog-land-rover-kvm-unlock-31 xprog-land-rover-kvm-unlock-32
Save data
xprog-land-rover-kvm-unlock-33

Job is done.


That's all.
Thanks.

www.obdexpress.co.uk

http://blog.obdexpress.co.uk/2019/05/27/good-programmers-for-9s12-908-etc-motorola-mcu/

Friday 24 May 2019

2019 Best Hot and cheap Remote Key Tester:CK360 Easy Check

CK360 Easy Check: A necessary Remote Key Tester for Locksmith
👍1.Remote control -frequency detection:
Frequency: 315MHZ, 433MHZ, 868MHZ
Distance: 0.1~ 1m
Cover ASK and FSK models
👍2.Key anti-theft chip detection:
46/4d /48/ 47/ 49/ 4A/ MQB A/ MQB B/ 8C/ 64/ 4C/ 13/ 12/ 11 and other common anti-theft chips
👍3.Mercedes infrared key detection:
Infrared key active detection
No need to press the button (except FBS4 system)
👍4.Intelligent signal detection:
Keyless entry, keyless start and other signal data flow
👍5.Remote control button battery detection:
For the ordinary remote control
WhatsApp: +86-18750906257





Saturday 18 May 2019

Renault immobilizer signal replacing solution: Julie Emulator

Post is on how to use Julie Emulator V96 to perform IMMO programs for European Brands Renault car models.

Damaged immobilizer or ECU, lost keys, engine swap - you can solve all these cases and many more just by using Julie Emulator. Julie replaces original immobilizer signal and as long as it’s inside the ECU, the system is taken care of.

Bosch
EDC16

Continental
EMS3110

Delphi
DCM1.2
DCM 3.4
DDCR

Sagem
S2000
S3000

Siemens
EMS3132
EMS3134
SID301
SID304
SID305
SIM32
Sirius 32
Sirius 34

Siemens /Continental
SID310

Valeo
V40
V42
Renault immobilizer signal replacing solution: Julie Emulator Renault immobilizer signal replacing solution: Julie Emulator Renault immobilizer signal replacing solution: Julie Emulator
Instruction manual

  1. Renault with CAN - ver 2
  • Continental SID310
  • Continental SID307
  • Continental SID305
  • Siemens SID304
  • Siemens SID301
  • Valeo V42
  • Valeo V40
  • EDC16
  • EDC16 with separate flash
  • Siemens SIM32
  • Delphi DCM1.2
  • Sagem S3000
  • Delphi DCM3.4
  • EMS3110

User manual:
https://mega.nz/#!VUhlWAzC!kBidQMUFLGwZQikWT-9dwoW3CzPGR8Oc2BXf4tprBpw

  1. Renault with CAN - ver 1
  • Siemens SIM32
  • Sagem S2000
  • Sirius 32 / Sirius 34 with CAN
  • Delphi DDCR with CAN – 95080 memory
  • 3-socket Bosch EDC15 with CAN – 5P08C3
  • EMS 3132/ EMS 3134 with CAN
User manual:
https://mega.nz/#!lJ5TGayL!YO6y7iOTsLkjBHeHA2UfNqpH22aDSVrzFI8vfcySxN4

  1. Renault without CAN and Renault without CAN - old ECUs.
  • Sirius 32 / Sirius 34 without CAN
  • EMS 3132 / EMS 3134 without CAN
  • 1.9 2.2 and 2.5 dCi without CAN
  • Delphi DDCR
  • 1.9 dTi 1 plug
  • 1.9 dTi 2 plugs
  • 1.9 diesel DCU3
  • 2.8 TD
  • 1 plug with 24C02 memory
  • Volvo S40 and V40 – 1.9 TD Bosch ECU
User manual:
https://mega.nz/#!wZxlCQaQ!w58qeeVR0uo1eoLmuhbrwnAz2Yyzsx36qDFObQgbP_c

  1. TMS374
Renault ECU with TMS374 processor
  • Siemens Fenix 5, Sagem Safir 1, Sagem Safir 2
User manual:
https://mega.nz/#!IAwhnQKQ!YRlAkU4o9aXHIoUVrPH_ykxzrEJ8NQex4yV5vHaG6LM

Julie Emulator V96: http://www.obdexpress.co.uk/wholesale/v96-julie-car-emulator.html

Source:http://blog.obdexpress.co.uk/2019/05/18/renault-immobilizer-signal-replacing-solution/

Wednesday 15 May 2019

How to read the gearbox data of DQ250 DQ200 VL381 VL300 DQ500 DL501?


DQ250 DQ200 VL381 VL300 DQ500 DL501 data read solution: KTMflash + special adapters.
First comes with the connection among KTMflash, the adapters, the PC and the vehicle.
And the specific adapter's detailed images.

gearbox-data-reading-adapter-for-ktmflash-01 gearbox-data-reading-adapter-for-ktmflash-02 gearbox-data-reading-adapter-for-ktmflash-03
KTMflash can readDQ250E successfully (Images + Videos):
gearbox-data-reading-adapter-for-ktmflash-04 gearbox-data-reading-adapter-for-ktmflash-05
KTMflash ECU read VW DSG DQ250 transmission data part 1:


KTMFlash ECU Programmer read V-AG DQ250 DSG Transmission part 2:



FYI, I will test more and share the corresponding test reports here, hope you like them.

Thanks.

The Gearbox Adapter full kit for reading the data of DQ250 DQ200 VL381 VL300 DQ500 DL501:
http://www.obdexpress.co.uk/wholesale/vw-audi-gearbox-adapter-dq250-dq200.html


http://blog.obdexpress.co.uk/2019/05/15/how-to-read-the-gearbox-data-of-dq250/

LAUNCH-X431 IMMO Elite Adds BMW CAS3 Key via EEPROM

 This is a guide on how to use LAUNCH X431 IMMO ELITE to add a BMW CAS3 key via EEPROM. Before that, you'll need to upgrade software v...